« back to all changes in this revision
Viewing changes to serverguide/po/gl.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/gl.po
1
# Galician translation for ubuntu-docs
2
# Copyright (c) 2008 Rosetta Contributors and Canonical Ltd 2008
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2008.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2010-03-07 15:33+0000\n"
12
"Last-Translator: Francisco Diéguez <Unknown>\n"
13
"Language-Team: Galician <gl@li.org>\n"
14
"MIME-Version: 1.0\n"
15
"Content-Type: text/plain; charset=UTF-8\n"
16
"Content-Transfer-Encoding: 8bit\n"
17
"X-Launchpad-Export-Date: 2010-04-17 14:50+0000\n"
18
"X-Generator: Launchpad (build Unknown)\n"
19
20
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
21
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
22
msgstr "ubuntu-doc@lists.ubuntu.com (Proxecto de Documentación de Ubuntu)"
23
24
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
25
msgid "Ubuntu Server Guide"
26
msgstr "Guía do Servidor Ubuntu"
27
28
#: serverguide/C/serverguide-C.omf:9(date)
29
msgid "2007-09-30"
30
msgstr "30-09-2007"
31
32
#: serverguide/C/windows-networking.xml:13(title)
33
msgid "Windows Networking"
34
msgstr "Redes con Windows"
35
36
#: serverguide/C/windows-networking.xml:15(para)
37
msgid ""
38
"Computer networks are often comprised of diverse systems, and while "
39
"operating a network made up entirely of Ubuntu desktop and server computers "
40
"would certainly be fun, some network environments must consist of both "
41
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
42
"class=\"registered\">Windows</trademark> systems working together in "
43
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
44
"principles and tools used in configuring your Ubuntu Server for sharing "
45
"network resources with Windows computers."
46
msgstr ""
47
"As redes informáticas normalmente consisten en sistemas diversos e, ainda "
48
"que facer funcionar unha rede consistente exclusivamente en computadores de "
49
"escritorio e servidor Ubuntu sería, sen dúbida, divertido, algúns contornos "
50
"de rede han de consistir en sistemas tanto Ubuntu como <trademark "
51
"class=\"registered\">Microsoft</trademark><trademark "
52
"class=\"registered\">Windows</trademark> a traballar xuntos en harmonía. "
53
"Esta sección da Guía do Servidor de <phrase>Ubuntu</phrase> introduce os "
54
"principios e as ferramentas empregados na configuración do Servidor Ubuntu "
55
"para compartir os recursos da rede cos computadores con Windows."
56
57
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
58
msgid "Introduction"
59
msgstr "Introdución"
60
61
#: serverguide/C/windows-networking.xml:27(para)
62
msgid ""
63
"Successfully networking your Ubuntu system with Windows clients involves "
64
"providing and integrating with services common to Windows environments. Such "
65
"services assist the sharing of data and information about the computers and "
66
"users involved in the network, and may be classified under three major "
67
"categories of functionality:"
68
msgstr ""
69
"O traballo en rede co seu sistema Ubuntu xunto con clientes Windows implica "
70
"a privisión e integración dos servizos comúns a os contornos Windows. Estes "
71
"servizos axudan na compartición de datos e información sobre os equipos e "
72
"usuarios implicados na rede, e poden clasificarse en tres grandes categorías "
73
"de funcionalidade:"
74
75
#: serverguide/C/windows-networking.xml:35(para)
76
msgid ""
77
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
78
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
79
"folders, volumes, and the sharing of printers throughout the network."
80
msgstr ""
81
"<emphasis role=\"bold\">Servizos de Compartición de Ficheiros e "
82
"Impresoras</emphasis>. Emprégase o protocolo Server Message Block (SMB) "
83
"para facilitar a compartición de arquivos, cartafoles, volumes, e impresoras "
84
"compartidas a través da rede."
85
86
#: serverguide/C/windows-networking.xml:41(para)
87
msgid ""
88
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
89
"information about the computers and users of the network with such "
90
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
91
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
92
msgstr ""
93
"<emphasis role=\"bold\">Servizos de Directorio</emphasis>. Comparte "
94
"información esencial sobre os ordenadores e usuarios da rede con tecnoloxías "
95
"como o Lightweight Directory Access Protocol (LDAP) e Microsoft <trademark "
96
"class=\"registered\">Active Directory</trademark>."
97
98
#: serverguide/C/windows-networking.xml:48(para)
99
msgid ""
100
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
101
"the identity of a computer or user of the network and determining the "
102
"information the computer or user is authorized to access using such "
103
"principles and technologies as file permissions, group policies, and the "
104
"Kerberos authentication service."
105
msgstr ""
106
"<emphasis role=\"bold\">Autenticación e acceso</emphasis>. Estabelecen a "
107
"identidade dun equipo ou usuario da rede e determinan a información á que o "
108
"equipo ou o usuario está autorizado a acceder usando principios e "
109
"tecnoloxías como permisos de ficheiros, políticas de grupos e o servizo de "
110
"autentificación Kerberos."
111
112
#: serverguide/C/windows-networking.xml:56(para)
113
msgid ""
114
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
115
"clients and share network resources among them. One of the principal pieces "
116
"of software your Ubuntu system includes for Windows networking is the Samba "
117
"suite of SMB server applications and tools."
118
msgstr ""
119
"Afortunadamente, o seu sistema Ubuntu pode fornecerlle todas as facilidades "
120
"que dos clientes Windows e compartir recursos en rede con eles. Unha das "
121
"principais pezas de software do seu sistema Ubuntu incluidas para traballar "
122
"en rede con Windows é a suite Samba do servidor de aplicativos e ferramentas "
123
"SMB."
124
125
#: serverguide/C/windows-networking.xml:62(para)
126
msgid ""
127
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
128
"of the common Samba use cases, and how to install and configure the "
129
"necessary packages. Additional detailed documentation and information on "
130
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
131
"website</ulink>."
132
msgstr ""
133
"Esta sección da Guía do Servidor de <phrase>Ubuntu</phrase> presenta algúns "
134
"dos casos frecuentes nos que se emprega Samba e como instalar e configurar "
135
"os paquetes necesarios. Pódese atopar documentación e información detallada "
136
"sobre o Samba no <ulink url=\"http://www.samba.org\">sitio web de "
137
"Samba</ulink>."
138
139
#: serverguide/C/windows-networking.xml:70(title)
140
msgid "Samba File Server"
141
msgstr "Servidor de ficheiros Samba"
142
143
#: serverguide/C/windows-networking.xml:72(para)
144
msgid ""
145
"One of the most common ways to network Ubuntu and Windows computers is to "
146
"configure Samba as a File Server. This section covers setting up a "
147
"<application>Samba</application> server to share files with Windows clients."
148
msgstr ""
149
"Unha das formas máis comúns de conectar en rede ordenadores Ubuntu e Windows "
150
"é configurar un servidor Samba como servidor de ficheiros. Esta sección "
151
"cubre a configuración de un servidor <application>Samba</application> para "
152
"compartir ficheiros con clientes Windows."
153
154
#: serverguide/C/windows-networking.xml:77(para)
155
msgid ""
156
"The server will be configured to share files with any client on the network "
157
"without prompting for a password. If your environment requires stricter "
158
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
159
msgstr ""
160
"O servidor configurarase para compartir ficheiros con calqueira cliente da "
161
"rede sen solicitar ningún contrasinal. Se o seu contorno require controis de "
162
"acceso máis estritos, consulte <xref linkend=\"samba-fileprint-security\"/>"
163
164
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
165
msgid "Installation"
166
msgstr "Instalación"
167
168
#: serverguide/C/windows-networking.xml:85(para)
169
msgid ""
170
"The first step is to install the <application>samba</application> package. "
171
"From a terminal prompt enter:"
172
msgstr ""
173
"O primeiro paso é instalar o paquete <application>samba</application>. "
174
"Escriba nun terminal:"
175
176
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
177
msgid "sudo apt-get install samba"
178
msgstr "sudo apt-get install samba"
179
180
#: serverguide/C/windows-networking.xml:93(para)
181
msgid ""
182
"That's all there is to it; you are now ready to configure Samba to share "
183
"files."
184
msgstr ""
185
"E iso é todo: xa se pode configurar o Samba para compartir ficheiros."
186
187
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
188
msgid "Configuration"
189
msgstr "Configuración"
190
191
#: serverguide/C/windows-networking.xml:101(para)
192
msgid ""
193
"The main Samba configuration file is located in "
194
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
195
"a significant amount of comments in order to document various configuration "
196
"directives."
197
msgstr ""
198
"O ficheiro principal de configuración do Samba está en "
199
"<filename>/etc/samba/smb.conf</filename>. O ficheiro de configuración por "
200
"omisión ten moitos comentarios para documentar diversas directivas de "
201
"configuración."
202
203
#: serverguide/C/windows-networking.xml:106(para)
204
msgid ""
205
"Not all the available options are included in the default configuration "
206
"file. See the <filename>smb.conf</filename><application>man</application> "
207
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
208
"Collection/\">Samba HOWTO Collection</ulink> for more details."
209
msgstr ""
210
211
#: serverguide/C/windows-networking.xml:116(para)
212
msgid ""
213
"First, edit the following key/value pairs in the "
214
"<emphasis>[global]</emphasis> section of "
215
"<filename>/etc/samba/smb.conf</filename>:"
216
msgstr ""
217
"Primeiro, edite os seguintes pares de chave/valor na sección "
218
"<emphasis>[global]</emphasis> do ficheiro "
219
"<filename>/etc/samba/smb.conf</filename>:"
220
221
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
222
#, no-wrap
223
msgid ""
224
"\n"
225
" workgroup = EXAMPLE\n"
226
" ...\n"
227
" security = user\n"
228
msgstr ""
229
"\n"
230
" workgroup = EXEMPLO\n"
231
" ...\n"
232
" security = user\n"
233
234
#: serverguide/C/windows-networking.xml:127(para)
235
msgid ""
236
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
237
"section, and is commented by default. Also, change "
238
"<emphasis>EXAMPLE</emphasis> to better match your environment."
239
msgstr ""
240
241
#: serverguide/C/windows-networking.xml:135(para)
242
msgid ""
243
"Create a new section at the bottom of the file, or uncomment one of the "
244
"examples, for the directory to be shared:"
245
msgstr ""
246
"Cree unha nova sección ó final do ficheiro, ou descomete un dos exemplos "
247
"para compartir un cartafol:"
248
249
#: serverguide/C/windows-networking.xml:139(programlisting)
250
#, no-wrap
251
msgid ""
252
"\n"
253
"[share]\n"
254
" comment = Ubuntu File Server Share\n"
255
" path = /srv/samba/share\n"
256
" browsable = yes\n"
257
" guest ok = yes\n"
258
" read only = no\n"
259
" create mask = 0755\n"
260
msgstr ""
261
"\n"
262
"[share]\n"
263
" comment = Servidor de ficheiros compartidos de Ubuntu\n"
264
" path = /srv/samba/share\n"
265
" browsable = yes\n"
266
" guest ok = yes\n"
267
" read only = no\n"
268
" create mask = 0755\n"
269
270
#: serverguide/C/windows-networking.xml:151(para)
271
msgid ""
272
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
273
"fit your needs."
274
msgstr ""
275
"<emphasis>comment:</emphasis> unha descrición curta do elemento compartido "
276
"Axústeo para axeitalo ás súas necesidades."
277
278
#: serverguide/C/windows-networking.xml:156(para)
279
msgid "<emphasis>path:</emphasis> the path to the directory to share."
280
msgstr ""
281
"<emphasis>path:</emphasis> o camiño ao cartafol que se vai compartir."
282
283
#: serverguide/C/windows-networking.xml:159(para)
284
msgid ""
285
"This example uses <filename>/srv/samba/sharename</filename> because, "
286
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
287
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
288
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
289
"specific data should be served. Technically Samba shares can be placed "
290
"anywhere on the filesystem as long as the permissions are correct, but "
291
"adhering to standards is recommended."
292
msgstr ""
293
294
#: serverguide/C/windows-networking.xml:168(para)
295
msgid ""
296
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
297
"directory using <application>Windows Explorer</application>."
298
msgstr ""
299
"<emphasis>browsable:</emphasis> permítelle aos clientes Windows o cartafol "
300
"compartido usando o <application>Windows Explorer</application>."
301
302
#: serverguide/C/windows-networking.xml:174(para)
303
msgid ""
304
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
305
"without supplying a password."
306
msgstr ""
307
"<emphasis>guest ok:</emphasis> permítelle aos clientes conectarse sen "
308
"inserir unha contrasinal."
309
310
#: serverguide/C/windows-networking.xml:179(para)
311
msgid ""
312
"<emphasis>read only:</emphasis> determines if the share is read only or if "
313
"write privileges are granted. Write privileges are allowed only when the "
314
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
315
"is <emphasis>yes</emphasis>, then access to the share is read only."
316
msgstr ""
317
318
#: serverguide/C/windows-networking.xml:184(para)
319
msgid ""
320
"<emphasis>create mask:</emphasis> determines the permissions new files will "
321
"have when created."
322
msgstr ""
323
"<emphasis>crear máscara:</emphasis> determina os permisos que teñen os "
324
"ficheiros novos cando se crean."
325
326
#: serverguide/C/windows-networking.xml:193(para)
327
msgid ""
328
"Now that <application>Samba</application> is configured, the directory needs "
329
"to be created and the permissions changed. From a terminal enter:"
330
msgstr ""
331
"Unha vez configurado <application>Samba</application>, hai que crear o "
332
"directorio e mudar os permisos. Nun terminal, escriba:"
333
334
#: serverguide/C/windows-networking.xml:199(command)
335
msgid "sudo mkdir -p /srv/samba/share"
336
msgstr "sudo mkdir -p /srv/samba/share"
337
338
#: serverguide/C/windows-networking.xml:200(command)
339
msgid "sudo chown nobody.nogroup /srv/samba/share/"
340
msgstr "sudo chown nobody.nogroup /srv/samba/share/"
341
342
#: serverguide/C/windows-networking.xml:204(para)
343
msgid ""
344
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
345
"directory tree if it doesn't exist. Change the share name to fit your "
346
"environment."
347
msgstr ""
348
349
#: serverguide/C/windows-networking.xml:213(para)
350
msgid ""
351
"Finally, restart the <application>samba</application> services to enable the "
352
"new configuration:"
353
msgstr ""
354
"Por último, reinicie os servizos de <application>samba</application> para "
355
"activar a nova configuración:"
356
357
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
358
msgid "sudo /etc/init.d/samba restart"
359
msgstr "sudo /etc/init.d/samba restart"
360
361
#: serverguide/C/windows-networking.xml:225(para)
362
msgid ""
363
"Once again, the above configuration gives all access to any client on the "
364
"local network. For a more secure configuration see <xref linkend=\"samba-"
365
"fileprint-security\"/>."
366
msgstr ""
367
"De novo, a configuración anterior permítelle todos os accesos a calquera "
368
"cliente da rede local. Para unha configuración máis segura vexa <xref "
369
"linkend=\"samba-fileprint-security\"/>."
370
371
#: serverguide/C/windows-networking.xml:231(para)
372
msgid ""
373
"From a Windows client you should now be able to browse to the Ubuntu file "
374
"server and see the shared directory. To check that everything is working try "
375
"creating a directory from Windows."
376
msgstr ""
377
"Desde un cliente Windows debería poder navegar polo servidor de ficheiros de "
378
"Ubuntu e ver o cartafol compartido. Para comprobar que todo funciona ben, "
379
"probe a crear un cartafol desde Windows."
380
381
#: serverguide/C/windows-networking.xml:236(para)
382
msgid ""
383
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
384
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
385
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
386
"share actually exists and the permissions are correct."
387
msgstr ""
388
389
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
390
msgid "Resources"
391
msgstr "Recursos"
392
393
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
394
msgid ""
395
"For in depth Samba configurations see the <ulink "
396
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
397
"Collection</ulink>"
398
msgstr ""
399
"Para unha configuración máis detallada de Samba, consulte a <ulink "
400
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">colección de "
401
"HOWTOs de Samba</ulink>"
402
403
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
404
msgid ""
405
"The guide is also available in <ulink "
406
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
407
"format</ulink>."
408
msgstr ""
409
"A guía tamén está disponíbel en <ulink "
410
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">formato "
411
"impreso</ulink>."
412
413
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
414
msgid ""
415
"O'Reilly's <ulink "
416
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
417
"another good reference."
418
msgstr ""
419
"<ulink url=\"http://www.oreilly.com/catalog/9780596007690/\">Using "
420
"Samba</ulink>, publicado por O'Reilly, é outra referencia boa."
421
422
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
423
msgid ""
424
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
425
"</ulink> page."
426
msgstr ""
427
428
#: serverguide/C/windows-networking.xml:274(title)
429
msgid "Samba Print Server"
430
msgstr "Servidor de impresión do Samba"
431
432
#: serverguide/C/windows-networking.xml:276(para)
433
msgid ""
434
"Another common use of Samba is to configure it to share printers installed, "
435
"either locally or over the network, on an Ubuntu server. Similar to <xref "
436
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
437
"any client on the local network to use the installed printers without "
438
"prompting for a username and password."
439
msgstr ""
440
441
#: serverguide/C/windows-networking.xml:282(para)
442
msgid ""
443
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
444
"security\"/>."
445
msgstr ""
446
"Para unha conexión máis segura consulte <xref linkend=\"samba-fileprint-"
447
"security\"/>."
448
449
#: serverguide/C/windows-networking.xml:289(para)
450
msgid ""
451
"Before installing and configuring Samba it is best to already have a working "
452
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
453
"for details."
454
msgstr ""
455
"Antes de instalar e configurar Samba é mellor ter xa unha instalación "
456
"funcional de <application>CUPS</application>. Vexa <xref linkend=\"cups\"/> "
457
"para os detalles."
458
459
#: serverguide/C/windows-networking.xml:294(para)
460
msgid ""
461
"To install the <application>samba</application> package, from a terminal "
462
"enter:"
463
msgstr ""
464
"Para instalar o paquete <application>samba</application> escriba isto nun "
465
"terminal:"
466
467
#: serverguide/C/windows-networking.xml:305(para)
468
msgid ""
469
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
470
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
471
"network, and change <emphasis>security</emphasis> to <emphasis "
472
"role=\"italic\">share</emphasis>:"
473
msgstr ""
474
"Despois de instalar o samba, modifique "
475
"<filename>/etc/samba/smb.conf</filename>. Mude o atributo "
476
"<emphasis>workgroup</emphasis> para o que se axeite á súa rede e altere "
477
"<emphasis>security</emphasis> para <emphasis "
478
"role=\"italic\">share</emphasis>:"
479
480
#: serverguide/C/windows-networking.xml:317(para)
481
msgid ""
482
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
483
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
484
msgstr ""
485
"Na sección <emphasis>[printers]</emphasis> cambie a opción <emphasis>guest "
486
"ok</emphasis> a <emphasis role=\"italic\">yes</emphasis>:"
487
488
#: serverguide/C/windows-networking.xml:321(programlisting)
489
#, no-wrap
490
msgid ""
491
"\n"
492
" browsable = yes\n"
493
" guest ok = yes\n"
494
msgstr ""
495
"\n"
496
" browsable = yes\n"
497
" guest ok = yes\n"
498
499
#: serverguide/C/windows-networking.xml:326(para)
500
msgid "After editing <filename>smb.conf</filename> restart Samba:"
501
msgstr ""
502
503
#: serverguide/C/windows-networking.xml:334(para)
504
msgid ""
505
"The default Samba configuration will automatically share any printers "
506
"installed. Simply install the printer locally on your Windows clients."
507
msgstr ""
508
"A opción predefinida de Samba compartirá automaticamente calquera impresora "
509
"instalada. Simplemente, instale a impresora localmente nos seus"
510
511
#: serverguide/C/windows-networking.xml:363(para)
512
msgid ""
513
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
514
"more information on configuring CUPS."
515
msgstr ""
516
"Vexa tamén o <ulink url=\"http://www.cups.org/\">sitio web de CUPS</ulink> "
517
"para máis información sobre a configuración de CUPS."
518
519
#: serverguide/C/windows-networking.xml:377(title)
520
msgid "Securing a Samba File and Print Server"
521
msgstr "Asegurar un servidor de ficheiros ou de impresión con Samba"
522
523
#: serverguide/C/windows-networking.xml:380(title)
524
msgid "Samba Security Modes"
525
msgstr "Modos de seguranza do Samba"
526
527
#: serverguide/C/windows-networking.xml:382(para)
528
msgid ""
529
"There are two security levels available to the Common Internet Filesystem "
530
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
531
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
532
"allows more flexibility, providing four ways of implementing user-level "
533
"security and one way to implement share-level:"
534
msgstr ""
535
536
#: serverguide/C/windows-networking.xml:391(para)
537
msgid ""
538
"<emphasis>security = user:</emphasis> requires clients to supply a username "
539
"and password to connect to shares. Samba user accounts are separate from "
540
"system accounts, but the <application>libpam-smbpass</application> package "
541
"will sync system users and passwords with the Samba user database."
542
msgstr ""
543
544
#: serverguide/C/windows-networking.xml:398(para)
545
msgid ""
546
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
547
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
548
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
549
"linkend=\"samba-dc\"/> for further information."
550
msgstr ""
551
552
#: serverguide/C/windows-networking.xml:405(para)
553
msgid ""
554
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
555
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
556
"integration\"/> for details."
557
msgstr ""
558
559
#: serverguide/C/windows-networking.xml:411(para)
560
msgid ""
561
"<emphasis>security = server:</emphasis> this mode is left over from before "
562
"Samba could become a member server, and due to some security issues should "
563
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
564
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
565
"of the Samba guide for more details."
566
msgstr ""
567
568
#: serverguide/C/windows-networking.xml:419(para)
569
msgid ""
570
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
571
"without supplying a username and password."
572
msgstr ""
573
"<emphasis>security = share:</emphasis> permite que os clientes poidan "
574
"conectarse aos recursos compartidos sen a necesidade de fornecer un nome de "
575
"usuario e un contrasinal"
576
577
#: serverguide/C/windows-networking.xml:426(para)
578
msgid ""
579
"The security mode you choose will depend on your environment and what you "
580
"need the Samba server to accomplish."
581
msgstr ""
582
"O modo de seguranza que escolla dependerá do seu contorno e do que desexe "
583
"que realice o servidor de Samba."
584
585
#: serverguide/C/windows-networking.xml:432(title)
586
msgid "Security = User"
587
msgstr "Seguranza = Usuario"
588
589
#: serverguide/C/windows-networking.xml:434(para)
590
msgid ""
591
"This section will reconfigure the Samba file and print server, from <xref "
592
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
593
"require authentication."
594
msgstr ""
595
596
#: serverguide/C/windows-networking.xml:439(para)
597
msgid ""
598
"First, install the <application>libpam-smbpass</application> package which "
599
"will sync the system users to the Samba user database:"
600
msgstr ""
601
602
#: serverguide/C/windows-networking.xml:445(command)
603
msgid "sudo apt-get install libpam-smbpass"
604
msgstr "sudo apt-get install libpam-smbpass"
605
606
#: serverguide/C/windows-networking.xml:449(para)
607
msgid ""
608
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
609
"<application>libpam-smbpass</application> is already installed."
610
msgstr ""
611
612
#: serverguide/C/windows-networking.xml:455(para)
613
msgid ""
614
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
615
"<emphasis>[share]</emphasis> section change:"
616
msgstr ""
617
618
#: serverguide/C/windows-networking.xml:459(programlisting)
619
#, no-wrap
620
msgid ""
621
"\n"
622
" guest ok = no\n"
623
msgstr ""
624
625
#: serverguide/C/windows-networking.xml:463(para)
626
msgid "Finally, restart Samba for the new settings to take effect:"
627
msgstr ""
628
629
#: serverguide/C/windows-networking.xml:471(para)
630
msgid ""
631
"Now when connecting to the shared directories or printers you should be "
632
"prompted for a username and password."
633
msgstr ""
634
635
#: serverguide/C/windows-networking.xml:476(para)
636
msgid ""
637
"If you choose to map a network drive to the share you can check the "
638
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
639
"enter the username and password once, at least until the password changes."
640
msgstr ""
641
642
#: serverguide/C/windows-networking.xml:484(title)
643
msgid "Share Security"
644
msgstr ""
645
646
#: serverguide/C/windows-networking.xml:486(para)
647
msgid ""
648
"There are several options available to increase the security for each "
649
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
650
"this section will cover some common options."
651
msgstr ""
652
653
#: serverguide/C/windows-networking.xml:492(title)
654
msgid "Groups"
655
msgstr "Grupos"
656
657
#: serverguide/C/windows-networking.xml:494(para)
658
msgid ""
659
"Groups define a collection of computers or users which have a common level "
660
"of access to particular network resources and offer a level of granularity "
661
"in controlling access to such resources. For example, if a group <emphasis "
662
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
663
"role=\"italic\">freda</emphasis>, <emphasis "
664
"role=\"italic\">danika</emphasis>, and <emphasis "
665
"role=\"italic\">rob</emphasis> and a second group <emphasis "
666
"role=\"italic\">support</emphasis> is defined and consists of users "
667
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
668
"role=\"italic\">jeremy</emphasis>, and <emphasis "
669
"role=\"italic\">vincent</emphasis> then certain network resources configured "
670
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
671
"subsequently enable access by freda, danika, and rob, but not jeremy or "
672
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
673
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
674
"role=\"italic\">support</emphasis> groups, she will be able to access "
675
"resources configured for access by both groups, whereas all other users will "
676
"have only access to resources explicitly allowing the group they are part of."
677
msgstr ""
678
679
#: serverguide/C/windows-networking.xml:508(para)
680
msgid ""
681
"By default Samba looks for the local system groups defined in "
682
"<filename>/etc/group</filename> to determine which users belong to which "
683
"groups. For more information on adding and removing users from groups see "
684
"<xref linkend=\"adding-deleting-users\"/>."
685
msgstr ""
686
687
#: serverguide/C/windows-networking.xml:514(para)
688
msgid ""
689
"When defining groups in the Samba configuration file, "
690
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
691
"preface the group name with an \"@\" symbol. For example, if you wished to "
692
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
693
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
694
"do so by entering the group name as <emphasis "
695
"role=\"bold\">@sysadmin</emphasis>."
696
msgstr ""
697
698
#: serverguide/C/windows-networking.xml:523(title)
699
msgid "File Permissions"
700
msgstr "Permisos de Ficheiro"
701
702
#: serverguide/C/windows-networking.xml:525(para)
703
msgid ""
704
"File Permissions define the explicit rights a computer or user has to a "
705
"particular directory, file, or set of files. Such permissions may be defined "
706
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
707
"the explicit permissions of a defined file share."
708
msgstr ""
709
710
#: serverguide/C/windows-networking.xml:531(para)
711
msgid ""
712
"For example, if you have defined a Samba share called "
713
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
714
"only</emphasis> permissions to the group of users known as <emphasis "
715
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
716
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
717
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
718
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
719
"under the <emphasis>[share]</emphasis> entry:"
720
msgstr ""
721
722
#: serverguide/C/windows-networking.xml:540(programlisting)
723
#, no-wrap
724
msgid ""
725
"\n"
726
" read list = @qa\n"
727
" write list = @sysadmin, vincent\n"
728
msgstr ""
729
730
#: serverguide/C/windows-networking.xml:545(para)
731
msgid ""
732
"Another possible Samba permission is to declare "
733
"<emphasis>administrative</emphasis> permissions to a particular shared "
734
"resource. Users having administrative permissions may read, write, or modify "
735
"any information contained in the resource the user has been given explicit "
736
"administrative permissions to."
737
msgstr ""
738
739
#: serverguide/C/windows-networking.xml:551(para)
740
msgid ""
741
"For example, if you wanted to give the user <emphasis "
742
"role=\"italic\">melissa</emphasis> administrative permissions to the "
743
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
744
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
745
"under the <emphasis>[share]</emphasis> entry:"
746
msgstr ""
747
748
#: serverguide/C/windows-networking.xml:558(programlisting)
749
#, no-wrap
750
msgid ""
751
"\n"
752
" admin users = melissa\n"
753
msgstr ""
754
755
#: serverguide/C/windows-networking.xml:562(para)
756
msgid ""
757
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
758
"the changes to take effect:"
759
msgstr ""
760
761
#: serverguide/C/windows-networking.xml:571(para)
762
msgid ""
763
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
764
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
765
"<emphasis role=\"italic\">security = share</emphasis>"
766
msgstr ""
767
768
#: serverguide/C/windows-networking.xml:577(para)
769
msgid ""
770
"Now that Samba has been configured to limit which groups have access to the "
771
"shared directory, the filesystem permissions need to be updated."
772
msgstr ""
773
774
#: serverguide/C/windows-networking.xml:582(para)
775
msgid ""
776
"Traditional Linux file permissions do not map well to Windows NT Access "
777
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
778
"providing more fine grained control. For example, to enable ACLs on "
779
"<filename>/srv</filename> an EXT3 filesystem, edit "
780
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
781
msgstr ""
782
783
#: serverguide/C/windows-networking.xml:589(programlisting)
784
#, no-wrap
785
msgid ""
786
"\n"
787
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
788
"0 1\n"
789
msgstr ""
790
"\n"
791
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
792
"0 1\n"
793
794
#: serverguide/C/windows-networking.xml:593(para)
795
msgid "Then remount the partition:"
796
msgstr "A seguir volva a montar a partición:"
797
798
#: serverguide/C/windows-networking.xml:598(command)
799
msgid "sudo mount -v -o remount /srv"
800
msgstr "sudo mount -v -o remount /srv"
801
802
#: serverguide/C/windows-networking.xml:602(para)
803
msgid ""
804
"The above example assumes <filename>/srv</filename> on a separate partition. "
805
"If <filename>/srv</filename>, or wherever you have configured your share "
806
"path, is part of the <filename>/</filename> partition a reboot may be "
807
"required."
808
msgstr ""
809
810
#: serverguide/C/windows-networking.xml:609(para)
811
msgid ""
812
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
813
"group will be given read, write, and execute permissions to "
814
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
815
"will be given read and execute permissions, and the files will be owned by "
816
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
817
msgstr ""
818
819
#: serverguide/C/windows-networking.xml:617(command)
820
msgid "sudo chown -R melissa /srv/samba/share/"
821
msgstr ""
822
823
#: serverguide/C/windows-networking.xml:618(command)
824
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
825
msgstr "sudo chgrp -R sysadmin /srv/samba/share/"
826
827
#: serverguide/C/windows-networking.xml:619(command)
828
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
829
msgstr "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
830
831
#: serverguide/C/windows-networking.xml:623(para)
832
msgid ""
833
"The <application>setfacl</application> command above gives "
834
"<emphasis>execute</emphasis> permissions to all files in the "
835
"<filename>/srv/samba/share</filename> directory, which you may or may not "
836
"want."
837
msgstr ""
838
839
#: serverguide/C/windows-networking.xml:629(para)
840
msgid ""
841
"Now from a Windows client you should notice the new file permissions are "
842
"implemented. See the <application>acl</application> and "
843
"<application>setfacl</application> man pages for more information on POSIX "
844
"ACLs."
845
msgstr ""
846
847
#: serverguide/C/windows-networking.xml:637(title)
848
msgid "Samba AppArmor Profile"
849
msgstr ""
850
851
#: serverguide/C/windows-networking.xml:639(para)
852
msgid ""
853
"Ubuntu comes with the <application>AppArmor</application> security module, "
854
"which provides mandatory access controls. The default AppArmor profile for "
855
"Samba will need to be adapted to your configuration. For more details on "
856
"using AppArmor see <xref linkend=\"apparmor\"/>."
857
msgstr ""
858
859
#: serverguide/C/windows-networking.xml:645(para)
860
msgid ""
861
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
862
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
863
"of the <application>apparmor-profiles</application> packages. To install the "
864
"package, from a terminal prompt enter:"
865
msgstr ""
866
867
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
868
msgid "sudo apt-get install apparmor-profiles"
869
msgstr "sudo apt-get install apparmor-profiles"
870
871
#: serverguide/C/windows-networking.xml:656(para)
872
msgid "This package contains profiles for several other binaries."
873
msgstr "Este paquete contén os perfís doutros binarios."
874
875
#: serverguide/C/windows-networking.xml:661(para)
876
msgid ""
877
"By default the profiles for <application>smbd</application> and "
878
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
879
"allowing Samba to work without modifying the profile, and only logging "
880
"errors. To place the <application>smbd</application> profile into "
881
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
882
"profile will need to be modified to reflect any directories that are shared."
883
msgstr ""
884
885
#: serverguide/C/windows-networking.xml:668(para)
886
msgid ""
887
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
888
"for <emphasis>[share]</emphasis> from the file server example:"
889
msgstr ""
890
891
#: serverguide/C/windows-networking.xml:673(programlisting)
892
#, no-wrap
893
msgid ""
894
"\n"
895
" /srv/samba/share/ r,\n"
896
" /srv/samba/share/** rwkix,\n"
897
msgstr ""
898
899
#: serverguide/C/windows-networking.xml:678(para)
900
msgid ""
901
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
902
msgstr ""
903
904
#: serverguide/C/windows-networking.xml:683(command)
905
msgid "sudo aa-enforce /usr/sbin/smbd"
906
msgstr ""
907
908
#: serverguide/C/windows-networking.xml:684(command)
909
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
910
msgstr ""
911
912
#: serverguide/C/windows-networking.xml:687(para)
913
msgid ""
914
"You should now be able to read, write, and execute files in the shared "
915
"directory as normal, and the <application>smbd</application> binary will "
916
"have access to only the configured files and directories. Be sure to add "
917
"entries for each directory you configure Samba to share. Also, any errors "
918
"will be logged to <filename>/var/log/syslog</filename>."
919
msgstr ""
920
921
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
922
msgid ""
923
"O'Reilly's <ulink "
924
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
925
"also a good reference."
926
msgstr ""
927
928
#: serverguide/C/windows-networking.xml:718(para)
929
msgid ""
930
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
931
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
932
"security."
933
msgstr ""
934
935
#: serverguide/C/windows-networking.xml:724(para)
936
msgid ""
937
"For more information on Samba and ACLs see the <ulink "
938
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
939
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
940
msgstr ""
941
942
#: serverguide/C/windows-networking.xml:740(title)
943
msgid "Samba as a Domain Controller"
944
msgstr ""
945
946
#: serverguide/C/windows-networking.xml:742(para)
947
msgid ""
948
"Although it cannot act as an Active Directory Primary Domain Controller "
949
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
950
"domain controller. A major advantage of this configuration is the ability to "
951
"centralize user and machine credentials. Samba can also use multiple "
952
"backends to store the user information."
953
msgstr ""
954
955
#: serverguide/C/windows-networking.xml:749(title)
956
msgid "Primary Domain Controller"
957
msgstr ""
958
959
#: serverguide/C/windows-networking.xml:751(para)
960
msgid ""
961
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
962
"using the default smbpasswd backend."
963
msgstr ""
964
965
#: serverguide/C/windows-networking.xml:758(para)
966
msgid ""
967
"First, install Samba, and <application>libpam-smbpass</application> to sync "
968
"the user accounts, by entering the following in a terminal prompt:"
969
msgstr ""
970
971
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
972
msgid "sudo apt-get install samba libpam-smbpass"
973
msgstr ""
974
975
#: serverguide/C/windows-networking.xml:770(para)
976
msgid ""
977
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
978
"The <emphasis>security</emphasis> mode should be set to <emphasis "
979
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
980
"should relate to your organization:"
981
msgstr ""
982
983
#: serverguide/C/windows-networking.xml:785(para)
984
msgid ""
985
"In the commented <quote>Domains</quote> section add or uncomment the "
986
"following:"
987
msgstr ""
988
989
#: serverguide/C/windows-networking.xml:789(programlisting)
990
#, no-wrap
991
msgid ""
992
"\n"
993
" domain logons = yes\n"
994
" logon path = \\\\%N\\%U\\profile\n"
995
" logon drive = H:\n"
996
" logon home = \\\\%N\\%U\n"
997
" logon script = logon.cmd\n"
998
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
999
"/var/lib/samba -s /bin/false %u\n"
1000
msgstr ""
1001
1002
#: serverguide/C/windows-networking.xml:800(para)
1003
msgid ""
1004
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1005
"Samba to act as a domain controller."
1006
msgstr ""
1007
1008
#: serverguide/C/windows-networking.xml:805(para)
1009
msgid ""
1010
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1011
"their home directory. It is also possible to configure a "
1012
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1013
"directory."
1014
msgstr ""
1015
1016
#: serverguide/C/windows-networking.xml:811(para)
1017
msgid ""
1018
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1019
msgstr ""
1020
1021
#: serverguide/C/windows-networking.xml:816(para)
1022
msgid ""
1023
"<emphasis>logon home:</emphasis> specifies the home directory location."
1024
msgstr ""
1025
1026
#: serverguide/C/windows-networking.xml:821(para)
1027
msgid ""
1028
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1029
"once a user has logged in. The script needs to be placed in the "
1030
"<emphasis>[netlogon]</emphasis> share."
1031
msgstr ""
1032
1033
#: serverguide/C/windows-networking.xml:827(para)
1034
msgid ""
1035
"<emphasis>add machine script:</emphasis> a script that will automatically "
1036
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1037
"workstation to join the domain."
1038
msgstr ""
1039
1040
#: serverguide/C/windows-networking.xml:831(para)
1041
msgid ""
1042
"In this example the <emphasis>machines</emphasis> group will need to be "
1043
"created using the <application>addgroup</application> utility see <xref "
1044
"linkend=\"adding-deleting-users\"/> for details."
1045
msgstr ""
1046
1047
#: serverguide/C/windows-networking.xml:839(para)
1048
msgid ""
1049
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1050
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1051
"commented."
1052
msgstr ""
1053
1054
#: serverguide/C/windows-networking.xml:848(para)
1055
msgid ""
1056
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1057
"role=\"italic\">logon home</emphasis> to be mapped:"
1058
msgstr ""
1059
1060
#: serverguide/C/windows-networking.xml:853(programlisting)
1061
#, no-wrap
1062
msgid ""
1063
"\n"
1064
"[homes]\n"
1065
" comment = Home Directories\n"
1066
" browseable = no\n"
1067
" read only = no\n"
1068
" create mask = 0700\n"
1069
" directory mask = 0700\n"
1070
" valid users = %S\n"
1071
msgstr ""
1072
1073
#: serverguide/C/windows-networking.xml:866(para)
1074
msgid ""
1075
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1076
"share needs to be configured. To enable the share, uncomment:"
1077
msgstr ""
1078
1079
#: serverguide/C/windows-networking.xml:871(programlisting)
1080
#, no-wrap
1081
msgid ""
1082
"\n"
1083
"[netlogon]\n"
1084
" comment = Network Logon Service\n"
1085
" path = /srv/samba/netlogon\n"
1086
" guest ok = yes\n"
1087
" read only = yes\n"
1088
" share modes = no\n"
1089
msgstr ""
1090
1091
#: serverguide/C/windows-networking.xml:881(para)
1092
msgid ""
1093
"The original <emphasis>netlogon</emphasis> share path is "
1094
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1095
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1096
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1097
"location for site-specific data provided by the system."
1098
msgstr ""
1099
1100
#: serverguide/C/windows-networking.xml:892(para)
1101
msgid ""
1102
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1103
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1104
msgstr ""
1105
1106
#: serverguide/C/windows-networking.xml:898(command)
1107
msgid "sudo mkdir -p /srv/samba/netlogon"
1108
msgstr ""
1109
1110
#: serverguide/C/windows-networking.xml:899(command)
1111
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
1112
msgstr ""
1113
1114
#: serverguide/C/windows-networking.xml:902(para)
1115
msgid ""
1116
"You can enter any normal Windows logon script commands in "
1117
"<filename>logon.cmd</filename> to customize the client's environment."
1118
msgstr ""
1119
1120
#: serverguide/C/windows-networking.xml:910(para)
1121
msgid ""
1122
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1123
"workstation to the domain, a system group needs to be mapped to the Windows "
1124
"<emphasis>Domain Admins</emphasis> group. Using the "
1125
"<application>net</application> utility, from a terminal enter:"
1126
msgstr ""
1127
1128
#: serverguide/C/windows-networking.xml:917(command)
1129
msgid ""
1130
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1131
"type=d"
1132
msgstr ""
1133
1134
#: serverguide/C/windows-networking.xml:921(para)
1135
msgid ""
1136
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1137
"prefer. Also, the user used to join the domain needs to be a member of the "
1138
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1139
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1140
"allows <application>sudo</application> use."
1141
msgstr ""
1142
1143
#: serverguide/C/windows-networking.xml:932(para)
1144
msgid "Finally, restart Samba to enable the new domain controller:"
1145
msgstr ""
1146
1147
#: serverguide/C/windows-networking.xml:943(para)
1148
msgid ""
1149
"You should now be able to join Windows clients to the Domain in the same "
1150
"manner as joining them to an NT4 domain running on a Windows server."
1151
msgstr ""
1152
1153
#: serverguide/C/windows-networking.xml:953(title)
1154
msgid "Backup Domain Controller"
1155
msgstr ""
1156
1157
#: serverguide/C/windows-networking.xml:955(para)
1158
msgid ""
1159
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1160
"Backup Domain Controller (BDC) as well. This will allow clients to "
1161
"authenticate in case the PDC becomes unavailable."
1162
msgstr ""
1163
1164
#: serverguide/C/windows-networking.xml:960(para)
1165
msgid ""
1166
"When configuring Samba as a BDC you need a way to sync account information "
1167
"with the PDC. There are multiple ways of accomplishing this "
1168
"<application>scp</application>, <application>rsync</application>, or by "
1169
"using <application>LDAP</application> as the <emphasis>passdb "
1170
"backend</emphasis>."
1171
msgstr ""
1172
1173
#: serverguide/C/windows-networking.xml:966(para)
1174
msgid ""
1175
"Using LDAP is the most robust way to sync account information, because both "
1176
"domain controllers can use the same information in real time. However, "
1177
"setting up a LDAP server may be overly complicated for a small number of "
1178
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1179
msgstr ""
1180
1181
#: serverguide/C/windows-networking.xml:975(para)
1182
msgid ""
1183
"First, install <application>samba</application> and <application>libpam-"
1184
"smbpass</application>. From a terminal enter:"
1185
msgstr ""
1186
1187
#: serverguide/C/windows-networking.xml:986(para)
1188
msgid ""
1189
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1190
"following in the <emphasis>[global]</emphasis>:"
1191
msgstr ""
1192
1193
#: serverguide/C/windows-networking.xml:999(para)
1194
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1195
msgstr ""
1196
1197
#: serverguide/C/windows-networking.xml:1003(programlisting)
1198
#, no-wrap
1199
msgid ""
1200
"\n"
1201
" domain logons = yes\n"
1202
" domain master = no\n"
1203
msgstr ""
1204
1205
#: serverguide/C/windows-networking.xml:1011(para)
1206
msgid ""
1207
"Make sure a user has rights to read the files in "
1208
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1209
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1210
"files, enter:"
1211
msgstr ""
1212
1213
#: serverguide/C/windows-networking.xml:1017(command)
1214
msgid "sudo chgrp -R admin /var/lib/samba"
1215
msgstr ""
1216
1217
#: serverguide/C/windows-networking.xml:1023(para)
1218
msgid ""
1219
"Next, sync the user accounts, using <application>scp</application> to copy "
1220
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1221
msgstr ""
1222
1223
#: serverguide/C/windows-networking.xml:1029(command)
1224
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1225
msgstr ""
1226
1227
#: serverguide/C/windows-networking.xml:1033(para)
1228
msgid ""
1229
"Replace <emphasis>username</emphasis> with a valid username and "
1230
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1231
msgstr ""
1232
1233
#: serverguide/C/windows-networking.xml:1042(para)
1234
msgid "Finally, restart <application>samba</application>:"
1235
msgstr ""
1236
1237
#: serverguide/C/windows-networking.xml:1053(para)
1238
msgid ""
1239
"You can test that your Backup Domain controller is working by stopping the "
1240
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1241
"the domain."
1242
msgstr ""
1243
1244
#: serverguide/C/windows-networking.xml:1058(para)
1245
msgid ""
1246
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1247
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1248
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1249
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1250
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1251
msgstr ""
1252
1253
#: serverguide/C/windows-networking.xml:1088(para)
1254
msgid ""
1255
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1256
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1257
"up a Primary Domain Controller."
1258
msgstr ""
1259
1260
#: serverguide/C/windows-networking.xml:1094(para)
1261
msgid ""
1262
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1263
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1264
"explains setting up a Backup Domain Controller."
1265
msgstr ""
1266
1267
#: serverguide/C/windows-networking.xml:1109(title)
1268
msgid "Samba Active Directory Integration"
1269
msgstr ""
1270
1271
#: serverguide/C/windows-networking.xml:1112(title)
1272
msgid "Accessing a Samba Share"
1273
msgstr ""
1274
1275
#: serverguide/C/windows-networking.xml:1114(para)
1276
msgid ""
1277
"Another, use for Samba is to integrate into an existing Windows network. "
1278
"Once part of an Active Directory domain, Samba can provide file and print "
1279
"services to AD users."
1280
msgstr ""
1281
1282
#: serverguide/C/windows-networking.xml:1119(para)
1283
msgid ""
1284
"The simplest way to join an AD domain is to use <application>Likewise-"
1285
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1286
"open\"/>."
1287
msgstr ""
1288
1289
#: serverguide/C/windows-networking.xml:1124(para)
1290
msgid ""
1291
"Once part of the domain, enter the following command in the terminal prompt:"
1292
msgstr ""
1293
1294
#: serverguide/C/windows-networking.xml:1129(command)
1295
msgid "sudo apt-get install samba smbfs smbclient"
1296
msgstr ""
1297
1298
#: serverguide/C/windows-networking.xml:1132(para)
1299
msgid ""
1300
"Since the <application>likewise-open</application> and "
1301
"<application>samba</application> packages use separate "
1302
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1303
"<filename role=\"directory\">/var/lib/samba</filename>:"
1304
msgstr ""
1305
1306
#: serverguide/C/windows-networking.xml:1138(command)
1307
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1308
msgstr ""
1309
1310
#: serverguide/C/windows-networking.xml:1139(command)
1311
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1312
msgstr ""
1313
1314
#: serverguide/C/windows-networking.xml:1142(para)
1315
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1316
msgstr ""
1317
1318
#: serverguide/C/windows-networking.xml:1146(programlisting)
1319
#, no-wrap
1320
msgid ""
1321
"\n"
1322
" workgroup = EXAMPLE\n"
1323
" ...\n"
1324
" security = ads\n"
1325
" realm = EXAMPLE.COM\n"
1326
" ...\n"
1327
" idmap backend = lwopen\n"
1328
" idmap uid = 50-9999999999\n"
1329
" idmap gid = 50-9999999999\n"
1330
msgstr ""
1331
1332
#: serverguide/C/windows-networking.xml:1157(para)
1333
msgid ""
1334
"Restart <application>samba</application> for the new settings to take effect:"
1335
msgstr ""
1336
1337
#: serverguide/C/windows-networking.xml:1165(para)
1338
msgid ""
1339
"You should now be able to access any <application>Samba</application> shares "
1340
"from a Windows client. However, be sure to give the appropriate AD users or "
1341
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1342
"security\"/> for more details."
1343
msgstr ""
1344
1345
#: serverguide/C/windows-networking.xml:1173(title)
1346
msgid "Accessing a Windows Share"
1347
msgstr ""
1348
1349
#: serverguide/C/windows-networking.xml:1175(para)
1350
msgid ""
1351
"Now that the Samba server is part of the Active Directory domain you can "
1352
"access any Windows server shares:"
1353
msgstr ""
1354
1355
#: serverguide/C/windows-networking.xml:1182(para)
1356
msgid ""
1357
"To mount a Windows file share enter the following in a terminal prompt:"
1358
msgstr ""
1359
1360
#: serverguide/C/windows-networking.xml:1186(command)
1361
msgid "mount.cifs //fs01.example.com/share mount_point"
1362
msgstr ""
1363
1364
#: serverguide/C/windows-networking.xml:1189(para)
1365
msgid ""
1366
"It is also possible to access shares on computers not part of an AD domain, "
1367
"but a username and password will need to be provided."
1368
msgstr ""
1369
1370
#: serverguide/C/windows-networking.xml:1197(para)
1371
msgid ""
1372
"To mount the share during boot place an entry in "
1373
"<filename>/etc/fstab</filename>, for example:"
1374
msgstr ""
1375
1376
#: serverguide/C/windows-networking.xml:1201(programlisting)
1377
#, no-wrap
1378
msgid ""
1379
"\n"
1380
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1381
"0 0\n"
1382
msgstr ""
1383
1384
#: serverguide/C/windows-networking.xml:1208(para)
1385
msgid ""
1386
"Another way to copy files from a Windows server is to use the "
1387
"<application>smbclient</application> utility. To list the files in a Windows "
1388
"share:"
1389
msgstr ""
1390
1391
#: serverguide/C/windows-networking.xml:1214(command)
1392
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1393
msgstr ""
1394
1395
#: serverguide/C/windows-networking.xml:1220(para)
1396
msgid "To copy a file from the share, enter:"
1397
msgstr ""
1398
1399
#: serverguide/C/windows-networking.xml:1225(command)
1400
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1401
msgstr ""
1402
1403
#: serverguide/C/windows-networking.xml:1228(para)
1404
msgid ""
1405
"This will copy the <filename>file.txt</filename> into the current directory."
1406
msgstr ""
1407
1408
#: serverguide/C/windows-networking.xml:1235(para)
1409
msgid "And to copy a file to the share:"
1410
msgstr ""
1411
1412
#: serverguide/C/windows-networking.xml:1240(command)
1413
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1414
msgstr ""
1415
1416
#: serverguide/C/windows-networking.xml:1243(para)
1417
msgid ""
1418
"This will copy the <filename>/etc/hosts</filename> to "
1419
"<filename>//fs01.example.com/share/hosts</filename>."
1420
msgstr ""
1421
1422
#: serverguide/C/windows-networking.xml:1250(para)
1423
msgid ""
1424
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1425
"<application>smbclient</application> command all at once. This is useful for "
1426
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1427
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1428
"and directory commands, simply execute:"
1429
msgstr ""
1430
1431
#: serverguide/C/windows-networking.xml:1257(command)
1432
msgid "smbclient //fs01.example.com/share -k"
1433
msgstr ""
1434
1435
#: serverguide/C/windows-networking.xml:1264(para)
1436
msgid ""
1437
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1438
"<emphasis>//192.168.0.5/share</emphasis>, "
1439
"<emphasis>username=steve,password=secret</emphasis>, and "
1440
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1441
"file name, and an actual username and password with rights to the share."
1442
msgstr ""
1443
1444
#: serverguide/C/windows-networking.xml:1275(para)
1445
msgid ""
1446
"For more <application>smbclient</application> options see the man page: "
1447
"<command>man smbclient</command>, also available <ulink "
1448
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1449
"line</ulink>."
1450
msgstr ""
1451
1452
#: serverguide/C/windows-networking.xml:1280(para)
1453
msgid ""
1454
"The <application>mount.cifs</application><ulink "
1455
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1456
"an page</ulink> is also useful for more detailed information."
1457
msgstr ""
1458
1459
#: serverguide/C/windows-networking.xml:1293(title)
1460
msgid "Likewise Open"
1461
msgstr "Likewise Open"
1462
1463
#: serverguide/C/windows-networking.xml:1295(para)
1464
msgid ""
1465
"<application>Likewise Open</application> simplifies the necessary "
1466
"configuration needed to authenticate a Linux machine to an Active Directory "
1467
"domain. Based on <application>winbind</application>, the "
1468
"<application>likewise-open</application> package takes the pain out of "
1469
"integrating Ubuntu authentication into an existing Windows network."
1470
msgstr ""
1471
1472
#: serverguide/C/windows-networking.xml:1304(para)
1473
msgid ""
1474
"There are two ways to use Likewise Open, <application>likewise-"
1475
"open</application> the command line utility and <application>likewise-open-"
1476
"gui</application>. This section focuses on the command line utility."
1477
msgstr ""
1478
1479
#: serverguide/C/windows-networking.xml:1309(para)
1480
msgid ""
1481
"To install the <application>likewise-open</application> package, open a "
1482
"terminal prompt and enter:"
1483
msgstr ""
1484
1485
#: serverguide/C/windows-networking.xml:1314(command)
1486
msgid "sudo apt-get install likewise-open"
1487
msgstr "sudo apt-get install likewise-open"
1488
1489
#: serverguide/C/windows-networking.xml:1319(title)
1490
msgid "Joining a Domain"
1491
msgstr ""
1492
1493
#: serverguide/C/windows-networking.xml:1321(para)
1494
msgid ""
1495
"The main executable file of the <application>likewise-open</application> "
1496
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1497
"join your computer to the domain. Before you join a domain you will need to "
1498
"make sure you have:"
1499
msgstr ""
1500
1501
#: serverguide/C/windows-networking.xml:1329(para)
1502
msgid ""
1503
"Access to an Active Directory user with appropriate rights to join the "
1504
"domain."
1505
msgstr ""
1506
1507
#: serverguide/C/windows-networking.xml:1334(para)
1508
msgid ""
1509
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1510
"you want to join. If your AD domain does not match a valid domain such as "
1511
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1512
"the form of <emphasis>domainname.local</emphasis>."
1513
msgstr ""
1514
1515
#: serverguide/C/windows-networking.xml:1341(para)
1516
msgid ""
1517
"DNS for the domain setup properly. In a production AD environment this "
1518
"should be the case. Proper Microsoft DNS is needed so that client "
1519
"workstations can determine the Active Directory domain is available."
1520
msgstr ""
1521
1522
#: serverguide/C/windows-networking.xml:1345(para)
1523
msgid ""
1524
"If you don't have a Windows DNS server on your network, see <xref "
1525
"linkend=\"likewise-open-ms-dns\"/> for details."
1526
msgstr ""
1527
1528
#: serverguide/C/windows-networking.xml:1352(para)
1529
msgid "To join a domain, from a terminal prompt enter:"
1530
msgstr ""
1531
1532
#: serverguide/C/windows-networking.xml:1357(command)
1533
msgid "sudo domainjoin-cli join example.com Administrator"
1534
msgstr "sudo domainjoin-cli join exemplo.com Administrador"
1535
1536
#: serverguide/C/windows-networking.xml:1361(para)
1537
msgid ""
1538
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1539
"<emphasis>Administrator</emphasis> with the appropriate user name."
1540
msgstr ""
1541
1542
#: serverguide/C/windows-networking.xml:1367(para)
1543
msgid ""
1544
"You will then be prompted for the user's password. If all goes well a "
1545
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1546
msgstr ""
1547
1548
#: serverguide/C/windows-networking.xml:1373(para)
1549
msgid ""
1550
"After joining the domain, it is necessary to reboot before attempting to "
1551
"authenticate against the domain."
1552
msgstr ""
1553
1554
#: serverguide/C/windows-networking.xml:1379(para)
1555
msgid ""
1556
"After successfully joining an Ubuntu machine to an Active Directory domain "
1557
"you can authenticate using any valid AD user. To login you will need to "
1558
"enter the user name as 'domain\\username'. For example to ssh to a server "
1559
"joined to the domain enter:"
1560
msgstr ""
1561
1562
#: serverguide/C/windows-networking.xml:1386(command)
1563
msgid "ssh 'example\\steve'@hostname"
1564
msgstr "ssh 'example\\steve'@hostname"
1565
1566
#: serverguide/C/windows-networking.xml:1390(para)
1567
msgid ""
1568
"If configuring a Desktop the user name will need to be prefixed with "
1569
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1570
msgstr ""
1571
1572
#: serverguide/C/windows-networking.xml:1396(para)
1573
msgid ""
1574
"To make likewise-open use a default domain, you can add the following "
1575
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1576
msgstr ""
1577
1578
#: serverguide/C/windows-networking.xml:1400(programlisting)
1579
#, no-wrap
1580
msgid ""
1581
"\n"
1582
"winbind use default domain = yes\n"
1583
msgstr ""
1584
1585
#: serverguide/C/windows-networking.xml:1404(para)
1586
msgid "Then restart the <application>likewise-open</application> daemons:"
1587
msgstr ""
1588
1589
#: serverguide/C/windows-networking.xml:1409(command)
1590
msgid "sudo /etc/init.d/likewise-open restart"
1591
msgstr "sudo /etc/init.d/likewise-open restart"
1592
1593
#: serverguide/C/windows-networking.xml:1413(para)
1594
msgid ""
1595
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1596
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1597
"using only their username."
1598
msgstr ""
1599
1600
#: serverguide/C/windows-networking.xml:1419(para)
1601
msgid ""
1602
"The <application>domainjoin-cli</application> utility can also be used to "
1603
"leave the domain. From a terminal:"
1604
msgstr ""
1605
1606
#: serverguide/C/windows-networking.xml:1424(command)
1607
msgid "sudo domainjoin-cli leave"
1608
msgstr "sudo domainjoin-cli leave"
1609
1610
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1611
msgid "Other Utilities"
1612
msgstr ""
1613
1614
#: serverguide/C/windows-networking.xml:1431(para)
1615
msgid ""
1616
"The <application>likewise-open</application> package comes with a few other "
1617
"utilities that may be useful for gathering information about the Active "
1618
"Directory environment. These utilities are used to join the machine to the "
1619
"domain, and are the same as those available in the <application>samba-"
1620
"common</application> and <application>winbind</application> packages:"
1621
msgstr ""
1622
1623
#: serverguide/C/windows-networking.xml:1440(para)
1624
msgid ""
1625
"<application>lwinet</application>: Returns information about the network and "
1626
"the domain."
1627
msgstr ""
1628
1629
#: serverguide/C/windows-networking.xml:1445(para)
1630
msgid ""
1631
"<application>lwimsg</application>: Allows interaction with the "
1632
"<application>likewise-winbindd</application> daemon."
1633
msgstr ""
1634
1635
#: serverguide/C/windows-networking.xml:1450(para)
1636
msgid ""
1637
"<application>lwiinfo</application>: Displays information about various parts "
1638
"of the Domain."
1639
msgstr ""
1640
1641
#: serverguide/C/windows-networking.xml:1456(para)
1642
msgid "Please refer to each utility's man page specific for details."
1643
msgstr ""
1644
1645
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1646
msgid "Troubleshooting"
1647
msgstr ""
1648
1649
#: serverguide/C/windows-networking.xml:1466(para)
1650
msgid ""
1651
"If the client has trouble joining the domain, double check that the "
1652
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1653
"example:"
1654
msgstr ""
1655
1656
#: serverguide/C/windows-networking.xml:1471(programlisting)
1657
#, no-wrap
1658
msgid ""
1659
"\n"
1660
"nameserver 192.168.0.1\n"
1661
msgstr ""
1662
1663
#: serverguide/C/windows-networking.xml:1476(para)
1664
msgid ""
1665
"For more information when joining a domain, use the <emphasis>--loglevel "
1666
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1667
"<application>domainjoin-cli</application> utility:"
1668
msgstr ""
1669
1670
#: serverguide/C/windows-networking.xml:1482(command)
1671
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1672
msgstr ""
1673
1674
#: serverguide/C/windows-networking.xml:1486(para)
1675
msgid ""
1676
"If an Active Directory user has trouble logging in, check the "
1677
"<filename>/var/log/auth.log</filename> for details."
1678
msgstr ""
1679
1680
#: serverguide/C/windows-networking.xml:1491(para)
1681
msgid ""
1682
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1683
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1684
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1685
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1686
"<emphasis>hosts</emphasis> option. For example:"
1687
msgstr ""
1688
1689
#: serverguide/C/windows-networking.xml:1497(programlisting)
1690
#, no-wrap
1691
msgid ""
1692
"\n"
1693
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1694
msgstr ""
1695
1696
#: serverguide/C/windows-networking.xml:1501(para)
1697
msgid "Change the above to:"
1698
msgstr ""
1699
1700
#: serverguide/C/windows-networking.xml:1505(programlisting)
1701
#, no-wrap
1702
msgid ""
1703
"\n"
1704
"hosts: files dns [NOTFOUND=return]\n"
1705
msgstr ""
1706
1707
#: serverguide/C/windows-networking.xml:1509(para)
1708
msgid "Then restart networking by entering:"
1709
msgstr ""
1710
1711
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1712
msgid "sudo /etc/init.d/networking restart"
1713
msgstr ""
1714
1715
#: serverguide/C/windows-networking.xml:1517(para)
1716
msgid "You should now be able to join the Active Directory domain."
1717
msgstr ""
1718
1719
#: serverguide/C/windows-networking.xml:1525(title)
1720
msgid "Microsoft DNS"
1721
msgstr ""
1722
1723
#: serverguide/C/windows-networking.xml:1527(para)
1724
msgid ""
1725
"The following are instructions for installing DNS on an Active Directory "
1726
"domain controller running Windows Server 2003, but the instructions should "
1727
"be similar for other versions:"
1728
msgstr ""
1729
1730
#: serverguide/C/windows-networking.xml:1536(para)
1731
msgid ""
1732
"Click "
1733
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1734
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1735
"This will open the <application>Server Role Mangement</application> utility."
1736
msgstr ""
1737
1738
#: serverguide/C/windows-networking.xml:1544(para)
1739
msgid "Click <guilabel>Add or remove a role</guilabel>"
1740
msgstr ""
1741
1742
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1743
msgid "Click Next"
1744
msgstr ""
1745
1746
#: serverguide/C/windows-networking.xml:1546(para)
1747
msgid "Select \"DNS Server\""
1748
msgstr ""
1749
1750
#: serverguide/C/windows-networking.xml:1548(para)
1751
msgid "Click Next again to proceed"
1752
msgstr ""
1753
1754
#: serverguide/C/windows-networking.xml:1549(para)
1755
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1756
msgstr ""
1757
1758
#: serverguide/C/windows-networking.xml:1551(para)
1759
msgid ""
1760
"Make sure \"This server maintains the zone\" is selected and click Next."
1761
msgstr ""
1762
1763
#: serverguide/C/windows-networking.xml:1552(para)
1764
msgid "Enter your domain name and click Next"
1765
msgstr ""
1766
1767
#: serverguide/C/windows-networking.xml:1553(para)
1768
msgid "Click Next to \"Allow only secure dynamic updates\""
1769
msgstr ""
1770
1771
#: serverguide/C/windows-networking.xml:1555(para)
1772
msgid ""
1773
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1774
"should not forward queries\" and click Next."
1775
msgstr ""
1776
1777
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1778
msgid "Click Finish"
1779
msgstr ""
1780
1781
#: serverguide/C/windows-networking.xml:1562(para)
1782
msgid ""
1783
"DNS is now installed and can be further configured using the "
1784
"<application>Microsoft Management Console</application> DNS snap-in."
1785
msgstr ""
1786
1787
#: serverguide/C/windows-networking.xml:1570(para)
1788
msgid "Click Start"
1789
msgstr ""
1790
1791
#: serverguide/C/windows-networking.xml:1571(para)
1792
msgid "Control Panel"
1793
msgstr ""
1794
1795
#: serverguide/C/windows-networking.xml:1572(para)
1796
msgid "Network Connections"
1797
msgstr ""
1798
1799
#: serverguide/C/windows-networking.xml:1573(para)
1800
msgid "Right Click \"Local Area Connection\""
1801
msgstr ""
1802
1803
#: serverguide/C/windows-networking.xml:1574(para)
1804
msgid "Click Properties"
1805
msgstr ""
1806
1807
#: serverguide/C/windows-networking.xml:1575(para)
1808
msgid "Double click \"Internet Protocol (TCP/IP)\""
1809
msgstr ""
1810
1811
#: serverguide/C/windows-networking.xml:1576(para)
1812
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1813
msgstr ""
1814
1815
#: serverguide/C/windows-networking.xml:1577(para)
1816
msgid "Click Ok"
1817
msgstr ""
1818
1819
#: serverguide/C/windows-networking.xml:1578(para)
1820
msgid "Click Ok again to save the settings"
1821
msgstr ""
1822
1823
#: serverguide/C/windows-networking.xml:1567(para)
1824
msgid ""
1825
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1826
msgstr ""
1827
1828
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1829
msgid "References"
1830
msgstr "Referencias"
1831
1832
#: serverguide/C/windows-networking.xml:1587(para)
1833
msgid ""
1834
"Please refer to the <ulink "
1835
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1836
"further information."
1837
msgstr ""
1838
1839
#: serverguide/C/windows-networking.xml:1591(para)
1840
msgid ""
1841
"For more <application>domainjoin-cli</application> options see the man page: "
1842
"<command>man domainjoin-cli</command>."
1843
msgstr ""
1844
1845
#: serverguide/C/windows-networking.xml:1595(para)
1846
msgid ""
1847
"Also, see the <ulink "
1848
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1849
"LikewiseOpen</ulink> page."
1850
msgstr ""
1851
1852
#: serverguide/C/web-servers.xml:13(title)
1853
msgid "Web Servers"
1854
msgstr ""
1855
1856
#: serverguide/C/web-servers.xml:14(para)
1857
msgid ""
1858
"A Web server is a software responsible for accepting HTTP requests from "
1859
"clients, which are known as Web browsers, and serving them HTTP responses "
1860
"along with optional data contents, which usually are Web pages such as HTML "
1861
"documents and linked objects (images, etc.)."
1862
msgstr ""
1863
1864
#: serverguide/C/web-servers.xml:19(title)
1865
msgid "HTTPD - Apache2 Web Server"
1866
msgstr ""
1867
1868
#: serverguide/C/web-servers.xml:20(para)
1869
msgid ""
1870
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1871
"are used to serve Web Pages requested by client computers. Clients typically "
1872
"request and view Web Pages using Web Browser applications such as "
1873
"<application>Firefox</application>, <application>Opera</application>, or "
1874
"<application>Mozilla</application>."
1875
msgstr ""
1876
1877
#: serverguide/C/web-servers.xml:24(para)
1878
msgid ""
1879
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1880
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1881
"resource. For example, to view the home page of the <ulink "
1882
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1883
"the FQDN. To request specific information about <ulink "
1884
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1885
"enter the FQDN followed by a path."
1886
msgstr ""
1887
1888
#: serverguide/C/web-servers.xml:29(para)
1889
msgid ""
1890
"The most common protocol used to transfer Web pages is the Hyper Text "
1891
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1892
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1893
"protocol for uploading and downloading files, are also supported."
1894
msgstr ""
1895
1896
#: serverguide/C/web-servers.xml:33(para)
1897
msgid ""
1898
"Apache Web Servers are often used in combination with the "
1899
"<application>MySQL</application> database engine, the HyperText Preprocessor "
1900
"(<application>PHP</application>) scripting language, and other popular "
1901
"scripting languages such as <application>Python</application> and "
1902
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
1903
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
1904
"for the development and deployment of Web-based applications."
1905
msgstr ""
1906
1907
#: serverguide/C/web-servers.xml:42(para)
1908
msgid ""
1909
"The <application>Apache2</application> web server is available in Ubuntu "
1910
"Linux. To install Apache2:"
1911
msgstr ""
1912
1913
#: serverguide/C/web-servers.xml:48(para)
1914
msgid "At a terminal prompt enter the following command:"
1915
msgstr ""
1916
1917
#: serverguide/C/web-servers.xml:53(command)
1918
msgid "sudo apt-get install apache2"
1919
msgstr ""
1920
1921
#: serverguide/C/web-servers.xml:63(para)
1922
msgid ""
1923
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
1924
"text configuration files. These <emphasis>directives</emphasis> are "
1925
"separated between the following files and directories:"
1926
msgstr ""
1927
1928
#: serverguide/C/web-servers.xml:71(para)
1929
msgid ""
1930
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
1931
"Contains settings that are <emphasis>global</emphasis> to Apache2."
1932
msgstr ""
1933
1934
#: serverguide/C/web-servers.xml:77(para)
1935
msgid ""
1936
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
1937
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
1938
"serve content may add files, or symlinks, to this directory."
1939
msgstr ""
1940
1941
#: serverguide/C/web-servers.xml:83(para)
1942
msgid ""
1943
"<emphasis>envvars:</emphasis> file where Apache2 "
1944
"<emphasis>environment</emphasis> variables are set."
1945
msgstr ""
1946
1947
#: serverguide/C/web-servers.xml:88(para)
1948
msgid ""
1949
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
1950
"file, named after the <application>httpd</application> daemon. The file can "
1951
"be used for <emphasis>user specific</emphasis> configuration options that "
1952
"globally effect Apache2."
1953
msgstr ""
1954
1955
#: serverguide/C/web-servers.xml:95(para)
1956
msgid ""
1957
"<emphasis>mods-available:</emphasis> this directory contains configuration "
1958
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
1959
"modules will have specific configuration files, however."
1960
msgstr ""
1961
1962
#: serverguide/C/web-servers.xml:101(para)
1963
msgid ""
1964
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
1965
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
1966
"configuration file is symlinked it will be enabled the next time "
1967
"<application>apache2</application> is restarted."
1968
msgstr ""
1969
1970
#: serverguide/C/web-servers.xml:108(para)
1971
msgid ""
1972
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
1973
"TCP ports Apache2 is listening on."
1974
msgstr ""
1975
1976
#: serverguide/C/web-servers.xml:113(para)
1977
msgid ""
1978
"<emphasis>sites-available:</emphasis> this directory has configuration files "
1979
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
1980
"to be configured for multiple sites that have separate configurations."
1981
msgstr ""
1982
1983
#: serverguide/C/web-servers.xml:119(para)
1984
msgid ""
1985
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
1986
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
1987
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
1988
"a configuration file in sites-available is symlinked, the site configured by "
1989
"it will be active once Apache2 is restarted."
1990
msgstr ""
1991
1992
#: serverguide/C/web-servers.xml:127(para)
1993
msgid ""
1994
"In addition, other configuration files may be added using the "
1995
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
1996
"many configuration files. Any directive may be placed in any of these "
1997
"configuration files. Changes to the main configuration files are only "
1998
"recognized by Apache2 when it is started or restarted."
1999
msgstr ""
2000
2001
#: serverguide/C/web-servers.xml:136(para)
2002
msgid ""
2003
"The server also reads a file containing mime document types; the filename is "
2004
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2005
"<filename>/etc/mime.types</filename> by default."
2006
msgstr ""
2007
2008
#: serverguide/C/web-servers.xml:141(title)
2009
msgid "Basic Settings"
2010
msgstr ""
2011
2012
#: serverguide/C/web-servers.xml:142(para)
2013
msgid ""
2014
"This section explains Apache2 server essential configuration parameters. "
2015
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2016
"Documentation</ulink> for more details."
2017
msgstr ""
2018
2019
#: serverguide/C/web-servers.xml:150(para)
2020
msgid ""
2021
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2022
"it is configured with a single default virtual host (using the "
2023
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2024
"if you have a single site, or used as a template for additional virtual "
2025
"hosts if you have multiple sites. If left alone, the default virtual host "
2026
"will serve as your default site, or the site users will see if the URL they "
2027
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2028
"your custom sites. To modify the default virtual host, edit the file "
2029
"<filename>/etc/apache2/sites-available/default</filename>."
2030
msgstr ""
2031
2032
#: serverguide/C/web-servers.xml:163(para)
2033
msgid ""
2034
"The directives set for a virtual host only apply to that particular virtual "
2035
"host. If a directive is set server-wide and not defined within the virtual "
2036
"host settings, the default setting is used. For example, you can define a "
2037
"Webmaster email address and not define individual email addresses for each "
2038
"virtual host."
2039
msgstr ""
2040
2041
#: serverguide/C/web-servers.xml:171(para)
2042
msgid ""
2043
"If you wish to configure a new virtual host or site, copy that file into the "
2044
"same directory with a name you choose. For example:"
2045
msgstr ""
2046
2047
#: serverguide/C/web-servers.xml:177(command)
2048
msgid ""
2049
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2050
"available/mynewsite"
2051
msgstr ""
2052
2053
#: serverguide/C/web-servers.xml:180(para)
2054
msgid ""
2055
"Edit the new file to configure the new site using some of the directives "
2056
"described below."
2057
msgstr ""
2058
2059
#: serverguide/C/web-servers.xml:187(para)
2060
msgid ""
2061
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
2062
"to be advertised for the server's administrator. The default value is "
2063
"webmaster@localhost. This should be changed to an email address that is "
2064
"delivered to you (if you are the server's administrator). If your website "
2065
"has a problem, Apache2 will display an error message containing this email "
2066
"address to report the problem to. Find this directive in your site's "
2067
"configuration file in /etc/apache2/sites-available."
2068
msgstr ""
2069
2070
#: serverguide/C/web-servers.xml:198(para)
2071
msgid ""
2072
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2073
"the IP address, Apache2 should listen on. If the IP address is not "
2074
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2075
"it runs on. The default value for the Listen directive is 80. Change this to "
2076
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2077
"that it will not be available to the Internet, to (for example) 81 to change "
2078
"the port that it listens on, or leave it as is for normal operation. This "
2079
"directive can be found and changed in its own file, "
2080
"<filename>/etc/apache2/ports.conf</filename>"
2081
msgstr ""
2082
2083
#: serverguide/C/web-servers.xml:211(para)
2084
msgid ""
2085
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2086
"FQDN your site should answer to. The default virtual host has no ServerName "
2087
"directive specified, so it will respond to all requests that do not match a "
2088
"ServerName directive in another virtual host. If you have just acquired the "
2089
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2090
"value of the ServerName directive in your virtual host configuration file "
2091
"should be ubunturocks.com. Add this directive to the new virtual host file "
2092
"you created earlier (<filename>/etc/apache2/sites-"
2093
"available/mynewsite</filename>)."
2094
msgstr ""
2095
2096
#: serverguide/C/web-servers.xml:223(para)
2097
msgid ""
2098
"You may also want your site to respond to www.ubunturocks.com, since many "
2099
"users will assume the www prefix is appropriate. Use the "
2100
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2101
"wildcards in the ServerAlias directive."
2102
msgstr ""
2103
2104
#: serverguide/C/web-servers.xml:230(para)
2105
msgid ""
2106
"For example, the following configuration will cause your site to respond to "
2107
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2108
msgstr ""
2109
2110
#: serverguide/C/web-servers.xml:236(programlisting)
2111
#, no-wrap
2112
msgid ""
2113
"\n"
2114
"ServerAlias *.ubunturocks.com\n"
2115
msgstr ""
2116
2117
#: serverguide/C/web-servers.xml:242(para)
2118
msgid ""
2119
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2120
"should look for the files that make up the site. The default value is "
2121
"/var/www. No site is configured there, but if you uncomment the "
2122
"<emphasis>RedirectMatch</emphasis> directive in "
2123
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2124
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2125
"this value in your site's virtual host file, and remember to create that "
2126
"directory if necessary!"
2127
msgstr ""
2128
2129
#: serverguide/C/web-servers.xml:254(para)
2130
msgid ""
2131
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2132
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2133
"enabled point to \"available\" sites."
2134
msgstr ""
2135
2136
#: serverguide/C/web-servers.xml:260(para)
2137
msgid ""
2138
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2139
"<application>a2ensite</application> utility and restart Apache2:"
2140
msgstr ""
2141
2142
#: serverguide/C/web-servers.xml:266(command)
2143
msgid "sudo a2ensite mynewsite"
2144
msgstr ""
2145
2146
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2147
msgid "sudo /etc/init.d/apache2 restart"
2148
msgstr "sudo /etc/init.d/apache2 restart"
2149
2150
#: serverguide/C/web-servers.xml:271(para)
2151
msgid ""
2152
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2153
"name for the VirtualHost. One method is to name the file after the "
2154
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2155
msgstr ""
2156
2157
#: serverguide/C/web-servers.xml:278(para)
2158
msgid ""
2159
"Similarly, use the <application>a2dissite</application> utility to disable "
2160
"sites. This is can be useful when troubleshooting configuration problems "
2161
"with multiple VirtualHosts:"
2162
msgstr ""
2163
2164
#: serverguide/C/web-servers.xml:284(command)
2165
msgid "sudo a2dissite mynewsite"
2166
msgstr ""
2167
2168
#: serverguide/C/web-servers.xml:290(title)
2169
msgid "Default Settings"
2170
msgstr ""
2171
2172
#: serverguide/C/web-servers.xml:292(para)
2173
msgid ""
2174
"This section explains configuration of the Apache2 server default settings. "
2175
"For example, if you add a virtual host, the settings you configure for the "
2176
"virtual host take precedence for that virtual host. For a directive not "
2177
"defined within the virtual host settings, the default value is used."
2178
msgstr ""
2179
2180
#: serverguide/C/web-servers.xml:304(para)
2181
msgid ""
2182
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2183
"server when a user requests an index of a directory by specifying a forward "
2184
"slash (/) at the end of the directory name."
2185
msgstr ""
2186
2187
#: serverguide/C/web-servers.xml:311(para)
2188
msgid ""
2189
"For example, when a user requests the page "
2190
"http://www.example.com/this_directory/, he or she will get either the "
2191
"DirectoryIndex page if it exists, a server-generated directory list if it "
2192
"does not and the Indexes option is specified, or a Permission Denied page if "
2193
"neither is true. The server will try to find one of the files listed in the "
2194
"DirectoryIndex directive and will return the first one it finds. If it does "
2195
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2196
"set for that directory, the server will generate and return a list, in HTML "
2197
"format, of the subdirectories and files in the directory. The default value, "
2198
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2199
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2200
"Apache2 finds a file in a requested directory matching any of these names, "
2201
"the first will be displayed."
2202
msgstr ""
2203
2204
#: serverguide/C/web-servers.xml:332(para)
2205
msgid ""
2206
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2207
"file for Apache2 to use for specific error events. For example, if a user "
2208
"requests a resource that does not exist, a 404 error will occur, and per "
2209
"Apache2's default configuration, the file "
2210
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2211
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2212
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2213
"redirects requests to the /error directory to "
2214
"<filename>/usr/share/apache2/error/</filename>."
2215
msgstr ""
2216
2217
#: serverguide/C/web-servers.xml:344(para)
2218
msgid ""
2219
"To see a list of the default ErrorDocument directives, use this command:"
2220
msgstr ""
2221
2222
#: serverguide/C/web-servers.xml:350(command)
2223
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2224
msgstr ""
2225
2226
#: serverguide/C/web-servers.xml:355(para)
2227
msgid ""
2228
"By default, the server writes the transfer log to the file "
2229
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2230
"per-site basis in your virtual host configuration files with the "
2231
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2232
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2233
"specify the file to which errors are logged, via the "
2234
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2235
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2236
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2237
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2238
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2239
"/etc/apache2/apache2.conf</filename> for the default value)."
2240
msgstr ""
2241
2242
#: serverguide/C/web-servers.xml:370(para)
2243
msgid ""
2244
"Some options are specified on a per-directory basis rather than per-server. "
2245
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2246
"is enclosed in XML-like tags, like so:"
2247
msgstr ""
2248
2249
#: serverguide/C/web-servers.xml:376(programlisting)
2250
#, no-wrap
2251
msgid ""
2252
"\n"
2253
"<Directory /var/www/mynewsite>\n"
2254
"...\n"
2255
"</Directory>\n"
2256
msgstr ""
2257
2258
#: serverguide/C/web-servers.xml:382(para)
2259
msgid ""
2260
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2261
"one or more of the following values (among others), separated by spaces:"
2262
msgstr ""
2263
2264
#: serverguide/C/web-servers.xml:394(para)
2265
msgid ""
2266
"Most files should not be executed as CGI scripts. This would be very "
2267
"dangerous. CGI scripts should kept in a directory separate from and outside "
2268
"your DocumentRoot, and only this directory should have the ExecCGI option "
2269
"set. This is the default, and the default location for CGI scripts is "
2270
"<filename>/usr/lib/cgi-bin</filename>."
2271
msgstr ""
2272
2273
#: serverguide/C/web-servers.xml:389(para)
2274
msgid ""
2275
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2276
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2277
msgstr ""
2278
2279
#: serverguide/C/web-servers.xml:405(para)
2280
msgid ""
2281
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2282
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2283
"other files. This is not a common option. See <ulink "
2284
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2285
"HOWTO</ulink> for more information."
2286
msgstr ""
2287
2288
#: serverguide/C/web-servers.xml:414(para)
2289
msgid ""
2290
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2291
"includes, but disable the <emphasis>#exec</emphasis> and "
2292
"<emphasis>#include</emphasis> commands in CGI scripts."
2293
msgstr ""
2294
2295
#: serverguide/C/web-servers.xml:426(para)
2296
msgid ""
2297
"For security reasons, this should usually not be set, and certainly should "
2298
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2299
"per-directory basis only if you are certain you want users to see the entire "
2300
"contents of the directory."
2301
msgstr ""
2302
2303
#: serverguide/C/web-servers.xml:421(para)
2304
msgid ""
2305
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2306
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2307
"index.html) exists in the requested directory. <placeholder-1/>"
2308
msgstr ""
2309
2310
#: serverguide/C/web-servers.xml:436(para)
2311
msgid ""
2312
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2313
"multiviews; this option is disabled by default for security reasons. See the "
2314
"<ulink "
2315
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2316
"Apache2 documentation on this option</ulink>."
2317
msgstr ""
2318
2319
#: serverguide/C/web-servers.xml:444(para)
2320
msgid ""
2321
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2322
"symbolic links if the target file or directory has the same owner as the "
2323
"link."
2324
msgstr ""
2325
2326
#: serverguide/C/web-servers.xml:456(title)
2327
msgid "httpd Settings"
2328
msgstr ""
2329
2330
#: serverguide/C/web-servers.xml:458(para)
2331
msgid ""
2332
"This section explains some basic <application>httpd</application> daemon "
2333
"configuration settings."
2334
msgstr ""
2335
2336
#: serverguide/C/web-servers.xml:462(para)
2337
msgid ""
2338
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2339
"the path to the lockfile used when the server is compiled with either "
2340
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2341
"stored on the local disk. It should be left to the default value unless the "
2342
"logs directory is located on an NFS share. If this is the case, the default "
2343
"value should be changed to a location on the local disk and to a directory "
2344
"that is readable only by root."
2345
msgstr ""
2346
2347
#: serverguide/C/web-servers.xml:471(para)
2348
msgid ""
2349
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2350
"file in which the server records its process ID (pid). This file should only "
2351
"be readable by root. In most cases, it should be left to the default value."
2352
msgstr ""
2353
2354
#: serverguide/C/web-servers.xml:477(para)
2355
msgid ""
2356
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2357
"used by the server to answer requests. This setting determines the server's "
2358
"access. Any files inaccessible to this user will also be inaccessible to "
2359
"your website's visitors. The default value for User is www-data."
2360
msgstr ""
2361
2362
#: serverguide/C/web-servers.xml:484(para)
2363
msgid ""
2364
"Unless you know exactly what you are doing, do not set the User directive to "
2365
"root. Using root as the User will create large security holes for your Web "
2366
"server."
2367
msgstr ""
2368
2369
#: serverguide/C/web-servers.xml:490(para)
2370
msgid ""
2371
"The Group directive is similar to the User directive. Group sets the group "
2372
"under which the server will answer requests. The default group is also www-"
2373
"data."
2374
msgstr ""
2375
2376
#: serverguide/C/web-servers.xml:496(title)
2377
msgid "Apache2 Modules"
2378
msgstr ""
2379
2380
#: serverguide/C/web-servers.xml:498(para)
2381
msgid ""
2382
"Apache2 is a modular server. This implies that only the most basic "
2383
"functionality is included in the core server. Extended features are "
2384
"available through modules which can be loaded into Apache2. By default, a "
2385
"base set of modules is included in the server at compile-time. If the server "
2386
"is compiled to use dynamically loaded modules, then modules can be compiled "
2387
"separately, and added at any time using the LoadModule directive. Otherwise, "
2388
"Apache2 must be recompiled to add or remove modules."
2389
msgstr ""
2390
2391
#: serverguide/C/web-servers.xml:510(para)
2392
msgid ""
2393
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2394
"Configuration directives may be conditionally included on the presence of a "
2395
"particular module by enclosing them in an "
2396
"<emphasis><IfModule></emphasis> block."
2397
msgstr ""
2398
2399
#: serverguide/C/web-servers.xml:517(para)
2400
msgid ""
2401
"You can install additional Apache2 modules and use them with your Web "
2402
"server. For example, run the following command from a terminal prompt to "
2403
"install the <emphasis>MySQL Authentication</emphasis> module:"
2404
msgstr ""
2405
2406
#: serverguide/C/web-servers.xml:524(command)
2407
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2408
msgstr ""
2409
2410
#: serverguide/C/web-servers.xml:527(para)
2411
msgid ""
2412
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2413
"additional modules."
2414
msgstr ""
2415
2416
#: serverguide/C/web-servers.xml:531(para)
2417
msgid ""
2418
"Use the <application>a2enmod</application> utility to enable a module:"
2419
msgstr ""
2420
2421
#: serverguide/C/web-servers.xml:537(command)
2422
msgid "sudo a2enmod auth_mysql"
2423
msgstr ""
2424
2425
#: serverguide/C/web-servers.xml:541(para)
2426
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2427
msgstr ""
2428
2429
#: serverguide/C/web-servers.xml:546(command)
2430
msgid "sudo a2dismod auth_mysql"
2431
msgstr ""
2432
2433
#: serverguide/C/web-servers.xml:553(title)
2434
msgid "HTTPS Configuration"
2435
msgstr ""
2436
2437
#: serverguide/C/web-servers.xml:555(para)
2438
msgid ""
2439
"The <application>mod_ssl</application> module adds an important feature to "
2440
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2441
"browser is communicating using SSL, the https:// prefix is used at the "
2442
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2443
"bar."
2444
msgstr ""
2445
2446
#: serverguide/C/web-servers.xml:564(para)
2447
msgid ""
2448
"The <application>mod_ssl</application> module is available in "
2449
"<application>apache2-common</application> package. Execute the following "
2450
"command from a terminal prompt to enable the "
2451
"<application>mod_ssl</application> module:"
2452
msgstr ""
2453
2454
#: serverguide/C/web-servers.xml:571(command)
2455
msgid "sudo a2enmod ssl"
2456
msgstr ""
2457
2458
#: serverguide/C/web-servers.xml:574(para)
2459
msgid ""
2460
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2461
"available/default-ssl</filename>. In order for "
2462
"<application>Apache2</application> to provide HTTPS, a "
2463
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2464
"needed. The default HTTPS configuration will use a certificate and key "
2465
"generated by the <application>ssl-cert</application> package. They are good "
2466
"for testing, but the auto-generated certificate and key should be replaced "
2467
"by a certificate specific to the site or server. For information on "
2468
"generating a key and obtaining a certificate see <xref "
2469
"linkend=\"certificates-and-security\"/>"
2470
msgstr ""
2471
2472
#: serverguide/C/web-servers.xml:584(para)
2473
msgid ""
2474
"To configure <application>Apache2</application> for HTTPS, enter the "
2475
"following:"
2476
msgstr ""
2477
2478
#: serverguide/C/web-servers.xml:589(command)
2479
msgid "sudo a2ensite default-ssl"
2480
msgstr ""
2481
2482
#: serverguide/C/web-servers.xml:593(para)
2483
msgid ""
2484
"The directories <filename>/etc/ssl/certs</filename> and "
2485
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2486
"install the certificate and key in another directory make sure to change "
2487
"<emphasis>SSLCertificateFile</emphasis> and "
2488
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2489
msgstr ""
2490
2491
#: serverguide/C/web-servers.xml:600(para)
2492
msgid ""
2493
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2494
"settings:"
2495
msgstr ""
2496
2497
#: serverguide/C/web-servers.xml:611(para)
2498
msgid ""
2499
"Depending on how you obtained your certificate you may need to enter a "
2500
"passphrase when <application>Apache2</application> starts."
2501
msgstr ""
2502
2503
#: serverguide/C/web-servers.xml:617(para)
2504
msgid ""
2505
"You can access the secure server pages by typing https://your_hostname/url/ "
2506
"in your browser address bar."
2507
msgstr ""
2508
2509
#: serverguide/C/web-servers.xml:628(para)
2510
msgid ""
2511
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2512
"Documentation</ulink> contains in depth information on Apache2 configuration "
2513
"directives. Also, see the <application>apache2-doc</application> package for "
2514
"the official Apache2 docs."
2515
msgstr ""
2516
2517
#: serverguide/C/web-servers.xml:635(para)
2518
msgid ""
2519
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2520
"Documentation</ulink> site for more SSL related information."
2521
msgstr ""
2522
2523
#: serverguide/C/web-servers.xml:641(para)
2524
msgid ""
2525
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2526
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2527
"configurations."
2528
msgstr ""
2529
2530
#: serverguide/C/web-servers.xml:647(para)
2531
msgid ""
2532
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2533
"server</emphasis> IRC channel on <ulink "
2534
"url=\"http://freenode.net/\">freenode.net</ulink>."
2535
msgstr ""
2536
2537
#: serverguide/C/web-servers.xml:653(para)
2538
msgid ""
2539
"Usually integrated with PHP and MySQL the <ulink "
2540
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2541
"Ubuntu Wiki </ulink> page is a good resource."
2542
msgstr ""
2543
2544
#: serverguide/C/web-servers.xml:664(title)
2545
msgid "PHP5 - Scripting Language"
2546
msgstr ""
2547
2548
#: serverguide/C/web-servers.xml:665(para)
2549
msgid ""
2550
"PHP is a general-purpose scripting language suited for Web development. The "
2551
"PHP script can be embedded into HTML. This section explains how to install "
2552
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2553
msgstr ""
2554
2555
#: serverguide/C/web-servers.xml:669(para)
2556
msgid ""
2557
"This section assumes you have installed and configured Apache2 Web Server "
2558
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2559
"sections in this document to install and configure Apache2 and MySQL "
2560
"respectively."
2561
msgstr ""
2562
2563
#: serverguide/C/web-servers.xml:676(para)
2564
msgid "The PHP5 is available in Ubuntu Linux."
2565
msgstr ""
2566
2567
#: serverguide/C/web-servers.xml:678(para)
2568
msgid ""
2569
"To install PHP5 you can enter the following command in the terminal prompt: "
2570
"<screen>\n"
2571
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2572
"</screen>"
2573
msgstr ""
2574
2575
#: serverguide/C/web-servers.xml:687(para)
2576
msgid ""
2577
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2578
"line you should install <application>php5-cli</application> package. To "
2579
"install <application>php5-cli</application> you can enter the following "
2580
"command in the terminal prompt: <screen>\n"
2581
"<command>sudo apt-get install php5-cli</command>\n"
2582
"</screen>"
2583
msgstr ""
2584
2585
#: serverguide/C/web-servers.xml:696(para)
2586
msgid ""
2587
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2588
"accomplish this, you should install <application>php5-cgi</application> "
2589
"package. You can run the following command in a terminal prompt to install "
2590
"<application>php5-cgi</application> package: <screen>\n"
2591
"<command>sudo apt-get install php5-cgi</command>\n"
2592
"</screen>"
2593
msgstr ""
2594
2595
#: serverguide/C/web-servers.xml:706(para)
2596
msgid ""
2597
"To use <application>MySQL</application> with PHP5 you should install "
2598
"<application>php5-mysql</application> package. To install <application>php5-"
2599
"mysql</application> you can enter the following command in the terminal "
2600
"prompt: <screen>\n"
2601
"<command>sudo apt-get install php5-mysql</command>\n"
2602
"</screen>"
2603
msgstr ""
2604
2605
#: serverguide/C/web-servers.xml:714(para)
2606
msgid ""
2607
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2608
"install <application>php5-pgsql</application> package. To install "
2609
"<application>php5-pgsql</application> you can enter the following command in "
2610
"the terminal prompt: <screen>\n"
2611
"<command>sudo apt-get install php5-pgsql</command>\n"
2612
"</screen>"
2613
msgstr ""
2614
2615
#: serverguide/C/web-servers.xml:727(para)
2616
msgid ""
2617
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2618
"you have installed <application>php5-cli</application> package, you can run "
2619
"PHP5 scripts from your command prompt."
2620
msgstr ""
2621
2622
#: serverguide/C/web-servers.xml:734(para)
2623
msgid ""
2624
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2625
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2626
"when you install the module. Please verify if the files "
2627
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2628
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2629
"not exists, you can enable the module using <command>a2enmod</command> "
2630
"command."
2631
msgstr ""
2632
2633
#: serverguide/C/web-servers.xml:745(para)
2634
msgid ""
2635
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2636
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2637
"following command at a terminal prompt to restart your web server: "
2638
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2639
msgstr ""
2640
2641
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2642
msgid "Testing"
2643
msgstr ""
2644
2645
#: serverguide/C/web-servers.xml:754(para)
2646
msgid ""
2647
"To verify your installation, you can run following PHP5 phpinfo script:"
2648
msgstr ""
2649
2650
#: serverguide/C/web-servers.xml:757(programlisting)
2651
#, no-wrap
2652
msgid ""
2653
"\n"
2654
"<?php\n"
2655
" phpinfo();\n"
2656
"?>\n"
2657
msgstr ""
2658
2659
#: serverguide/C/web-servers.xml:762(para)
2660
msgid ""
2661
"You can save the content in a file <filename>phpinfo.php</filename> and "
2662
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2663
"server. When point your browser to "
2664
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2665
"various PHP5 configuration parameters."
2666
msgstr ""
2667
2668
#: serverguide/C/web-servers.xml:776(para)
2669
msgid ""
2670
"For more in depth information see <ulink "
2671
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2672
msgstr ""
2673
2674
#: serverguide/C/web-servers.xml:781(para)
2675
msgid ""
2676
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2677
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2678
"5</ulink> and the <ulink "
2679
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2680
msgstr ""
2681
2682
#: serverguide/C/web-servers.xml:788(para)
2683
msgid ""
2684
"Also, see the <ulink "
2685
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2686
"Ubuntu Wiki</ulink> page for more information."
2687
msgstr ""
2688
2689
#: serverguide/C/web-servers.xml:799(title)
2690
msgid "Squid - Proxy Server"
2691
msgstr ""
2692
2693
#: serverguide/C/web-servers.xml:800(para)
2694
msgid ""
2695
"Squid is a full-featured web proxy cache server application which provides "
2696
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2697
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2698
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2699
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2700
"caching. Squid also supports a wide variety of caching protocols, such as "
2701
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2702
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2703
"Protocol. (WCCP)"
2704
msgstr ""
2705
2706
#: serverguide/C/web-servers.xml:808(para)
2707
msgid ""
2708
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2709
"and caching server needs, and scales from the branch office to enterprise "
2710
"level networks while providing extensive, granular access control mechanisms "
2711
"and monitoring of critical parameters via the Simple Network Management "
2712
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2713
"Squid proxy, or caching servers, ensure your system is configured with a "
2714
"large amount of physical memory, as Squid maintains an in-memory cache for "
2715
"increased performance."
2716
msgstr ""
2717
2718
#: serverguide/C/web-servers.xml:817(para)
2719
msgid ""
2720
"At a terminal prompt, enter the following command to install the Squid "
2721
"server:"
2722
msgstr ""
2723
2724
#: serverguide/C/web-servers.xml:822(command)
2725
msgid "sudo apt-get install squid"
2726
msgstr ""
2727
2728
#: serverguide/C/web-servers.xml:828(para)
2729
msgid ""
2730
"Squid is configured by editing the directives contained within the "
2731
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2732
"examples illustrate some of the directives which may be modified to affect "
2733
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2734
"see the References section."
2735
msgstr ""
2736
2737
#: serverguide/C/web-servers.xml:834(para)
2738
msgid ""
2739
"Prior to editing the configuration file, you should make a copy of the "
2740
"original file and protect it from writing so you will have the original "
2741
"settings as a reference, and to re-use as necessary."
2742
msgstr ""
2743
2744
#: serverguide/C/web-servers.xml:837(para)
2745
msgid ""
2746
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2747
"writing with the following commands entered at a terminal prompt:"
2748
msgstr ""
2749
2750
#: serverguide/C/web-servers.xml:842(command)
2751
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2752
msgstr ""
2753
2754
#: serverguide/C/web-servers.xml:843(command)
2755
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2756
msgstr ""
2757
2758
#: serverguide/C/web-servers.xml:849(para)
2759
msgid ""
2760
"To set your Squid server to listen on TCP port 8888 instead of the default "
2761
"TCP port 3128, change the http_port directive as such:"
2762
msgstr ""
2763
2764
#: serverguide/C/web-servers.xml:853(programlisting)
2765
#, no-wrap
2766
msgid ""
2767
"\n"
2768
"http_port 8888\n"
2769
msgstr ""
2770
2771
#: serverguide/C/web-servers.xml:858(para)
2772
msgid ""
2773
"Change the visible_hostname directive in order to give the Squid server a "
2774
"specific hostname. This hostname does not necessarily need to be the "
2775
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2776
msgstr ""
2777
2778
#: serverguide/C/web-servers.xml:862(programlisting)
2779
#, no-wrap
2780
msgid ""
2781
"\n"
2782
"visible_hostname weezie\n"
2783
msgstr ""
2784
2785
#: serverguide/C/web-servers.xml:867(para)
2786
msgid ""
2787
"Using Squid's access control, you may configure use of Internet services "
2788
"proxied by Squid to be available only users with certain Internet Protocol "
2789
"(IP) addresses. For example, we will illustrate access by users of the "
2790
"192.168.42.0/24 subnetwork only:"
2791
msgstr ""
2792
2793
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2794
msgid ""
2795
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2796
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2797
msgstr ""
2798
2799
#: serverguide/C/web-servers.xml:875(programlisting)
2800
#, no-wrap
2801
msgid ""
2802
"\n"
2803
"acl fortytwo_network src 192.168.42.0/24\n"
2804
msgstr ""
2805
2806
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2807
msgid ""
2808
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2809
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2810
msgstr ""
2811
2812
#: serverguide/C/web-servers.xml:882(programlisting)
2813
#, no-wrap
2814
msgid ""
2815
"\n"
2816
"http_access allow fortytwo_network\n"
2817
msgstr ""
2818
2819
#: serverguide/C/web-servers.xml:887(para)
2820
msgid ""
2821
"Using the excellent access control features of Squid, you may configure use "
2822
"of Internet services proxied by Squid to be available only during normal "
2823
"business hours. For example, we'll illustrate access by employees of a "
2824
"business which is operating between 9:00AM and 5:00PM, Monday through "
2825
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2826
msgstr ""
2827
2828
#: serverguide/C/web-servers.xml:895(programlisting)
2829
#, no-wrap
2830
msgid ""
2831
"\n"
2832
"acl biz_network src 10.1.42.0/24\n"
2833
"acl biz_hours time M T W T F 9:00-17:00\n"
2834
msgstr ""
2835
2836
#: serverguide/C/web-servers.xml:903(programlisting)
2837
#, no-wrap
2838
msgid ""
2839
"\n"
2840
"http_access allow biz_network biz_hours\n"
2841
msgstr ""
2842
2843
#: serverguide/C/web-servers.xml:910(para)
2844
msgid ""
2845
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2846
"save the file and restart the <application>squid</application> server "
2847
"application to effect the changes using the following command entered at a "
2848
"terminal prompt:"
2849
msgstr ""
2850
2851
#: serverguide/C/web-servers.xml:917(command)
2852
msgid "sudo /etc/init.d/squid restart"
2853
msgstr ""
2854
2855
#: serverguide/C/web-servers.xml:924(ulink)
2856
msgid "Squid Website"
2857
msgstr ""
2858
2859
#: serverguide/C/web-servers.xml:926(para)
2860
msgid ""
2861
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2862
"Squid</ulink> page."
2863
msgstr ""
2864
2865
#: serverguide/C/web-servers.xml:933(title)
2866
msgid "Ruby on Rails"
2867
msgstr ""
2868
2869
#: serverguide/C/web-servers.xml:934(para)
2870
msgid ""
2871
"Ruby on Rails is an open source web framework for developing database backed "
2872
"web applications. It is optimized for sustainable productivity of the "
2873
"programmer since it lets the programmer to write code by favouring "
2874
"convention over configuration."
2875
msgstr ""
2876
2877
#: serverguide/C/web-servers.xml:941(para)
2878
msgid ""
2879
"Before installing <application>Rails</application> you should install "
2880
"<application>Apache</application> and <application>MySQL</application>. To "
2881
"install the <application>Apache</application> package, please refer to <xref "
2882
"linkend=\"httpd\"/>. For instructions on installing "
2883
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
2884
msgstr ""
2885
2886
#: serverguide/C/web-servers.xml:949(para)
2887
msgid ""
2888
"Once you have <application>Apache</application> and "
2889
"<application>MySQL</application> packages installed, you are ready to "
2890
"install <application>Ruby on Rails</application> package."
2891
msgstr ""
2892
2893
#: serverguide/C/web-servers.xml:956(para)
2894
msgid ""
2895
"To install the <application>Ruby</application> base packages and "
2896
"<application>Ruby on Rails</application>, you can enter the following "
2897
"command in the terminal prompt:"
2898
msgstr ""
2899
2900
#: serverguide/C/web-servers.xml:962(command)
2901
msgid "sudo apt-get install rails"
2902
msgstr ""
2903
2904
#: serverguide/C/web-servers.xml:968(para)
2905
msgid ""
2906
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
2907
"configuration file to setup your domains."
2908
msgstr ""
2909
2910
#: serverguide/C/web-servers.xml:972(para)
2911
msgid ""
2912
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
2913
msgstr ""
2914
2915
#: serverguide/C/web-servers.xml:976(programlisting)
2916
#, no-wrap
2917
msgid ""
2918
"\n"
2919
"DocumentRoot /path/to/rails/application/public\n"
2920
msgstr ""
2921
2922
#: serverguide/C/web-servers.xml:979(para)
2923
msgid ""
2924
"Next, change the <Directory \"/path/to/rails/application/public\"> "
2925
"directive:"
2926
msgstr ""
2927
2928
#: serverguide/C/web-servers.xml:983(programlisting)
2929
#, no-wrap
2930
msgid ""
2931
"\n"
2932
"<Directory \"/path/to/rails/application/public\">\n"
2933
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
2934
" AllowOverride All\n"
2935
" Order allow,deny\n"
2936
" allow from all\n"
2937
" AddHandler cgi-script .cgi\n"
2938
"</Directory>\n"
2939
msgstr ""
2940
2941
#: serverguide/C/web-servers.xml:993(para)
2942
msgid ""
2943
"You should also enable the <application>mod_rewrite</application> module for "
2944
"Apache. To enable <application>mod_rewrite</application> module, please "
2945
"enter the following command in a terminal prompt:"
2946
msgstr ""
2947
2948
#: serverguide/C/web-servers.xml:999(command)
2949
msgid "sudo a2enmod rewrite"
2950
msgstr ""
2951
2952
#: serverguide/C/web-servers.xml:1002(para)
2953
msgid ""
2954
"Finally you will need to change the ownership of the "
2955
"<filename>/path/to/rails/application/public</filename> and "
2956
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
2957
"used to run the <application>Apache</application> process:"
2958
msgstr ""
2959
2960
#: serverguide/C/web-servers.xml:1008(command)
2961
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
2962
msgstr ""
2963
2964
#: serverguide/C/web-servers.xml:1009(command)
2965
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
2966
msgstr ""
2967
2968
#: serverguide/C/web-servers.xml:1012(para)
2969
msgid ""
2970
"That's it! Now you have your Server ready for your <application>Ruby on "
2971
"Rails</application> applications."
2972
msgstr ""
2973
2974
#: serverguide/C/web-servers.xml:1021(para)
2975
msgid ""
2976
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
2977
"for more information."
2978
msgstr ""
2979
2980
#: serverguide/C/web-servers.xml:1026(para)
2981
msgid ""
2982
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
2983
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
2984
"resource."
2985
msgstr ""
2986
2987
#: serverguide/C/web-servers.xml:1032(para)
2988
msgid ""
2989
"Another place for more information is the <ulink "
2990
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
2991
"Wiki</ulink> page."
2992
msgstr ""
2993
2994
#: serverguide/C/web-servers.xml:1043(title)
2995
msgid "Apache Tomcat"
2996
msgstr ""
2997
2998
#: serverguide/C/web-servers.xml:1044(para)
2999
msgid ""
3000
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3001
"JSP (Java Server Pages) web applications."
3002
msgstr ""
3003
3004
#: serverguide/C/web-servers.xml:1046(para)
3005
msgid ""
3006
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3007
"different ways of running Tomcat. You can install them as a classic unique "
3008
"system-wide instance, that will be started at boot time and will run as the "
3009
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3010
"will run with your own user rights, and that you should start and stop by "
3011
"yourself. This second way is particularly useful in a development server "
3012
"context where multiple users need to test on their own private Tomcat "
3013
"instances."
3014
msgstr ""
3015
3016
#: serverguide/C/web-servers.xml:1056(title)
3017
msgid "System-wide installation"
3018
msgstr ""
3019
3020
#: serverguide/C/web-servers.xml:1057(para)
3021
msgid ""
3022
"To install the <application>Tomcat</application> server, you can enter the "
3023
"following command in the terminal prompt:"
3024
msgstr ""
3025
3026
#: serverguide/C/web-servers.xml:1060(command)
3027
msgid "sudo apt-get install tomcat6"
3028
msgstr ""
3029
3030
#: serverguide/C/web-servers.xml:1062(para)
3031
msgid ""
3032
"This will install a Tomcat server with just a default ROOT webapp that "
3033
"displays a minimal \"It works\" page by default."
3034
msgstr ""
3035
3036
#: serverguide/C/web-servers.xml:1068(para)
3037
msgid ""
3038
"Tomcat configuration files can be found in "
3039
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
3040
"will be described here, please see <ulink "
3041
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
3042
"documentation</ulink> for more."
3043
msgstr ""
3044
3045
#: serverguide/C/web-servers.xml:1074(title)
3046
msgid "Changing default ports"
3047
msgstr ""
3048
3049
#: serverguide/C/web-servers.xml:1075(para)
3050
msgid ""
3051
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
3052
"connector on port 8009. You might want to change those default ports to "
3053
"avoid conflict with another server on the system. This is done by changing "
3054
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
3055
msgstr ""
3056
3057
#: serverguide/C/web-servers.xml:1080(programlisting)
3058
#, no-wrap
3059
msgid ""
3060
"\n"
3061
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
3062
" connectionTimeout=\"20000\" \n"
3063
" redirectPort=\"8443\" />\n"
3064
"...\n"
3065
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
3066
"/>\n"
3067
msgstr ""
3068
3069
#: serverguide/C/web-servers.xml:1089(title)
3070
msgid "Changing JVM used"
3071
msgstr ""
3072
3073
#: serverguide/C/web-servers.xml:1090(para)
3074
msgid ""
3075
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
3076
"then try some other JVMs. If you have various JVMs installed, you can set "
3077
"which should be used by setting JAVA_HOME in "
3078
"<filename>/etc/default/tomcat6</filename>:"
3079
msgstr ""
3080
3081
#: serverguide/C/web-servers.xml:1094(programlisting)
3082
#, no-wrap
3083
msgid ""
3084
"\n"
3085
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
3086
msgstr ""
3087
3088
#: serverguide/C/web-servers.xml:1099(title)
3089
msgid "Declaring users and roles"
3090
msgstr ""
3091
3092
#: serverguide/C/web-servers.xml:1100(para)
3093
msgid ""
3094
"Usernames, passwords and roles (groups) can be defined centrally in a "
3095
"Servlet container. In Tomcat 6.0 this is done in the "
3096
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
3097
msgstr ""
3098
3099
#: serverguide/C/web-servers.xml:1103(programlisting)
3100
#, no-wrap
3101
msgid ""
3102
"\n"
3103
"<role rolename=\"admin\"/>\n"
3104
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
3105
msgstr ""
3106
3107
#: serverguide/C/web-servers.xml:1111(title)
3108
msgid "Using Tomcat standard webapps"
3109
msgstr ""
3110
3111
#: serverguide/C/web-servers.xml:1112(para)
3112
msgid ""
3113
"Tomcat is shipped with webapps that you can install for documentation, "
3114
"administration or demo purposes."
3115
msgstr ""
3116
3117
#: serverguide/C/web-servers.xml:1115(title)
3118
msgid "Tomcat documentation"
3119
msgstr ""
3120
3121
#: serverguide/C/web-servers.xml:1116(para)
3122
msgid ""
3123
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3124
"documentation, packaged as a webapp that you can access by default at "
3125
"http://yourserver:8080/docs. You can install it by entering the following "
3126
"command in the terminal prompt:"
3127
msgstr ""
3128
3129
#: serverguide/C/web-servers.xml:1121(command)
3130
msgid "sudo apt-get install tomcat6-docs"
3131
msgstr ""
3132
3133
#: serverguide/C/web-servers.xml:1125(title)
3134
msgid "Tomcat administration webapps"
3135
msgstr ""
3136
3137
#: serverguide/C/web-servers.xml:1126(para)
3138
msgid ""
3139
"The <application>tomcat6-admin</application> package contains two webapps "
3140
"that can be used to administer the Tomcat server using a web interface. You "
3141
"can install them by entering the following command in the terminal prompt:"
3142
msgstr ""
3143
3144
#: serverguide/C/web-servers.xml:1131(command)
3145
msgid "sudo apt-get install tomcat6-admin"
3146
msgstr ""
3147
3148
#: serverguide/C/web-servers.xml:1133(para)
3149
msgid ""
3150
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3151
"access by default at http://yourserver:8080/manager/html. It is primarily "
3152
"used to get server status and restart webapps."
3153
msgstr ""
3154
3155
#: serverguide/C/web-servers.xml:1136(para)
3156
msgid ""
3157
"Access to the <emphasis>manager</emphasis> application is protected by "
3158
"default: you need to define a user with the role \"manager\" in "
3159
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3160
msgstr ""
3161
3162
#: serverguide/C/web-servers.xml:1140(para)
3163
msgid ""
3164
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3165
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3166
"used to create virtual hosts dynamically."
3167
msgstr ""
3168
3169
#: serverguide/C/web-servers.xml:1144(para)
3170
msgid ""
3171
"Access to the <emphasis>host-manager</emphasis> application is also "
3172
"protected by default: you need to define a user with the role \"admin\" in "
3173
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3174
msgstr ""
3175
3176
#: serverguide/C/web-servers.xml:1149(para)
3177
msgid ""
3178
"For security reasons, the tomcat6 user cannot write to the "
3179
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3180
"these admin webapps (application deployment, virtual host creation) need "
3181
"write access to that directory. If you want to use these features execute "
3182
"the following, to give users in the tomcat6 group the necessary rights:"
3183
msgstr ""
3184
3185
#: serverguide/C/web-servers.xml:1156(command)
3186
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3187
msgstr ""
3188
3189
#: serverguide/C/web-servers.xml:1157(command)
3190
msgid "sudo chmod -R g+w /etc/tomcat6"
3191
msgstr ""
3192
3193
#: serverguide/C/web-servers.xml:1162(title)
3194
msgid "Tomcat examples webapps"
3195
msgstr ""
3196
3197
#: serverguide/C/web-servers.xml:1163(para)
3198
msgid ""
3199
"The <application>tomcat6-examples</application> package contains two webapps "
3200
"that can be used to test or demonstrate Servlets and JSP features, which you "
3201
"can access them by default at http://yourserver:8080/examples. You can "
3202
"install them by entering the following command in the terminal prompt:"
3203
msgstr ""
3204
3205
#: serverguide/C/web-servers.xml:1169(command)
3206
msgid "sudo apt-get install tomcat6-examples"
3207
msgstr ""
3208
3209
#: serverguide/C/web-servers.xml:1175(title)
3210
msgid "Using private instances"
3211
msgstr ""
3212
3213
#: serverguide/C/web-servers.xml:1176(para)
3214
msgid ""
3215
"Tomcat is heavily used in development and testing scenarios where using a "
3216
"single system-wide instance doesn't meet the requirements of multiple users "
3217
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3218
"help deploy your own user-oriented instances, allowing every user on a "
3219
"system to run (without root rights) separate private instances while still "
3220
"using the system-installed libraries."
3221
msgstr ""
3222
3223
#: serverguide/C/web-servers.xml:1183(para)
3224
msgid ""
3225
"It is possible to run the system-wide instance and the private instances in "
3226
"parallel, as long as they do not use the same TCP ports."
3227
msgstr ""
3228
3229
#: serverguide/C/web-servers.xml:1187(title)
3230
msgid "Installing private instance support"
3231
msgstr ""
3232
3233
#: serverguide/C/web-servers.xml:1188(para)
3234
msgid ""
3235
"You can install everything necessary to run private instances by entering "
3236
"the following command in the terminal prompt:"
3237
msgstr ""
3238
3239
#: serverguide/C/web-servers.xml:1191(command)
3240
msgid "sudo apt-get install tomcat6-user"
3241
msgstr ""
3242
3243
#: serverguide/C/web-servers.xml:1195(title)
3244
msgid "Creating a private instance"
3245
msgstr ""
3246
3247
#: serverguide/C/web-servers.xml:1196(para)
3248
msgid ""
3249
"You can create a private instance directory by entering the following "
3250
"command in the terminal prompt:"
3251
msgstr ""
3252
3253
#: serverguide/C/web-servers.xml:1199(command)
3254
msgid "tomcat6-instance-create my-instance"
3255
msgstr ""
3256
3257
#: serverguide/C/web-servers.xml:1201(para)
3258
msgid ""
3259
"This will create a new <filename>my-instance</filename> directory with all "
3260
"the necessary subdirectories and scripts. You can for example install your "
3261
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3262
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3263
"are deployed by default."
3264
msgstr ""
3265
3266
#: serverguide/C/web-servers.xml:1209(title)
3267
msgid "Configuring your private instance"
3268
msgstr ""
3269
3270
#: serverguide/C/web-servers.xml:1210(para)
3271
msgid ""
3272
"You will find the classic Tomcat configuration files for your private "
3273
"instance in the <filename>conf/</filename> subdirectory. You should for "
3274
"example certainly edit the <filename>conf/server.xml</filename> file to "
3275
"change the default ports used by your private Tomcat instance to avoid "
3276
"conflict with other instances that might be running."
3277
msgstr ""
3278
3279
#: serverguide/C/web-servers.xml:1218(title)
3280
msgid "Starting/stopping your private instance"
3281
msgstr ""
3282
3283
#: serverguide/C/web-servers.xml:1219(para)
3284
msgid ""
3285
"You can start your private instance by entering the following command in the "
3286
"terminal prompt (supposing your instance is located in the <filename>my-"
3287
"instance</filename> directory):"
3288
msgstr ""
3289
3290
#: serverguide/C/web-servers.xml:1223(command)
3291
msgid "my-instance/bin/startup.sh"
3292
msgstr ""
3293
3294
#: serverguide/C/web-servers.xml:1225(para)
3295
msgid ""
3296
"You should check the <filename>logs/</filename> subdirectory for any error. "
3297
"If you have a <emphasis>java.net.BindException: Address already in "
3298
"use<null>:8080</emphasis> error, it means that the port you're using "
3299
"is already taken and that you should change it."
3300
msgstr ""
3301
3302
#: serverguide/C/web-servers.xml:1230(para)
3303
msgid ""
3304
"You can stop your instance by entering the following command in the terminal "
3305
"prompt (supposing your instance is located in the <filename>my-"
3306
"instance</filename> directory):"
3307
msgstr ""
3308
3309
#: serverguide/C/web-servers.xml:1234(command)
3310
msgid "my-instance/bin/shutdown.sh"
3311
msgstr ""
3312
3313
#: serverguide/C/web-servers.xml:1243(para)
3314
msgid ""
3315
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3316
"website for more information."
3317
msgstr ""
3318
3319
#: serverguide/C/web-servers.xml:1248(para)
3320
msgid ""
3321
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3322
"Definitive Guide</ulink> is a good resource for building web applications "
3323
"with Tomcat."
3324
msgstr ""
3325
3326
#: serverguide/C/web-servers.xml:1254(para)
3327
msgid ""
3328
"For additional books see the <ulink "
3329
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3330
"page."
3331
msgstr ""
3332
3333
#: serverguide/C/web-servers.xml:1259(para)
3334
msgid ""
3335
"Also, see the<ulink "
3336
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3337
"Tomcat</ulink> page."
3338
msgstr ""
3339
3340
#: serverguide/C/vpn.xml:13(title)
3341
msgid "VPN"
3342
msgstr ""
3343
3344
#: serverguide/C/vpn.xml:15(para)
3345
msgid ""
3346
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3347
"network connection between two or more networks. There are several ways to "
3348
"create a VPN using software as well as dedicated hardware appliances. This "
3349
"chapter will cover installing and configuring "
3350
"<application>OpenVPN</application> to create a VPN between two servers."
3351
msgstr ""
3352
3353
#: serverguide/C/vpn.xml:23(title)
3354
msgid "OpenVPN"
3355
msgstr ""
3356
3357
#: serverguide/C/vpn.xml:25(para)
3358
msgid ""
3359
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3360
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3361
"clients through a bridge interface on the VPN server. This guide will assume "
3362
"that one VPN node, the server in this case, has a bridge interface "
3363
"configured. For more information on setting up a bridge see <xref "
3364
"linkend=\"bridging\"/>."
3365
msgstr ""
3366
3367
#: serverguide/C/vpn.xml:35(para)
3368
msgid "To install <application>openvpn</application> in a terminal enter:"
3369
msgstr ""
3370
3371
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3372
msgid "sudo apt-get install openvpn"
3373
msgstr ""
3374
3375
#: serverguide/C/vpn.xml:45(title)
3376
msgid "Server Certificates"
3377
msgstr ""
3378
3379
#: serverguide/C/vpn.xml:47(para)
3380
msgid ""
3381
"Now that the <application>openvpn</application> package is installed, the "
3382
"certificates for the VPN server need to be created."
3383
msgstr ""
3384
3385
#: serverguide/C/vpn.xml:52(para)
3386
msgid ""
3387
"First, copy the <filename>easy-rsa</filename> directory to "
3388
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3389
"scripts will not be lost when the package is updated. You will also need to "
3390
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3391
"the current user permission to create files. From a terminal enter:"
3392
msgstr ""
3393
3394
#: serverguide/C/vpn.xml:59(command)
3395
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3396
msgstr ""
3397
3398
#: serverguide/C/vpn.xml:60(command)
3399
msgid ""
3400
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3401
"rsa/"
3402
msgstr ""
3403
3404
#: serverguide/C/vpn.xml:61(command)
3405
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3406
msgstr ""
3407
3408
#: serverguide/C/vpn.xml:64(para)
3409
msgid ""
3410
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3411
"following to your environment:"
3412
msgstr ""
3413
3414
#: serverguide/C/vpn.xml:68(programlisting)
3415
#, no-wrap
3416
msgid ""
3417
"\n"
3418
"export KEY_COUNTRY=\"US\"\n"
3419
"export KEY_PROVINCE=\"NC\"\n"
3420
"export KEY_CITY=\"Winston-Salem\"\n"
3421
"export KEY_ORG=\"Example Company\"\n"
3422
"export KEY_EMAIL=\"steve@example.com\"\n"
3423
msgstr ""
3424
3425
#: serverguide/C/vpn.xml:76(para)
3426
msgid "Enter the following to create the server certificates:"
3427
msgstr ""
3428
3429
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3430
msgid "cd /etc/openvpn/easy-rsa/"
3431
msgstr ""
3432
3433
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3434
msgid "source vars"
3435
msgstr ""
3436
3437
#: serverguide/C/vpn.xml:83(command)
3438
msgid "./clean-all"
3439
msgstr ""
3440
3441
#: serverguide/C/vpn.xml:84(command)
3442
msgid "./build-dh"
3443
msgstr ""
3444
3445
#: serverguide/C/vpn.xml:85(command)
3446
msgid "./pkitool --initca"
3447
msgstr ""
3448
3449
#: serverguide/C/vpn.xml:86(command)
3450
msgid "./pkitool --server server"
3451
msgstr ""
3452
3453
#: serverguide/C/vpn.xml:87(command)
3454
msgid "cd keys"
3455
msgstr ""
3456
3457
#: serverguide/C/vpn.xml:88(command)
3458
msgid "openvpn --genkey --secret ta.key"
3459
msgstr ""
3460
3461
#: serverguide/C/vpn.xml:89(command)
3462
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3463
msgstr ""
3464
3465
#: serverguide/C/vpn.xml:94(title)
3466
msgid "Client Certificates"
3467
msgstr ""
3468
3469
#: serverguide/C/vpn.xml:96(para)
3470
msgid ""
3471
"The VPN client will also need a certificate to authenticate itself to the "
3472
"server. To create the certificate, enter the following in a terminal:"
3473
msgstr ""
3474
3475
#: serverguide/C/vpn.xml:104(command)
3476
msgid "./pkitool hostname"
3477
msgstr ""
3478
3479
#: serverguide/C/vpn.xml:108(para)
3480
msgid ""
3481
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3482
"machine connecting to the VPN."
3483
msgstr ""
3484
3485
#: serverguide/C/vpn.xml:113(para)
3486
msgid "Copy the following files to the client:"
3487
msgstr ""
3488
3489
#: serverguide/C/vpn.xml:118(para)
3490
msgid "/etc/openvpn/ca.crt"
3491
msgstr ""
3492
3493
#: serverguide/C/vpn.xml:119(para)
3494
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3495
msgstr ""
3496
3497
#: serverguide/C/vpn.xml:120(para)
3498
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3499
msgstr ""
3500
3501
#: serverguide/C/vpn.xml:121(para)
3502
msgid "/etc/openvpn/ta.key"
3503
msgstr ""
3504
3505
#: serverguide/C/vpn.xml:125(para)
3506
msgid ""
3507
"Remember to adjust the above file names for your client machine's "
3508
"<emphasis>hostname</emphasis>."
3509
msgstr ""
3510
3511
#: serverguide/C/vpn.xml:130(para)
3512
msgid ""
3513
"It is best to use a secure method to copy the certificate and key files. The "
3514
"<application>scp</application> utility is a good choice, but copying the "
3515
"files to removable media then to the client, also works well."
3516
msgstr ""
3517
3518
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3519
msgid "Server Configuration"
3520
msgstr ""
3521
3522
#: serverguide/C/vpn.xml:143(para)
3523
msgid ""
3524
"Now configure the <application>openvpn</application> server by creating "
3525
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3526
"terminal enter:"
3527
msgstr ""
3528
3529
#: serverguide/C/vpn.xml:149(command)
3530
msgid ""
3531
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3532
"/etc/openvpn/"
3533
msgstr ""
3534
3535
#: serverguide/C/vpn.xml:150(command)
3536
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3537
msgstr ""
3538
3539
#: serverguide/C/vpn.xml:153(para)
3540
msgid ""
3541
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3542
"options to:"
3543
msgstr ""
3544
3545
#: serverguide/C/vpn.xml:157(programlisting)
3546
#, no-wrap
3547
msgid ""
3548
"\n"
3549
"local 172.18.100.101\n"
3550
"dev tap0\n"
3551
"up \"/etc/openvpn/up.sh br0\"\n"
3552
"down \"/etc/openvpn/down.sh br0\"\n"
3553
";server 10.8.0.0 255.255.255.0\n"
3554
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3555
"push \"route 172.18.100.1 255.255.255.0\"\n"
3556
"push \"dhcp-option DNS 172.18.100.20\"\n"
3557
"push \"dhcp-option DOMAIN example.com\"\n"
3558
"tls-auth ta.key 0 # This file is secret\n"
3559
"user nobody\n"
3560
"group nogroup\n"
3561
msgstr ""
3562
3563
#: serverguide/C/vpn.xml:174(para)
3564
msgid ""
3565
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3566
msgstr ""
3567
3568
#: serverguide/C/vpn.xml:179(para)
3569
msgid ""
3570
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3571
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3572
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3573
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3574
"to clients."
3575
msgstr ""
3576
3577
#: serverguide/C/vpn.xml:186(para)
3578
msgid ""
3579
"<emphasis>push</emphasis>: are directives to add networking options for "
3580
"clients."
3581
msgstr ""
3582
3583
#: serverguide/C/vpn.xml:191(para)
3584
msgid ""
3585
"<emphasis>user and group</emphasis>: configure which user and group the "
3586
"<application>openvpn</application> daemon executes as."
3587
msgstr ""
3588
3589
#: serverguide/C/vpn.xml:198(para)
3590
msgid ""
3591
"Replace all IP addresses and domain names above with those of your network."
3592
msgstr ""
3593
3594
#: serverguide/C/vpn.xml:203(para)
3595
msgid ""
3596
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3597
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3598
msgstr ""
3599
3600
#: serverguide/C/vpn.xml:207(programlisting)
3601
#, no-wrap
3602
msgid ""
3603
"\n"
3604
"#!/bin/sh\n"
3605
"\n"
3606
"BR=$1\n"
3607
"DEV=$2\n"
3608
"MTU=$3\n"
3609
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3610
"/usr/sbin/brctl addif $BR $DEV\n"
3611
msgstr ""
3612
3613
#: serverguide/C/vpn.xml:217(para)
3614
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3615
msgstr ""
3616
3617
#: serverguide/C/vpn.xml:221(programlisting)
3618
#, no-wrap
3619
msgid ""
3620
"\n"
3621
"#!/bin/sh\n"
3622
"\n"
3623
"BR=$1\n"
3624
"DEV=$2\n"
3625
"\n"
3626
"/usr/sbin/brctl delif $BR $DEV\n"
3627
"/sbin/ifconfig $DEV down\n"
3628
msgstr ""
3629
3630
#: serverguide/C/vpn.xml:231(para)
3631
msgid "Then make them executable:"
3632
msgstr ""
3633
3634
#: serverguide/C/vpn.xml:236(command)
3635
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3636
msgstr ""
3637
3638
#: serverguide/C/vpn.xml:237(command)
3639
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3640
msgstr ""
3641
3642
#: serverguide/C/vpn.xml:240(para)
3643
msgid ""
3644
"After configuring the server, restart <application>openvpn</application> by "
3645
"entering:"
3646
msgstr ""
3647
3648
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3649
msgid "sudo /etc/init.d/openvpn restart"
3650
msgstr ""
3651
3652
#: serverguide/C/vpn.xml:250(title)
3653
msgid "Client Configuration"
3654
msgstr ""
3655
3656
#: serverguide/C/vpn.xml:252(para)
3657
msgid "First, install <application>openvpn</application> on the client:"
3658
msgstr ""
3659
3660
#: serverguide/C/vpn.xml:260(para)
3661
msgid ""
3662
"Then with the server configured and the client certificates copied to the "
3663
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3664
"file by copying the example. In a terminal on the client machine enter:"
3665
msgstr ""
3666
3667
#: serverguide/C/vpn.xml:266(command)
3668
msgid ""
3669
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3670
"/etc/openvpn"
3671
msgstr ""
3672
3673
#: serverguide/C/vpn.xml:269(para)
3674
msgid ""
3675
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3676
"following options:"
3677
msgstr ""
3678
3679
#: serverguide/C/vpn.xml:273(programlisting)
3680
#, no-wrap
3681
msgid ""
3682
"\n"
3683
"dev tap\n"
3684
"remote vpn.example.com 1194\n"
3685
"cert hostname.crt\n"
3686
"key hostname.key\n"
3687
"tls-auth ta.key 1\n"
3688
msgstr ""
3689
3690
#: serverguide/C/vpn.xml:282(para)
3691
msgid ""
3692
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3693
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3694
"key filenames."
3695
msgstr ""
3696
3697
#: serverguide/C/vpn.xml:288(para)
3698
msgid "Finally, restart <application>openvpn</application>:"
3699
msgstr ""
3700
3701
#: serverguide/C/vpn.xml:296(para)
3702
msgid "You should now be able to connect to the remote LAN through the VPN."
3703
msgstr ""
3704
3705
#: serverguide/C/vpn.xml:307(para)
3706
msgid ""
3707
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3708
"additional information."
3709
msgstr ""
3710
3711
#: serverguide/C/vpn.xml:312(para)
3712
msgid ""
3713
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3714
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3715
msgstr ""
3716
3717
#: serverguide/C/vpn.xml:318(para)
3718
msgid ""
3719
"Another source of further information is the <ulink "
3720
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3721
"OpenVPN</ulink> page."
3722
msgstr ""
3723
3724
#: serverguide/C/virtualization.xml:13(title)
3725
msgid "Virtualization"
3726
msgstr ""
3727
3728
#: serverguide/C/virtualization.xml:14(para)
3729
msgid ""
3730
"Virtualization is being adopted in many different environments and "
3731
"situations. If you are a developer, virtualization can provide you with a "
3732
"contained environment where you can safely do almost any sort of development "
3733
"safe from messing up your main working environment. If you are a systems "
3734
"administrator, you can use virtualization to more easily separate your "
3735
"services and move them around based on demand."
3736
msgstr ""
3737
3738
#: serverguide/C/virtualization.xml:20(para)
3739
msgid ""
3740
"The default virtualization technology supported in Ubuntu is "
3741
"<application>KVM</application>, a technology that takes advantage of "
3742
"virtualization extensions built into Intel and AMD hardware. For hardware "
3743
"without virtualization extensions <application>Xen</application> and "
3744
"<application>Qemu</application> are popular solutions."
3745
msgstr ""
3746
3747
#: serverguide/C/virtualization.xml:27(title)
3748
msgid "libvirt"
3749
msgstr ""
3750
3751
#: serverguide/C/virtualization.xml:28(para)
3752
msgid ""
3753
"The <application>libvirt</application> library is used to interface with "
3754
"different virtualization technologies. Before getting started with "
3755
"<application>libvirt</application> it is best to make sure your hardware "
3756
"supports the necessary virtualization extensions for "
3757
"<application>KVM</application>. Enter the following from a terminal prompt:"
3758
msgstr ""
3759
3760
#: serverguide/C/virtualization.xml:35(command)
3761
msgid "kvm-ok"
3762
msgstr ""
3763
3764
#: serverguide/C/virtualization.xml:37(para)
3765
msgid ""
3766
"A message will be printed informing you if your CPU "
3767
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3768
"virtualization."
3769
msgstr ""
3770
3771
#: serverguide/C/virtualization.xml:41(para)
3772
msgid ""
3773
"On most computer whose processor supports virtualization, it is necessary to "
3774
"activate an option in the BIOS to enable it."
3775
msgstr ""
3776
3777
#: serverguide/C/virtualization.xml:47(title)
3778
msgid "Virtual Networking"
3779
msgstr ""
3780
3781
#: serverguide/C/virtualization.xml:49(para)
3782
msgid ""
3783
"There are a few different ways to allow a virtual machine access to the "
3784
"external network. The default virtual network configuration is "
3785
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3786
"traffic is NATed through the host interface to the outside network."
3787
msgstr ""
3788
3789
#: serverguide/C/virtualization.xml:54(para)
3790
msgid ""
3791
"To enable external hosts to directly access services on virtual machines a "
3792
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3793
"interfaces to connect to the outside network through the physical interface, "
3794
"making them appear as normal hosts to the rest of the network. For "
3795
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3796
msgstr ""
3797
3798
#: serverguide/C/virtualization.xml:63(para)
3799
msgid "To install the necessary packages, from a terminal prompt enter:"
3800
msgstr ""
3801
3802
#: serverguide/C/virtualization.xml:67(command)
3803
msgid "sudo apt-get install kvm libvirt-bin"
3804
msgstr ""
3805
3806
#: serverguide/C/virtualization.xml:69(para)
3807
msgid ""
3808
"After installing <application>libvirt-bin</application>, the user used to "
3809
"manage virtual machines will need to be added to the "
3810
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3811
"the advanced networking options."
3812
msgstr ""
3813
3814
#: serverguide/C/virtualization.xml:73(para)
3815
msgid "In a terminal enter:"
3816
msgstr ""
3817
3818
#: serverguide/C/virtualization.xml:77(command)
3819
msgid "sudo adduser $USER libvirtd"
3820
msgstr ""
3821
3822
#: serverguide/C/virtualization.xml:80(para)
3823
msgid ""
3824
"If the user chosen is the current user, you will need to log out and back in "
3825
"for the new group membership to take effect."
3826
msgstr ""
3827
3828
#: serverguide/C/virtualization.xml:84(para)
3829
msgid ""
3830
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3831
"Installing a virtual machine follows the same process as installing the "
3832
"operating system directly on the hardware. You either need a way to automate "
3833
"the installation, or a keyboard and monitor will need to be attached to the "
3834
"physical machine."
3835
msgstr ""
3836
3837
#: serverguide/C/virtualization.xml:89(para)
3838
msgid ""
3839
"In the case of virtual machines a Graphical User Interface (GUI) is "
3840
"analogous to using a physical keyboard and mouse. Instead of installing a "
3841
"GUI the <application>virt-viewer</application> application can be used to "
3842
"connect to a virtual machine's console using <application>VNC</application>. "
3843
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3844
msgstr ""
3845
3846
#: serverguide/C/virtualization.xml:94(para)
3847
msgid ""
3848
"There are several ways to automate the Ubuntu installation process, for "
3849
"example using preseeds, kickstart, etc. Refer to the <ulink "
3850
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3851
"Installation Guide</ulink> for details."
3852
msgstr ""
3853
3854
#: serverguide/C/virtualization.xml:98(para)
3855
msgid ""
3856
"Yet another way to install an Ubuntu virtual machine is to use "
3857
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
3858
"builder</application> allows you to setup advanced partitions, execute "
3859
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
3860
"vmbuilder\"/>"
3861
msgstr ""
3862
3863
#: serverguide/C/virtualization.xml:104(title)
3864
msgid "virt-install"
3865
msgstr ""
3866
3867
#: serverguide/C/virtualization.xml:105(para)
3868
msgid ""
3869
"<application>virt-install</application> is part of the <application>python-"
3870
"virtinst</application> package. To install it, from a terminal prompt enter:"
3871
msgstr ""
3872
3873
#: serverguide/C/virtualization.xml:109(command)
3874
msgid "sudo apt-get install python-virtinst"
3875
msgstr ""
3876
3877
#: serverguide/C/virtualization.xml:111(para)
3878
msgid ""
3879
"There are several options available when using <application>virt-"
3880
"install</application>. For example:"
3881
msgstr ""
3882
3883
#: serverguide/C/virtualization.xml:115(command)
3884
msgid ""
3885
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
3886
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
3887
msgstr ""
3888
3889
#: serverguide/C/virtualization.xml:122(para)
3890
msgid ""
3891
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
3892
"be <emphasis>web_devel</emphasis> in this example."
3893
msgstr ""
3894
3895
#: serverguide/C/virtualization.xml:127(para)
3896
msgid ""
3897
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
3898
"machine will use."
3899
msgstr ""
3900
3901
#: serverguide/C/virtualization.xml:132(para)
3902
msgid ""
3903
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
3904
"disk which can be a file, partition, or logical volume. In this example a "
3905
"file named <filename>web_devel.img</filename>."
3906
msgstr ""
3907
3908
#: serverguide/C/virtualization.xml:138(para)
3909
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
3910
msgstr ""
3911
3912
#: serverguide/C/virtualization.xml:143(para)
3913
msgid ""
3914
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
3915
"file can be either an ISO file or the path to the host's CDROM device."
3916
msgstr ""
3917
3918
#: serverguide/C/virtualization.xml:149(para)
3919
msgid ""
3920
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
3921
"technologies."
3922
msgstr ""
3923
3924
#: serverguide/C/virtualization.xml:154(para)
3925
msgid ""
3926
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
3927
msgstr ""
3928
3929
#: serverguide/C/virtualization.xml:159(para)
3930
msgid ""
3931
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
3932
"virtual machine's console."
3933
msgstr ""
3934
3935
#: serverguide/C/virtualization.xml:164(para)
3936
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
3937
msgstr ""
3938
3939
#: serverguide/C/virtualization.xml:169(para)
3940
msgid ""
3941
"After launching <application>virt-install</application> you can connect to "
3942
"the virtual machine's console either locally using a GUI or with the "
3943
"<application>virt-viewer</application> utility."
3944
msgstr ""
3945
3946
#: serverguide/C/virtualization.xml:175(title)
3947
msgid "virt-clone"
3948
msgstr ""
3949
3950
#: serverguide/C/virtualization.xml:176(para)
3951
msgid ""
3952
"The <application>virt-clone</application> application can be used to copy "
3953
"one virtual machine to another. For example:"
3954
msgstr ""
3955
3956
#: serverguide/C/virtualization.xml:180(command)
3957
msgid ""
3958
"sudo virt-clone -o web_devel -n database_devel -f "
3959
"/path/to/database_devel.img --connect=qemu:///system"
3960
msgstr ""
3961
3962
#: serverguide/C/virtualization.xml:184(para)
3963
msgid "<emphasis>-o:</emphasis> original virtual machine."
3964
msgstr ""
3965
3966
#: serverguide/C/virtualization.xml:189(para)
3967
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
3968
msgstr ""
3969
3970
#: serverguide/C/virtualization.xml:194(para)
3971
msgid ""
3972
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
3973
"be used by the new virtual machine."
3974
msgstr ""
3975
3976
#: serverguide/C/virtualization.xml:199(para)
3977
msgid ""
3978
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
3979
msgstr ""
3980
3981
#: serverguide/C/virtualization.xml:204(para)
3982
msgid ""
3983
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
3984
"help troubleshoot problems with <application>virt-clone</application>."
3985
msgstr ""
3986
3987
#: serverguide/C/virtualization.xml:209(para)
3988
msgid ""
3989
"Replace <emphasis>web_devel</emphasis> and "
3990
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
3991
msgstr ""
3992
3993
#: serverguide/C/virtualization.xml:215(title)
3994
msgid "Virtual Machine Management"
3995
msgstr ""
3996
3997
#: serverguide/C/virtualization.xml:217(title)
3998
msgid "virsh"
3999
msgstr ""
4000
4001
#: serverguide/C/virtualization.xml:218(para)
4002
msgid ""
4003
"There are several utilities available to manage virtual machines and "
4004
"<application>libvirt</application>. The <application>virsh</application> "
4005
"utility can be used from the command line. Some examples:"
4006
msgstr ""
4007
4008
#: serverguide/C/virtualization.xml:224(para)
4009
msgid "To list running virtual machines:"
4010
msgstr ""
4011
4012
#: serverguide/C/virtualization.xml:228(command)
4013
msgid "virsh -c qemu:///system list"
4014
msgstr ""
4015
4016
#: serverguide/C/virtualization.xml:232(para)
4017
msgid "To start a virtual machine:"
4018
msgstr ""
4019
4020
#: serverguide/C/virtualization.xml:236(command)
4021
msgid "virsh -c qemu:///system start web_devel"
4022
msgstr ""
4023
4024
#: serverguide/C/virtualization.xml:240(para)
4025
msgid "Similarly, to start a virtual machine at boot:"
4026
msgstr ""
4027
4028
#: serverguide/C/virtualization.xml:244(command)
4029
msgid "virsh -c qemu:///system autostart web_devel"
4030
msgstr ""
4031
4032
#: serverguide/C/virtualization.xml:248(para)
4033
msgid "Reboot a virtual machine with:"
4034
msgstr ""
4035
4036
#: serverguide/C/virtualization.xml:252(command)
4037
msgid "virsh -c qemu:///system reboot web_devel"
4038
msgstr ""
4039
4040
#: serverguide/C/virtualization.xml:256(para)
4041
msgid ""
4042
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
4043
"order to be restored later. The following will save the virtual machine "
4044
"state into a file named according to the date:"
4045
msgstr ""
4046
4047
#: serverguide/C/virtualization.xml:261(command)
4048
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
4049
msgstr ""
4050
4051
#: serverguide/C/virtualization.xml:263(para)
4052
msgid "Once saved the virtual machine will no longer be running."
4053
msgstr ""
4054
4055
#: serverguide/C/virtualization.xml:268(para)
4056
msgid "A saved virtual machine can be restored using:"
4057
msgstr ""
4058
4059
#: serverguide/C/virtualization.xml:272(command)
4060
msgid "virsh -c qemu:///system restore web_devel-022708.state"
4061
msgstr ""
4062
4063
#: serverguide/C/virtualization.xml:276(para)
4064
msgid "To shutdown a virtual machine do:"
4065
msgstr ""
4066
4067
#: serverguide/C/virtualization.xml:280(command)
4068
msgid "virsh -c qemu:///system shutdown web_devel"
4069
msgstr ""
4070
4071
#: serverguide/C/virtualization.xml:284(para)
4072
msgid "A CDROM device can be mounted in a virtual machine by entering:"
4073
msgstr ""
4074
4075
#: serverguide/C/virtualization.xml:288(command)
4076
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
4077
msgstr ""
4078
4079
#: serverguide/C/virtualization.xml:293(para)
4080
msgid ""
4081
"In the above examples replace <emphasis>web_devel</emphasis> with the "
4082
"appropriate virtual machine name, and <filename>web_devel-"
4083
"022708.state</filename> with a descriptive file name."
4084
msgstr ""
4085
4086
#: serverguide/C/virtualization.xml:300(title)
4087
msgid "Virtual Machine Manager"
4088
msgstr ""
4089
4090
#: serverguide/C/virtualization.xml:301(para)
4091
msgid ""
4092
"The <application>virt-manager</application> package contains a graphical "
4093
"utility to manage local and remote virtual machines. To install virt-manager "
4094
"enter:"
4095
msgstr ""
4096
4097
#: serverguide/C/virtualization.xml:306(command)
4098
msgid "sudo apt-get install virt-manager"
4099
msgstr ""
4100
4101
#: serverguide/C/virtualization.xml:308(para)
4102
msgid ""
4103
"Since <application>virt-manager</application> requires a Graphical User "
4104
"Interface (GUI) environment it is recommended to be installed on a "
4105
"workstation or test machine instead of a production server. To connect to "
4106
"the local <application>libvirt</application> service enter:"
4107
msgstr ""
4108
4109
#: serverguide/C/virtualization.xml:314(command)
4110
msgid "virt-manager -c qemu:///system"
4111
msgstr ""
4112
4113
#: serverguide/C/virtualization.xml:316(para)
4114
msgid ""
4115
"You can connect to the <application>libvirt</application> service running on "
4116
"another host by entering the following in a terminal prompt:"
4117
msgstr ""
4118
4119
#: serverguide/C/virtualization.xml:320(command)
4120
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
4121
msgstr ""
4122
4123
#: serverguide/C/virtualization.xml:323(para)
4124
msgid ""
4125
"The above example assumes that <application>SSH</application> connectivity "
4126
"between the management system and virtnode1.mydomain.com has already been "
4127
"configured, and uses SSH keys for authentication. SSH "
4128
"<emphasis>keys</emphasis> are needed because "
4129
"<application>libvirt</application> sends the password prompt to another "
4130
"process. For details on configuring <application>SSH</application> see <xref "
4131
"linkend=\"openssh-server\"/>"
4132
msgstr ""
4133
4134
#: serverguide/C/virtualization.xml:333(title)
4135
msgid "Virtual Machine Viewer"
4136
msgstr ""
4137
4138
#: serverguide/C/virtualization.xml:334(para)
4139
msgid ""
4140
"The <application>virt-viewer</application> application allows you to connect "
4141
"to a virtual machine's console. <application>virt-viewer</application> does "
4142
"require a Graphical User Interface (GUI) to interface with the virtual "
4143
"machine."
4144
msgstr ""
4145
4146
#: serverguide/C/virtualization.xml:338(para)
4147
msgid ""
4148
"To install <application>virt-viewer</application> from a terminal enter:"
4149
msgstr ""
4150
4151
#: serverguide/C/virtualization.xml:342(command)
4152
msgid "sudo apt-get install virt-viewer"
4153
msgstr ""
4154
4155
#: serverguide/C/virtualization.xml:344(para)
4156
msgid ""
4157
"Once a virtual machine is installed and running you can connect to the "
4158
"virtual machine's console by using:"
4159
msgstr ""
4160
4161
#: serverguide/C/virtualization.xml:348(command)
4162
msgid "virt-viewer -c qemu:///system web_devel"
4163
msgstr ""
4164
4165
#: serverguide/C/virtualization.xml:350(para)
4166
msgid ""
4167
"Similar to <application>virt-manager</application>, <application>virt-"
4168
"viewer</application> can connect to a remote host using "
4169
"<emphasis>SSH</emphasis> with key authentication, as well:"
4170
msgstr ""
4171
4172
#: serverguide/C/virtualization.xml:355(command)
4173
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4174
msgstr ""
4175
4176
#: serverguide/C/virtualization.xml:357(para)
4177
msgid ""
4178
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4179
"appropriate virtual machine name."
4180
msgstr ""
4181
4182
#: serverguide/C/virtualization.xml:360(para)
4183
msgid ""
4184
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4185
"can also setup <application>SSH</application> access to the virtual machine. "
4186
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4187
"more details."
4188
msgstr ""
4189
4190
#: serverguide/C/virtualization.xml:369(para)
4191
msgid ""
4192
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4193
"for more details."
4194
msgstr ""
4195
4196
#: serverguide/C/virtualization.xml:374(para)
4197
msgid ""
4198
"For more information on <application>libvirt</application> see the <ulink "
4199
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4200
msgstr ""
4201
4202
#: serverguide/C/virtualization.xml:379(para)
4203
msgid ""
4204
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4205
"Manager</ulink> site has more information on <application>virt-"
4206
"manager</application> development."
4207
msgstr ""
4208
4209
#: serverguide/C/virtualization.xml:385(para)
4210
msgid ""
4211
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4212
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4213
"technology in Ubuntu."
4214
msgstr ""
4215
4216
#: serverguide/C/virtualization.xml:391(para)
4217
msgid ""
4218
"Another good resource is the <ulink "
4219
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4220
msgstr ""
4221
4222
#: serverguide/C/virtualization.xml:399(title)
4223
msgid "JeOS and vmbuilder"
4224
msgstr ""
4225
4226
#: serverguide/C/virtualization.xml:405(title)
4227
msgid "What is JeOS"
4228
msgstr ""
4229
4230
#: serverguide/C/virtualization.xml:407(para)
4231
msgid ""
4232
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4233
"variant of the Ubuntu Server operating system, configured specifically for "
4234
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4235
"only as an option either:"
4236
msgstr ""
4237
4238
#: serverguide/C/virtualization.xml:414(para)
4239
msgid ""
4240
"While installing from the Server Edition ISO (pressing "
4241
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4242
"installation\", which is the package selection equivalent to JeOS)."
4243
msgstr ""
4244
4245
#: serverguide/C/virtualization.xml:420(para)
4246
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4247
msgstr ""
4248
4249
#: serverguide/C/virtualization.xml:426(para)
4250
msgid ""
4251
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4252
"kernel that only contains the base elements needed to run within a "
4253
"virtualized environment."
4254
msgstr ""
4255
4256
#: serverguide/C/virtualization.xml:431(para)
4257
msgid ""
4258
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4259
"in the latest virtualization products from VMware. This combination of "
4260
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4261
"delivers a highly efficient use of server resources in large virtual "
4262
"deployments."
4263
msgstr ""
4264
4265
#: serverguide/C/virtualization.xml:437(para)
4266
msgid ""
4267
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4268
"can configure their supporting OS exactly as they require. They have the "
4269
"peace of mind that updates, whether for security or enhancement reasons, "
4270
"will be limited to the bare minimum of what is required in their specific "
4271
"environment. In turn, users deploying virtual appliances built on top of "
4272
"JeOS will have to go through fewer updates and therefore less maintenance "
4273
"than they would have had to with a standard full installation of a server."
4274
msgstr ""
4275
4276
#: serverguide/C/virtualization.xml:446(title)
4277
msgid "What is vmbuilder"
4278
msgstr ""
4279
4280
#: serverguide/C/virtualization.xml:448(para)
4281
msgid ""
4282
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4283
"will fetch the various package and build a virtual machine tailored for your "
4284
"needs in about a minute. vmbuilder is a script that automates the process of "
4285
"creating a ready to use Linux based VM. The currently supported hypervisors "
4286
"are KVM and Xen."
4287
msgstr ""
4288
4289
#: serverguide/C/virtualization.xml:454(para)
4290
msgid ""
4291
"You can pass command line options to add extra packages, remove packages, "
4292
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4293
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4294
"a local mirror, you can bootstrap a VM in less than a minute."
4295
msgstr ""
4296
4297
#: serverguide/C/virtualization.xml:460(para)
4298
msgid ""
4299
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4300
"vm-builder</application> started with little emphasis as a hack to help "
4301
"developers test their new code in a virtual machine without having to "
4302
"restart from scratch each time. As a few Ubuntu administrators started to "
4303
"notice this script, a few of them went on improving it and adapting it for "
4304
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4305
"virtualization specialist, not the golf player) decided to rewrite it from "
4306
"scratch for Intrepid as a python script with a few new design goals:"
4307
msgstr ""
4308
4309
#: serverguide/C/virtualization.xml:470(para)
4310
msgid "Develop it so that it can be reused by other distributions."
4311
msgstr ""
4312
4313
#: serverguide/C/virtualization.xml:475(para)
4314
msgid ""
4315
"Use a plugin mechanisms for all virtualization interactions so that others "
4316
"can easily add logic for other virtualization environments."
4317
msgstr ""
4318
4319
#: serverguide/C/virtualization.xml:480(para)
4320
msgid ""
4321
"Provide an easy to maintain web interface as an option to the command line "
4322
"interface."
4323
msgstr ""
4324
4325
#: serverguide/C/virtualization.xml:486(para)
4326
msgid "But the general principles and commands remain the same."
4327
msgstr ""
4328
4329
#: serverguide/C/virtualization.xml:493(title)
4330
msgid "Initial Setup"
4331
msgstr ""
4332
4333
#: serverguide/C/virtualization.xml:495(para)
4334
msgid ""
4335
"It is assumed that you have installed and configured "
4336
"<application>libvirt</application> and <application>KVM</application> "
4337
"locally on the machine you are using. For details on how to perform this, "
4338
"please refer to:"
4339
msgstr ""
4340
4341
#: serverguide/C/virtualization.xml:507(para)
4342
msgid ""
4343
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4344
"page."
4345
msgstr ""
4346
4347
#: serverguide/C/virtualization.xml:513(para)
4348
msgid ""
4349
"We also assume that you know how to use a text based text editor such as "
4350
"nano or vi. If you have not used any of them before, you can get an overview "
4351
"of the various text editors available by reading the <ulink "
4352
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4353
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4354
"principle should remain on other virtualization technologies."
4355
msgstr ""
4356
4357
#: serverguide/C/virtualization.xml:521(title)
4358
msgid "Install vmbuilder"
4359
msgstr ""
4360
4361
#: serverguide/C/virtualization.xml:523(para)
4362
msgid ""
4363
"The name of the package that we need to install is <application>python-vm-"
4364
"builder</application>. In a terminal prompt enter:"
4365
msgstr ""
4366
4367
#: serverguide/C/virtualization.xml:528(command)
4368
msgid "sudo apt-get install python-vm-builder"
4369
msgstr ""
4370
4371
#: serverguide/C/virtualization.xml:532(para)
4372
msgid ""
4373
"If you are running Hardy, you can still perform most of this using the older "
4374
"version of the package named <application>ubuntu-vm-builder</application>, "
4375
"there are only a few changes to the syntax of the tool."
4376
msgstr ""
4377
4378
#: serverguide/C/virtualization.xml:541(title)
4379
msgid "Defining Your Virtual Machine"
4380
msgstr ""
4381
4382
#: serverguide/C/virtualization.xml:543(para)
4383
msgid ""
4384
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4385
"are a few thing to consider:"
4386
msgstr ""
4387
4388
#: serverguide/C/virtualization.xml:549(para)
4389
msgid ""
4390
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4391
"will know how to extend disk size to fit their need, so either plan for a "
4392
"large virtual disk to allow for your appliance to grow, or explain fairly "
4393
"well in your documentation how to allocate more space. It might actually be "
4394
"a good idea to store data on some separate external storage."
4395
msgstr ""
4396
4397
#: serverguide/C/virtualization.xml:556(para)
4398
msgid ""
4399
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4400
"whatever you think is a safe minimum for your appliance."
4401
msgstr ""
4402
4403
#: serverguide/C/virtualization.xml:562(para)
4404
msgid ""
4405
"The <application>vmbuilder</application> command has 2 main parameters: the "
4406
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4407
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4408
"and can be found using the following command:"
4409
msgstr ""
4410
4411
#: serverguide/C/virtualization.xml:568(command)
4412
msgid "vmbuilder --help"
4413
msgstr ""
4414
4415
#: serverguide/C/virtualization.xml:572(title)
4416
msgid "Base Parameters"
4417
msgstr ""
4418
4419
#: serverguide/C/virtualization.xml:574(para)
4420
msgid ""
4421
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4422
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4423
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4424
msgstr ""
4425
4426
#: serverguide/C/virtualization.xml:580(command)
4427
msgid ""
4428
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4429
"libvirt qemu:///system"
4430
msgstr ""
4431
4432
#: serverguide/C/virtualization.xml:583(para)
4433
msgid ""
4434
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4435
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4436
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4437
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4438
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4439
"libvirt</emphasis> tells to inform the local virtualization environment to "
4440
"add the resulting VM to the list of available machines."
4441
msgstr ""
4442
4443
#: serverguide/C/virtualization.xml:591(para)
4444
msgid "Notes:"
4445
msgstr ""
4446
4447
#: serverguide/C/virtualization.xml:597(para)
4448
msgid ""
4449
"Because of the nature of operations performed by vmbuilder, it needs to have "
4450
"root privilege, hence the use of sudo."
4451
msgstr ""
4452
4453
#: serverguide/C/virtualization.xml:602(para)
4454
msgid ""
4455
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4456
"a 64 bit machine (--arch amd64)."
4457
msgstr ""
4458
4459
#: serverguide/C/virtualization.xml:607(para)
4460
msgid ""
4461
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4462
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4463
"use <emphasis>--flavour</emphasis> server instead."
4464
msgstr ""
4465
4466
#: serverguide/C/virtualization.xml:615(title)
4467
msgid "JeOS Installation Parameters"
4468
msgstr ""
4469
4470
#: serverguide/C/virtualization.xml:618(title)
4471
msgid "JeOS Networking"
4472
msgstr ""
4473
4474
#: serverguide/C/virtualization.xml:621(title)
4475
msgid "Assigning a fixed IP address"
4476
msgstr ""
4477
4478
#: serverguide/C/virtualization.xml:623(para)
4479
msgid ""
4480
"As a virtual appliance that may be deployed on various very different "
4481
"networks, it is very difficult to know what the actual network will look "
4482
"like. In order to simplify configuration, it is a good idea to take an "
4483
"approach similar to what network hardware vendors usually do, namely "
4484
"assigning an initial fixed IP address to the appliance in a private class "
4485
"network that you will provide in your documentation. An address in the range "
4486
"192.168.0.0/255 is usually a good choice."
4487
msgstr ""
4488
4489
#: serverguide/C/virtualization.xml:630(para)
4490
msgid "To do this we'll use the following parameters:"
4491
msgstr ""
4492
4493
#: serverguide/C/virtualization.xml:636(para)
4494
msgid ""
4495
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4496
"dhcp if not specified)"
4497
msgstr ""
4498
4499
#: serverguide/C/virtualization.xml:641(para)
4500
msgid ""
4501
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4502
"255.255.255.0)"
4503
msgstr ""
4504
4505
#: serverguide/C/virtualization.xml:646(para)
4506
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4507
msgstr ""
4508
4509
#: serverguide/C/virtualization.xml:651(para)
4510
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4511
msgstr ""
4512
4513
#: serverguide/C/virtualization.xml:656(para)
4514
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4515
msgstr ""
4516
4517
#: serverguide/C/virtualization.xml:661(para)
4518
msgid ""
4519
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4520
msgstr ""
4521
4522
#: serverguide/C/virtualization.xml:667(para)
4523
msgid ""
4524
"We assume for now that default values are good enough, so the resulting "
4525
"invocation becomes:"
4526
msgstr ""
4527
4528
#: serverguide/C/virtualization.xml:672(command)
4529
msgid ""
4530
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4531
"libvirt qemu:///system --ip 192.168.0.100"
4532
msgstr ""
4533
4534
#: serverguide/C/virtualization.xml:677(title)
4535
msgid "Modifying the libvirt Template to use Bridging"
4536
msgstr ""
4537
4538
#: serverguide/C/virtualization.xml:679(para)
4539
msgid ""
4540
"Because our appliance will be likely to need to be accessed by remote hosts, "
4541
"we need to configure libvirt so that the appliance uses bridge networking. "
4542
"To do this we use vmbuilder template mechanism to modify the default one."
4543
msgstr ""
4544
4545
#: serverguide/C/virtualization.xml:684(para)
4546
msgid ""
4547
"In our working directory we create the template hierarchy and copy the "
4548
"default template:"
4549
msgstr ""
4550
4551
#: serverguide/C/virtualization.xml:689(command)
4552
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4553
msgstr ""
4554
4555
#: serverguide/C/virtualization.xml:690(command)
4556
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4557
msgstr ""
4558
4559
#: serverguide/C/virtualization.xml:693(para)
4560
msgid ""
4561
"We can then edit "
4562
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4563
"change:"
4564
msgstr ""
4565
4566
#: serverguide/C/virtualization.xml:697(programlisting)
4567
#, no-wrap
4568
msgid ""
4569
"\n"
4570
" <interface type='network'>\n"
4571
" <source network='default'/>\n"
4572
" </interface>\n"
4573
msgstr ""
4574
4575
#: serverguide/C/virtualization.xml:703(para)
4576
msgid "To:"
4577
msgstr ""
4578
4579
#: serverguide/C/virtualization.xml:707(programlisting)
4580
#, no-wrap
4581
msgid ""
4582
"\n"
4583
" <interface type='bridge'>\n"
4584
" <source bridge='br0'/>\n"
4585
" </interface>\n"
4586
msgstr ""
4587
4588
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4589
msgid "Partitioning"
4590
msgstr ""
4591
4592
#: serverguide/C/virtualization.xml:719(para)
4593
msgid ""
4594
"Partitioning of the virtual appliance will have to take into consideration "
4595
"what you are planning to do with is. Because most appliances want to have a "
4596
"separate storage for data, having a separate <filename>/var</filename> would "
4597
"make sense."
4598
msgstr ""
4599
4600
#: serverguide/C/virtualization.xml:724(para)
4601
msgid ""
4602
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4603
msgstr ""
4604
4605
#: serverguide/C/virtualization.xml:728(programlisting)
4606
#, no-wrap
4607
msgid ""
4608
"\n"
4609
"--part PATH\n"
4610
" Allows you to specify a partition table in a partition file, located at "
4611
"PATH. Each line of the partition file should specify\n"
4612
" (root first):\n"
4613
" mountpoint size\n"
4614
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4615
"disk starts on a\n"
4616
" line with ’---’. ie :\n"
4617
" root 1000\n"
4618
" /opt 1000\n"
4619
" swap 256\n"
4620
" ---\n"
4621
" /var 2000\n"
4622
" /log 1500\n"
4623
msgstr ""
4624
4625
#: serverguide/C/virtualization.xml:743(para)
4626
msgid ""
4627
"In our case we will define a text file name "
4628
"<filename>vmbuilder.partition</filename> which will contain the following:"
4629
msgstr ""
4630
4631
#: serverguide/C/virtualization.xml:747(programlisting)
4632
#, no-wrap
4633
msgid ""
4634
"\n"
4635
"root 8000\n"
4636
"swap 4000\n"
4637
"---\n"
4638
"/var 20000\n"
4639
msgstr ""
4640
4641
#: serverguide/C/virtualization.xml:755(para)
4642
msgid ""
4643
"Note that as we are using virtual disk images, the actual sizes that we put "
4644
"here are maximum sizes for these volumes."
4645
msgstr ""
4646
4647
#: serverguide/C/virtualization.xml:760(para)
4648
msgid "Our command line now looks like:"
4649
msgstr ""
4650
4651
#: serverguide/C/virtualization.xml:765(command)
4652
msgid ""
4653
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4654
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4655
msgstr ""
4656
4657
#: serverguide/C/virtualization.xml:770(para)
4658
msgid ""
4659
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4660
"next line."
4661
msgstr ""
4662
4663
#: serverguide/C/virtualization.xml:777(title)
4664
msgid "User and Password"
4665
msgstr ""
4666
4667
#: serverguide/C/virtualization.xml:779(para)
4668
msgid ""
4669
"Again setting up a virtual appliance, you will need to provide a default "
4670
"user and password that is generic so that you can include it in your "
4671
"documentation. We will see later on in this tutorial how we will provide "
4672
"some security by defining a script that will be run the first time a user "
4673
"actually logs in the appliance, that will, among other things, ask him to "
4674
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4675
"as my user name, and <emphasis>'default'</emphasis> as the password."
4676
msgstr ""
4677
4678
#: serverguide/C/virtualization.xml:787(para)
4679
msgid "To do this we use the following optional parameters:"
4680
msgstr ""
4681
4682
#: serverguide/C/virtualization.xml:793(para)
4683
msgid ""
4684
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4685
"Default: ubuntu."
4686
msgstr ""
4687
4688
#: serverguide/C/virtualization.xml:798(para)
4689
msgid ""
4690
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4691
"added. Default: Ubuntu."
4692
msgstr ""
4693
4694
#: serverguide/C/virtualization.xml:803(para)
4695
msgid ""
4696
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4697
"Default: ubuntu."
4698
msgstr ""
4699
4700
#: serverguide/C/virtualization.xml:809(para)
4701
msgid "Our resulting command line becomes:"
4702
msgstr ""
4703
4704
#: serverguide/C/virtualization.xml:814(command)
4705
msgid ""
4706
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4707
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4708
"user user --name user --pass default"
4709
msgstr ""
4710
4711
#: serverguide/C/virtualization.xml:822(title)
4712
msgid "Installing Required Packages"
4713
msgstr ""
4714
4715
#: serverguide/C/virtualization.xml:824(para)
4716
msgid ""
4717
"In this example we will be installing a package "
4718
"<application>(Limesurvey)</application> that accesses a "
4719
"<application>MySQL</application> database and has a web interface. We will "
4720
"therefore require our OS to provide us with:"
4721
msgstr ""
4722
4723
#: serverguide/C/virtualization.xml:831(para)
4724
msgid "Apache"
4725
msgstr ""
4726
4727
#: serverguide/C/virtualization.xml:832(para)
4728
msgid "PHP"
4729
msgstr ""
4730
4731
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4732
msgid "MySQL"
4733
msgstr ""
4734
4735
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4736
msgid "OpenSSH Server"
4737
msgstr ""
4738
4739
#: serverguide/C/virtualization.xml:835(para)
4740
msgid "Limesurvey (as an example application that we have packaged)"
4741
msgstr ""
4742
4743
#: serverguide/C/virtualization.xml:838(para)
4744
msgid ""
4745
"This is done using vmbuilder by specifying the --addpkg option multiple "
4746
"times:"
4747
msgstr ""
4748
4749
#: serverguide/C/virtualization.xml:842(programlisting)
4750
#, no-wrap
4751
msgid ""
4752
"\n"
4753
"--addpkg PKG\n"
4754
" Install PKG into the guest (can be specfied multiple times)\n"
4755
msgstr ""
4756
4757
#: serverguide/C/virtualization.xml:847(para)
4758
msgid ""
4759
"However, due to the way vmbuilder operates, packages that have to ask "
4760
"questions to the user during the post install phase are not supported and "
4761
"should instead be installed while interactivity can occur. This is the case "
4762
"of Limesurvey, which we will have to install later, once the user logs in."
4763
msgstr ""
4764
4765
#: serverguide/C/virtualization.xml:853(para)
4766
msgid ""
4767
"Other packages that ask simple debconf question, such as <application>mysql-"
4768
"server</application> asking to set a password, the package can be installed "
4769
"immediately, but we will have to reconfigure it the first time the user logs "
4770
"in."
4771
msgstr ""
4772
4773
#: serverguide/C/virtualization.xml:859(para)
4774
msgid ""
4775
"If some packages that we need to install are not in main, we need to enable "
4776
"the additional repositories using --comp and --ppa:"
4777
msgstr ""
4778
4779
#: serverguide/C/virtualization.xml:863(programlisting)
4780
#, no-wrap
4781
msgid ""
4782
"\n"
4783
"--components COMP1,COMP2,...,COMPN\n"
4784
" A comma separated list of distro components to include (e.g. "
4785
"main,universe). This defaults\n"
4786
" to \"main\"\n"
4787
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4788
msgstr ""
4789
4790
#: serverguide/C/virtualization.xml:870(para)
4791
msgid ""
4792
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4793
"PPA (personal package archive) address so that it is added to the VM "
4794
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4795
"to the command line:"
4796
msgstr ""
4797
4798
#: serverguide/C/virtualization.xml:876(command)
4799
msgid ""
4800
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4801
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4802
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4803
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4804
"server --ppa nijaba"
4805
msgstr ""
4806
4807
#: serverguide/C/virtualization.xml:883(title)
4808
msgid "OpenSSH"
4809
msgstr ""
4810
4811
#: serverguide/C/virtualization.xml:885(para)
4812
msgid ""
4813
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4814
"it will allow our admins to access the appliance remotely. However, pushing "
4815
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4816
"security risk as all these server will share the same secret key, making it "
4817
"very easy for hackers to target our appliance with all the tools they need "
4818
"to crack it open in a breeze. As for the user password, we will instead rely "
4819
"on a script that will install OpenSSH the first time a user logs in so that "
4820
"the key generated will be different for each appliance. For this we'll use a "
4821
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4822
"interaction."
4823
msgstr ""
4824
4825
#: serverguide/C/virtualization.xml:897(title)
4826
msgid "Speed Considerations"
4827
msgstr ""
4828
4829
#: serverguide/C/virtualization.xml:900(title)
4830
msgid "Package Caching"
4831
msgstr ""
4832
4833
#: serverguide/C/virtualization.xml:902(para)
4834
msgid ""
4835
"When vmbuilder creates builds your system, it has to go fetch each one of "
4836
"the packages that composes it over the network to one of the official "
4837
"repositories, which, depending on your internet connection speed and the "
4838
"load of the mirror, can have a big impact on the actual build time. In order "
4839
"to reduce this, it is recommended to either have a local repository (which "
4840
"can be created using <application>apt-mirror</application>) or using a "
4841
"caching proxy such as <application>apt-proxy</application>. The later option "
4842
"being much simpler to implement and requiring less disk space, it is the one "
4843
"we will pick in this tutorial. To install it, simply type:"
4844
msgstr ""
4845
4846
#: serverguide/C/virtualization.xml:912(command)
4847
msgid "sudo apt-get install apt-proxy"
4848
msgstr ""
4849
4850
#: serverguide/C/virtualization.xml:915(para)
4851
msgid ""
4852
"Once this is complete, your (empty) proxy is ready for use on "
4853
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
4854
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
4855
"option:"
4856
msgstr ""
4857
4858
#: serverguide/C/virtualization.xml:920(programlisting)
4859
#, no-wrap
4860
msgid ""
4861
"\n"
4862
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
4863
" is http://archive.ubuntu.com/ubuntu for official\n"
4864
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
4865
" otherwise\n"
4866
msgstr ""
4867
4868
#: serverguide/C/virtualization.xml:927(para)
4869
msgid "So we add to the command line:"
4870
msgstr ""
4871
4872
#: serverguide/C/virtualization.xml:932(command)
4873
msgid "--mirror http://mirroraddress:9999/ubuntu"
4874
msgstr ""
4875
4876
#: serverguide/C/virtualization.xml:936(para)
4877
msgid ""
4878
"The mirror address specified here will also be used in the "
4879
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
4880
"is useful to specify here an address that can be resolved by the guest or to "
4881
"plan on reseting this address later on, such as in a <emphasis>--"
4882
"firstboot</emphasis> script."
4883
msgstr ""
4884
4885
#: serverguide/C/virtualization.xml:945(title)
4886
msgid "Install a Local Mirror"
4887
msgstr ""
4888
4889
#: serverguide/C/virtualization.xml:947(para)
4890
msgid ""
4891
"If we are in a larger environment, it may make sense to setup a local mirror "
4892
"of the Ubuntu repositories. The package apt-mirror provides you with a "
4893
"script that will handle the mirroring for you. You should plan on having "
4894
"about 20 gigabyte of free space per supported release and architecture."
4895
msgstr ""
4896
4897
#: serverguide/C/virtualization.xml:953(para)
4898
msgid ""
4899
"By default, <application>apt-mirror</application> uses the configuration "
4900
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
4901
"replicate only the architecture of the local machine. If you would like to "
4902
"support other architectures on your mirror, simply duplicate the lines "
4903
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
4904
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
4905
"archives as well, you will have:"
4906
msgstr ""
4907
4908
#: serverguide/C/virtualization.xml:960(programlisting)
4909
#, no-wrap
4910
msgid ""
4911
"\n"
4912
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4913
"multiverse \n"
4914
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4915
"multiverse\n"
4916
"\n"
4917
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
4918
"multiverse \n"
4919
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
4920
"universe multiverse \n"
4921
"\n"
4922
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
4923
"universe multiverse \n"
4924
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
4925
"universe multiverse \n"
4926
"\n"
4927
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
4928
"universe multiverse \n"
4929
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
4930
"universe multiverse \n"
4931
"\n"
4932
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4933
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4934
"installer \n"
4935
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4936
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4937
"installer \n"
4938
msgstr ""
4939
4940
#: serverguide/C/virtualization.xml:977(para)
4941
msgid ""
4942
"Notice that the source packages are not mirrored as they are seldom used "
4943
"compared to the binaries and they do take a lot more space, but they can be "
4944
"easily added to the list."
4945
msgstr ""
4946
4947
#: serverguide/C/virtualization.xml:982(para)
4948
msgid ""
4949
"Once the mirror has finished replicating (and this can be quite long), you "
4950
"need to configure Apache so that your mirror files (in "
4951
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
4952
"default), are published by your Apache server. For more information on "
4953
"Apache see <xref linkend=\"httpd\"/>."
4954
msgstr ""
4955
4956
#: serverguide/C/virtualization.xml:991(title)
4957
msgid "Installing in a RAM Disk"
4958
msgstr ""
4959
4960
#: serverguide/C/virtualization.xml:993(para)
4961
msgid ""
4962
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
4963
"faster than writing to disk. If you have some free memory, letting vmbuilder "
4964
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
4965
"-tmpfs</emphasis> will help you do just that:"
4966
msgstr ""
4967
4968
#: serverguide/C/virtualization.xml:999(programlisting)
4969
#, no-wrap
4970
msgid ""
4971
"\n"
4972
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
4973
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
4974
msgstr ""
4975
4976
#: serverguide/C/virtualization.xml:1004(para)
4977
msgid ""
4978
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
4979
"have 1G of free ram."
4980
msgstr ""
4981
4982
#: serverguide/C/virtualization.xml:1011(title)
4983
msgid "Package the Application"
4984
msgstr ""
4985
4986
#: serverguide/C/virtualization.xml:1013(para)
4987
msgid "Two option are available to us:"
4988
msgstr ""
4989
4990
#: serverguide/C/virtualization.xml:1019(para)
4991
msgid ""
4992
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
4993
"package. Since this is outside of the scope of this tutorial, we will not "
4994
"perform this here and invite the reader to read the documentation on how to "
4995
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
4996
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
4997
"repository for your package so that updates can be conveniently pulled from "
4998
"it. See the <ulink url=\"http://www.debian-"
4999
"administration.org/articles/286\">Debian Administration</ulink> article for "
5000
"a tutorial on this."
5001
msgstr ""
5002
5003
#: serverguide/C/virtualization.xml:1028(para)
5004
msgid ""
5005
"Manually install the application under <filename>/opt</filename> as "
5006
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
5007
"guidelines</ulink>."
5008
msgstr ""
5009
5010
#: serverguide/C/virtualization.xml:1035(para)
5011
msgid ""
5012
"In our case we'll use <application>Limesurvey</application> as example web "
5013
"application for which we wish to provide a virtual appliance. As noted "
5014
"before, we've made a version of the package available in a PPA (Personal "
5015
"Package Archive)."
5016
msgstr ""
5017
5018
#: serverguide/C/virtualization.xml:1042(title)
5019
msgid "Finishing Install"
5020
msgstr ""
5021
5022
#: serverguide/C/virtualization.xml:1045(title)
5023
msgid "First Boot"
5024
msgstr ""
5025
5026
#: serverguide/C/virtualization.xml:1047(para)
5027
msgid ""
5028
"As we mentioned earlier, the first time the machine boots we'll need to "
5029
"install <application>openssh-server</application> so that the key generated "
5030
"for it is unique for each machine. To do this, we'll write a script called "
5031
"<filename>boot.sh</filename> as follows:"
5032
msgstr ""
5033
5034
#: serverguide/C/virtualization.xml:1053(programlisting)
5035
#, no-wrap
5036
msgid ""
5037
"\n"
5038
"# This script will run the first time the virtual machine boots\n"
5039
"# It is ran as root.\n"
5040
"\n"
5041
"apt-get update\n"
5042
"apt-get install -qqy --force-yes openssh-server\n"
5043
msgstr ""
5044
5045
#: serverguide/C/virtualization.xml:1061(para)
5046
msgid ""
5047
"And we add the <command>--firstboot boot.sh</command> option to our command "
5048
"line."
5049
msgstr ""
5050
5051
#: serverguide/C/virtualization.xml:1067(title)
5052
msgid "First Login"
5053
msgstr ""
5054
5055
#: serverguide/C/virtualization.xml:1069(para)
5056
msgid ""
5057
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
5058
"set them up the first time a user logs in using a script named login.sh. "
5059
"We'll also use this script to let the user specify:"
5060
msgstr ""
5061
5062
#: serverguide/C/virtualization.xml:1075(para)
5063
msgid "His own password"
5064
msgstr ""
5065
5066
#: serverguide/C/virtualization.xml:1076(para)
5067
msgid "Define the keyboard and other locale info he wants to use"
5068
msgstr ""
5069
5070
#: serverguide/C/virtualization.xml:1079(para)
5071
msgid "So we'll define <filename>login.sh</filename> as follows:"
5072
msgstr ""
5073
5074
#: serverguide/C/virtualization.xml:1083(programlisting)
5075
#, no-wrap
5076
msgid ""
5077
"\n"
5078
"# This script is ran the first time a user logs in\n"
5079
"\n"
5080
"echo \"Your appliance is about to be finished to be set up.\"\n"
5081
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
5082
"echo \"starting by changing your user password.\"\n"
5083
"\n"
5084
"passwd\n"
5085
"\n"
5086
"#give the opportunity to change the keyboard\n"
5087
"sudo dpkg-reconfigure console-setup\n"
5088
"\n"
5089
"#configure the mysql server root password\n"
5090
"sudo dpkg-reconfigure mysql-server-5.0\n"
5091
"\n"
5092
"#install limesurvey\n"
5093
"sudo apt-get install -qqy --force-yes limesurvey\n"
5094
"\n"
5095
"echo \"Your appliance is now configured. To use it point your\"\n"
5096
"echo \"browser to http://serverip/limesurvey/admin\"\n"
5097
msgstr ""
5098
5099
#: serverguide/C/virtualization.xml:1105(para)
5100
msgid ""
5101
"And we add the <command>--firstlogin login.sh</command> option to our "
5102
"command line."
5103
msgstr ""
5104
5105
#: serverguide/C/virtualization.xml:1112(title)
5106
msgid "Useful Additions"
5107
msgstr ""
5108
5109
#: serverguide/C/virtualization.xml:1115(title)
5110
msgid "Configuring Automatic Updates"
5111
msgstr ""
5112
5113
#: serverguide/C/virtualization.xml:1117(para)
5114
msgid ""
5115
"To have your system be configured to update itself on a regular basis, we "
5116
"will just install <application>unattended-upgrades</application>, so we add "
5117
"the following option to our command line:"
5118
msgstr ""
5119
5120
#: serverguide/C/virtualization.xml:1123(command)
5121
msgid "--addpkg unattended-upgrades"
5122
msgstr ""
5123
5124
#: serverguide/C/virtualization.xml:1126(para)
5125
msgid ""
5126
"As we have put our application package in a PPA, the process will update not "
5127
"only the system, but also the application each time we update the version in "
5128
"the PPA."
5129
msgstr ""
5130
5131
#: serverguide/C/virtualization.xml:1133(title)
5132
msgid "ACPI Event Handling"
5133
msgstr ""
5134
5135
#: serverguide/C/virtualization.xml:1135(para)
5136
msgid ""
5137
"For your virtual machine to be able to handle restart and shutdown events it "
5138
"is being sent, it is a good idea to install the acpid package as well. To do "
5139
"this we just add the following option:"
5140
msgstr ""
5141
5142
#: serverguide/C/virtualization.xml:1141(command)
5143
msgid "--addpkg acpid"
5144
msgstr ""
5145
5146
#: serverguide/C/virtualization.xml:1147(title)
5147
msgid "Final Command"
5148
msgstr ""
5149
5150
#: serverguide/C/virtualization.xml:1149(para)
5151
msgid "Here is the command with all the options discussed above:"
5152
msgstr ""
5153
5154
#: serverguide/C/virtualization.xml:1154(command)
5155
msgid ""
5156
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5157
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5158
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5159
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5160
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5161
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5162
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5163
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5164
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5165
"firstlogin login.sh es"
5166
msgstr ""
5167
5168
#: serverguide/C/virtualization.xml:1169(para)
5169
msgid ""
5170
"If you are interested in learning more, have questions or suggestions, "
5171
"please contact the Ubuntu Server Team at:"
5172
msgstr ""
5173
5174
#: serverguide/C/virtualization.xml:1174(para)
5175
msgid "IRC: #ubuntu-server on freenode"
5176
msgstr ""
5177
5178
#: serverguide/C/virtualization.xml:1179(para)
5179
msgid ""
5180
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5181
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5182
msgstr ""
5183
5184
#: serverguide/C/virtualization.xml:1184(para)
5185
msgid ""
5186
"Also, see the <ulink "
5187
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5188
"Wiki</ulink> page."
5189
msgstr ""
5190
5191
#: serverguide/C/virtualization.xml:1192(title)
5192
msgid "UEC"
5193
msgstr ""
5194
5195
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5196
msgid "Overview"
5197
msgstr ""
5198
5199
#: serverguide/C/virtualization.xml:1197(para)
5200
msgid ""
5201
"This tutorial covers <application>UEC</application> installation from the "
5202
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5203
"with a single system serving as the <emphasis>\"all-in-one "
5204
"controller\"</emphasis>, and one or more nodes attached."
5205
msgstr ""
5206
5207
#: serverguide/C/virtualization.xml:1202(para)
5208
msgid ""
5209
"From this Tutorial you will learn how to install, configure, register and "
5210
"perform several operations on a basic <application>UEC</application> setup "
5211
"that results in a cloud with a one controller <emphasis>\"front-"
5212
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5213
"instances. You will also use examples to help get you started using your own "
5214
"private compute cloud."
5215
msgstr ""
5216
5217
#: serverguide/C/virtualization.xml:1210(title)
5218
msgid "Prerequisites"
5219
msgstr ""
5220
5221
#: serverguide/C/virtualization.xml:1212(para)
5222
msgid ""
5223
"To deploy a minimal cloud infrastructure, you’ll need at least "
5224
"<emphasis>two</emphasis> dedicated systems:"
5225
msgstr ""
5226
5227
#: serverguide/C/virtualization.xml:1218(para)
5228
msgid "A front end."
5229
msgstr ""
5230
5231
#: serverguide/C/virtualization.xml:1223(para)
5232
msgid "One or more node(s)."
5233
msgstr ""
5234
5235
#: serverguide/C/virtualization.xml:1229(para)
5236
msgid ""
5237
"The following are recommendations, rather than fixed requirements. However, "
5238
"our experience in developing this documentation indicated the following "
5239
"suggestions."
5240
msgstr ""
5241
5242
#: serverguide/C/virtualization.xml:1234(title)
5243
msgid "Front End Requirements"
5244
msgstr ""
5245
5246
#: serverguide/C/virtualization.xml:1236(para)
5247
msgid "Use the following table for a system that will run one or more of:"
5248
msgstr ""
5249
5250
#: serverguide/C/virtualization.xml:1241(para)
5251
msgid "Cloud Controller (CLC)"
5252
msgstr ""
5253
5254
#: serverguide/C/virtualization.xml:1242(para)
5255
msgid "Cluster Controller (CC)"
5256
msgstr ""
5257
5258
#: serverguide/C/virtualization.xml:1243(para)
5259
msgid "Walrus (the S3-like storage service)"
5260
msgstr ""
5261
5262
#: serverguide/C/virtualization.xml:1244(para)
5263
msgid "Storage Controller (SC)"
5264
msgstr ""
5265
5266
#: serverguide/C/virtualization.xml:1248(title)
5267
msgid "UEC Front End Requirements"
5268
msgstr ""
5269
5270
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5271
msgid "Hardware"
5272
msgstr ""
5273
5274
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5275
msgid "Minimum"
5276
msgstr ""
5277
5278
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5279
msgid "Suggested"
5280
msgstr ""
5281
5282
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5283
msgid "Notes"
5284
msgstr ""
5285
5286
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5287
msgid "CPU"
5288
msgstr ""
5289
5290
#: serverguide/C/virtualization.xml:1265(para)
5291
msgid "1 GHz"
5292
msgstr ""
5293
5294
#: serverguide/C/virtualization.xml:1266(para)
5295
msgid "2 x 2 GHz"
5296
msgstr ""
5297
5298
#: serverguide/C/virtualization.xml:1267(para)
5299
msgid ""
5300
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5301
"a dual core processor."
5302
msgstr ""
5303
5304
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5305
msgid "Memory"
5306
msgstr ""
5307
5308
#: serverguide/C/virtualization.xml:1271(para)
5309
msgid "512 MB"
5310
msgstr ""
5311
5312
#: serverguide/C/virtualization.xml:1272(para)
5313
msgid "2 GB"
5314
msgstr ""
5315
5316
#: serverguide/C/virtualization.xml:1273(para)
5317
msgid "The Java web front end benefits from lots of available memory."
5318
msgstr ""
5319
5320
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5321
msgid "Disk"
5322
msgstr ""
5323
5324
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5325
msgid "5400 RPM IDE"
5326
msgstr ""
5327
5328
#: serverguide/C/virtualization.xml:1278(para)
5329
msgid "7200 RPM SATA"
5330
msgstr ""
5331
5332
#: serverguide/C/virtualization.xml:1279(para)
5333
msgid ""
5334
"Slower disks will work, but will yield much longer instance startup times."
5335
msgstr ""
5336
5337
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5338
msgid "Disk Space"
5339
msgstr ""
5340
5341
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5342
msgid "40 GB"
5343
msgstr ""
5344
5345
#: serverguide/C/virtualization.xml:1284(para)
5346
msgid "200 GB"
5347
msgstr ""
5348
5349
#: serverguide/C/virtualization.xml:1285(para)
5350
msgid ""
5351
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5352
"does not like to run out of disk space."
5353
msgstr ""
5354
5355
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5356
msgid "Networking"
5357
msgstr ""
5358
5359
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5360
msgid "100 Mbps"
5361
msgstr ""
5362
5363
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5364
msgid "1000 Mbps"
5365
msgstr ""
5366
5367
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5368
msgid ""
5369
"Machine images are hundreds of MB, and need to be copied over the network to "
5370
"nodes."
5371
msgstr ""
5372
5373
#: serverguide/C/virtualization.xml:1299(title)
5374
msgid "Node Requirements"
5375
msgstr ""
5376
5377
#: serverguide/C/virtualization.xml:1301(para)
5378
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5379
msgstr ""
5380
5381
#: serverguide/C/virtualization.xml:1306(para)
5382
msgid "the Node Controller (NC)"
5383
msgstr ""
5384
5385
#: serverguide/C/virtualization.xml:1310(title)
5386
msgid "UEC Node Requirements"
5387
msgstr ""
5388
5389
#: serverguide/C/virtualization.xml:1327(para)
5390
msgid "VT Extensions"
5391
msgstr ""
5392
5393
#: serverguide/C/virtualization.xml:1328(para)
5394
msgid "VT, 64-bit, Multicore"
5395
msgstr ""
5396
5397
#: serverguide/C/virtualization.xml:1329(para)
5398
msgid ""
5399
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5400
"only run 1 VM per CPU core on a Node."
5401
msgstr ""
5402
5403
#: serverguide/C/virtualization.xml:1333(para)
5404
msgid "1 GB"
5405
msgstr ""
5406
5407
#: serverguide/C/virtualization.xml:1334(para)
5408
msgid "4 GB"
5409
msgstr ""
5410
5411
#: serverguide/C/virtualization.xml:1335(para)
5412
msgid "Additional memory means more, and larger guests."
5413
msgstr ""
5414
5415
#: serverguide/C/virtualization.xml:1340(para)
5416
msgid "7200 RPM SATA or SCSI"
5417
msgstr ""
5418
5419
#: serverguide/C/virtualization.xml:1341(para)
5420
msgid ""
5421
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5422
"bottleneck."
5423
msgstr ""
5424
5425
#: serverguide/C/virtualization.xml:1346(para)
5426
msgid "100 GB"
5427
msgstr ""
5428
5429
#: serverguide/C/virtualization.xml:1347(para)
5430
msgid ""
5431
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5432
"space."
5433
msgstr ""
5434
5435
#: serverguide/C/virtualization.xml:1363(title)
5436
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5437
msgstr ""
5438
5439
#: serverguide/C/virtualization.xml:1367(para)
5440
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5441
msgstr ""
5442
5443
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5444
msgid ""
5445
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5446
msgstr ""
5447
5448
#: serverguide/C/virtualization.xml:1377(para)
5449
msgid ""
5450
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5451
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5452
msgstr ""
5453
5454
#: serverguide/C/virtualization.xml:1383(para)
5455
msgid ""
5456
"It will ask two other cloud-specific questions during the course of the "
5457
"install:"
5458
msgstr ""
5459
5460
#: serverguide/C/virtualization.xml:1388(para)
5461
msgid "Name of your cluster."
5462
msgstr ""
5463
5464
#: serverguide/C/virtualization.xml:1391(para)
5465
msgid "e.g. <emphasis>cluster1</emphasis>."
5466
msgstr ""
5467
5468
#: serverguide/C/virtualization.xml:1394(para)
5469
msgid ""
5470
"A range of public IP addresses on the LAN that the cloud can allocate to "
5471
"instances."
5472
msgstr ""
5473
5474
#: serverguide/C/virtualization.xml:1397(para)
5475
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5476
msgstr ""
5477
5478
#: serverguide/C/virtualization.xml:1405(title)
5479
msgid "Installing the Node Controller(s)"
5480
msgstr ""
5481
5482
#: serverguide/C/virtualization.xml:1407(para)
5483
msgid ""
5484
"The node controller install is even simpler. Just make sure that you are "
5485
"connected to the network on which the cloud/cluster controller is already "
5486
"running."
5487
msgstr ""
5488
5489
#: serverguide/C/virtualization.xml:1413(para)
5490
msgid "Boot from the same ISO on the node(s)."
5491
msgstr ""
5492
5493
#: serverguide/C/virtualization.xml:1423(para)
5494
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5495
msgstr ""
5496
5497
#: serverguide/C/virtualization.xml:1428(para)
5498
msgid ""
5499
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5500
"install for you."
5501
msgstr ""
5502
5503
#: serverguide/C/virtualization.xml:1433(para)
5504
msgid "Confirm the partitioning scheme."
5505
msgstr ""
5506
5507
#: serverguide/C/virtualization.xml:1438(para)
5508
msgid ""
5509
"The rest of the installation should proceed uninterrupted; complete the "
5510
"installation and reboot the node."
5511
msgstr ""
5512
5513
#: serverguide/C/virtualization.xml:1446(title)
5514
msgid "Register the Node(s)"
5515
msgstr ""
5516
5517
#: serverguide/C/virtualization.xml:1448(para)
5518
msgid ""
5519
"Nodes are the physical systems within <application>UEC</application> that "
5520
"actually run the virtual machine instances of the cloud."
5521
msgstr ""
5522
5523
#: serverguide/C/virtualization.xml:1452(para)
5524
msgid ""
5525
"Once one or more Ubuntu Server node(s) are installed and running the "
5526
"<application>eucalyptus-nc</application> service, log onto the "
5527
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5528
msgstr ""
5529
5530
#: serverguide/C/virtualization.xml:1458(command)
5531
msgid "sudo euca_conf --no-rsync --discover-nodes"
5532
msgstr ""
5533
5534
#: serverguide/C/virtualization.xml:1461(para)
5535
msgid ""
5536
"This will discover the systems on the network running the "
5537
"<application>eucalyptus-nc</application> service, and the administrator can "
5538
"confirm the registration of each node by its IP address."
5539
msgstr ""
5540
5541
#: serverguide/C/virtualization.xml:1467(para)
5542
msgid ""
5543
"If you get prompted for passwords, or receive errors from scp, you may need "
5544
"to revisit the key synchronization instructions at <ulink "
5545
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5546
"lation</ulink>."
5547
msgstr ""
5548
5549
#: serverguide/C/virtualization.xml:1475(title)
5550
msgid "Obtain Credentials"
5551
msgstr ""
5552
5553
#: serverguide/C/virtualization.xml:1477(para)
5554
msgid ""
5555
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5556
"users of the cloud will need to retrieve their credentials. This can be done "
5557
"either through a web browser, or at the command line."
5558
msgstr ""
5559
5560
#: serverguide/C/virtualization.xml:1483(title)
5561
msgid "From a Web Browser"
5562
msgstr ""
5563
5564
#: serverguide/C/virtualization.xml:1487(para)
5565
msgid ""
5566
"From your web browser (either remotely or on your Ubuntu server) access the "
5567
"following URL:"
5568
msgstr ""
5569
5570
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5571
#, no-wrap
5572
msgid ""
5573
"\n"
5574
"https://<cloud-controller-ip-address>:8443/\n"
5575
msgstr ""
5576
5577
#: serverguide/C/virtualization.xml:1495(para)
5578
msgid ""
5579
"You must use a secure connection, so make sure you use \"https\" not "
5580
"\"http\" in your URL. You will get a security certificate warning. You will "
5581
"have to add an exception to view the page. If you do not accept it you will "
5582
"not be able to view the Eucalyptus configuration page."
5583
msgstr ""
5584
5585
#: serverguide/C/virtualization.xml:1503(para)
5586
msgid ""
5587
"Use username <emphasis>'admin'</emphasis> and password "
5588
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5589
"to change your password)."
5590
msgstr ""
5591
5592
#: serverguide/C/virtualization.xml:1509(para)
5593
msgid ""
5594
"Then follow the on-screen instructions to update the admin password and "
5595
"email address."
5596
msgstr ""
5597
5598
#: serverguide/C/virtualization.xml:1514(para)
5599
msgid ""
5600
"Once the first time configuration process is completed, click the "
5601
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5602
"the screen."
5603
msgstr ""
5604
5605
#: serverguide/C/virtualization.xml:1520(para)
5606
msgid ""
5607
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5608
"certificates."
5609
msgstr ""
5610
5611
#: serverguide/C/virtualization.xml:1525(para)
5612
msgid "Save them to <filename>~/.euca</filename>."
5613
msgstr ""
5614
5615
#: serverguide/C/virtualization.xml:1530(para)
5616
msgid ""
5617
"Unzip the downloaded zip file into a safe location "
5618
"(<filename>~/.euca</filename>)."
5619
msgstr ""
5620
5621
#: serverguide/C/virtualization.xml:1534(command)
5622
msgid "unzip -d ~/.euca mycreds.zip"
5623
msgstr ""
5624
5625
#: serverguide/C/virtualization.xml:1541(title)
5626
msgid "From a Command Line"
5627
msgstr ""
5628
5629
#: serverguide/C/virtualization.xml:1545(para)
5630
msgid ""
5631
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5632
"Controller</emphasis>, you can run:"
5633
msgstr ""
5634
5635
#: serverguide/C/virtualization.xml:1549(command)
5636
msgid "mkdir -p ~/.euca"
5637
msgstr ""
5638
5639
#: serverguide/C/virtualization.xml:1550(command)
5640
msgid "chmod 700 ~/.euca"
5641
msgstr ""
5642
5643
#: serverguide/C/virtualization.xml:1551(command)
5644
msgid "cd ~/.euca"
5645
msgstr ""
5646
5647
#: serverguide/C/virtualization.xml:1552(command)
5648
msgid "sudo euca_conf --get-credentials mycreds.zip"
5649
msgstr ""
5650
5651
#: serverguide/C/virtualization.xml:1553(command)
5652
msgid "unzip mycreds.zip"
5653
msgstr ""
5654
5655
#: serverguide/C/virtualization.xml:1554(command)
5656
msgid "cd -"
5657
msgstr ""
5658
5659
#: serverguide/C/virtualization.xml:1561(title)
5660
msgid "Extracting and Using Your Credentials"
5661
msgstr ""
5662
5663
#: serverguide/C/virtualization.xml:1563(para)
5664
msgid ""
5665
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5666
"certificates."
5667
msgstr ""
5668
5669
#: serverguide/C/virtualization.xml:1569(para)
5670
msgid ""
5671
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5672
"Eucalyptus environment:"
5673
msgstr ""
5674
5675
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5676
msgid ". ~/.euca/eucarc"
5677
msgstr ""
5678
5679
#: serverguide/C/virtualization.xml:1577(para)
5680
msgid ""
5681
"You may additionally wish to add this command to your "
5682
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5683
"set up automatically when you log in. Eucalyptus treats this set of "
5684
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5685
"the holder global privileges across the cloud. As such, they should be "
5686
"protected in the same way that other elevated-priority access is protected "
5687
"(e.g. should not be made visible to the general user population)."
5688
msgstr ""
5689
5690
#: serverguide/C/virtualization.xml:1584(command)
5691
msgid ""
5692
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5693
msgstr ""
5694
5695
#: serverguide/C/virtualization.xml:1588(para)
5696
msgid "Install the required cloud user tools:"
5697
msgstr ""
5698
5699
#: serverguide/C/virtualization.xml:1592(command)
5700
msgid "sudo apt-get install euca2ools"
5701
msgstr ""
5702
5703
#: serverguide/C/virtualization.xml:1596(para)
5704
msgid ""
5705
"To validate that everything is working correctly, get the local cluster "
5706
"availability details:"
5707
msgstr ""
5708
5709
#: serverguide/C/virtualization.xml:1601(command)
5710
msgid "euca-describe-availability-zones verbose"
5711
msgstr ""
5712
5713
#: serverguide/C/virtualization.xml:1602(computeroutput)
5714
#, no-wrap
5715
msgid ""
5716
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5717
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5718
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5719
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5720
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5721
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5722
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5723
msgstr ""
5724
5725
#: serverguide/C/virtualization.xml:1612(para)
5726
msgid "Your output from the above command will vary."
5727
msgstr ""
5728
5729
#: serverguide/C/virtualization.xml:1622(title)
5730
msgid "Running an Image"
5731
msgstr ""
5732
5733
#: serverguide/C/virtualization.xml:1624(para)
5734
msgid "There are multiple ways to instantiate an image in UEC:"
5735
msgstr ""
5736
5737
#: serverguide/C/virtualization.xml:1629(para)
5738
msgid "Use the command line."
5739
msgstr ""
5740
5741
#: serverguide/C/virtualization.xml:1630(para)
5742
msgid ""
5743
"Use one of the UEC compatible management tools such as "
5744
"<emphasis>Landscape</emphasis>."
5745
msgstr ""
5746
5747
#: serverguide/C/virtualization.xml:1632(para)
5748
msgid ""
5749
"Use the <ulink "
5750
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5751
"extension to Firefox."
5752
msgstr ""
5753
5754
#: serverguide/C/virtualization.xml:1638(para)
5755
msgid "Here we will describe the process from the command line:"
5756
msgstr ""
5757
5758
#: serverguide/C/virtualization.xml:1644(para)
5759
msgid ""
5760
"Before running an instance of your image, you should first create a "
5761
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5762
"instance as root, once it boots. The key is stored, so you will only have to "
5763
"do this once."
5764
msgstr ""
5765
5766
#: serverguide/C/virtualization.xml:1648(para)
5767
msgid "Run the following command:"
5768
msgstr ""
5769
5770
#: serverguide/C/virtualization.xml:1651(programlisting)
5771
#, no-wrap
5772
msgid ""
5773
"\n"
5774
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5775
" touch ~/.euca/mykey.priv\n"
5776
" chmod 0600 ~/.euca/mykey.priv\n"
5777
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5778
"fi\n"
5779
msgstr ""
5780
5781
#: serverguide/C/virtualization.xml:1659(para)
5782
msgid ""
5783
"You can call your key whatever you like (in this example, the key is called "
5784
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5785
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5786
"a list of created keys stored in the system."
5787
msgstr ""
5788
5789
#: serverguide/C/virtualization.xml:1666(para)
5790
msgid "You must also allow access to port 22 in your instances:"
5791
msgstr ""
5792
5793
#: serverguide/C/virtualization.xml:1670(command)
5794
msgid "euca-describe-groups"
5795
msgstr ""
5796
5797
#: serverguide/C/virtualization.xml:1671(command)
5798
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5799
msgstr ""
5800
5801
#: serverguide/C/virtualization.xml:1675(para)
5802
msgid "Next, you can create instances of your registered image:"
5803
msgstr ""
5804
5805
#: serverguide/C/virtualization.xml:1679(command)
5806
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5807
msgstr ""
5808
5809
#: serverguide/C/virtualization.xml:1682(para)
5810
msgid ""
5811
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5812
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5813
"on the <emphasis>Store</emphasis> page to see the sample command."
5814
msgstr ""
5815
5816
#: serverguide/C/virtualization.xml:1689(para)
5817
msgid ""
5818
"The first time you run an instance, the system will be setting up caches for "
5819
"the image from which it will be created. This can often take some time the "
5820
"first time an instance is run given that VM images are usually quite large."
5821
msgstr ""
5822
5823
#: serverguide/C/virtualization.xml:1693(para)
5824
msgid "To monitor the state of your instance, run:"
5825
msgstr ""
5826
5827
#: serverguide/C/virtualization.xml:1697(command)
5828
msgid "watch -n5 euca-describe-instances"
5829
msgstr ""
5830
5831
#: serverguide/C/virtualization.xml:1699(para)
5832
msgid ""
5833
"In the output, you should see information about the instance, including its "
5834
"state. While first-time caching is being performed, the instance's state "
5835
"will be <emphasis>'pending'</emphasis>."
5836
msgstr ""
5837
5838
#: serverguide/C/virtualization.xml:1705(para)
5839
msgid ""
5840
"When the instance is fully started, the above state will become "
5841
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5842
"instance in the output, then connect to it:"
5843
msgstr ""
5844
5845
#: serverguide/C/virtualization.xml:1710(command)
5846
msgid ""
5847
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5848
"'{print $4}')"
5849
msgstr ""
5850
5851
#: serverguide/C/virtualization.xml:1711(command)
5852
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
5853
msgstr ""
5854
5855
#: serverguide/C/virtualization.xml:1715(para)
5856
msgid ""
5857
"And when you are done with this instance, exit your SSH connection, then "
5858
"terminate your instance:"
5859
msgstr ""
5860
5861
#: serverguide/C/virtualization.xml:1719(command)
5862
msgid ""
5863
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
5864
"awk '{print $2}')"
5865
msgstr ""
5866
5867
#: serverguide/C/virtualization.xml:1720(command)
5868
msgid "euca-terminate-instances $INSTANCEID"
5869
msgstr ""
5870
5871
#: serverguide/C/virtualization.xml:1727(title)
5872
msgid "Install an Image from the Store"
5873
msgstr ""
5874
5875
#: serverguide/C/virtualization.xml:1729(para)
5876
msgid ""
5877
"The following is by far the simplest way to install an image. However, "
5878
"advanced users may be interested in learning how to <ulink "
5879
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
5880
"own image</ulink>."
5881
msgstr ""
5882
5883
#: serverguide/C/virtualization.xml:1734(para)
5884
msgid ""
5885
"The simplest way to add an image to <application>UEC</application> is to "
5886
"install it from the Image Store on the UEC web interface."
5887
msgstr ""
5888
5889
#: serverguide/C/virtualization.xml:1740(para)
5890
msgid ""
5891
"Access the web interface at the following URL (Make sure you specify https):"
5892
msgstr ""
5893
5894
#: serverguide/C/virtualization.xml:1748(para)
5895
msgid ""
5896
"Enter your login and password (if requested, as you may still be logged in "
5897
"from earlier)."
5898
msgstr ""
5899
5900
#: serverguide/C/virtualization.xml:1753(para)
5901
msgid "Click on the <emphasis>Store</emphasis> tab."
5902
msgstr ""
5903
5904
#: serverguide/C/virtualization.xml:1758(para)
5905
msgid "Browse available images."
5906
msgstr ""
5907
5908
#: serverguide/C/virtualization.xml:1763(para)
5909
msgid "Click on <emphasis>install</emphasis> for the image you want."
5910
msgstr ""
5911
5912
#: serverguide/C/virtualization.xml:1769(para)
5913
msgid ""
5914
"Once the image has been downloaded and installed, you can click on "
5915
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
5916
"button to view the command to execute to instantiate (start) this image. The "
5917
"image will also appear on the list given on the <emphasis>Image</emphasis> "
5918
"tab."
5919
msgstr ""
5920
5921
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
5922
msgid "More Information"
5923
msgstr ""
5924
5925
#: serverguide/C/virtualization.xml:1779(para)
5926
msgid ""
5927
"How to use the <ulink "
5928
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
5929
"Controller</ulink>"
5930
msgstr ""
5931
5932
#: serverguide/C/virtualization.xml:1783(para)
5933
msgid "Controlling eucalyptus services:"
5934
msgstr ""
5935
5936
#: serverguide/C/virtualization.xml:1788(para)
5937
msgid ""
5938
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
5939
msgstr ""
5940
5941
#: serverguide/C/virtualization.xml:1789(para)
5942
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
5943
msgstr ""
5944
5945
#: serverguide/C/virtualization.xml:1792(para)
5946
msgid "Locations of some important files:"
5947
msgstr ""
5948
5949
#: serverguide/C/virtualization.xml:1799(emphasis)
5950
msgid "Log files:"
5951
msgstr ""
5952
5953
#: serverguide/C/virtualization.xml:1802(para)
5954
msgid "/var/log/eucalyptus"
5955
msgstr ""
5956
5957
#: serverguide/C/virtualization.xml:1807(emphasis)
5958
msgid "Configuration files:"
5959
msgstr ""
5960
5961
#: serverguide/C/virtualization.xml:1810(para)
5962
msgid "/etc/eucalyptus"
5963
msgstr ""
5964
5965
#: serverguide/C/virtualization.xml:1815(emphasis)
5966
msgid "Database:"
5967
msgstr ""
5968
5969
#: serverguide/C/virtualization.xml:1818(para)
5970
msgid "/var/lib/eucalyptus/db"
5971
msgstr ""
5972
5973
#: serverguide/C/virtualization.xml:1823(emphasis)
5974
msgid "Keys:"
5975
msgstr ""
5976
5977
#: serverguide/C/virtualization.xml:1826(para)
5978
msgid "/var/lib/eucalyptus"
5979
msgstr ""
5980
5981
#: serverguide/C/virtualization.xml:1827(para)
5982
msgid "/var/lib/eucalyptus/.ssh"
5983
msgstr ""
5984
5985
#: serverguide/C/virtualization.xml:1833(para)
5986
msgid ""
5987
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
5988
"running the client tools."
5989
msgstr ""
5990
5991
#: serverguide/C/virtualization.xml:1844(para)
5992
msgid ""
5993
"For information on loading instances see the <ulink "
5994
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
5995
"page."
5996
msgstr ""
5997
5998
#: serverguide/C/virtualization.xml:1849(para)
5999
msgid ""
6000
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
6001
"documentation, downloads)</ulink>."
6002
msgstr ""
6003
6004
#: serverguide/C/virtualization.xml:1854(para)
6005
msgid ""
6006
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
6007
"(bugs, code)</ulink>."
6008
msgstr ""
6009
6010
#: serverguide/C/virtualization.xml:1859(para)
6011
msgid ""
6012
"<ulink "
6013
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
6014
"ptus Troubleshooting (1.5)</ulink>."
6015
msgstr ""
6016
6017
#: serverguide/C/virtualization.xml:1864(para)
6018
msgid ""
6019
"<ulink url=\"http://support.rightscale.com/2._References/02-"
6020
"Cloud_Infrastructures/Eucalyptus/03-"
6021
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
6022
"RightScale</ulink>."
6023
msgstr ""
6024
6025
#: serverguide/C/virtualization.xml:1870(para)
6026
msgid ""
6027
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
6028
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
6029
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
6030
msgstr ""
6031
6032
#: serverguide/C/virtualization.xml:1879(title)
6033
msgid "Glossary"
6034
msgstr ""
6035
6036
#: serverguide/C/virtualization.xml:1881(para)
6037
msgid ""
6038
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
6039
"unfamiliar to some readers. This page is intended to provide a glossary of "
6040
"such terms and acronyms."
6041
msgstr ""
6042
6043
#: serverguide/C/virtualization.xml:1888(para)
6044
msgid ""
6045
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
6046
"computing resources through virtual machines, provisioned and recollected "
6047
"dynamically."
6048
msgstr ""
6049
6050
#: serverguide/C/virtualization.xml:1894(para)
6051
msgid ""
6052
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
6053
"provides the web UI (an https server on port 8443), and implements the "
6054
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
6055
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
6056
"cloud</application> package."
6057
msgstr ""
6058
6059
#: serverguide/C/virtualization.xml:1901(para)
6060
msgid ""
6061
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
6062
"Cluster Controller. There can be more than one Cluster in an installation of "
6063
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
6064
"floor2, floor2)."
6065
msgstr ""
6066
6067
#: serverguide/C/virtualization.xml:1907(para)
6068
msgid ""
6069
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
6070
"manages collections of node resources. This service is provided by the "
6071
"Ubuntu <application>eucalyptus-cc</application> package."
6072
msgstr ""
6073
6074
#: serverguide/C/virtualization.xml:1913(para)
6075
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
6076
msgstr ""
6077
6078
#: serverguide/C/virtualization.xml:1918(para)
6079
msgid ""
6080
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
6081
"pay-by-the-gigabyte public cloud computing offering."
6082
msgstr ""
6083
6084
#: serverguide/C/virtualization.xml:1923(para)
6085
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
6086
msgstr ""
6087
6088
#: serverguide/C/virtualization.xml:1928(para)
6089
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
6090
msgstr ""
6091
6092
#: serverguide/C/virtualization.xml:1933(para)
6093
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
6094
msgstr ""
6095
6096
#: serverguide/C/virtualization.xml:1938(para)
6097
msgid ""
6098
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
6099
"Linking Your Programs To Useful Systems. An open source project originally "
6100
"from the University of California at Santa Barbara, now supported by "
6101
"Eucalyptus Systems, a Canonical Partner."
6102
msgstr ""
6103
6104
#: serverguide/C/virtualization.xml:1945(para)
6105
msgid ""
6106
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
6107
"the high level Eucalyptus components (cloud, walrus, storage controller, "
6108
"cluster controller)."
6109
msgstr ""
6110
6111
#: serverguide/C/virtualization.xml:1951(para)
6112
msgid ""
6113
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
6114
"running virtual machines, running a node controller. Within Ubuntu, this "
6115
"generally means that the CPU has VT extensions, and can run the KVM "
6116
"hypervisor."
6117
msgstr ""
6118
6119
#: serverguide/C/virtualization.xml:1957(para)
6120
msgid ""
6121
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
6122
"on nodes which host the virtual machines that comprise the cloud. This "
6123
"service is provided by the Ubuntu package <application>eucalyptus-"
6124
"nc</application>."
6125
msgstr ""
6126
6127
#: serverguide/C/virtualization.xml:1963(para)
6128
msgid ""
6129
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6130
"gigabyte persistent storage solution for EC2."
6131
msgstr ""
6132
6133
#: serverguide/C/virtualization.xml:1968(para)
6134
msgid ""
6135
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6136
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6137
"installation can have its own Storage Controller. This component is provided "
6138
"by the <application>eucalyptus-sc</application> package."
6139
msgstr ""
6140
6141
#: serverguide/C/virtualization.xml:1975(para)
6142
msgid ""
6143
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6144
"solution, based on Eucalyptus."
6145
msgstr ""
6146
6147
#: serverguide/C/virtualization.xml:1980(para)
6148
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6149
msgstr ""
6150
6151
#: serverguide/C/virtualization.xml:1985(para)
6152
msgid ""
6153
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6154
"some modern CPUs, allowing for accelerated virtual machine hosting."
6155
msgstr ""
6156
6157
#: serverguide/C/virtualization.xml:1990(para)
6158
msgid ""
6159
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6160
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6161
"put/get abstractions."
6162
msgstr ""
6163
6164
#: serverguide/C/virtualization.xml:2000(title)
6165
msgid "OpenNebula"
6166
msgstr ""
6167
6168
#: serverguide/C/virtualization.xml:2002(para)
6169
msgid ""
6170
"<application>OpenNebula</application> allows virtual machines to be placed "
6171
"and re-placed dynamically on a pool of physical resources. This allows a "
6172
"virtual machine to be hosted from any location available."
6173
msgstr ""
6174
6175
#: serverguide/C/virtualization.xml:2007(para)
6176
msgid ""
6177
"This section will detail configuring an OpenNebula cluster using three "
6178
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6179
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6180
"also need a bridge configured to allow the virtual machines access to the "
6181
"local network. For details see <xref linkend=\"bridging\"/>."
6182
msgstr ""
6183
6184
#: serverguide/C/virtualization.xml:2016(para)
6185
msgid "First, from a terminal on the Front-End enter:"
6186
msgstr ""
6187
6188
#: serverguide/C/virtualization.xml:2021(command)
6189
msgid "sudo apt-get install opennebula"
6190
msgstr ""
6191
6192
#: serverguide/C/virtualization.xml:2024(para)
6193
msgid "On each Compute Node install:"
6194
msgstr ""
6195
6196
#: serverguide/C/virtualization.xml:2029(command)
6197
msgid "sudo apt-get install opennebula-node"
6198
msgstr ""
6199
6200
#: serverguide/C/virtualization.xml:2032(para)
6201
msgid ""
6202
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6203
"to have a password. On each machine execute:"
6204
msgstr ""
6205
6206
#: serverguide/C/virtualization.xml:2037(command)
6207
msgid "sudo passwd oneadmin"
6208
msgstr ""
6209
6210
#: serverguide/C/virtualization.xml:2040(para)
6211
msgid ""
6212
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6213
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6214
msgstr ""
6215
6216
#: serverguide/C/virtualization.xml:2045(command)
6217
msgid ""
6218
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6219
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6220
msgstr ""
6221
6222
#: serverguide/C/virtualization.xml:2046(command)
6223
msgid ""
6224
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6225
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6226
msgstr ""
6227
6228
#: serverguide/C/virtualization.xml:2047(command)
6229
msgid ""
6230
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6231
"/var/lib/one/.ssh/authorized_keys\""
6232
msgstr ""
6233
6234
#: serverguide/C/virtualization.xml:2050(para)
6235
msgid ""
6236
"The SSH key for the Compute Nodes needs to be added to the "
6237
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6238
"accomplish this <application>ssh</application> to each Compute Node as a "
6239
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6240
"session, and execute the following to copy the SSH key from "
6241
"<filename>~/.ssh/known_hosts</filename> to "
6242
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6243
msgstr ""
6244
6245
#: serverguide/C/virtualization.xml:2057(command)
6246
msgid ""
6247
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6248
"/etc/ssh/ssh_known_hosts\""
6249
msgstr ""
6250
6251
#: serverguide/C/virtualization.xml:2058(command)
6252
msgid ""
6253
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6254
"/etc/ssh/ssh_known_hosts\""
6255
msgstr ""
6256
6257
#: serverguide/C/virtualization.xml:2062(para)
6258
msgid ""
6259
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6260
"appropriate host names."
6261
msgstr ""
6262
6263
#: serverguide/C/virtualization.xml:2067(para)
6264
msgid ""
6265
"This allows the <emphasis>oneadmin</emphasis> to use "
6266
"<application>scp</application>, without a password or manual intervention, "
6267
"to deploy an image to the Compute Nodes."
6268
msgstr ""
6269
6270
#: serverguide/C/virtualization.xml:2072(para)
6271
msgid ""
6272
"On the Front-End create a directory to store the VM images, giving the "
6273
"<emphasis>oneadmin</emphasis> user access to the directory:"
6274
msgstr ""
6275
6276
#: serverguide/C/virtualization.xml:2077(command)
6277
msgid "sudo mkdir /var/lib/one/images"
6278
msgstr ""
6279
6280
#: serverguide/C/virtualization.xml:2078(command)
6281
msgid "sudo chown oneadmin /var/lib/one/images/"
6282
msgstr ""
6283
6284
#: serverguide/C/virtualization.xml:2081(para)
6285
msgid ""
6286
"Finally, copy a virtual machine disk file into "
6287
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6288
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6289
"and-vmbuilder\"/> for details."
6290
msgstr ""
6291
6292
#: serverguide/C/virtualization.xml:2090(para)
6293
msgid ""
6294
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6295
"and virtual machines added to the cluster."
6296
msgstr ""
6297
6298
#: serverguide/C/virtualization.xml:2094(para)
6299
msgid "From a terminal prompt enter:"
6300
msgstr ""
6301
6302
#: serverguide/C/virtualization.xml:2099(command)
6303
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6304
msgstr ""
6305
6306
#: serverguide/C/virtualization.xml:2100(command)
6307
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6308
msgstr ""
6309
6310
#: serverguide/C/virtualization.xml:2103(para)
6311
msgid ""
6312
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6313
"<filename>vnet01.template</filename>:"
6314
msgstr ""
6315
6316
#: serverguide/C/virtualization.xml:2107(programlisting)
6317
#, no-wrap
6318
msgid ""
6319
"\n"
6320
"NAME = \"LAN\"\n"
6321
"TYPE = RANGED\n"
6322
"BRIDGE = br0\n"
6323
"NETWORK_SIZE = C\n"
6324
"NETWORK_ADDRESS = 192.168.0.0\n"
6325
msgstr ""
6326
6327
#: serverguide/C/virtualization.xml:2116(para)
6328
msgid ""
6329
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6330
msgstr ""
6331
6332
#: serverguide/C/virtualization.xml:2121(para)
6333
msgid ""
6334
"Using the <application>onevnet</application> utility, add the virtual "
6335
"network to OpenNebula:"
6336
msgstr ""
6337
6338
#: serverguide/C/virtualization.xml:2126(command)
6339
msgid "onevnet create vnet01.template"
6340
msgstr ""
6341
6342
#: serverguide/C/virtualization.xml:2129(para)
6343
msgid ""
6344
"Now create a <emphasis>VM Template</emphasis> file named "
6345
"<filename>vm01.template</filename>:"
6346
msgstr ""
6347
6348
#: serverguide/C/virtualization.xml:2133(programlisting)
6349
#, no-wrap
6350
msgid ""
6351
"\n"
6352
"NAME = vm01\n"
6353
"CPU = 0.5\n"
6354
"MEMORY = 512\n"
6355
"\n"
6356
"OS = [ BOOT = hd ]\n"
6357
"\n"
6358
"DISK = [\n"
6359
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6360
" target = \"hda\",\n"
6361
" readonly = \"no\" ]\n"
6362
"\n"
6363
"NIC = [ NETWORK=\"LAN\" ]\n"
6364
"\n"
6365
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6366
msgstr ""
6367
6368
#: serverguide/C/virtualization.xml:2150(para)
6369
msgid "Start the virtual machine using <application>onevm</application>:"
6370
msgstr ""
6371
6372
#: serverguide/C/virtualization.xml:2155(command)
6373
msgid "onevm submit vm01.template"
6374
msgstr ""
6375
6376
#: serverguide/C/virtualization.xml:2158(para)
6377
msgid ""
6378
"Use the <application>onevm list</application> option to view information "
6379
"about virtual machines. Also, the <application>onevm show vm01</application> "
6380
"option will display more details about a specific virtual machine."
6381
msgstr ""
6382
6383
#: serverguide/C/virtualization.xml:2169(para)
6384
msgid ""
6385
"See the <ulink "
6386
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6387
"> for more information."
6388
msgstr ""
6389
6390
#: serverguide/C/virtualization.xml:2174(para)
6391
msgid ""
6392
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6393
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6394
"url=\"http://freenode.net\">Freenode</ulink>."
6395
msgstr ""
6396
6397
#: serverguide/C/virtualization.xml:2180(para)
6398
msgid ""
6399
"Also, the <ulink "
6400
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6401
"Wiki</ulink> page has more details."
6402
msgstr ""
6403
6404
#: serverguide/C/vcs.xml:13(title)
6405
msgid "Version Control System"
6406
msgstr ""
6407
6408
#: serverguide/C/vcs.xml:14(para)
6409
msgid ""
6410
"Version control is the art of managing changes to information. It has long "
6411
"been a critical tool for programmers, who typically spend their time making "
6412
"small changes to software and then undoing those changes the next day. But "
6413
"the usefulness of version control software extends far beyond the bounds of "
6414
"the software development world. Anywhere you can find people using computers "
6415
"to manage information that changes often, there is room for version control."
6416
msgstr ""
6417
6418
#: serverguide/C/vcs.xml:17(title)
6419
msgid "Bazaar"
6420
msgstr ""
6421
6422
#: serverguide/C/vcs.xml:18(para)
6423
msgid ""
6424
"Bazaar is a new version control system sponsored by Canonical, the "
6425
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6426
"support a central repository model, Bazaar also supports "
6427
"<emphasis>distributed version control</emphasis>, giving people the ability "
6428
"to collaborate more efficiently. In particular, Bazaar is designed to "
6429
"maximize the level of community participation in open source projects."
6430
msgstr ""
6431
6432
#: serverguide/C/vcs.xml:29(para)
6433
msgid ""
6434
"At a terminal prompt, enter the following command to install "
6435
"<application>bzr</application>: <screen>\n"
6436
"<command>sudo apt-get install bzr</command>\n"
6437
"</screen>"
6438
msgstr ""
6439
6440
#: serverguide/C/vcs.xml:40(para)
6441
msgid ""
6442
"To introduce yourself to <application>bzr</application>, use the "
6443
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6444
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6445
"</screen>"
6446
msgstr ""
6447
6448
#: serverguide/C/vcs.xml:49(title)
6449
msgid "Learning Bazaar"
6450
msgstr ""
6451
6452
#: serverguide/C/vcs.xml:50(para)
6453
msgid ""
6454
"Bazaar comes with bundled documentation installed into "
6455
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6456
"is a good place to start. The <application>bzr</application> command also "
6457
"comes with built-in help: <screen>\n"
6458
"<command>$ bzr help</command>\n"
6459
"</screen>"
6460
msgstr ""
6461
6462
#: serverguide/C/vcs.xml:60(para)
6463
msgid ""
6464
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6465
"<command>$ bzr help foo</command>\n"
6466
"</screen>"
6467
msgstr ""
6468
6469
#: serverguide/C/vcs.xml:68(title)
6470
msgid "Launchpad Integration"
6471
msgstr ""
6472
6473
#: serverguide/C/vcs.xml:69(para)
6474
msgid ""
6475
"While highly useful as a stand-alone system, Bazaar has good, optional "
6476
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6477
"the collaborative development system used by Canonical and the broader open "
6478
"source community to manage and extend Ubuntu itself. For information on how "
6479
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6480
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6481
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6482
msgstr ""
6483
6484
#: serverguide/C/vcs.xml:81(title)
6485
msgid "Subversion"
6486
msgstr ""
6487
6488
#: serverguide/C/vcs.xml:82(para)
6489
msgid ""
6490
"Subversion is an open source version control system. Using Subversion, you "
6491
"can record the history of source files and documents. It manages files and "
6492
"directories over time. A tree of files is placed into a central repository. "
6493
"The repository is much like an ordinary file server, except that it "
6494
"remembers every change ever made to files and directories."
6495
msgstr ""
6496
6497
#: serverguide/C/vcs.xml:87(para)
6498
msgid ""
6499
"To access Subversion repository using the HTTP protocol, you must install "
6500
"and configure a web server. Apache2 is proven to work with Subversion. "
6501
"Please refer to the HTTP subsection in the Apache2 section to install and "
6502
"configure Apache2. To access the Subversion repository using the HTTPS "
6503
"protocol, you must install and configure a digital certificate in your "
6504
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6505
"section to install and configure the digital certificate."
6506
msgstr ""
6507
6508
#: serverguide/C/vcs.xml:96(para)
6509
msgid ""
6510
"To install Subversion, run the following command from a terminal prompt:"
6511
msgstr ""
6512
6513
#: serverguide/C/vcs.xml:101(command)
6514
msgid "sudo apt-get install subversion libapache2-svn"
6515
msgstr ""
6516
6517
#: serverguide/C/vcs.xml:108(para)
6518
msgid ""
6519
"This step assumes you have installed above mentioned packages on your "
6520
"system. This section explains how to create a Subversion repository and "
6521
"access the project."
6522
msgstr ""
6523
6524
#: serverguide/C/vcs.xml:111(title)
6525
msgid "Create Subversion Repository"
6526
msgstr ""
6527
6528
#: serverguide/C/vcs.xml:112(para)
6529
msgid ""
6530
"The Subversion repository can be created using the following command from a "
6531
"terminal prompt:"
6532
msgstr ""
6533
6534
#: serverguide/C/vcs.xml:116(command)
6535
msgid "svnadmin create /path/to/repos/project"
6536
msgstr ""
6537
6538
#: serverguide/C/vcs.xml:121(title)
6539
msgid "Importing Files"
6540
msgstr ""
6541
6542
#: serverguide/C/vcs.xml:122(para)
6543
msgid ""
6544
"Once you create the repository you can <emphasis>import</emphasis> files "
6545
"into the repository. To import a directory, enter the following from a "
6546
"terminal prompt: <screen>\n"
6547
"<command>svn import /path/to/import/directory "
6548
"file:///path/to/repos/project</command>\n"
6549
"</screen>"
6550
msgstr ""
6551
6552
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6553
msgid "Access Methods"
6554
msgstr ""
6555
6556
#: serverguide/C/vcs.xml:135(para)
6557
msgid ""
6558
"Subversion repositories can be accessed (checked out) through many different "
6559
"methods --on local disk, or through various network protocols. A repository "
6560
"location, however, is always a URL. The table describes how different URL "
6561
"schemes map to the available access methods."
6562
msgstr ""
6563
6564
#: serverguide/C/vcs.xml:146(para)
6565
msgid "Schema"
6566
msgstr ""
6567
6568
#: serverguide/C/vcs.xml:147(para)
6569
msgid "Access Method"
6570
msgstr ""
6571
6572
#: serverguide/C/vcs.xml:152(para)
6573
msgid "file://"
6574
msgstr ""
6575
6576
#: serverguide/C/vcs.xml:153(para)
6577
msgid "direct repository access (on local disk)"
6578
msgstr ""
6579
6580
#: serverguide/C/vcs.xml:156(para)
6581
msgid "http://"
6582
msgstr ""
6583
6584
#: serverguide/C/vcs.xml:157(para)
6585
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6586
msgstr ""
6587
6588
#: serverguide/C/vcs.xml:160(para)
6589
msgid "https://"
6590
msgstr ""
6591
6592
#: serverguide/C/vcs.xml:161(para)
6593
msgid "Same as http://, but with SSL encryption"
6594
msgstr ""
6595
6596
#: serverguide/C/vcs.xml:164(para)
6597
msgid "svn://"
6598
msgstr ""
6599
6600
#: serverguide/C/vcs.xml:165(para)
6601
msgid "Access via custom protocol to an svnserve server"
6602
msgstr ""
6603
6604
#: serverguide/C/vcs.xml:168(para)
6605
msgid "svn+ssh://"
6606
msgstr ""
6607
6608
#: serverguide/C/vcs.xml:169(para)
6609
msgid "Same as svn://, but through an SSH tunnel"
6610
msgstr ""
6611
6612
#: serverguide/C/vcs.xml:175(para)
6613
msgid ""
6614
"In this section, we will see how to configure Subversion for all these "
6615
"access methods. Here, we cover the basics. For more advanced usage details, "
6616
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6617
msgstr ""
6618
6619
#: serverguide/C/vcs.xml:182(title)
6620
msgid "Direct repository access (file://)"
6621
msgstr ""
6622
6623
#: serverguide/C/vcs.xml:183(para)
6624
msgid ""
6625
"This is the simplest of all access methods. It does not require any "
6626
"Subversion server process to be running. This access method is used to "
6627
"access Subversion from the same machine. The syntax of the command, entered "
6628
"at a terminal prompt, is as follows:"
6629
msgstr ""
6630
6631
#: serverguide/C/vcs.xml:190(command)
6632
msgid "svn co file:///path/to/repos/project"
6633
msgstr ""
6634
6635
#: serverguide/C/vcs.xml:193(para)
6636
msgid "or"
6637
msgstr ""
6638
6639
#: serverguide/C/vcs.xml:196(command)
6640
msgid "svn co file://localhost/path/to/repos/project"
6641
msgstr ""
6642
6643
#: serverguide/C/vcs.xml:200(para)
6644
msgid ""
6645
"If you do not specify the hostname, there are three forward slashes (///) -- "
6646
"two for the protocol (file, in this case) plus the leading slash in the "
6647
"path. If you specify the hostname, you must use two forward slashes (//)."
6648
msgstr ""
6649
6650
#: serverguide/C/vcs.xml:202(para)
6651
msgid ""
6652
"The repository permissions depend on filesystem permissions. If the user has "
6653
"read/write permission, he can checkout from and commit to the repository."
6654
msgstr ""
6655
6656
#: serverguide/C/vcs.xml:205(title)
6657
msgid "Access via WebDAV protocol (http://)"
6658
msgstr ""
6659
6660
#: serverguide/C/vcs.xml:206(para)
6661
msgid ""
6662
"To access the Subversion repository via WebDAV protocol, you must configure "
6663
"your Apache 2 web server. Add the following snippet between the "
6664
"<emphasis><VirtualHost></emphasis> and "
6665
"<emphasis></VirtualHost></emphasis> elements in "
6666
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6667
"VirtualHost file:"
6668
msgstr ""
6669
6670
#: serverguide/C/vcs.xml:212(programlisting)
6671
#, no-wrap
6672
msgid ""
6673
"\n"
6674
" <Location /svn>\n"
6675
" DAV svn\n"
6676
" SVNPath /home/svn\n"
6677
" AuthType Basic\n"
6678
" AuthName \"Your repository name\"\n"
6679
" AuthUserFile /etc/subversion/passwd\n"
6680
" Require valid-user\n"
6681
" </Location> \n"
6682
msgstr ""
6683
6684
#: serverguide/C/vcs.xml:223(para)
6685
msgid ""
6686
"The above configuration snippet assumes that Subversion repositories are "
6687
"created under <filename>/home/svn/</filename> directory using "
6688
"<command>svnadmin</command> command. They can be accessible using "
6689
"<command>http://hostname/svn/repos_name</command> url."
6690
msgstr ""
6691
6692
#: serverguide/C/vcs.xml:229(para)
6693
msgid ""
6694
"To import or commit files to your Subversion repository over HTTP, the "
6695
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6696
"HTTP user is <command>www-data</command>. To change the ownership of the "
6697
"repository files enter the following command from terminal prompt:"
6698
msgstr ""
6699
6700
#: serverguide/C/vcs.xml:238(command)
6701
msgid "sudo chown -R www-data:www-data /path/to/repos"
6702
msgstr ""
6703
6704
#: serverguide/C/vcs.xml:241(para)
6705
msgid ""
6706
"By changing the ownership of repository as <command>www-data</command> you "
6707
"will not be able to import or commit files into the repository by running "
6708
"<command>svn import file:///</command> command as any user other than "
6709
"<command>www-data</command>."
6710
msgstr ""
6711
6712
#: serverguide/C/vcs.xml:250(para)
6713
msgid ""
6714
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6715
"that will contain user authentication details. To create a file issue the "
6716
"following command at a command prompt (which will create the file and add "
6717
"the first user):"
6718
msgstr ""
6719
6720
#: serverguide/C/vcs.xml:256(command)
6721
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6722
msgstr ""
6723
6724
#: serverguide/C/vcs.xml:259(para)
6725
msgid ""
6726
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6727
"option replaces the old file. Instead use this form:"
6728
msgstr ""
6729
6730
#: serverguide/C/vcs.xml:264(command)
6731
msgid "sudo htpasswd /etc/subversion/password user_name"
6732
msgstr ""
6733
6734
#: serverguide/C/vcs.xml:268(para)
6735
msgid ""
6736
"This command will prompt you to enter the password. Once you enter the "
6737
"password, the user is added. Now, to access the repository you can run the "
6738
"following command:"
6739
msgstr ""
6740
6741
#: serverguide/C/vcs.xml:269(command)
6742
msgid "svn co http://servername/svn"
6743
msgstr ""
6744
6745
#: serverguide/C/vcs.xml:271(para)
6746
msgid ""
6747
"The password is transmitted as plain text. If you are worried about password "
6748
"snooping, you are advised to use SSL encryption. For details, please refer "
6749
"next section."
6750
msgstr ""
6751
6752
#: serverguide/C/vcs.xml:277(title)
6753
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6754
msgstr ""
6755
6756
#: serverguide/C/vcs.xml:278(para)
6757
msgid ""
6758
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6759
"(https://) is similar to http:// except that you must install and configure "
6760
"the digital certificate in your Apache2 web server. To use SSL with "
6761
"Subversion add the above Apache2 configuration to "
6762
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6763
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6764
"configuration\"/>."
6765
msgstr ""
6766
6767
#: serverguide/C/vcs.xml:287(para)
6768
msgid ""
6769
"You can install a digital certificate issued by a signing authority. "
6770
"Alternatively, you can install your own self-signed certificate."
6771
msgstr ""
6772
6773
#: serverguide/C/vcs.xml:292(para)
6774
msgid ""
6775
"This step assumes you have installed and configured a digital certificate in "
6776
"your Apache 2 web server. Now, to access the Subversion repository, please "
6777
"refer to the above section! The access methods are exactly the same, except "
6778
"the protocol. You must use https:// to access the Subversion repository."
6779
msgstr ""
6780
6781
#: serverguide/C/vcs.xml:302(title)
6782
msgid "Access via custom protocol (svn://)"
6783
msgstr ""
6784
6785
#: serverguide/C/vcs.xml:303(para)
6786
msgid ""
6787
"Once the Subversion repository is created, you can configure the access "
6788
"control. You can edit the <filename> "
6789
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6790
"access control. For example, to set up authentication, you can uncomment the "
6791
"following lines in the configuration file:"
6792
msgstr ""
6793
6794
#: serverguide/C/vcs.xml:310(programlisting)
6795
#, no-wrap
6796
msgid ""
6797
"# [general]\n"
6798
"# password-db = passwd"
6799
msgstr ""
6800
6801
#: serverguide/C/vcs.xml:313(para)
6802
msgid ""
6803
"After uncommenting the above lines, you can maintain the user list in the "
6804
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6805
"directory and add the new user. The syntax is as follows:"
6806
msgstr ""
6807
6808
#: serverguide/C/vcs.xml:319(programlisting)
6809
#, no-wrap
6810
msgid "username = password"
6811
msgstr ""
6812
6813
#: serverguide/C/vcs.xml:320(para)
6814
msgid "For more details, please refer to the file."
6815
msgstr ""
6816
6817
#: serverguide/C/vcs.xml:324(para)
6818
msgid ""
6819
"Now, to access Subversion via the svn:// custom protocol, either from the "
6820
"same machine or a different machine, you can run svnserver using svnserve "
6821
"command. The syntax is as follows:"
6822
msgstr ""
6823
6824
#: serverguide/C/vcs.xml:329(programlisting)
6825
#, no-wrap
6826
msgid ""
6827
"$ svnserve -d --foreground -r /path/to/repos\n"
6828
"# -d -- daemon mode\n"
6829
"# --foreground -- run in foreground (useful for debugging)\n"
6830
"# -r -- root of directory to serve\n"
6831
"\n"
6832
"For more usage details, please refer to:\n"
6833
"$ svnserve --help"
6834
msgstr ""
6835
6836
#: serverguide/C/vcs.xml:337(para)
6837
msgid ""
6838
"Once you run this command, Subversion starts listening on default port "
6839
"(3690). To access the project repository, you must run the following command "
6840
"from a terminal prompt:"
6841
msgstr ""
6842
6843
#: serverguide/C/vcs.xml:340(command)
6844
msgid "svn co svn://hostname/project project --username user_name"
6845
msgstr ""
6846
6847
#: serverguide/C/vcs.xml:343(para)
6848
msgid ""
6849
"Based on server configuration, it prompts for password. Once you are "
6850
"authenticated, it checks out the code from Subversion repository. To "
6851
"synchronize the project repository with the local copy, you can run the "
6852
"<command>update</command> sub-command. The syntax of the command, entered at "
6853
"a terminal prompt, is as follows:"
6854
msgstr ""
6855
6856
#: serverguide/C/vcs.xml:351(command)
6857
msgid "cd project_dir ; svn update"
6858
msgstr ""
6859
6860
#: serverguide/C/vcs.xml:354(para)
6861
msgid ""
6862
"For more details about using each Subversion sub-command, you can refer to "
6863
"the manual. For example, to learn more about the co (checkout) command, "
6864
"please run the following command from a terminal prompt:"
6865
msgstr ""
6866
6867
#: serverguide/C/vcs.xml:358(command)
6868
msgid "svn co help"
6869
msgstr ""
6870
6871
#: serverguide/C/vcs.xml:362(title)
6872
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
6873
msgstr ""
6874
6875
#: serverguide/C/vcs.xml:363(para)
6876
msgid ""
6877
"The configuration and server process is same as in the svn:// method. For "
6878
"details, please refer to the above section. This step assumes you have "
6879
"followed the above step and started the Subversion server using "
6880
"<application>svnserve</application> command."
6881
msgstr ""
6882
6883
#: serverguide/C/vcs.xml:369(para)
6884
msgid ""
6885
"It is also assumed that the ssh server is running on that machine and that "
6886
"it is allowing incoming connections. To confirm, please try to login to that "
6887
"machine using ssh. If you can login, everything is perfect. If you cannot "
6888
"login, please address it before continuing further."
6889
msgstr ""
6890
6891
#: serverguide/C/vcs.xml:375(para)
6892
msgid ""
6893
"The svn+ssh:// protocol is used to access the Subversion repository using "
6894
"SSL encryption. The data transfer is encrypted using this method. To access "
6895
"the project repository (for example with a checkout), you must use the "
6896
"following command syntax:"
6897
msgstr ""
6898
6899
#: serverguide/C/vcs.xml:382(command)
6900
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
6901
msgstr ""
6902
6903
#: serverguide/C/vcs.xml:386(para)
6904
msgid ""
6905
"You must use the full path (/path/to/repos/project) to access the Subversion "
6906
"repository using this access method."
6907
msgstr ""
6908
6909
#: serverguide/C/vcs.xml:389(para)
6910
msgid ""
6911
"Based on server configuration, it prompts for password. You must enter the "
6912
"password you use to login via ssh. Once you are authenticated, it checks out "
6913
"the code from the Subversion repository."
6914
msgstr ""
6915
6916
#: serverguide/C/vcs.xml:399(title)
6917
msgid "CVS Server"
6918
msgstr ""
6919
6920
#: serverguide/C/vcs.xml:400(para)
6921
msgid ""
6922
"CVS is a version control system. You can use it to record the history of "
6923
"source files."
6924
msgstr ""
6925
6926
#: serverguide/C/vcs.xml:406(para)
6927
msgid ""
6928
"To install <application>CVS</application>, run the following command from a "
6929
"terminal prompt: <screen>\n"
6930
"<command>sudo apt-get install cvs</command>\n"
6931
"</screen> After you install <application>cvs</application>, you should "
6932
"install <application>xinetd</application> to start/stop the cvs server. At "
6933
"the prompt, enter the following command to install "
6934
"<application>xinetd</application>: <screen>\n"
6935
"<command>sudo apt-get install xinetd</command>\n"
6936
"</screen>"
6937
msgstr ""
6938
6939
#: serverguide/C/vcs.xml:439(programlisting)
6940
#, no-wrap
6941
msgid ""
6942
"\n"
6943
"service cvspserver\n"
6944
"{\n"
6945
" port = 2401\n"
6946
" socket_type = stream\n"
6947
" protocol = tcp\n"
6948
" user = root\n"
6949
" wait = no\n"
6950
" type = UNLISTED\n"
6951
" server = /usr/bin/cvs\n"
6952
" server_args = -f --allow-root /var/lib/cvs pserver\n"
6953
" disable = no\n"
6954
"}\n"
6955
msgstr ""
6956
6957
#: serverguide/C/vcs.xml:455(para)
6958
msgid ""
6959
"Be sure to edit the repository if you have changed the default repository "
6960
"(<application>/var/lib/cvs</application>) directory."
6961
msgstr ""
6962
6963
#: serverguide/C/vcs.xml:424(para)
6964
msgid ""
6965
"Once you install cvs, the repository will be automatically initialized. By "
6966
"default, the repository resides under the "
6967
"<application>/var/lib/cvs</application> directory. You can change this path "
6968
"by running following command: <screen>\n"
6969
"<command>cvs -d /your/new/cvs/repo init</command>\n"
6970
"</screen> Once the initial repository is set up, you can configure "
6971
"<application>xinetd</application> to start the CVS server. You can copy the "
6972
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
6973
"<placeholder-1/><placeholder-2/> Once you have configured "
6974
"<application>xinetd</application> you can start the cvs server by running "
6975
"following command: <screen>\n"
6976
"<command>sudo /etc/init.d/xinetd restart</command>\n"
6977
"</screen>"
6978
msgstr ""
6979
6980
#: serverguide/C/vcs.xml:468(para)
6981
msgid ""
6982
"You can confirm that the CVS server is running by issuing the following "
6983
"command:"
6984
msgstr ""
6985
6986
#: serverguide/C/vcs.xml:475(command)
6987
msgid "sudo netstat -tap | grep cvs"
6988
msgstr ""
6989
6990
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
6991
msgid ""
6992
"When you run this command, you should see the following line or something "
6993
"similar:"
6994
msgstr ""
6995
6996
#: serverguide/C/vcs.xml:484(programlisting)
6997
#, no-wrap
6998
msgid ""
6999
"\n"
7000
"tcp 0 0 *:cvspserver *:* LISTEN \n"
7001
msgstr ""
7002
7003
#: serverguide/C/vcs.xml:488(para)
7004
msgid ""
7005
"From here you can continue to add users, add new projects, and manage the "
7006
"CVS server."
7007
msgstr ""
7008
7009
#: serverguide/C/vcs.xml:493(para)
7010
msgid ""
7011
"CVS allows the user to add users independently of the underlying OS "
7012
"installation. Probably the easiest way is to use the Linux Users for CVS, "
7013
"although it has potential security issues. Please refer to the CVS manual "
7014
"for details."
7015
msgstr ""
7016
7017
#: serverguide/C/vcs.xml:503(title)
7018
msgid "Add Projects"
7019
msgstr ""
7020
7021
#: serverguide/C/vcs.xml:515(para)
7022
msgid ""
7023
"You can use the CVSROOT environment variable to store the CVS root "
7024
"directory. Once you export the CVSROOT environment variable, you can avoid "
7025
"using -d option in the above cvs command."
7026
msgstr ""
7027
7028
#: serverguide/C/vcs.xml:527(para)
7029
msgid ""
7030
"When you add a new project, the CVS user you use must have write access to "
7031
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
7032
"the <application>src</application> group has write access to the CVS "
7033
"repository. So, you can add the user to this group, and he can then add and "
7034
"manage projects in the CVS repository."
7035
msgstr ""
7036
7037
#: serverguide/C/vcs.xml:504(para)
7038
msgid ""
7039
"This section explains how to add new project to the CVS repository. Create "
7040
"the directory and add necessary document and source files to the directory. "
7041
"Now, run the following command to add this project to CVS repository: "
7042
"<screen>\n"
7043
"<command>cd your/project</command>\n"
7044
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
7045
"\"Importing my project to CVS repository\" . new_project start</command>\n"
7046
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
7047
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
7048
"purpose in this context, but since CVS requires them, they must be present. "
7049
"<placeholder-2/>"
7050
msgstr ""
7051
7052
#: serverguide/C/vcs.xml:540(ulink)
7053
msgid "Bazaar Home Page"
7054
msgstr ""
7055
7056
#: serverguide/C/vcs.xml:541(ulink)
7057
msgid "Launchpad"
7058
msgstr ""
7059
7060
#: serverguide/C/vcs.xml:542(ulink)
7061
msgid "Subversion Home Page"
7062
msgstr ""
7063
7064
#: serverguide/C/vcs.xml:543(ulink)
7065
msgid "Subversion Book"
7066
msgstr ""
7067
7068
#: serverguide/C/vcs.xml:545(ulink)
7069
msgid "CVS Manual"
7070
msgstr ""
7071
7072
#: serverguide/C/vcs.xml:546(ulink)
7073
msgid "Easy Bazaar Ubuntu Wiki page"
7074
msgstr ""
7075
7076
#: serverguide/C/vcs.xml:547(ulink)
7077
msgid "Ubuntu Wiki Subversion page"
7078
msgstr ""
7079
7080
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
7081
msgid "Credits and License"
7082
msgstr ""
7083
7084
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
7085
msgid ""
7086
"This document is maintained by the Ubuntu documentation team "
7087
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
7088
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
7089
msgstr ""
7090
7091
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
7092
msgid ""
7093
"This document is made available under the Creative Commons ShareAlike 2.5 "
7094
"License (CC-BY-SA)."
7095
msgstr ""
7096
7097
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
7098
msgid ""
7099
"You are free to modify, extend, and improve the Ubuntu documentation source "
7100
"code under the terms of this license. All derivative works must be released "
7101
"under this license."
7102
msgstr ""
7103
7104
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
7105
msgid ""
7106
"This documentation is distributed in the hope that it will be useful, but "
7107
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
7108
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
7109
msgstr ""
7110
7111
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
7112
msgid ""
7113
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
7114
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
7115
msgstr ""
7116
7117
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
7118
msgid "2008"
7119
msgstr ""
7120
7121
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
7122
msgid "Ubuntu Documentation Project"
7123
msgstr ""
7124
7125
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7126
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7127
msgstr ""
7128
7129
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7130
msgid "The Ubuntu Documentation Project"
7131
msgstr ""
7132
7133
#: serverguide/C/serverguide.xml:17(para)
7134
msgid ""
7135
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7136
"information on how to install and configure various server applications on "
7137
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7138
"guide for configuring and customizing your system."
7139
msgstr ""
7140
7141
#: serverguide/C/security.xml:13(title)
7142
msgid "Security"
7143
msgstr ""
7144
7145
#: serverguide/C/security.xml:14(para)
7146
msgid ""
7147
"Security should always be considered when installing, deploying, and using "
7148
"any type of computer system. Although a fresh installation of Ubuntu is "
7149
"relatively safe for immediate use on the Internet, it is important to have a "
7150
"balanced understanding of your systems security posture based on how it will "
7151
"be used after deployment."
7152
msgstr ""
7153
7154
#: serverguide/C/security.xml:17(para)
7155
msgid ""
7156
"This chapter provides an overview of security related topics as they pertain "
7157
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7158
"to protect your server and network from any number of potential security "
7159
"threats."
7160
msgstr ""
7161
7162
#: serverguide/C/security.xml:21(title)
7163
msgid "User Management"
7164
msgstr ""
7165
7166
#: serverguide/C/security.xml:22(para)
7167
msgid ""
7168
"User management is a critical part of maintaining a secure system. "
7169
"Ineffective user and privilege management often lead many systems into being "
7170
"compromised. Therefore, it is important that you understand how you can "
7171
"protect your server through simple and effective user account management "
7172
"techniques."
7173
msgstr ""
7174
7175
#: serverguide/C/security.xml:26(title)
7176
msgid "Where is root?"
7177
msgstr ""
7178
7179
#: serverguide/C/security.xml:27(para)
7180
msgid ""
7181
"Ubuntu developers made a conscientious decision to disable the "
7182
"administrative root account by default in all Ubuntu installations. This "
7183
"does not mean that the root account has been deleted or that it may not be "
7184
"accessed. It merely has been given a password which matches no possible "
7185
"encrypted value, therefore may not log in directly by itself."
7186
msgstr ""
7187
7188
#: serverguide/C/security.xml:30(para)
7189
msgid ""
7190
"Instead, users are encouraged to make use of a tool by the name of "
7191
"<application>sudo</application> to carry out system administrative duties. "
7192
"<application>Sudo</application> allows an authorized user to temporarily "
7193
"elevate their privileges using their own password instead of having to know "
7194
"the password belonging to the root account. This simple yet effective "
7195
"methodology provides accountability for all user actions, and gives the "
7196
"administrator granular control over which actions a user can perform with "
7197
"said privileges."
7198
msgstr ""
7199
7200
#: serverguide/C/security.xml:35(para)
7201
msgid ""
7202
"If for some reason you wish to enable the root account, simply give it a "
7203
"password:"
7204
msgstr ""
7205
7206
#: serverguide/C/security.xml:39(command)
7207
msgid "sudo passwd"
7208
msgstr ""
7209
7210
#: serverguide/C/security.xml:41(para)
7211
msgid ""
7212
"Sudo will prompt you for your password, and then ask you to supply a new "
7213
"password for root as shown below:"
7214
msgstr ""
7215
7216
#: serverguide/C/security.xml:44(userinput)
7217
#, no-wrap
7218
msgid "(enter your own password)"
7219
msgstr ""
7220
7221
#: serverguide/C/security.xml:45(userinput)
7222
#, no-wrap
7223
msgid "(enter a new password for root)"
7224
msgstr ""
7225
7226
#: serverguide/C/security.xml:46(userinput)
7227
#, no-wrap
7228
msgid "(repeat new password for root)"
7229
msgstr ""
7230
7231
#: serverguide/C/security.xml:44(computeroutput)
7232
#, no-wrap
7233
msgid ""
7234
"[sudo] password for username: <placeholder-1/>\n"
7235
"Enter new UNIX password: <placeholder-2/>\n"
7236
"Retype new UNIX password: <placeholder-3/>\n"
7237
"passwd: password updated successfully"
7238
msgstr ""
7239
7240
#: serverguide/C/security.xml:51(para)
7241
msgid "To disable the root account, use the following passwd syntax:"
7242
msgstr ""
7243
7244
#: serverguide/C/security.xml:55(command)
7245
msgid "sudo passwd -l root"
7246
msgstr ""
7247
7248
#: serverguide/C/security.xml:59(para)
7249
msgid ""
7250
"You should read more on <application>Sudo</application> by checking out it's "
7251
"man page:"
7252
msgstr ""
7253
7254
#: serverguide/C/security.xml:63(command)
7255
msgid "man sudo"
7256
msgstr ""
7257
7258
#: serverguide/C/security.xml:67(para)
7259
msgid ""
7260
"By default, the initial user created by the Ubuntu installer is a member of "
7261
"the group \"admin\" which is added to the file "
7262
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7263
"give any other account full root access through "
7264
"<application>sudo</application>, simply add them to the admin group."
7265
msgstr ""
7266
7267
#: serverguide/C/security.xml:73(title)
7268
msgid "Adding and Deleting Users"
7269
msgstr ""
7270
7271
#: serverguide/C/security.xml:74(para)
7272
msgid ""
7273
"The process for managing local users and groups is straight forward and "
7274
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7275
"other Debian based distributions, encourage the use of the \"adduser\" "
7276
"package for account management."
7277
msgstr ""
7278
7279
#: serverguide/C/security.xml:79(para)
7280
msgid ""
7281
"To add a user account, use the following syntax, and follow the prompts to "
7282
"give the account a password and identifiable characteristics such as a full "
7283
"name, phone number, etc."
7284
msgstr ""
7285
7286
#: serverguide/C/security.xml:83(command)
7287
msgid "sudo adduser username"
7288
msgstr ""
7289
7290
#: serverguide/C/security.xml:87(para)
7291
msgid ""
7292
"To delete a user account and its primary group, use the following syntax:"
7293
msgstr ""
7294
7295
#: serverguide/C/security.xml:91(command)
7296
msgid "sudo deluser username"
7297
msgstr ""
7298
7299
#: serverguide/C/security.xml:93(para)
7300
msgid ""
7301
"Deleting an account does not remove their respective home folder. It is up "
7302
"to you whether or not you wish to delete the folder manually or keep it "
7303
"according to your desired retention policies."
7304
msgstr ""
7305
7306
#: serverguide/C/security.xml:96(para)
7307
msgid ""
7308
"Remember, any user added later on with the same UID/GID as the previous "
7309
"owner will now have access to this folder if you have not taken the "
7310
"necessary precautions."
7311
msgstr ""
7312
7313
#: serverguide/C/security.xml:99(para)
7314
msgid ""
7315
"You may want to change these UID/GID values to something more appropriate, "
7316
"such as the root account, and perhaps even relocate the folder to avoid "
7317
"future conflicts:"
7318
msgstr ""
7319
7320
#: serverguide/C/security.xml:103(command)
7321
msgid "sudo chown -R root:root /home/username/"
7322
msgstr ""
7323
7324
#: serverguide/C/security.xml:104(command)
7325
msgid "sudo mkdir /home/archived_users/"
7326
msgstr ""
7327
7328
#: serverguide/C/security.xml:105(command)
7329
msgid "sudo mv /home/username /home/archived_users/"
7330
msgstr ""
7331
7332
#: serverguide/C/security.xml:109(para)
7333
msgid ""
7334
"To temporarily lock or unlock a user account, use the following syntax, "
7335
"respectively:"
7336
msgstr ""
7337
7338
#: serverguide/C/security.xml:113(command)
7339
msgid "sudo passwd -l username"
7340
msgstr ""
7341
7342
#: serverguide/C/security.xml:114(command)
7343
msgid "sudo passwd -u username"
7344
msgstr ""
7345
7346
#: serverguide/C/security.xml:118(para)
7347
msgid ""
7348
"To add or delete a personalized group, use the following syntax, "
7349
"respectively:"
7350
msgstr ""
7351
7352
#: serverguide/C/security.xml:122(command)
7353
msgid "sudo addgroup groupname"
7354
msgstr ""
7355
7356
#: serverguide/C/security.xml:123(command)
7357
msgid "sudo delgroup groupname"
7358
msgstr ""
7359
7360
#: serverguide/C/security.xml:127(para)
7361
msgid "To add a user to a group, use the following syntax:"
7362
msgstr ""
7363
7364
#: serverguide/C/security.xml:131(command)
7365
msgid "sudo adduser username groupname"
7366
msgstr ""
7367
7368
#: serverguide/C/security.xml:138(title)
7369
msgid "User Profile Security"
7370
msgstr ""
7371
7372
#: serverguide/C/security.xml:139(para)
7373
msgid ""
7374
"When a new user is created, the adduser utility creates a brand new home "
7375
"directory named <filename class=\"directory\">/home/username</filename>, "
7376
"respectively. The default profile is modeled after the contents found in the "
7377
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7378
"includes all profile basics."
7379
msgstr ""
7380
7381
#: serverguide/C/security.xml:142(para)
7382
msgid ""
7383
"If your server will be home to multiple users, you should pay close "
7384
"attention to the user home directory permissions to ensure confidentiality. "
7385
"By default, user home directories in Ubuntu are created with world "
7386
"read/execute permissions. This means that all users can browse and access "
7387
"the contents of other users home directories. This may not be suitable for "
7388
"your environment."
7389
msgstr ""
7390
7391
#: serverguide/C/security.xml:147(para)
7392
msgid ""
7393
"To verify your current users home directory permissions, use the following "
7394
"syntax:"
7395
msgstr ""
7396
7397
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7398
msgid "ls -ld /home/username"
7399
msgstr ""
7400
7401
#: serverguide/C/security.xml:153(para)
7402
msgid ""
7403
"The following output shows that the directory <filename "
7404
"class=\"directory\">/home/username</filename> has world readable permissions:"
7405
msgstr ""
7406
7407
#: serverguide/C/security.xml:156(computeroutput)
7408
#, no-wrap
7409
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7410
msgstr ""
7411
7412
#: serverguide/C/security.xml:160(para)
7413
msgid ""
7414
"You can remove the world readable permissions using the following syntax:"
7415
msgstr ""
7416
7417
#: serverguide/C/security.xml:164(command)
7418
msgid "sudo chmod 0750 /home/username"
7419
msgstr ""
7420
7421
#: serverguide/C/security.xml:167(para)
7422
msgid ""
7423
"Some people tend to use the recursive option (-R) indiscriminately which "
7424
"modifies all child folders and files, but this is not necessary, and may "
7425
"yield other undesirable results. The parent directory alone is sufficient "
7426
"for preventing unauthorized access to anything below the parent."
7427
msgstr ""
7428
7429
#: serverguide/C/security.xml:171(para)
7430
msgid ""
7431
"A much more efficient approach to the matter would be to modify the "
7432
"<application>adduser</application> global default permissions when creating "
7433
"user home folders. Simply edit the file "
7434
"<filename>/etc/adduser.conf</filename> and modify the "
7435
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7436
"new home directories will receive the correct permissions."
7437
msgstr ""
7438
7439
#: serverguide/C/security.xml:174(programlisting)
7440
#, no-wrap
7441
msgid ""
7442
"\n"
7443
"DIR_MODE=0750\n"
7444
msgstr ""
7445
7446
#: serverguide/C/security.xml:179(para)
7447
msgid ""
7448
"After correcting the directory permissions using any of the previously "
7449
"mentioned techniques, verify the results using the following syntax:"
7450
msgstr ""
7451
7452
#: serverguide/C/security.xml:185(para)
7453
msgid ""
7454
"The results below show that world readable permissions have been removed:"
7455
msgstr ""
7456
7457
#: serverguide/C/security.xml:188(computeroutput)
7458
#, no-wrap
7459
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7460
msgstr ""
7461
7462
#: serverguide/C/security.xml:195(title)
7463
msgid "Password Policy"
7464
msgstr ""
7465
7466
#: serverguide/C/security.xml:196(para)
7467
msgid ""
7468
"A strong password policy is one of the most important aspects of your "
7469
"security posture. Many successful security breaches involve simple brute "
7470
"force and dictionary attacks against weak passwords. If you intend to offer "
7471
"any form of remote access involving your local password system, make sure "
7472
"you adequately address minimum password complexity requirements, maximum "
7473
"password lifetimes, and frequent audits of your authentication systems."
7474
msgstr ""
7475
7476
#: serverguide/C/security.xml:200(title)
7477
msgid "Minimum Password Length"
7478
msgstr ""
7479
7480
#: serverguide/C/security.xml:201(para)
7481
msgid ""
7482
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7483
"well as some basic entropy checks. These values are controlled in the file "
7484
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7485
msgstr ""
7486
7487
#: serverguide/C/security.xml:204(programlisting)
7488
#, no-wrap
7489
msgid ""
7490
"\n"
7491
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7492
msgstr ""
7493
7494
#: serverguide/C/security.xml:207(para)
7495
msgid ""
7496
"If you would like to adjust the minimum length to 6 characters, change the "
7497
"appropriate variable to min=6. The modification is outlined below."
7498
msgstr ""
7499
7500
#: serverguide/C/security.xml:210(programlisting)
7501
#, no-wrap
7502
msgid ""
7503
"\n"
7504
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7505
msgstr ""
7506
7507
#: serverguide/C/security.xml:214(para)
7508
msgid ""
7509
"The <varname>max=8</varname> variable does not represent the maximum length "
7510
"of a password. It only means that complexity requirements will not be "
7511
"checked on passwords over 8 characters. You may want to look at the "
7512
"<application>libpam-cracklib</application> package for additional password "
7513
"entropy assistance."
7514
msgstr ""
7515
7516
#: serverguide/C/security.xml:220(title)
7517
msgid "Password Expiration"
7518
msgstr ""
7519
7520
#: serverguide/C/security.xml:221(para)
7521
msgid ""
7522
"When creating user accounts, you should make it a policy to have a minimum "
7523
"and maximum password age forcing users to change their passwords when they "
7524
"expire."
7525
msgstr ""
7526
7527
#: serverguide/C/security.xml:226(para)
7528
msgid ""
7529
"To easily view the current status of a user account, use the following "
7530
"syntax:"
7531
msgstr ""
7532
7533
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7534
msgid "sudo chage -l username"
7535
msgstr ""
7536
7537
#: serverguide/C/security.xml:232(para)
7538
msgid ""
7539
"The output below shows interesting facts about the user account, namely that "
7540
"there are no policies applied:"
7541
msgstr ""
7542
7543
#: serverguide/C/security.xml:235(computeroutput)
7544
#, no-wrap
7545
msgid ""
7546
"Last password change : Jan 20, 2008\n"
7547
"Password expires : never\n"
7548
"Password inactive : never\n"
7549
"Account expires : never\n"
7550
"Minimum number of days between password change : 0\n"
7551
"Maximum number of days between password change : 99999\n"
7552
"Number of days of warning before password expires : 7"
7553
msgstr ""
7554
7555
#: serverguide/C/security.xml:245(para)
7556
msgid ""
7557
"To set any of these values, simply use the following syntax, and follow the "
7558
"interactive prompts:"
7559
msgstr ""
7560
7561
#: serverguide/C/security.xml:249(command)
7562
msgid "sudo chage username"
7563
msgstr ""
7564
7565
#: serverguide/C/security.xml:251(para)
7566
msgid ""
7567
"The following is also an example of how you can manually change the explicit "
7568
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7569
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7570
"password expiration, and a warning time period (-W) of 14 days before "
7571
"password expiration."
7572
msgstr ""
7573
7574
#: serverguide/C/security.xml:255(command)
7575
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7576
msgstr ""
7577
7578
#: serverguide/C/security.xml:259(para)
7579
msgid "To verify changes, use the same syntax as mentioned previously:"
7580
msgstr ""
7581
7582
#: serverguide/C/security.xml:265(para)
7583
msgid ""
7584
"The output below shows the new policies that have been established for the "
7585
"account:"
7586
msgstr ""
7587
7588
#: serverguide/C/security.xml:268(computeroutput)
7589
#, no-wrap
7590
msgid ""
7591
"Last password change : Jan 20, 2008\n"
7592
"Password expires : Apr 19, 2008\n"
7593
"Password inactive : May 19, 2008\n"
7594
"Account expires : Jan 31, 2008\n"
7595
"Minimum number of days between password change : 5\n"
7596
"Maximum number of days between password change : 90\n"
7597
"Number of days of warning before password expires : 14"
7598
msgstr ""
7599
7600
#: serverguide/C/security.xml:284(title)
7601
msgid "Other Security Considerations"
7602
msgstr ""
7603
7604
#: serverguide/C/security.xml:285(para)
7605
msgid ""
7606
"Many applications use alternate authentication mechanisms that can be easily "
7607
"overlooked by even experienced system administrators. Therefore, it is "
7608
"important to understand and control how users authenticate and gain access "
7609
"to services and applications on your server."
7610
msgstr ""
7611
7612
#: serverguide/C/security.xml:290(title)
7613
msgid "SSH Access by Disabled Users"
7614
msgstr ""
7615
7616
#: serverguide/C/security.xml:291(para)
7617
msgid ""
7618
"Simply disabling/locking a user account will not prevent a user from logging "
7619
"into your server remotely if they have previously set up RSA public key "
7620
"authentication. They will still be able to gain shell access to the server, "
7621
"without the need for any password. Remember to check the users home "
7622
"directory for files that will allow for this type of authenticated SSH "
7623
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7624
msgstr ""
7625
7626
#: serverguide/C/security.xml:294(para)
7627
msgid ""
7628
"Remove or rename the directory <filename "
7629
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7630
"further SSH authentication capabilities."
7631
msgstr ""
7632
7633
#: serverguide/C/security.xml:297(para)
7634
msgid ""
7635
"Be sure to check for any established SSH connections by the disabled user, "
7636
"as it is possible they may have existing inbound or outbound connections. "
7637
"Kill any that are found."
7638
msgstr ""
7639
7640
#: serverguide/C/security.xml:300(para)
7641
msgid ""
7642
"Restrict SSH access to only user accounts that should have it. For example, "
7643
"you may create a group called \"sshlogin\" and add the group name as the "
7644
"value associated with the <varname>AllowGroups</varname> variable located in "
7645
"the file <filename>/etc/ssh/sshd_config</filename>."
7646
msgstr ""
7647
7648
#: serverguide/C/security.xml:303(programlisting)
7649
#, no-wrap
7650
msgid ""
7651
"\n"
7652
"AllowGroups sshlogin\n"
7653
msgstr ""
7654
7655
#: serverguide/C/security.xml:306(para)
7656
msgid ""
7657
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7658
"SSH service."
7659
msgstr ""
7660
7661
#: serverguide/C/security.xml:310(command)
7662
msgid "sudo adduser username sshlogin"
7663
msgstr ""
7664
7665
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7666
msgid "sudo /etc/init.d/ssh restart"
7667
msgstr ""
7668
7669
#: serverguide/C/security.xml:315(title)
7670
msgid "External User Database Authentication"
7671
msgstr ""
7672
7673
#: serverguide/C/security.xml:316(para)
7674
msgid ""
7675
"Most enterprise networks require centralized authentication and access "
7676
"controls for all system resources. If you have configured your server to "
7677
"authenticate users against external databases, be sure to disable the user "
7678
"accounts both externally and locally, this way you ensure that local "
7679
"fallback authentication is not possible."
7680
msgstr ""
7681
7682
#: serverguide/C/security.xml:325(title)
7683
msgid "Console Security"
7684
msgstr ""
7685
7686
#: serverguide/C/security.xml:326(para)
7687
msgid ""
7688
"As with any other security barrier you put in place to protect your server, "
7689
"it is pretty tough to defend against untold damage caused by someone with "
7690
"physical access to your environment, for example, theft of hard drives, "
7691
"power or service disruption and so on. Therefore, console security should be "
7692
"addressed merely as one component of your overall physical security "
7693
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7694
"very least slow down a determined one, so it is still advisable to perform "
7695
"basic precautions with regard to console security."
7696
msgstr ""
7697
7698
#: serverguide/C/security.xml:329(para)
7699
msgid ""
7700
"The following instructions will help defend your server against issues that "
7701
"could otherwise yield very serious consequences."
7702
msgstr ""
7703
7704
#: serverguide/C/security.xml:334(title)
7705
msgid "Disable Ctrl+Alt+Delete"
7706
msgstr ""
7707
7708
#: serverguide/C/security.xml:335(para)
7709
msgid ""
7710
"First and foremost, anyone that has physical access to the keyboard can "
7711
"simply use the "
7712
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7713
"eycombo> key combination to reboot the server without having to log on. "
7714
"Sure, someone could simply unplug the power source, but you should still "
7715
"prevent the use of this key combination on a production server. This forces "
7716
"an attacker to take more drastic measures to reboot the server, and will "
7717
"prevent accidental reboots at the same time."
7718
msgstr ""
7719
7720
#: serverguide/C/security.xml:340(para)
7721
msgid ""
7722
"To disable the reboot action taken by pressing the "
7723
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7724
"eycombo> key combination, comment out the following line in the file "
7725
"<filename>/etc/init/control-alt-delete.conf</filename>."
7726
msgstr ""
7727
7728
#: serverguide/C/security.xml:343(programlisting)
7729
#, no-wrap
7730
msgid ""
7731
"\n"
7732
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7733
msgstr ""
7734
7735
#: serverguide/C/security.xml:352(title)
7736
msgid "Firewall"
7737
msgstr ""
7738
7739
#: serverguide/C/security.xml:355(para)
7740
msgid ""
7741
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7742
"which is used to manipulate or decide the fate of network traffic headed "
7743
"into or through your server. All modern Linux firewall solutions use this "
7744
"system for packet filtering."
7745
msgstr ""
7746
7747
#: serverguide/C/security.xml:360(para)
7748
msgid ""
7749
"The kernel's packet filtering system would be of little use to "
7750
"administrators without a userspace interface to manage it. This is the "
7751
"purpose of iptables. When a packet reaches your server, it will be handed "
7752
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7753
"based on the rules supplied to it from userspace via iptables. Thus, "
7754
"iptables is all you need to manage your firewall if you're familiar with it, "
7755
"but many frontends are available to simplify the task."
7756
msgstr ""
7757
7758
#: serverguide/C/security.xml:370(title)
7759
msgid "ufw - Uncomplicated Firewall"
7760
msgstr ""
7761
7762
#: serverguide/C/security.xml:371(para)
7763
msgid ""
7764
"The default firewall configuration tool for Ubuntu is "
7765
"<application>ufw</application>. Developed to ease iptables firewall "
7766
"configuration, <application>ufw</application> provides a user friendly way "
7767
"to create an IPv4 or IPv6 host-based firewall."
7768
msgstr ""
7769
7770
#: serverguide/C/security.xml:375(para)
7771
msgid ""
7772
"<application>ufw</application> by default is initially disabled. From the "
7773
"<application>ufw</application> man page:"
7774
msgstr ""
7775
7776
#: serverguide/C/security.xml:379(quote)
7777
msgid ""
7778
"ufw is not intended to provide complete firewall functionality via its "
7779
"command interface, but instead provides an easy way to add or remove simple "
7780
"rules. It is currently mainly used for host-based firewalls."
7781
msgstr ""
7782
7783
#: serverguide/C/security.xml:383(para)
7784
msgid ""
7785
"The following are some examples of how to use <application>ufw</application>:"
7786
msgstr ""
7787
7788
#: serverguide/C/security.xml:388(para)
7789
msgid ""
7790
"First, <application>ufw</application> needs to be enabled. From a terminal "
7791
"prompt enter:"
7792
msgstr ""
7793
7794
#: serverguide/C/security.xml:392(command)
7795
msgid "sudo ufw enable"
7796
msgstr ""
7797
7798
#: serverguide/C/security.xml:396(para)
7799
msgid "To open a port (ssh in this example):"
7800
msgstr ""
7801
7802
#: serverguide/C/security.xml:400(command)
7803
msgid "sudo ufw allow 22"
7804
msgstr ""
7805
7806
#: serverguide/C/security.xml:404(para)
7807
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7808
msgstr ""
7809
7810
#: serverguide/C/security.xml:408(command)
7811
msgid "sudo ufw insert 1 allow 80"
7812
msgstr ""
7813
7814
#: serverguide/C/security.xml:412(para)
7815
msgid "Similarly, to close an opened port:"
7816
msgstr ""
7817
7818
#: serverguide/C/security.xml:416(command)
7819
msgid "sudo ufw deny 22"
7820
msgstr ""
7821
7822
#: serverguide/C/security.xml:420(para)
7823
msgid "To remove a rule, use delete followed by the rule:"
7824
msgstr ""
7825
7826
#: serverguide/C/security.xml:424(command)
7827
msgid "sudo ufw delete deny 22"
7828
msgstr ""
7829
7830
#: serverguide/C/security.xml:428(para)
7831
msgid ""
7832
"It is also possible to allow access from specific hosts or networks to a "
7833
"port. The following example allows ssh access from host 192.168.0.2 to any "
7834
"ip address on this host:"
7835
msgstr ""
7836
7837
#: serverguide/C/security.xml:433(command)
7838
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7839
msgstr ""
7840
7841
#: serverguide/C/security.xml:435(para)
7842
msgid ""
7843
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7844
"subnet."
7845
msgstr ""
7846
7847
#: serverguide/C/security.xml:441(para)
7848
msgid ""
7849
"Adding the <emphasis>--dry-run</emphasis> option to a "
7850
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
7851
"apply them. For example, the following is what would be applied if opening "
7852
"the HTTP port:"
7853
msgstr ""
7854
7855
#: serverguide/C/security.xml:447(command)
7856
msgid "sudo ufw --dry-run allow http"
7857
msgstr ""
7858
7859
#: serverguide/C/security.xml:451(computeroutput)
7860
#, no-wrap
7861
msgid ""
7862
"*filter\n"
7863
":ufw-user-input - [0:0]\n"
7864
":ufw-user-output - [0:0]\n"
7865
":ufw-user-forward - [0:0]\n"
7866
":ufw-user-limit - [0:0]\n"
7867
":ufw-user-limit-accept - [0:0]\n"
7868
"### RULES ###\n"
7869
"\n"
7870
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
7871
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
7872
"\n"
7873
"### END RULES ###\n"
7874
"-A ufw-user-input -j RETURN\n"
7875
"-A ufw-user-output -j RETURN\n"
7876
"-A ufw-user-forward -j RETURN\n"
7877
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
7878
"LIMIT]: \"\n"
7879
"-A ufw-user-limit -j REJECT\n"
7880
"-A ufw-user-limit-accept -j ACCEPT\n"
7881
"COMMIT\n"
7882
"Rules updated"
7883
msgstr ""
7884
7885
#: serverguide/C/security.xml:475(para)
7886
msgid "<application>ufw</application> can be disabled by:"
7887
msgstr ""
7888
7889
#: serverguide/C/security.xml:479(command)
7890
msgid "sudo ufw disable"
7891
msgstr ""
7892
7893
#: serverguide/C/security.xml:483(para)
7894
msgid "To see the firewall status, enter:"
7895
msgstr ""
7896
7897
#: serverguide/C/security.xml:487(command)
7898
msgid "sudo ufw status"
7899
msgstr ""
7900
7901
#: serverguide/C/security.xml:491(para)
7902
msgid "And for more verbose status information use:"
7903
msgstr ""
7904
7905
#: serverguide/C/security.xml:495(command)
7906
msgid "sudo ufw status verbose"
7907
msgstr ""
7908
7909
#: serverguide/C/security.xml:499(para)
7910
msgid "To view the <emphasis>numbered</emphasis> format:"
7911
msgstr ""
7912
7913
#: serverguide/C/security.xml:503(command)
7914
msgid "sudo ufw status numbered"
7915
msgstr ""
7916
7917
#: serverguide/C/security.xml:508(para)
7918
msgid ""
7919
"If the port you want to open or close is defined in "
7920
"<filename>/etc/services</filename>, you can use the port name instead of the "
7921
"number. In the above examples, replace <emphasis>22</emphasis> with "
7922
"<emphasis>ssh</emphasis>."
7923
msgstr ""
7924
7925
#: serverguide/C/security.xml:514(para)
7926
msgid ""
7927
"This is a quick introduction to using <application>ufw</application>. Please "
7928
"refer to the <application>ufw</application> man page for more information."
7929
msgstr ""
7930
7931
#: serverguide/C/security.xml:520(title)
7932
msgid "ufw Application Integration"
7933
msgstr ""
7934
7935
#: serverguide/C/security.xml:522(para)
7936
msgid ""
7937
"Applications that open ports can include an <application>ufw</application> "
7938
"profile, which details the ports needed for the application to function "
7939
"properly. The profiles are kept in <filename "
7940
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
7941
"the default ports have been changed."
7942
msgstr ""
7943
7944
#: serverguide/C/security.xml:531(para)
7945
msgid ""
7946
"To view which applications have installed a profile, enter the following in "
7947
"a terminal:"
7948
msgstr ""
7949
7950
#: serverguide/C/security.xml:536(command)
7951
msgid "sudo ufw app list"
7952
msgstr ""
7953
7954
#: serverguide/C/security.xml:542(para)
7955
msgid ""
7956
"Similar to allowing traffic to a port, using an application profile is "
7957
"accomplished by entering:"
7958
msgstr ""
7959
7960
#: serverguide/C/security.xml:547(command)
7961
msgid "sudo ufw allow Samba"
7962
msgstr ""
7963
7964
#: serverguide/C/security.xml:553(para)
7965
msgid "An extended syntax is available as well:"
7966
msgstr ""
7967
7968
#: serverguide/C/security.xml:558(command)
7969
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
7970
msgstr ""
7971
7972
#: serverguide/C/security.xml:561(para)
7973
msgid ""
7974
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
7975
"with the application profile you are using and the IP range for your network."
7976
msgstr ""
7977
7978
#: serverguide/C/security.xml:567(para)
7979
msgid ""
7980
"There is no need to specify the <emphasis>protocol</emphasis> for the "
7981
"application, because that information is detailed in the profile. Also, note "
7982
"that the <emphasis>app</emphasis> name replaces the "
7983
"<emphasis>port</emphasis> number."
7984
msgstr ""
7985
7986
#: serverguide/C/security.xml:576(para)
7987
msgid ""
7988
"To view details about which ports, protocols, etc are defined for an "
7989
"application, enter:"
7990
msgstr ""
7991
7992
#: serverguide/C/security.xml:581(command)
7993
msgid "sudo ufw app info Samba"
7994
msgstr ""
7995
7996
#: serverguide/C/security.xml:587(para)
7997
msgid ""
7998
"Not all applications that require opening a network port come with "
7999
"<application>ufw</application> profiles, but if you have profiled an "
8000
"application and want the file to be included with the package, please file a "
8001
"bug against the package in <ulink "
8002
"url=\"https://launchpad.net/\">Launchpad</ulink>."
8003
msgstr ""
8004
8005
#: serverguide/C/security.xml:596(title)
8006
msgid "IP Masquerading"
8007
msgstr ""
8008
8009
#: serverguide/C/security.xml:597(para)
8010
msgid ""
8011
"The purpose of IP Masquerading is to allow machines with private, non-"
8012
"routable IP addresses on your network to access the Internet through the "
8013
"machine doing the masquerading. Traffic from your private network destined "
8014
"for the Internet must be manipulated for replies to be routable back to the "
8015
"machine that made the request. To do this, the kernel must modify the "
8016
"<emphasis>source</emphasis> IP address of each packet so that replies will "
8017
"be routed back to it, rather than to the private IP address that made the "
8018
"request, which is impossible over the Internet. Linux uses "
8019
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
8020
"connections belong to which machines and reroute each return packet "
8021
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
8022
"having originated from your Ubuntu gateway machine. This process is referred "
8023
"to in Microsoft documentation as Internet Connection Sharing."
8024
msgstr ""
8025
8026
#: serverguide/C/security.xml:613(title)
8027
msgid "ufw Masquerading"
8028
msgstr ""
8029
8030
#: serverguide/C/security.xml:614(para)
8031
msgid ""
8032
"IP Masquerading can be achieved using custom <application>ufw</application> "
8033
"rules. This is possible because the current back-end for "
8034
"<application>ufw</application> is <application>iptables-"
8035
"restore</application> with the rules files located in "
8036
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
8037
"legacy iptables rules used without <application>ufw</application>, and rules "
8038
"that are more network gateway or bridge related."
8039
msgstr ""
8040
8041
#: serverguide/C/security.xml:620(para)
8042
msgid ""
8043
"The rules are split into two different files, rules that should be executed "
8044
"before <application>ufw</application> command line rules, and rules that are "
8045
"executed after <application>ufw</application> command line rules."
8046
msgstr ""
8047
8048
#: serverguide/C/security.xml:626(para)
8049
msgid ""
8050
"First, packet forwarding needs to be enabled in "
8051
"<application>ufw</application>. Two configuration files will need to be "
8052
"adjusted, in <filename>/etc/default/ufw</filename> change the "
8053
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
8054
msgstr ""
8055
8056
#: serverguide/C/security.xml:630(programlisting)
8057
#, no-wrap
8058
msgid ""
8059
"\n"
8060
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
8061
msgstr ""
8062
8063
#: serverguide/C/security.xml:633(para)
8064
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
8065
msgstr ""
8066
8067
#: serverguide/C/security.xml:636(programlisting)
8068
#, no-wrap
8069
msgid ""
8070
"\n"
8071
"net/ipv4/ip_forward=1\n"
8072
msgstr ""
8073
8074
#: serverguide/C/security.xml:639(para)
8075
msgid "Similarly, for IPv6 forwarding uncomment:"
8076
msgstr ""
8077
8078
#: serverguide/C/security.xml:642(programlisting)
8079
#, no-wrap
8080
msgid ""
8081
"\n"
8082
"net/ipv6/conf/default/forwarding=1\n"
8083
msgstr ""
8084
8085
#: serverguide/C/security.xml:647(para)
8086
msgid ""
8087
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
8088
"file. The default rules only configure the <emphasis>filter</emphasis> "
8089
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
8090
"need to be configured. Add the following to the top of the file just after "
8091
"the header comments:"
8092
msgstr ""
8093
8094
#: serverguide/C/security.xml:652(programlisting)
8095
#, no-wrap
8096
msgid ""
8097
"\n"
8098
"# nat Table rules\n"
8099
"*nat\n"
8100
":POSTROUTING ACCEPT [0:0]\n"
8101
"\n"
8102
"# Forward traffic from eth1 through eth0.\n"
8103
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
8104
"\n"
8105
"# don't delete the 'COMMIT' line or these nat table rules won't be "
8106
"processed\n"
8107
"COMMIT\n"
8108
msgstr ""
8109
8110
#: serverguide/C/security.xml:663(para)
8111
msgid ""
8112
"The comments are not strictly necessary, but it is considered good practice "
8113
"to document your configuration. Also, when modifying any of the "
8114
"<emphasis>rules</emphasis> files in <filename "
8115
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
8116
"line for each table modified:"
8117
msgstr ""
8118
8119
#: serverguide/C/security.xml:669(programlisting)
8120
#, no-wrap
8121
msgid ""
8122
"\n"
8123
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8124
"COMMIT\n"
8125
msgstr ""
8126
8127
#: serverguide/C/security.xml:674(para)
8128
msgid ""
8129
"For each <emphasis>Table</emphasis> a corresponding "
8130
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8131
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8132
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8133
"<emphasis>mangle</emphasis> tables."
8134
msgstr ""
8135
8136
#: serverguide/C/security.xml:681(para)
8137
msgid ""
8138
"In the above example replace <emphasis>eth0</emphasis>, "
8139
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8140
"appropriate interfaces and IP range for your network."
8141
msgstr ""
8142
8143
#: serverguide/C/security.xml:689(para)
8144
msgid ""
8145
"Finally, disable and re-enable <application>ufw</application> to apply the "
8146
"changes:"
8147
msgstr ""
8148
8149
#: serverguide/C/security.xml:693(command)
8150
msgid "sudo ufw disable && sudo ufw enable"
8151
msgstr ""
8152
8153
#: serverguide/C/security.xml:697(para)
8154
msgid ""
8155
"IP Masquerading should now be enabled. You can also add any additional "
8156
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8157
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8158
"forward</emphasis> chain."
8159
msgstr ""
8160
8161
#: serverguide/C/security.xml:704(title)
8162
msgid "iptables Masquerading"
8163
msgstr ""
8164
8165
#: serverguide/C/security.xml:705(para)
8166
msgid ""
8167
"<application>iptables</application> can also be used to enable masquerading."
8168
msgstr ""
8169
8170
#: serverguide/C/security.xml:710(para)
8171
msgid ""
8172
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8173
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8174
"uncomment the following line"
8175
msgstr ""
8176
8177
#: serverguide/C/security.xml:714(programlisting)
8178
#, no-wrap
8179
msgid ""
8180
"\n"
8181
"net.ipv4.ip_forward=1\n"
8182
msgstr ""
8183
8184
#: serverguide/C/security.xml:717(para)
8185
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8186
msgstr ""
8187
8188
#: serverguide/C/security.xml:720(programlisting)
8189
#, no-wrap
8190
msgid ""
8191
"\n"
8192
"net.ipv6.conf.default.forwarding=1\n"
8193
msgstr ""
8194
8195
#: serverguide/C/security.xml:725(para)
8196
msgid ""
8197
"Next, execute the <application>sysctl</application> command to enable the "
8198
"new settings in the configuration file:"
8199
msgstr ""
8200
8201
#: serverguide/C/security.xml:729(command)
8202
msgid "sudo sysctl -p"
8203
msgstr ""
8204
8205
#: serverguide/C/security.xml:733(para)
8206
msgid ""
8207
"IP Masquerading can now be accomplished with a single iptables rule, which "
8208
"may differ slightly based on your network configuration:"
8209
msgstr ""
8210
8211
#: serverguide/C/security.xml:736(screen)
8212
#, no-wrap
8213
msgid ""
8214
"\n"
8215
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8216
msgstr ""
8217
8218
#: serverguide/C/security.xml:739(para)
8219
msgid ""
8220
"The above command assumes that your private address space is 192.168.0.0/16 "
8221
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8222
"follows:"
8223
msgstr ""
8224
8225
#: serverguide/C/security.xml:744(para)
8226
msgid "-t nat -- the rule is to go into the nat table"
8227
msgstr ""
8228
8229
#: serverguide/C/security.xml:745(para)
8230
msgid ""
8231
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8232
msgstr ""
8233
8234
#: serverguide/C/security.xml:746(para)
8235
msgid ""
8236
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8237
"specified address space"
8238
msgstr ""
8239
8240
#: serverguide/C/security.xml:747(para)
8241
msgid ""
8242
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8243
"specified network device"
8244
msgstr ""
8245
8246
#: serverguide/C/security.xml:749(para)
8247
msgid ""
8248
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8249
"MASQUERADE target to be manipulated as described above"
8250
msgstr ""
8251
8252
#: serverguide/C/security.xml:757(para)
8253
msgid ""
8254
"Also, each chain in the filter table (the default table, and where most or "
8255
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8256
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8257
"you may have set the policies to DROP or REJECT, in which case your "
8258
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8259
"above rule to work:"
8260
msgstr ""
8261
8262
#: serverguide/C/security.xml:764(screen)
8263
#, no-wrap
8264
msgid ""
8265
"\n"
8266
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8267
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8268
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8269
msgstr ""
8270
8271
#: serverguide/C/security.xml:768(para)
8272
msgid ""
8273
"The above commands will allow all connections from your local network to the "
8274
"Internet and all traffic related to those connections to return to the "
8275
"machine that initiated them."
8276
msgstr ""
8277
8278
#: serverguide/C/security.xml:775(para)
8279
msgid ""
8280
"If you want masquerading to be enabled on reboot, which you probably do, "
8281
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8282
"example add the first command with no filtering:"
8283
msgstr ""
8284
8285
#: serverguide/C/security.xml:779(screen)
8286
#, no-wrap
8287
msgid ""
8288
"\n"
8289
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8290
msgstr ""
8291
8292
#: serverguide/C/security.xml:787(title)
8293
msgid "Logs"
8294
msgstr ""
8295
8296
#: serverguide/C/security.xml:788(para)
8297
msgid ""
8298
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8299
"firewall rules, and noticing unusual activity on your network. You must "
8300
"include logging rules in your firewall for them to be generated, though, and "
8301
"logging rules must come before any applicable terminating rule (a rule with "
8302
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8303
"REJECT)."
8304
msgstr ""
8305
8306
#: serverguide/C/security.xml:795(para)
8307
msgid ""
8308
"If you are using <application>ufw</application>, you can turn on logging by "
8309
"entering the following in a terminal:"
8310
msgstr ""
8311
8312
#: serverguide/C/security.xml:799(command)
8313
msgid "sudo ufw logging on"
8314
msgstr ""
8315
8316
#: serverguide/C/security.xml:801(para)
8317
msgid ""
8318
"To turn logging off in <application>ufw</application>, simply replace "
8319
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8320
"role=\"italic\">off</emphasis> in the above command."
8321
msgstr ""
8322
8323
#: serverguide/C/security.xml:804(para)
8324
msgid ""
8325
"If using <application>iptables</application> instead of "
8326
"<application>ufw</application>, enter:"
8327
msgstr ""
8328
8329
#: serverguide/C/security.xml:807(screen)
8330
#, no-wrap
8331
msgid ""
8332
"\n"
8333
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8334
"prefix \"NEW_HTTP_CONN: \"\n"
8335
msgstr ""
8336
8337
#: serverguide/C/security.xml:810(para)
8338
msgid ""
8339
"A request on port 80 from the local machine, then, would generate a log in "
8340
"dmesg that looks like this:"
8341
msgstr ""
8342
8343
#: serverguide/C/security.xml:815(programlisting)
8344
#, no-wrap
8345
msgid ""
8346
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8347
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8348
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8349
"WINDOW=32767 RES=0x00 SYN URGP=0"
8350
msgstr ""
8351
8352
#: serverguide/C/security.xml:817(para)
8353
msgid ""
8354
"The above log will also appear in <filename>/var/log/messages</filename>, "
8355
"<filename>/var/log/syslog</filename>, and "
8356
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8357
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8358
"and configuring <application>ulogd</application> and using the ULOG target "
8359
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8360
"server that listens for logging instructions from the kernel specifically "
8361
"for firewalls, and can log to any file you like, or even to a "
8362
"<application>PostgreSQL</application> or <application>MySQL</application> "
8363
"database. Making sense of your firewall logs can be simplified by using a "
8364
"log analyzing tool such as <application>fwanalog</application>, "
8365
"<application> fwlogwatch</application>, or <application>lire</application>."
8366
msgstr ""
8367
8368
#: serverguide/C/security.xml:832(title)
8369
msgid "Other Tools"
8370
msgstr ""
8371
8372
#: serverguide/C/security.xml:833(para)
8373
msgid ""
8374
"There are many tools available to help you construct a complete firewall "
8375
"without intimate knowledge of iptables. For the GUI-inclined:"
8376
msgstr ""
8377
8378
#: serverguide/C/security.xml:839(para)
8379
msgid ""
8380
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8381
"popular and easy to use."
8382
msgstr ""
8383
8384
#: serverguide/C/security.xml:844(para)
8385
msgid ""
8386
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8387
"and will look familiar to an administrator who has used a commercial "
8388
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8389
msgstr ""
8390
8391
#: serverguide/C/security.xml:850(para)
8392
msgid ""
8393
"If you prefer a command-line tool with plain-text configuration files:"
8394
msgstr ""
8395
8396
#: serverguide/C/security.xml:855(para)
8397
msgid ""
8398
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8399
"powerful solution to help you configure an advanced firewall for any network."
8400
msgstr ""
8401
8402
#: serverguide/C/security.xml:861(para)
8403
msgid ""
8404
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8405
"a working firewall \"out of the box\" with zero configuration, and will "
8406
"allow you to easily set up a more advanced firewall by editing simple, well-"
8407
"documented configuration files."
8408
msgstr ""
8409
8410
#: serverguide/C/security.xml:868(para)
8411
msgid ""
8412
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8413
"designed to be a desktop firewall application. It is made up of a server "
8414
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8415
"like many popular interactive firewall applications for Windows."
8416
msgstr ""
8417
8418
#: serverguide/C/security.xml:880(para)
8419
msgid ""
8420
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8421
"Firewall</ulink> wiki page contains information on the development of "
8422
"<application>ufw</application>."
8423
msgstr ""
8424
8425
#: serverguide/C/security.xml:886(para)
8426
msgid ""
8427
"Also, the <application>ufw</application> manual page contains some very "
8428
"useful information: <command>man ufw</command>."
8429
msgstr ""
8430
8431
#: serverguide/C/security.xml:891(para)
8432
msgid ""
8433
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8434
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8435
"on using <application>iptables</application>."
8436
msgstr ""
8437
8438
#: serverguide/C/security.xml:897(para)
8439
msgid ""
8440
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8441
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8442
msgstr ""
8443
8444
#: serverguide/C/security.xml:903(para)
8445
msgid ""
8446
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8447
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8448
msgstr ""
8449
8450
#: serverguide/C/security.xml:911(title)
8451
msgid "AppArmor"
8452
msgstr ""
8453
8454
#: serverguide/C/security.xml:912(para)
8455
msgid ""
8456
"<application>AppArmor</application> is a Linux Security Module "
8457
"implementation of name-based mandatory access controls. AppArmor confines "
8458
"individual programs to a set of listed files and posix 1003.1e draft "
8459
"capabilities."
8460
msgstr ""
8461
8462
#: serverguide/C/security.xml:916(para)
8463
msgid ""
8464
"<application>AppArmor</application> is installed and loaded by default. It "
8465
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8466
"and permissions the application requires. Some packages will install their "
8467
"own profiles, and additional profiles can be found in the "
8468
"<application>apparmor-profiles</application> package."
8469
msgstr ""
8470
8471
#: serverguide/C/security.xml:921(para)
8472
msgid ""
8473
"To install the <application>apparmor-profiles</application> package from a "
8474
"terminal prompt:"
8475
msgstr ""
8476
8477
#: serverguide/C/security.xml:927(para)
8478
msgid "AppArmor profiles have two modes of execution:"
8479
msgstr ""
8480
8481
#: serverguide/C/security.xml:932(para)
8482
msgid ""
8483
"Complaining/Learning: profile violations are permitted and logged. Useful "
8484
"for testing and developing new profiles."
8485
msgstr ""
8486
8487
#: serverguide/C/security.xml:937(para)
8488
msgid ""
8489
"Enforced/Confined: enforces profile policy as well as logging the violation."
8490
msgstr ""
8491
8492
#: serverguide/C/security.xml:943(title)
8493
msgid "Using AppArmor"
8494
msgstr ""
8495
8496
#: serverguide/C/security.xml:944(para)
8497
msgid ""
8498
"The <application>apparmor-utils</application> package contains command line "
8499
"utilities that you can use to change the <application>AppArmor</application> "
8500
"execution mode, find the status of a profile, create new profiles, etc."
8501
msgstr ""
8502
8503
#: serverguide/C/security.xml:950(para)
8504
msgid ""
8505
"<application>apparmor_status</application> is used to view the current "
8506
"status of AppArmor profiles."
8507
msgstr ""
8508
8509
#: serverguide/C/security.xml:954(command)
8510
msgid "sudo apparmor_status"
8511
msgstr ""
8512
8513
#: serverguide/C/security.xml:958(para)
8514
msgid ""
8515
"<application>aa-complain</application> places a profile into "
8516
"<emphasis>complain</emphasis> mode."
8517
msgstr ""
8518
8519
#: serverguide/C/security.xml:962(command)
8520
msgid "sudo aa-complain /path/to/bin"
8521
msgstr ""
8522
8523
#: serverguide/C/security.xml:966(para)
8524
msgid ""
8525
"<application>aa-enforce</application> places a profile into "
8526
"<emphasis>enforce</emphasis> mode."
8527
msgstr ""
8528
8529
#: serverguide/C/security.xml:970(command)
8530
msgid "sudo aa-enforce /path/to/bin"
8531
msgstr ""
8532
8533
#: serverguide/C/security.xml:974(para)
8534
msgid ""
8535
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8536
"profiles are located. It can be used to manipulate the "
8537
"<emphasis>mode</emphasis> of all profiles."
8538
msgstr ""
8539
8540
#: serverguide/C/security.xml:978(para)
8541
msgid "Enter the following to place all profiles into complain mode:"
8542
msgstr ""
8543
8544
#: serverguide/C/security.xml:982(command)
8545
msgid "sudo aa-complain /etc/apparmor.d/*"
8546
msgstr ""
8547
8548
#: serverguide/C/security.xml:984(para)
8549
msgid "To place all profiles in enforce mode:"
8550
msgstr ""
8551
8552
#: serverguide/C/security.xml:988(command)
8553
msgid "sudo aa-enforce /etc/apparmor.d/*"
8554
msgstr ""
8555
8556
#: serverguide/C/security.xml:992(para)
8557
msgid ""
8558
"<application>apparmor_parser</application> is used to load a profile into "
8559
"the kernel. It can also be used to reload a currently loaded profile using "
8560
"the <emphasis>-r</emphasis> option. To load a profile:"
8561
msgstr ""
8562
8563
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8564
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8565
msgstr ""
8566
8567
#: serverguide/C/security.xml:999(para)
8568
msgid "To reload a profile:"
8569
msgstr ""
8570
8571
#: serverguide/C/security.xml:1003(command)
8572
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8573
msgstr ""
8574
8575
#: serverguide/C/security.xml:1007(para)
8576
msgid ""
8577
"<filename>/etc/init.d/apparmor</filename> can be used to "
8578
"<emphasis>reload</emphasis> all profiles:"
8579
msgstr ""
8580
8581
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8582
msgid "sudo /etc/init.d/apparmor reload"
8583
msgstr ""
8584
8585
#: serverguide/C/security.xml:1015(para)
8586
msgid ""
8587
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8588
"with the <application>apparmor_parser -R</application> option to "
8589
"<emphasis>disable</emphasis> a profile."
8590
msgstr ""
8591
8592
#: serverguide/C/security.xml:1020(command)
8593
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8594
msgstr ""
8595
8596
#: serverguide/C/security.xml:1021(command)
8597
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8598
msgstr ""
8599
8600
#: serverguide/C/security.xml:1023(para)
8601
msgid ""
8602
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8603
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8604
"load the profile using the <emphasis>-a</emphasis> option."
8605
msgstr ""
8606
8607
#: serverguide/C/security.xml:1028(command)
8608
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8609
msgstr ""
8610
8611
#: serverguide/C/security.xml:1033(para)
8612
msgid ""
8613
"<application>AppArmor</application> can be disabled, and the kernel module "
8614
"unloaded by entering the following:"
8615
msgstr ""
8616
8617
#: serverguide/C/security.xml:1037(command)
8618
msgid "sudo /etc/init.d/apparmor stop"
8619
msgstr ""
8620
8621
#: serverguide/C/security.xml:1038(command)
8622
msgid "sudo update-rc.d -f apparmor remove"
8623
msgstr ""
8624
8625
#: serverguide/C/security.xml:1042(para)
8626
msgid "To re-enable <application>AppArmor</application> enter:"
8627
msgstr ""
8628
8629
#: serverguide/C/security.xml:1046(command)
8630
msgid "sudo /etc/init.d/apparmor start"
8631
msgstr ""
8632
8633
#: serverguide/C/security.xml:1047(command)
8634
msgid "sudo update-rc.d apparmor defaults"
8635
msgstr ""
8636
8637
#: serverguide/C/security.xml:1052(para)
8638
msgid ""
8639
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8640
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8641
"the actual executable file path. For example for the "
8642
"<application>ping</application> command use <filename>/bin/ping</filename>"
8643
msgstr ""
8644
8645
#: serverguide/C/security.xml:1060(title)
8646
msgid "Profiles"
8647
msgstr ""
8648
8649
#: serverguide/C/security.xml:1061(para)
8650
msgid ""
8651
"<application>AppArmor</application> profiles are simple text files located "
8652
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8653
"path to the executable they profile replacing the \"/\" with \".\". For "
8654
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8655
"profile for the <filename>/bin/ping</filename> command."
8656
msgstr ""
8657
8658
#: serverguide/C/security.xml:1067(para)
8659
msgid "There are two main type of rules used in profiles:"
8660
msgstr ""
8661
8662
#: serverguide/C/security.xml:1072(para)
8663
msgid ""
8664
"<emphasis>Path entries:</emphasis> which detail which files an application "
8665
"can access in the file system."
8666
msgstr ""
8667
8668
#: serverguide/C/security.xml:1077(para)
8669
msgid ""
8670
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8671
"confined process is allowed to use."
8672
msgstr ""
8673
8674
#: serverguide/C/security.xml:1082(para)
8675
msgid ""
8676
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8677
msgstr ""
8678
8679
#: serverguide/C/security.xml:1085(programlisting)
8680
#, no-wrap
8681
msgid ""
8682
"\n"
8683
"#include <tunables/global>\n"
8684
"/bin/ping flags=(complain) {\n"
8685
" #include <abstractions/base>\n"
8686
" #include <abstractions/consoles>\n"
8687
" #include <abstractions/nameservice>\n"
8688
"\n"
8689
" capability net_raw,\n"
8690
" capability setuid,\n"
8691
" network inet raw,\n"
8692
" \n"
8693
" /bin/ping mixr,\n"
8694
" /etc/modules.conf r,\n"
8695
"}\n"
8696
msgstr ""
8697
8698
#: serverguide/C/security.xml:1102(para)
8699
msgid ""
8700
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8701
"from other files. This allows statements pertaining to multiple applications "
8702
"to be placed in a common file."
8703
msgstr ""
8704
8705
#: serverguide/C/security.xml:1108(para)
8706
msgid ""
8707
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8708
"program, also setting the mode to <emphasis>complain</emphasis>."
8709
msgstr ""
8710
8711
#: serverguide/C/security.xml:1114(para)
8712
msgid ""
8713
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8714
"the CAP_NET_RAW Posix.1e capability."
8715
msgstr ""
8716
8717
#: serverguide/C/security.xml:1119(para)
8718
msgid ""
8719
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8720
"execute access to the file."
8721
msgstr ""
8722
8723
#: serverguide/C/security.xml:1125(para)
8724
msgid ""
8725
"After editing a profile file the profile must be reloaded. See <xref "
8726
"linkend=\"apparmor-usage\"/> for details."
8727
msgstr ""
8728
8729
#: serverguide/C/security.xml:1130(title)
8730
msgid "Creating a Profile"
8731
msgstr ""
8732
8733
#: serverguide/C/security.xml:1133(para)
8734
msgid ""
8735
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8736
"application should be exercised. The test plan should be divided into small "
8737
"test cases. Each test case should have a small description and list the "
8738
"steps to follow."
8739
msgstr ""
8740
8741
#: serverguide/C/security.xml:1137(para)
8742
msgid "Some standard test cases are:"
8743
msgstr ""
8744
8745
#: serverguide/C/security.xml:1142(para)
8746
msgid "Starting the program."
8747
msgstr ""
8748
8749
#: serverguide/C/security.xml:1147(para)
8750
msgid "Stopping the program."
8751
msgstr ""
8752
8753
#: serverguide/C/security.xml:1152(para)
8754
msgid "Reloading the program."
8755
msgstr ""
8756
8757
#: serverguide/C/security.xml:1157(para)
8758
msgid "Testing all the commands supported by the init script."
8759
msgstr ""
8760
8761
#: serverguide/C/security.xml:1164(para)
8762
msgid ""
8763
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8764
"genprof</application> to generate a new profile. From a terminal:"
8765
msgstr ""
8766
8767
#: serverguide/C/security.xml:1169(command)
8768
msgid "sudo aa-genprof executable"
8769
msgstr ""
8770
8771
#: serverguide/C/security.xml:1171(para)
8772
msgid "For example:"
8773
msgstr ""
8774
8775
#: serverguide/C/security.xml:1175(command)
8776
msgid "sudo aa-genprof slapd"
8777
msgstr ""
8778
8779
#: serverguide/C/security.xml:1179(para)
8780
msgid ""
8781
"To get your new profile included in the <application>apparmor-"
8782
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8783
"against the <ulink "
8784
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8785
"/ulink> package:"
8786
msgstr ""
8787
8788
#: serverguide/C/security.xml:1186(para)
8789
msgid "Include your test plan and test cases."
8790
msgstr ""
8791
8792
#: serverguide/C/security.xml:1191(para)
8793
msgid "Attach your new profile to the bug."
8794
msgstr ""
8795
8796
#: serverguide/C/security.xml:1200(title)
8797
msgid "Updating Profiles"
8798
msgstr ""
8799
8800
#: serverguide/C/security.xml:1201(para)
8801
msgid ""
8802
"When the program is misbehaving, audit messages are sent to the log files. "
8803
"The program <application>aa-logprof</application> can be used to scan log "
8804
"files for <application>AppArmor</application> audit messages, review them "
8805
"and update the profiles. From a terminal:"
8806
msgstr ""
8807
8808
#: serverguide/C/security.xml:1206(command)
8809
msgid "sudo aa-logprof"
8810
msgstr ""
8811
8812
#: serverguide/C/security.xml:1214(para)
8813
msgid ""
8814
"See the <ulink "
8815
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8816
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8817
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8818
"configuration options."
8819
msgstr ""
8820
8821
#: serverguide/C/security.xml:1221(para)
8822
msgid ""
8823
"For details using AppArmor with other Ubuntu releases see the <ulink "
8824
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8825
"Wiki</ulink> page."
8826
msgstr ""
8827
8828
#: serverguide/C/security.xml:1229(para)
8829
msgid ""
8830
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8831
"page is another introduction to AppArmor."
8832
msgstr ""
8833
8834
#: serverguide/C/security.xml:1236(para)
8835
msgid ""
8836
"A great place to ask for <application>AppArmor</application> assistance, and "
8837
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8838
"server</emphasis> IRC channel on <ulink "
8839
"url=\"http://freenode.net\">freenode</ulink>."
8840
msgstr ""
8841
8842
#: serverguide/C/security.xml:1246(title)
8843
msgid "Certificates"
8844
msgstr ""
8845
8846
#: serverguide/C/security.xml:1247(para)
8847
msgid ""
8848
"One of the most common forms of cryptography today is <emphasis>public-"
8849
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8850
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
8851
"system works by <emphasis>encrypting</emphasis> information using the public "
8852
"key. The information can then only be <emphasis>decrypted</emphasis> using "
8853
"the private key."
8854
msgstr ""
8855
8856
#: serverguide/C/security.xml:1253(para)
8857
msgid ""
8858
"A common use for public-key cryptography is encrypting application traffic "
8859
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
8860
"connection. For example, configuring Apache to provide "
8861
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
8862
"encrypt traffic using a protocol that does not itself provide encryption."
8863
msgstr ""
8864
8865
#: serverguide/C/security.xml:1258(para)
8866
msgid ""
8867
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
8868
"<emphasis>public key</emphasis> and other information about a server and the "
8869
"organization who is responsible for it. Certificates can be digitally signed "
8870
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
8871
"third party that has confirmed that the information contained in the "
8872
"certificate is accurate."
8873
msgstr ""
8874
8875
#: serverguide/C/security.xml:1265(title)
8876
msgid "Types of Certificates"
8877
msgstr ""
8878
8879
#: serverguide/C/security.xml:1266(para)
8880
msgid ""
8881
"To set up a secure server using public-key cryptography, in most cases, you "
8882
"send your certificate request (including your public key), proof of your "
8883
"company's identity, and payment to a CA. The CA verifies the certificate "
8884
"request and your identity, and then sends back a certificate for your secure "
8885
"server. Alternatively, you can create your own <emphasis>self-"
8886
"signed</emphasis> certificate."
8887
msgstr ""
8888
8889
#: serverguide/C/security.xml:1276(para)
8890
msgid ""
8891
"Note, that self-signed certificates should not be used in most production "
8892
"environments."
8893
msgstr ""
8894
8895
#: serverguide/C/security.xml:1280(para)
8896
msgid ""
8897
"Continuing the HTTPS example, a CA-signed certificate provides two important "
8898
"capabilities that a self-signed certificate does not:"
8899
msgstr ""
8900
8901
#: serverguide/C/security.xml:1287(para)
8902
msgid ""
8903
"Browsers (usually) automatically recognize the certificate and allow a "
8904
"secure connection to be made without prompting the user."
8905
msgstr ""
8906
8907
#: serverguide/C/security.xml:1294(para)
8908
msgid ""
8909
"When a CA issues a signed certificate, it is guaranteeing the identity of "
8910
"the organization that is providing the web pages to the browser."
8911
msgstr ""
8912
8913
#: serverguide/C/security.xml:1302(para)
8914
msgid ""
8915
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
8916
"certificates they automatically accept. If a browser encounters a "
8917
"certificate whose authorizing CA is not in the list, the browser asks the "
8918
"user to either accept or decline the connection. Also, other applications "
8919
"may generate an error message when using a self-singed certificate."
8920
msgstr ""
8921
8922
#: serverguide/C/security.xml:1310(para)
8923
msgid ""
8924
"The process of getting a certificate from a CA is fairly easy. A quick "
8925
"overview is as follows:"
8926
msgstr ""
8927
8928
#: serverguide/C/security.xml:1317(para)
8929
msgid "Create a private and public encryption key pair."
8930
msgstr ""
8931
8932
#: serverguide/C/security.xml:1320(para)
8933
msgid ""
8934
"Create a certificate request based on the public key. The certificate "
8935
"request contains information about your server and the company hosting it."
8936
msgstr ""
8937
8938
#: serverguide/C/security.xml:1325(para)
8939
msgid ""
8940
"Send the certificate request, along with documents proving your identity, to "
8941
"a CA. We cannot tell you which certificate authority to choose. Your "
8942
"decision may be based on your past experiences, or on the experiences of "
8943
"your friends or colleagues, or purely on monetary factors."
8944
msgstr ""
8945
8946
#: serverguide/C/security.xml:1331(para)
8947
msgid ""
8948
"Once you have decided upon a CA, you need to follow the instructions they "
8949
"provide on how to obtain a certificate from them."
8950
msgstr ""
8951
8952
#: serverguide/C/security.xml:1336(para)
8953
msgid ""
8954
"When the CA is satisfied that you are indeed who you claim to be, they send "
8955
"you a digital certificate."
8956
msgstr ""
8957
8958
#: serverguide/C/security.xml:1340(para)
8959
msgid ""
8960
"Install this certificate on your secure server, and configure the "
8961
"appropriate applications to use the certificate."
8962
msgstr ""
8963
8964
#: serverguide/C/security.xml:1349(title)
8965
msgid "Generating a Certificate Signing Request (CSR)"
8966
msgstr ""
8967
8968
#: serverguide/C/security.xml:1351(para)
8969
msgid ""
8970
"Whether you are getting a certificate from a CA or generating your own self-"
8971
"signed certificate, the first step is to generate a key."
8972
msgstr ""
8973
8974
#: serverguide/C/security.xml:1356(para)
8975
msgid ""
8976
"If the certificate will be used by service daemons, such as Apache, Postfix, "
8977
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
8978
"passphrase allows the services to start without manual intervention, usually "
8979
"the preferred way to start a daemon."
8980
msgstr ""
8981
8982
#: serverguide/C/security.xml:1362(para)
8983
msgid ""
8984
"This section will cover generating a key with a passphrase, and one without. "
8985
"The non-passphrase key will then be used to generate a certificate that can "
8986
"be used with various service daemons."
8987
msgstr ""
8988
8989
#: serverguide/C/security.xml:1368(para)
8990
msgid ""
8991
"Running your secure service without a passphrase is convenient because you "
8992
"will not need to enter the passphrase every time you start your secure "
8993
"service. But it is insecure and a compromise of the key means a compromise "
8994
"of the server as well."
8995
msgstr ""
8996
8997
#: serverguide/C/security.xml:1375(para)
8998
msgid ""
8999
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
9000
"Request (CSR) run the following command from a terminal prompt:"
9001
msgstr ""
9002
9003
#: serverguide/C/security.xml:1381(command)
9004
msgid "openssl genrsa -des3 -out server.key 1024"
9005
msgstr ""
9006
9007
#: serverguide/C/security.xml:1384(programlisting)
9008
#, no-wrap
9009
msgid ""
9010
"\n"
9011
"Generating RSA private key, 1024 bit long modulus\n"
9012
".....................++++++\n"
9013
".................++++++\n"
9014
"unable to write 'random state'\n"
9015
"e is 65537 (0x10001)\n"
9016
"Enter pass phrase for server.key:\n"
9017
msgstr ""
9018
9019
#: serverguide/C/security.xml:1393(para)
9020
msgid ""
9021
"You can now enter your passphrase. For best security, it should at least "
9022
"contain eight characters. The minimum length when specifying -des3 is four "
9023
"characters. It should include numbers and/or punctuation and not be a word "
9024
"in a dictionary. Also remember that your passphrase is case-sensitive."
9025
msgstr ""
9026
9027
#: serverguide/C/security.xml:1401(para)
9028
msgid ""
9029
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
9030
"server key is generated and stored in the <filename>server.key</filename> "
9031
"file."
9032
msgstr ""
9033
9034
#: serverguide/C/security.xml:1407(para)
9035
msgid ""
9036
"Now create the insecure key, the one without a passphrase, and shuffle the "
9037
"key names:"
9038
msgstr ""
9039
9040
#: serverguide/C/security.xml:1413(command)
9041
msgid "openssl rsa -in server.key -out server.key.insecure"
9042
msgstr ""
9043
9044
#: serverguide/C/security.xml:1414(command)
9045
msgid "mv server.key server.key.secure"
9046
msgstr ""
9047
9048
#: serverguide/C/security.xml:1415(command)
9049
msgid "mv server.key.insecure server.key"
9050
msgstr ""
9051
9052
#: serverguide/C/security.xml:1418(para)
9053
msgid ""
9054
"The insecure key is now named <filename>server.key</filename>, and you can "
9055
"use this file to generate the CSR without passphrase."
9056
msgstr ""
9057
9058
#: serverguide/C/security.xml:1423(para)
9059
msgid "To create the CSR, run the following command at a terminal prompt:"
9060
msgstr ""
9061
9062
#: serverguide/C/security.xml:1428(command)
9063
msgid "openssl req -new -key server.key -out server.csr"
9064
msgstr ""
9065
9066
#: serverguide/C/security.xml:1431(para)
9067
msgid ""
9068
"It will prompt you enter the passphrase. If you enter the correct "
9069
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
9070
"etc. Once you enter all these details, your CSR will be created and it will "
9071
"be stored in the <filename>server.csr</filename> file."
9072
msgstr ""
9073
9074
#: serverguide/C/security.xml:1439(para)
9075
msgid ""
9076
"You can now submit this CSR file to a CA for processing. The CA will use "
9077
"this CSR file and issue the certificate. On the other hand, you can create "
9078
"self-signed certificate using this CSR."
9079
msgstr ""
9080
9081
#: serverguide/C/security.xml:1447(title)
9082
msgid "Creating a Self-Signed Certificate"
9083
msgstr ""
9084
9085
#: serverguide/C/security.xml:1448(para)
9086
msgid ""
9087
"To create the self-signed certificate, run the following command at a "
9088
"terminal prompt:"
9089
msgstr ""
9090
9091
#: serverguide/C/security.xml:1453(command)
9092
msgid ""
9093
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
9094
"server.crt"
9095
msgstr ""
9096
9097
#: serverguide/C/security.xml:1456(para)
9098
msgid ""
9099
"The above command will prompt you to enter the passphrase. Once you enter "
9100
"the correct passphrase, your certificate will be created and it will be "
9101
"stored in the <filename>server.crt</filename> file."
9102
msgstr ""
9103
9104
#: serverguide/C/security.xml:1461(para)
9105
msgid ""
9106
"If your secure server is to be used in a production environment, you "
9107
"probably need a CA-signed certificate. It is not recommended to use self-"
9108
"signed certificate."
9109
msgstr ""
9110
9111
#: serverguide/C/security.xml:1469(title)
9112
msgid "Installing the Certificate"
9113
msgstr ""
9114
9115
#: serverguide/C/security.xml:1471(para)
9116
msgid ""
9117
"You can install the key file <filename>server.key</filename> and certificate "
9118
"file <filename>server.crt</filename>, or the certificate file issued by your "
9119
"CA, by running following commands at a terminal prompt:"
9120
msgstr ""
9121
9122
#: serverguide/C/security.xml:1477(command)
9123
msgid "sudo cp server.crt /etc/ssl/certs"
9124
msgstr ""
9125
9126
#: serverguide/C/security.xml:1478(command)
9127
msgid "sudo cp server.key /etc/ssl/private"
9128
msgstr ""
9129
9130
#: serverguide/C/security.xml:1480(para)
9131
msgid ""
9132
"Now simply configure any applications, with the ability to use public-key "
9133
"cryptography, to use the <emphasis>certificate</emphasis> and "
9134
"<emphasis>key</emphasis> files. For example, "
9135
"<application>Apache</application> can provide HTTPS, "
9136
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9137
msgstr ""
9138
9139
#: serverguide/C/security.xml:1487(title)
9140
msgid "Certification Authority"
9141
msgstr ""
9142
9143
#: serverguide/C/security.xml:1489(para)
9144
msgid ""
9145
"If the services on your network require more than a few self-signed "
9146
"certificates it may be worth the additional effort to setup your own "
9147
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9148
"certificates signed by your own CA, allows the various services using the "
9149
"certificates to easily trust other services using certificates issued from "
9150
"the same CA."
9151
msgstr ""
9152
9153
#: serverguide/C/security.xml:1499(para)
9154
msgid ""
9155
"First, create the directories to hold the CA certificate and related files:"
9156
msgstr ""
9157
9158
#: serverguide/C/security.xml:1504(command)
9159
msgid "sudo mkdir /etc/ssl/CA"
9160
msgstr ""
9161
9162
#: serverguide/C/security.xml:1505(command)
9163
msgid "sudo mkdir /etc/ssl/newcerts"
9164
msgstr ""
9165
9166
#: serverguide/C/security.xml:1511(para)
9167
msgid ""
9168
"The CA needs a few additional files to operate, one to keep track of the "
9169
"last serial number used by the CA, each certificate must have a unique "
9170
"serial number, and another file to record which certificates have been "
9171
"issued:"
9172
msgstr ""
9173
9174
#: serverguide/C/security.xml:1518(command)
9175
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9176
msgstr ""
9177
9178
#: serverguide/C/security.xml:1519(command)
9179
msgid "sudo touch /etc/ssl/CA/index.txt"
9180
msgstr ""
9181
9182
#: serverguide/C/security.xml:1525(para)
9183
msgid ""
9184
"The third file is a CA configuration file. Though not strictly necessary, it "
9185
"is very convenient when issuing multiple certificates. Edit "
9186
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9187
"]</emphasis> change:"
9188
msgstr ""
9189
9190
#: serverguide/C/security.xml:1531(programlisting)
9191
#, no-wrap
9192
msgid ""
9193
"\n"
9194
"dir = /etc/ssl/ # Where everything is kept\n"
9195
"database = $dir/CA/index.txt # database index file.\n"
9196
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9197
"serial = $dir/CA/serial # The current serial number\n"
9198
"private_key = $dir/private/cakey.pem# The private key\n"
9199
msgstr ""
9200
9201
#: serverguide/C/security.xml:1542(para)
9202
msgid "Next, create the self-singed root certificate:"
9203
msgstr ""
9204
9205
#: serverguide/C/security.xml:1547(command)
9206
msgid ""
9207
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9208
"days 3650"
9209
msgstr ""
9210
9211
#: serverguide/C/security.xml:1550(para)
9212
msgid "You will then be asked to enter the details about the certificate."
9213
msgstr ""
9214
9215
#: serverguide/C/security.xml:1557(para)
9216
msgid "Now install the root certificate and key:"
9217
msgstr ""
9218
9219
#: serverguide/C/security.xml:1562(command)
9220
msgid "sudo mv cakey.pem /etc/ssl/private/"
9221
msgstr ""
9222
9223
#: serverguide/C/security.xml:1563(command)
9224
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9225
msgstr ""
9226
9227
#: serverguide/C/security.xml:1569(para)
9228
msgid ""
9229
"You are now ready to start signing certificates. The first item needed is a "
9230
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9231
"for details. Once you have a CSR, enter the following to generate a "
9232
"certificate signed by the CA:"
9233
msgstr ""
9234
9235
#: serverguide/C/security.xml:1576(command)
9236
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9237
msgstr ""
9238
9239
#: serverguide/C/security.xml:1579(para)
9240
msgid ""
9241
"After entering the password for the CA key, you will be prompted to sign the "
9242
"certificate, and again to commit the new certificate. You should then see a "
9243
"somewhat large amount of output related to the certificate creation."
9244
msgstr ""
9245
9246
#: serverguide/C/security.xml:1588(para)
9247
msgid ""
9248
"There should now be a new file, "
9249
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9250
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9251
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9252
"file named after the hostname of the server where the certificate will be "
9253
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9254
"descriptive name."
9255
msgstr ""
9256
9257
#: serverguide/C/security.xml:1596(para)
9258
msgid ""
9259
"Subsequent certificates will be named <filename>02.pem</filename>, "
9260
"<filename>03.pem</filename>, etc."
9261
msgstr ""
9262
9263
#: serverguide/C/security.xml:1601(para)
9264
msgid ""
9265
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9266
"name."
9267
msgstr ""
9268
9269
#: serverguide/C/security.xml:1609(para)
9270
msgid ""
9271
"Finally, copy the new certificate to the host that needs it, and configure "
9272
"the appropriate applications to use it. The default location to install "
9273
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9274
"enables multiple services to use the same certificate without overly "
9275
"complicated file permissions."
9276
msgstr ""
9277
9278
#: serverguide/C/security.xml:1615(para)
9279
msgid ""
9280
"For applications that can be configured to use a CA certificate, you should "
9281
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9282
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9283
"server."
9284
msgstr ""
9285
9286
#: serverguide/C/security.xml:1629(para)
9287
msgid ""
9288
"For more detailed instructions on using cryptography see the <ulink "
9289
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9290
"Certificates HOWTO</ulink> by tlpd.org"
9291
msgstr ""
9292
9293
#: serverguide/C/security.xml:1635(para)
9294
msgid ""
9295
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9296
"of Certificate Authorities."
9297
msgstr ""
9298
9299
#: serverguide/C/security.xml:1640(para)
9300
msgid ""
9301
"The Wikipedia <ulink "
9302
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9303
"information regarding HTTPS."
9304
msgstr ""
9305
9306
#: serverguide/C/security.xml:1645(para)
9307
msgid ""
9308
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9309
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9310
msgstr ""
9311
9312
#: serverguide/C/security.xml:1650(para)
9313
msgid ""
9314
"Also, O'Reilly's <ulink "
9315
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9316
"OpenSSL</ulink> is a good in depth reference."
9317
msgstr ""
9318
9319
#: serverguide/C/security.xml:1659(title)
9320
msgid "eCryptfs"
9321
msgstr ""
9322
9323
#: serverguide/C/security.xml:1661(para)
9324
msgid ""
9325
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9326
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9327
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9328
"filesystem, partition type, etc."
9329
msgstr ""
9330
9331
#: serverguide/C/security.xml:1667(para)
9332
msgid ""
9333
"During installation there is an option to encrypt the <filename "
9334
"role=\"directory\">/home</filename> partition. This will automatically "
9335
"configure everything needed to encrypt and mount the partition."
9336
msgstr ""
9337
9338
#: serverguide/C/security.xml:1672(para)
9339
msgid ""
9340
"As an example, this section will cover configuring <filename "
9341
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9342
msgstr ""
9343
9344
#: serverguide/C/security.xml:1677(title)
9345
msgid "Using eCryptfs"
9346
msgstr ""
9347
9348
#: serverguide/C/security.xml:1679(para)
9349
msgid "First, install the necessary packages. From a terminal prompt enter:"
9350
msgstr ""
9351
9352
#: serverguide/C/security.xml:1684(command)
9353
msgid "sudo apt-get install ecryptfs-utils"
9354
msgstr ""
9355
9356
#: serverguide/C/security.xml:1687(para)
9357
msgid "Now mount the partition to be encrypted:"
9358
msgstr ""
9359
9360
#: serverguide/C/security.xml:1692(command)
9361
msgid "sudo mount -t ecryptfs /srv /srv"
9362
msgstr ""
9363
9364
#: serverguide/C/security.xml:1695(para)
9365
msgid ""
9366
"You will then be prompted for some details on how "
9367
"<application>ecryptfs</application> should encrypt the data."
9368
msgstr ""
9369
9370
#: serverguide/C/security.xml:1699(para)
9371
msgid ""
9372
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9373
"copy the <filename>/etc/default</filename> folder to "
9374
"<filename>/srv</filename>:"
9375
msgstr ""
9376
9377
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9378
msgid "sudo cp -r /etc/default /srv"
9379
msgstr ""
9380
9381
#: serverguide/C/security.xml:1708(para)
9382
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9383
msgstr ""
9384
9385
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9386
msgid "sudo umount /srv"
9387
msgstr ""
9388
9389
#: serverguide/C/security.xml:1714(command)
9390
msgid "cat /srv/default/cron"
9391
msgstr ""
9392
9393
#: serverguide/C/security.xml:1717(para)
9394
msgid ""
9395
"Remounting <filename>/srv</filename> using "
9396
"<application>ecryptfs</application> will make the data viewable once again."
9397
msgstr ""
9398
9399
#: serverguide/C/security.xml:1723(title)
9400
msgid "Automatically Mounting Encrypted Partitions"
9401
msgstr ""
9402
9403
#: serverguide/C/security.xml:1725(para)
9404
msgid ""
9405
"There are a couple of ways to automatically mount an "
9406
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9407
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9408
"mount options, along with a passphrase file residing on a USB key."
9409
msgstr ""
9410
9411
#: serverguide/C/security.xml:1731(para)
9412
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9413
msgstr ""
9414
9415
#: serverguide/C/security.xml:1735(programlisting)
9416
#, no-wrap
9417
msgid ""
9418
"\n"
9419
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9420
"ecryptfs_sig=5826dd62cf81c615\n"
9421
"ecryptfs_cipher=aes\n"
9422
"ecryptfs_key_bytes=16\n"
9423
"ecryptfs_passthrough=n\n"
9424
"ecryptfs_enable_filename_crypto=n\n"
9425
msgstr ""
9426
9427
#: serverguide/C/security.xml:1745(para)
9428
msgid ""
9429
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9430
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9431
msgstr ""
9432
9433
#: serverguide/C/security.xml:1750(para)
9434
msgid ""
9435
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9436
"file:"
9437
msgstr ""
9438
9439
#: serverguide/C/security.xml:1754(programlisting)
9440
#, no-wrap
9441
msgid ""
9442
"\n"
9443
"passphrase_passwd=[secrets]\n"
9444
msgstr ""
9445
9446
#: serverguide/C/security.xml:1758(para)
9447
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9448
msgstr ""
9449
9450
#: serverguide/C/security.xml:1762(programlisting)
9451
#, no-wrap
9452
msgid ""
9453
"\n"
9454
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9455
"/srv /srv ecryptfs defaults 0 0\n"
9456
msgstr ""
9457
9458
#: serverguide/C/security.xml:1767(para)
9459
msgid "Make sure the USB drive is mounted before the encrypted partition."
9460
msgstr ""
9461
9462
#: serverguide/C/security.xml:1771(para)
9463
msgid ""
9464
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9465
"ecryptfs."
9466
msgstr ""
9467
9468
#: serverguide/C/security.xml:1779(para)
9469
msgid ""
9470
"The <application>ecryptfs-utils</application> package includes several other "
9471
"useful utilities:"
9472
msgstr ""
9473
9474
#: serverguide/C/security.xml:1785(para)
9475
msgid ""
9476
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9477
"<filename>~/Private</filename> directory to contain encrypted information. "
9478
"This utility can be run by unprivileged users to keep data private from "
9479
"other users on the system."
9480
msgstr ""
9481
9482
#: serverguide/C/security.xml:1792(para)
9483
msgid ""
9484
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9485
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9486
"directory."
9487
msgstr ""
9488
9489
#: serverguide/C/security.xml:1798(para)
9490
msgid ""
9491
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9492
"kernel keyring."
9493
msgstr ""
9494
9495
#: serverguide/C/security.xml:1803(para)
9496
msgid ""
9497
"<emphasis>ecryptfs-manager:</emphasis> manages "
9498
"<application>eCryptfs</application> objects such as keys."
9499
msgstr ""
9500
9501
#: serverguide/C/security.xml:1808(para)
9502
msgid ""
9503
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9504
"<application>ecryptfs</application> meta information for a file."
9505
msgstr ""
9506
9507
#: serverguide/C/security.xml:1821(para)
9508
msgid ""
9509
"For more information on eCryptfs see the <ulink "
9510
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9511
msgstr ""
9512
9513
#: serverguide/C/security.xml:1826(para)
9514
msgid ""
9515
"There is also a <ulink "
9516
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9517
"article covering eCryptfs."
9518
msgstr ""
9519
9520
#: serverguide/C/security.xml:1831(para)
9521
msgid ""
9522
"Also, for more <application>ecryptfs</application> options see the <ulink "
9523
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9524
"yptfs man page</ulink>."
9525
msgstr ""
9526
9527
#: serverguide/C/security.xml:1837(para)
9528
msgid ""
9529
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9530
"Ubuntu Wiki</ulink> page also has more details."
9531
msgstr ""
9532
9533
#: serverguide/C/reporting-bugs.xml:13(title)
9534
msgid "Appendix"
9535
msgstr ""
9536
9537
#: serverguide/C/reporting-bugs.xml:16(title)
9538
msgid "Reporting Bugs in Ubuntu Server Edition"
9539
msgstr ""
9540
9541
#: serverguide/C/reporting-bugs.xml:18(para)
9542
msgid ""
9543
"While the Ubuntu Project attempts to release software with as few bugs as "
9544
"possible, they do occur. You can help fix these bugs by reporting ones that "
9545
"you find to the project. The Ubuntu Project uses <ulink "
9546
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9547
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9548
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9549
"account</ulink>."
9550
msgstr ""
9551
9552
#: serverguide/C/reporting-bugs.xml:30(title)
9553
msgid "Reporting Bugs With ubuntu-bug"
9554
msgstr ""
9555
9556
#: serverguide/C/reporting-bugs.xml:32(para)
9557
msgid ""
9558
"The preferred way to report a bug is with the <application>ubuntu-"
9559
"bug</application> command. The ubuntu-bug tool gathers information about the "
9560
"system useful to developers in diagnosing the reported problem that will "
9561
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9562
"need to be filed against a specific software package, thus the name of the "
9563
"package that the bug occurs in needs to be given to ubuntu-bug:"
9564
msgstr ""
9565
9566
#: serverguide/C/reporting-bugs.xml:43(command)
9567
msgid "ubuntu-bug PACKAGENAME"
9568
msgstr ""
9569
9570
#: serverguide/C/reporting-bugs.xml:46(para)
9571
msgid ""
9572
"For example, to file a bug against the openssh-server package, you would do:"
9573
msgstr ""
9574
9575
#: serverguide/C/reporting-bugs.xml:51(command)
9576
msgid "ubuntu-bug openssh-server"
9577
msgstr ""
9578
9579
#: serverguide/C/reporting-bugs.xml:54(para)
9580
msgid ""
9581
"You can specify either a binary package or the source package for ubuntu-"
9582
"bug. Again using openssh-server as an example, you could also generate the "
9583
"report against the source package for openssh-server, openssh:"
9584
msgstr ""
9585
9586
#: serverguide/C/reporting-bugs.xml:62(command)
9587
msgid "ubuntu-bug openssh"
9588
msgstr ""
9589
9590
#: serverguide/C/reporting-bugs.xml:66(para)
9591
msgid ""
9592
"See <xref linkend=\"package-management\"/> for more information about "
9593
"packages in Ubuntu."
9594
msgstr ""
9595
9596
#: serverguide/C/reporting-bugs.xml:72(para)
9597
msgid ""
9598
"The ubuntu-bug command will gather information about the system in question, "
9599
"possibly including information specific to the specified package, and then "
9600
"ask you what you would like to do with collected information:"
9601
msgstr ""
9602
9603
#: serverguide/C/reporting-bugs.xml:80(command)
9604
msgid "ubuntu-bug postgresql"
9605
msgstr ""
9606
9607
#: serverguide/C/reporting-bugs.xml:79(screen)
9608
#, no-wrap
9609
msgid ""
9610
"\n"
9611
"<placeholder-1/>\n"
9612
"\n"
9613
"*** Collecting problem information\n"
9614
"\n"
9615
"The collected information can be sent to the developers to improve the\n"
9616
"application. This might take a few minutes.\n"
9617
"..........\n"
9618
"\n"
9619
"*** Send problem report to the developers?\n"
9620
"\n"
9621
"After the problem report has been sent, please fill out the form in the\n"
9622
"automatically opened web browser.\n"
9623
"\n"
9624
"What would you like to do? Your options are:\n"
9625
" S: Send report (1.7 KiB)\n"
9626
" V: View report\n"
9627
" K: Keep report file for sending later or copying to somewhere else\n"
9628
" C: Cancel\n"
9629
"Please choose (S/V/K/C):\n"
9630
msgstr ""
9631
9632
#: serverguide/C/reporting-bugs.xml:101(para)
9633
msgid "The options available are:"
9634
msgstr ""
9635
9636
#: serverguide/C/reporting-bugs.xml:108(para)
9637
msgid ""
9638
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9639
"the collected information to Launchpad as part of the the process of filing "
9640
"a bug report. You will be given the opportunity to describe the situation "
9641
"that led up to the occurrance of the bug."
9642
msgstr ""
9643
9644
#: serverguide/C/reporting-bugs.xml:115(screen)
9645
#, no-wrap
9646
msgid ""
9647
"\n"
9648
"*** Uploading problem information\n"
9649
"\n"
9650
"The collected information is being sent to the bug tracking system.\n"
9651
"This might take a few minutes.\n"
9652
"91%\n"
9653
"\n"
9654
"*** To continue, you must visit the following URL:\n"
9655
"\n"
9656
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9657
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9658
"\n"
9659
"You can launch a browser now, or copy this URL into a browser on another\n"
9660
"computer.\n"
9661
"\n"
9662
"Choices:\n"
9663
" 1: Launch a browser now\n"
9664
" C: Cancel\n"
9665
"Please choose (1/C):\n"
9666
msgstr ""
9667
9668
#: serverguide/C/reporting-bugs.xml:135(para)
9669
msgid ""
9670
"If you choose to start a browser, by default the text based web browser "
9671
"<application>w3m</application> will be used to finish filing the bug report. "
9672
"Alternately, you can copy the given URL to a currently running web browser."
9673
msgstr ""
9674
9675
#: serverguide/C/reporting-bugs.xml:144(para)
9676
msgid ""
9677
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9678
"the collected information to be displayed to the terminal for review."
9679
msgstr ""
9680
9681
#: serverguide/C/reporting-bugs.xml:150(screen)
9682
#, no-wrap
9683
msgid ""
9684
"\n"
9685
"Package: postgresql 8.4.2-2\n"
9686
"PackageArchitecture: all\n"
9687
"Tags: lucid\n"
9688
"ProblemType: Bug\n"
9689
"ProcEnviron:\n"
9690
" LANG=en_US.UTF-8\n"
9691
" SHELL=/bin/bash\n"
9692
"Uname: Linux 2.6.32-16-server x86_64\n"
9693
"Dependencies:\n"
9694
" adduser 3.112ubuntu1\n"
9695
" base-files 5.0.0ubuntu10\n"
9696
" base-passwd 3.5.22\n"
9697
" coreutils 7.4-2ubuntu2\n"
9698
"...\n"
9699
msgstr ""
9700
9701
#: serverguide/C/reporting-bugs.xml:167(para)
9702
msgid ""
9703
"After viewing the report, you will be brought back to the same menu asking "
9704
"what you would like to do with the report."
9705
msgstr ""
9706
9707
#: serverguide/C/reporting-bugs.xml:174(para)
9708
msgid ""
9709
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9710
"File causes the gathered information to be written to a file. This file can "
9711
"then be used to later file a bug report or transferred to a different Ubuntu "
9712
"system for reporting. To submit the report file, simply give it as an "
9713
"argument to the ubuntu-bug command:"
9714
msgstr ""
9715
9716
#: serverguide/C/reporting-bugs.xml:189(userinput)
9717
#, no-wrap
9718
msgid "k"
9719
msgstr ""
9720
9721
#: serverguide/C/reporting-bugs.xml:192(command)
9722
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9723
msgstr ""
9724
9725
#: serverguide/C/reporting-bugs.xml:183(screen)
9726
#, no-wrap
9727
msgid ""
9728
"\n"
9729
"What would you like to do? Your options are:\n"
9730
" S: Send report (1.7 KiB)\n"
9731
" V: View report\n"
9732
" K: Keep report file for sending later or copying to somewhere else\n"
9733
" C: Cancel\n"
9734
"Please choose (S/V/K/C): <placeholder-1/>\n"
9735
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9736
"\n"
9737
"<placeholder-2/>\n"
9738
"\n"
9739
"*** Send problem report to the developers?\n"
9740
"...\n"
9741
msgstr ""
9742
9743
#: serverguide/C/reporting-bugs.xml:200(para)
9744
msgid ""
9745
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9746
"collected information to be discarded."
9747
msgstr ""
9748
9749
#: serverguide/C/reporting-bugs.xml:210(title)
9750
msgid "Reporting Application Crashes"
9751
msgstr ""
9752
9753
#: serverguide/C/reporting-bugs.xml:212(para)
9754
msgid ""
9755
"The software package that provides the ubuntu-bug utility, "
9756
"<application>apport</application>, can be configured to trigger when "
9757
"applications crash. This is disabled by default, as capturing a crash can be "
9758
"resource intensive depending on how much memory the application that crashed "
9759
"was using as apport captures and processes the core dump."
9760
msgstr ""
9761
9762
#: serverguide/C/reporting-bugs.xml:221(para)
9763
msgid ""
9764
"Configuring apport to capture information about crashing applications "
9765
"requires a couple of steps. First, <application>gdb</application> needs to "
9766
"be installed; it is not installed by default in Ubuntu Server Edition."
9767
msgstr ""
9768
9769
#: serverguide/C/reporting-bugs.xml:229(command)
9770
msgid "sudo apt-get install gdb"
9771
msgstr ""
9772
9773
#: serverguide/C/reporting-bugs.xml:232(para)
9774
msgid ""
9775
"See <xref linkend=\"package-management\"/> for more information about "
9776
"managing packages in Ubuntu."
9777
msgstr ""
9778
9779
#: serverguide/C/reporting-bugs.xml:237(para)
9780
msgid ""
9781
"Once you have ensured that gdb is installed, open the file "
9782
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9783
"<emphasis>enabled</emphasis> setting to be <emphasis "
9784
"role=\"bold\">1</emphasis> like so:"
9785
msgstr ""
9786
9787
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9788
#, no-wrap
9789
msgid ""
9790
"\n"
9791
"# set this to 0 to disable apport, or to 1 to enable it\n"
9792
"# you can temporarily override this with\n"
9793
"# sudo service apport start force_start=1\n"
9794
"enabled=<userinput>1</userinput>\n"
9795
"\n"
9796
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9797
"maxsize=209715200\n"
9798
msgstr ""
9799
9800
#: serverguide/C/reporting-bugs.xml:254(para)
9801
msgid ""
9802
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9803
"start the apport service:"
9804
msgstr ""
9805
9806
#: serverguide/C/reporting-bugs.xml:261(command)
9807
msgid "sudo start apport"
9808
msgstr ""
9809
9810
#: serverguide/C/reporting-bugs.xml:264(para)
9811
msgid ""
9812
"After an application crashes, use the <application>apport-cli</application> "
9813
"command to search for the existing saved crash report information:"
9814
msgstr ""
9815
9816
#: serverguide/C/reporting-bugs.xml:271(command)
9817
msgid "apport-cli"
9818
msgstr ""
9819
9820
#: serverguide/C/reporting-bugs.xml:270(screen)
9821
#, no-wrap
9822
msgid ""
9823
"\n"
9824
"<placeholder-1/>\n"
9825
"\n"
9826
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
9827
"\n"
9828
"If you were not doing anything confidential (entering passwords or other\n"
9829
"private information), you can help to improve the application by\n"
9830
"reporting\n"
9831
"the problem.\n"
9832
"\n"
9833
"What would you like to do? Your options are:\n"
9834
" R: Report Problem...\n"
9835
" I: Cancel and ignore future crashes of this program version\n"
9836
" C: Cancel\n"
9837
"Please choose (R/I/C):\n"
9838
msgstr ""
9839
9840
#: serverguide/C/reporting-bugs.xml:287(para)
9841
msgid ""
9842
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
9843
"steps as when using ubuntu-bug. One important difference is that a crash "
9844
"report will be marked as private when filed on Launchpad, meaning that it "
9845
"will be visible to only a limited set of bug triagers. These triagers will "
9846
"review the gathered data for private information before making the bug "
9847
"report publicly visible."
9848
msgstr ""
9849
9850
#: serverguide/C/reporting-bugs.xml:307(para)
9851
msgid ""
9852
"See the <ulink "
9853
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
9854
"Bugs</ulink> Ubuntu wiki page."
9855
msgstr ""
9856
9857
#: serverguide/C/reporting-bugs.xml:313(para)
9858
msgid ""
9859
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
9860
"has some useful information. Though some of it pertains to using a GUI."
9861
msgstr ""
9862
9863
#: serverguide/C/remote-administration.xml:13(title)
9864
msgid "Remote Administration"
9865
msgstr ""
9866
9867
#: serverguide/C/remote-administration.xml:14(para)
9868
msgid ""
9869
"There are many ways to remotely administer a Linux server. This chapter will "
9870
"cover one of the most popular <application>SSH</application> as well as "
9871
"<application>eBox</application>, a web based administration framework."
9872
msgstr ""
9873
9874
#: serverguide/C/remote-administration.xml:23(para)
9875
msgid ""
9876
"This section of the Ubuntu Server Guide introduces a powerful collection of "
9877
"tools for the remote control of networked computers and transfer of data "
9878
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
9879
"also learn about some of the configuration settings possible with the "
9880
"OpenSSH server application and how to change them on your Ubuntu system."
9881
msgstr ""
9882
9883
#: serverguide/C/remote-administration.xml:30(para)
9884
msgid ""
9885
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
9886
"family of tools for remotely controlling a computer or transferring files "
9887
"between computers. Traditional tools used to accomplish these functions, "
9888
"such as <application>telnet</application> or <application>rcp</application>, "
9889
"are insecure and transmit the user's password in cleartext when used. "
9890
"OpenSSH provides a server daemon and client tools to facilitate secure, "
9891
"encrypted remote control and file transfer operations, effectively replacing "
9892
"the legacy tools."
9893
msgstr ""
9894
9895
#: serverguide/C/remote-administration.xml:39(para)
9896
msgid ""
9897
"The OpenSSH server component, <application>sshd</application>, listens "
9898
"continuously for client connections from any of the client tools. When a "
9899
"connection request occurs, <application>sshd</application> sets up the "
9900
"correct connection depending on the type of client tool connecting. For "
9901
"example, if the remote computer is connecting with the "
9902
"<application>ssh</application> client application, the OpenSSH server sets "
9903
"up a remote control session after authentication. If a remote user connects "
9904
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
9905
"daemon initiates a secure copy of files between the server and client after "
9906
"authentication. OpenSSH can use many authentication methods, including plain "
9907
"password, public key, and <application>Kerberos</application> tickets."
9908
msgstr ""
9909
9910
#: serverguide/C/remote-administration.xml:53(para)
9911
msgid ""
9912
"Installation of the OpenSSH client and server applications is simple. To "
9913
"install the OpenSSH client applications on your Ubuntu system, use this "
9914
"command at a terminal prompt:"
9915
msgstr ""
9916
9917
#: serverguide/C/remote-administration.xml:59(command)
9918
msgid "sudo apt-get install openssh-client"
9919
msgstr ""
9920
9921
#: serverguide/C/remote-administration.xml:61(para)
9922
msgid ""
9923
"To install the OpenSSH server application, and related support files, use "
9924
"this command at a terminal prompt:"
9925
msgstr ""
9926
9927
#: serverguide/C/remote-administration.xml:66(command)
9928
msgid "sudo apt-get install openssh-server"
9929
msgstr ""
9930
9931
#: serverguide/C/remote-administration.xml:68(para)
9932
msgid ""
9933
"The <application>openssh-server</application> package can also be selected "
9934
"to install during the Server Edition installation process."
9935
msgstr ""
9936
9937
#: serverguide/C/remote-administration.xml:75(para)
9938
msgid ""
9939
"You may configure the default behavior of the OpenSSH server application, "
9940
"<application>sshd</application>, by editing the file "
9941
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
9942
"configuration directives used in this file, you may view the appropriate "
9943
"manual page with the following command, issued at a terminal prompt:"
9944
msgstr ""
9945
9946
#: serverguide/C/remote-administration.xml:83(command)
9947
msgid "man sshd_config"
9948
msgstr ""
9949
9950
#: serverguide/C/remote-administration.xml:85(para)
9951
msgid ""
9952
"There are many directives in the <application>sshd</application> "
9953
"configuration file controlling such things as communication settings and "
9954
"authentication modes. The following are examples of configuration directives "
9955
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
9956
"file."
9957
msgstr ""
9958
9959
#: serverguide/C/remote-administration.xml:92(para)
9960
msgid ""
9961
"Prior to editing the configuration file, you should make a copy of the "
9962
"original file and protect it from writing so you will have the original "
9963
"settings as a reference and to reuse as necessary."
9964
msgstr ""
9965
9966
#: serverguide/C/remote-administration.xml:96(para)
9967
msgid ""
9968
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
9969
"writing with the following commands, issued at a terminal prompt:"
9970
msgstr ""
9971
9972
#: serverguide/C/remote-administration.xml:101(command)
9973
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
9974
msgstr ""
9975
9976
#: serverguide/C/remote-administration.xml:102(command)
9977
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
9978
msgstr ""
9979
9980
#: serverguide/C/remote-administration.xml:104(para)
9981
msgid ""
9982
"The following are examples of configuration directives you may change:"
9983
msgstr ""
9984
9985
#: serverguide/C/remote-administration.xml:109(para)
9986
msgid ""
9987
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
9988
"port 22, change the Port directive as such:"
9989
msgstr ""
9990
9991
#: serverguide/C/remote-administration.xml:113(para)
9992
msgid "Port 2222"
9993
msgstr ""
9994
9995
#: serverguide/C/remote-administration.xml:118(para)
9996
msgid ""
9997
"To have <application>sshd</application> allow public key-based login "
9998
"credentials, simply add or modify the line:"
9999
msgstr ""
10000
10001
#: serverguide/C/remote-administration.xml:122(para)
10002
msgid "PubkeyAuthentication yes"
10003
msgstr ""
10004
10005
#: serverguide/C/remote-administration.xml:125(para)
10006
msgid ""
10007
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
10008
"present, ensure the line is not commented out."
10009
msgstr ""
10010
10011
#: serverguide/C/remote-administration.xml:131(para)
10012
msgid ""
10013
"To make your OpenSSH server display the contents of the "
10014
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
10015
"or modify the line:"
10016
msgstr ""
10017
10018
#: serverguide/C/remote-administration.xml:136(para)
10019
msgid "Banner /etc/issue.net"
10020
msgstr ""
10021
10022
#: serverguide/C/remote-administration.xml:139(para)
10023
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
10024
msgstr ""
10025
10026
#: serverguide/C/remote-administration.xml:144(para)
10027
msgid ""
10028
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
10029
"save the file, and restart the <application>sshd</application> server "
10030
"application to effect the changes using the following command at a terminal "
10031
"prompt:"
10032
msgstr ""
10033
10034
#: serverguide/C/remote-administration.xml:153(para)
10035
msgid ""
10036
"Many other configuration directives for <application>sshd</application> are "
10037
"available for changing the server application's behavior to fit your needs. "
10038
"Be advised, however, if your only method of access to a server is "
10039
"<application>ssh</application>, and you make a mistake in configuring "
10040
"<application>sshd</application> via the "
10041
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
10042
"out of the server upon restarting it, or that the "
10043
"<application>sshd</application> server refuses to start due to an incorrect "
10044
"configuration directive, so be extra careful when editing this file on a "
10045
"remote server."
10046
msgstr ""
10047
10048
#: serverguide/C/remote-administration.xml:168(title)
10049
msgid "SSH Keys"
10050
msgstr ""
10051
10052
#: serverguide/C/remote-administration.xml:169(para)
10053
msgid ""
10054
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
10055
"the need of a password. SSH key authentication uses two keys a "
10056
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
10057
msgstr ""
10058
10059
#: serverguide/C/remote-administration.xml:173(para)
10060
msgid "To generate the keys, from a terminal prompt enter:"
10061
msgstr ""
10062
10063
#: serverguide/C/remote-administration.xml:177(command)
10064
msgid "ssh-keygen -t dsa"
10065
msgstr ""
10066
10067
#: serverguide/C/remote-administration.xml:179(para)
10068
msgid ""
10069
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
10070
"identity of the user. During the process you will be prompted for a "
10071
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
10072
"key."
10073
msgstr ""
10074
10075
#: serverguide/C/remote-administration.xml:183(para)
10076
msgid ""
10077
"By default the <emphasis>public</emphasis> key is saved in the file "
10078
"<filename>~/.ssh/id_dsa.pub</filename>, while "
10079
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
10080
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
10081
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
10082
msgstr ""
10083
10084
#: serverguide/C/remote-administration.xml:189(command)
10085
msgid "ssh-copy-id username@remotehost"
10086
msgstr ""
10087
10088
#: serverguide/C/remote-administration.xml:191(para)
10089
msgid ""
10090
"Finally, double check the permissions on the "
10091
"<filename>authorized_keys</filename> file, only the authenticated user "
10092
"should have read and write permissions. If the permissions are not correct "
10093
"change them by:"
10094
msgstr ""
10095
10096
#: serverguide/C/remote-administration.xml:196(command)
10097
msgid "chmod 600 .ssh/authorized_keys"
10098
msgstr ""
10099
10100
#: serverguide/C/remote-administration.xml:198(para)
10101
msgid ""
10102
"You should now be able to SSH to the host without being prompted for a "
10103
"password."
10104
msgstr ""
10105
10106
#: serverguide/C/remote-administration.xml:207(para)
10107
msgid ""
10108
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
10109
"page."
10110
msgstr ""
10111
10112
#: serverguide/C/remote-administration.xml:213(ulink)
10113
msgid "OpenSSH Website"
10114
msgstr ""
10115
10116
#: serverguide/C/remote-administration.xml:218(ulink)
10117
msgid "Advanced OpenSSH Wiki Page"
10118
msgstr ""
10119
10120
#: serverguide/C/remote-administration.xml:226(title)
10121
msgid "eBox"
10122
msgstr ""
10123
10124
#: serverguide/C/remote-administration.xml:227(para)
10125
msgid ""
10126
"<application>eBox</application> is a web framework used to manage server "
10127
"application configuration. The modular design of eBox allows you to pick and "
10128
"choose which services you want to configure using eBox."
10129
msgstr ""
10130
10131
#: serverguide/C/remote-administration.xml:234(para)
10132
msgid ""
10133
"The different <application>eBox</application> modules are split into "
10134
"different packages, allowing you to only install those necessary. One way to "
10135
"view the available packages is to enter the following from a terminal:"
10136
msgstr ""
10137
10138
#: serverguide/C/remote-administration.xml:240(command)
10139
msgid "apt-cache rdepends ebox | uniq"
10140
msgstr ""
10141
10142
#: serverguide/C/remote-administration.xml:242(para)
10143
msgid ""
10144
"To install the <application>ebox</application> package, which contains the "
10145
"default modules, enter the following:"
10146
msgstr ""
10147
10148
#: serverguide/C/remote-administration.xml:247(command)
10149
msgid "sudo apt-get install ebox"
10150
msgstr ""
10151
10152
#: serverguide/C/remote-administration.xml:250(para)
10153
msgid ""
10154
"During the installation you will be asked to supply a password for the ebox "
10155
"user. After installing eBox the web interface can be accessed from: "
10156
"<emphasis>https://yourserver/ebox</emphasis>."
10157
msgstr ""
10158
10159
#: serverguide/C/remote-administration.xml:259(para)
10160
msgid ""
10161
"An important thing to remember when using <application>eBox</application> is "
10162
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10163
"button that implements the new configuration. After clicking the Change "
10164
"button most, but not all, modules will then need to be "
10165
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10166
"<quote>Save changes</quote> link in the top right hand corner."
10167
msgstr ""
10168
10169
#: serverguide/C/remote-administration.xml:267(para)
10170
msgid ""
10171
"Once you make a change that requires a Save, the link will change from green "
10172
"to red."
10173
msgstr ""
10174
10175
#: serverguide/C/remote-administration.xml:273(title)
10176
msgid "eBox Modules"
10177
msgstr ""
10178
10179
#: serverguide/C/remote-administration.xml:274(para)
10180
msgid ""
10181
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10182
"new module is installed it will not be automatically enabled."
10183
msgstr ""
10184
10185
#: serverguide/C/remote-administration.xml:278(para)
10186
msgid ""
10187
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10188
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10189
"which modules you would like to enable and click the <quote>Save</quote> "
10190
"link."
10191
msgstr ""
10192
10193
#: serverguide/C/remote-administration.xml:284(title)
10194
msgid "Default Modules"
10195
msgstr ""
10196
10197
#: serverguide/C/remote-administration.xml:285(para)
10198
msgid ""
10199
"This section provides a quick summary of the default "
10200
"<application>eBox</application> modules."
10201
msgstr ""
10202
10203
#: serverguide/C/remote-administration.xml:291(para)
10204
msgid ""
10205
"<emphasis>System:</emphasis> contains options allowing configuration of "
10206
"general eBox items."
10207
msgstr ""
10208
10209
#: serverguide/C/remote-administration.xml:297(para)
10210
msgid ""
10211
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10212
"and contains a change password form."
10213
msgstr ""
10214
10215
#: serverguide/C/remote-administration.xml:303(para)
10216
msgid ""
10217
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10218
"about disk usage."
10219
msgstr ""
10220
10221
#: serverguide/C/remote-administration.xml:309(para)
10222
msgid ""
10223
"<emphasis>Backup:</emphasis> is used to backup "
10224
"<application>eBox</application> configuration information, and the "
10225
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10226
"information not included in the <emphasis>Configuration</emphasis> option "
10227
"such as log files."
10228
msgstr ""
10229
10230
#: serverguide/C/remote-administration.xml:317(para)
10231
msgid ""
10232
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10233
msgstr ""
10234
10235
#: serverguide/C/remote-administration.xml:322(para)
10236
msgid ""
10237
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10238
"when reporting bugs to the eBox developers."
10239
msgstr ""
10240
10241
#: serverguide/C/remote-administration.xml:330(para)
10242
msgid ""
10243
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10244
"queried depending on the purge time configured."
10245
msgstr ""
10246
10247
#: serverguide/C/remote-administration.xml:336(para)
10248
msgid ""
10249
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10250
"through rss, jabber, and log file."
10251
msgstr ""
10252
10253
#: serverguide/C/remote-administration.xml:343(emphasis)
10254
msgid "Available Events:"
10255
msgstr ""
10256
10257
#: serverguide/C/remote-administration.xml:347(para)
10258
msgid ""
10259
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10260
"drops below a configured percentage, 10% by default."
10261
msgstr ""
10262
10263
#: serverguide/C/remote-administration.xml:353(para)
10264
msgid ""
10265
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10266
"has logged something."
10267
msgstr ""
10268
10269
#: serverguide/C/remote-administration.xml:359(para)
10270
msgid ""
10271
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10272
"any issues arise."
10273
msgstr ""
10274
10275
#: serverguide/C/remote-administration.xml:365(para)
10276
msgid ""
10277
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10278
"times in a short time period."
10279
msgstr ""
10280
10281
#: serverguide/C/remote-administration.xml:371(para)
10282
msgid ""
10283
"<emphasis>State:</emphasis> alerts on the state of "
10284
"<application>eBox</application>, either up or down."
10285
msgstr ""
10286
10287
#: serverguide/C/remote-administration.xml:380(emphasis)
10288
msgid "Dispatchers:"
10289
msgstr ""
10290
10291
#: serverguide/C/remote-administration.xml:384(para)
10292
msgid ""
10293
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10294
"<application>eBox</application> log file "
10295
"<filename>/var/log/ebox/ebox.log</filename>."
10296
msgstr ""
10297
10298
#: serverguide/C/remote-administration.xml:391(para)
10299
msgid ""
10300
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10301
"configure it by clicking on the <quote>Configure</quote> icon."
10302
msgstr ""
10303
10304
#: serverguide/C/remote-administration.xml:397(para)
10305
msgid ""
10306
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10307
"subscribe to the link in order to view event alerts."
10308
msgstr ""
10309
10310
#: serverguide/C/remote-administration.xml:410(title)
10311
msgid "Additional Modules"
10312
msgstr ""
10313
10314
#: serverguide/C/remote-administration.xml:411(para)
10315
msgid ""
10316
"Here is a quick description of other available "
10317
"<application>eBox</application> modules:"
10318
msgstr ""
10319
10320
#: serverguide/C/remote-administration.xml:416(para)
10321
msgid ""
10322
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10323
"options through eBox."
10324
msgstr ""
10325
10326
#: serverguide/C/remote-administration.xml:422(para)
10327
msgid ""
10328
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10329
msgstr ""
10330
10331
#: serverguide/C/remote-administration.xml:427(para)
10332
msgid ""
10333
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10334
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10335
msgstr ""
10336
10337
#: serverguide/C/remote-administration.xml:433(para)
10338
msgid ""
10339
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10340
"server."
10341
msgstr ""
10342
10343
#: serverguide/C/remote-administration.xml:438(para)
10344
msgid ""
10345
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10346
"server configuration options."
10347
msgstr ""
10348
10349
#: serverguide/C/remote-administration.xml:444(para)
10350
msgid ""
10351
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10352
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10353
"group of IPs."
10354
msgstr ""
10355
10356
#: serverguide/C/remote-administration.xml:451(para)
10357
msgid ""
10358
"<emphasis>Services:</emphasis> displays configuration information for "
10359
"services that are available to the network."
10360
msgstr ""
10361
10362
#: serverguide/C/remote-administration.xml:457(para)
10363
msgid ""
10364
"<emphasis>Squid:</emphasis> configuration options for the "
10365
"<application>Squid</application> proxy server."
10366
msgstr ""
10367
10368
#: serverguide/C/remote-administration.xml:463(para)
10369
msgid ""
10370
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10371
msgstr ""
10372
10373
#: serverguide/C/remote-administration.xml:468(para)
10374
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10375
msgstr ""
10376
10377
#: serverguide/C/remote-administration.xml:473(para)
10378
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10379
msgstr ""
10380
10381
#: serverguide/C/remote-administration.xml:478(para)
10382
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10383
msgstr ""
10384
10385
#: serverguide/C/remote-administration.xml:483(para)
10386
msgid ""
10387
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10388
"Network application."
10389
msgstr ""
10390
10391
#: serverguide/C/remote-administration.xml:494(para)
10392
msgid ""
10393
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10394
"Wiki</ulink> page has more details."
10395
msgstr ""
10396
10397
#: serverguide/C/remote-administration.xml:499(para)
10398
msgid ""
10399
"For more information also see the <ulink url=\"http://ebox-"
10400
"platform.com/\">eBox Home Page</ulink>."
10401
msgstr ""
10402
10403
#: serverguide/C/package-management.xml:13(title)
10404
msgid "Package Management"
10405
msgstr ""
10406
10407
#: serverguide/C/package-management.xml:14(para)
10408
msgid ""
10409
"Ubuntu features a comprehensive package management system for the "
10410
"installation, upgrade, configuration, and removal of software. In addition "
10411
"to providing access to an organized base of over 24,000 software packages "
10412
"for your Ubuntu computer, the package management facilities also feature "
10413
"dependency resolution capabilities and software update checking."
10414
msgstr ""
10415
10416
#: serverguide/C/package-management.xml:16(para)
10417
msgid ""
10418
"Several tools are available for interacting with Ubuntu's package management "
10419
"system, from simple command-line utilities which may be easily automated by "
10420
"system administrators, to a simple graphical interface which is easy to use "
10421
"by those new to Ubuntu."
10422
msgstr ""
10423
10424
#: serverguide/C/package-management.xml:21(para)
10425
msgid ""
10426
"Ubuntu's package management system is derived from the same system used by "
10427
"the Debian GNU/Linux distribution. The package files contain all of the "
10428
"necessary files, meta-data, and instructions to implement a particular "
10429
"functionality or software application on your Ubuntu computer."
10430
msgstr ""
10431
10432
#: serverguide/C/package-management.xml:24(para)
10433
msgid ""
10434
"Debian package files typically have the extension '.deb', and typically "
10435
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10436
"collections of packages found on various media, such as CD-ROM discs, or "
10437
"online. Packages are normally of the pre-compiled binary format; thus "
10438
"installation is quick and requires no compiling of software."
10439
msgstr ""
10440
10441
#: serverguide/C/package-management.xml:27(para)
10442
msgid ""
10443
"Many complex packages use the concept of <emphasis "
10444
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10445
"packages required by the principal package in order to function properly. "
10446
"For example, the speech synthesis package "
10447
"<application>Festival</application> depends upon the package "
10448
"<application>libasound2</application>, which is a package supplying the "
10449
"<application>ALSA</application> sound library needed for audio playback. In "
10450
"order for <application>Festival</application> to function, it and all of its "
10451
"dependencies must be installed. The software management tools in Ubuntu will "
10452
"do this automatically."
10453
msgstr ""
10454
10455
#: serverguide/C/package-management.xml:32(title)
10456
msgid "dpkg"
10457
msgstr ""
10458
10459
#: serverguide/C/package-management.xml:34(para)
10460
msgid ""
10461
"<application>dpkg</application> is a package manager for "
10462
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10463
"packages, but unlike other package management system's it can not "
10464
"automatically download and install packages and their dependencies. This "
10465
"section covers using <application>dpkg</application> to manage locally "
10466
"installed packages:"
10467
msgstr ""
10468
10469
#: serverguide/C/package-management.xml:43(para)
10470
msgid ""
10471
"To list all packages installed on the system, from a terminal prompt enter:"
10472
msgstr ""
10473
10474
#: serverguide/C/package-management.xml:48(command)
10475
msgid "dpkg -l"
10476
msgstr ""
10477
10478
#: serverguide/C/package-management.xml:54(para)
10479
msgid ""
10480
"Depending on the amount of packages on your system, this can generate a "
10481
"large amount of output. Pipe the output through "
10482
"<application>grep</application> to see if a specific package is installed:"
10483
msgstr ""
10484
10485
#: serverguide/C/package-management.xml:60(command)
10486
msgid "dpkg -l | grep apache2"
10487
msgstr ""
10488
10489
#: serverguide/C/package-management.xml:63(para)
10490
msgid ""
10491
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10492
"package name, or other regular expression."
10493
msgstr ""
10494
10495
#: serverguide/C/package-management.xml:70(para)
10496
msgid ""
10497
"To list the files installed by a package, in this case the "
10498
"<application>ufw</application> package, enter:"
10499
msgstr ""
10500
10501
#: serverguide/C/package-management.xml:75(command)
10502
msgid "dpkg -L ufw"
10503
msgstr ""
10504
10505
#: serverguide/C/package-management.xml:81(para)
10506
msgid ""
10507
"If you are not sure which package installed a file, <application>dpkg -"
10508
"S</application> may be able to tell you. For example:"
10509
msgstr ""
10510
10511
#: serverguide/C/package-management.xml:87(command)
10512
msgid "dpkg -S /etc/host.conf"
10513
msgstr ""
10514
10515
#: serverguide/C/package-management.xml:88(computeroutput)
10516
#, no-wrap
10517
msgid "base-files: /etc/host.conf"
10518
msgstr ""
10519
10520
#: serverguide/C/package-management.xml:91(para)
10521
msgid ""
10522
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10523
"<application>base-files</application> package."
10524
msgstr ""
10525
10526
#: serverguide/C/package-management.xml:96(para)
10527
msgid ""
10528
"Many files are automatically generated during the package install process, "
10529
"and even though they are on the filesystem <command>dpkg -S</command> may "
10530
"not know which package they belong to."
10531
msgstr ""
10532
10533
#: serverguide/C/package-management.xml:105(para)
10534
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10535
msgstr ""
10536
10537
#: serverguide/C/package-management.xml:110(command)
10538
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10539
msgstr ""
10540
10541
#: serverguide/C/package-management.xml:113(para)
10542
msgid ""
10543
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10544
"the local .deb file."
10545
msgstr ""
10546
10547
#: serverguide/C/package-management.xml:120(para)
10548
msgid "Uninstalling a package can be accomplished by:"
10549
msgstr ""
10550
10551
#: serverguide/C/package-management.xml:125(command)
10552
msgid "sudo dpkg -r zip"
10553
msgstr ""
10554
10555
#: serverguide/C/package-management.xml:129(para)
10556
msgid ""
10557
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10558
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10559
"manager that handles dependencies, to ensure that the system is in a "
10560
"consistent state. For example using <command>dpkg -r</command> you can "
10561
"remove the <application>zip</application> package, but any packages that "
10562
"depend on it will still be installed and may no longer function correctly."
10563
msgstr ""
10564
10565
#: serverguide/C/package-management.xml:140(para)
10566
msgid ""
10567
"For more <application>dpkg</application> options see the man page: "
10568
"<command>man dpkg</command>."
10569
msgstr ""
10570
10571
#: serverguide/C/package-management.xml:146(title)
10572
msgid "Apt-Get"
10573
msgstr ""
10574
10575
#: serverguide/C/package-management.xml:147(para)
10576
msgid ""
10577
"The <application>apt-get</application> command is a powerful command-line "
10578
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10579
"(APT) performing such functions as installation of new software packages, "
10580
"upgrade of existing software packages, updating of the package list index, "
10581
"and even upgrading the entire Ubuntu system."
10582
msgstr ""
10583
10584
#: serverguide/C/package-management.xml:150(para)
10585
msgid ""
10586
"Being a simple command-line tool, <application>apt-get</application> has "
10587
"numerous advantages over other package management tools available in Ubuntu "
10588
"for server administrators. Some of these advantages include ease of use over "
10589
"simple terminal connections (SSH) and the ability to be used in system "
10590
"administration scripts, which can in turn be automated by the "
10591
"<application>cron</application> scheduling utility."
10592
msgstr ""
10593
10594
#: serverguide/C/package-management.xml:157(para)
10595
msgid ""
10596
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10597
"packages using the <application>apt-get</application> tool is quite simple. "
10598
"For example, to install the network scanner <emphasis "
10599
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10600
"<command>sudo apt-get install nmap</command>\n"
10601
"</screen>"
10602
msgstr ""
10603
10604
#: serverguide/C/package-management.xml:165(para)
10605
msgid ""
10606
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10607
"packages is also a straightforward and simple process. To remove the nmap "
10608
"package installed in the previous example, type the following: <screen>\n"
10609
"<command>sudo apt-get remove nmap</command>\n"
10610
"</screen>"
10611
msgstr ""
10612
10613
#: serverguide/C/package-management.xml:172(para)
10614
msgid ""
10615
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10616
"multiple packages to be installed or removed, separated by spaces."
10617
msgstr ""
10618
10619
#: serverguide/C/package-management.xml:175(para)
10620
msgid ""
10621
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10622
"remove</command> will remove the package configuration files as well. This "
10623
"may or may not be the desired effect so use with caution."
10624
msgstr ""
10625
10626
#: serverguide/C/package-management.xml:181(para)
10627
msgid ""
10628
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10629
"index is essentially a database of available packages from the repositories "
10630
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10631
"the local package index with the latest changes made in repositories, type "
10632
"the following: <screen>\n"
10633
"<command>sudo apt-get update</command>\n"
10634
"</screen>"
10635
msgstr ""
10636
10637
#: serverguide/C/package-management.xml:189(para)
10638
msgid ""
10639
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10640
"versions of packages currently installed on your computer may become "
10641
"available from the package repositories (for example security updates). To "
10642
"upgrade your system, first update your package index as outlined above, and "
10643
"then type: <screen>\n"
10644
"<command>sudo apt-get upgrade</command>\n"
10645
"</screen>"
10646
msgstr ""
10647
10648
#: serverguide/C/package-management.xml:195(para)
10649
msgid ""
10650
"For information on upgrading to a new Ubuntu release see <xref "
10651
"linkend=\"installing-upgrading\"/>."
10652
msgstr ""
10653
10654
#: serverguide/C/package-management.xml:153(para)
10655
msgid ""
10656
"Some examples of popular uses for the <application>apt-get</application> "
10657
"utility: <placeholder-1/>"
10658
msgstr ""
10659
10660
#: serverguide/C/package-management.xml:201(para)
10661
msgid ""
10662
"Actions of the <application>apt-get</application> command, such as "
10663
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10664
"log file."
10665
msgstr ""
10666
10667
#: serverguide/C/package-management.xml:204(para)
10668
msgid ""
10669
"For further information about the use of <application>APT</application>, "
10670
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10671
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10672
"help</screen>"
10673
msgstr ""
10674
10675
#: serverguide/C/package-management.xml:208(title)
10676
msgid "Aptitude"
10677
msgstr ""
10678
10679
#: serverguide/C/package-management.xml:209(para)
10680
msgid ""
10681
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10682
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10683
"the common package management functions, such as installation, removal, and "
10684
"upgrade, are performed in <application>Aptitude</application> with single-"
10685
"key commands, which are typically lowercase letters."
10686
msgstr ""
10687
10688
#: serverguide/C/package-management.xml:212(para)
10689
msgid ""
10690
"<application>Aptitude</application> is best suited for use in a non-"
10691
"graphical terminal environment to ensure proper functioning of the command "
10692
"keys. You may start <application>Aptitude</application> as a normal user "
10693
"with the following command at a terminal prompt: <screen>\n"
10694
"<command>sudo aptitude</command>\n"
10695
"</screen>"
10696
msgstr ""
10697
10698
#: serverguide/C/package-management.xml:219(para)
10699
msgid ""
10700
"When <application>Aptitude</application> starts, you will see a menu bar at "
10701
"the top of the screen and two panes below the menu bar. The top pane "
10702
"contains package categories, such as <emphasis role=\"italics\">New "
10703
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10704
"Packages</emphasis>. The bottom pane contains information related to the "
10705
"packages and package categories."
10706
msgstr ""
10707
10708
#: serverguide/C/package-management.xml:222(para)
10709
msgid ""
10710
"Using <application>Aptitude</application> for package management is "
10711
"relatively straightforward, and the user interface makes common tasks simple "
10712
"to perform. The following are examples of common package management "
10713
"functions as performed in <application>Aptitude</application>:"
10714
msgstr ""
10715
10716
#: serverguide/C/package-management.xml:226(para)
10717
msgid ""
10718
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10719
"locate the package via the Not Installed Packages package category, for "
10720
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10721
"key, and highlight the package you wish to install. After highlighting the "
10722
"package you wish to install, press the <keycap>+</keycap> key, and the "
10723
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10724
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10725
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10726
"again, and you will be prompted to become root to complete the installation. "
10727
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10728
"your user password to become root. Finally, press <keycap>g</keycap> once "
10729
"more and you'll be prompted to download the package. Press "
10730
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10731
"prompt, and downloading and installation of the package will commence."
10732
msgstr ""
10733
10734
#: serverguide/C/package-management.xml:230(para)
10735
msgid ""
10736
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10737
"locate the package via the Installed Packages package category, for example, "
10738
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10739
"highlight the package you wish to remove. After highlighting the package you "
10740
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10741
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10742
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10743
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10744
"prompted to become root to complete the installation. Press "
10745
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10746
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10747
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10748
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10749
"the package will commence."
10750
msgstr ""
10751
10752
#: serverguide/C/package-management.xml:234(para)
10753
msgid ""
10754
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10755
"package index, simply press the <keycap>u</keycap> key and you will be "
10756
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10757
"which will result in a Password: prompt. Enter your user password to become "
10758
"root. Updating of the package index will commence. Press "
10759
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10760
"presented to complete the process."
10761
msgstr ""
10762
10763
#: serverguide/C/package-management.xml:238(para)
10764
msgid ""
10765
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10766
"perform the update of the package index as detailed above, and then press "
10767
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10768
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10769
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10770
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10771
"result in a Password: prompt. Enter your user password to become root. "
10772
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10773
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10774
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10775
"will commence."
10776
msgstr ""
10777
10778
#: serverguide/C/package-management.xml:245(para)
10779
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10780
msgstr ""
10781
10782
#: serverguide/C/package-management.xml:250(para)
10783
msgid ""
10784
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10785
"configuration remains on system"
10786
msgstr ""
10787
10788
#: serverguide/C/package-management.xml:254(para)
10789
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10790
msgstr ""
10791
10792
#: serverguide/C/package-management.xml:258(para)
10793
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10794
msgstr ""
10795
10796
#: serverguide/C/package-management.xml:262(para)
10797
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10798
msgstr ""
10799
10800
#: serverguide/C/package-management.xml:266(para)
10801
msgid ""
10802
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10803
"configured"
10804
msgstr ""
10805
10806
#: serverguide/C/package-management.xml:270(para)
10807
msgid ""
10808
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10809
"and requires fix"
10810
msgstr ""
10811
10812
#: serverguide/C/package-management.xml:274(para)
10813
msgid ""
10814
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10815
"requires fix"
10816
msgstr ""
10817
10818
#: serverguide/C/package-management.xml:242(para)
10819
msgid ""
10820
"The first column of information displayed in the package list in the top "
10821
"pane, when actually viewing packages lists the current state of the package, "
10822
"and uses the following key to describe the state of the package: "
10823
"<placeholder-1/>"
10824
msgstr ""
10825
10826
#: serverguide/C/package-management.xml:280(para)
10827
msgid ""
10828
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
10829
"wish to exit. Many other functions are available from the Aptitude menu by "
10830
"pressing the <keycap>F10</keycap> key."
10831
msgstr ""
10832
10833
#: serverguide/C/package-management.xml:285(title)
10834
msgid "Automatic Updates"
10835
msgstr ""
10836
10837
#: serverguide/C/package-management.xml:287(para)
10838
msgid ""
10839
"The <application>unattended-upgrades</application> package can be used to "
10840
"automatically install updated packages, and can be configured to update all "
10841
"packages or just install security updates. First, install the package by "
10842
"entering the following in a terminal:"
10843
msgstr ""
10844
10845
#: serverguide/C/package-management.xml:293(command)
10846
msgid "sudo apt-get install unattended-upgrades"
10847
msgstr ""
10848
10849
#: serverguide/C/package-management.xml:296(para)
10850
msgid ""
10851
"To configure <application>unattended-upgrades</application>, edit "
10852
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
10853
"the following to fit your needs:"
10854
msgstr ""
10855
10856
#: serverguide/C/package-management.xml:301(programlisting)
10857
#, no-wrap
10858
msgid ""
10859
"\n"
10860
"Unattended-Upgrade::Allowed-Origins {\n"
10861
" \"Ubuntu lucid-security\";\n"
10862
"// \"Ubuntu lucid-updates\";\n"
10863
"};\n"
10864
msgstr ""
10865
10866
#: serverguide/C/package-management.xml:308(para)
10867
msgid ""
10868
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
10869
"will not be automatically updated. To blacklist a package, add it to the "
10870
"list:"
10871
msgstr ""
10872
10873
#: serverguide/C/package-management.xml:313(programlisting)
10874
#, no-wrap
10875
msgid ""
10876
"\n"
10877
"Unattended-Upgrade::Package-Blacklist {\n"
10878
"// \"vim\";\n"
10879
"// \"libc6\";\n"
10880
"// \"libc6-dev\";\n"
10881
"// \"libc6-i686\";\n"
10882
"};\n"
10883
msgstr ""
10884
10885
#: serverguide/C/package-management.xml:323(para)
10886
msgid ""
10887
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
10888
"whatever follows \"//\" will not be evaluated."
10889
msgstr ""
10890
10891
#: serverguide/C/package-management.xml:328(para)
10892
msgid ""
10893
"To enable automatic updates, edit "
10894
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
10895
"<application>apt</application> configuration options:"
10896
msgstr ""
10897
10898
#: serverguide/C/package-management.xml:332(programlisting)
10899
#, no-wrap
10900
msgid ""
10901
"\n"
10902
"APT::Periodic::Update-Package-Lists \"1\";\n"
10903
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
10904
"APT::Periodic::AutocleanInterval \"7\";\n"
10905
"APT::Periodic::Unattended-Upgrade \"1\";\n"
10906
msgstr ""
10907
10908
#: serverguide/C/package-management.xml:339(para)
10909
msgid ""
10910
"The above configuration updates the package list, downloads, and installs "
10911
"available upgrades every day. The local download archive is cleaned every "
10912
"week."
10913
msgstr ""
10914
10915
#: serverguide/C/package-management.xml:345(para)
10916
msgid ""
10917
"You can read more about <application>apt</application> Periodic "
10918
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
10919
"header."
10920
msgstr ""
10921
10922
#: serverguide/C/package-management.xml:350(para)
10923
msgid ""
10924
"The results of <application>unattended-upgrades</application> will be logged "
10925
"to <filename>/var/log/unattended-upgrades</filename>."
10926
msgstr ""
10927
10928
#: serverguide/C/package-management.xml:355(title)
10929
msgid "Notifications"
10930
msgstr ""
10931
10932
#: serverguide/C/package-management.xml:357(para)
10933
msgid ""
10934
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
10935
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
10936
"<application>unattended-upgrades</application> to email an administrator "
10937
"detailing any packages that need upgrading or have problems."
10938
msgstr ""
10939
10940
#: serverguide/C/package-management.xml:362(para)
10941
msgid ""
10942
"Another useful package is <application>apticron</application>. "
10943
"<application>apticron</application> will configure a "
10944
"<application>cron</application> job to email an administrator information "
10945
"about any packages on the system that have updates available, as well as a "
10946
"summary of changes in each package."
10947
msgstr ""
10948
10949
#: serverguide/C/package-management.xml:368(para)
10950
msgid ""
10951
"To install the <application>apticron</application> package, in a terminal "
10952
"enter:"
10953
msgstr ""
10954
10955
#: serverguide/C/package-management.xml:373(command)
10956
msgid "sudo apt-get install apticron"
10957
msgstr ""
10958
10959
#: serverguide/C/package-management.xml:376(para)
10960
msgid ""
10961
"Once the package is installed edit "
10962
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
10963
"and other options:"
10964
msgstr ""
10965
10966
#: serverguide/C/package-management.xml:380(programlisting)
10967
#, no-wrap
10968
msgid ""
10969
"\n"
10970
"EMAIL=\"root@example.com\"\n"
10971
msgstr ""
10972
10973
#: serverguide/C/package-management.xml:389(para)
10974
msgid ""
10975
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
10976
"system repositories is stored in the /etc/apt/sources.list configuration "
10977
"file. An example of this file is referenced here, along with information on "
10978
"adding or removing repository references from the file."
10979
msgstr ""
10980
10981
#: serverguide/C/package-management.xml:395(para)
10982
msgid ""
10983
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
10984
"typical <filename>/etc/apt/sources.list</filename> file."
10985
msgstr ""
10986
10987
#: serverguide/C/package-management.xml:399(para)
10988
msgid ""
10989
"You may edit the file to enable repositories or disable them. For example, "
10990
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
10991
"operations occur, simply comment out the appropriate line for the CD-ROM, "
10992
"which appears at the top of the file:"
10993
msgstr ""
10994
10995
#: serverguide/C/package-management.xml:404(screen)
10996
#, no-wrap
10997
msgid ""
10998
"\n"
10999
"# no more prompting for CD-ROM please\n"
11000
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
11001
"main restricted\n"
11002
msgstr ""
11003
11004
#: serverguide/C/package-management.xml:410(title)
11005
msgid "Extra Repositories"
11006
msgstr ""
11007
11008
#: serverguide/C/package-management.xml:411(para)
11009
msgid ""
11010
"In addition to the officially supported package repositories available for "
11011
"Ubuntu, there exist additional community-maintained repositories which add "
11012
"thousands more potential packages for installation. Two of the most popular "
11013
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
11014
"repositories. These repositories are not officially supported by Ubuntu, but "
11015
"because they are maintained by the community they generally provide packages "
11016
"which are safe for use with your Ubuntu computer."
11017
msgstr ""
11018
11019
#: serverguide/C/package-management.xml:414(para)
11020
msgid ""
11021
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
11022
"licensing issues that prevent them from being distributed with a free "
11023
"operating system, and they may be illegal in your locality."
11024
msgstr ""
11025
11026
#: serverguide/C/package-management.xml:416(para)
11027
msgid ""
11028
"Be advised that neither the <emphasis>Universe</emphasis> or "
11029
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
11030
"packages. In particular, there may not be security updates for these "
11031
"packages."
11032
msgstr ""
11033
11034
#: serverguide/C/package-management.xml:420(para)
11035
msgid ""
11036
"Many other package sources are available, sometimes even offering only one "
11037
"package, as in the case of package sources provided by the developer of a "
11038
"single application. You should always be very careful and cautious when "
11039
"using non-standard package sources, however. Research the source and "
11040
"packages carefully before performing any installation, as some package "
11041
"sources and their packages could render your system unstable or non-"
11042
"functional in some respects."
11043
msgstr ""
11044
11045
#: serverguide/C/package-management.xml:423(para)
11046
msgid ""
11047
"By default, the <emphasis>Universe</emphasis> and "
11048
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
11049
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
11050
"comment the following lines:"
11051
msgstr ""
11052
11053
#: serverguide/C/package-management.xml:430(programlisting)
11054
#, no-wrap
11055
msgid ""
11056
"\n"
11057
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11058
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11059
"\n"
11060
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11061
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11062
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11063
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11064
"\n"
11065
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11066
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11067
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11068
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11069
"\n"
11070
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
11071
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
11072
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11073
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11074
msgstr ""
11075
11076
#: serverguide/C/package-management.xml:456(para)
11077
msgid ""
11078
"Most of the material covered in this chapter is available in "
11079
"<application>man</application> pages, many of which are available online."
11080
msgstr ""
11081
11082
#: serverguide/C/package-management.xml:463(para)
11083
msgid ""
11084
"The <ulink "
11085
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
11086
"re</ulink> Ubuntu wiki page has more information."
11087
msgstr ""
11088
11089
#: serverguide/C/package-management.xml:468(para)
11090
msgid ""
11091
"For more <application>dpkg</application> details see the <ulink "
11092
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
11093
"man page</ulink>."
11094
msgstr ""
11095
11096
#: serverguide/C/package-management.xml:474(para)
11097
msgid ""
11098
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
11099
"HOWTO</ulink> and <ulink "
11100
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
11101
"get man page</ulink> contain useful information regarding <application>apt-"
11102
"get</application> usage."
11103
msgstr ""
11104
11105
#: serverguide/C/package-management.xml:481(para)
11106
msgid ""
11107
"See the <ulink "
11108
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
11109
"de man page</ulink> for more <application>aptitude</application> options."
11110
msgstr ""
11111
11112
#: serverguide/C/package-management.xml:487(para)
11113
msgid ""
11114
"The <ulink "
11115
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
11116
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
11117
"adding repositories."
11118
msgstr ""
11119
11120
#: serverguide/C/other-apps.xml:13(title)
11121
msgid "Other Useful Applications"
11122
msgstr ""
11123
11124
#: serverguide/C/other-apps.xml:15(para)
11125
msgid ""
11126
"There are many very useful applications developed by the Ubuntu Server Team, "
11127
"and others that are well integrated with Ubuntu Server Edition, that might "
11128
"not be well known. This chapter will showcase some useful applications that "
11129
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11130
"easier."
11131
msgstr ""
11132
11133
#: serverguide/C/other-apps.xml:23(title)
11134
msgid "pam_motd"
11135
msgstr ""
11136
11137
#: serverguide/C/other-apps.xml:25(para)
11138
msgid ""
11139
"When logging into an Ubuntu server you may have noticed the informative "
11140
"Message Of The Day (MOTD). This information is obtained and displayed using "
11141
"a couple of packages:"
11142
msgstr ""
11143
11144
#: serverguide/C/other-apps.xml:32(para)
11145
msgid ""
11146
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11147
"<application>landscape-client</application>, which can be used to manage "
11148
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11149
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11150
"utility which is used to gather the information displayed in the MOTD."
11151
msgstr ""
11152
11153
#: serverguide/C/other-apps.xml:40(para)
11154
msgid ""
11155
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11156
"the MOTD via <application>pam_motd</application> module."
11157
msgstr ""
11158
11159
#: serverguide/C/other-apps.xml:46(para)
11160
msgid ""
11161
"<application>pam_motd</application> executes the scripts in "
11162
"<filename>/etc/update-motd.d</filename> in order based on the number "
11163
"prepended to the script. The output of the scripts is written to "
11164
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11165
"concatenated with <filename>/etc/motd.tail</filename>."
11166
msgstr ""
11167
11168
#: serverguide/C/other-apps.xml:52(para)
11169
msgid ""
11170
"You can add your own dynamic information to the MOTD. For example, to add "
11171
"local weather information:"
11172
msgstr ""
11173
11174
#: serverguide/C/other-apps.xml:58(para)
11175
msgid "First, install the <application>weather-util</application> package:"
11176
msgstr ""
11177
11178
#: serverguide/C/other-apps.xml:63(command)
11179
msgid "sudo apt-get install weather-util"
11180
msgstr ""
11181
11182
#: serverguide/C/other-apps.xml:68(para)
11183
msgid ""
11184
"The <application>weather</application> utility uses METAR data from the "
11185
"National Oceanic and Atmospheric Administration and forecasts from the "
11186
"National Weather Service. In order to find local information you will need "
11187
"the 4-character ICAO location indicator. This can be determined by browsing "
11188
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11189
"Weather Service</ulink> site."
11190
msgstr ""
11191
11192
#: serverguide/C/other-apps.xml:75(para)
11193
msgid ""
11194
"Although the National Weather Service is a United States government agency "
11195
"there are weather stations available world wide. However, local weather "
11196
"information for all locations outside the U.S. may not be available."
11197
msgstr ""
11198
11199
#: serverguide/C/other-apps.xml:81(para)
11200
msgid ""
11201
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11202
"script to use <application>weather</application> with your local ICAO "
11203
"indicator:"
11204
msgstr ""
11205
11206
#: serverguide/C/other-apps.xml:86(programlisting)
11207
#, no-wrap
11208
msgid ""
11209
"\n"
11210
"#!/bin/sh\n"
11211
"#\n"
11212
"#\n"
11213
"# Prints the local weather information for the MOTD.\n"
11214
"#\n"
11215
"#\n"
11216
"\n"
11217
"# Replace KINT with your local weather station.\n"
11218
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11219
"\n"
11220
"echo\n"
11221
"weather -i KINT\n"
11222
"echo\n"
11223
"\n"
11224
msgstr ""
11225
11226
#: serverguide/C/other-apps.xml:104(para)
11227
msgid "Make the script executable:"
11228
msgstr ""
11229
11230
#: serverguide/C/other-apps.xml:109(command)
11231
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11232
msgstr ""
11233
11234
#: serverguide/C/other-apps.xml:113(para)
11235
msgid ""
11236
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11237
"weather</filename>:"
11238
msgstr ""
11239
11240
#: serverguide/C/other-apps.xml:118(command)
11241
msgid ""
11242
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11243
msgstr ""
11244
11245
#: serverguide/C/other-apps.xml:122(para)
11246
msgid "Finally, exit the server and re-login to view the new MOTD."
11247
msgstr ""
11248
11249
#: serverguide/C/other-apps.xml:128(para)
11250
msgid ""
11251
"You should now be greeted with some useful information, and some information "
11252
"about the local weather that may not be quite so useful. Hopefully the "
11253
"<application>local-weather</application> example demonstrates the "
11254
"flexibility of <application>pam_motd</application>."
11255
msgstr ""
11256
11257
#: serverguide/C/other-apps.xml:136(title)
11258
msgid "etckeeper"
11259
msgstr ""
11260
11261
#: serverguide/C/other-apps.xml:138(para)
11262
msgid ""
11263
"<application>etckeeper</application> allows the contents of <filename "
11264
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11265
"System (VCS) repository. It hooks into <application>apt</application> to "
11266
"automatically commit changes to <filename>/etc</filename> when packages are "
11267
"installed or upgraded. Placing <filename>/etc</filename> under version "
11268
"control is considered an industry best practice, and the goal of "
11269
"<application>etckeeper</application> is to make this process as painless as "
11270
"possible."
11271
msgstr ""
11272
11273
#: serverguide/C/other-apps.xml:146(para)
11274
msgid ""
11275
"Install <application>etckeeper</application> by entering the following in a "
11276
"terminal:"
11277
msgstr ""
11278
11279
#: serverguide/C/other-apps.xml:151(command)
11280
msgid "sudo apt-get install etckeeper"
11281
msgstr ""
11282
11283
#: serverguide/C/other-apps.xml:154(para)
11284
msgid ""
11285
"The main configuration file, "
11286
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11287
"main option is which VCS to use. By default "
11288
"<application>etckeeper</application> is configured to use "
11289
"<application>bzr</application> for version control. The repository is "
11290
"automatically initialized (and committed for the first time) during package "
11291
"installation. It is possible to undo this by entering the following command:"
11292
msgstr ""
11293
11294
#: serverguide/C/other-apps.xml:164(command)
11295
msgid "sudo etckeeper uninit"
11296
msgstr ""
11297
11298
#: serverguide/C/other-apps.xml:167(para)
11299
msgid ""
11300
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11301
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11302
"It will also automatically commit changes before and after package "
11303
"installation. For a more precise tracking of changes, it is recommended to "
11304
"commit your changes manually, together with a commit message, using:"
11305
msgstr ""
11306
11307
#: serverguide/C/other-apps.xml:176(command)
11308
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11309
msgstr ""
11310
11311
#: serverguide/C/other-apps.xml:179(para)
11312
msgid ""
11313
"Using the VCS commands you can view log information about files in "
11314
"<filename>/etc</filename>:"
11315
msgstr ""
11316
11317
#: serverguide/C/other-apps.xml:184(command)
11318
msgid "sudo bzr log /etc/passwd"
11319
msgstr ""
11320
11321
#: serverguide/C/other-apps.xml:187(para)
11322
msgid ""
11323
"To demonstrate the integration with the package management system, install "
11324
"<application>postfix</application>:"
11325
msgstr ""
11326
11327
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11328
msgid "sudo apt-get install postfix"
11329
msgstr ""
11330
11331
#: serverguide/C/other-apps.xml:195(para)
11332
msgid ""
11333
"When the installation is finished, all the "
11334
"<application>postfix</application> configuration files should be committed "
11335
"to the repository:"
11336
msgstr ""
11337
11338
#: serverguide/C/other-apps.xml:201(computeroutput)
11339
#, no-wrap
11340
msgid ""
11341
"Committing to: /etc/\n"
11342
"added aliases.db\n"
11343
"modified group\n"
11344
"modified group-\n"
11345
"modified gshadow\n"
11346
"modified gshadow-\n"
11347
"modified passwd\n"
11348
"modified passwd-\n"
11349
"added postfix\n"
11350
"added resolvconf\n"
11351
"added rsyslog.d\n"
11352
"modified shadow\n"
11353
"modified shadow-\n"
11354
"added init.d/postfix\n"
11355
"added network/if-down.d/postfix\n"
11356
"added network/if-up.d/postfix\n"
11357
"added postfix/dynamicmaps.cf\n"
11358
"added postfix/main.cf\n"
11359
"added postfix/master.cf\n"
11360
"added postfix/post-install\n"
11361
"added postfix/postfix-files\n"
11362
"added postfix/postfix-script\n"
11363
"added postfix/sasl\n"
11364
"added ppp/ip-down.d\n"
11365
"added ppp/ip-down.d/postfix\n"
11366
"added ppp/ip-up.d/postfix\n"
11367
"added rc0.d/K20postfix\n"
11368
"added rc1.d/K20postfix\n"
11369
"added rc2.d/S20postfix\n"
11370
"added rc3.d/S20postfix\n"
11371
"added rc4.d/S20postfix\n"
11372
"added rc5.d/S20postfix\n"
11373
"added rc6.d/K20postfix\n"
11374
"added resolvconf/update-libc.d\n"
11375
"added resolvconf/update-libc.d/postfix\n"
11376
"added rsyslog.d/postfix.conf\n"
11377
"added ufw/applications.d/postfix\n"
11378
"Committed revision 2."
11379
msgstr ""
11380
11381
#: serverguide/C/other-apps.xml:241(para)
11382
msgid ""
11383
"For an example of how <application>etckeeper</application> tracks manual "
11384
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11385
"<application>bzr</application> you can see which files have been modified:"
11386
msgstr ""
11387
11388
#: serverguide/C/other-apps.xml:247(command)
11389
msgid "sudo bzr status /etc/"
11390
msgstr ""
11391
11392
#: serverguide/C/other-apps.xml:248(computeroutput)
11393
#, no-wrap
11394
msgid ""
11395
"modified:\n"
11396
" hosts"
11397
msgstr ""
11398
11399
#: serverguide/C/other-apps.xml:252(para)
11400
msgid "Now commit the changes:"
11401
msgstr ""
11402
11403
#: serverguide/C/other-apps.xml:257(command)
11404
msgid "sudo etckeeper commit \"new host\""
11405
msgstr ""
11406
11407
#: serverguide/C/other-apps.xml:260(para)
11408
msgid ""
11409
"For more information on <application>bzr</application> see <xref "
11410
"linkend=\"bazaar\"/>."
11411
msgstr ""
11412
11413
#: serverguide/C/other-apps.xml:266(title)
11414
msgid "Byobu"
11415
msgstr ""
11416
11417
#: serverguide/C/other-apps.xml:268(para)
11418
msgid ""
11419
"One of the most useful applications for any system administrator is "
11420
"<application>screen</application>. It allows the execution of multiple "
11421
"shells in one terminal. To make some of the advanced "
11422
"<application>screen</application> features more user friendly, and provide "
11423
"some useful information about the system, the "
11424
"<application>byobu</application> package was created."
11425
msgstr ""
11426
11427
#: serverguide/C/other-apps.xml:275(para)
11428
msgid ""
11429
"When executing <application>byobu</application> pressing the "
11430
"<emphasis>F9</emphasis> key will bring up the "
11431
"<application>Configuration</application> menu. This menu will allow you to:"
11432
msgstr ""
11433
11434
#: serverguide/C/other-apps.xml:281(para)
11435
msgid "View the Help menu"
11436
msgstr ""
11437
11438
#: serverguide/C/other-apps.xml:282(para)
11439
msgid "Change Byobu's background color"
11440
msgstr ""
11441
11442
#: serverguide/C/other-apps.xml:283(para)
11443
msgid "Change Byobu's foreground color"
11444
msgstr ""
11445
11446
#: serverguide/C/other-apps.xml:284(para)
11447
msgid "Toggle status notifications"
11448
msgstr ""
11449
11450
#: serverguide/C/other-apps.xml:285(para)
11451
msgid "Change the key binding set"
11452
msgstr ""
11453
11454
#: serverguide/C/other-apps.xml:286(para)
11455
msgid "Change the escape sequence"
11456
msgstr ""
11457
11458
#: serverguide/C/other-apps.xml:287(para)
11459
msgid "Create new windows"
11460
msgstr ""
11461
11462
#: serverguide/C/other-apps.xml:288(para)
11463
msgid "Manage the default windows"
11464
msgstr ""
11465
11466
#: serverguide/C/other-apps.xml:289(para)
11467
msgid "Byobu currently does not launch at login (toggle on)"
11468
msgstr ""
11469
11470
#: serverguide/C/other-apps.xml:292(para)
11471
msgid ""
11472
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11473
"sequence, new window, change window, etc. There are two key binding sets to "
11474
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11475
"keys</emphasis>. If you wish to use the original key bindings choose the "
11476
"<emphasis>none</emphasis> set."
11477
msgstr ""
11478
11479
#: serverguide/C/other-apps.xml:298(para)
11480
msgid ""
11481
"<application>byobu</application> provides a menu which displays the Ubuntu "
11482
"release, processor information, memory information, and the time and date. "
11483
"The effect is similar to a desktop menu."
11484
msgstr ""
11485
11486
#: serverguide/C/other-apps.xml:303(para)
11487
msgid ""
11488
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11489
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11490
"executed any time a terminal is opened. Changes made to "
11491
"<application>byobu</application> are on a per user basis, and will not "
11492
"affect other users on the system."
11493
msgstr ""
11494
11495
#: serverguide/C/other-apps.xml:309(para)
11496
msgid ""
11497
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11498
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11499
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11500
"commands. Here is a quick list of movement commands:"
11501
msgstr ""
11502
11503
#: serverguide/C/other-apps.xml:316(para)
11504
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11505
msgstr ""
11506
11507
#: serverguide/C/other-apps.xml:317(para)
11508
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11509
msgstr ""
11510
11511
#: serverguide/C/other-apps.xml:318(para)
11512
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11513
msgstr ""
11514
11515
#: serverguide/C/other-apps.xml:319(para)
11516
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11517
msgstr ""
11518
11519
#: serverguide/C/other-apps.xml:320(para)
11520
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11521
msgstr ""
11522
11523
#: serverguide/C/other-apps.xml:321(para)
11524
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11525
msgstr ""
11526
11527
#: serverguide/C/other-apps.xml:322(para)
11528
msgid ""
11529
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11530
"the buffer)"
11531
msgstr ""
11532
11533
#: serverguide/C/other-apps.xml:323(para)
11534
msgid "<emphasis>/</emphasis> - Search forward"
11535
msgstr ""
11536
11537
#: serverguide/C/other-apps.xml:324(para)
11538
msgid "<emphasis>?</emphasis> - Search backward"
11539
msgstr ""
11540
11541
#: serverguide/C/other-apps.xml:325(para)
11542
msgid ""
11543
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11544
msgstr ""
11545
11546
#: serverguide/C/other-apps.xml:334(para)
11547
msgid ""
11548
"See the <ulink "
11549
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11550
"update-motd man page</ulink> for more options available to "
11551
"<application>update-motd</application>."
11552
msgstr ""
11553
11554
#: serverguide/C/other-apps.xml:340(para)
11555
msgid ""
11556
"The Debian Package of the Day <ulink "
11557
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11558
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11559
"details about using the <application>weather</application>utility."
11560
msgstr ""
11561
11562
#: serverguide/C/other-apps.xml:347(para)
11563
msgid ""
11564
"See the <ulink "
11565
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11566
"more details on using <application>etckeeper</application>."
11567
msgstr ""
11568
11569
#: serverguide/C/other-apps.xml:353(para)
11570
msgid ""
11571
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11572
"Ubuntu Wiki</ulink> page."
11573
msgstr ""
11574
11575
#: serverguide/C/other-apps.xml:358(para)
11576
msgid ""
11577
"For the latest news and information about <application>bzr</application> see "
11578
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11579
msgstr ""
11580
11581
#: serverguide/C/other-apps.xml:363(para)
11582
msgid ""
11583
"For more information on <application>screen</application> see the <ulink "
11584
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11585
msgstr ""
11586
11587
#: serverguide/C/other-apps.xml:368(para)
11588
msgid ""
11589
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11590
"screen</ulink> page."
11591
msgstr ""
11592
11593
#: serverguide/C/other-apps.xml:373(para)
11594
msgid ""
11595
"Also, see the <application>byobu</application><ulink "
11596
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11597
"information."
11598
msgstr ""
11599
11600
#: serverguide/C/network-config.xml:14(para)
11601
msgid ""
11602
"Networks consist of two or more devices, such as computer systems, printers, "
11603
"and related equipment which are connected by either physical cabling or "
11604
"wireless links for the purpose of sharing and distributing information among "
11605
"the connected devices."
11606
msgstr ""
11607
11608
#: serverguide/C/network-config.xml:20(para)
11609
msgid ""
11610
"This section provides general and specific information pertaining to "
11611
"networking, including an overview of network concepts and detailed "
11612
"discussion of popular network protocols."
11613
msgstr ""
11614
11615
#: serverguide/C/network-config.xml:27(title)
11616
msgid "Network Configuration"
11617
msgstr ""
11618
11619
#: serverguide/C/network-config.xml:28(para)
11620
msgid ""
11621
"Ubuntu ships with a number of graphical utilities to configure your network "
11622
"devices. This document is geared toward server administrators and will focus "
11623
"on managing your network on the command line."
11624
msgstr ""
11625
11626
#: serverguide/C/network-config.xml:35(title)
11627
msgid "Ethernet Interfaces"
11628
msgstr ""
11629
11630
#: serverguide/C/network-config.xml:36(para)
11631
msgid ""
11632
"Ethernet interfaces are identified by the system using the naming convention "
11633
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11634
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11635
"interface is typically identified as <emphasis "
11636
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11637
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11638
"order."
11639
msgstr ""
11640
11641
#: serverguide/C/network-config.xml:46(title)
11642
msgid "Identify Ethernet Interfaces"
11643
msgstr ""
11644
11645
#: serverguide/C/network-config.xml:47(para)
11646
msgid ""
11647
"To quickly identify all available Ethernet interfaces, you can use the "
11648
"<application>ifconfig</application> command as shown below."
11649
msgstr ""
11650
11651
#: serverguide/C/network-config.xml:52(userinput)
11652
#, no-wrap
11653
msgid "ifconfig -a | grep eth"
11654
msgstr ""
11655
11656
#: serverguide/C/network-config.xml:51(screen)
11657
#, no-wrap
11658
msgid ""
11659
"\n"
11660
"<placeholder-1/>\n"
11661
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11662
msgstr ""
11663
11664
#: serverguide/C/network-config.xml:55(para)
11665
msgid ""
11666
"Another application that can help identify all network interfaces available "
11667
"to your system is the <application>lshw</application> command. In the "
11668
"example below, <application>lshw</application> shows a single Ethernet "
11669
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11670
"along with bus information, driver details and all supported capabilities."
11671
msgstr ""
11672
11673
#: serverguide/C/network-config.xml:62(userinput)
11674
#, no-wrap
11675
msgid "sudo lshw -class network"
11676
msgstr ""
11677
11678
#: serverguide/C/network-config.xml:61(screen)
11679
#, no-wrap
11680
msgid ""
11681
"\n"
11682
"<placeholder-1/>\n"
11683
" *-network\n"
11684
" description: Ethernet interface\n"
11685
" product: BCM4401-B0 100Base-TX\n"
11686
" vendor: Broadcom Corporation\n"
11687
" physical id: 0\n"
11688
" bus info: pci@0000:03:00.0\n"
11689
" logical name: eth0\n"
11690
" version: 02\n"
11691
" serial: 00:15:c5:4a:16:5a\n"
11692
" size: 10MB/s\n"
11693
" capacity: 100MB/s\n"
11694
" width: 32 bits\n"
11695
" clock: 33MHz\n"
11696
" capabilities: (snipped for brevity)\n"
11697
" configuration: (snipped for brevity)\n"
11698
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11699
msgstr ""
11700
11701
#: serverguide/C/network-config.xml:83(title)
11702
msgid "Ethernet Interface Logical Names"
11703
msgstr ""
11704
11705
#: serverguide/C/network-config.xml:84(para)
11706
msgid ""
11707
"Interface logical names are configured in the file "
11708
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11709
"like control which interface receives a particular logical name, find the "
11710
"line matching the interfaces physical MAC address and modify the value of "
11711
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11712
"Reboot the system to commit your changes."
11713
msgstr ""
11714
11715
#: serverguide/C/network-config.xml:92(programlisting)
11716
#, no-wrap
11717
msgid ""
11718
"\n"
11719
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11720
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11721
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11722
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11723
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11724
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11725
msgstr ""
11726
11727
#: serverguide/C/network-config.xml:99(title)
11728
msgid "Ethernet Interface Settings"
11729
msgstr ""
11730
11731
#: serverguide/C/network-config.xml:100(para)
11732
msgid ""
11733
"<application>ethtool</application> is a program that displays and changes "
11734
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11735
"and Wake-on-LAN. It is not installed by default, but is available for "
11736
"installation in the repositories."
11737
msgstr ""
11738
11739
#: serverguide/C/network-config.xml:106(userinput)
11740
#, no-wrap
11741
msgid "sudo apt-get install ethtool"
11742
msgstr ""
11743
11744
#: serverguide/C/network-config.xml:108(para)
11745
msgid ""
11746
"The following is an example of how to view supported features and configured "
11747
"settings of an Ethernet interface."
11748
msgstr ""
11749
11750
#: serverguide/C/network-config.xml:113(userinput)
11751
#, no-wrap
11752
msgid "sudo ethtool eth0"
11753
msgstr ""
11754
11755
#: serverguide/C/network-config.xml:112(screen)
11756
#, no-wrap
11757
msgid ""
11758
"\n"
11759
"<placeholder-1/>\n"
11760
"Settings for eth0:\n"
11761
" Supported ports: [ TP ]\n"
11762
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11763
" 100baseT/Half 100baseT/Full \n"
11764
" 1000baseT/Half 1000baseT/Full \n"
11765
" Supports auto-negotiation: Yes\n"
11766
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11767
" 100baseT/Half 100baseT/Full \n"
11768
" 1000baseT/Half 1000baseT/Full \n"
11769
" Advertised auto-negotiation: Yes\n"
11770
" Speed: 1000Mb/s\n"
11771
" Duplex: Full\n"
11772
" Port: Twisted Pair\n"
11773
" PHYAD: 1\n"
11774
" Transceiver: internal\n"
11775
" Auto-negotiation: on\n"
11776
" Supports Wake-on: g\n"
11777
" Wake-on: d\n"
11778
" Current message level: 0x000000ff (255)\n"
11779
" Link detected: yes\n"
11780
msgstr ""
11781
11782
#: serverguide/C/network-config.xml:135(para)
11783
msgid ""
11784
"Changes made with the <application>ethtool</application> command are "
11785
"temporary and will be lost after a reboot. If you would like to retain "
11786
"settings, simply add the desired <application>ethtool</application> command "
11787
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11788
"configuration file <filename>/etc/network/interfaces</filename>."
11789
msgstr ""
11790
11791
#: serverguide/C/network-config.xml:141(para)
11792
msgid ""
11793
"The following is an example of how the interface identified as <emphasis "
11794
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11795
"speed of 1000Mb/s running in full duplex mode."
11796
msgstr ""
11797
11798
#: serverguide/C/network-config.xml:145(programlisting)
11799
#, no-wrap
11800
msgid ""
11801
"\n"
11802
"auto eth0\n"
11803
"iface eth0 inet static\n"
11804
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11805
msgstr ""
11806
11807
#: serverguide/C/network-config.xml:151(para)
11808
msgid ""
11809
"Although the example above shows the interface configured to use the "
11810
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11811
"other methods as well, such as DHCP. The example is meant to demonstrate "
11812
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11813
"statement in relation to the rest of the interface configuration."
11814
msgstr ""
11815
11816
#: serverguide/C/network-config.xml:163(title)
11817
msgid "IP Addressing"
11818
msgstr ""
11819
11820
#: serverguide/C/network-config.xml:164(para)
11821
msgid ""
11822
"The following section describes the process of configuring your systems IP "
11823
"address and default gateway needed for communicating on a local area network "
11824
"and the Internet."
11825
msgstr ""
11826
11827
#: serverguide/C/network-config.xml:171(title)
11828
msgid "Temporary IP Address Assignment"
11829
msgstr ""
11830
11831
#: serverguide/C/network-config.xml:172(para)
11832
msgid ""
11833
"For temporary network configurations, you can use standard commands such as "
11834
"<application>ip</application>, <application>ifconfig</application> and "
11835
"<application>route</application>, which are also found on most other "
11836
"GNU/Linux operating systems. These commands allow you to configure settings "
11837
"which take effect immediately, however they are not persistent and will be "
11838
"lost after a reboot."
11839
msgstr ""
11840
11841
#: serverguide/C/network-config.xml:180(para)
11842
msgid ""
11843
"To temporarily configure an IP address, you can use the "
11844
"<application>ifconfig</application> command in the following manner. Just "
11845
"modify the IP address and subnet mask to match your network requirements."
11846
msgstr ""
11847
11848
#: serverguide/C/network-config.xml:186(userinput)
11849
#, no-wrap
11850
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
11851
msgstr ""
11852
11853
#: serverguide/C/network-config.xml:188(para)
11854
msgid ""
11855
"To verify the IP address configuration of <application>eth0</application>, "
11856
"you can use the <application>ifconfig</application> command in the following "
11857
"manner."
11858
msgstr ""
11859
11860
#: serverguide/C/network-config.xml:193(userinput)
11861
#, no-wrap
11862
msgid "ifconfig eth0"
11863
msgstr ""
11864
11865
#: serverguide/C/network-config.xml:192(screen)
11866
#, no-wrap
11867
msgid ""
11868
"\n"
11869
"<placeholder-1/>\n"
11870
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
11871
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
11872
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
11873
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
11874
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
11875
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
11876
" collisions:0 txqueuelen:1000 \n"
11877
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
11878
" Interrupt:16 \n"
11879
msgstr ""
11880
11881
#: serverguide/C/network-config.xml:204(para)
11882
msgid ""
11883
"To configure a default gateway, you can use the "
11884
"<application>route</application> command in the following manner. Modify the "
11885
"default gateway address to match your network requirements."
11886
msgstr ""
11887
11888
#: serverguide/C/network-config.xml:210(userinput)
11889
#, no-wrap
11890
msgid "sudo route add default gw 10.0.0.1 eth0"
11891
msgstr ""
11892
11893
#: serverguide/C/network-config.xml:212(para)
11894
msgid ""
11895
"To verify your default gateway configuration, you can use the "
11896
"<application>route</application> command in the following manner."
11897
msgstr ""
11898
11899
#: serverguide/C/network-config.xml:217(userinput)
11900
#, no-wrap
11901
msgid "route -n"
11902
msgstr ""
11903
11904
#: serverguide/C/network-config.xml:216(screen)
11905
#, no-wrap
11906
msgid ""
11907
"\n"
11908
"<placeholder-1/>\n"
11909
"Kernel IP routing table\n"
11910
"Destination Gateway Genmask Flags Metric Ref Use "
11911
"Iface\n"
11912
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
11913
"eth0\n"
11914
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
11915
"eth0\n"
11916
msgstr ""
11917
11918
#: serverguide/C/network-config.xml:223(para)
11919
msgid ""
11920
"If you require DNS for your temporary network configuration, you can add DNS "
11921
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
11922
"example below shows how to enter two DNS servers to "
11923
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
11924
"appropriate for your network. A more lengthy description of DNS client "
11925
"configuration is in a following section."
11926
msgstr ""
11927
11928
#: serverguide/C/network-config.xml:230(programlisting)
11929
#, no-wrap
11930
msgid ""
11931
"\n"
11932
"nameserver 8.8.8.8\n"
11933
"nameserver 8.8.4.4\n"
11934
msgstr ""
11935
11936
#: serverguide/C/network-config.xml:234(para)
11937
msgid ""
11938
"If you no longer need this configuration and wish to purge all IP "
11939
"configuration from an interface, you can use the "
11940
"<application>ip</application> command with the flush option as shown below."
11941
msgstr ""
11942
11943
#: serverguide/C/network-config.xml:240(userinput)
11944
#, no-wrap
11945
msgid "ip addr flush eth0"
11946
msgstr ""
11947
11948
#: serverguide/C/network-config.xml:243(para)
11949
msgid ""
11950
"Flushing the IP configuration using the <application>ip</application> "
11951
"command does not clear the contents of "
11952
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
11953
"entries manually."
11954
msgstr ""
11955
11956
#: serverguide/C/network-config.xml:251(title)
11957
msgid "Dynamic IP Address Assignment (DHCP Client)"
11958
msgstr ""
11959
11960
#: serverguide/C/network-config.xml:252(para)
11961
msgid ""
11962
"To configure your server to use DHCP for dynamic address assignment, add the "
11963
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
11964
"statement for the appropriate interface in the file "
11965
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11966
"are configuring your first Ethernet interface identified as <emphasis "
11967
"role=\"italic\">eth0</emphasis>."
11968
msgstr ""
11969
11970
#: serverguide/C/network-config.xml:259(programlisting)
11971
#, no-wrap
11972
msgid ""
11973
"\n"
11974
"auto eth0\n"
11975
"iface eth0 inet dhcp\n"
11976
msgstr ""
11977
11978
#: serverguide/C/network-config.xml:263(para)
11979
msgid ""
11980
"By adding an interface configuration as shown above, you can manually enable "
11981
"the interface through the <application>ifup</application> command which "
11982
"initiates the DHCP process via <application>dhclient</application>."
11983
msgstr ""
11984
11985
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
11986
#, no-wrap
11987
msgid "sudo ifup eth0"
11988
msgstr ""
11989
11990
#: serverguide/C/network-config.xml:271(para)
11991
msgid ""
11992
"To manually disable the interface, you can use the "
11993
"<application>ifdown</application> command, which in turn will initiate the "
11994
"DHCP release process and shut down the interface."
11995
msgstr ""
11996
11997
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
11998
#, no-wrap
11999
msgid "sudo ifdown eth0"
12000
msgstr ""
12001
12002
#: serverguide/C/network-config.xml:282(title)
12003
msgid "Static IP Address Assignment"
12004
msgstr ""
12005
12006
#: serverguide/C/network-config.xml:283(para)
12007
msgid ""
12008
"To configure your system to use a static IP address assignment, add the "
12009
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
12010
"family statement for the appropriate interface in the file "
12011
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
12012
"are configuring your first Ethernet interface identified as <emphasis "
12013
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
12014
"role=\"italic\">address</emphasis>, <emphasis "
12015
"role=\"italic\">netmask</emphasis>, and <emphasis "
12016
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
12017
"network."
12018
msgstr ""
12019
12020
#: serverguide/C/network-config.xml:292(programlisting)
12021
#, no-wrap
12022
msgid ""
12023
"\n"
12024
"auto eth0\n"
12025
"iface eth0 inet static\n"
12026
"address 10.0.0.100\n"
12027
"netmask 255.255.255.0\n"
12028
"gateway 10.0.0.1\n"
12029
msgstr ""
12030
12031
#: serverguide/C/network-config.xml:299(para)
12032
msgid ""
12033
"By adding an interface configuration as shown above, you can manually enable "
12034
"the interface through the <application>ifup</application> command."
12035
msgstr ""
12036
12037
#: serverguide/C/network-config.xml:306(para)
12038
msgid ""
12039
"To manually disable the interface, you can use the "
12040
"<application>ifdown</application> command."
12041
msgstr ""
12042
12043
#: serverguide/C/network-config.xml:316(title)
12044
msgid "Loopback Interface"
12045
msgstr ""
12046
12047
#: serverguide/C/network-config.xml:317(para)
12048
msgid ""
12049
"The loopback interface is identified by the system as <emphasis "
12050
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
12051
"can be viewed using the ifconfig command."
12052
msgstr ""
12053
12054
#: serverguide/C/network-config.xml:322(userinput)
12055
#, no-wrap
12056
msgid "ifconfig lo"
12057
msgstr ""
12058
12059
#: serverguide/C/network-config.xml:321(screen)
12060
#, no-wrap
12061
msgid ""
12062
"\n"
12063
"<placeholder-1/>\n"
12064
"lo Link encap:Local Loopback \n"
12065
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
12066
" inet6 addr: ::1/128 Scope:Host\n"
12067
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
12068
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
12069
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
12070
" collisions:0 txqueuelen:0 \n"
12071
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
12072
msgstr ""
12073
12074
#: serverguide/C/network-config.xml:332(para)
12075
msgid ""
12076
"By default, there should be two lines in "
12077
"<filename>/etc/network/interfaces</filename> responsible for automatically "
12078
"configuring your loopback interface. It is recommended that you keep the "
12079
"default settings unless you have a specific purpose for changing them. An "
12080
"example of the two default lines are shown below."
12081
msgstr ""
12082
12083
#: serverguide/C/network-config.xml:338(programlisting)
12084
#, no-wrap
12085
msgid ""
12086
"\n"
12087
"auto lo\n"
12088
"iface lo inet loopback\n"
12089
msgstr ""
12090
12091
#: serverguide/C/network-config.xml:347(title)
12092
msgid "Name Resolution"
12093
msgstr ""
12094
12095
#: serverguide/C/network-config.xml:348(para)
12096
msgid ""
12097
"Name resolution as it relates to IP networking is the process of mapping IP "
12098
"addresses to hostnames, making it easier to identify resources on a network. "
12099
"The following section will explain how to properly configure your system for "
12100
"name resolution using DNS and static hostname records."
12101
msgstr ""
12102
12103
#: serverguide/C/network-config.xml:356(title)
12104
msgid "DNS Client Configuration"
12105
msgstr ""
12106
12107
#: serverguide/C/network-config.xml:357(para)
12108
msgid ""
12109
"To configure your system to use DNS for name resolution, add the IP "
12110
"addresses of the DNS servers that are appropriate for your network in the "
12111
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
12112
"suffix search-lists to match your network domain names."
12113
msgstr ""
12114
12115
#: serverguide/C/network-config.xml:362(para)
12116
msgid ""
12117
"Below is an example of a typical configuration of "
12118
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
12119
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
12120
msgstr ""
12121
12122
#: serverguide/C/network-config.xml:367(programlisting)
12123
#, no-wrap
12124
msgid ""
12125
"\n"
12126
"search example.com\n"
12127
"nameserver 8.8.8.8\n"
12128
"nameserver 8.8.4.4\n"
12129
msgstr ""
12130
12131
#: serverguide/C/network-config.xml:372(para)
12132
msgid ""
12133
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12134
"multiple domain names so that DNS queries will be appended in the order in "
12135
"which they are entered. For example, your network may have multiple sub-"
12136
"domains to search; a parent domain of <emphasis "
12137
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12138
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12139
"role=\"italic\">dev.example.com</emphasis>."
12140
msgstr ""
12141
12142
#: serverguide/C/network-config.xml:380(para)
12143
msgid ""
12144
"If you have multiple domains you wish to search, your configuration might "
12145
"look like the following."
12146
msgstr ""
12147
12148
#: serverguide/C/network-config.xml:383(programlisting)
12149
#, no-wrap
12150
msgid ""
12151
"\n"
12152
"search example.com sales.example.com dev.example.com\n"
12153
"nameserver 8.8.8.8\n"
12154
"nameserver 8.8.4.4\n"
12155
msgstr ""
12156
12157
#: serverguide/C/network-config.xml:388(para)
12158
msgid ""
12159
"If you try to ping a host with the name of <emphasis "
12160
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12161
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12162
msgstr ""
12163
12164
#: serverguide/C/network-config.xml:394(para)
12165
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12166
msgstr ""
12167
12168
#: serverguide/C/network-config.xml:399(para)
12169
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12170
msgstr ""
12171
12172
#: serverguide/C/network-config.xml:404(para)
12173
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12174
msgstr ""
12175
12176
#: serverguide/C/network-config.xml:409(para)
12177
msgid ""
12178
"If no matches are found, the DNS server will provide a result of <emphasis "
12179
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12180
msgstr ""
12181
12182
#: serverguide/C/network-config.xml:416(title)
12183
msgid "Static Hostnames"
12184
msgstr ""
12185
12186
#: serverguide/C/network-config.xml:417(para)
12187
msgid ""
12188
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12189
"file <filename>/etc/hosts</filename>. Entries in the "
12190
"<filename>hosts</filename> file will have precedence over DNS by default. "
12191
"This means that if your system tries to resolve a hostname and it matches an "
12192
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12193
"some configurations, especially when Internet access is not required, "
12194
"servers that communicate with a limited number of resources can be "
12195
"conveniently set to use static hostnames instead of DNS."
12196
msgstr ""
12197
12198
#: serverguide/C/network-config.xml:424(para)
12199
msgid ""
12200
"The following is an example of a <filename>hosts</filename> file where a "
12201
"number of local servers have been identified by simple hostnames, aliases "
12202
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12203
msgstr ""
12204
12205
#: serverguide/C/network-config.xml:428(programlisting)
12206
#, no-wrap
12207
msgid ""
12208
"\n"
12209
"127.0.0.1\tlocalhost\n"
12210
"127.0.1.1\tubuntu-server\n"
12211
"10.0.0.11\tserver1 vpn server1.example.com\n"
12212
"10.0.0.12\tserver2 mail server2.example.com\n"
12213
"10.0.0.13\tserver3 www server3.example.com\n"
12214
"10.0.0.14\tserver4 file server4.example.com\n"
12215
msgstr ""
12216
12217
#: serverguide/C/network-config.xml:437(para)
12218
msgid ""
12219
"In the above example, notice that each of the servers have been given "
12220
"aliases in addition to their proper names and FQDN's. <emphasis "
12221
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12222
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12223
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12224
"role=\"italic\">server3</emphasis> as <emphasis "
12225
"role=\"italic\">www</emphasis>, and <emphasis "
12226
"role=\"italic\">server4</emphasis> as <emphasis "
12227
"role=\"italic\">file</emphasis>."
12228
msgstr ""
12229
12230
#: serverguide/C/network-config.xml:449(title)
12231
msgid "Name Service Switch Configuration"
12232
msgstr ""
12233
12234
#: serverguide/C/network-config.xml:450(para)
12235
msgid ""
12236
"The order in which your system selects a method of resolving hostnames to IP "
12237
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12238
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12239
"section, typically static hostnames defined in the systems "
12240
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12241
"from DNS. The following is an example of the line responsible for this order "
12242
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12243
msgstr ""
12244
12245
#: serverguide/C/network-config.xml:458(programlisting)
12246
#, no-wrap
12247
msgid ""
12248
"\n"
12249
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12250
msgstr ""
12251
12252
#: serverguide/C/network-config.xml:464(para)
12253
msgid ""
12254
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12255
"hostnames located in <filename>/etc/hosts</filename>."
12256
msgstr ""
12257
12258
#: serverguide/C/network-config.xml:470(para)
12259
msgid ""
12260
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12261
"name using Multicast DNS."
12262
msgstr ""
12263
12264
#: serverguide/C/network-config.xml:475(para)
12265
msgid ""
12266
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12267
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12268
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12269
"authoritative and that the system should not try to continue hunting for an "
12270
"answer."
12271
msgstr ""
12272
12273
#: serverguide/C/network-config.xml:483(para)
12274
msgid ""
12275
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12276
msgstr ""
12277
12278
#: serverguide/C/network-config.xml:488(para)
12279
msgid ""
12280
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12281
msgstr ""
12282
12283
#: serverguide/C/network-config.xml:494(para)
12284
msgid ""
12285
"To modify the order of the above mentioned name resolution methods, you can "
12286
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12287
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12288
"versus Multicast DNS, you can change the string in "
12289
"<filename>/etc/nsswitch.conf</filename> as shown below."
12290
msgstr ""
12291
12292
#: serverguide/C/network-config.xml:501(programlisting)
12293
#, no-wrap
12294
msgid ""
12295
"\n"
12296
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12297
msgstr ""
12298
12299
#: serverguide/C/network-config.xml:508(title)
12300
msgid "Bridging"
12301
msgstr ""
12302
12303
#: serverguide/C/network-config.xml:510(para)
12304
msgid ""
12305
"Bridging multiple interfaces is a more advanced configuration, but is very "
12306
"useful in multiple scenarios. One scenario is setting up a bridge with "
12307
"multiple network interfaces, then using a firewall to filter traffic between "
12308
"two network segments. Another scenario is using bridge on a system with one "
12309
"interface to allow virtual machines direct access to the outside network. "
12310
"The following example covers the latter scenario."
12311
msgstr ""
12312
12313
#: serverguide/C/network-config.xml:517(para)
12314
msgid ""
12315
"Before configuring a bridge you will need to install the <application>bridge-"
12316
"utils</application> package. To install the package, in a terminal enter:"
12317
msgstr ""
12318
12319
#: serverguide/C/network-config.xml:523(command)
12320
msgid "sudo apt-get install bridge-utils"
12321
msgstr ""
12322
12323
#: serverguide/C/network-config.xml:526(para)
12324
msgid ""
12325
"Next, configure the bridge by editing "
12326
"<filename>/etc/network/interfaces</filename>:"
12327
msgstr ""
12328
12329
#: serverguide/C/network-config.xml:530(programlisting)
12330
#, no-wrap
12331
msgid ""
12332
"\n"
12333
"auto lo\n"
12334
"iface lo inet loopback\n"
12335
"\n"
12336
"auto br0\n"
12337
"iface br0 inet static\n"
12338
" address 192.168.0.10\n"
12339
" network 192.168.0.0\n"
12340
" netmask 255.255.255.0\n"
12341
" broadcast 192.168.0.255\n"
12342
" gateway 192.168.0.1\n"
12343
" bridge_ports eth0\n"
12344
" bridge_fd 9\n"
12345
" bridge_hello 2\n"
12346
" bridge_maxage 12\n"
12347
" bridge_stp off\n"
12348
msgstr ""
12349
12350
#: serverguide/C/network-config.xml:549(para)
12351
msgid "Enter the appropriate values for your physical interface and network."
12352
msgstr ""
12353
12354
#: serverguide/C/network-config.xml:554(para)
12355
msgid "Now restart networking to enable the bridge interface:"
12356
msgstr ""
12357
12358
#: serverguide/C/network-config.xml:561(para)
12359
msgid ""
12360
"The new bridge interface should now be up and running. The "
12361
"<application>brctl</application> provides useful information about the state "
12362
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12363
"<command>man brctl</command> for more information."
12364
msgstr ""
12365
12366
#: serverguide/C/network-config.xml:577(para)
12367
msgid ""
12368
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12369
"Network page</ulink> has links to articles covering more advanced network "
12370
"configuration."
12371
msgstr ""
12372
12373
#: serverguide/C/network-config.xml:583(para)
12374
msgid ""
12375
"The <ulink "
12376
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12377
"nterfaces man page</ulink> has details on more options for "
12378
"<filename>/etc/network/interfaces</filename>."
12379
msgstr ""
12380
12381
#: serverguide/C/network-config.xml:589(para)
12382
msgid ""
12383
"The <ulink "
12384
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12385
"lient man page</ulink> has details on more options for configuring DHCP "
12386
"client settings."
12387
msgstr ""
12388
12389
#: serverguide/C/network-config.xml:595(para)
12390
msgid ""
12391
"For more information on DNS client configuration see the <ulink "
12392
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12393
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12394
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12395
"Administrator's Guide</ulink> is a good source of resolver and name service "
12396
"configuration information."
12397
msgstr ""
12398
12399
#: serverguide/C/network-config.xml:603(para)
12400
msgid ""
12401
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12402
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12403
"man page</ulink> and the Linux Foundation's <ulink "
12404
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12405
msgstr ""
12406
12407
#: serverguide/C/network-config.xml:614(title)
12408
msgid "TCP/IP"
12409
msgstr ""
12410
12411
#: serverguide/C/network-config.xml:615(para)
12412
msgid ""
12413
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12414
"standard set of protocols developed in the late 1970s by the Defense "
12415
"Advanced Research Projects Agency (DARPA) as a means of communication "
12416
"between different types of computers and computer networks. TCP/IP is the "
12417
"driving force of the Internet, and thus it is the most popular set of "
12418
"network protocols on Earth."
12419
msgstr ""
12420
12421
#: serverguide/C/network-config.xml:623(title)
12422
msgid "TCP/IP Introduction"
12423
msgstr ""
12424
12425
#: serverguide/C/network-config.xml:624(para)
12426
msgid ""
12427
"The two protocol components of TCP/IP deal with different aspects of "
12428
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12429
"TCP/IP is a connectionless protocol which deals only with network packet "
12430
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12431
"basic unit of networking information. The IP Datagram consists of a header "
12432
"followed by a message. The <emphasis> Transmission Control "
12433
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12434
"establish connections which may be used to exchange data streams. TCP also "
12435
"guarantees that the data between connections is delivered and that it "
12436
"arrives at one network host in the same order as sent from another network "
12437
"host."
12438
msgstr ""
12439
12440
#: serverguide/C/network-config.xml:637(title)
12441
msgid "TCP/IP Configuration"
12442
msgstr ""
12443
12444
#: serverguide/C/network-config.xml:638(para)
12445
msgid ""
12446
"The TCP/IP protocol configuration consists of several elements which must be "
12447
"set by editing the appropriate configuration files, or deploying solutions "
12448
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12449
"can be configured to provide the proper TCP/IP configuration settings to "
12450
"network clients automatically. These configuration values must be set "
12451
"correctly in order to facilitate the proper network operation of your Ubuntu "
12452
"system."
12453
msgstr ""
12454
12455
#: serverguide/C/network-config.xml:650(para)
12456
msgid ""
12457
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12458
"identifying string expressed as four decimal numbers ranging from zero (0) "
12459
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12460
"four numbers representing eight (8) bits of the address for a total length "
12461
"of thirty-two (32) bits for the whole address. This format is called "
12462
"<emphasis>dotted quad notation</emphasis>."
12463
msgstr ""
12464
12465
#: serverguide/C/network-config.xml:660(para)
12466
msgid ""
12467
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12468
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12469
"separate the portions of an IP address significant to the network from the "
12470
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12471
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12472
"three bytes of the IP address and allows the last byte of the IP address to "
12473
"remain available for specifying hosts on the subnetwork."
12474
msgstr ""
12475
12476
#: serverguide/C/network-config.xml:671(para)
12477
msgid ""
12478
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12479
"represents the bytes comprising the network portion of an IP address. For "
12480
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12481
"network address, where twelve (12) represents the first byte of the IP "
12482
"address, (the network part) and zeroes (0) in all of the remaining three "
12483
"bytes to represent the potential host values. A network host using the "
12484
"private IP address 192.168.1.100 would in turn use a Network Address of "
12485
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12486
"network and a zero (0) for all the possible hosts on the network."
12487
msgstr ""
12488
12489
#: serverguide/C/network-config.xml:684(para)
12490
msgid ""
12491
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12492
"is an IP address which allows network data to be sent simultaneously to all "
12493
"hosts on a given subnetwork rather than specifying a particular host. The "
12494
"standard general broadcast address for IP networks is 255.255.255.255, but "
12495
"this broadcast address cannot be used to send a broadcast message to every "
12496
"host on the Internet because routers block it. A more appropriate broadcast "
12497
"address is set to match a specific subnetwork. For example, on the private "
12498
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12499
"Broadcast messages are typically produced by network protocols such as the "
12500
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12501
msgstr ""
12502
12503
#: serverguide/C/network-config.xml:697(para)
12504
msgid ""
12505
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12506
"IP address through which a particular network, or host on a network, may be "
12507
"reached. If one network host wishes to communicate with another network "
12508
"host, and that host is not located on the same network, then a "
12509
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12510
"Address will be that of a router on the same network, which will in turn "
12511
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12512
"value of the Gateway Address setting must be correct, or your system will "
12513
"not be able to reach any hosts beyond those on the same network."
12514
msgstr ""
12515
12516
#: serverguide/C/network-config.xml:708(para)
12517
msgid ""
12518
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12519
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12520
"resolve network hostnames into IP addresses. There are three levels of "
12521
"Nameserver Addresses, which may be specified in order of precedence: The "
12522
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12523
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12524
"your system to be able to resolve network hostnames into their corresponding "
12525
"IP addresses, you must specify valid Nameserver Addresses which you are "
12526
"authorized to use in your system's TCP/IP configuration. In many cases these "
12527
"addresses can and will be provided by your network service provider, but "
12528
"many free and publicly accessible nameservers are available for use, such as "
12529
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12530
msgstr ""
12531
12532
#: serverguide/C/network-config.xml:722(para)
12533
msgid ""
12534
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12535
"Address are typically specified via the appropriate directives in the file "
12536
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12537
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12538
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12539
"system manual page for <filename>interfaces</filename> or "
12540
"<filename>resolv.conf</filename> respectively, with the following commands "
12541
"typed at a terminal prompt:"
12542
msgstr ""
12543
12544
#: serverguide/C/network-config.xml:729(para)
12545
msgid ""
12546
"Access the system manual page for <filename>interfaces</filename> with the "
12547
"following command:"
12548
msgstr ""
12549
12550
#: serverguide/C/network-config.xml:734(command)
12551
msgid "man interfaces"
12552
msgstr ""
12553
12554
#: serverguide/C/network-config.xml:737(para)
12555
msgid ""
12556
"Access the system manual page for <filename>resolv.conf</filename> with the "
12557
"following command:"
12558
msgstr ""
12559
12560
#: serverguide/C/network-config.xml:741(command)
12561
msgid "man resolv.conf"
12562
msgstr ""
12563
12564
#: serverguide/C/network-config.xml:646(para)
12565
msgid ""
12566
"The common configuration elements of TCP/IP and their purposes are as "
12567
"follows: <placeholder-1/>"
12568
msgstr ""
12569
12570
#: serverguide/C/network-config.xml:748(title)
12571
msgid "IP Routing"
12572
msgstr ""
12573
12574
#: serverguide/C/network-config.xml:749(para)
12575
msgid ""
12576
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12577
"network along which network data may be sent. Routing uses a set of "
12578
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12579
"packets from their source to the destination, often via many intermediary "
12580
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12581
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12582
"<emphasis>Dynamic Routing.</emphasis>"
12583
msgstr ""
12584
12585
#: serverguide/C/network-config.xml:758(para)
12586
msgid ""
12587
"Static routing involves manually adding IP routes to the system's routing "
12588
"table, and this is usually done by manipulating the routing table with the "
12589
"<application>route</application> command. Static routing enjoys many "
12590
"advantages over dynamic routing, such as simplicity of implementation on "
12591
"smaller networks, predictability (the routing table is always computed in "
12592
"advance, and thus the route is precisely the same each time it is used), and "
12593
"low overhead on other routers and network links due to the lack of a dynamic "
12594
"routing protocol. However, static routing does present some disadvantages as "
12595
"well. For example, static routing is limited to small networks and does not "
12596
"scale well. Static routing also fails completely to adapt to network outages "
12597
"and failures along the route due to the fixed nature of the route."
12598
msgstr ""
12599
12600
#: serverguide/C/network-config.xml:768(para)
12601
msgid ""
12602
"Dynamic routing depends on large networks with multiple possible IP routes "
12603
"from a source to a destination and makes use of special routing protocols, "
12604
"such as the Router Information Protocol (RIP), which handle the automatic "
12605
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12606
"routing has several advantages over static routing, such as superior "
12607
"scalability and the ability to adapt to failures and outages along network "
12608
"routes. Additionally, there is less manual configuration of the routing "
12609
"tables, since routers learn from one another about their existence and "
12610
"available routes. This trait also eliminates the possibility of introducing "
12611
"mistakes in the routing tables via human error. Dynamic routing is not "
12612
"perfect, however, and presents disadvantages such as heightened complexity "
12613
"and additional network overhead from router communications, which does not "
12614
"immediately benefit the end users, but still consumes network bandwidth."
12615
msgstr ""
12616
12617
#: serverguide/C/network-config.xml:782(title)
12618
msgid "TCP and UDP"
12619
msgstr ""
12620
12621
#: serverguide/C/network-config.xml:783(para)
12622
msgid ""
12623
"TCP is a connection-based protocol, offering error correction and guaranteed "
12624
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12625
"Flow control determines when the flow of a data stream needs to be stopped, "
12626
"and previously sent data packets should to be re-sent due to problems such "
12627
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12628
"accurate delivery of the data. TCP is typically used in the exchange of "
12629
"important information such as database transactions."
12630
msgstr ""
12631
12632
#: serverguide/C/network-config.xml:791(para)
12633
msgid ""
12634
"The User Datagram Protocol (UDP), on the other hand, is a "
12635
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12636
"transmission of important data because it lacks flow control or any other "
12637
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12638
"applications as audio and video streaming, where it is considerably faster "
12639
"than TCP due to the lack of error correction and flow control, and where the "
12640
"loss of a few packets is not generally catastrophic."
12641
msgstr ""
12642
12643
#: serverguide/C/network-config.xml:801(title)
12644
msgid "ICMP"
12645
msgstr ""
12646
12647
#: serverguide/C/network-config.xml:802(para)
12648
msgid ""
12649
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12650
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12651
"supports network packets containing control, error, and informational "
12652
"messages. ICMP is used by such network applications as the "
12653
"<application>ping</application> utility, which can determine the "
12654
"availability of a network host or device. Examples of some error messages "
12655
"returned by ICMP which are useful to both network hosts and devices such as "
12656
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12657
"<emphasis>Time Exceeded</emphasis>."
12658
msgstr ""
12659
12660
#: serverguide/C/network-config.xml:812(title)
12661
msgid "Daemons"
12662
msgstr ""
12663
12664
#: serverguide/C/network-config.xml:813(para)
12665
msgid ""
12666
"Daemons are special system applications which typically execute continuously "
12667
"in the background and await requests for the functions they provide from "
12668
"other applications. Many daemons are network-centric; that is, a large "
12669
"number of daemons executing in the background on an Ubuntu system may "
12670
"provide network-related functionality. Some examples of such network daemons "
12671
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12672
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12673
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12674
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12675
"Daemon</emphasis> (imapd), which provides E-Mail services."
12676
msgstr ""
12677
12678
#: serverguide/C/network-config.xml:828(para)
12679
msgid ""
12680
"There are man pages for <ulink "
12681
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12682
"nk> and <ulink "
12683
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12684
"that contain more useful information."
12685
msgstr ""
12686
12687
#: serverguide/C/network-config.xml:834(para)
12688
msgid ""
12689
"Also, see the <ulink "
12690
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12691
"and Technical Overview</ulink> IBM Redbook."
12692
msgstr ""
12693
12694
#: serverguide/C/network-config.xml:840(para)
12695
msgid ""
12696
"Another resource is O'Reilly's <ulink "
12697
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12698
"Administration</ulink>."
12699
msgstr ""
12700
12701
#: serverguide/C/network-config.xml:849(title)
12702
msgid "Dynamic Host Configuration Protocol (DHCP)"
12703
msgstr ""
12704
12705
#: serverguide/C/network-config.xml:850(para)
12706
msgid ""
12707
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12708
"enables host computers to be automatically assigned settings from a server "
12709
"as opposed to manually configuring each network host. Computers configured "
12710
"to be DHCP clients have no control over the settings they receive from the "
12711
"DHCP server, and the configuration is transparent to the computer's user."
12712
msgstr ""
12713
12714
#: serverguide/C/network-config.xml:857(para)
12715
msgid ""
12716
"The most common settings provided by a DHCP server to DHCP clients include:"
12717
msgstr ""
12718
12719
#: serverguide/C/network-config.xml:862(para)
12720
msgid "IP-Address and Netmask"
12721
msgstr ""
12722
12723
#: serverguide/C/network-config.xml:865(para)
12724
msgid "DNS"
12725
msgstr ""
12726
12727
#: serverguide/C/network-config.xml:868(para)
12728
msgid "WINS"
12729
msgstr ""
12730
12731
#: serverguide/C/network-config.xml:871(para)
12732
msgid ""
12733
"However, a DHCP server can also supply configuration properties such as:"
12734
msgstr ""
12735
12736
#: serverguide/C/network-config.xml:876(para)
12737
msgid "Host Name"
12738
msgstr ""
12739
12740
#: serverguide/C/network-config.xml:879(para)
12741
msgid "Domain Name"
12742
msgstr ""
12743
12744
#: serverguide/C/network-config.xml:882(para)
12745
msgid "Default Gateway"
12746
msgstr ""
12747
12748
#: serverguide/C/network-config.xml:885(para)
12749
msgid "Time Server"
12750
msgstr ""
12751
12752
#: serverguide/C/network-config.xml:888(para)
12753
msgid "Print Server"
12754
msgstr ""
12755
12756
#: serverguide/C/network-config.xml:891(para)
12757
msgid ""
12758
"The advantage of using DHCP is that changes to the network, for example a "
12759
"change in the address of the DNS server, need only be changed at the DHCP "
12760
"server, and all network hosts will be reconfigured the next time their DHCP "
12761
"clients poll the DHCP server. As an added advantage, it is also easier to "
12762
"integrate new computers into the network, as there is no need to check for "
12763
"the availability of an IP address. Conflicts in IP address allocation are "
12764
"also reduced."
12765
msgstr ""
12766
12767
#: serverguide/C/network-config.xml:899(para)
12768
msgid "A DHCP server can provide configuration settings using two methods:"
12769
msgstr ""
12770
12771
#: serverguide/C/network-config.xml:904(term)
12772
msgid "MAC Address"
12773
msgstr ""
12774
12775
#: serverguide/C/network-config.xml:906(para)
12776
msgid ""
12777
"This method entails using DHCP to identify the unique hardware address of "
12778
"each network card connected to the network and then continually supplying a "
12779
"constant configuration each time the DHCP client makes a request to the DHCP "
12780
"server using that network device."
12781
msgstr ""
12782
12783
#: serverguide/C/network-config.xml:915(term)
12784
msgid "Address Pool"
12785
msgstr ""
12786
12787
#: serverguide/C/network-config.xml:917(para)
12788
msgid ""
12789
"This method entails defining a pool (sometimes also called a range or scope) "
12790
"of IP addresses from which DHCP clients are supplied their configuration "
12791
"properties dynamically and on a \"first come, first served\" basis. When a "
12792
"DHCP client is no longer on the network for a specified period, the "
12793
"configuration is expired and released back to the address pool for use by "
12794
"other DHCP Clients."
12795
msgstr ""
12796
12797
#: serverguide/C/network-config.xml:928(para)
12798
msgid ""
12799
"Ubuntu is shipped with both DHCP server and client. The server is "
12800
"<application>dhcpd</application> (dynamic host configuration protocol "
12801
"daemon). The client provided with Ubuntu is "
12802
"<application>dhclient</application> and should be installed on all computers "
12803
"required to be automatically configured. Both programs are easy to install "
12804
"and configure and will be automatically started at system boot."
12805
msgstr ""
12806
12807
#: serverguide/C/network-config.xml:938(para)
12808
msgid ""
12809
"At a terminal prompt, enter the following command to install "
12810
"<application>dhcpd</application>:"
12811
msgstr ""
12812
12813
#: serverguide/C/network-config.xml:943(command)
12814
msgid "sudo apt-get install dhcp3-server"
12815
msgstr ""
12816
12817
#: serverguide/C/network-config.xml:945(para)
12818
msgid ""
12819
"You will probably need to change the default configuration by editing "
12820
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12821
msgstr ""
12822
12823
#: serverguide/C/network-config.xml:949(para)
12824
msgid ""
12825
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
12826
"dhcpd should listen to. By default it listens to eth0."
12827
msgstr ""
12828
12829
#: serverguide/C/network-config.xml:953(para)
12830
msgid ""
12831
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
12832
"messages."
12833
msgstr ""
12834
12835
#: serverguide/C/network-config.xml:960(para)
12836
msgid ""
12837
"The error message the installation ends with might be a little confusing, "
12838
"but the following steps will help you configure the service:"
12839
msgstr ""
12840
12841
#: serverguide/C/network-config.xml:964(para)
12842
msgid ""
12843
"Most commonly, what you want to do is assign an IP address randomly. This "
12844
"can be done with settings as follows:"
12845
msgstr ""
12846
12847
#: serverguide/C/network-config.xml:968(programlisting)
12848
#, no-wrap
12849
msgid ""
12850
"\n"
12851
"# Sample /etc/dhcpd.conf\n"
12852
"# (add your comments here) \n"
12853
"default-lease-time 600;\n"
12854
"max-lease-time 7200;\n"
12855
"option subnet-mask 255.255.255.0;\n"
12856
"option broadcast-address 192.168.1.255;\n"
12857
"option routers 192.168.1.254;\n"
12858
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
12859
"option domain-name \"mydomain.example\";\n"
12860
"\n"
12861
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
12862
"range 192.168.1.10 192.168.1.100;\n"
12863
"range 192.168.1.150 192.168.1.200;\n"
12864
"} \n"
12865
msgstr ""
12866
12867
#: serverguide/C/network-config.xml:984(para)
12868
msgid ""
12869
"This will result in the DHCP server giving a client an IP address from the "
12870
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
12871
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
12872
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
12873
"server will also \"advise\" the client that it should use 255.255.255.0 as "
12874
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
12875
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
12876
msgstr ""
12877
12878
#: serverguide/C/network-config.xml:993(para)
12879
msgid ""
12880
"If you need to specify a WINS server for your Windows clients, you will need "
12881
"to include the netbios-name-servers option, e.g."
12882
msgstr ""
12883
12884
#: serverguide/C/network-config.xml:997(programlisting)
12885
#, no-wrap
12886
msgid ""
12887
"\n"
12888
"option netbios-name-servers 192.168.1.1; \n"
12889
msgstr ""
12890
12891
#: serverguide/C/network-config.xml:1000(para)
12892
msgid ""
12893
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
12894
"be found <ulink "
12895
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
12896
msgstr ""
12897
12898
#: serverguide/C/network-config.xml:1010(para)
12899
msgid ""
12900
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
12901
"server Ubuntu Wiki</ulink> page has more information."
12902
msgstr ""
12903
12904
#: serverguide/C/network-config.xml:1015(para)
12905
msgid ""
12906
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
12907
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
12908
"hcpd.conf man page</ulink>."
12909
msgstr ""
12910
12911
#: serverguide/C/network-config.xml:1021(para)
12912
msgid ""
12913
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
12914
"FAQ</ulink>"
12915
msgstr ""
12916
12917
#: serverguide/C/network-config.xml:1031(title)
12918
msgid "Time Synchronisation with NTP"
12919
msgstr ""
12920
12921
#: serverguide/C/network-config.xml:1032(para)
12922
msgid ""
12923
"This page describes methods for keeping your computer's time accurate. This "
12924
"is useful for servers, but is not necessary (or desirable) for desktop "
12925
"machines."
12926
msgstr ""
12927
12928
#: serverguide/C/network-config.xml:1035(para)
12929
msgid ""
12930
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
12931
"client requests the current time from a server, and uses it to set its own "
12932
"clock."
12933
msgstr ""
12934
12935
#: serverguide/C/network-config.xml:1038(para)
12936
msgid ""
12937
"Behind this simple description, there is a lot of complexity - there are "
12938
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
12939
"clocks (often via GPS), and tier two and three servers spreading the load of "
12940
"actually handling requests across the Internet. Also the client software is "
12941
"a lot more complex than you might think - it has to factor out communication "
12942
"delays, and adjust the time in a way that does not upset all the other "
12943
"processes that run on the server. But luckily all that complexity is hidden "
12944
"from you!"
12945
msgstr ""
12946
12947
#: serverguide/C/network-config.xml:1041(para)
12948
msgid ""
12949
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
12950
msgstr ""
12951
12952
#: serverguide/C/network-config.xml:1046(title)
12953
msgid "ntpdate"
12954
msgstr ""
12955
12956
#: serverguide/C/network-config.xml:1047(para)
12957
msgid ""
12958
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
12959
"set up your time according to Ubuntu's NTP server. However, a server's clock "
12960
"is likely to drift considerably between reboots, so it makes sense to "
12961
"correct the time occasionally. The easiest way to do this is to get cron to "
12962
"run ntpdate every day. With your favorite editor, as root, create a file "
12963
"<code>/etc/cron.daily/ntpdate</code> containing:"
12964
msgstr ""
12965
12966
#: serverguide/C/network-config.xml:1052(screen)
12967
#, no-wrap
12968
msgid "ntpdate ntp.ubuntu.com\n"
12969
msgstr ""
12970
12971
#: serverguide/C/network-config.xml:1054(para)
12972
msgid ""
12973
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
12974
msgstr ""
12975
12976
#: serverguide/C/network-config.xml:1057(screen)
12977
#, no-wrap
12978
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
12979
msgstr ""
12980
12981
#: serverguide/C/network-config.xml:1061(title)
12982
msgid "ntpd"
12983
msgstr ""
12984
12985
#: serverguide/C/network-config.xml:1062(para)
12986
msgid ""
12987
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
12988
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
12989
"calculates the drift of your system clock and continuously adjusts it, so "
12990
"there are no large corrections that could lead to inconsistent logs for "
12991
"instance. The cost is a little processing power and memory, but for a modern "
12992
"server this is negligible."
12993
msgstr ""
12994
12995
#: serverguide/C/network-config.xml:1065(para)
12996
msgid "To set up ntpd:"
12997
msgstr ""
12998
12999
#: serverguide/C/network-config.xml:1066(screen)
13000
#, no-wrap
13001
msgid "sudo apt-get install ntp\n"
13002
msgstr ""
13003
13004
#: serverguide/C/network-config.xml:1071(title)
13005
msgid "Changing Time Servers"
13006
msgstr ""
13007
13008
#: serverguide/C/network-config.xml:1072(para)
13009
msgid ""
13010
"In both cases above, your system will use Ubuntu's NTP server at "
13011
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
13012
"use several servers to increase accuracy and resilience, and you may want to "
13013
"use time servers that are geographically closer to you. to do this for "
13014
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
13015
msgstr ""
13016
13017
#: serverguide/C/network-config.xml:1079(screen)
13018
#, no-wrap
13019
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
13020
msgstr ""
13021
13022
#: serverguide/C/network-config.xml:1081(para)
13023
msgid ""
13024
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
13025
"lines:"
13026
msgstr ""
13027
13028
#: serverguide/C/network-config.xml:1086(screen)
13029
#, no-wrap
13030
msgid ""
13031
"server ntp.ubuntu.com\n"
13032
"server pool.ntp.org\n"
13033
msgstr ""
13034
13035
#: serverguide/C/network-config.xml:1089(para)
13036
msgid ""
13037
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
13038
"really good idea which uses round-robin DNS to return an NTP server from a "
13039
"pool, spreading the load between several different servers. Even better, "
13040
"they have pools for different regions - for instance, if you are in New "
13041
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
13042
"<code>pool.ntp.org</code> . Look at <ulink "
13043
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
13044
"details."
13045
msgstr ""
13046
13047
#: serverguide/C/network-config.xml:1100(para)
13048
msgid ""
13049
"You can also Google for NTP servers in your region, and add these to your "
13050
"configuration. To test that a server works, just type <code>sudo ntpdate "
13051
"ntp.server.name</code> and see what happens."
13052
msgstr ""
13053
13054
#: serverguide/C/network-config.xml:1111(para)
13055
msgid ""
13056
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
13057
"Time</ulink> wiki page for more information."
13058
msgstr ""
13059
13060
#: serverguide/C/network-config.xml:1117(ulink)
13061
msgid "NTP Support"
13062
msgstr ""
13063
13064
#: serverguide/C/network-config.xml:1122(ulink)
13065
msgid "The NTP FAQ and HOWTO"
13066
msgstr ""
13067
13068
#: serverguide/C/network-auth.xml:13(title)
13069
msgid "Network Authentication"
13070
msgstr ""
13071
13072
#: serverguide/C/network-auth.xml:15(para)
13073
msgid "This section explains various Network Authentication protocols."
13074
msgstr ""
13075
13076
#: serverguide/C/network-auth.xml:19(title)
13077
msgid "OpenLDAP Server"
13078
msgstr ""
13079
13080
#: serverguide/C/network-auth.xml:20(para)
13081
msgid ""
13082
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
13083
"simplified version of the X.500 protocol. The directory setup in this "
13084
"section will be used for authentication. Nevertheless, LDAP can be used in "
13085
"numerous ways: authentication, shared directory (for mail clients), address "
13086
"book, etc."
13087
msgstr ""
13088
13089
#: serverguide/C/network-auth.xml:28(para)
13090
msgid ""
13091
"To describe LDAP quickly, all information is stored in a tree structure. "
13092
"With <application>OpenLDAP</application> you have freedom to determine the "
13093
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
13094
"We will begin with a basic tree containing two nodes below the root:"
13095
msgstr ""
13096
13097
#: serverguide/C/network-auth.xml:37(para)
13098
msgid "\"People\" node where your users will be stored"
13099
msgstr ""
13100
13101
#: serverguide/C/network-auth.xml:40(para)
13102
msgid "\"Groups\" node where your groups will be stored"
13103
msgstr ""
13104
13105
#: serverguide/C/network-auth.xml:44(para)
13106
msgid ""
13107
"Before beginning, you should determine what the root of your LDAP directory "
13108
"will be. By default, your tree will be determined by your Fully Qualified "
13109
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
13110
"example), your root node will be dc=example,dc=com."
13111
msgstr ""
13112
13113
#: serverguide/C/network-auth.xml:54(para)
13114
msgid ""
13115
"First, install the <application>OpenLDAP</application> server daemon "
13116
"<application>slapd</application> and <application>ldap-utils</application>, "
13117
"a package containing LDAP management utilities:"
13118
msgstr ""
13119
13120
#: serverguide/C/network-auth.xml:60(command)
13121
msgid "sudo apt-get install slapd ldap-utils"
13122
msgstr ""
13123
13124
#: serverguide/C/network-auth.xml:63(para)
13125
msgid ""
13126
"By default <application>slapd</application> is configured with minimal "
13127
"options needed to run the <application>slapd</application> daemon."
13128
msgstr ""
13129
13130
#: serverguide/C/network-auth.xml:68(para)
13131
msgid ""
13132
"The configuration example in the following sections will match the domain "
13133
"name of the server. For example, if the machine's Fully Qualified Domain "
13134
"Name (FQDN) is ldap.example.com, the default suffix will be "
13135
"<emphasis>dc=example,dc=com</emphasis>."
13136
msgstr ""
13137
13138
#: serverguide/C/network-auth.xml:76(title)
13139
msgid "Populating LDAP"
13140
msgstr ""
13141
13142
#: serverguide/C/network-auth.xml:78(para)
13143
msgid ""
13144
"<application>OpenLDAP</application> uses a separate directory which contains "
13145
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13146
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13147
"<application>slapd</application> daemon, allowing the modification of schema "
13148
"definitions, indexes, ACLs, etc without stopping the service."
13149
msgstr ""
13150
13151
#: serverguide/C/network-auth.xml:86(para)
13152
msgid ""
13153
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13154
"configuration and will need additional configuration options in order to "
13155
"populate the frontend directory. The frontend will be populated with a "
13156
"\"classical\" scheme that will be compatible with address book applications "
13157
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13158
"various applications, such as web applications, email Mail Transfer Agent "
13159
"(MTA) applications, etc."
13160
msgstr ""
13161
13162
#: serverguide/C/network-auth.xml:95(para)
13163
msgid ""
13164
"For external applications to authenticate using LDAP they will each need to "
13165
"be specifically configured to do so. Refer to the individual application "
13166
"documentation for details."
13167
msgstr ""
13168
13169
#: serverguide/C/network-auth.xml:103(para)
13170
msgid ""
13171
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13172
"examples to match your LDAP configuration."
13173
msgstr ""
13174
13175
#: serverguide/C/network-auth.xml:108(para)
13176
msgid ""
13177
"First, some additional schema files need to be loaded. In a terminal enter:"
13178
msgstr ""
13179
13180
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13181
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13182
msgstr ""
13183
13184
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13185
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13186
msgstr ""
13187
13188
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13189
msgid ""
13190
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13191
msgstr ""
13192
13193
#: serverguide/C/network-auth.xml:118(para)
13194
msgid ""
13195
"Next, copy the following example LDIF file, naming it "
13196
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13197
msgstr ""
13198
13199
#: serverguide/C/network-auth.xml:123(programlisting)
13200
#, no-wrap
13201
msgid ""
13202
"\n"
13203
"# Load dynamic backend modules\n"
13204
"dn: cn=module,cn=config\n"
13205
"objectClass: olcModuleList\n"
13206
"cn: module\n"
13207
"olcModulepath: /usr/lib/ldap\n"
13208
"olcModuleload: back_hdb\n"
13209
"\n"
13210
"# Database settings\n"
13211
"dn: olcDatabase=hdb,cn=config\n"
13212
"objectClass: olcDatabaseConfig\n"
13213
"objectClass: olcHdbConfig\n"
13214
"olcDatabase: {1}hdb\n"
13215
"olcSuffix: dc=example,dc=com\n"
13216
"olcDbDirectory: /var/lib/ldap\n"
13217
"olcRootDN: cn=admin,dc=example,dc=com\n"
13218
"olcRootPW: secret\n"
13219
"olcDbConfig: set_cachesize 0 2097152 0\n"
13220
"olcDbConfig: set_lk_max_objects 1500\n"
13221
"olcDbConfig: set_lk_max_locks 1500\n"
13222
"olcDbConfig: set_lk_max_lockers 1500\n"
13223
"olcDbIndex: objectClass eq\n"
13224
"olcLastMod: TRUE\n"
13225
"olcDbCheckpoint: 512 30\n"
13226
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13227
"by anonymous auth by self write by * none\n"
13228
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13229
"olcAccess: to dn.base=\"\" by * read\n"
13230
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13231
"\n"
13232
msgstr ""
13233
13234
#: serverguide/C/network-auth.xml:155(para)
13235
msgid ""
13236
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13237
msgstr ""
13238
13239
#: serverguide/C/network-auth.xml:160(para)
13240
msgid "Now add the LDIF to the directory:"
13241
msgstr ""
13242
13243
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13244
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13245
msgstr ""
13246
13247
#: serverguide/C/network-auth.xml:168(para)
13248
msgid ""
13249
"The frontend directory is now ready to be populated. Create a "
13250
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13251
msgstr ""
13252
13253
#: serverguide/C/network-auth.xml:173(programlisting)
13254
#, no-wrap
13255
msgid ""
13256
"\n"
13257
"# Create top-level object in domain\n"
13258
"dn: dc=example,dc=com\n"
13259
"objectClass: top\n"
13260
"objectClass: dcObject\n"
13261
"objectclass: organization\n"
13262
"o: Example Organization\n"
13263
"dc: Example\n"
13264
"description: LDAP Example \n"
13265
"\n"
13266
"# Admin user.\n"
13267
"dn: cn=admin,dc=example,dc=com\n"
13268
"objectClass: simpleSecurityObject\n"
13269
"objectClass: organizationalRole\n"
13270
"cn: admin\n"
13271
"description: LDAP administrator\n"
13272
"userPassword: secret\n"
13273
"\n"
13274
"dn: ou=people,dc=example,dc=com\n"
13275
"objectClass: organizationalUnit\n"
13276
"ou: people\n"
13277
"\n"
13278
"dn: ou=groups,dc=example,dc=com\n"
13279
"objectClass: organizationalUnit\n"
13280
"ou: groups\n"
13281
"\n"
13282
"dn: uid=john,ou=people,dc=example,dc=com\n"
13283
"objectClass: inetOrgPerson\n"
13284
"objectClass: posixAccount\n"
13285
"objectClass: shadowAccount\n"
13286
"uid: john\n"
13287
"sn: Doe\n"
13288
"givenName: John\n"
13289
"cn: John Doe\n"
13290
"displayName: John Doe\n"
13291
"uidNumber: 1000\n"
13292
"gidNumber: 10000\n"
13293
"userPassword: password\n"
13294
"gecos: John Doe\n"
13295
"loginShell: /bin/bash\n"
13296
"homeDirectory: /home/john\n"
13297
"shadowExpire: -1\n"
13298
"shadowFlag: 0\n"
13299
"shadowWarning: 7\n"
13300
"shadowMin: 8\n"
13301
"shadowMax: 999999\n"
13302
"shadowLastChange: 10877\n"
13303
"mail: john.doe@example.com\n"
13304
"postalCode: 31000\n"
13305
"l: Toulouse\n"
13306
"o: Example\n"
13307
"mobile: +33 (0)6 xx xx xx xx\n"
13308
"homePhone: +33 (0)5 xx xx xx xx\n"
13309
"title: System Administrator\n"
13310
"postalAddress: \n"
13311
"initials: JD\n"
13312
"\n"
13313
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13314
"objectClass: posixGroup\n"
13315
"cn: example\n"
13316
"gidNumber: 10000\n"
13317
msgstr ""
13318
13319
#: serverguide/C/network-auth.xml:236(para)
13320
msgid ""
13321
"In this example the directory structure, a user, and a group have been "
13322
"setup. In other examples you might see the <emphasis>objectClass: "
13323
"top</emphasis> added in every entry, but that is the default behaviour so "
13324
"you do not have to add it explicitly."
13325
msgstr ""
13326
13327
#: serverguide/C/network-auth.xml:243(para)
13328
msgid "Add the entries to the LDAP directory:"
13329
msgstr ""
13330
13331
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13332
msgid ""
13333
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13334
msgstr ""
13335
13336
#: serverguide/C/network-auth.xml:252(para)
13337
msgid ""
13338
"We can check that the content has been correctly added with the "
13339
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13340
"directory:"
13341
msgstr ""
13342
13343
#: serverguide/C/network-auth.xml:258(command)
13344
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13345
msgstr ""
13346
13347
#: serverguide/C/network-auth.xml:259(computeroutput)
13348
#, no-wrap
13349
msgid ""
13350
"\n"
13351
"dn: uid=john,ou=people,dc=example,dc=com\n"
13352
"cn: John Doe\n"
13353
"sn: Doe\n"
13354
"givenName: John\n"
13355
msgstr ""
13356
13357
#: serverguide/C/network-auth.xml:267(para)
13358
msgid "Just a quick explanation:"
13359
msgstr ""
13360
13361
#: serverguide/C/network-auth.xml:273(para)
13362
msgid ""
13363
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13364
"the default."
13365
msgstr ""
13366
13367
#: serverguide/C/network-auth.xml:279(para)
13368
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13369
msgstr ""
13370
13371
#: serverguide/C/network-auth.xml:287(title)
13372
msgid "Further Configuration"
13373
msgstr ""
13374
13375
#: serverguide/C/network-auth.xml:290(para)
13376
msgid ""
13377
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13378
"utilities in the <application>ldap-utils</application> package. For example:"
13379
msgstr ""
13380
13381
#: serverguide/C/network-auth.xml:298(para)
13382
msgid ""
13383
"Use <application>ldapsearch</application> to view the tree, entering the "
13384
"admin password set during installation or reconfiguration:"
13385
msgstr ""
13386
13387
#: serverguide/C/network-auth.xml:304(command)
13388
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13389
msgstr ""
13390
13391
#: serverguide/C/network-auth.xml:308(computeroutput)
13392
#, no-wrap
13393
msgid ""
13394
"\n"
13395
"SASL/EXTERNAL authentication started\n"
13396
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13397
"SASL SSF: 0\n"
13398
"dn: cn=config\n"
13399
"\n"
13400
"dn: cn=module{0},cn=config\n"
13401
"\n"
13402
"dn: cn=schema,cn=config\n"
13403
"\n"
13404
"dn: cn={0}core,cn=schema,cn=config\n"
13405
"\n"
13406
"dn: cn={1}cosine,cn=schema,cn=config\n"
13407
"\n"
13408
"dn: cn={2}nis,cn=schema,cn=config\n"
13409
"\n"
13410
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13411
"\n"
13412
"dn: olcDatabase={-1}frontend,cn=config\n"
13413
"\n"
13414
"dn: olcDatabase={0}config,cn=config\n"
13415
"\n"
13416
"dn: olcDatabase={1}hdb,cn=config\n"
13417
msgstr ""
13418
13419
#: serverguide/C/network-auth.xml:334(para)
13420
msgid ""
13421
"The output above is the current configuration options for the "
13422
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13423
msgstr ""
13424
13425
#: serverguide/C/network-auth.xml:342(para)
13426
msgid ""
13427
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13428
"another attribute to the index list using "
13429
"<application>ldapmodify</application>:"
13430
msgstr ""
13431
13432
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13433
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13434
msgstr ""
13435
13436
#: serverguide/C/network-auth.xml:356(userinput)
13437
#, no-wrap
13438
msgid ""
13439
"dn: olcDatabase={1}hdb,cn=config\n"
13440
"add: olcDbIndex\n"
13441
"olcDbIndex: uidNumber eq"
13442
msgstr ""
13443
13444
#: serverguide/C/network-auth.xml:352(computeroutput)
13445
#, no-wrap
13446
msgid ""
13447
"\n"
13448
"SASL/EXTERNAL authentication started\n"
13449
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13450
"SASL SSF: 0\n"
13451
"<placeholder-1/>\n"
13452
"\n"
13453
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13454
msgstr ""
13455
13456
#: serverguide/C/network-auth.xml:364(para)
13457
msgid ""
13458
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13459
"exit the utility."
13460
msgstr ""
13461
13462
#: serverguide/C/network-auth.xml:371(para)
13463
msgid ""
13464
"<application>ldapmodify</application> can also read the changes from a file. "
13465
"Copy and paste the following into a file named "
13466
"<filename>uid_index.ldif</filename>:"
13467
msgstr ""
13468
13469
#: serverguide/C/network-auth.xml:376(programlisting)
13470
#, no-wrap
13471
msgid ""
13472
"\n"
13473
"dn: olcDatabase={1}hdb,cn=config\n"
13474
"add: olcDbIndex\n"
13475
"olcDbIndex: uid eq,pres,sub\n"
13476
msgstr ""
13477
13478
#: serverguide/C/network-auth.xml:382(para)
13479
msgid "Then execute <application>ldapmodify</application>:"
13480
msgstr ""
13481
13482
#: serverguide/C/network-auth.xml:387(command)
13483
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13484
msgstr ""
13485
13486
#: serverguide/C/network-auth.xml:391(computeroutput)
13487
#, no-wrap
13488
msgid ""
13489
"\n"
13490
"SASL/EXTERNAL authentication started\n"
13491
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13492
"SASL SSF: 0\n"
13493
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13494
msgstr ""
13495
13496
#: serverguide/C/network-auth.xml:399(para)
13497
msgid "The file method is very useful for large changes."
13498
msgstr ""
13499
13500
#: serverguide/C/network-auth.xml:406(para)
13501
msgid ""
13502
"Adding additional <emphasis>schemas</emphasis> to "
13503
"<application>slapd</application> requires the schema to be converted to LDIF "
13504
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13505
"directory contains some schema files already converted to LDIF format as "
13506
"demonstrated in the previous section. Fortunately, the "
13507
"<application>slapd</application> program can be used to automate the "
13508
"conversion. The following example will add the "
13509
"<emphasis>dyngoup.schema</emphasis>:"
13510
msgstr ""
13511
13512
#: serverguide/C/network-auth.xml:416(para)
13513
msgid ""
13514
"First, create a conversion <filename>schema_convert.conf</filename> file "
13515
"containing the following lines:"
13516
msgstr ""
13517
13518
#: serverguide/C/network-auth.xml:421(programlisting)
13519
#, no-wrap
13520
msgid ""
13521
"\n"
13522
"include /etc/ldap/schema/core.schema\n"
13523
"include /etc/ldap/schema/collective.schema\n"
13524
"include /etc/ldap/schema/corba.schema\n"
13525
"include /etc/ldap/schema/cosine.schema\n"
13526
"include /etc/ldap/schema/duaconf.schema\n"
13527
"include /etc/ldap/schema/dyngroup.schema\n"
13528
"include /etc/ldap/schema/inetorgperson.schema\n"
13529
"include /etc/ldap/schema/java.schema\n"
13530
"include /etc/ldap/schema/misc.schema\n"
13531
"include /etc/ldap/schema/nis.schema\n"
13532
"include /etc/ldap/schema/openldap.schema\n"
13533
"include /etc/ldap/schema/ppolicy.schema\n"
13534
msgstr ""
13535
13536
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13537
msgid "Next, create a temporary directory to hold the output:"
13538
msgstr ""
13539
13540
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13541
msgid "mkdir /tmp/ldif_output"
13542
msgstr ""
13543
13544
#: serverguide/C/network-auth.xml:450(para)
13545
msgid ""
13546
"Now using <application>slapcat</application> convert the schema files to "
13547
"LDIF:"
13548
msgstr ""
13549
13550
#: serverguide/C/network-auth.xml:455(command)
13551
msgid ""
13552
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13553
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13554
msgstr ""
13555
13556
#: serverguide/C/network-auth.xml:458(para)
13557
msgid ""
13558
"Adjust the configuration file name and temporary directory names if yours "
13559
"are different. Also, it may be worthwhile to keep the "
13560
"<filename>ldif_output</filename> directory around in case you want to add "
13561
"additional schemas in the future."
13562
msgstr ""
13563
13564
#: serverguide/C/network-auth.xml:467(para)
13565
msgid ""
13566
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13567
"following attributes:"
13568
msgstr ""
13569
13570
#: serverguide/C/network-auth.xml:471(programlisting)
13571
#, no-wrap
13572
msgid ""
13573
"\n"
13574
"dn: cn=dyngroup,cn=schema,cn=config\n"
13575
"...\n"
13576
"cn: dyngroup\n"
13577
msgstr ""
13578
13579
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13580
msgid "And remove the following lines from the bottom of the file:"
13581
msgstr ""
13582
13583
#: serverguide/C/network-auth.xml:481(programlisting)
13584
#, no-wrap
13585
msgid ""
13586
"\n"
13587
"structuralObjectClass: olcSchemaConfig\n"
13588
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13589
"creatorsName: cn=config\n"
13590
"createTimestamp: 20080826021140Z\n"
13591
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13592
"modifiersName: cn=config\n"
13593
"modifyTimestamp: 20080826021140Z\n"
13594
msgstr ""
13595
13596
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13597
msgid ""
13598
"The attribute values will vary, just be sure the attributes are removed."
13599
msgstr ""
13600
13601
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13602
msgid ""
13603
"Finally, using the <application>ldapadd</application> utility, add the new "
13604
"schema to the directory:"
13605
msgstr ""
13606
13607
#: serverguide/C/network-auth.xml:506(command)
13608
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13609
msgstr ""
13610
13611
#: serverguide/C/network-auth.xml:512(para)
13612
msgid ""
13613
"There should now be a <emphasis>dn: "
13614
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13615
msgstr ""
13616
13617
#: serverguide/C/network-auth.xml:522(title)
13618
msgid "LDAP Replication"
13619
msgstr ""
13620
13621
#: serverguide/C/network-auth.xml:524(para)
13622
msgid ""
13623
"LDAP often quickly becomes a highly critical service to the network. "
13624
"Multiple systems will come to depend on LDAP for authentication, "
13625
"authorization, configuration, etc. It is a good idea to setup a redundant "
13626
"system through replication."
13627
msgstr ""
13628
13629
#: serverguide/C/network-auth.xml:530(para)
13630
msgid ""
13631
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13632
"Syncrepl allows the changes to be synced using a "
13633
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13634
"provider sends directory changes to consumers."
13635
msgstr ""
13636
13637
#: serverguide/C/network-auth.xml:537(title)
13638
msgid "Provider Configuration"
13639
msgstr ""
13640
13641
#: serverguide/C/network-auth.xml:539(para)
13642
msgid ""
13643
"The following is an example of a <emphasis>Single-Master</emphasis> "
13644
"configuration. In this configuration one OpenLDAP server is configured as a "
13645
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13646
msgstr ""
13647
13648
#: serverguide/C/network-auth.xml:547(para)
13649
msgid ""
13650
"First, configure the provider server. Copy the following to a file named "
13651
"<filename>provider_sync.ldif</filename>:"
13652
msgstr ""
13653
13654
#: serverguide/C/network-auth.xml:552(programlisting)
13655
#, no-wrap
13656
msgid ""
13657
"\n"
13658
"# Add indexes to the frontend db.\n"
13659
"dn: olcDatabase={1}hdb,cn=config\n"
13660
"changetype: modify\n"
13661
"add: olcDbIndex\n"
13662
"olcDbIndex: entryCSN eq\n"
13663
"-\n"
13664
"add: olcDbIndex\n"
13665
"olcDbIndex: entryUUID eq\n"
13666
"\n"
13667
"#Load the syncprov and accesslog modules.\n"
13668
"dn: cn=module{0},cn=config\n"
13669
"changetype: modify\n"
13670
"add: olcModuleLoad\n"
13671
"olcModuleLoad: syncprov\n"
13672
"-\n"
13673
"add: olcModuleLoad\n"
13674
"olcModuleLoad: accesslog\n"
13675
"\n"
13676
"# Accesslog database definitions\n"
13677
"dn: olcDatabase={2}hdb,cn=config\n"
13678
"objectClass: olcDatabaseConfig\n"
13679
"objectClass: olcHdbConfig\n"
13680
"olcDatabase: {2}hdb\n"
13681
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13682
"olcSuffix: cn=accesslog\n"
13683
"olcRootDN: cn=admin,dc=example,dc=com\n"
13684
"olcDbIndex: default eq\n"
13685
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13686
"\n"
13687
"# Accesslog db syncprov.\n"
13688
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13689
"changetype: add\n"
13690
"objectClass: olcOverlayConfig\n"
13691
"objectClass: olcSyncProvConfig\n"
13692
"olcOverlay: syncprov\n"
13693
"olcSpNoPresent: TRUE\n"
13694
"olcSpReloadHint: TRUE\n"
13695
"\n"
13696
"# syncrepl Provider for primary db\n"
13697
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13698
"changetype: add\n"
13699
"objectClass: olcOverlayConfig\n"
13700
"objectClass: olcSyncProvConfig\n"
13701
"olcOverlay: syncprov\n"
13702
"olcSpNoPresent: TRUE\n"
13703
"\n"
13704
"# accesslog overlay definitions for primary db\n"
13705
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13706
"objectClass: olcOverlayConfig\n"
13707
"objectClass: olcAccessLogConfig\n"
13708
"olcOverlay: accesslog\n"
13709
"olcAccessLogDB: cn=accesslog\n"
13710
"olcAccessLogOps: writes\n"
13711
"olcAccessLogSuccess: TRUE\n"
13712
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13713
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13714
msgstr ""
13715
13716
#: serverguide/C/network-auth.xml:614(para)
13717
msgid ""
13718
"The <application>AppArmor</application> profile for "
13719
"<application>slapd</application> will need to be adjusted for the accesslog "
13720
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13721
"adding:"
13722
msgstr ""
13723
13724
#: serverguide/C/network-auth.xml:619(programlisting)
13725
#, no-wrap
13726
msgid ""
13727
"\n"
13728
" /var/lib/ldap/accesslog/ r,\n"
13729
" /var/lib/ldap/accesslog/** rwk,\n"
13730
msgstr ""
13731
13732
#: serverguide/C/network-auth.xml:624(para)
13733
msgid ""
13734
"Then create the directory, reload the <application>apparmor</application> "
13735
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13736
msgstr ""
13737
13738
#: serverguide/C/network-auth.xml:630(command)
13739
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13740
msgstr ""
13741
13742
#: serverguide/C/network-auth.xml:631(command)
13743
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13744
msgstr ""
13745
13746
#: serverguide/C/network-auth.xml:636(para)
13747
msgid ""
13748
"Using the <emphasis>-u openldap</emphasis> option with the "
13749
"<application>sudo</application> commands above removes the need to adjust "
13750
"permissions for the new directory later."
13751
msgstr ""
13752
13753
#: serverguide/C/network-auth.xml:645(para)
13754
msgid ""
13755
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13756
"directory:"
13757
msgstr ""
13758
13759
#: serverguide/C/network-auth.xml:649(programlisting)
13760
#, no-wrap
13761
msgid ""
13762
"\n"
13763
"olcRootDN: cn=admin,dc=example,dc=com\n"
13764
msgstr ""
13765
13766
#: serverguide/C/network-auth.xml:657(para)
13767
msgid ""
13768
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13769
msgstr ""
13770
13771
#: serverguide/C/network-auth.xml:662(command)
13772
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13773
msgstr ""
13774
13775
#: serverguide/C/network-auth.xml:669(para)
13776
msgid "Restart <application>slapd</application>:"
13777
msgstr ""
13778
13779
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13780
msgid "sudo /etc/init.d/slapd restart"
13781
msgstr ""
13782
13783
#: serverguide/C/network-auth.xml:680(para)
13784
msgid ""
13785
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13786
"to configure a <emphasis>Consumer</emphasis> server."
13787
msgstr ""
13788
13789
#: serverguide/C/network-auth.xml:687(title)
13790
msgid "Consumer Configuration"
13791
msgstr ""
13792
13793
#: serverguide/C/network-auth.xml:692(para)
13794
msgid ""
13795
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13796
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13797
"configuration steps."
13798
msgstr ""
13799
13800
#: serverguide/C/network-auth.xml:697(para)
13801
msgid "Add the additional schema files:"
13802
msgstr ""
13803
13804
#: serverguide/C/network-auth.xml:707(para)
13805
msgid ""
13806
"Also, create, or copy from the provider server, the "
13807
"<filename>backend.example.com.ldif</filename>"
13808
msgstr ""
13809
13810
#: serverguide/C/network-auth.xml:711(programlisting)
13811
#, no-wrap
13812
msgid ""
13813
"\n"
13814
"# Load dynamic backend modules\n"
13815
"dn: cn=module,cn=config\n"
13816
"objectClass: olcModuleList\n"
13817
"cn: module\n"
13818
"olcModulepath: /usr/lib/ldap\n"
13819
"olcModuleload: back_hdb\n"
13820
"\n"
13821
"# Database settings\n"
13822
"dn: olcDatabase=hdb,cn=config\n"
13823
"objectClass: olcDatabaseConfig\n"
13824
"objectClass: olcHdbConfig\n"
13825
"olcDatabase: {1}hdb\n"
13826
"olcSuffix: dc=example,dc=com\n"
13827
"olcDbDirectory: /var/lib/ldap\n"
13828
"olcRootDN: cn=admin,dc=example,dc=com\n"
13829
"olcRootPW: secret\n"
13830
"olcDbConfig: set_cachesize 0 2097152 0\n"
13831
"olcDbConfig: set_lk_max_objects 1500\n"
13832
"olcDbConfig: set_lk_max_locks 1500\n"
13833
"olcDbConfig: set_lk_max_lockers 1500\n"
13834
"olcDbIndex: objectClass eq\n"
13835
"olcLastMod: TRUE\n"
13836
"olcDbCheckpoint: 512 30\n"
13837
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13838
"by anonymous auth by self write by * none\n"
13839
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13840
"olcAccess: to dn.base=\"\" by * read\n"
13841
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13842
msgstr ""
13843
13844
#: serverguide/C/network-auth.xml:741(para)
13845
msgid "And add the LDIF by entering:"
13846
msgstr ""
13847
13848
#: serverguide/C/network-auth.xml:752(para)
13849
msgid ""
13850
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
13851
"listed above, and add it:"
13852
msgstr ""
13853
13854
#: serverguide/C/network-auth.xml:760(para)
13855
msgid ""
13856
"The two severs should now have the same configuration except for the "
13857
"<emphasis>Syncrepl</emphasis> options."
13858
msgstr ""
13859
13860
#: serverguide/C/network-auth.xml:768(para)
13861
msgid ""
13862
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
13863
msgstr ""
13864
13865
#: serverguide/C/network-auth.xml:772(programlisting)
13866
#, no-wrap
13867
msgid ""
13868
"\n"
13869
"#Load the syncprov module.\n"
13870
"dn: cn=module{0},cn=config\n"
13871
"changetype: modify\n"
13872
"add: olcModuleLoad\n"
13873
"olcModuleLoad: syncprov\n"
13874
"\n"
13875
"# syncrepl specific indices\n"
13876
"dn: olcDatabase={1}hdb,cn=config\n"
13877
"changetype: modify\n"
13878
"add: olcDbIndex\n"
13879
"olcDbIndex: entryUUID eq\n"
13880
"-\n"
13881
"add: olcSyncRepl\n"
13882
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
13883
"binddn=\"cn=admin,dc=example,dc=com\" \n"
13884
" credentials=secret searchbase=\"dc=example,dc=com\" "
13885
"logbase=\"cn=accesslog\" \n"
13886
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
13887
"schemachecking=on \n"
13888
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
13889
"-\n"
13890
"add: olcUpdateRef\n"
13891
"olcUpdateRef: ldap://ldap01.example.com\n"
13892
msgstr ""
13893
13894
#: serverguide/C/network-auth.xml:795(para)
13895
msgid "You will probably want to change the following attributes:"
13896
msgstr ""
13897
13898
#: serverguide/C/network-auth.xml:800(para)
13899
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
13900
msgstr ""
13901
13902
#: serverguide/C/network-auth.xml:801(emphasis)
13903
msgid "binddn"
13904
msgstr ""
13905
13906
#: serverguide/C/network-auth.xml:802(emphasis)
13907
msgid "credentials"
13908
msgstr ""
13909
13910
#: serverguide/C/network-auth.xml:803(emphasis)
13911
msgid "searchbase"
13912
msgstr ""
13913
13914
#: serverguide/C/network-auth.xml:804(emphasis)
13915
msgid "olcUpdateRef:"
13916
msgstr ""
13917
13918
#: serverguide/C/network-auth.xml:810(para)
13919
msgid "Add the LDIF file to the configuration tree:"
13920
msgstr ""
13921
13922
#: serverguide/C/network-auth.xml:815(command)
13923
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
13924
msgstr ""
13925
13926
#: serverguide/C/network-auth.xml:821(para)
13927
msgid ""
13928
"The frontend database should now sync between servers. You can add "
13929
"additional servers using the steps above as the need arises."
13930
msgstr ""
13931
13932
#: serverguide/C/network-auth.xml:831(programlisting)
13933
#, no-wrap
13934
msgid "127.0.0.1\tldap01.example.com ldap01"
13935
msgstr ""
13936
13937
#: serverguide/C/network-auth.xml:827(para)
13938
msgid ""
13939
"The <application>slapd</application> daemon will send log information to "
13940
"<filename>/var/log/syslog</filename> by default. So if all does "
13941
"<emphasis>not</emphasis> go well check there for errors and other "
13942
"troubleshooting information. Also, be sure that each server knows it's Fully "
13943
"Qualified Domain Name (FQDN). This is configured in "
13944
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
13945
msgstr ""
13946
13947
#: serverguide/C/network-auth.xml:839(title)
13948
msgid "Setting up ACL"
13949
msgstr ""
13950
13951
#: serverguide/C/network-auth.xml:841(para)
13952
msgid ""
13953
"Authentication requires access to the password field, that should be not "
13954
"accessible by default. Also, in order for users to change their own "
13955
"password, using <command>passwd</command> or other utilities, "
13956
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
13957
"authenticated."
13958
msgstr ""
13959
13960
#: serverguide/C/network-auth.xml:848(para)
13961
msgid ""
13962
"To view the Access Control List (ACL), use the "
13963
"<application>ldapsearch</application> utility:"
13964
msgstr ""
13965
13966
#: serverguide/C/network-auth.xml:853(command)
13967
msgid ""
13968
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
13969
"olcAccess"
13970
msgstr ""
13971
13972
#: serverguide/C/network-auth.xml:857(computeroutput)
13973
#, no-wrap
13974
msgid ""
13975
"Enter LDAP Password: \n"
13976
"dn: olcDatabase={1}hdb,cn=config\n"
13977
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
13978
"dn=\"cn=admin,dc=exampl\n"
13979
" e,dc=com\" write by anonymous auth by self write by * none\n"
13980
"olcAccess: {1}to dn.base=\"\" by * read\n"
13981
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13982
msgstr ""
13983
13984
#: serverguide/C/network-auth.xml:869(title)
13985
msgid "TLS and SSL"
13986
msgstr ""
13987
13988
#: serverguide/C/network-auth.xml:871(para)
13989
msgid ""
13990
"When authenticating to an OpenLDAP server it is best to do so using an "
13991
"encrypted session. This can be accomplished using Transport Layer Security "
13992
"(TLS) and/or Secure Sockets Layer (SSL)."
13993
msgstr ""
13994
13995
#: serverguide/C/network-auth.xml:876(para)
13996
msgid ""
13997
"The first step in the process is to obtain or create a "
13998
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
13999
"is compiled using the <application>gnutls</application> library, the "
14000
"<application>certtool</application> utility will be used to create "
14001
"certificates."
14002
msgstr ""
14003
14004
#: serverguide/C/network-auth.xml:885(para)
14005
msgid ""
14006
"First, install <application>gnutls-bin</application> by entering the "
14007
"following in a terminal:"
14008
msgstr ""
14009
14010
#: serverguide/C/network-auth.xml:890(command)
14011
msgid "sudo apt-get install gnutls-bin"
14012
msgstr ""
14013
14014
#: serverguide/C/network-auth.xml:896(para)
14015
msgid ""
14016
"Next, create a private key for the <emphasis>Certificate "
14017
"Authority</emphasis> (CA):"
14018
msgstr ""
14019
14020
#: serverguide/C/network-auth.xml:901(command)
14021
msgid ""
14022
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
14023
msgstr ""
14024
14025
#: serverguide/C/network-auth.xml:907(para)
14026
msgid ""
14027
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
14028
"CA certificate containing:"
14029
msgstr ""
14030
14031
#: serverguide/C/network-auth.xml:911(programlisting)
14032
#, no-wrap
14033
msgid ""
14034
"\n"
14035
"cn = Example Company\n"
14036
"ca\n"
14037
"cert_signing_key\n"
14038
msgstr ""
14039
14040
#: serverguide/C/network-auth.xml:920(para)
14041
msgid "Now create the self-signed CA certificate:"
14042
msgstr ""
14043
14044
#: serverguide/C/network-auth.xml:925(command)
14045
msgid ""
14046
"sudo certtool --generate-self-signed --load-privkey "
14047
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
14048
"/etc/ssl/certs/cacert.pem"
14049
msgstr ""
14050
14051
#: serverguide/C/network-auth.xml:932(para)
14052
msgid "Make a private key for the server:"
14053
msgstr ""
14054
14055
#: serverguide/C/network-auth.xml:937(command)
14056
msgid ""
14057
"sudo sh -c \"certtool --generate-privkey > "
14058
"/etc/ssl/private/ldap01_slapd_key.pem\""
14059
msgstr ""
14060
14061
#: serverguide/C/network-auth.xml:941(para)
14062
msgid ""
14063
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
14064
"hostname. Naming the certificate and key for the host and service that will "
14065
"be using them will help keep filenames and paths straight."
14066
msgstr ""
14067
14068
#: serverguide/C/network-auth.xml:950(para)
14069
msgid ""
14070
"To sign the server's certificate with the CA, create the "
14071
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
14072
msgstr ""
14073
14074
#: serverguide/C/network-auth.xml:954(programlisting)
14075
#, no-wrap
14076
msgid ""
14077
"\n"
14078
"organization = Example Company\n"
14079
"cn = ldap01.example.com\n"
14080
"tls_www_server\n"
14081
"encryption_key\n"
14082
"signing_key\n"
14083
msgstr ""
14084
14085
#: serverguide/C/network-auth.xml:965(para)
14086
msgid "Create the server's certificate:"
14087
msgstr ""
14088
14089
#: serverguide/C/network-auth.xml:970(command)
14090
msgid ""
14091
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
14092
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
14093
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
14094
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
14095
msgstr ""
14096
14097
#: serverguide/C/network-auth.xml:978(para)
14098
msgid ""
14099
"Once you have a certificate, key, and CA cert installed, use "
14100
"<application>ldapmodify</application> to add the new configuration options:"
14101
msgstr ""
14102
14103
#: serverguide/C/network-auth.xml:989(userinput)
14104
#, no-wrap
14105
msgid ""
14106
"dn: cn=config\n"
14107
"add: olcTLSCACertificateFile\n"
14108
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14109
"-\n"
14110
"add: olcTLSCertificateFile\n"
14111
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
14112
"-\n"
14113
"add: olcTLSCertificateKeyFile\n"
14114
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
14115
msgstr ""
14116
14117
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
14118
#, no-wrap
14119
msgid ""
14120
"Enter LDAP Password:\n"
14121
"<placeholder-1/>\n"
14122
"\n"
14123
"modifying entry \"cn=config\"\n"
14124
msgstr ""
14125
14126
#: serverguide/C/network-auth.xml:1004(para)
14127
msgid ""
14128
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14129
"<filename>ldap01_slapd_key.pem</filename>, and "
14130
"<filename>cacert.pem</filename> names if yours are different."
14131
msgstr ""
14132
14133
#: serverguide/C/network-auth.xml:1010(para)
14134
msgid ""
14135
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14136
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14137
msgstr ""
14138
14139
#: serverguide/C/network-auth.xml:1014(programlisting)
14140
#, no-wrap
14141
msgid ""
14142
"\n"
14143
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14144
msgstr ""
14145
14146
#: serverguide/C/network-auth.xml:1018(para)
14147
msgid ""
14148
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14149
msgstr ""
14150
14151
#: serverguide/C/network-auth.xml:1023(command)
14152
msgid "sudo adduser openldap ssl-cert"
14153
msgstr ""
14154
14155
#: serverguide/C/network-auth.xml:1024(command)
14156
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14157
msgstr ""
14158
14159
#: serverguide/C/network-auth.xml:1025(command)
14160
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14161
msgstr ""
14162
14163
#: serverguide/C/network-auth.xml:1029(para)
14164
msgid ""
14165
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14166
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14167
"adjust the commands appropriately."
14168
msgstr ""
14169
14170
#: serverguide/C/network-auth.xml:1035(para)
14171
msgid "Finally, restart <application>slapd</application>:"
14172
msgstr ""
14173
14174
#: serverguide/C/network-auth.xml:1043(para)
14175
msgid ""
14176
"The <application>slapd</application> daemon should now be listening for "
14177
"LDAPS connections and be able to use STARTTLS during authentication."
14178
msgstr ""
14179
14180
#: serverguide/C/network-auth.xml:1049(para)
14181
msgid ""
14182
"If you run into troubles with the server not starting, check the "
14183
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14184
"it is likely there is a configuration problem. Check that the certificate is "
14185
"signed by the authority from in the files configured, and that the ssl-cert "
14186
"group has read permissions on the private key."
14187
msgstr ""
14188
14189
#: serverguide/C/network-auth.xml:1061(title)
14190
msgid "TLS Replication"
14191
msgstr ""
14192
14193
#: serverguide/C/network-auth.xml:1063(para)
14194
msgid ""
14195
"If you have setup <application>Syncrepl</application> between servers, it is "
14196
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14197
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14198
"linkend=\"openldap-server-replication\"/>."
14199
msgstr ""
14200
14201
#: serverguide/C/network-auth.xml:1069(para)
14202
msgid ""
14203
"Assuming you have followed the above instructions and created a CA "
14204
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14205
"server. Follow the following instructions to create a certificate and key "
14206
"for the <emphasis>Consumer</emphasis> server."
14207
msgstr ""
14208
14209
#: serverguide/C/network-auth.xml:1078(para)
14210
msgid "Create a new key for the Consumer server:"
14211
msgstr ""
14212
14213
#: serverguide/C/network-auth.xml:1083(command)
14214
msgid "mkdir ldap02-ssl"
14215
msgstr ""
14216
14217
#: serverguide/C/network-auth.xml:1084(command)
14218
msgid "cd ldap02-ssl"
14219
msgstr ""
14220
14221
#: serverguide/C/network-auth.xml:1085(command)
14222
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14223
msgstr ""
14224
14225
#: serverguide/C/network-auth.xml:1089(para)
14226
msgid ""
14227
"Creating a new directory is not strictly necessary, but it will help keep "
14228
"things organized and make it easier to copy the files to the Consumer server."
14229
msgstr ""
14230
14231
#: serverguide/C/network-auth.xml:1098(para)
14232
msgid ""
14233
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14234
"server, changing the attributes to match your locality and server:"
14235
msgstr ""
14236
14237
#: serverguide/C/network-auth.xml:1103(programlisting)
14238
#, no-wrap
14239
msgid ""
14240
"\n"
14241
"country = US\n"
14242
"state = North Carolina\n"
14243
"locality = Winston-Salem\n"
14244
"organization = Example Company\n"
14245
"cn = ldap02.salem.edu\n"
14246
"tls_www_client\n"
14247
"encryption_key\n"
14248
"signing_key\n"
14249
msgstr ""
14250
14251
#: serverguide/C/network-auth.xml:1117(para)
14252
msgid "Create the certificate:"
14253
msgstr ""
14254
14255
#: serverguide/C/network-auth.xml:1122(command)
14256
msgid ""
14257
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14258
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14259
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14260
"ldap02_slapd_cert.pem"
14261
msgstr ""
14262
14263
#: serverguide/C/network-auth.xml:1130(para)
14264
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14265
msgstr ""
14266
14267
#: serverguide/C/network-auth.xml:1135(command)
14268
msgid "cp /etc/ssl/certs/cacert.pem ."
14269
msgstr ""
14270
14271
#: serverguide/C/network-auth.xml:1141(para)
14272
msgid ""
14273
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14274
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14275
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14276
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14277
"<filename>/etc/ssl/private</filename>."
14278
msgstr ""
14279
14280
#: serverguide/C/network-auth.xml:1150(para)
14281
msgid ""
14282
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14283
"by entering:"
14284
msgstr ""
14285
14286
#: serverguide/C/network-auth.xml:1160(userinput)
14287
#, no-wrap
14288
msgid ""
14289
"dn: cn=config\n"
14290
"add: olcTLSCACertificateFile\n"
14291
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14292
"-\n"
14293
"add: olcTLSCertificateFile\n"
14294
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14295
"-\n"
14296
"add: olcTLSCertificateKeyFile\n"
14297
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14298
msgstr ""
14299
14300
#: serverguide/C/network-auth.xml:1177(para)
14301
msgid ""
14302
"As with the Provider you can now edit "
14303
"<filename>/etc/default/slapd</filename> and add the "
14304
"<emphasis>ldaps:///</emphasis> parameter to the "
14305
"<emphasis>SLAPD_SERVICES</emphasis> option."
14306
msgstr ""
14307
14308
#: serverguide/C/network-auth.xml:1185(para)
14309
msgid ""
14310
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14311
"modify the <emphasis>Consumer</emphasis> server's "
14312
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14313
msgstr ""
14314
14315
#: serverguide/C/network-auth.xml:1198(userinput)
14316
#, no-wrap
14317
msgid ""
14318
"\n"
14319
"dn: olcDatabase={1}hdb,cn=config\n"
14320
"replace: olcSyncrepl\n"
14321
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14322
"binddn=\"cn=ad\n"
14323
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14324
"logbas\n"
14325
" e=\"cn=accesslog\" "
14326
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14327
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14328
"starttls=yes"
14329
msgstr ""
14330
14331
#: serverguide/C/network-auth.xml:1195(computeroutput)
14332
#, no-wrap
14333
msgid ""
14334
"SASL/EXTERNAL authentication started\n"
14335
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14336
"SASL SSF: 0\n"
14337
"<placeholder-1/>\n"
14338
"\n"
14339
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14340
msgstr ""
14341
14342
#: serverguide/C/network-auth.xml:1210(para)
14343
msgid ""
14344
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14345
"(FQDN) in the certificate, you may have to edit "
14346
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14347
msgstr ""
14348
14349
#: serverguide/C/network-auth.xml:1215(programlisting)
14350
#, no-wrap
14351
msgid ""
14352
"\n"
14353
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14354
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14355
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14356
msgstr ""
14357
14358
#: serverguide/C/network-auth.xml:1222(para)
14359
msgid ""
14360
"Finally, restart <application>slapd</application> on each of the servers:"
14361
msgstr ""
14362
14363
#: serverguide/C/network-auth.xml:1235(title)
14364
msgid "LDAP Authentication"
14365
msgstr ""
14366
14367
#: serverguide/C/network-auth.xml:1237(para)
14368
msgid ""
14369
"Once you have a working LDAP server, the <application>auth-client-"
14370
"config</application> and <application>libnss-ldap</application> packages "
14371
"take the pain out of configuring an Ubuntu client to authenticate using "
14372
"LDAP. To install the packages from, a terminal prompt enter:"
14373
msgstr ""
14374
14375
#: serverguide/C/network-auth.xml:1244(command)
14376
msgid "sudo apt-get install libnss-ldap"
14377
msgstr ""
14378
14379
#: serverguide/C/network-auth.xml:1247(para)
14380
msgid ""
14381
"During the install a menu dialog will ask you connection details about your "
14382
"LDAP server."
14383
msgstr ""
14384
14385
#: serverguide/C/network-auth.xml:1251(para)
14386
msgid ""
14387
"If you make a mistake when entering your information you can execute the "
14388
"dialog again using:"
14389
msgstr ""
14390
14391
#: serverguide/C/network-auth.xml:1256(command)
14392
msgid "sudo dpkg-reconfigure ldap-auth-config"
14393
msgstr ""
14394
14395
#: serverguide/C/network-auth.xml:1259(para)
14396
msgid ""
14397
"The results of the dialog can be seen in "
14398
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14399
"covered in the menu edit this file accordingly."
14400
msgstr ""
14401
14402
#: serverguide/C/network-auth.xml:1264(para)
14403
msgid ""
14404
"Now that <application>libnss-ldap</application> is configured enable the "
14405
"<application>auth-client-config</application> LDAP profile by entering:"
14406
msgstr ""
14407
14408
#: serverguide/C/network-auth.xml:1270(command)
14409
msgid "sudo auth-client-config -t nss -p lac_ldap"
14410
msgstr ""
14411
14412
#: serverguide/C/network-auth.xml:1275(para)
14413
msgid ""
14414
"<emphasis>-t:</emphasis> only modifies "
14415
"<filename>/etc/nsswitch.conf</filename>."
14416
msgstr ""
14417
14418
#: serverguide/C/network-auth.xml:1280(para)
14419
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14420
msgstr ""
14421
14422
#: serverguide/C/network-auth.xml:1285(para)
14423
msgid ""
14424
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14425
"config</application> profile that is part of the <application>ldap-auth-"
14426
"config</application> package."
14427
msgstr ""
14428
14429
#: serverguide/C/network-auth.xml:1292(para)
14430
msgid ""
14431
"Using the <application>pam-auth-update</application> utility, configure the "
14432
"system to use LDAP for authentication:"
14433
msgstr ""
14434
14435
#: serverguide/C/network-auth.xml:1297(command)
14436
msgid "sudo pam-auth-update"
14437
msgstr ""
14438
14439
#: serverguide/C/network-auth.xml:1300(para)
14440
msgid ""
14441
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14442
"any other authentication mechanisms you need."
14443
msgstr ""
14444
14445
#: serverguide/C/network-auth.xml:1304(para)
14446
msgid ""
14447
"You should now be able to login using user credentials stored in the LDAP "
14448
"directory."
14449
msgstr ""
14450
14451
#: serverguide/C/network-auth.xml:1309(para)
14452
msgid ""
14453
"If you are going to use LDAP to store Samba users you will need to configure "
14454
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14455
"for details."
14456
msgstr ""
14457
14458
#: serverguide/C/network-auth.xml:1317(title)
14459
msgid "User and Group Management"
14460
msgstr ""
14461
14462
#: serverguide/C/network-auth.xml:1319(para)
14463
msgid ""
14464
"The <application>ldap-utils</application> package comes with multiple "
14465
"utilities to manage the directory, but the long string of options needed, "
14466
"can make them a burden to use. The <application>ldapscripts</application> "
14467
"package contains configurable scripts to easily manage LDAP users and groups."
14468
msgstr ""
14469
14470
#: serverguide/C/network-auth.xml:1325(para)
14471
msgid "To install the package, from a terminal enter:"
14472
msgstr ""
14473
14474
#: serverguide/C/network-auth.xml:1330(command)
14475
msgid "sudo apt-get install ldapscripts"
14476
msgstr ""
14477
14478
#: serverguide/C/network-auth.xml:1333(para)
14479
msgid ""
14480
"Next, edit the config file "
14481
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14482
"changing the following to match your environment:"
14483
msgstr ""
14484
14485
#: serverguide/C/network-auth.xml:1338(programlisting)
14486
#, no-wrap
14487
msgid ""
14488
"\n"
14489
"SERVER=localhost\n"
14490
"BINDDN='cn=admin,dc=example,dc=com'\n"
14491
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14492
"SUFFIX='dc=example,dc=com'\n"
14493
"GSUFFIX='ou=Groups'\n"
14494
"USUFFIX='ou=People'\n"
14495
"MSUFFIX='ou=Computers'\n"
14496
"GIDSTART=10000\n"
14497
"UIDSTART=10000\n"
14498
"MIDSTART=10000\n"
14499
msgstr ""
14500
14501
#: serverguide/C/network-auth.xml:1351(para)
14502
msgid ""
14503
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14504
"authenticated access to the directory:"
14505
msgstr ""
14506
14507
#: serverguide/C/network-auth.xml:1356(command)
14508
msgid ""
14509
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14510
msgstr ""
14511
14512
#: serverguide/C/network-auth.xml:1357(command)
14513
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14514
msgstr ""
14515
14516
#: serverguide/C/network-auth.xml:1361(para)
14517
msgid ""
14518
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14519
"user."
14520
msgstr ""
14521
14522
#: serverguide/C/network-auth.xml:1366(para)
14523
msgid ""
14524
"The <application>ldapscripts</application> are now ready to help manage your "
14525
"directory. The following are some examples of how to use the scripts:"
14526
msgstr ""
14527
14528
#: serverguide/C/network-auth.xml:1373(para)
14529
msgid "Create a new user:"
14530
msgstr ""
14531
14532
#: serverguide/C/network-auth.xml:1377(command)
14533
msgid "sudo ldapadduser george example"
14534
msgstr ""
14535
14536
#: serverguide/C/network-auth.xml:1379(para)
14537
msgid ""
14538
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14539
"and set the user's primary group (gid) to <emphasis "
14540
"role=\"italic\">example</emphasis>"
14541
msgstr ""
14542
14543
#: serverguide/C/network-auth.xml:1385(para)
14544
msgid "Change a user's password:"
14545
msgstr ""
14546
14547
#: serverguide/C/network-auth.xml:1389(command)
14548
msgid "sudo ldapsetpasswd george"
14549
msgstr ""
14550
14551
#: serverguide/C/network-auth.xml:1390(computeroutput)
14552
#, no-wrap
14553
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14554
msgstr ""
14555
14556
#: serverguide/C/network-auth.xml:1391(userinput)
14557
#, no-wrap
14558
msgid "New Password: "
14559
msgstr ""
14560
14561
#: serverguide/C/network-auth.xml:1392(userinput)
14562
#, no-wrap
14563
msgid "New Password (verify): "
14564
msgstr ""
14565
14566
#: serverguide/C/network-auth.xml:1396(para)
14567
msgid "Delete a user:"
14568
msgstr ""
14569
14570
#: serverguide/C/network-auth.xml:1400(command)
14571
msgid "sudo ldapdeleteuser george"
14572
msgstr ""
14573
14574
#: serverguide/C/network-auth.xml:1405(para)
14575
msgid "Add a group:"
14576
msgstr ""
14577
14578
#: serverguide/C/network-auth.xml:1409(command)
14579
msgid "sudo ldapaddgroup qa"
14580
msgstr ""
14581
14582
#: serverguide/C/network-auth.xml:1413(para)
14583
msgid "Delete a group:"
14584
msgstr ""
14585
14586
#: serverguide/C/network-auth.xml:1417(command)
14587
msgid "sudo ldapdeletegroup qa"
14588
msgstr ""
14589
14590
#: serverguide/C/network-auth.xml:1421(para)
14591
msgid "Add a user to a group:"
14592
msgstr ""
14593
14594
#: serverguide/C/network-auth.xml:1425(command)
14595
msgid "sudo ldapaddusertogroup george qa"
14596
msgstr ""
14597
14598
#: serverguide/C/network-auth.xml:1427(para)
14599
msgid ""
14600
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14601
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14602
"role=\"italic\">george</emphasis>."
14603
msgstr ""
14604
14605
#: serverguide/C/network-auth.xml:1433(para)
14606
msgid "Remove a user from a group:"
14607
msgstr ""
14608
14609
#: serverguide/C/network-auth.xml:1437(command)
14610
msgid "sudo ldapdeleteuserfromgroup george qa"
14611
msgstr ""
14612
14613
#: serverguide/C/network-auth.xml:1439(para)
14614
msgid ""
14615
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14616
"<emphasis role=\"italic\">qa</emphasis> group."
14617
msgstr ""
14618
14619
#: serverguide/C/network-auth.xml:1445(para)
14620
msgid ""
14621
"The <application>ldapmodifyuser</application> script allows you to add, "
14622
"remove, or replace a user's attributes. The script uses the same syntax as "
14623
"the <application>ldapmodify</application> utility. For example:"
14624
msgstr ""
14625
14626
#: serverguide/C/network-auth.xml:1450(command)
14627
msgid "sudo ldapmodifyuser george"
14628
msgstr ""
14629
14630
#: serverguide/C/network-auth.xml:1451(computeroutput)
14631
#, no-wrap
14632
msgid ""
14633
"# About to modify the following entry :\n"
14634
"dn: uid=george,ou=People,dc=example,dc=com\n"
14635
"objectClass: account\n"
14636
"objectClass: posixAccount\n"
14637
"cn: george\n"
14638
"uid: george\n"
14639
"uidNumber: 1001\n"
14640
"gidNumber: 1001\n"
14641
"homeDirectory: /home/george\n"
14642
"loginShell: /bin/bash\n"
14643
"gecos: george\n"
14644
"description: User account\n"
14645
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14646
"\n"
14647
"# Enter your modifications here, end with CTRL-D.\n"
14648
"dn: uid=george,ou=People,dc=example,dc=com"
14649
msgstr ""
14650
14651
#: serverguide/C/network-auth.xml:1467(userinput)
14652
#, no-wrap
14653
msgid ""
14654
"replace: gecos\n"
14655
"gecos: George Carlin"
14656
msgstr ""
14657
14658
#: serverguide/C/network-auth.xml:1470(para)
14659
msgid ""
14660
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14661
"Carlin</quote>."
14662
msgstr ""
14663
14664
#: serverguide/C/network-auth.xml:1475(para)
14665
msgid ""
14666
"Another great feature of <application>ldapscripts</application>, is the "
14667
"template system. Templates allow you to customize the attributes of user, "
14668
"group, and machine objectes. For example, to enable the "
14669
"<emphasis>user</emphasis> template edit "
14670
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14671
msgstr ""
14672
14673
#: serverguide/C/network-auth.xml:1482(programlisting)
14674
#, no-wrap
14675
msgid ""
14676
"\n"
14677
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14678
msgstr ""
14679
14680
#: serverguide/C/network-auth.xml:1486(para)
14681
msgid ""
14682
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14683
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14684
"<filename>ldapadduser.template.sample</filename> file to "
14685
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14686
msgstr ""
14687
14688
#: serverguide/C/network-auth.xml:1493(command)
14689
msgid ""
14690
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14691
"/etc/ldapscripts/ldapadduser.template"
14692
msgstr ""
14693
14694
#: serverguide/C/network-auth.xml:1496(para)
14695
msgid ""
14696
"Edit the new template to add the desired attributes. The following will "
14697
"create new user's as with an <emphasis>objectClass</emphasis> of "
14698
"<emphasis>inetOrgPerson</emphasis>:"
14699
msgstr ""
14700
14701
#: serverguide/C/network-auth.xml:1501(programlisting)
14702
#, no-wrap
14703
msgid ""
14704
"\n"
14705
"dn: uid=<user>,<usuffix>,<suffix>\n"
14706
"objectClass: inetOrgPerson\n"
14707
"objectClass: posixAccount\n"
14708
"cn: <user>\n"
14709
"sn: <ask>\n"
14710
"uid: <user>\n"
14711
"uidNumber: <uid>\n"
14712
"gidNumber: <gid>\n"
14713
"homeDirectory: <home>\n"
14714
"loginShell: <shell>\n"
14715
"gecos: <user>\n"
14716
"description: User account\n"
14717
"title: Employee\n"
14718
msgstr ""
14719
14720
#: serverguide/C/network-auth.xml:1517(para)
14721
msgid ""
14722
"Notice the <emphasis><ask></emphasis> option used for the "
14723
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14724
"<application>ldapadduser</application> to prompt you for the attribute value "
14725
"during user creation."
14726
msgstr ""
14727
14728
#: serverguide/C/network-auth.xml:1525(para)
14729
msgid ""
14730
"There are more useful scripts in the package, to see a full list enter: "
14731
"<command>dpkg -L ldapscripts | grep bin</command>"
14732
msgstr ""
14733
14734
#: serverguide/C/network-auth.xml:1534(para)
14735
msgid ""
14736
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14737
"Ubuntu Wiki</ulink> page has more details."
14738
msgstr ""
14739
14740
#: serverguide/C/network-auth.xml:1539(para)
14741
msgid ""
14742
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14743
"Home Page</ulink>"
14744
msgstr ""
14745
14746
#: serverguide/C/network-auth.xml:1544(para)
14747
msgid ""
14748
"Though starting to show it's age, a great source for in depth LDAP "
14749
"information is O'Reilly's <ulink "
14750
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14751
"Administration</ulink>"
14752
msgstr ""
14753
14754
#: serverguide/C/network-auth.xml:1550(para)
14755
msgid ""
14756
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14757
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14758
"newer versions of OpenLDAP."
14759
msgstr ""
14760
14761
#: serverguide/C/network-auth.xml:1556(para)
14762
msgid ""
14763
"For more information on <application>auth-client-config</application> see "
14764
"the man page: <command>man auth-client-config</command>."
14765
msgstr ""
14766
14767
#: serverguide/C/network-auth.xml:1561(para)
14768
msgid ""
14769
"For more details regarding the <application>ldapscripts</application> "
14770
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14771
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14772
msgstr ""
14773
14774
#: serverguide/C/network-auth.xml:1571(title)
14775
msgid "Samba and LDAP"
14776
msgstr ""
14777
14778
#: serverguide/C/network-auth.xml:1573(para)
14779
msgid ""
14780
"This section covers configuring Samba to use LDAP for user, group, and "
14781
"machine account information and authentication. The assumption is, you "
14782
"already have a working OpenLDAP directory installed and the server is "
14783
"configured to use it for authentication. See <xref linkend=\"openldap-"
14784
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14785
"setting up OpenLDAP. For more information on installing and configuring "
14786
"Samba see <xref linkend=\"windows-networking\"/>."
14787
msgstr ""
14788
14789
#: serverguide/C/network-auth.xml:1583(para)
14790
msgid ""
14791
"There are three packages needed when integrating Samba with LDAP. "
14792
"<application>samba</application>, <application>samba-doc</application>, and "
14793
"<application>smbldap-tools</application> packages . To install the packages, "
14794
"from a terminal enter:"
14795
msgstr ""
14796
14797
#: serverguide/C/network-auth.xml:1589(command)
14798
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14799
msgstr ""
14800
14801
#: serverguide/C/network-auth.xml:1592(para)
14802
msgid ""
14803
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14804
"needed, but unless you have another package or custom scripts, a method of "
14805
"managing users, groups, and computer accounts is needed."
14806
msgstr ""
14807
14808
#: serverguide/C/network-auth.xml:1599(title)
14809
msgid "OpenLDAP Configuration"
14810
msgstr ""
14811
14812
#: serverguide/C/network-auth.xml:1601(para)
14813
msgid ""
14814
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14815
"the user objects in the directory will need additional attributes. This "
14816
"section assumes you want Samba to be configured as a Windows NT domain "
14817
"controller, and will add the necessary LDAP objects and attributes."
14818
msgstr ""
14819
14820
#: serverguide/C/network-auth.xml:1609(para)
14821
msgid ""
14822
"The Samba attributes are defined in the <filename>samba.schema</filename> "
14823
"file which is part of the <application>samba-doc</application> package. The "
14824
"schema file needs to be unzipped and copied to "
14825
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
14826
msgstr ""
14827
14828
#: serverguide/C/network-auth.xml:1616(command)
14829
msgid ""
14830
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
14831
"/etc/ldap/schema/"
14832
msgstr ""
14833
14834
#: serverguide/C/network-auth.xml:1617(command)
14835
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
14836
msgstr ""
14837
14838
#: serverguide/C/network-auth.xml:1623(para)
14839
msgid ""
14840
"The <emphasis>samba</emphasis> schema needs to be added to the "
14841
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
14842
"<application>slapd</application> is also detailed in <xref "
14843
"linkend=\"openldap-configuration\"/>."
14844
msgstr ""
14845
14846
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
14847
msgid ""
14848
"First, create a configuration file named "
14849
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
14850
"containing the following lines:"
14851
msgstr ""
14852
14853
#: serverguide/C/network-auth.xml:1636(programlisting)
14854
#, no-wrap
14855
msgid ""
14856
"\n"
14857
"include /etc/ldap/schema/core.schema\n"
14858
"include /etc/ldap/schema/collective.schema\n"
14859
"include /etc/ldap/schema/corba.schema\n"
14860
"include /etc/ldap/schema/cosine.schema\n"
14861
"include /etc/ldap/schema/duaconf.schema\n"
14862
"include /etc/ldap/schema/dyngroup.schema\n"
14863
"include /etc/ldap/schema/inetorgperson.schema\n"
14864
"include /etc/ldap/schema/java.schema\n"
14865
"include /etc/ldap/schema/misc.schema\n"
14866
"include /etc/ldap/schema/nis.schema\n"
14867
"include /etc/ldap/schema/openldap.schema\n"
14868
"include /etc/ldap/schema/ppolicy.schema\n"
14869
"include /etc/ldap/schema/samba.schema\n"
14870
msgstr ""
14871
14872
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
14873
msgid ""
14874
"Now use <application>slapcat</application> to convert the schema files:"
14875
msgstr ""
14876
14877
#: serverguide/C/network-auth.xml:1671(command)
14878
msgid ""
14879
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
14880
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
14881
msgstr ""
14882
14883
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
14884
msgid ""
14885
"Change the above file and path names to match your own if they are different."
14886
msgstr ""
14887
14888
#: serverguide/C/network-auth.xml:1681(para)
14889
msgid ""
14890
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
14891
"the following attributes:"
14892
msgstr ""
14893
14894
#: serverguide/C/network-auth.xml:1685(programlisting)
14895
#, no-wrap
14896
msgid ""
14897
"\n"
14898
"dn: cn=samba,cn=schema,cn=config\n"
14899
"...\n"
14900
"cn: samba\n"
14901
msgstr ""
14902
14903
#: serverguide/C/network-auth.xml:1695(programlisting)
14904
#, no-wrap
14905
msgid ""
14906
"\n"
14907
"structuralObjectClass: olcSchemaConfig\n"
14908
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
14909
"creatorsName: cn=config\n"
14910
"createTimestamp: 20080827045234Z\n"
14911
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
14912
"modifiersName: cn=config\n"
14913
"modifyTimestamp: 20080827045234Z\n"
14914
msgstr ""
14915
14916
#: serverguide/C/network-auth.xml:1720(command)
14917
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
14918
msgstr ""
14919
14920
#: serverguide/C/network-auth.xml:1726(para)
14921
msgid ""
14922
"There should now be a <emphasis>dn: "
14923
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
14924
"sequential schema, entry in the cn=config tree."
14925
msgstr ""
14926
14927
#: serverguide/C/network-auth.xml:1734(para)
14928
msgid ""
14929
"Copy and paste the following into a file named "
14930
"<filename>samba_indexes.ldif</filename>:"
14931
msgstr ""
14932
14933
#: serverguide/C/network-auth.xml:1738(programlisting)
14934
#, no-wrap
14935
msgid ""
14936
"\n"
14937
"dn: olcDatabase={1}hdb,cn=config\n"
14938
"changetype: modify\n"
14939
"add: olcDbIndex\n"
14940
"olcDbIndex: uidNumber eq\n"
14941
"olcDbIndex: gidNumber eq\n"
14942
"olcDbIndex: loginShell eq\n"
14943
"olcDbIndex: uid eq,pres,sub\n"
14944
"olcDbIndex: memberUid eq,pres,sub\n"
14945
"olcDbIndex: uniqueMember eq,pres\n"
14946
"olcDbIndex: sambaSID eq\n"
14947
"olcDbIndex: sambaPrimaryGroupSID eq\n"
14948
"olcDbIndex: sambaGroupType eq\n"
14949
"olcDbIndex: sambaSIDList eq\n"
14950
"olcDbIndex: sambaDomainName eq\n"
14951
"olcDbIndex: default sub\n"
14952
msgstr ""
14953
14954
#: serverguide/C/network-auth.xml:1756(para)
14955
msgid ""
14956
"Using the <application>ldapmodify</application> utility load the new indexes:"
14957
msgstr ""
14958
14959
#: serverguide/C/network-auth.xml:1761(command)
14960
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
14961
msgstr ""
14962
14963
#: serverguide/C/network-auth.xml:1763(para)
14964
msgid ""
14965
"If all went well you should see the new indexes using "
14966
"<application>ldapsearch</application>:"
14967
msgstr ""
14968
14969
#: serverguide/C/network-auth.xml:1768(command)
14970
msgid ""
14971
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
14972
msgstr ""
14973
14974
#: serverguide/C/network-auth.xml:1774(para)
14975
msgid ""
14976
"Next, configure the <application>smbldap-tools</application> package to "
14977
"match your environment. The package comes with a configuration script that "
14978
"will ask questions about the needed options. To run the script enter:"
14979
msgstr ""
14980
14981
#: serverguide/C/network-auth.xml:1780(command)
14982
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
14983
msgstr ""
14984
14985
#: serverguide/C/network-auth.xml:1781(command)
14986
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
14987
msgstr ""
14988
14989
#: serverguide/C/network-auth.xml:1784(para)
14990
msgid ""
14991
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
14992
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
14993
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
14994
"configure script, so if you made any mistakes while executing the script it "
14995
"may be simpler to edit the file appropriately."
14996
msgstr ""
14997
14998
#: serverguide/C/network-auth.xml:1794(para)
14999
msgid ""
15000
"The <application>smbldap-populate</application> script will add the "
15001
"necessary users, groups, and LDAP objects required for Samba. It is a good "
15002
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
15003
"<application>slapcat</application> before executing the command:"
15004
msgstr ""
15005
15006
#: serverguide/C/network-auth.xml:1801(command)
15007
msgid "sudo slapcat -l backup.ldif"
15008
msgstr ""
15009
15010
#: serverguide/C/network-auth.xml:1807(para)
15011
msgid ""
15012
"Once you have a current backup execute <application>smbldap-"
15013
"populate</application> by entering:"
15014
msgstr ""
15015
15016
#: serverguide/C/network-auth.xml:1812(command)
15017
msgid "sudo smbldap-populate"
15018
msgstr ""
15019
15020
#: serverguide/C/network-auth.xml:1816(para)
15021
msgid ""
15022
"You can create an LDIF file containing the new Samba objects by executing "
15023
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
15024
"look over the changes making sure everything is correct."
15025
msgstr ""
15026
15027
#: serverguide/C/network-auth.xml:1824(para)
15028
msgid ""
15029
"Your LDAP directory now has the necessary domain information to authenticate "
15030
"Samba users."
15031
msgstr ""
15032
15033
#: serverguide/C/network-auth.xml:1830(title)
15034
msgid "Samba Configuration"
15035
msgstr ""
15036
15037
#: serverguide/C/network-auth.xml:1832(para)
15038
msgid ""
15039
"There a multiple ways to configure Samba for details on some common "
15040
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
15041
"Samba to use LDAP, edit the main Samba configuration file "
15042
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
15043
"backend</emphasis> option and adding the following:"
15044
msgstr ""
15045
15046
#: serverguide/C/network-auth.xml:1838(programlisting)
15047
#, no-wrap
15048
msgid ""
15049
"\n"
15050
"# passdb backend = tdbsam\n"
15051
"\n"
15052
"# LDAP Settings\n"
15053
" passdb backend = ldapsam:ldap://hostname\n"
15054
" ldap suffix = dc=example,dc=com\n"
15055
" ldap user suffix = ou=People\n"
15056
" ldap group suffix = ou=Groups\n"
15057
" ldap machine suffix = ou=Computers\n"
15058
" ldap idmap suffix = ou=Idmap\n"
15059
" ldap admin dn = cn=admin,dc=example,dc=com\n"
15060
" ldap ssl = start tls\n"
15061
" ldap passwd sync = yes\n"
15062
"...\n"
15063
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
15064
msgstr ""
15065
15066
#: serverguide/C/network-auth.xml:1855(para)
15067
msgid "Restart <application>samba</application> to enable the new settings:"
15068
msgstr ""
15069
15070
#: serverguide/C/network-auth.xml:1863(para)
15071
msgid ""
15072
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
15073
"enter:"
15074
msgstr ""
15075
15076
#: serverguide/C/network-auth.xml:1868(command)
15077
msgid "sudo smbpasswd -w secret"
15078
msgstr ""
15079
15080
#: serverguide/C/network-auth.xml:1872(para)
15081
msgid ""
15082
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
15083
"password."
15084
msgstr ""
15085
15086
#: serverguide/C/network-auth.xml:1877(para)
15087
msgid ""
15088
"If you currently have users in LDAP, and you want them to authenticate using "
15089
"Samba, they will need some Samba attributes defined in the "
15090
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
15091
"users using the <application>smbpasswd</application> utility, replacing "
15092
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
15093
msgstr ""
15094
15095
#: serverguide/C/network-auth.xml:1885(command)
15096
msgid "sudo smbpasswd -a username"
15097
msgstr ""
15098
15099
#: serverguide/C/network-auth.xml:1888(para)
15100
msgid "You will then be asked to enter the user's password."
15101
msgstr ""
15102
15103
#: serverguide/C/network-auth.xml:1892(para)
15104
msgid ""
15105
"To add new user, group, and machine accounts use the utilities from the "
15106
"<application>smbldap-tools</application> package. Here are some examples:"
15107
msgstr ""
15108
15109
#: serverguide/C/network-auth.xml:1899(para)
15110
msgid ""
15111
"To add a new user to LDAP with Samba attributes enter the following, "
15112
"replacing username with an actual username:"
15113
msgstr ""
15114
15115
#: serverguide/C/network-auth.xml:1903(command)
15116
msgid "sudo smbldap-useradd -a -P username"
15117
msgstr ""
15118
15119
#: serverguide/C/network-auth.xml:1905(para)
15120
msgid ""
15121
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
15122
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
15123
"passwd</application> utility after the user is created allowing you to enter "
15124
"a password for the user."
15125
msgstr ""
15126
15127
#: serverguide/C/network-auth.xml:1911(para)
15128
msgid "To remove a user from the directory enter:"
15129
msgstr ""
15130
15131
#: serverguide/C/network-auth.xml:1915(command)
15132
msgid "sudo smbldap-userdel username"
15133
msgstr ""
15134
15135
#: serverguide/C/network-auth.xml:1917(para)
15136
msgid ""
15137
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15138
"r</emphasis> option to remove the user's home directory."
15139
msgstr ""
15140
15141
#: serverguide/C/network-auth.xml:1922(para)
15142
msgid ""
15143
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15144
"groupname with an appropriate group:"
15145
msgstr ""
15146
15147
#: serverguide/C/network-auth.xml:1926(command)
15148
msgid "sudo smbldap-groupadd -a groupname"
15149
msgstr ""
15150
15151
#: serverguide/C/network-auth.xml:1928(para)
15152
msgid ""
15153
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15154
"a</emphasis> adds the Samba attributes."
15155
msgstr ""
15156
15157
#: serverguide/C/network-auth.xml:1933(para)
15158
msgid ""
15159
"To add a user to a group use <application>smbldap-groupmod</application>:"
15160
msgstr ""
15161
15162
#: serverguide/C/network-auth.xml:1937(command)
15163
msgid "sudo smbldap-groupmod -m username groupname"
15164
msgstr ""
15165
15166
#: serverguide/C/network-auth.xml:1939(para)
15167
msgid ""
15168
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15169
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15170
"listing them in <emphasis>comma separated</emphasis> format."
15171
msgstr ""
15172
15173
#: serverguide/C/network-auth.xml:1945(para)
15174
msgid ""
15175
"<application>smbldap-groupmod</application> can also be used to remove a "
15176
"user from a group:"
15177
msgstr ""
15178
15179
#: serverguide/C/network-auth.xml:1949(command)
15180
msgid "sudo smbldap-groupmod -x username groupname"
15181
msgstr ""
15182
15183
#: serverguide/C/network-auth.xml:1953(para)
15184
msgid ""
15185
"Additionally, the <application>smbldap-useradd</application> utility can add "
15186
"Samba machine accounts:"
15187
msgstr ""
15188
15189
#: serverguide/C/network-auth.xml:1957(command)
15190
msgid "sudo smbldap-useradd -t 0 -w username"
15191
msgstr ""
15192
15193
#: serverguide/C/network-auth.xml:1959(para)
15194
msgid ""
15195
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15196
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15197
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15198
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15199
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15200
"<application>smbldap-useradd</application>."
15201
msgstr ""
15202
15203
#: serverguide/C/network-auth.xml:1968(para)
15204
msgid ""
15205
"There are more useful utilities and options in the <application>smbldap-"
15206
"tools</application> package. The man page for each utility provides more "
15207
"details."
15208
msgstr ""
15209
15210
#: serverguide/C/network-auth.xml:1979(para)
15211
msgid ""
15212
"There are multiple places where LDAP and Samba is documented in the <ulink "
15213
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15214
"Collection</ulink>."
15215
msgstr ""
15216
15217
#: serverguide/C/network-auth.xml:1985(para)
15218
msgid ""
15219
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15220
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15221
msgstr ""
15222
15223
#: serverguide/C/network-auth.xml:1991(para)
15224
msgid ""
15225
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15226
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15227
msgstr ""
15228
15229
#: serverguide/C/network-auth.xml:1997(para)
15230
msgid ""
15231
"Again, for more information on <application>smbldap-tools</application> see "
15232
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15233
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15234
msgstr ""
15235
15236
#: serverguide/C/network-auth.xml:2004(para)
15237
msgid ""
15238
"Also, there is a list of <ulink "
15239
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15240
"wiki</ulink> articles with more information."
15241
msgstr ""
15242
15243
#: serverguide/C/network-auth.xml:2013(title)
15244
msgid "Kerberos"
15245
msgstr "Kerberos"
15246
15247
#: serverguide/C/network-auth.xml:2015(para)
15248
msgid ""
15249
"<application>Kerberos</application> is a network authentication system based "
15250
"on the principal of a trusted third party. The other two parties being the "
15251
"user and the service the user wishes to authenticate to. Not all services "
15252
"and applications can use Kerberos, but for those that can, it brings the "
15253
"network environment one step closer to being Single Sign On (SSO)."
15254
msgstr ""
15255
15256
#: serverguide/C/network-auth.xml:2021(para)
15257
msgid ""
15258
"This section covers installation and configuration of a Kerberos server, and "
15259
"some example client configurations."
15260
msgstr ""
15261
15262
#: serverguide/C/network-auth.xml:2028(para)
15263
msgid ""
15264
"If you are new to Kerberos there are a few terms that are good to understand "
15265
"before setting up a Kerberos server. Most of the terms will relate to things "
15266
"you may be familiar with in other environments:"
15267
msgstr ""
15268
15269
#: serverguide/C/network-auth.xml:2035(para)
15270
msgid ""
15271
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15272
"by servers need to be defined as Kerberos Principals."
15273
msgstr ""
15274
15275
#: serverguide/C/network-auth.xml:2040(para)
15276
msgid ""
15277
"<emphasis>Instances:</emphasis> are used for service principals and special "
15278
"administrative principals."
15279
msgstr ""
15280
15281
#: serverguide/C/network-auth.xml:2045(para)
15282
msgid ""
15283
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15284
"Kerberos installation. Usually the DNS domain converted to uppercase "
15285
"(EXAMPLE.COM)."
15286
msgstr ""
15287
15288
#: serverguide/C/network-auth.xml:2051(para)
15289
msgid ""
15290
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15291
"a database of all principals, the authentication server, and the ticket "
15292
"granting server. For each realm there must be at least one KDC."
15293
msgstr ""
15294
15295
#: serverguide/C/network-auth.xml:2057(para)
15296
msgid ""
15297
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15298
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15299
"password which is known only to the user and the KDC."
15300
msgstr ""
15301
15302
#: serverguide/C/network-auth.xml:2063(para)
15303
msgid ""
15304
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15305
"clients upon request."
15306
msgstr ""
15307
15308
#: serverguide/C/network-auth.xml:2068(para)
15309
msgid ""
15310
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15311
"One principal being a user and the other a service requested by the user. "
15312
"Tickets establish an encryption key used for secure communication during the "
15313
"authenticated session."
15314
msgstr ""
15315
15316
#: serverguide/C/network-auth.xml:2074(para)
15317
msgid ""
15318
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15319
"principal database and contain the encryption key for a service or host."
15320
msgstr ""
15321
15322
#: serverguide/C/network-auth.xml:2081(para)
15323
msgid ""
15324
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15325
"redundancy, which contains a database of Principals. When a user principal "
15326
"logs into a workstation, configured for Kerberos authentication, the KDC "
15327
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15328
"match, the user is authenticated and can then request tickets for Kerberized "
15329
"services from the Ticket Granting Server (TGS). The service tickets allow "
15330
"the user to authenticate to the service without entering another username "
15331
"and password."
15332
msgstr ""
15333
15334
#: serverguide/C/network-auth.xml:2090(title)
15335
msgid "Kerberos Server"
15336
msgstr ""
15337
15338
#: serverguide/C/network-auth.xml:2094(para)
15339
msgid ""
15340
"Before installing the Kerberos server a properly configured DNS server is "
15341
"needed for your domain. Since the Kerberos Realm by convention matches the "
15342
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15343
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15344
msgstr ""
15345
15346
#: serverguide/C/network-auth.xml:2100(para)
15347
msgid ""
15348
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15349
"between a client machine and the server differs by more than five minutes "
15350
"(by default), the workstation will not be able to authenticate. To correct "
15351
"the problem all hosts should have their time synchronized using the "
15352
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15353
"NTP see <xref linkend=\"NTP\"/>."
15354
msgstr ""
15355
15356
#: serverguide/C/network-auth.xml:2107(para)
15357
msgid ""
15358
"The first step in installing a Kerberos Realm is to install the "
15359
"<application>krb5-kdc</application> and <application>krb5-admin-"
15360
"server</application> packages. From a terminal enter:"
15361
msgstr ""
15362
15363
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15364
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15365
msgstr ""
15366
15367
#: serverguide/C/network-auth.xml:2116(para)
15368
msgid ""
15369
"You will be asked at the end of the install to supply a name for the "
15370
"Kerberos and Admin servers, which may or may not be the same server, for the "
15371
"realm."
15372
msgstr ""
15373
15374
#: serverguide/C/network-auth.xml:2121(para)
15375
msgid ""
15376
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15377
"utility:"
15378
msgstr ""
15379
15380
#: serverguide/C/network-auth.xml:2126(command)
15381
msgid "sudo krb5_newrealm"
15382
msgstr ""
15383
15384
#: serverguide/C/network-auth.xml:2133(para)
15385
msgid ""
15386
"The questions asked during installation are used to configure the "
15387
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15388
"Distribution Center (KDC) settings simply edit the file and restart the "
15389
"<application>krb5-kdc</application> daemon."
15390
msgstr ""
15391
15392
#: serverguide/C/network-auth.xml:2141(para)
15393
msgid ""
15394
"Now that the KDC running an admin user is needed. It is recommended to use a "
15395
"different username from your everyday username. Using the "
15396
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15397
msgstr ""
15398
15399
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15400
msgid "sudo kadmin.local"
15401
msgstr ""
15402
15403
#: serverguide/C/network-auth.xml:2148(computeroutput)
15404
#, no-wrap
15405
msgid ""
15406
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15407
"kadmin.local:"
15408
msgstr ""
15409
15410
#: serverguide/C/network-auth.xml:2149(userinput)
15411
#, no-wrap
15412
msgid " addprinc steve/admin"
15413
msgstr ""
15414
15415
#: serverguide/C/network-auth.xml:2150(computeroutput)
15416
#, no-wrap
15417
msgid ""
15418
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15419
"policy\n"
15420
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15421
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15422
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15423
"kadmin.local:"
15424
msgstr ""
15425
15426
#: serverguide/C/network-auth.xml:2154(userinput)
15427
#, no-wrap
15428
msgid " quit"
15429
msgstr ""
15430
15431
#: serverguide/C/network-auth.xml:2157(para)
15432
msgid ""
15433
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15434
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15435
"is an <emphasis>Instance</emphasis>, and <emphasis "
15436
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15437
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15438
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15439
"rights."
15440
msgstr ""
15441
15442
#: serverguide/C/network-auth.xml:2165(para)
15443
msgid ""
15444
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15445
"your Realm and admin username."
15446
msgstr ""
15447
15448
#: serverguide/C/network-auth.xml:2173(para)
15449
msgid ""
15450
"Next, the new admin user needs to have the appropriate Access Control List "
15451
"(ACL) permissions. The permissions are configured in the "
15452
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15453
msgstr ""
15454
15455
#: serverguide/C/network-auth.xml:2178(programlisting)
15456
#, no-wrap
15457
msgid ""
15458
"\n"
15459
"steve/admin@EXAMPLE.COM *\n"
15460
msgstr ""
15461
15462
#: serverguide/C/network-auth.xml:2182(para)
15463
msgid ""
15464
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15465
"any operation on all principals in the realm."
15466
msgstr ""
15467
15468
#: serverguide/C/network-auth.xml:2189(para)
15469
msgid ""
15470
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15471
"to take affect:"
15472
msgstr ""
15473
15474
#: serverguide/C/network-auth.xml:2194(command)
15475
msgid "sudo /etc/init.d/krb5-admin-server restart"
15476
msgstr ""
15477
15478
#: serverguide/C/network-auth.xml:2200(para)
15479
msgid ""
15480
"The new user principal can be tested using the <application>kinit "
15481
"utility</application>:"
15482
msgstr ""
15483
15484
#: serverguide/C/network-auth.xml:2205(command)
15485
msgid "kinit steve/admin"
15486
msgstr ""
15487
15488
#: serverguide/C/network-auth.xml:2206(computeroutput)
15489
#, no-wrap
15490
msgid "steve/admin@EXAMPLE.COM's Password:"
15491
msgstr ""
15492
15493
#: serverguide/C/network-auth.xml:2209(para)
15494
msgid ""
15495
"After entering the password, use the <application>klist</application> "
15496
"utility to view information about the Ticket Granting Ticket (TGT):"
15497
msgstr ""
15498
15499
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15500
msgid "klist"
15501
msgstr ""
15502
15503
#: serverguide/C/network-auth.xml:2216(computeroutput)
15504
#, no-wrap
15505
msgid ""
15506
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15507
" Principal: steve/admin@EXAMPLE.COM\n"
15508
"\n"
15509
" Issued Expires Principal\n"
15510
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15511
msgstr ""
15512
15513
#: serverguide/C/network-auth.xml:2223(para)
15514
msgid ""
15515
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15516
"the KDC. For example:"
15517
msgstr ""
15518
15519
#: serverguide/C/network-auth.xml:2227(programlisting)
15520
#, no-wrap
15521
msgid ""
15522
"\n"
15523
"192.168.0.1 kdc01.example.com kdc01\n"
15524
msgstr ""
15525
15526
#: serverguide/C/network-auth.xml:2231(para)
15527
msgid ""
15528
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15529
msgstr ""
15530
15531
#: serverguide/C/network-auth.xml:2238(para)
15532
msgid ""
15533
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15534
"are needed. Add the following to "
15535
"<filename>/etc/named/db.example.com</filename>:"
15536
msgstr ""
15537
15538
#: serverguide/C/network-auth.xml:2243(programlisting)
15539
#, no-wrap
15540
msgid ""
15541
"\n"
15542
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15543
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15544
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15545
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15546
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15547
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15548
msgstr ""
15549
15550
#: serverguide/C/network-auth.xml:2253(para)
15551
msgid ""
15552
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15553
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15554
"KDC."
15555
msgstr ""
15556
15557
#: serverguide/C/network-auth.xml:2259(para)
15558
msgid ""
15559
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15560
msgstr ""
15561
15562
#: serverguide/C/network-auth.xml:2266(para)
15563
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15564
msgstr ""
15565
15566
#: serverguide/C/network-auth.xml:2273(title)
15567
msgid "Secondary KDC"
15568
msgstr ""
15569
15570
#: serverguide/C/network-auth.xml:2275(para)
15571
msgid ""
15572
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15573
"practice to have a Secondary KDC in case the primary becomes unavailable."
15574
msgstr ""
15575
15576
#: serverguide/C/network-auth.xml:2283(para)
15577
msgid ""
15578
"First, install the packages, and when asked for the Kerberos and Admin "
15579
"server names enter the name of the Primary KDC:"
15580
msgstr ""
15581
15582
#: serverguide/C/network-auth.xml:2294(para)
15583
msgid ""
15584
"Once you have the packages installed, create the Secondary KDC's host "
15585
"principal. From a terminal prompt, enter:"
15586
msgstr ""
15587
15588
#: serverguide/C/network-auth.xml:2299(command)
15589
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15590
msgstr ""
15591
15592
#: serverguide/C/network-auth.xml:2303(para)
15593
msgid ""
15594
"After, issuing any <application>kadmin</application> commands you will be "
15595
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15596
"password."
15597
msgstr ""
15598
15599
#: serverguide/C/network-auth.xml:2312(para)
15600
msgid "Extract the <emphasis>keytab</emphasis> file:"
15601
msgstr ""
15602
15603
#: serverguide/C/network-auth.xml:2317(command)
15604
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15605
msgstr ""
15606
15607
#: serverguide/C/network-auth.xml:2323(para)
15608
msgid ""
15609
"There should now be a <filename>keytab.kdc02</filename> in the current "
15610
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15611
msgstr ""
15612
15613
#: serverguide/C/network-auth.xml:2329(command)
15614
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15615
msgstr ""
15616
15617
#: serverguide/C/network-auth.xml:2333(para)
15618
msgid ""
15619
"If the path to the <filename>keytab.kdc02</filename> file is different "
15620
"adjust accordingly."
15621
msgstr ""
15622
15623
#: serverguide/C/network-auth.xml:2338(para)
15624
msgid ""
15625
"Also, you can list the principals in a Keytab file, which can be useful when "
15626
"troubleshooting, using the <application>klist</application> utility:"
15627
msgstr ""
15628
15629
#: serverguide/C/network-auth.xml:2344(command)
15630
msgid "sudo klist -k /etc/krb5.keytab"
15631
msgstr ""
15632
15633
#: serverguide/C/network-auth.xml:2350(para)
15634
msgid ""
15635
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15636
"that lists all KDCs for the Realm. For example, on both primary and "
15637
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15638
msgstr ""
15639
15640
#: serverguide/C/network-auth.xml:2355(programlisting)
15641
#, no-wrap
15642
msgid ""
15643
"\n"
15644
"host/kdc01.example.com@EXAMPLE.COM\n"
15645
"host/kdc02.example.com@EXAMPLE.COM\n"
15646
msgstr ""
15647
15648
#: serverguide/C/network-auth.xml:2363(para)
15649
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15650
msgstr ""
15651
15652
#: serverguide/C/network-auth.xml:2368(command)
15653
msgid "sudo kdb5_util -s create"
15654
msgstr ""
15655
15656
#: serverguide/C/network-auth.xml:2374(para)
15657
msgid ""
15658
"Now start the <application>kpropd</application> daemon, which listens for "
15659
"connections from the <application>kprop</application> utility. "
15660
"<application>kprop</application> is used to transfer dump files:"
15661
msgstr ""
15662
15663
#: serverguide/C/network-auth.xml:2381(command)
15664
msgid "sudo kpropd -S"
15665
msgstr ""
15666
15667
#: serverguide/C/network-auth.xml:2387(para)
15668
msgid ""
15669
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15670
"of the principal database:"
15671
msgstr ""
15672
15673
#: serverguide/C/network-auth.xml:2392(command)
15674
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15675
msgstr ""
15676
15677
#: serverguide/C/network-auth.xml:2398(para)
15678
msgid ""
15679
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15680
"<filename>/etc/krb5.keytab</filename>:"
15681
msgstr ""
15682
15683
#: serverguide/C/network-auth.xml:2403(command)
15684
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15685
msgstr ""
15686
15687
#: serverguide/C/network-auth.xml:2404(command)
15688
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15689
msgstr ""
15690
15691
#: serverguide/C/network-auth.xml:2408(para)
15692
msgid ""
15693
"Make sure there is a <emphasis>host</emphasis> for "
15694
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15695
msgstr ""
15696
15697
#: serverguide/C/network-auth.xml:2416(para)
15698
msgid ""
15699
"Using the <application>kprop</application> utility push the database to the "
15700
"Secondary KDC:"
15701
msgstr ""
15702
15703
#: serverguide/C/network-auth.xml:2421(command)
15704
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15705
msgstr ""
15706
15707
#: serverguide/C/network-auth.xml:2425(para)
15708
msgid ""
15709
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15710
"worked. If there is an error message check "
15711
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15712
"information."
15713
msgstr ""
15714
15715
#: serverguide/C/network-auth.xml:2431(para)
15716
msgid ""
15717
"You may also want to create a <application>cron</application> job to "
15718
"periodically update the database on the Secondary KDC. For example, the "
15719
"following will push the database every hour:"
15720
msgstr ""
15721
15722
#: serverguide/C/network-auth.xml:2436(programlisting)
15723
#, no-wrap
15724
msgid ""
15725
"\n"
15726
"# m h dom mon dow command\n"
15727
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15728
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15729
msgstr ""
15730
15731
#: serverguide/C/network-auth.xml:2444(para)
15732
msgid ""
15733
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15734
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15735
msgstr ""
15736
15737
#: serverguide/C/network-auth.xml:2450(command)
15738
msgid "sudo kdb5_util stash"
15739
msgstr ""
15740
15741
#: serverguide/C/network-auth.xml:2456(para)
15742
msgid ""
15743
"Finally, start the <application>krb5-kdc</application> daemon on the "
15744
"Secondary KDC:"
15745
msgstr ""
15746
15747
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15748
msgid "sudo /etc/init.d/krb5-kdc start"
15749
msgstr ""
15750
15751
#: serverguide/C/network-auth.xml:2467(para)
15752
msgid ""
15753
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15754
"for the Realm. You can test this by stopping the <application>krb5-"
15755
"kdc</application> daemon on the Primary KDC, then use "
15756
"<application>kinit</application> to request a ticket. If all goes well you "
15757
"should receive a ticket from the Secondary KDC."
15758
msgstr ""
15759
15760
#: serverguide/C/network-auth.xml:2475(title)
15761
msgid "Kerberos Linux Client"
15762
msgstr ""
15763
15764
#: serverguide/C/network-auth.xml:2477(para)
15765
msgid ""
15766
"This section covers configuring a Linux system as a "
15767
"<application>Kerberos</application> client. This will allow access to any "
15768
"kerberized services once a user has successfully logged into the system."
15769
msgstr ""
15770
15771
#: serverguide/C/network-auth.xml:2485(para)
15772
msgid ""
15773
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15774
"user</application> and <application>libpam-krb5</application> packages are "
15775
"needed, along with a few others that are not strictly necessary but make "
15776
"life easier. To install the packages enter the following in a terminal "
15777
"prompt:"
15778
msgstr ""
15779
15780
#: serverguide/C/network-auth.xml:2492(command)
15781
msgid ""
15782
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15783
msgstr ""
15784
15785
#: serverguide/C/network-auth.xml:2495(para)
15786
msgid ""
15787
"The <application>auth-client-config</application> package allows simple "
15788
"configuration of PAM for authentication from multiple sources, and the "
15789
"<application>libpam-ccreds</application> will cache authentication "
15790
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15791
"is unavailable. This package is also useful for laptops that may "
15792
"authenticate using Kerberos while on the corporate network, but will need to "
15793
"be accessed off the network as well."
15794
msgstr ""
15795
15796
#: serverguide/C/network-auth.xml:2506(para)
15797
msgid "To configure the client in a terminal enter:"
15798
msgstr ""
15799
15800
#: serverguide/C/network-auth.xml:2511(command)
15801
msgid "sudo dpkg-reconfigure krb5-config"
15802
msgstr ""
15803
15804
#: serverguide/C/network-auth.xml:2514(para)
15805
msgid ""
15806
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15807
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15808
"records, the menu will prompt you for the hostname of the Key Distribution "
15809
"Center (KDC) and Realm Administration server."
15810
msgstr ""
15811
15812
#: serverguide/C/network-auth.xml:2520(para)
15813
msgid ""
15814
"The <application>dpkg-reconfigure</application> adds entries to the "
15815
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15816
"entries similar to the following:"
15817
msgstr ""
15818
15819
#: serverguide/C/network-auth.xml:2525(programlisting)
15820
#, no-wrap
15821
msgid ""
15822
"\n"
15823
"[libdefaults]\n"
15824
" default_realm = EXAMPLE.COM\n"
15825
"...\n"
15826
"[realms]\n"
15827
" EXAMPLE.COM = } \n"
15828
" kdc = 192.168.0.1 \n"
15829
" admin_server = 192.168.0.1\n"
15830
" }\n"
15831
msgstr ""
15832
15833
#: serverguide/C/network-auth.xml:2536(para)
15834
msgid ""
15835
"You can test the configuration by requesting a ticket using the "
15836
"<application>kinit</application> utility. For example:"
15837
msgstr ""
15838
15839
#: serverguide/C/network-auth.xml:2541(command)
15840
msgid "kinit steve@EXAMPLE.COM"
15841
msgstr ""
15842
15843
#: serverguide/C/network-auth.xml:2542(computeroutput)
15844
#, no-wrap
15845
msgid "Password for steve@EXAMPLE.COM:"
15846
msgstr ""
15847
15848
#: serverguide/C/network-auth.xml:2545(para)
15849
msgid ""
15850
"When a ticket has been granted, the details can be viewed using "
15851
"<application>klist</application>:"
15852
msgstr ""
15853
15854
#: serverguide/C/network-auth.xml:2551(computeroutput)
15855
#, no-wrap
15856
msgid ""
15857
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
15858
"Default principal: steve@EXAMPLE.COM\n"
15859
"\n"
15860
"Valid starting Expires Service principal\n"
15861
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
15862
" renew until 07/25/08 05:18:57\n"
15863
"\n"
15864
"\n"
15865
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
15866
"klist: You have no tickets cached"
15867
msgstr ""
15868
15869
#: serverguide/C/network-auth.xml:2563(para)
15870
msgid ""
15871
"Next, use the <application>auth-client-config</application> to configure the "
15872
"<application>libpam-krb5</application> module to request a ticket during "
15873
"login:"
15874
msgstr ""
15875
15876
#: serverguide/C/network-auth.xml:2569(command)
15877
msgid "sudo auth-client-config -a -p kerberos_example"
15878
msgstr ""
15879
15880
#: serverguide/C/network-auth.xml:2572(para)
15881
msgid ""
15882
"You will should now receive a ticket upon successful login authentication."
15883
msgstr ""
15884
15885
#: serverguide/C/network-auth.xml:2583(para)
15886
msgid ""
15887
"For more information on Kerberos see the <ulink "
15888
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
15889
msgstr ""
15890
15891
#: serverguide/C/network-auth.xml:2588(para)
15892
msgid ""
15893
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
15894
"Kerberos</ulink> page has more details."
15895
msgstr ""
15896
15897
#: serverguide/C/network-auth.xml:2593(para)
15898
msgid ""
15899
"O'Reilly's <ulink "
15900
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
15901
"Guide</ulink> is a great reference when setting up Kerberos."
15902
msgstr ""
15903
15904
#: serverguide/C/network-auth.xml:2599(para)
15905
msgid ""
15906
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
15907
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
15908
"Kerberos questions."
15909
msgstr ""
15910
15911
#: serverguide/C/network-auth.xml:2609(title)
15912
msgid "Kerberos and LDAP"
15913
msgstr ""
15914
15915
#: serverguide/C/network-auth.xml:2611(para)
15916
msgid ""
15917
"Replicating a Kerberos principal database between two servers can be "
15918
"complicated, and adds an additional user database to your network. "
15919
"Fortunately, MIT Kerberos can be configured to use an "
15920
"<application>LDAP</application> directory as a principal database. This "
15921
"section covers configuring a primary and secondary kerberos server to use "
15922
"<application>OpenLDAP</application> for the principal database."
15923
msgstr ""
15924
15925
#: serverguide/C/network-auth.xml:2619(title)
15926
msgid "Configuring OpenLDAP"
15927
msgstr ""
15928
15929
#: serverguide/C/network-auth.xml:2621(para)
15930
msgid ""
15931
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
15932
"<application>OpenLDAP</application> server that has network connectivity to "
15933
"the Primary and Secondary KDCs. The rest of this section assumes that you "
15934
"also have LDAP replication configured between at least two servers. For "
15935
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
15936
msgstr ""
15937
15938
#: serverguide/C/network-auth.xml:2628(para)
15939
msgid ""
15940
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
15941
"that traffic between the KDC and LDAP server is encrypted. See <xref "
15942
"linkend=\"openldap-tls\"/> for details."
15943
msgstr ""
15944
15945
#: serverguide/C/network-auth.xml:2635(para)
15946
msgid ""
15947
"To load the schema into LDAP, on the LDAP server install the "
15948
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
15949
msgstr ""
15950
15951
#: serverguide/C/network-auth.xml:2641(command)
15952
msgid "sudo apt-get install krb5-kdc-ldap"
15953
msgstr ""
15954
15955
#: serverguide/C/network-auth.xml:2646(para)
15956
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
15957
msgstr ""
15958
15959
#: serverguide/C/network-auth.xml:2651(command)
15960
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
15961
msgstr ""
15962
15963
#: serverguide/C/network-auth.xml:2652(command)
15964
msgid ""
15965
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
15966
msgstr ""
15967
15968
#: serverguide/C/network-auth.xml:2658(para)
15969
msgid ""
15970
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
15971
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
15972
"<application>slapd</application> is also detailed in <xref "
15973
"linkend=\"openldap-configuration\"/>."
15974
msgstr ""
15975
15976
#: serverguide/C/network-auth.xml:2671(programlisting)
15977
#, no-wrap
15978
msgid ""
15979
"\n"
15980
"include /etc/ldap/schema/core.schema\n"
15981
"include /etc/ldap/schema/collective.schema\n"
15982
"include /etc/ldap/schema/corba.schema\n"
15983
"include /etc/ldap/schema/cosine.schema\n"
15984
"include /etc/ldap/schema/duaconf.schema\n"
15985
"include /etc/ldap/schema/dyngroup.schema\n"
15986
"include /etc/ldap/schema/inetorgperson.schema\n"
15987
"include /etc/ldap/schema/java.schema\n"
15988
"include /etc/ldap/schema/misc.schema\n"
15989
"include /etc/ldap/schema/nis.schema\n"
15990
"include /etc/ldap/schema/openldap.schema\n"
15991
"include /etc/ldap/schema/ppolicy.schema\n"
15992
"include /etc/ldap/schema/kerberos.schema\n"
15993
msgstr ""
15994
15995
#: serverguide/C/network-auth.xml:2691(para)
15996
msgid "Create a temporary directory to hold the LDIF files:"
15997
msgstr ""
15998
15999
#: serverguide/C/network-auth.xml:2706(command)
16000
msgid ""
16001
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
16002
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
16003
msgstr ""
16004
16005
#: serverguide/C/network-auth.xml:2716(para)
16006
msgid ""
16007
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
16008
"changing the following attributes:"
16009
msgstr ""
16010
16011
#: serverguide/C/network-auth.xml:2720(programlisting)
16012
#, no-wrap
16013
msgid ""
16014
"\n"
16015
"dn: cn=kerberos,cn=schema,cn=config\n"
16016
"...\n"
16017
"cn: kerberos\n"
16018
msgstr ""
16019
16020
#: serverguide/C/network-auth.xml:2726(para)
16021
msgid "And remove the following lines from the end of the file:"
16022
msgstr ""
16023
16024
#: serverguide/C/network-auth.xml:2730(programlisting)
16025
#, no-wrap
16026
msgid ""
16027
"\n"
16028
"structuralObjectClass: olcSchemaConfig\n"
16029
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
16030
"creatorsName: cn=config\n"
16031
"createTimestamp: 20090111203515Z\n"
16032
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
16033
"modifiersName: cn=config\n"
16034
"modifyTimestamp: 20090111203515Z\n"
16035
msgstr ""
16036
16037
#: serverguide/C/network-auth.xml:2749(para)
16038
msgid "Load the new schema with <application>ldapadd</application>:"
16039
msgstr ""
16040
16041
#: serverguide/C/network-auth.xml:2754(command)
16042
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
16043
msgstr ""
16044
16045
#: serverguide/C/network-auth.xml:2760(para)
16046
msgid ""
16047
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
16048
msgstr ""
16049
16050
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
16051
msgid "ldapmodify -x -D cn=admin,cn=config -W"
16052
msgstr ""
16053
16054
#: serverguide/C/network-auth.xml:2767(userinput)
16055
#, no-wrap
16056
msgid ""
16057
"dn: olcDatabase={1}hdb,cn=config\n"
16058
"add: olcDbIndex\n"
16059
"olcDbIndex: krbPrincipalName eq,pres,sub"
16060
msgstr ""
16061
16062
#: serverguide/C/network-auth.xml:2766(computeroutput)
16063
#, no-wrap
16064
msgid ""
16065
"Enter LDAP Password:\n"
16066
"<placeholder-1/>\n"
16067
"\n"
16068
"modifying entry \"olcDatabase={1}hdb,cn=config\""
16069
msgstr ""
16070
16071
#: serverguide/C/network-auth.xml:2777(para)
16072
msgid "Finally, update the Access Control Lists (ACL):"
16073
msgstr ""
16074
16075
#: serverguide/C/network-auth.xml:2784(userinput)
16076
#, no-wrap
16077
msgid ""
16078
"dn: olcDatabase={1}hdb,cn=config\n"
16079
"replace: olcAccess\n"
16080
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
16081
"dn=\"cn=admin,dc=exampl\n"
16082
" e,dc=com\" write by anonymous auth by self write by * none\n"
16083
"-\n"
16084
"add: olcAccess\n"
16085
"olcAccess: to dn.base=\"\" by * read\n"
16086
"-\n"
16087
"add: olcAccess\n"
16088
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
16089
msgstr ""
16090
16091
#: serverguide/C/network-auth.xml:2783(computeroutput)
16092
#, no-wrap
16093
msgid ""
16094
"Enter LDAP Password: \n"
16095
"<placeholder-1/>\n"
16096
"\n"
16097
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16098
msgstr ""
16099
16100
#: serverguide/C/network-auth.xml:2804(para)
16101
msgid ""
16102
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
16103
"database."
16104
msgstr ""
16105
16106
#: serverguide/C/network-auth.xml:2810(title)
16107
msgid "Primary KDC Configuration"
16108
msgstr ""
16109
16110
#: serverguide/C/network-auth.xml:2812(para)
16111
msgid ""
16112
"With <application>OpenLDAP</application> configured it is time to configure "
16113
"the KDC."
16114
msgstr ""
16115
16116
#: serverguide/C/network-auth.xml:2818(para)
16117
msgid "First, install the necessary packages, from a terminal enter:"
16118
msgstr ""
16119
16120
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
16121
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
16122
msgstr ""
16123
16124
#: serverguide/C/network-auth.xml:2829(para)
16125
msgid ""
16126
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16127
"under the appropriate sections:"
16128
msgstr ""
16129
16130
#: serverguide/C/network-auth.xml:2833(programlisting)
16131
#, no-wrap
16132
msgid ""
16133
"\n"
16134
"[libdefaults]\n"
16135
" default_realm = EXAMPLE.COM\n"
16136
"\n"
16137
"...\n"
16138
"\n"
16139
"[realms]\n"
16140
" EXAMPLE.COM = {\n"
16141
" kdc = kdc01.example.com\n"
16142
" kdc = kdc02.example.com\n"
16143
" admin_server = kdc01.example.com\n"
16144
" admin_server = kdc02.example.com\n"
16145
" default_domain = example.com\n"
16146
" database_module = openldap_ldapconf\n"
16147
" }\n"
16148
"\n"
16149
"...\n"
16150
"\n"
16151
"[domain_realm]\n"
16152
" .example.com = EXAMPLE.COM\n"
16153
"\n"
16154
"\n"
16155
"...\n"
16156
"\n"
16157
"[dbdefaults]\n"
16158
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16159
"\n"
16160
"[dbmodules]\n"
16161
" openldap_ldapconf = {\n"
16162
" db_library = kldap\n"
16163
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16164
"\n"
16165
" # this object needs to have read rights on\n"
16166
" # the realm container, principal container and realm sub-"
16167
"trees\n"
16168
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16169
"\n"
16170
" # this object needs to have read and write rights on\n"
16171
" # the realm container, principal container and realm sub-"
16172
"trees\n"
16173
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16174
" ldap_servers = ldaps://ldap01.example.com "
16175
"ldaps://ldap02.example.com\n"
16176
" ldap_conns_per_server = 5\n"
16177
" }\n"
16178
msgstr ""
16179
16180
#: serverguide/C/network-auth.xml:2878(para)
16181
msgid ""
16182
"Change <emphasis>example.com</emphasis>, "
16183
"<emphasis>dc=example,dc=com</emphasis>, "
16184
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16185
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16186
"object, and LDAP server for your network."
16187
msgstr ""
16188
16189
#: serverguide/C/network-auth.xml:2887(para)
16190
msgid ""
16191
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16192
"the realm:"
16193
msgstr ""
16194
16195
#: serverguide/C/network-auth.xml:2892(command)
16196
msgid ""
16197
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16198
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16199
msgstr ""
16200
16201
#: serverguide/C/network-auth.xml:2898(para)
16202
msgid ""
16203
"Create a stash of the password used to bind to the LDAP server. This "
16204
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16205
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16206
"<filename>/etc/krb5.conf</filename>:"
16207
msgstr ""
16208
16209
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16210
msgid ""
16211
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16212
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16213
msgstr ""
16214
16215
#: serverguide/C/network-auth.xml:2910(para)
16216
msgid "Copy the CA certificate from the LDAP server:"
16217
msgstr ""
16218
16219
#: serverguide/C/network-auth.xml:2915(command)
16220
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16221
msgstr ""
16222
16223
#: serverguide/C/network-auth.xml:2916(command)
16224
msgid "sudo cp cacert.pem /etc/ssl/certs"
16225
msgstr ""
16226
16227
#: serverguide/C/network-auth.xml:2919(para)
16228
msgid ""
16229
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16230
msgstr ""
16231
16232
#: serverguide/C/network-auth.xml:2923(programlisting)
16233
#, no-wrap
16234
msgid ""
16235
"\n"
16236
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16237
msgstr ""
16238
16239
#: serverguide/C/network-auth.xml:2928(para)
16240
msgid ""
16241
"The certificate will also need to be copied to the Secondary KDC, to allow "
16242
"the connection to the LDAP servers using LDAPS."
16243
msgstr ""
16244
16245
#: serverguide/C/network-auth.xml:2937(para)
16246
msgid ""
16247
"You can now add Kerberos principals to the LDAP database, and they will be "
16248
"copied to any other LDAP servers configured for replication. To add a "
16249
"principal using the <application>kadmin.local</application> utility enter:"
16250
msgstr ""
16251
16252
#: serverguide/C/network-auth.xml:2945(userinput)
16253
#, no-wrap
16254
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16255
msgstr ""
16256
16257
#: serverguide/C/network-auth.xml:2944(computeroutput)
16258
#, no-wrap
16259
msgid ""
16260
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16261
"kadmin.local: <placeholder-1/>\n"
16262
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16263
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16264
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16265
"Principal \"steve@EXAMPLE.COM\" created."
16266
msgstr ""
16267
16268
#: serverguide/C/network-auth.xml:2952(para)
16269
msgid ""
16270
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16271
"krbExtraData attributes added to the "
16272
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16273
"the <application>kinit</application> and <application>klist</application> "
16274
"utilities to test that the user is indeed issued a ticket."
16275
msgstr ""
16276
16277
#: serverguide/C/network-auth.xml:2959(para)
16278
msgid ""
16279
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16280
"option is needed to add the Kerberos attributes. Otherwise a new "
16281
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16282
msgstr ""
16283
16284
#: serverguide/C/network-auth.xml:2967(title)
16285
msgid "Secondary KDC Configuration"
16286
msgstr ""
16287
16288
#: serverguide/C/network-auth.xml:2969(para)
16289
msgid ""
16290
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16291
"one using the normal Kerberos database."
16292
msgstr ""
16293
16294
#: serverguide/C/network-auth.xml:2975(para)
16295
msgid "First, install the necessary packages. In a terminal enter:"
16296
msgstr ""
16297
16298
#: serverguide/C/network-auth.xml:2986(para)
16299
msgid ""
16300
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16301
msgstr ""
16302
16303
#: serverguide/C/network-auth.xml:2990(programlisting)
16304
#, no-wrap
16305
msgid ""
16306
"\n"
16307
"[libdefaults]\n"
16308
" default_realm = EXAMPLE.COM\n"
16309
"\n"
16310
"...\n"
16311
"\n"
16312
"[realms]\n"
16313
" EXAMPLE.COM = {\n"
16314
" kdc = kdc01.example.com\n"
16315
" kdc = kdc02.example.com\n"
16316
" admin_server = kdc01.example.com\n"
16317
" admin_server = kdc02.example.com\n"
16318
" default_domain = example.com\n"
16319
" database_module = openldap_ldapconf\n"
16320
" }\n"
16321
"\n"
16322
"...\n"
16323
"\n"
16324
"[domain_realm]\n"
16325
" .example.com = EXAMPLE.COM\n"
16326
"\n"
16327
"...\n"
16328
"\n"
16329
"[dbdefaults]\n"
16330
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16331
"\n"
16332
"[dbmodules]\n"
16333
" openldap_ldapconf = {\n"
16334
" db_library = kldap\n"
16335
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16336
"\n"
16337
" # this object needs to have read rights on\n"
16338
" # the realm container, principal container and realm sub-"
16339
"trees\n"
16340
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16341
"\n"
16342
" # this object needs to have read and write rights on\n"
16343
" # the realm container, principal container and realm sub-"
16344
"trees\n"
16345
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16346
" ldap_servers = ldaps://ldap01.example.com "
16347
"ldaps://ldap02.example.com\n"
16348
" ldap_conns_per_server = 5\n"
16349
" }\n"
16350
msgstr ""
16351
16352
#: serverguide/C/network-auth.xml:3037(para)
16353
msgid "Create the stash for the LDAP bind password:"
16354
msgstr ""
16355
16356
#: serverguide/C/network-auth.xml:3048(para)
16357
msgid ""
16358
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16359
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16360
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16361
"encrypted connection such as <application>scp</application>, or on physical "
16362
"media."
16363
msgstr ""
16364
16365
#: serverguide/C/network-auth.xml:3055(command)
16366
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16367
msgstr ""
16368
16369
#: serverguide/C/network-auth.xml:3056(command)
16370
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16371
msgstr ""
16372
16373
#: serverguide/C/network-auth.xml:3060(para)
16374
msgid ""
16375
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16376
msgstr ""
16377
16378
#: serverguide/C/network-auth.xml:3068(para)
16379
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16380
msgstr ""
16381
16382
#: serverguide/C/network-auth.xml:3079(para)
16383
msgid ""
16384
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16385
"you should be able to continue to authenticate users if one LDAP server, one "
16386
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16387
msgstr ""
16388
16389
#: serverguide/C/network-auth.xml:3091(para)
16390
msgid ""
16391
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16392
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16393
"Guide</ulink> has some additional details."
16394
msgstr ""
16395
16396
#: serverguide/C/network-auth.xml:3097(para)
16397
msgid ""
16398
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16399
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16400
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16401
"5.6</ulink> and the <ulink "
16402
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16403
"\">kdb5_ldap_util man page</ulink>."
16404
msgstr ""
16405
16406
#: serverguide/C/network-auth.xml:3105(para)
16407
msgid ""
16408
"Another useful link is the <ulink "
16409
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16410
"b5.conf man page</ulink>."
16411
msgstr ""
16412
16413
#: serverguide/C/network-auth.xml:3110(para)
16414
msgid ""
16415
"Also, see the <ulink "
16416
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16417
"and LDAP</ulink> Ubuntu wiki page."
16418
msgstr ""
16419
16420
#: serverguide/C/monitoring.xml:13(title)
16421
msgid "Monitoring"
16422
msgstr ""
16423
16424
#: serverguide/C/monitoring.xml:17(para)
16425
msgid ""
16426
"The monitoring of essential servers and services is an important part of "
16427
"system administration. Most network services are monitored for performance, "
16428
"availability, or both. This section will cover installation and "
16429
"configuration of <application>Nagios</application> for availability "
16430
"monitoring, and <application>Munin</application> for performance monitoring."
16431
msgstr ""
16432
16433
#: serverguide/C/monitoring.xml:24(para)
16434
msgid ""
16435
"The examples in this section will use two servers with hostnames "
16436
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16437
"<emphasis>Server01</emphasis> will be configured with "
16438
"<application>Nagios</application> to monitor services on itself and "
16439
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16440
"<application>munin</application> package to gather information from the "
16441
"network. Using the <application>munin-node</application> package, "
16442
"<emphasis>server02</emphasis> will be configured to send information to "
16443
"<emphasis>server01</emphasis>."
16444
msgstr ""
16445
16446
#: serverguide/C/monitoring.xml:33(para)
16447
msgid ""
16448
"Hopefully these simple examples will allow you to monitor additional servers "
16449
"and services on your network."
16450
msgstr ""
16451
16452
#: serverguide/C/monitoring.xml:39(title)
16453
msgid "Nagios"
16454
msgstr ""
16455
16456
#: serverguide/C/monitoring.xml:44(para)
16457
msgid ""
16458
"First, on <emphasis>server01</emphasis> install the "
16459
"<application>nagios</application> package. In a terminal enter:"
16460
msgstr ""
16461
16462
#: serverguide/C/monitoring.xml:50(command)
16463
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16464
msgstr ""
16465
16466
#: serverguide/C/monitoring.xml:53(para)
16467
msgid ""
16468
"You will be asked to enter a password for the "
16469
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16470
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16471
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16472
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16473
"of the <application>apache2-utils</application> package."
16474
msgstr ""
16475
16476
#: serverguide/C/monitoring.xml:60(para)
16477
msgid ""
16478
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16479
"user enter:"
16480
msgstr ""
16481
16482
#: serverguide/C/monitoring.xml:65(command)
16483
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16484
msgstr ""
16485
16486
#: serverguide/C/monitoring.xml:68(para)
16487
msgid "To add a user:"
16488
msgstr ""
16489
16490
#: serverguide/C/monitoring.xml:73(command)
16491
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16492
msgstr ""
16493
16494
#: serverguide/C/monitoring.xml:76(para)
16495
msgid ""
16496
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16497
"server</application> package. From a terminal on server02 enter:"
16498
msgstr ""
16499
16500
#: serverguide/C/monitoring.xml:82(command)
16501
msgid "sudo apt-get install nagios-nrpe-server"
16502
msgstr ""
16503
16504
#: serverguide/C/monitoring.xml:86(para)
16505
msgid ""
16506
"<application>NRPE</application> allows you to execute local checks on remote "
16507
"hosts. There are other ways of accomplishing this through other Nagios "
16508
"plugins as well as other checks."
16509
msgstr ""
16510
16511
#: serverguide/C/monitoring.xml:94(title)
16512
msgid "Configuration Overview"
16513
msgstr ""
16514
16515
#: serverguide/C/monitoring.xml:96(para)
16516
msgid ""
16517
"There are a couple of directories containing "
16518
"<application>Nagios</application> configuration and check files."
16519
msgstr ""
16520
16521
#: serverguide/C/monitoring.xml:102(para)
16522
msgid ""
16523
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16524
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16525
"etc."
16526
msgstr ""
16527
16528
#: serverguide/C/monitoring.xml:108(para)
16529
msgid ""
16530
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16531
"service checks."
16532
msgstr ""
16533
16534
#: serverguide/C/monitoring.xml:113(para)
16535
msgid ""
16536
"<filename>/etc/nagios</filename>: on the remote host contains the "
16537
"<application>nagios-nrpe-server</application> configuration files."
16538
msgstr ""
16539
16540
#: serverguide/C/monitoring.xml:118(para)
16541
msgid ""
16542
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16543
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16544
msgstr ""
16545
16546
#: serverguide/C/monitoring.xml:123(para)
16547
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16548
msgstr ""
16549
16550
#: serverguide/C/monitoring.xml:129(para)
16551
msgid ""
16552
"There are a plethora of checks <application>Nagios</application> can be "
16553
"configured to execute for any given host. For this example Nagios will be "
16554
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16555
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16556
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16557
msgstr ""
16558
16559
#: serverguide/C/monitoring.xml:136(para)
16560
msgid ""
16561
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16562
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16563
msgstr ""
16564
16565
#: serverguide/C/monitoring.xml:141(para)
16566
msgid ""
16567
"Additionally, there are some terms that once explained will hopefully make "
16568
"understanding Nagios configuration easier:"
16569
msgstr ""
16570
16571
#: serverguide/C/monitoring.xml:147(para)
16572
msgid ""
16573
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16574
"is being monitored."
16575
msgstr ""
16576
16577
#: serverguide/C/monitoring.xml:152(para)
16578
msgid ""
16579
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16580
"could group all web servers, file server, etc."
16581
msgstr ""
16582
16583
#: serverguide/C/monitoring.xml:157(para)
16584
msgid ""
16585
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16586
"as HTTP, DNS, NFS, etc."
16587
msgstr ""
16588
16589
#: serverguide/C/monitoring.xml:162(para)
16590
msgid ""
16591
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16592
"together. This is useful for grouping multiple HTTP for example."
16593
msgstr ""
16594
16595
#: serverguide/C/monitoring.xml:168(para)
16596
msgid ""
16597
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16598
"place. Nagios can be configured to send emails, SMS messages, etc."
16599
msgstr ""
16600
16601
#: serverguide/C/monitoring.xml:174(para)
16602
msgid ""
16603
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16604
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16605
"will also <application>ping</application> check the "
16606
"<emphasis>gateway</emphasis>."
16607
msgstr ""
16608
16609
#: serverguide/C/monitoring.xml:179(para)
16610
msgid ""
16611
"Large Nagios installations can be quite complex to configure. It is usually "
16612
"best to start small, one or two hosts, get things configured the way you "
16613
"like then expand."
16614
msgstr ""
16615
16616
#: serverguide/C/monitoring.xml:194(para)
16617
msgid ""
16618
"First, create a <emphasis>host</emphasis> configuration file for "
16619
"<emphasis>server02</emphasis>. In a terminal enter:"
16620
msgstr ""
16621
16622
#: serverguide/C/monitoring.xml:199(command)
16623
msgid ""
16624
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16625
"/etc/nagios3/conf.d/server02.cfg"
16626
msgstr ""
16627
16628
#: serverguide/C/monitoring.xml:203(para)
16629
msgid ""
16630
"In the above and following command examples, replace "
16631
"<emphasis>\"server01\"</emphasis>, "
16632
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16633
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16634
"your servers."
16635
msgstr ""
16636
16637
#: serverguide/C/monitoring.xml:212(para)
16638
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16639
msgstr ""
16640
16641
#: serverguide/C/monitoring.xml:216(programlisting)
16642
#, no-wrap
16643
msgid ""
16644
"\n"
16645
"define host{\n"
16646
" use generic-host ; Name of host "
16647
"template to use\n"
16648
" host_name server02\n"
16649
" alias Server 02\n"
16650
" address 172.18.100.101\n"
16651
"}\n"
16652
"\n"
16653
"# check DNS service.\n"
16654
"define service {\n"
16655
" use generic-service\n"
16656
" host_name server02\n"
16657
" service_description DNS\n"
16658
" check_command check_dns!172.18.100.101\n"
16659
"}\n"
16660
msgstr ""
16661
16662
#: serverguide/C/monitoring.xml:236(para)
16663
msgid ""
16664
"Restart the <application>nagios</application> daemon to enable the new "
16665
"configuration:"
16666
msgstr ""
16667
16668
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16669
msgid "sudo /etc/init.d/nagios3 restart"
16670
msgstr ""
16671
16672
#: serverguide/C/monitoring.xml:251(para)
16673
msgid ""
16674
"Now add a service definition for the MySQL check by adding the following to "
16675
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16676
msgstr ""
16677
16678
#: serverguide/C/monitoring.xml:255(programlisting)
16679
#, no-wrap
16680
msgid ""
16681
"\n"
16682
"# check MySQL servers.\n"
16683
"define service {\n"
16684
" hostgroup_name mysql-servers\n"
16685
" service_description MySQL\n"
16686
" check_command "
16687
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16688
" use generic-service\n"
16689
" notification_interval 0 ; set > 0 if you want to be "
16690
"renotified\n"
16691
"}\n"
16692
msgstr ""
16693
16694
#: serverguide/C/monitoring.xml:269(para)
16695
msgid ""
16696
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16697
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16698
msgstr ""
16699
16700
#: serverguide/C/monitoring.xml:274(programlisting)
16701
#, no-wrap
16702
msgid ""
16703
"\n"
16704
"# MySQL hostgroup.\n"
16705
"define hostgroup {\n"
16706
" hostgroup_name mysql-servers\n"
16707
" alias MySQL servers\n"
16708
" members localhost, server02\n"
16709
" }\n"
16710
msgstr ""
16711
16712
#: serverguide/C/monitoring.xml:286(para)
16713
msgid ""
16714
"The Nagios check needs to authenticate to MySQL. To add a "
16715
"<emphasis>nagios</emphasis> user to MySQL enter:"
16716
msgstr ""
16717
16718
#: serverguide/C/monitoring.xml:291(command)
16719
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16720
msgstr ""
16721
16722
#: serverguide/C/monitoring.xml:295(para)
16723
msgid ""
16724
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16725
"<emphasis>mysql-servers</emphasis> hostgroup."
16726
msgstr ""
16727
16728
#: serverguide/C/monitoring.xml:303(para)
16729
msgid ""
16730
"Restart <application>nagios</application> to start checking the MySQL "
16731
"servers."
16732
msgstr ""
16733
16734
#: serverguide/C/monitoring.xml:318(para)
16735
msgid ""
16736
"Lastly configure NRPE to check the disk space on "
16737
"<emphasis>server02</emphasis>."
16738
msgstr ""
16739
16740
#: serverguide/C/monitoring.xml:322(para)
16741
msgid ""
16742
"On <emphasis>server01</emphasis> add the service check to "
16743
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16744
msgstr ""
16745
16746
#: serverguide/C/monitoring.xml:327(programlisting)
16747
#, no-wrap
16748
msgid ""
16749
"\n"
16750
"# NRPE disk check.\n"
16751
"define service {\n"
16752
" use generic-service\n"
16753
" host_name server02\n"
16754
" service_description nrpe-disk\n"
16755
" check_command "
16756
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16757
"}\n"
16758
msgstr ""
16759
16760
#: serverguide/C/monitoring.xml:340(para)
16761
msgid ""
16762
"Now on <emphasis>server02</emphasis> edit "
16763
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16764
msgstr ""
16765
16766
#: serverguide/C/monitoring.xml:344(programlisting)
16767
#, no-wrap
16768
msgid ""
16769
"\n"
16770
"allowed_hosts=172.18.100.100\n"
16771
msgstr ""
16772
16773
#: serverguide/C/monitoring.xml:348(para)
16774
msgid "And below in the command definition area add:"
16775
msgstr ""
16776
16777
#: serverguide/C/monitoring.xml:352(programlisting)
16778
#, no-wrap
16779
msgid ""
16780
"\n"
16781
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16782
"e\n"
16783
msgstr ""
16784
16785
#: serverguide/C/monitoring.xml:359(para)
16786
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16787
msgstr ""
16788
16789
#: serverguide/C/monitoring.xml:364(command)
16790
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16791
msgstr ""
16792
16793
#: serverguide/C/monitoring.xml:370(para)
16794
msgid ""
16795
"Also, on <emphasis>server01</emphasis> restart "
16796
"<application>nagios</application>:"
16797
msgstr ""
16798
16799
#: serverguide/C/monitoring.xml:383(para)
16800
msgid ""
16801
"You should now be able to see the host and service checks in the Nagios CGI "
16802
"files. To access them point a browser to http://server01/nagios3. You will "
16803
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
16804
"password."
16805
msgstr ""
16806
16807
#: serverguide/C/monitoring.xml:393(para)
16808
msgid ""
16809
"This section has just scratched the surface of Nagios' features. The "
16810
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
16811
"plugins</application> contain many more service checks."
16812
msgstr ""
16813
16814
#: serverguide/C/monitoring.xml:400(para)
16815
msgid ""
16816
"For more information see <ulink "
16817
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
16818
msgstr ""
16819
16820
#: serverguide/C/monitoring.xml:405(para)
16821
msgid ""
16822
"Specifically the <ulink "
16823
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
16824
"site."
16825
msgstr ""
16826
16827
#: serverguide/C/monitoring.xml:410(para)
16828
msgid ""
16829
"There is also a list of <ulink "
16830
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
16831
"Nagios and network monitoring:"
16832
msgstr ""
16833
16834
#: serverguide/C/monitoring.xml:416(para)
16835
msgid ""
16836
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
16837
"Wiki</ulink> page also has more details."
16838
msgstr ""
16839
16840
#: serverguide/C/monitoring.xml:425(title)
16841
msgid "Munin"
16842
msgstr ""
16843
16844
#: serverguide/C/monitoring.xml:430(para)
16845
msgid ""
16846
"Before installing <application>Munin</application> on "
16847
"<emphasis>server01</emphasis><application>apache2</application> will need to "
16848
"be installed. The default configuration is fine for running a "
16849
"<application>munin</application> server. For more information see <xref "
16850
"linkend=\"httpd\"/>."
16851
msgstr ""
16852
16853
#: serverguide/C/monitoring.xml:436(para)
16854
msgid ""
16855
"First, on <emphasis>server01</emphasis> install "
16856
"<application>munin</application>. In a terminal enter:"
16857
msgstr ""
16858
16859
#: serverguide/C/monitoring.xml:441(command)
16860
msgid "sudo apt-get install munin"
16861
msgstr ""
16862
16863
#: serverguide/C/monitoring.xml:444(para)
16864
msgid ""
16865
"Now on <emphasis>server02</emphasis> install the <application>munin-"
16866
"node</application> package:"
16867
msgstr ""
16868
16869
#: serverguide/C/monitoring.xml:449(command)
16870
msgid "sudo apt-get install munin-node"
16871
msgstr ""
16872
16873
#: serverguide/C/monitoring.xml:456(para)
16874
msgid ""
16875
"On <emphasis>server01</emphasis> edit the "
16876
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
16877
"<emphasis>server02</emphasis>:"
16878
msgstr ""
16879
16880
#: serverguide/C/monitoring.xml:461(programlisting)
16881
#, no-wrap
16882
msgid ""
16883
"\n"
16884
"## First our \"normal\" host.\n"
16885
"[server02]\n"
16886
" address 172.18.100.101\n"
16887
msgstr ""
16888
16889
#: serverguide/C/monitoring.xml:468(para)
16890
msgid ""
16891
"Replace <emphasis>server02</emphasis> and "
16892
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
16893
"for your server."
16894
msgstr ""
16895
16896
#: serverguide/C/monitoring.xml:474(para)
16897
msgid ""
16898
"Next, configure <application>munin-node</application> on "
16899
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
16900
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
16901
msgstr ""
16902
16903
#: serverguide/C/monitoring.xml:479(programlisting)
16904
#, no-wrap
16905
msgid ""
16906
"\n"
16907
"allow ^172\\.18\\.100\\.100$\n"
16908
msgstr ""
16909
16910
#: serverguide/C/monitoring.xml:484(para)
16911
msgid ""
16912
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
16913
"<application>munin</application> server."
16914
msgstr ""
16915
16916
#: serverguide/C/monitoring.xml:489(para)
16917
msgid ""
16918
"Now restart <application>munin-node</application> on "
16919
"<emphasis>server02</emphasis> for the changes to take effect:"
16920
msgstr ""
16921
16922
#: serverguide/C/monitoring.xml:494(command)
16923
msgid "sudo /etc/init.d/munin-node restart"
16924
msgstr ""
16925
16926
#: serverguide/C/monitoring.xml:497(para)
16927
msgid ""
16928
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
16929
"you should see links to nice graphs displaying information from the standard "
16930
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
16931
msgstr ""
16932
16933
#: serverguide/C/monitoring.xml:503(para)
16934
msgid ""
16935
"Since this is a new install it may take some time for the graphs to display "
16936
"anything useful."
16937
msgstr ""
16938
16939
#: serverguide/C/monitoring.xml:510(title)
16940
msgid "Additional Plugins"
16941
msgstr ""
16942
16943
#: serverguide/C/monitoring.xml:512(para)
16944
msgid ""
16945
"The <application>munin-plugins-extra</application> package contains "
16946
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
16947
"install the package, from a terminal enter:"
16948
msgstr ""
16949
16950
#: serverguide/C/monitoring.xml:518(command)
16951
msgid "sudo apt-get install munin-plugins-extra"
16952
msgstr ""
16953
16954
#: serverguide/C/monitoring.xml:521(para)
16955
msgid "Be sure to install the package on both the server and node machines."
16956
msgstr ""
16957
16958
#: serverguide/C/monitoring.xml:531(para)
16959
msgid ""
16960
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
16961
"website for more details."
16962
msgstr ""
16963
16964
#: serverguide/C/monitoring.xml:536(para)
16965
msgid ""
16966
"Specifically the <ulink "
16967
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
16968
"Documentation</ulink> page includes information on additional plugins, "
16969
"writing plugins, etc."
16970
msgstr ""
16971
16972
#: serverguide/C/monitoring.xml:542(para)
16973
msgid ""
16974
"Also, there is a book in German by Open Source Press: <ulink "
16975
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
16976
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
16977
msgstr ""
16978
16979
#: serverguide/C/monitoring.xml:548(para)
16980
msgid ""
16981
"Another resource is the <ulink "
16982
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
16983
"page."
16984
msgstr ""
16985
16986
#: serverguide/C/mail.xml:13(title)
16987
msgid "Email Services"
16988
msgstr ""
16989
16990
#: serverguide/C/mail.xml:14(para)
16991
msgid ""
16992
"The process of getting an email from one person to another over a network or "
16993
"the Internet involves many systems working together. Each of these systems "
16994
"must be correctly configured for the process to work. The sender uses a "
16995
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
16996
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
16997
"the last of which will hand it off to a <emphasis>Mail Delivery "
16998
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
16999
"it will be retrieved by the recipient's email client, usually via a POP3 or "
17000
"IMAP server."
17001
msgstr ""
17002
17003
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
17004
msgid "Postfix"
17005
msgstr ""
17006
17007
#: serverguide/C/mail.xml:25(para)
17008
msgid ""
17009
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
17010
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
17011
"compatible with the MTA <application>sendmail</application>. This section "
17012
"explains how to install and configure <application>postfix</application>. It "
17013
"also explains how to set it up as an SMTP server using a secure connection "
17014
"(for sending emails securely)."
17015
msgstr ""
17016
17017
#: serverguide/C/mail.xml:34(para)
17018
msgid ""
17019
"This guide does not cover setting up Postfix <emphasis>Virtual "
17020
"Domains</emphasis>, for information on Virtual Domains and other advanced "
17021
"configurations see <xref linkend=\"postfix-references\"/>."
17022
msgstr ""
17023
17024
#: serverguide/C/mail.xml:41(para)
17025
msgid ""
17026
"To install <application>postfix</application> run the following command:"
17027
msgstr ""
17028
17029
#: serverguide/C/mail.xml:47(para)
17030
msgid ""
17031
"Simply press return when the installation process asks questions, the "
17032
"configuration will be done in greater detail in the next stage."
17033
msgstr ""
17034
17035
#: serverguide/C/mail.xml:52(title)
17036
msgid "Basic Configuration"
17037
msgstr ""
17038
17039
#: serverguide/C/mail.xml:53(para)
17040
msgid ""
17041
"To configure <application>postfix</application>, run the following command:"
17042
msgstr ""
17043
17044
#: serverguide/C/mail.xml:57(command)
17045
msgid "sudo dpkg-reconfigure postfix"
17046
msgstr ""
17047
17048
#: serverguide/C/mail.xml:63(para)
17049
msgid "Internet Site"
17050
msgstr ""
17051
17052
#: serverguide/C/mail.xml:64(para)
17053
msgid "mail.example.com"
17054
msgstr ""
17055
17056
#: serverguide/C/mail.xml:65(para)
17057
msgid "steve"
17058
msgstr ""
17059
17060
#: serverguide/C/mail.xml:66(para)
17061
msgid "mail.example.com, localhost.localdomain, localhost"
17062
msgstr ""
17063
17064
#: serverguide/C/mail.xml:67(para)
17065
msgid "No"
17066
msgstr ""
17067
17068
#: serverguide/C/mail.xml:68(para)
17069
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
17070
msgstr ""
17071
17072
#: serverguide/C/mail.xml:69(para)
17073
msgid "0"
17074
msgstr ""
17075
17076
#: serverguide/C/mail.xml:70(para)
17077
msgid "+"
17078
msgstr ""
17079
17080
#: serverguide/C/mail.xml:71(para)
17081
msgid "all"
17082
msgstr ""
17083
17084
#: serverguide/C/mail.xml:59(para)
17085
msgid ""
17086
"The user interface will be displayed. On each screen, select the following "
17087
"values: <placeholder-1/>"
17088
msgstr ""
17089
17090
#: serverguide/C/mail.xml:75(para)
17091
msgid ""
17092
"Replace mail.example.com with the domain for which you'll accept email, "
17093
"192.168.0.0/24 with the actual network and class range of your mail server, "
17094
"and steve with the appropriate username."
17095
msgstr ""
17096
17097
#: serverguide/C/mail.xml:81(para)
17098
msgid ""
17099
"Now is a good time to decide which mailbox format you want to use. By "
17100
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
17101
"mailbox format. Rather than editing the configuration file directly, you can "
17102
"use the <command>postconf</command> command to configure all "
17103
"<application>postfix</application> parameters. The configuration parameters "
17104
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
17105
"you wish to re-configure a particular parameter, you can either run the "
17106
"command or change it manually in the file."
17107
msgstr ""
17108
17109
#: serverguide/C/mail.xml:92(para)
17110
msgid ""
17111
"To configure the mailbox format for <emphasis "
17112
"role=\"strong\">Maildir:</emphasis>"
17113
msgstr ""
17114
17115
#: serverguide/C/mail.xml:97(command)
17116
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
17117
msgstr ""
17118
17119
#: serverguide/C/mail.xml:100(para)
17120
msgid ""
17121
"This will place new mail in /home/<emphasis "
17122
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
17123
"your Mail Delivery Agent (MDA) to use the same path."
17124
msgstr ""
17125
17126
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17127
msgid "SMTP Authentication"
17128
msgstr ""
17129
17130
#: serverguide/C/mail.xml:110(para)
17131
msgid ""
17132
"SMTP-AUTH allows a client to identify itself through an authentication "
17133
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17134
"the authentication process. Once authenticated the SMTP server will allow "
17135
"the client to relay mail."
17136
msgstr ""
17137
17138
#: serverguide/C/mail.xml:117(para)
17139
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17140
msgstr ""
17141
17142
#: serverguide/C/mail.xml:120(screen)
17143
#, no-wrap
17144
msgid ""
17145
"\n"
17146
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17147
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17148
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17149
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17150
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17151
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17152
"sudo postconf -e 'smtpd_recipient_restrictions = "
17153
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17154
"sudo postconf -e 'inet_interfaces = all'\n"
17155
msgstr ""
17156
17157
#: serverguide/C/mail.xml:131(para)
17158
msgid ""
17159
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17160
"the Postfix queue directory."
17161
msgstr ""
17162
17163
#: serverguide/C/mail.xml:137(para)
17164
msgid ""
17165
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17166
"and-security\"/> for details. This example also uses a Certificate Authority "
17167
"(CA). For information on generating a CA certificate see <xref "
17168
"linkend=\"certificate-authority\"/>."
17169
msgstr ""
17170
17171
#: serverguide/C/mail.xml:143(para)
17172
msgid ""
17173
"You can get the digital certificate from a certificate authority. But unlike "
17174
"web clients, SMTP clients rarely complain about \"self-signed "
17175
"certificates\", so alternatively, you can create the certificate yourself. "
17176
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17177
"details."
17178
msgstr ""
17179
17180
#: serverguide/C/mail.xml:155(para)
17181
msgid ""
17182
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17183
"both incoming and outgoing mail:"
17184
msgstr ""
17185
17186
#: serverguide/C/mail.xml:158(screen)
17187
#, no-wrap
17188
msgid ""
17189
"\n"
17190
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17191
"sudo postconf -e 'smtp_use_tls = yes'\n"
17192
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17193
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17194
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17195
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17196
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17197
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17198
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17199
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17200
"sudo postconf -e 'myhostname = mail.example.com'\n"
17201
msgstr ""
17202
17203
#: serverguide/C/mail.xml:173(para)
17204
msgid ""
17205
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17206
"the certificate enter:"
17207
msgstr ""
17208
17209
#: serverguide/C/mail.xml:177(command)
17210
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17211
msgstr ""
17212
17213
#: serverguide/C/mail.xml:180(para)
17214
msgid ""
17215
"Again, for more details about certificates see <xref linkend=\"certificates-"
17216
"and-security\"/>."
17217
msgstr ""
17218
17219
#: serverguide/C/mail.xml:186(para)
17220
msgid ""
17221
"After running all the commands, <application>Postfix</application> is "
17222
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17223
"TLS encryption."
17224
msgstr ""
17225
17226
#: serverguide/C/mail.xml:191(para)
17227
msgid ""
17228
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17229
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17230
msgstr ""
17231
17232
#: serverguide/C/mail.xml:195(para)
17233
msgid ""
17234
"The postfix initial configuration is complete. Run the following command to "
17235
"restart the postfix daemon:"
17236
msgstr ""
17237
17238
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17239
msgid "sudo /etc/init.d/postfix restart"
17240
msgstr ""
17241
17242
#: serverguide/C/mail.xml:204(para)
17243
msgid ""
17244
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17245
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17246
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17247
"However it is still necessary to set up SASL authentication before you can "
17248
"use SMTP-AUTH."
17249
msgstr ""
17250
17251
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17252
msgid "Configuring SASL"
17253
msgstr ""
17254
17255
#: serverguide/C/mail.xml:215(para)
17256
msgid ""
17257
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17258
"enable Dovecot SASL the <application>dovecot-common</application> package "
17259
"will need to be installed. From a terminal prompt enter the following:"
17260
msgstr ""
17261
17262
#: serverguide/C/mail.xml:221(command)
17263
msgid "sudo apt-get install dovecot-common"
17264
msgstr ""
17265
17266
#: serverguide/C/mail.xml:223(para)
17267
msgid ""
17268
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17269
"In the <emphasis>auth default</emphasis> section uncomment the "
17270
"<emphasis>socket listen</emphasis> option and change the following:"
17271
msgstr ""
17272
17273
#: serverguide/C/mail.xml:227(programlisting)
17274
#, no-wrap
17275
msgid ""
17276
"\n"
17277
" socket listen {\n"
17278
" #master {\n"
17279
" # Master socket provides access to userdb information. It's typically\n"
17280
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17281
" # can find mailbox locations.\n"
17282
" #path = /var/run/dovecot/auth-master\n"
17283
" #mode = 0600\n"
17284
" # Default user/group is the one who started dovecot-auth (root)\n"
17285
" #user = \n"
17286
" #group = \n"
17287
" #}\n"
17288
" client {\n"
17289
" # The client socket is generally safe to export to everyone. Typical "
17290
"use\n"
17291
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17292
" # using it.\n"
17293
" path = /var/spool/postfix/private/auth-client\n"
17294
" mode = 0660\n"
17295
" user = postfix\n"
17296
" group = postfix\n"
17297
" }\n"
17298
" }\n"
17299
msgstr ""
17300
17301
#: serverguide/C/mail.xml:251(para)
17302
msgid ""
17303
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17304
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17305
"add <emphasis>\"login\"</emphasis>:"
17306
msgstr ""
17307
17308
#: serverguide/C/mail.xml:256(programlisting)
17309
#, no-wrap
17310
msgid ""
17311
"\n"
17312
" mechanisms = plain login\n"
17313
msgstr ""
17314
17315
#: serverguide/C/mail.xml:260(para)
17316
msgid ""
17317
"Once you have <application>Dovecot</application> configured restart it with:"
17318
msgstr ""
17319
17320
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17321
msgid "sudo /etc/init.d/dovecot restart"
17322
msgstr ""
17323
17324
#: serverguide/C/mail.xml:269(title)
17325
msgid "Postfix-Dovecot"
17326
msgstr ""
17327
17328
#: serverguide/C/mail.xml:271(para)
17329
msgid ""
17330
"Another option for configuring <application>Postfix</application> for SMTP-"
17331
"AUTH is using the <application>dovecot-postfix</application> package. This "
17332
"package will install <application>Dovecot</application> and configure "
17333
"<application>Postfix</application> to use it for both SASL authentication "
17334
"and as a Mail Delivery Agent (MDA). The package also configures "
17335
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17336
msgstr ""
17337
17338
#: serverguide/C/mail.xml:280(para)
17339
msgid ""
17340
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17341
"server. For example, if you are configuring your server to be a mail "
17342
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17343
"the above commands to configure Postfix for SMTPAUTH."
17344
msgstr ""
17345
17346
#: serverguide/C/mail.xml:287(para)
17347
msgid "To install the package, from a terminal prompt enter:"
17348
msgstr ""
17349
17350
#: serverguide/C/mail.xml:292(command)
17351
msgid "sudo apt-get install dovecot-postfix"
17352
msgstr ""
17353
17354
#: serverguide/C/mail.xml:295(para)
17355
msgid ""
17356
"You should now have a working mail server, but there are a few options that "
17357
"you may wish to further customize. For example, the package uses the "
17358
"certificate and key from the <application>ssl-cert</application> package, "
17359
"and in a production environment you should use a certificate and key "
17360
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17361
"for more details."
17362
msgstr ""
17363
17364
#: serverguide/C/mail.xml:301(para)
17365
msgid ""
17366
"Once you have a customized certificate and key for the host, change the "
17367
"following options in <filename>/etc/postfix/main.cf</filename>:"
17368
msgstr ""
17369
17370
#: serverguide/C/mail.xml:305(programlisting)
17371
#, no-wrap
17372
msgid ""
17373
"\n"
17374
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17375
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17376
msgstr ""
17377
17378
#: serverguide/C/mail.xml:310(para)
17379
msgid "Then restart Postfix:"
17380
msgstr ""
17381
17382
#: serverguide/C/mail.xml:321(para)
17383
msgid ""
17384
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17385
msgstr ""
17386
17387
#: serverguide/C/mail.xml:324(para)
17388
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17389
msgstr ""
17390
17391
#: serverguide/C/mail.xml:329(command)
17392
msgid "telnet mail.example.com 25"
17393
msgstr ""
17394
17395
#: serverguide/C/mail.xml:331(para)
17396
msgid ""
17397
"After you have established the connection to the postfix mail server, type:"
17398
msgstr ""
17399
17400
#: serverguide/C/mail.xml:335(screen)
17401
#, no-wrap
17402
msgid ""
17403
"\n"
17404
"ehlo mail.example.com\n"
17405
msgstr ""
17406
17407
#: serverguide/C/mail.xml:338(para)
17408
msgid ""
17409
"If you see the following lines among others, then everything is working "
17410
"perfectly. Type <command>quit</command> to exit."
17411
msgstr ""
17412
17413
#: serverguide/C/mail.xml:342(programlisting)
17414
#, no-wrap
17415
msgid ""
17416
"\n"
17417
"250-STARTTLS\n"
17418
"250-AUTH LOGIN PLAIN\n"
17419
"250-AUTH=LOGIN PLAIN\n"
17420
"250 8BITMIME\n"
17421
msgstr ""
17422
17423
#: serverguide/C/mail.xml:352(para)
17424
msgid ""
17425
"This section introduces some common ways to determine the cause if problems "
17426
"arise."
17427
msgstr ""
17428
17429
#: serverguide/C/mail.xml:356(title)
17430
msgid "Escaping chroot"
17431
msgstr ""
17432
17433
#: serverguide/C/mail.xml:357(para)
17434
msgid ""
17435
"The Ubuntu <application>postfix</application> package will by default "
17436
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17437
"This can add greater complexity when troubleshooting problems."
17438
msgstr ""
17439
17440
#: serverguide/C/mail.xml:361(para)
17441
msgid ""
17442
"To turn off the chroot operation locate for the following line in the "
17443
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17444
msgstr ""
17445
17446
#: serverguide/C/mail.xml:365(screen)
17447
#, no-wrap
17448
msgid ""
17449
"\n"
17450
"smtp inet n - - - - smtpd\n"
17451
msgstr ""
17452
17453
#: serverguide/C/mail.xml:368(para)
17454
msgid "and modify it as follows:"
17455
msgstr ""
17456
17457
#: serverguide/C/mail.xml:371(screen)
17458
#, no-wrap
17459
msgid ""
17460
"\n"
17461
"smtp inet n - n - - smtpd\n"
17462
msgstr ""
17463
17464
#: serverguide/C/mail.xml:374(para)
17465
msgid ""
17466
"You will then need to restart Postfix to use the new configuration. From a "
17467
"terminal prompt enter:"
17468
msgstr ""
17469
17470
#: serverguide/C/mail.xml:382(title)
17471
msgid "Log Files"
17472
msgstr ""
17473
17474
#: serverguide/C/mail.xml:383(para)
17475
msgid ""
17476
"<application>Postfix</application> sends all log messages to "
17477
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17478
"can sometimes get lost in the normal log output so they are also logged to "
17479
"<filename>/var/log/mail.err</filename> and "
17480
"<filename>/var/log/mail.warn</filename> respectively."
17481
msgstr ""
17482
17483
#: serverguide/C/mail.xml:388(para)
17484
msgid ""
17485
"To see messages entered into the logs in real time you can use the "
17486
"<application>tail -f</application> command:"
17487
msgstr ""
17488
17489
#: serverguide/C/mail.xml:393(command)
17490
msgid "tail -f /var/log/mail.err"
17491
msgstr ""
17492
17493
#: serverguide/C/mail.xml:395(para)
17494
msgid ""
17495
"The amount of detail that is recorded in the logs can be increased. Below "
17496
"are some configuration options for increasing the log level for some of the "
17497
"areas covered above."
17498
msgstr ""
17499
17500
#: serverguide/C/mail.xml:401(para)
17501
msgid ""
17502
"To increase <emphasis>TLS</emphasis> activity logging set the "
17503
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17504
msgstr ""
17505
17506
#: serverguide/C/mail.xml:405(command)
17507
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17508
msgstr ""
17509
17510
#: serverguide/C/mail.xml:409(para)
17511
msgid ""
17512
"If you are having trouble sending or receiving mail from a specific domain "
17513
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17514
msgstr ""
17515
17516
#: serverguide/C/mail.xml:414(command)
17517
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17518
msgstr ""
17519
17520
#: serverguide/C/mail.xml:418(para)
17521
msgid ""
17522
"You can increase the verbosity of any <application>Postfix</application> "
17523
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17524
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17525
"<emphasis>smtp</emphasis> entry:"
17526
msgstr ""
17527
17528
#: serverguide/C/mail.xml:422(programlisting)
17529
#, no-wrap
17530
msgid ""
17531
"\n"
17532
"smtp unix - - - - - smtp -v\n"
17533
msgstr ""
17534
17535
#: serverguide/C/mail.xml:428(para)
17536
msgid ""
17537
"It is important to note that after making one of the logging changes above "
17538
"the <application>Postfix</application> process will need to be reloaded in "
17539
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17540
"reload</command>"
17541
msgstr ""
17542
17543
#: serverguide/C/mail.xml:435(para)
17544
msgid ""
17545
"To increase the amount of information logged when troubleshooting "
17546
"<emphasis>SASL</emphasis> issues you can set the following options in "
17547
"<filename>/etc/dovecot/dovecot.conf</filename>"
17548
msgstr ""
17549
17550
#: serverguide/C/mail.xml:439(programlisting)
17551
#, no-wrap
17552
msgid ""
17553
"\n"
17554
"auth_debug=yes\n"
17555
"auth_debug_passwords=yes\n"
17556
msgstr ""
17557
17558
#: serverguide/C/mail.xml:446(para)
17559
msgid ""
17560
"Just like <application>Postfix</application> if you change a "
17561
"<application>Dovecot</application> configuration the process will need to be "
17562
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17563
msgstr ""
17564
17565
#: serverguide/C/mail.xml:452(para)
17566
msgid ""
17567
"Some of the options above can drastically increase the amount of information "
17568
"sent to the log files. Remember to return the log level back to normal after "
17569
"you have corrected the problem. Then reload the appropriate daemon for the "
17570
"new configuration to take affect."
17571
msgstr ""
17572
17573
#: serverguide/C/mail.xml:460(para)
17574
msgid ""
17575
"Administering a <application>Postfix</application> server can be a very "
17576
"complicated task. At some point you may need to turn to the Ubuntu community "
17577
"for more experienced help."
17578
msgstr ""
17579
17580
#: serverguide/C/mail.xml:464(para)
17581
msgid ""
17582
"A great place to ask for <application>Postfix</application> assistance, and "
17583
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17584
"server</emphasis> IRC channel on <ulink "
17585
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17586
"one of the <ulink "
17587
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17588
msgstr ""
17589
17590
#: serverguide/C/mail.xml:469(para)
17591
msgid ""
17592
"For in depth <application>Postfix</application> information Ubuntu "
17593
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17594
"Book of Postfix</ulink>."
17595
msgstr ""
17596
17597
#: serverguide/C/mail.xml:473(para)
17598
msgid ""
17599
"Finally, the <ulink "
17600
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17601
"also has great documentation on all the different configuration options "
17602
"available."
17603
msgstr ""
17604
17605
#: serverguide/C/mail.xml:477(para)
17606
msgid ""
17607
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17608
"Wiki Postifx</ulink> page has more information."
17609
msgstr ""
17610
17611
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17612
msgid "Exim4"
17613
msgstr ""
17614
17615
#: serverguide/C/mail.xml:486(para)
17616
msgid ""
17617
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17618
"developed at the University of Cambridge for use on Unix systems connected "
17619
"to the Internet. Exim can be installed in place of "
17620
"<application>sendmail</application>, although the configuration of "
17621
"<application>exim</application> is quite different to that of "
17622
"<application>sendmail</application>."
17623
msgstr ""
17624
17625
#: serverguide/C/mail.xml:497(para)
17626
msgid ""
17627
"To install <application>exim4</application>, run the following command: "
17628
"<screen>\n"
17629
"<command>sudo apt-get install exim4</command>\n"
17630
"</screen>"
17631
msgstr ""
17632
17633
#: serverguide/C/mail.xml:506(para)
17634
msgid ""
17635
"To configure <application>Exim4</application>, run the following command:"
17636
msgstr ""
17637
17638
#: serverguide/C/mail.xml:510(command)
17639
msgid "sudo dpkg-reconfigure exim4-config"
17640
msgstr ""
17641
17642
#: serverguide/C/mail.xml:512(para)
17643
msgid ""
17644
"The user interface will be displayed. The user interface lets you configure "
17645
"many parameters. For example, In <application>Exim4</application> the "
17646
"configuration files are split among multiple files. If you wish to have them "
17647
"in one file you can configure accordingly in this user interface."
17648
msgstr ""
17649
17650
#: serverguide/C/mail.xml:520(para)
17651
msgid ""
17652
"All the parameters you configure in the user interface are stored in "
17653
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17654
"re-configure, either you re-run the configuration wizard or manually edit "
17655
"this file using your favorite editor. Once you configure, you can run the "
17656
"following command to generate the master configuration file:"
17657
msgstr ""
17658
17659
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17660
msgid "sudo update-exim4.conf"
17661
msgstr ""
17662
17663
#: serverguide/C/mail.xml:533(para)
17664
msgid ""
17665
"The master configuration file, is generated and it is stored in "
17666
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17667
msgstr ""
17668
17669
#: serverguide/C/mail.xml:539(para)
17670
msgid ""
17671
"At any time, you should not edit the master configuration file, "
17672
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17673
"updated automatically every time you run <command>update-exim4.conf</command>"
17674
msgstr ""
17675
17676
#: serverguide/C/mail.xml:547(para)
17677
msgid ""
17678
"You can run the following command to start <application>Exim4</application> "
17679
"daemon."
17680
msgstr ""
17681
17682
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17683
msgid "sudo /etc/init.d/exim4 start"
17684
msgstr ""
17685
17686
#: serverguide/C/mail.xml:557(para)
17687
msgid ""
17688
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17689
msgstr ""
17690
17691
#: serverguide/C/mail.xml:560(para)
17692
msgid ""
17693
"The first step is to create a certificate for use with TLS. Enter the "
17694
"following into a terminal prompt:"
17695
msgstr ""
17696
17697
#: serverguide/C/mail.xml:564(command)
17698
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17699
msgstr ""
17700
17701
#: serverguide/C/mail.xml:566(para)
17702
msgid ""
17703
"Now Exim4 needs to be configured for TLS by editing "
17704
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17705
"the following:"
17706
msgstr ""
17707
17708
#: serverguide/C/mail.xml:570(programlisting)
17709
#, no-wrap
17710
msgid ""
17711
"\n"
17712
"MAIN_TLS_ENABLE = yes\n"
17713
msgstr ""
17714
17715
#: serverguide/C/mail.xml:573(para)
17716
msgid ""
17717
"Next you need to configure <application>Exim4</application> to use the "
17718
"<application>saslauthd</application> for authentication. Edit "
17719
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17720
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17721
"<emphasis>login_saslauthd_server</emphasis> sections:"
17722
msgstr ""
17723
17724
#: serverguide/C/mail.xml:578(programlisting)
17725
#, no-wrap
17726
msgid ""
17727
"\n"
17728
" plain_saslauthd_server:\n"
17729
" driver = plaintext\n"
17730
" public_name = PLAIN\n"
17731
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17732
" server_set_id = $auth2\n"
17733
" server_prompts = :\n"
17734
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17735
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17736
" .endif\n"
17737
"#\n"
17738
" login_saslauthd_server:\n"
17739
" driver = plaintext\n"
17740
" public_name = LOGIN\n"
17741
" server_prompts = \"Username:: : Password::\"\n"
17742
" # don't send system passwords over unencrypted connections\n"
17743
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
17744
" server_set_id = $auth1\n"
17745
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17746
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17747
" .endif\n"
17748
msgstr ""
17749
17750
#: serverguide/C/mail.xml:600(para)
17751
msgid "Finally, update the Exim4 configuration and restart the service:"
17752
msgstr ""
17753
17754
#: serverguide/C/mail.xml:605(command)
17755
msgid "sudo /etc/init.d/exim4 restart"
17756
msgstr ""
17757
17758
#: serverguide/C/mail.xml:610(para)
17759
msgid ""
17760
"This section provides details on configuring the saslauthd to provide "
17761
"authentication for <application>Exim4</application>."
17762
msgstr ""
17763
17764
#: serverguide/C/mail.xml:613(para)
17765
msgid ""
17766
"The first step is to install the sasl2-bin package. From a terminal prompt "
17767
"enter the following:"
17768
msgstr ""
17769
17770
#: serverguide/C/mail.xml:617(command)
17771
msgid "sudo apt-get install sasl2-bin"
17772
msgstr ""
17773
17774
#: serverguide/C/mail.xml:619(para)
17775
msgid ""
17776
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
17777
"and set START=no to:"
17778
msgstr ""
17779
17780
#: serverguide/C/mail.xml:622(programlisting)
17781
#, no-wrap
17782
msgid ""
17783
"\n"
17784
"START=yes\n"
17785
msgstr ""
17786
17787
#: serverguide/C/mail.xml:625(para)
17788
msgid ""
17789
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
17790
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
17791
"service:"
17792
msgstr ""
17793
17794
#: serverguide/C/mail.xml:630(command)
17795
msgid "sudo adduser Debian-exim sasl"
17796
msgstr ""
17797
17798
#: serverguide/C/mail.xml:632(para)
17799
msgid "Now start the <application>saslauthd</application> service:"
17800
msgstr ""
17801
17802
#: serverguide/C/mail.xml:636(command)
17803
msgid "sudo /etc/init.d/saslauthd start"
17804
msgstr ""
17805
17806
#: serverguide/C/mail.xml:638(para)
17807
msgid ""
17808
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
17809
"and SASL authentication."
17810
msgstr ""
17811
17812
#: serverguide/C/mail.xml:647(para)
17813
msgid ""
17814
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
17815
"information."
17816
msgstr ""
17817
17818
#: serverguide/C/mail.xml:652(para)
17819
msgid ""
17820
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
17821
"server\">Exim4 Book</ulink> available."
17822
msgstr ""
17823
17824
#: serverguide/C/mail.xml:657(para)
17825
msgid ""
17826
"Another resource is the <ulink "
17827
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
17828
"page."
17829
msgstr ""
17830
17831
#: serverguide/C/mail.xml:666(title)
17832
msgid "Dovecot Server"
17833
msgstr ""
17834
17835
#: serverguide/C/mail.xml:667(para)
17836
msgid ""
17837
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
17838
"security primarily in mind. It supports the major mailbox formats: mbox or "
17839
"Maildir. This section explain how to set it up as an imap or pop3 server."
17840
msgstr ""
17841
17842
#: serverguide/C/mail.xml:675(para)
17843
msgid ""
17844
"To install <application>dovecot</application>, run the following command in "
17845
"the command prompt:"
17846
msgstr ""
17847
17848
#: serverguide/C/mail.xml:680(command)
17849
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
17850
msgstr ""
17851
17852
#: serverguide/C/mail.xml:685(para)
17853
msgid ""
17854
"To configure <application>dovecot</application>, you can edit the file "
17855
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
17856
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
17857
"secure). A description of these protocols is beyond the scope of this guide. "
17858
"For further information, refer to the Wikipedia articles on <ulink "
17859
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
17860
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
17861
"link>."
17862
msgstr ""
17863
17864
#: serverguide/C/mail.xml:695(para)
17865
msgid ""
17866
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
17867
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
17868
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
17869
msgstr ""
17870
17871
#: serverguide/C/mail.xml:701(programlisting)
17872
#, no-wrap
17873
msgid ""
17874
"\n"
17875
"protocols = pop3 pop3s imap imaps\n"
17876
msgstr ""
17877
17878
#: serverguide/C/mail.xml:704(para)
17879
msgid ""
17880
"Next, choose the mailbox you would like to use. "
17881
"<application>Dovecot</application> supports <emphasis "
17882
"role=\"strong\">maildir</emphasis> and <emphasis "
17883
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
17884
"mailbox formats. They both have their own benefits and are discussed on "
17885
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
17886
"site</ulink>."
17887
msgstr ""
17888
17889
#: serverguide/C/mail.xml:712(para)
17890
msgid ""
17891
"Once you have chosen your mailbox type, edit the file "
17892
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
17893
msgstr ""
17894
17895
#: serverguide/C/mail.xml:717(programlisting)
17896
#, no-wrap
17897
msgid ""
17898
"\n"
17899
"mail_location = maildir:~/Maildir # (for maildir)\n"
17900
"or\n"
17901
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
17902
msgstr ""
17903
17904
#: serverguide/C/mail.xml:723(para)
17905
msgid ""
17906
"You should configure your Mail Transport Agent (MTA) to transfer the "
17907
"incoming mail to this type of mailbox if it is different from the one you "
17908
"have configured."
17909
msgstr ""
17910
17911
#: serverguide/C/mail.xml:729(para)
17912
msgid ""
17913
"Once you have configured dovecot, restart the "
17914
"<application>dovecot</application> daemon in order to test your setup:"
17915
msgstr ""
17916
17917
#: serverguide/C/mail.xml:738(para)
17918
msgid ""
17919
"If you have enabled imap, or pop3, you can also try to log in with the "
17920
"commands <command>telnet localhost pop3</command> or <command>telnet "
17921
"localhost imap2</command>. If you see something like the following, the "
17922
"installation has been successful:"
17923
msgstr ""
17924
17925
#: serverguide/C/mail.xml:745(programlisting)
17926
#, no-wrap
17927
msgid ""
17928
"\n"
17929
"bhuvan@rainbow:~$ telnet localhost pop3\n"
17930
"Trying 127.0.0.1...\n"
17931
"Connected to localhost.localdomain.\n"
17932
"Escape character is '^]'.\n"
17933
"+OK Dovecot ready.\n"
17934
msgstr ""
17935
17936
#: serverguide/C/mail.xml:754(title)
17937
msgid "Dovecot SSL Configuration"
17938
msgstr ""
17939
17940
#: serverguide/C/mail.xml:755(para)
17941
msgid ""
17942
"To configure <application>dovecot</application> to use SSL, you can edit the "
17943
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
17944
"lines:"
17945
msgstr ""
17946
17947
#: serverguide/C/mail.xml:760(programlisting)
17948
#, no-wrap
17949
msgid ""
17950
"\n"
17951
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
17952
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
17953
"ssl_disable = no\n"
17954
"disable_plaintext_auth = no\n"
17955
msgstr ""
17956
17957
#: serverguide/C/mail.xml:766(para)
17958
msgid ""
17959
"You can get the SSL certificate from a Certificate Issuing Authority or you "
17960
"can create self signed SSL certificate. The latter is a good option for "
17961
"email, because SMTP clients rarely complain about \"self-signed "
17962
"certificates\". Please refer to <xref linkend=\"certificates-and-"
17963
"security\"/> for details about how to create self signed SSL certificate. "
17964
"Once you create the certificate, you will have a key file and a certificate "
17965
"file. Please copy them to the location pointed in the "
17966
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
17967
msgstr ""
17968
17969
#: serverguide/C/mail.xml:781(title)
17970
msgid "Firewall Configuration for an Email Server"
17971
msgstr ""
17972
17973
#: serverguide/C/mail.xml:787(para)
17974
msgid "IMAP - 143"
17975
msgstr ""
17976
17977
#: serverguide/C/mail.xml:788(para)
17978
msgid "IMAPS - 993"
17979
msgstr ""
17980
17981
#: serverguide/C/mail.xml:789(para)
17982
msgid "POP3 - 110"
17983
msgstr ""
17984
17985
#: serverguide/C/mail.xml:790(para)
17986
msgid "POP3S - 995"
17987
msgstr ""
17988
17989
#: serverguide/C/mail.xml:782(para)
17990
msgid ""
17991
"To access your mail server from another computer, you must configure your "
17992
"firewall to allow connections to the server on the necessary ports. "
17993
"<placeholder-1/>"
17994
msgstr ""
17995
17996
#: serverguide/C/mail.xml:799(para)
17997
msgid ""
17998
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
17999
"more information."
18000
msgstr ""
18001
18002
#: serverguide/C/mail.xml:804(para)
18003
msgid ""
18004
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
18005
"Ubuntu Wiki</ulink> page has more details."
18006
msgstr ""
18007
18008
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
18009
msgid "Mailman"
18010
msgstr ""
18011
18012
#: serverguide/C/mail.xml:814(para)
18013
msgid ""
18014
"Mailman is an open source program for managing electronic mail discussions "
18015
"and e-newsletter lists. Many open source mailing lists (including all the "
18016
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
18017
"Mailman as their mailing list software. It is powerful and easy to install "
18018
"and maintain."
18019
msgstr ""
18020
18021
#: serverguide/C/mail.xml:824(para)
18022
msgid ""
18023
"Mailman provides a web interface for the administrators and users, using an "
18024
"external mail server to send and receive emails. It works perfectly with the "
18025
"following mail servers:"
18026
msgstr ""
18027
18028
#: serverguide/C/mail.xml:835(application)
18029
msgid "Exim"
18030
msgstr ""
18031
18032
#: serverguide/C/mail.xml:838(application)
18033
msgid "Sendmail"
18034
msgstr ""
18035
18036
#: serverguide/C/mail.xml:841(application)
18037
msgid "Qmail"
18038
msgstr ""
18039
18040
#: serverguide/C/mail.xml:846(para)
18041
msgid ""
18042
"We will see how to install and configure Mailman with, the Apache web "
18043
"server, and either the Postfix or Exim mail server. If you wish to install "
18044
"Mailman with a different mail server, please refer to the references section."
18045
msgstr ""
18046
18047
#: serverguide/C/mail.xml:853(para)
18048
msgid ""
18049
"You only need to install one mail server and "
18050
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
18051
msgstr ""
18052
18053
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
18054
msgid "Apache2"
18055
msgstr ""
18056
18057
#: serverguide/C/mail.xml:859(para)
18058
msgid ""
18059
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
18060
"installation\">HTTPD Installation</ulink> section for details."
18061
msgstr ""
18062
18063
#: serverguide/C/mail.xml:867(para)
18064
msgid ""
18065
"For instructions on installing and configuring Postfix refer to <xref "
18066
"linkend=\"postfix\"/>"
18067
msgstr ""
18068
18069
#: serverguide/C/mail.xml:873(para)
18070
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
18071
msgstr ""
18072
18073
#: serverguide/C/mail.xml:884(application)
18074
msgid "dc_use_split_config='true'"
18075
msgstr ""
18076
18077
#: serverguide/C/mail.xml:876(para)
18078
msgid ""
18079
"Once exim4 is installed, the configuration files are stored in the "
18080
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
18081
"configuration files are split across different files. You can change this "
18082
"behavior by changing the following variable in the "
18083
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
18084
msgstr ""
18085
18086
#: serverguide/C/mail.xml:891(para)
18087
msgid ""
18088
"To install <application>Mailman</application>, run following command at a "
18089
"terminal prompt:"
18090
msgstr ""
18091
18092
#: serverguide/C/mail.xml:895(command)
18093
msgid "sudo apt-get install mailman"
18094
msgstr ""
18095
18096
#: serverguide/C/mail.xml:897(para)
18097
msgid ""
18098
"It copies the installation files in "
18099
"<application>/var/lib/mailman</application> directory. It installs the CGI "
18100
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
18101
"creates <emphasis>list</emphasis> linux user. It creates the "
18102
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
18103
"this user."
18104
msgstr ""
18105
18106
#: serverguide/C/mail.xml:909(para)
18107
msgid ""
18108
"This section assumes you have successfully installed "
18109
"<application>mailman</application>, <application>apache2</application>, and "
18110
"<application>postfix</application> or <application>exim4</application>. Now "
18111
"you just need to configure them."
18112
msgstr ""
18113
18114
#: serverguide/C/mail.xml:918(para)
18115
msgid ""
18116
"An example Apache configuration file comes with "
18117
"<application>Mailman</application> and is placed in "
18118
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
18119
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
18120
"available</filename>:"
18121
msgstr ""
18122
18123
#: serverguide/C/mail.xml:924(command)
18124
msgid ""
18125
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18126
msgstr ""
18127
18128
#: serverguide/C/mail.xml:926(para)
18129
msgid ""
18130
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18131
"Mailman administration site. Now enable the new configuration and restart "
18132
"Apache:"
18133
msgstr ""
18134
18135
#: serverguide/C/mail.xml:931(command)
18136
msgid "sudo a2ensite mailman.conf"
18137
msgstr ""
18138
18139
#: serverguide/C/mail.xml:934(para)
18140
msgid ""
18141
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18142
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18143
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18144
"can make changes to the <filename>/etc/apache2/sites-"
18145
"available/mailman.conf</filename> file if you wish to change this behavior."
18146
msgstr ""
18147
18148
#: serverguide/C/mail.xml:945(para)
18149
msgid ""
18150
"For <application>Postfix</application> integration, we will associate the "
18151
"domain lists.example.com with the mailing lists. Please replace "
18152
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18153
msgstr ""
18154
18155
#: serverguide/C/mail.xml:949(para)
18156
msgid ""
18157
"You can use the postconf command to add the necessary configuration to "
18158
"<filename>/etc/postfix/main.cf</filename>:"
18159
msgstr ""
18160
18161
#: serverguide/C/mail.xml:953(command)
18162
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18163
msgstr ""
18164
18165
#: serverguide/C/mail.xml:954(command)
18166
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18167
msgstr ""
18168
18169
#: serverguide/C/mail.xml:955(command)
18170
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18171
msgstr ""
18172
18173
#: serverguide/C/mail.xml:957(para)
18174
msgid ""
18175
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18176
"the following transport:"
18177
msgstr ""
18178
18179
#: serverguide/C/mail.xml:960(programlisting)
18180
#, no-wrap
18181
msgid ""
18182
"\n"
18183
"mailman unix - n n - - pipe\n"
18184
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18185
" ${nexthop} ${user}\n"
18186
msgstr ""
18187
18188
#: serverguide/C/mail.xml:965(para)
18189
msgid ""
18190
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18191
"is delivered to a list."
18192
msgstr ""
18193
18194
#: serverguide/C/mail.xml:968(para)
18195
msgid ""
18196
"Associate the domain lists.example.com to the Mailman transport with the "
18197
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18198
msgstr ""
18199
18200
#: serverguide/C/mail.xml:971(programlisting)
18201
#, no-wrap
18202
msgid ""
18203
"\n"
18204
"lists.example.com mailman:\n"
18205
msgstr ""
18206
18207
#: serverguide/C/mail.xml:974(para)
18208
msgid ""
18209
"Now have <application>Postfix</application> build the transport map by "
18210
"entering the following from a terminal prompt:"
18211
msgstr ""
18212
18213
#: serverguide/C/mail.xml:978(command)
18214
msgid "sudo postmap -v /etc/postfix/transport"
18215
msgstr ""
18216
18217
#: serverguide/C/mail.xml:980(para)
18218
msgid "Then restart Postfix to enable the new configurations:"
18219
msgstr ""
18220
18221
#: serverguide/C/mail.xml:989(para)
18222
msgid ""
18223
"Once Exim4 is installed, you can start the Exim server using the following "
18224
"command from a terminal prompt:"
18225
msgstr ""
18226
18227
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18228
msgid "Main"
18229
msgstr ""
18230
18231
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18232
msgid "Transport"
18233
msgstr ""
18234
18235
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18236
msgid "Router"
18237
msgstr ""
18238
18239
#: serverguide/C/mail.xml:996(para)
18240
msgid ""
18241
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18242
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18243
"different types. For details, please refer to the <ulink "
18244
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18245
"add new a configuration file to the following configuration types: "
18246
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18247
"these mini configuration files. So, the order of these configuration files "
18248
"is very important."
18249
msgstr ""
18250
18251
#: serverguide/C/mail.xml:1027(programlisting)
18252
#, no-wrap
18253
msgid ""
18254
"\n"
18255
"# start\n"
18256
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18257
"# directory.\n"
18258
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18259
"# This is normally the same as ~mailman\n"
18260
"MM_HOME=/var/lib/mailman\n"
18261
"#\n"
18262
"# User and group for Mailman, should match your --with-mail-gid\n"
18263
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18264
"MM_UID=list\n"
18265
"MM_GID=list\n"
18266
"#\n"
18267
"# Domains that your lists are in - colon separated list\n"
18268
"# you may wish to add these into local_domains as well\n"
18269
"domainlist mm_domains=hostname.com\n"
18270
"#\n"
18271
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18272
"#\n"
18273
"# These values are derived from the ones above and should not need\n"
18274
"# editing unless you have munged your mailman installation\n"
18275
"#\n"
18276
"# The path of the Mailman mail wrapper script\n"
18277
"MM_WRAP=MM_HOME/mail/mailman\n"
18278
"#\n"
18279
"# The path of the list config file (used as a required file when\n"
18280
"# verifying list addresses)\n"
18281
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18282
"# end\n"
18283
msgstr ""
18284
18285
#: serverguide/C/mail.xml:1021(para)
18286
msgid ""
18287
"All the configuration files belonging to the main type are stored in the "
18288
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18289
"following content to a new file, named <filename>04_exim4-"
18290
"config_mailman</filename>: <placeholder-1/>"
18291
msgstr ""
18292
18293
#: serverguide/C/mail.xml:1067(programlisting)
18294
#, no-wrap
18295
msgid ""
18296
"\n"
18297
" mailman_transport:\n"
18298
" driver = pipe\n"
18299
" command = MM_WRAP \\\n"
18300
" '${if def:local_part_suffix \\\n"
18301
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18302
"\\\n"
18303
" {post}}' \\\n"
18304
" $local_part\n"
18305
" current_directory = MM_HOME\n"
18306
" home_directory = MM_HOME\n"
18307
" user = MM_UID\n"
18308
" group = MM_GID\n"
18309
msgstr ""
18310
18311
#: serverguide/C/mail.xml:1061(para)
18312
msgid ""
18313
"All the configuration files belonging to transport type are stored in the "
18314
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18315
"following content to a new file named <filename> 40_exim4-"
18316
"config_mailman</filename>: <placeholder-1/>"
18317
msgstr ""
18318
18319
#: serverguide/C/mail.xml:1088(programlisting)
18320
#, no-wrap
18321
msgid ""
18322
"\n"
18323
" mailman_router:\n"
18324
" driver = accept\n"
18325
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18326
" local_part_suffix_optional\n"
18327
" local_part_suffix = -bounces : -bounces+* : \\\n"
18328
" -confirm+* : -join : -leave : \\\n"
18329
" -owner : -request : -admin\n"
18330
" transport = mailman_transport\n"
18331
msgstr ""
18332
18333
#: serverguide/C/mail.xml:1084(para)
18334
msgid ""
18335
"All the configuration files belonging to router type are stored in the "
18336
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18337
"following content in to a new file named <filename>101_exim4-"
18338
"config_mailman</filename>: <placeholder-1/>"
18339
msgstr ""
18340
18341
#: serverguide/C/mail.xml:1101(para)
18342
msgid ""
18343
"The order of main and transport configuration files can be in any order. "
18344
"But, the order of router configuration files must be the same. This "
18345
"particular file must appear before the <application>200_exim4-"
18346
"config_primary</application> file. These two configuration files contain "
18347
"same type of information. The first file takes the precedence. For more "
18348
"details, please refer to the references section."
18349
msgstr ""
18350
18351
#: serverguide/C/mail.xml:1114(para)
18352
msgid ""
18353
"Once mailman is installed, you can run it using the following command:"
18354
msgstr ""
18355
18356
#: serverguide/C/mail.xml:1118(command)
18357
msgid "sudo /etc/init.d/mailman start"
18358
msgstr ""
18359
18360
#: serverguide/C/mail.xml:1120(para)
18361
msgid ""
18362
"Once mailman is installed, you should create the default mailing list. Run "
18363
"the following command to create the mailing list:"
18364
msgstr ""
18365
18366
#: serverguide/C/mail.xml:1126(command)
18367
msgid "sudo /usr/sbin/newlist mailman"
18368
msgstr ""
18369
18370
#: serverguide/C/mail.xml:1129(programlisting)
18371
#, no-wrap
18372
msgid ""
18373
"\n"
18374
" Enter the email address of the person running the list: bhuvan at "
18375
"ubuntu.com\n"
18376
" Initial mailman password:\n"
18377
" To finish creating your mailing list, you must edit your "
18378
"<filename>/etc/aliases</filename> (or\n"
18379
" equivalent) file by adding the following lines, and possibly running the\n"
18380
" `newaliases' program:\n"
18381
"\n"
18382
" ## mailman mailing list\n"
18383
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18384
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18385
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18386
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18387
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18388
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18389
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18390
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18391
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18392
"mailman\"\n"
18393
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18394
"mailman\"\n"
18395
"\n"
18396
" Hit enter to notify mailman owner...\n"
18397
"\n"
18398
" # \n"
18399
msgstr ""
18400
18401
#: serverguide/C/mail.xml:1152(para)
18402
msgid ""
18403
"We have configured either Postfix or Exim4 to recognize all emails from "
18404
"mailman. So, it is not mandatory to make any new entries in "
18405
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18406
"configuration files, please ensure that you restart those services before "
18407
"continuing to next section."
18408
msgstr ""
18409
18410
#: serverguide/C/mail.xml:1160(para)
18411
msgid ""
18412
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18413
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18414
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18415
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18416
msgstr ""
18417
18418
#: serverguide/C/mail.xml:1171(title)
18419
msgid "Administration"
18420
msgstr ""
18421
18422
#: serverguide/C/mail.xml:1172(para)
18423
msgid ""
18424
"We assume you have a default installation. The mailman cgi scripts are still "
18425
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18426
"Mailman provides a web based administration facility. To access this page, "
18427
"point your browser to the following url:"
18428
msgstr ""
18429
18430
#: serverguide/C/mail.xml:1180(para)
18431
msgid "http://hostname/cgi-bin/mailman/admin"
18432
msgstr ""
18433
18434
#: serverguide/C/mail.xml:1184(para)
18435
msgid ""
18436
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18437
"screen. If you click the mailing list name, it will ask for your "
18438
"authentication password. If you enter the correct password, you will be able "
18439
"to change administrative settings of this mailing list. You can create a new "
18440
"mailing list using the command line utility "
18441
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18442
"mailing list using the web interface."
18443
msgstr ""
18444
18445
#: serverguide/C/mail.xml:1197(title)
18446
msgid "Users"
18447
msgstr ""
18448
18449
#: serverguide/C/mail.xml:1198(para)
18450
msgid ""
18451
"Mailman provides a web based interface for users. To access this page, point "
18452
"your browser to the following url:"
18453
msgstr ""
18454
18455
#: serverguide/C/mail.xml:1203(para)
18456
msgid "http://hostname/cgi-bin/mailman/listinfo"
18457
msgstr ""
18458
18459
#: serverguide/C/mail.xml:1207(para)
18460
msgid ""
18461
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18462
"screen. If you click the mailing list name, it will display the subscription "
18463
"form. You can enter your email address, name (optional), and password to "
18464
"subscribe. An email invitation will be sent to you. You can follow the "
18465
"instructions in the email to subscribe."
18466
msgstr ""
18467
18468
#: serverguide/C/mail.xml:1219(ulink)
18469
msgid "GNU Mailman - Installation Manual"
18470
msgstr ""
18471
18472
#: serverguide/C/mail.xml:1223(ulink)
18473
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18474
msgstr ""
18475
18476
#: serverguide/C/mail.xml:1226(para)
18477
msgid ""
18478
"Also, see the <ulink "
18479
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18480
"Wiki</ulink> page."
18481
msgstr ""
18482
18483
#: serverguide/C/mail.xml:1232(title)
18484
msgid "Mail Filtering"
18485
msgstr ""
18486
18487
#: serverguide/C/mail.xml:1233(para)
18488
msgid ""
18489
"One of the largest issues with email today is the problem of Unsolicited "
18490
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18491
"and other forms of malware. According to some reports these messages make up "
18492
"the bulk of all email traffic on the Internet."
18493
msgstr ""
18494
18495
#: serverguide/C/mail.xml:1238(para)
18496
msgid ""
18497
"This section will cover integrating <application>Amavisd-new</application>, "
18498
"<application>Spamassassin</application>, and "
18499
"<application>ClamAV</application> with the "
18500
"<application>Postfix</application> Mail Transport Agent (MTA). "
18501
"<application>Postfix</application> can also check email validity by passing "
18502
"it through external content filters. These filters can sometimes determine "
18503
"if a message is spam without needing to process it with more resource "
18504
"intensive applications. Two common filters are <application>dkim-"
18505
"filter</application> and <application>python-policyd-spf</application>."
18506
msgstr ""
18507
18508
#: serverguide/C/mail.xml:1248(para)
18509
msgid ""
18510
"<application>Amavisd-new</application> is a wrapper program that can call "
18511
"any number of content filtering programs for spam detection, antivirus, etc."
18512
msgstr ""
18513
18514
#: serverguide/C/mail.xml:1254(para)
18515
msgid ""
18516
"<application>Spamassassin</application> uses a variety of mechanisms to "
18517
"filter email based on the message content."
18518
msgstr ""
18519
18520
#: serverguide/C/mail.xml:1259(para)
18521
msgid ""
18522
"<application>ClamAV</application> is an open source antivirus application."
18523
msgstr ""
18524
18525
#: serverguide/C/mail.xml:1264(para)
18526
msgid ""
18527
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18528
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18529
msgstr ""
18530
18531
#: serverguide/C/mail.xml:1270(para)
18532
msgid ""
18533
"<application>python-policyd-spf</application> enables Sender Policy "
18534
"Framework (SPF) checking with <application>Postfix</application>."
18535
msgstr ""
18536
18537
#: serverguide/C/mail.xml:1275(para)
18538
msgid "This is how the pieces fit together:"
18539
msgstr ""
18540
18541
#: serverguide/C/mail.xml:1280(para)
18542
msgid "An email message is accepted by <application>Postfix</application>."
18543
msgstr ""
18544
18545
#: serverguide/C/mail.xml:1285(para)
18546
msgid ""
18547
"The message is passed through any external filters <application>dkim-"
18548
"filter</application> and <application>python-policyd-spf</application> in "
18549
"this case."
18550
msgstr ""
18551
18552
#: serverguide/C/mail.xml:1291(para)
18553
msgid "<application>Amavisd-new</application> then processes the message."
18554
msgstr ""
18555
18556
#: serverguide/C/mail.xml:1296(para)
18557
msgid ""
18558
"<application>ClamAV</application> is used to scan the message. If the "
18559
"message contains a virus <application>Postfix</application> will reject the "
18560
"message."
18561
msgstr ""
18562
18563
#: serverguide/C/mail.xml:1302(para)
18564
msgid ""
18565
"Clean messages will then be analyzed by "
18566
"<application>Spamassassin</application> to find out if the message is spam. "
18567
"<application>Spamassassin</application> will then add X-Header lines "
18568
"allowing <application>Amavisd-new</application> to further manipulate the "
18569
"message."
18570
msgstr ""
18571
18572
#: serverguide/C/mail.xml:1309(para)
18573
msgid ""
18574
"For example, if a message has a Spam score of over fifty the message could "
18575
"be automatically dropped from the queue without the recipient ever having to "
18576
"be bothered. Another, way to handle flagged messages is to deliver them to "
18577
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18578
"see fit."
18579
msgstr ""
18580
18581
#: serverguide/C/mail.xml:1316(para)
18582
msgid ""
18583
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18584
"configuring Postfix."
18585
msgstr ""
18586
18587
#: serverguide/C/mail.xml:1319(para)
18588
msgid ""
18589
"To install the rest of the applications enter the following from a terminal "
18590
"prompt:"
18591
msgstr ""
18592
18593
#: serverguide/C/mail.xml:1323(command)
18594
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18595
msgstr ""
18596
18597
#: serverguide/C/mail.xml:1324(command)
18598
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18599
msgstr ""
18600
18601
#: serverguide/C/mail.xml:1326(para)
18602
msgid ""
18603
"There are some optional packages that integrate with "
18604
"<application>Spamassassin</application> for better spam detection:"
18605
msgstr ""
18606
18607
#: serverguide/C/mail.xml:1330(command)
18608
msgid "sudo apt-get install pyzor razor"
18609
msgstr ""
18610
18611
#: serverguide/C/mail.xml:1332(para)
18612
msgid ""
18613
"Along with the main filtering applications compression utilities are needed "
18614
"to process some email attachments:"
18615
msgstr ""
18616
18617
#: serverguide/C/mail.xml:1336(command)
18618
msgid ""
18619
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18620
msgstr ""
18621
18622
#: serverguide/C/mail.xml:1339(para)
18623
msgid ""
18624
"If some packages are not found, check that the "
18625
"<emphasis>multiverse</emphasis> repository is enabled in "
18626
"<filename>/etc/apt/sources.list</filename>"
18627
msgstr ""
18628
18629
#: serverguide/C/mail.xml:1340(para)
18630
msgid ""
18631
"If you make changes to the file, be sure to run <command>sudo apt-get "
18632
"update</command> before trying to install again."
18633
msgstr ""
18634
18635
#: serverguide/C/mail.xml:1345(para)
18636
msgid "Now configure everything to work together and filter email."
18637
msgstr ""
18638
18639
#: serverguide/C/mail.xml:1349(title)
18640
msgid "ClamAV"
18641
msgstr ""
18642
18643
#: serverguide/C/mail.xml:1350(para)
18644
msgid ""
18645
"The default behaviour of <application>ClamAV</application> will fit our "
18646
"needs. For more ClamAV configuration options, check the configuration files "
18647
"in <filename>/etc/clamav</filename>."
18648
msgstr ""
18649
18650
#: serverguide/C/mail.xml:1355(para)
18651
msgid ""
18652
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18653
"group in order for <application>Amavisd-new</application> to have the "
18654
"appropriate access to scan files:"
18655
msgstr ""
18656
18657
#: serverguide/C/mail.xml:1360(command)
18658
msgid "sudo adduser clamav amavis"
18659
msgstr ""
18660
18661
#: serverguide/C/mail.xml:1364(title)
18662
msgid "Spamassassin"
18663
msgstr ""
18664
18665
#: serverguide/C/mail.xml:1365(para)
18666
msgid ""
18667
"Spamassassin automatically detects optional components and will use them if "
18668
"they are present. This means that there is no need to configure "
18669
"<application>pyzor</application> and <application>razor</application>."
18670
msgstr ""
18671
18672
#: serverguide/C/mail.xml:1369(para)
18673
msgid ""
18674
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18675
"<application>Spamassassin</application> daemon. Change "
18676
"<emphasis>ENABLED=0</emphasis> to:"
18677
msgstr ""
18678
18679
#: serverguide/C/mail.xml:1373(programlisting)
18680
#, no-wrap
18681
msgid ""
18682
"\n"
18683
"ENABLED=1\n"
18684
msgstr ""
18685
18686
#: serverguide/C/mail.xml:1376(para)
18687
msgid "Now start the daemon:"
18688
msgstr ""
18689
18690
#: serverguide/C/mail.xml:1380(command)
18691
msgid "sudo /etc/init.d/spamassassin start"
18692
msgstr ""
18693
18694
#: serverguide/C/mail.xml:1384(title)
18695
msgid "Amavisd-new"
18696
msgstr ""
18697
18698
#: serverguide/C/mail.xml:1385(para)
18699
msgid ""
18700
"First activate spam and antivirus detection in <application>Amavisd-"
18701
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18702
"content_filter_mode</filename>:"
18703
msgstr ""
18704
18705
#: serverguide/C/mail.xml:1389(programlisting)
18706
#, no-wrap
18707
msgid ""
18708
"\n"
18709
"use strict;\n"
18710
"\n"
18711
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
18712
"# and to re-enable antivirus checking.\n"
18713
"\n"
18714
"#\n"
18715
"# Default antivirus checking mode\n"
18716
"# Uncomment the two lines below to enable it\n"
18717
"#\n"
18718
"\n"
18719
"@bypass_virus_checks_maps = (\n"
18720
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
18721
"$bypass_virus_checks_re);\n"
18722
"\n"
18723
"\n"
18724
"#\n"
18725
"# Default SPAM checking mode\n"
18726
"# Uncomment the two lines below to enable it\n"
18727
"#\n"
18728
"\n"
18729
"@bypass_spam_checks_maps = (\n"
18730
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
18731
"$bypass_spam_checks_re);\n"
18732
"\n"
18733
"1; # insure a defined return\n"
18734
msgstr ""
18735
18736
#: serverguide/C/mail.xml:1414(para)
18737
msgid ""
18738
"Bouncing spam can be a bad idea as the return address is often faked. "
18739
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
18740
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
18741
"D_BOUNCE, as follows:"
18742
msgstr ""
18743
18744
#: serverguide/C/mail.xml:1420(programlisting)
18745
#, no-wrap
18746
msgid ""
18747
"\n"
18748
"$final_spam_destiny = D_DISCARD;\n"
18749
msgstr ""
18750
18751
#: serverguide/C/mail.xml:1424(para)
18752
msgid ""
18753
"Additionally, you may want to adjust the following options to flag more "
18754
"messages as spam:"
18755
msgstr ""
18756
18757
#: serverguide/C/mail.xml:1428(programlisting)
18758
#, no-wrap
18759
msgid ""
18760
"\n"
18761
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
18762
"level\n"
18763
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
18764
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
18765
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
18766
msgstr ""
18767
18768
#: serverguide/C/mail.xml:1435(para)
18769
msgid ""
18770
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
18771
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
18772
"option. Also, if the server receives mail for multiple domains the "
18773
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
18774
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
18775
msgstr ""
18776
18777
#: serverguide/C/mail.xml:1442(programlisting)
18778
#, no-wrap
18779
msgid ""
18780
"\n"
18781
"$myhostname = 'mail.example.com';\n"
18782
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
18783
msgstr ""
18784
18785
#: serverguide/C/mail.xml:1447(para)
18786
msgid ""
18787
"After configuration <application>Amavisd-new</application> needs to be "
18788
"restarted:"
18789
msgstr ""
18790
18791
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
18792
msgid "sudo /etc/init.d/amavis restart"
18793
msgstr ""
18794
18795
#: serverguide/C/mail.xml:1454(title)
18796
msgid "DKIM Whitelist"
18797
msgstr ""
18798
18799
#: serverguide/C/mail.xml:1456(para)
18800
msgid ""
18801
"<application>Amavisd-new</application> can be configured to automatically "
18802
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
18803
"Keys. There are some pre-configured domains in the "
18804
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
18805
msgstr ""
18806
18807
#: serverguide/C/mail.xml:1462(para)
18808
msgid "There are multiple ways to configure the Whitelist for a domain:"
18809
msgstr ""
18810
18811
#: serverguide/C/mail.xml:1468(para)
18812
msgid ""
18813
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18814
"address from the \"example.com\" domain."
18815
msgstr ""
18816
18817
#: serverguide/C/mail.xml:1473(para)
18818
msgid ""
18819
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18820
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
18821
"have a valid signature."
18822
msgstr ""
18823
18824
#: serverguide/C/mail.xml:1479(para)
18825
msgid ""
18826
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
18827
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
18828
"role=\"italic\">example.com</emphasis> the parent domain."
18829
msgstr ""
18830
18831
#: serverguide/C/mail.xml:1485(para)
18832
msgid ""
18833
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
18834
"that have a valid signature from \"example.com\". This is usually used for "
18835
"discussion groups that sign thier messages."
18836
msgstr ""
18837
18838
#: serverguide/C/mail.xml:1492(para)
18839
msgid ""
18840
"A domain can also have multiple Whitelist configurations. After, editing the "
18841
"file restart <application>amaisd-new</application>:"
18842
msgstr ""
18843
18844
#: serverguide/C/mail.xml:1501(para)
18845
msgid ""
18846
"In this context, once a domain has been added to the Whitelist the message "
18847
"will not receive any anti-virus or spam filtering. This may or may not be "
18848
"the intended behavior you wish for a domain."
18849
msgstr ""
18850
18851
#: serverguide/C/mail.xml:1511(para)
18852
msgid ""
18853
"For <application>Postfix</application> integration, enter the following from "
18854
"a terminal prompt:"
18855
msgstr ""
18856
18857
#: serverguide/C/mail.xml:1515(command)
18858
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
18859
msgstr ""
18860
18861
#: serverguide/C/mail.xml:1517(para)
18862
msgid ""
18863
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
18864
"to the end of the file:"
18865
msgstr ""
18866
18867
#: serverguide/C/mail.xml:1520(programlisting)
18868
#, no-wrap
18869
msgid ""
18870
"\n"
18871
"smtp-amavis unix - - - - 2 smtp\n"
18872
" -o smtp_data_done_timeout=1200\n"
18873
" -o smtp_send_xforward_command=yes\n"
18874
" -o disable_dns_lookups=yes\n"
18875
" -o max_use=20\n"
18876
"\n"
18877
"127.0.0.1:10025 inet n - - - - smtpd\n"
18878
" -o content_filter=\n"
18879
" -o local_recipient_maps=\n"
18880
" -o relay_recipient_maps=\n"
18881
" -o smtpd_restriction_classes=\n"
18882
" -o smtpd_delay_reject=no\n"
18883
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
18884
" -o smtpd_helo_restrictions=\n"
18885
" -o smtpd_sender_restrictions=\n"
18886
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
18887
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
18888
" -o smtpd_end_of_data_restrictions=\n"
18889
" -o mynetworks=127.0.0.0/8\n"
18890
" -o smtpd_error_sleep_time=0\n"
18891
" -o smtpd_soft_error_limit=1001\n"
18892
" -o smtpd_hard_error_limit=1000\n"
18893
" -o smtpd_client_connection_count_limit=0\n"
18894
" -o smtpd_client_connection_rate_limit=0\n"
18895
" -o "
18896
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
18897
msgstr ""
18898
18899
#: serverguide/C/mail.xml:1547(para)
18900
msgid ""
18901
"Also add the following two lines immediately below the "
18902
"<emphasis>\"pickup\"</emphasis> transport service:"
18903
msgstr ""
18904
18905
#: serverguide/C/mail.xml:1550(programlisting)
18906
#, no-wrap
18907
msgid ""
18908
"\n"
18909
" -o content_filter=\n"
18910
" -o receive_override_options=no_header_body_checks\n"
18911
msgstr ""
18912
18913
#: serverguide/C/mail.xml:1554(para)
18914
msgid ""
18915
"This will prevent messages that are generated to report on spam from being "
18916
"classified as spam."
18917
msgstr ""
18918
18919
#: serverguide/C/mail.xml:1557(para)
18920
msgid "Now restart <application>Postfix</application>:"
18921
msgstr ""
18922
18923
#: serverguide/C/mail.xml:1563(para)
18924
msgid "Content filtering with spam and virus detection is now enabled."
18925
msgstr ""
18926
18927
#: serverguide/C/mail.xml:1570(para)
18928
msgid ""
18929
"First, test that the <application>Amavisd-new</application> SMTP is "
18930
"listening:"
18931
msgstr ""
18932
18933
#: serverguide/C/mail.xml:1573(programlisting)
18934
#, no-wrap
18935
msgid ""
18936
"\n"
18937
"telnet localhost 10024\n"
18938
"Trying 127.0.0.1...\n"
18939
"Connected to localhost.\n"
18940
"Escape character is '^]'.\n"
18941
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
18942
"^]\n"
18943
msgstr ""
18944
18945
#: serverguide/C/mail.xml:1581(para)
18946
msgid ""
18947
"In the Header of messages that go through the content filter you should see:"
18948
msgstr ""
18949
18950
#: serverguide/C/mail.xml:1584(programlisting)
18951
#, no-wrap
18952
msgid ""
18953
"\n"
18954
"X-Spam-Level: \n"
18955
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
18956
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
18957
"BAYES_00\n"
18958
"X-Spam-Level: \n"
18959
msgstr ""
18960
18961
#: serverguide/C/mail.xml:1591(para)
18962
msgid ""
18963
"Your output will vary, but the important thing is that there are <emphasis>X-"
18964
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
18965
msgstr ""
18966
18967
#: serverguide/C/mail.xml:1599(para)
18968
msgid ""
18969
"The best way to figure out why something is going wrong is to check the log "
18970
"files."
18971
msgstr ""
18972
18973
#: serverguide/C/mail.xml:1604(para)
18974
msgid ""
18975
"For instructions on <application>Postfix</application> logging see the <xref "
18976
"linkend=\"postfix-troubleshooting\"/> section."
18977
msgstr ""
18978
18979
#: serverguide/C/mail.xml:1610(para)
18980
msgid ""
18981
"<application>Amavisd-new</application> uses "
18982
"<application>Syslog</application> to send messages to "
18983
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
18984
"increased by adding the <emphasis>$log_level</emphasis> option to "
18985
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
18986
"1 to 5."
18987
msgstr ""
18988
18989
#: serverguide/C/mail.xml:1615(programlisting)
18990
#, no-wrap
18991
msgid ""
18992
"\n"
18993
"$log_level = 2;\n"
18994
msgstr ""
18995
18996
#: serverguide/C/mail.xml:1619(para)
18997
msgid ""
18998
"When the <application>Amavisd-new</application> log output is increased "
18999
"<application>Spamassassin</application> log output is also increased."
19000
msgstr ""
19001
19002
#: serverguide/C/mail.xml:1626(para)
19003
msgid ""
19004
"The <application>ClamAV</application> log level can be increased by editing "
19005
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
19006
msgstr ""
19007
19008
#: serverguide/C/mail.xml:1630(programlisting)
19009
#, no-wrap
19010
msgid ""
19011
"\n"
19012
"LogVerbose true\n"
19013
msgstr ""
19014
19015
#: serverguide/C/mail.xml:1633(para)
19016
msgid ""
19017
"By default <application>ClamAV</application> will send log messages to "
19018
"<filename>/var/log/clamav/clamav.log</filename>."
19019
msgstr ""
19020
19021
#: serverguide/C/mail.xml:1639(para)
19022
msgid ""
19023
"After changing an applications log settings remember to restart the service "
19024
"for the new settings to take affect. Also, once the issue you are "
19025
"troubleshooting is resolved it is a good idea to change the log settings "
19026
"back to normal."
19027
msgstr ""
19028
19029
#: serverguide/C/mail.xml:1647(para)
19030
msgid "For more information on filtering mail see the following links:"
19031
msgstr ""
19032
19033
#: serverguide/C/mail.xml:1653(ulink)
19034
msgid "Amavisd-new Documentation"
19035
msgstr ""
19036
19037
#: serverguide/C/mail.xml:1657(para)
19038
msgid ""
19039
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
19040
"Documentation</ulink> and <ulink "
19041
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
19042
msgstr ""
19043
19044
#: serverguide/C/mail.xml:1664(ulink)
19045
msgid "Spamassassin Wiki"
19046
msgstr ""
19047
19048
#: serverguide/C/mail.xml:1669(ulink)
19049
msgid "Pyzor Homepage"
19050
msgstr ""
19051
19052
#: serverguide/C/mail.xml:1674(ulink)
19053
msgid "Razor Homepage"
19054
msgstr ""
19055
19056
#: serverguide/C/mail.xml:1679(ulink)
19057
msgid "DKIM.org"
19058
msgstr ""
19059
19060
#: serverguide/C/mail.xml:1684(ulink)
19061
msgid "Postfix Amavis New"
19062
msgstr ""
19063
19064
#: serverguide/C/mail.xml:1688(para)
19065
msgid ""
19066
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
19067
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
19068
msgstr ""
19069
19070
#: serverguide/C/lamp-applications.xml:13(title)
19071
msgid "LAMP Applications"
19072
msgstr ""
19073
19074
#: serverguide/C/lamp-applications.xml:19(para)
19075
msgid ""
19076
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
19077
"Ubuntu servers. There is a plethora of Open Source applications written "
19078
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
19079
"Content Management Systems, and Management Software such as phpMyAdmin."
19080
msgstr ""
19081
19082
#: serverguide/C/lamp-applications.xml:26(para)
19083
msgid ""
19084
"One advantage of LAMP is the substantial flexibility for different database, "
19085
"web server, and scripting languages. Popular substitutes for MySQL include "
19086
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
19087
"instead of PHP."
19088
msgstr ""
19089
19090
#: serverguide/C/lamp-applications.xml:32(para)
19091
msgid ""
19092
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
19093
"is:"
19094
msgstr ""
19095
19096
#: serverguide/C/lamp-applications.xml:38(para)
19097
msgid "Download an archive containing the application source files."
19098
msgstr ""
19099
19100
#: serverguide/C/lamp-applications.xml:43(para)
19101
msgid ""
19102
"Unpack the archive, usually in a directory accessible to a web server."
19103
msgstr ""
19104
19105
#: serverguide/C/lamp-applications.xml:48(para)
19106
msgid ""
19107
"Depending on where the source was extracted, configure a web browser to "
19108
"serve the files."
19109
msgstr ""
19110
19111
#: serverguide/C/lamp-applications.xml:53(para)
19112
msgid "Configure the application to connect to the database."
19113
msgstr ""
19114
19115
#: serverguide/C/lamp-applications.xml:58(para)
19116
msgid ""
19117
"Run a script, or browse to a page of the application, to install the "
19118
"database needed by the application."
19119
msgstr ""
19120
19121
#: serverguide/C/lamp-applications.xml:63(para)
19122
msgid ""
19123
"Once the steps above, or similar steps, are completed you are ready to begin "
19124
"using the application."
19125
msgstr ""
19126
19127
#: serverguide/C/lamp-applications.xml:69(para)
19128
msgid ""
19129
"A disadvantage of using this approach is that the application files are not "
19130
"placed in the file system in a standard way, which can cause confusion as to "
19131
"where the application is installed. Another larger disadvantage is updating "
19132
"the application. When a new version is released, the same process used to "
19133
"install the application is needed to apply updates."
19134
msgstr ""
19135
19136
#: serverguide/C/lamp-applications.xml:76(para)
19137
msgid ""
19138
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19139
"packaged for Ubuntu, and are available for installation in the same way as "
19140
"non-LAMP applications. Depending on the application some extra configuration "
19141
"and setup steps may be needed, however."
19142
msgstr ""
19143
19144
#: serverguide/C/lamp-applications.xml:82(para)
19145
msgid ""
19146
"This section covers howto install and configure the Wiki applications "
19147
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19148
"and the MySQL management application <application>phpMyAdmin</application>."
19149
msgstr ""
19150
19151
#: serverguide/C/lamp-applications.xml:88(para)
19152
msgid ""
19153
"A Wiki is a website that allows the visitors to easily add, remove and "
19154
"modify available content easily. The ease of interaction and operation makes "
19155
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19156
"also referred to the collaborative software."
19157
msgstr ""
19158
19159
#: serverguide/C/lamp-applications.xml:100(title)
19160
msgid "Moin Moin"
19161
msgstr "Moin Moin"
19162
19163
#: serverguide/C/lamp-applications.xml:102(para)
19164
msgid ""
19165
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19166
"engine, and licensed under the GNU GPL."
19167
msgstr ""
19168
19169
#: serverguide/C/lamp-applications.xml:110(para)
19170
msgid ""
19171
"To install <application>MoinMoin</application>, run the following command in "
19172
"the command prompt:"
19173
msgstr ""
19174
19175
#: serverguide/C/lamp-applications.xml:116(command)
19176
msgid "sudo apt-get install python-moinmoin"
19177
msgstr "sudo apt-get install python-moinmoin"
19178
19179
#: serverguide/C/lamp-applications.xml:119(para)
19180
msgid ""
19181
"You should also install <application>apache2</application> web server. For "
19182
"installing <application>apache2</application> web server, please refer to "
19183
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19184
"linkend=\"httpd\"/> section."
19185
msgstr ""
19186
19187
#: serverguide/C/lamp-applications.xml:130(para)
19188
msgid ""
19189
"For configuring your first Wiki application, please run the following set of "
19190
"commands. Let us assume that you are creating a Wiki named "
19191
"<emphasis>mywiki</emphasis>:"
19192
msgstr ""
19193
19194
#: serverguide/C/lamp-applications.xml:137(command)
19195
msgid "cd /usr/share/moin"
19196
msgstr ""
19197
19198
#: serverguide/C/lamp-applications.xml:138(command)
19199
msgid "sudo mkdir mywiki"
19200
msgstr ""
19201
19202
#: serverguide/C/lamp-applications.xml:139(command)
19203
msgid "sudo cp -R data mywiki"
19204
msgstr ""
19205
19206
#: serverguide/C/lamp-applications.xml:140(command)
19207
msgid "sudo cp -R underlay mywiki"
19208
msgstr ""
19209
19210
#: serverguide/C/lamp-applications.xml:141(command)
19211
msgid "sudo cp server/moin.cgi mywiki"
19212
msgstr ""
19213
19214
#: serverguide/C/lamp-applications.xml:142(command)
19215
msgid "sudo chown -R www-data.www-data mywiki"
19216
msgstr ""
19217
19218
#: serverguide/C/lamp-applications.xml:143(command)
19219
msgid "sudo chmod -R ug+rwX mywiki"
19220
msgstr ""
19221
19222
#: serverguide/C/lamp-applications.xml:144(command)
19223
msgid "sudo chmod -R o-rwx mywiki"
19224
msgstr ""
19225
19226
#: serverguide/C/lamp-applications.xml:147(para)
19227
msgid ""
19228
"Now you should configure <application>MoinMoin</application> to find your "
19229
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19230
"<application>MoinMoin</application>, open "
19231
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19232
msgstr ""
19233
19234
#: serverguide/C/lamp-applications.xml:155(programlisting)
19235
#, no-wrap
19236
msgid "data_dir = '/org/mywiki/data'"
19237
msgstr ""
19238
19239
#: serverguide/C/lamp-applications.xml:157(para)
19240
msgid "to"
19241
msgstr "para"
19242
19243
#: serverguide/C/lamp-applications.xml:161(programlisting)
19244
#, no-wrap
19245
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19246
msgstr "data_dir = '/usr/share/moin/mywiki/data'"
19247
19248
#: serverguide/C/lamp-applications.xml:163(para)
19249
msgid ""
19250
"Also, below the <emphasis>data_dir</emphasis> option add the "
19251
"<emphasis>data_underlay_dir</emphasis>:"
19252
msgstr ""
19253
19254
#: serverguide/C/lamp-applications.xml:167(programlisting)
19255
#, no-wrap
19256
msgid ""
19257
"\n"
19258
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19259
msgstr ""
19260
19261
#: serverguide/C/lamp-applications.xml:172(para)
19262
msgid ""
19263
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19264
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19265
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19266
"change."
19267
msgstr ""
19268
19269
#: serverguide/C/lamp-applications.xml:181(para)
19270
msgid ""
19271
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19272
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19273
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19274
"<quote>(\"mywiki\", r\".*\")</quote>."
19275
msgstr ""
19276
19277
#: serverguide/C/lamp-applications.xml:189(para)
19278
msgid ""
19279
"Once you have configured <application>MoinMoin</application> to find your "
19280
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19281
"<application>apache2</application> and make it ready for your Wiki "
19282
"application."
19283
msgstr ""
19284
19285
#: serverguide/C/lamp-applications.xml:196(para)
19286
msgid ""
19287
"You should add the following lines in <filename>/etc/apache2/sites-"
19288
"available/default</filename> file inside the <quote><VirtualHost "
19289
"*></quote> tag:"
19290
msgstr ""
19291
19292
#: serverguide/C/lamp-applications.xml:202(programlisting)
19293
#, no-wrap
19294
msgid ""
19295
"\n"
19296
"### moin\n"
19297
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19298
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19299
" <Directory /usr/share/moin/htdocs>\n"
19300
" Order allow,deny\n"
19301
" allow from all\n"
19302
" </Directory>\n"
19303
"### end moin\n"
19304
msgstr ""
19305
19306
#: serverguide/C/lamp-applications.xml:214(para)
19307
msgid ""
19308
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19309
"<emphasis>alias</emphasis> line above, to the "
19310
"<application>moinmoin</application> version installed."
19311
msgstr ""
19312
19313
#: serverguide/C/lamp-applications.xml:220(para)
19314
msgid ""
19315
"Once you configure the <application>apache2</application> web server and "
19316
"make it ready for your Wiki application, you should restart it. You can run "
19317
"the following command to restart the <application>apache2</application> web "
19318
"server:"
19319
msgstr ""
19320
19321
#: serverguide/C/lamp-applications.xml:233(title)
19322
msgid "Verification"
19323
msgstr "Verificacion"
19324
19325
#: serverguide/C/lamp-applications.xml:235(para)
19326
msgid ""
19327
"You can verify the Wiki application and see if it works by pointing your web "
19328
"browser to the following URL:"
19329
msgstr ""
19330
19331
#: serverguide/C/lamp-applications.xml:239(programlisting)
19332
#, no-wrap
19333
msgid ""
19334
"\n"
19335
"http://localhost/mywiki\n"
19336
msgstr ""
19337
"\n"
19338
"http://localhost/mywiki\n"
19339
19340
#: serverguide/C/lamp-applications.xml:243(para)
19341
msgid ""
19342
"You can also run the test command by pointing your web browser to the "
19343
"following URL:"
19344
msgstr ""
19345
19346
#: serverguide/C/lamp-applications.xml:248(programlisting)
19347
#, no-wrap
19348
msgid ""
19349
"\n"
19350
"http://localhost/mywiki?action=test\n"
19351
msgstr ""
19352
"\n"
19353
"http://localhost/mywiki?action=test\n"
19354
19355
#: serverguide/C/lamp-applications.xml:252(para)
19356
msgid ""
19357
"For more details, please refer to the <ulink "
19358
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19359
msgstr ""
19360
19361
#: serverguide/C/lamp-applications.xml:263(para)
19362
msgid ""
19363
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19364
"Wiki</ulink>."
19365
msgstr ""
19366
19367
#: serverguide/C/lamp-applications.xml:268(para)
19368
msgid ""
19369
"Also, see the <ulink "
19370
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19371
"MoinMoin</ulink> page."
19372
msgstr ""
19373
19374
#: serverguide/C/lamp-applications.xml:277(title)
19375
msgid "MediaWiki"
19376
msgstr "MediaWiki"
19377
19378
#: serverguide/C/lamp-applications.xml:279(para)
19379
msgid ""
19380
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19381
"either use <application>MySQL</application> or "
19382
"<application>PostgreSQL</application> Database Management System."
19383
msgstr ""
19384
19385
#: serverguide/C/lamp-applications.xml:289(para)
19386
msgid ""
19387
"Before installing <application>MediaWiki</application> you should also "
19388
"install <application>Apache2</application>, the "
19389
"<application>PHP5</application> scripting language and Database a Management "
19390
"System. <application>MySQL</application> or "
19391
"<application>PostgreSQL</application> are the most common, choose one "
19392
"depending on your need. Please refer to those sections in this manual for "
19393
"installation instructions."
19394
msgstr ""
19395
19396
#: serverguide/C/lamp-applications.xml:297(para)
19397
msgid ""
19398
"To install <application>MediaWiki</application>, run the following command "
19399
"in the command prompt:"
19400
msgstr ""
19401
19402
#: serverguide/C/lamp-applications.xml:303(command)
19403
msgid "sudo apt-get install mediawiki php5-gd"
19404
msgstr "sudo apt-get install mediawiki php5-gd"
19405
19406
#: serverguide/C/lamp-applications.xml:306(para)
19407
msgid ""
19408
"For additional <application>MediaWiki</application> functionality see the "
19409
"<application>mediawiki-extensions</application> package."
19410
msgstr ""
19411
19412
#: serverguide/C/lamp-applications.xml:316(para)
19413
msgid ""
19414
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19415
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19416
"directory. You should uncomment the following line in this file to access "
19417
"MediaWiki application."
19418
msgstr ""
19419
19420
#: serverguide/C/lamp-applications.xml:324(screen)
19421
#, no-wrap
19422
msgid ""
19423
"\n"
19424
"# Alias /mediawiki /var/lib/mediawiki\n"
19425
msgstr ""
19426
19427
#: serverguide/C/lamp-applications.xml:328(para)
19428
msgid ""
19429
"After you uncomment the above line, restart Apache server and access "
19430
"MediaWiki using the following url:"
19431
msgstr ""
19432
19433
#: serverguide/C/lamp-applications.xml:333(programlisting)
19434
#, no-wrap
19435
msgid ""
19436
"\n"
19437
"http://localhost/mediawiki/config/index.php\n"
19438
msgstr ""
19439
19440
#: serverguide/C/lamp-applications.xml:338(para)
19441
msgid ""
19442
"Please read the <quote>Checking environment...</quote> section in this page. "
19443
"You should be able to fix many issues by carefully reading this section."
19444
msgstr ""
19445
19446
#: serverguide/C/lamp-applications.xml:345(para)
19447
msgid ""
19448
"Once the configuration is complete, you should copy the "
19449
"<filename>LocalSettings.php</filename> file to "
19450
"<filename>/etc/mediawiki</filename> directory:"
19451
msgstr ""
19452
19453
#: serverguide/C/lamp-applications.xml:352(command)
19454
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19455
msgstr ""
19456
19457
#: serverguide/C/lamp-applications.xml:355(para)
19458
msgid ""
19459
"You may also want to edit "
19460
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19461
msgstr ""
19462
19463
#: serverguide/C/lamp-applications.xml:360(programlisting)
19464
#, no-wrap
19465
msgid ""
19466
"\n"
19467
"ini_set( 'memory_limit', '64M' );\n"
19468
msgstr ""
19469
19470
#: serverguide/C/lamp-applications.xml:367(title)
19471
msgid "Extensions"
19472
msgstr ""
19473
19474
#: serverguide/C/lamp-applications.xml:368(para)
19475
msgid ""
19476
"The extensions add new features and enhancements for the MediaWiki "
19477
"application. The extensions give wiki administrators and end users the "
19478
"ability to customize MediaWiki to their requirements."
19479
msgstr ""
19480
19481
#: serverguide/C/lamp-applications.xml:374(para)
19482
msgid ""
19483
"You can download MediaWiki extensions as an archive file or checkout from "
19484
"the Subversion repository. You should copy it to "
19485
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19486
"also add the following line at the end of file: "
19487
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19488
msgstr ""
19489
19490
#: serverguide/C/lamp-applications.xml:382(programlisting)
19491
#, no-wrap
19492
msgid ""
19493
"\n"
19494
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19495
msgstr ""
19496
19497
#: serverguide/C/lamp-applications.xml:392(para)
19498
msgid ""
19499
"For more details, please refer to the <ulink "
19500
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19501
msgstr ""
19502
19503
#: serverguide/C/lamp-applications.xml:398(para)
19504
msgid ""
19505
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19506
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19507
"new MediaWiki administrators."
19508
msgstr ""
19509
19510
#: serverguide/C/lamp-applications.xml:404(para)
19511
msgid ""
19512
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19513
"Wiki MediaWiki</ulink> page is a good resource."
19514
msgstr ""
19515
19516
#: serverguide/C/lamp-applications.xml:414(title)
19517
msgid "phpMyAdmin"
19518
msgstr ""
19519
19520
#: serverguide/C/lamp-applications.xml:416(para)
19521
msgid ""
19522
"<application>phpMyAdmin</application> is a LAMP application specifically "
19523
"written for administering <application>MySQL</application> servers. Written "
19524
"in <application>PHP</application>, and accessed through a web browser, "
19525
"phpMyAdmin provides a graphical interface for database administration tasks."
19526
msgstr ""
19527
19528
#: serverguide/C/lamp-applications.xml:425(para)
19529
msgid ""
19530
"Before installing <application>phpMyAdmin</application> you will need access "
19531
"to a <application>MySQL</application> database either on the same host as "
19532
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19533
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19534
"enter:"
19535
msgstr ""
19536
19537
#: serverguide/C/lamp-applications.xml:432(command)
19538
msgid "sudo apt-get install phpmyadmin"
19539
msgstr ""
19540
19541
#: serverguide/C/lamp-applications.xml:435(para)
19542
msgid ""
19543
"At the prompt choose which web server to be configured for "
19544
"<application>phpMyAdmin</application>. The rest of this section will use "
19545
"<application>Apache2</application> for the web server."
19546
msgstr ""
19547
19548
#: serverguide/C/lamp-applications.xml:440(para)
19549
msgid ""
19550
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19551
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19552
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19553
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19554
"user if you any setup, and enter the <application>MySQL</application> user's "
19555
"password."
19556
msgstr ""
19557
19558
#: serverguide/C/lamp-applications.xml:447(para)
19559
msgid ""
19560
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19561
"needed, create users, create/destroy databases and tables, etc."
19562
msgstr ""
19563
19564
#: serverguide/C/lamp-applications.xml:455(para)
19565
msgid ""
19566
"The configuration files for <application>phpMyAdmin</application> are "
19567
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19568
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19569
"configuration options that apply globally to "
19570
"<application>phpMyAdmin</application>."
19571
msgstr ""
19572
19573
#: serverguide/C/lamp-applications.xml:461(para)
19574
msgid ""
19575
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19576
"hosted on another server, adjust the following in "
19577
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19578
msgstr ""
19579
19580
#: serverguide/C/lamp-applications.xml:466(programlisting)
19581
#, no-wrap
19582
msgid ""
19583
"\n"
19584
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19585
msgstr ""
19586
19587
#: serverguide/C/lamp-applications.xml:471(para)
19588
msgid ""
19589
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19590
"remote database server name or IP address. Also, be sure that the "
19591
"<application>phpMyAdmin</application> host has permissions to access the "
19592
"remote database."
19593
msgstr ""
19594
19595
#: serverguide/C/lamp-applications.xml:477(para)
19596
msgid ""
19597
"Once configured, log out of <application>phpMyAdmin</application> and back "
19598
"in, and you should be accessing the new server."
19599
msgstr ""
19600
19601
#: serverguide/C/lamp-applications.xml:481(para)
19602
msgid ""
19603
"The <filename>config.header.inc.php</filename> and "
19604
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19605
"header and footer to <application>phpMyAdmin</application>."
19606
msgstr ""
19607
19608
#: serverguide/C/lamp-applications.xml:486(para)
19609
msgid ""
19610
"Another important configuration file is "
19611
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19612
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19613
"configure <application>Apache2</application> to serve the "
19614
"<application>phpMyAdmin</application> site. The file contains directives for "
19615
"loading <application>PHP</application>, directory permissions, etc. For more "
19616
"information on configuring <application>Apache2</application> see <xref "
19617
"linkend=\"httpd\"/>."
19618
msgstr ""
19619
19620
#: serverguide/C/lamp-applications.xml:500(para)
19621
msgid ""
19622
"The <application>phpMyAdmin</application> documentation comes installed with "
19623
"the package and can be accessed from the <emphasis>phpMyAdmin "
19624
"Documentation</emphasis> link (a question mark with a box around it) under "
19625
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19626
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19627
msgstr ""
19628
19629
#: serverguide/C/lamp-applications.xml:507(para)
19630
msgid ""
19631
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19632
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19633
msgstr ""
19634
19635
#: serverguide/C/lamp-applications.xml:512(para)
19636
msgid ""
19637
"A third resource is the <ulink "
19638
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19639
"Wiki</ulink> page."
19640
msgstr ""
19641
19642
#: serverguide/C/introduction.xml:14(para)
19643
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19644
msgstr ""
19645
19646
#: serverguide/C/introduction.xml:15(para)
19647
msgid ""
19648
"Here you can find information on how to install and configure various server "
19649
"applications. It is a step-by-step, task-oriented guide for configuring and "
19650
"customizing your system."
19651
msgstr ""
19652
19653
#: serverguide/C/introduction.xml:19(para)
19654
msgid ""
19655
"This guide assumes you have a basic understanding of your Ubuntu system. "
19656
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19657
"but if you need detailed instructions installing Ubuntu please refer to the "
19658
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19659
"Installation Guide</ulink>."
19660
msgstr ""
19661
19662
#: serverguide/C/introduction.xml:25(para)
19663
msgid ""
19664
"A HTML version of the manual is available online at <ulink "
19665
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19666
"HTML files are also available in the <application>ubuntu-"
19667
"serverguide</application> package. See <xref linkend=\"package-"
19668
"management\"/> for details on installing packages."
19669
msgstr ""
19670
19671
#: serverguide/C/introduction.xml:32(para)
19672
msgid ""
19673
"If you choose to install the <application>ubuntu-serverguide</application> "
19674
"you can view this document from a console by:"
19675
msgstr ""
19676
19677
#: serverguide/C/introduction.xml:36(command)
19678
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19679
msgstr ""
19680
19681
#: serverguide/C/introduction.xml:39(para)
19682
msgid ""
19683
"If you are using a localized version of Ubuntu, replace "
19684
"<emphasis>C</emphasis> with your language localization (e.g. "
19685
"<emphasis>en_GB</emphasis>)."
19686
msgstr ""
19687
19688
#: serverguide/C/introduction.xml:53(title)
19689
msgid "Support"
19690
msgstr ""
19691
19692
#: serverguide/C/introduction.xml:55(para)
19693
msgid ""
19694
"There are a couple of different ways that Ubuntu Server Edition is "
19695
"supported, commercial support and community support. The main commercial "
19696
"support (and development funding) is available from Canonical Ltd. They "
19697
"supply reasonably priced support contracts on a per desktop or per server "
19698
"basis. For more information see the <ulink "
19699
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19700
"page."
19701
msgstr ""
19702
19703
#: serverguide/C/introduction.xml:62(para)
19704
msgid ""
19705
"Community support is also provided by dedicated individuals, and companies, "
19706
"that wish to make Ubuntu the best distribution possible. Support is provided "
19707
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19708
"large amount of information available can be overwhelming, but a good search "
19709
"engine query can usually provide an answer to your questions. See the <ulink "
19710
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19711
"information."
19712
msgstr ""
19713
19714
#: serverguide/C/installation.xml:14(para)
19715
msgid ""
19716
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
19717
"Edition. For more detailed instructions, please refer to the <ulink "
19718
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19719
"Installation Guide</ulink>."
19720
msgstr ""
19721
19722
#: serverguide/C/installation.xml:19(title)
19723
msgid "Preparing to Install"
19724
msgstr ""
19725
19726
#: serverguide/C/installation.xml:20(para)
19727
msgid ""
19728
"This section explains various aspects to consider before starting the "
19729
"installation."
19730
msgstr ""
19731
19732
#: serverguide/C/installation.xml:24(title)
19733
msgid "System Requirements"
19734
msgstr ""
19735
19736
#: serverguide/C/installation.xml:25(para)
19737
msgid ""
19738
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
19739
"x86 and AMD64. The table below lists recommended hardware specifications. "
19740
"Depending on your needs, you might manage with less than this. However, most "
19741
"users risk being frustrated if they ignore these suggestions."
19742
msgstr ""
19743
19744
#: serverguide/C/installation.xml:27(title)
19745
msgid "Recommended Minimum Requirements"
19746
msgstr ""
19747
19748
#: serverguide/C/installation.xml:35(para)
19749
msgid "Install Type"
19750
msgstr ""
19751
19752
#: serverguide/C/installation.xml:36(para)
19753
msgid "RAM"
19754
msgstr ""
19755
19756
#: serverguide/C/installation.xml:37(para)
19757
msgid "Hard Drive Space"
19758
msgstr ""
19759
19760
#: serverguide/C/installation.xml:40(para)
19761
msgid "Base System"
19762
msgstr ""
19763
19764
#: serverguide/C/installation.xml:41(para)
19765
msgid "All Tasks Installed"
19766
msgstr ""
19767
19768
#: serverguide/C/installation.xml:46(para)
19769
msgid "Server"
19770
msgstr "Servidor"
19771
19772
#: serverguide/C/installation.xml:47(para)
19773
msgid "128 megabytes"
19774
msgstr ""
19775
19776
#: serverguide/C/installation.xml:48(para)
19777
msgid "500 megabytes"
19778
msgstr ""
19779
19780
#: serverguide/C/installation.xml:49(para)
19781
msgid "1 gigabyte"
19782
msgstr ""
19783
19784
#: serverguide/C/installation.xml:54(para)
19785
msgid ""
19786
"The Server Edition provides a common base for all sorts of server "
19787
"applications. It is a minimalist design providing a platform for the desired "
19788
"services, such as file/print services, web hosting, email hosting, etc."
19789
msgstr ""
19790
19791
#: serverguide/C/installation.xml:60(para)
19792
msgid ""
19793
"The requirements for UEC are slightly different for Front End requirements "
19794
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
19795
"requirements see <xref linkend=\"uec-node-requirements\"/>."
19796
msgstr ""
19797
19798
#: serverguide/C/installation.xml:68(title)
19799
msgid "Server and Desktop Differences"
19800
msgstr ""
19801
19802
#: serverguide/C/installation.xml:69(para)
19803
msgid ""
19804
"There are a few differences between the <emphasis>Ubuntu Server "
19805
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
19806
"should be noted that both editions use the same "
19807
"<application>apt</application> repositories. Making it just as easy to "
19808
"install a <emphasis role=\"italic\">server</emphasis> application on the "
19809
"Desktop Edition as it is on the Server Edition."
19810
msgstr ""
19811
19812
#: serverguide/C/installation.xml:75(para)
19813
msgid ""
19814
"The differences between the two editions are the lack of an X window "
19815
"environment in the Server Edition, the installation process, and different "
19816
"Kernel options."
19817
msgstr ""
19818
19819
#: serverguide/C/installation.xml:82(title)
19820
msgid "Kernel Differences:"
19821
msgstr ""
19822
19823
#: serverguide/C/installation.xml:85(para)
19824
msgid ""
19825
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
19826
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
19827
"Edition."
19828
msgstr ""
19829
19830
#: serverguide/C/installation.xml:91(para)
19831
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
19832
msgstr ""
19833
19834
#: serverguide/C/installation.xml:96(para)
19835
msgid ""
19836
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
19837
"Desktop Edition."
19838
msgstr ""
19839
19840
#: serverguide/C/installation.xml:102(para)
19841
msgid ""
19842
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
19843
"limited by memory addressing space."
19844
msgstr ""
19845
19846
#: serverguide/C/installation.xml:107(para)
19847
msgid ""
19848
"To see all kernel configuration options you can look through "
19849
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
19850
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
19851
"great resource on the options available."
19852
msgstr ""
19853
19854
#: serverguide/C/installation.xml:116(title)
19855
msgid "Backing Up"
19856
msgstr ""
19857
19858
#: serverguide/C/installation.xml:119(para)
19859
msgid ""
19860
"Before installing <application>Ubuntu Server Edition</application> you "
19861
"should make sure all data on the system is backed up. See <xref "
19862
"linkend=\"backups\"/> for backup options."
19863
msgstr ""
19864
19865
#: serverguide/C/installation.xml:123(para)
19866
msgid ""
19867
"If this is not the first time an operating system has been installed on your "
19868
"computer, it is likely you will need to re-partition your disk to make room "
19869
"for Ubuntu."
19870
msgstr ""
19871
19872
#: serverguide/C/installation.xml:127(para)
19873
msgid ""
19874
"Any time you partition your disk, you should be prepared to lose everything "
19875
"on the disk should you make a mistake or something goes wrong during "
19876
"partitioning. The programs used in installation are quite reliable, most "
19877
"have seen years of use, but they also perform destructive actions."
19878
msgstr ""
19879
19880
#: serverguide/C/installation.xml:139(title)
19881
msgid "Installing from CD"
19882
msgstr ""
19883
19884
#: serverguide/C/installation.xml:140(para)
19885
msgid ""
19886
"The basic steps to install Ubuntu Server Edition from CD are the same for "
19887
"installing any operating system from CD. Unlike the <emphasis>Desktop "
19888
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
19889
"a graphical installation program. Instead the Server Edition uses a console "
19890
"menu based process."
19891
msgstr ""
19892
19893
#: serverguide/C/installation.xml:147(para)
19894
msgid ""
19895
"First, download and burn the appropriate ISO file from the <ulink "
19896
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
19897
msgstr ""
19898
19899
#: serverguide/C/installation.xml:153(para)
19900
msgid "Boot the system from the CD-ROM drive."
19901
msgstr ""
19902
19903
#: serverguide/C/installation.xml:158(para)
19904
msgid ""
19905
"At the boot prompt you will be asked to select the language. Afterwards the "
19906
"installation process begins by asking for your keyboard layout."
19907
msgstr ""
19908
19909
#: serverguide/C/installation.xml:164(para)
19910
msgid ""
19911
"From the main boot menu there are some additional options to install Ubuntu "
19912
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
19913
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
19914
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
19915
"will cover the basic Ubuntu Server install."
19916
msgstr ""
19917
19918
#: serverguide/C/installation.xml:172(para)
19919
msgid ""
19920
"The installer then discovers your hardware configuration, and configures the "
19921
"network settings using DHCP. If you do not wish to use DHCP at the next "
19922
"screen choose \"Go Back\", and you have the option to \"Configure the "
19923
"network manually\"."
19924
msgstr ""
19925
19926
#: serverguide/C/installation.xml:179(para)
19927
msgid "Next, the installer asks for the system's hostname and Time Zone."
19928
msgstr ""
19929
19930
#: serverguide/C/installation.xml:184(para)
19931
msgid ""
19932
"You can then choose from several options to configure the hard drive layout. "
19933
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
19934
msgstr ""
19935
19936
#: serverguide/C/installation.xml:190(para)
19937
msgid "The Ubuntu base system is then installed."
19938
msgstr ""
19939
19940
#: serverguide/C/installation.xml:195(para)
19941
msgid ""
19942
"A new user is setup, this user will have <emphasis>root</emphasis> access "
19943
"through the <application>sudo</application> utility."
19944
msgstr ""
19945
19946
#: serverguide/C/installation.xml:201(para)
19947
msgid ""
19948
"After the user is setup, you will be asked to encrypt your <filename "
19949
"role=\"directory\">home</filename> directory."
19950
msgstr ""
19951
19952
#: serverguide/C/installation.xml:207(para)
19953
msgid ""
19954
"The next step in the installation process is to decide how you want to "
19955
"update the system. There are three options:"
19956
msgstr ""
19957
19958
#: serverguide/C/installation.xml:213(para)
19959
msgid ""
19960
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
19961
"log into the machine and manually install updates."
19962
msgstr ""
19963
19964
#: serverguide/C/installation.xml:219(para)
19965
msgid ""
19966
"<emphasis>Install security updates Automatically</emphasis>: will install "
19967
"the <application>unattended-upgrades</application> package, which will "
19968
"install security updates without the intervention of an administrator. For "
19969
"more details see <xref linkend=\"automatic-updates\"/>."
19970
msgstr ""
19971
19972
#: serverguide/C/installation.xml:226(para)
19973
msgid ""
19974
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
19975
"service provided by Canonical to help manage your Ubuntu machines. See the "
19976
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
19977
"site for details."
19978
msgstr ""
19979
19980
#: serverguide/C/installation.xml:235(para)
19981
msgid ""
19982
"You now have the option to install, or not install, several package tasks. "
19983
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
19984
"to launch <application>aptitude</application> to choose specific packages to "
19985
"install. For more information see <xref linkend=\"aptitude\"/>."
19986
msgstr ""
19987
19988
#: serverguide/C/installation.xml:243(para)
19989
msgid "Finally, the last step before rebooting is to set the clock to UTC."
19990
msgstr ""
19991
19992
#: serverguide/C/installation.xml:249(para)
19993
msgid ""
19994
"If at any point during installation you are not satisfied by the default "
19995
"setting, use the \"Go Back\" function at any prompt to be brought to a "
19996
"detailed installation menu that will allow you to modify the default "
19997
"settings."
19998
msgstr ""
19999
20000
#: serverguide/C/installation.xml:254(para)
20001
msgid ""
20002
"At some point during the installation process you may want to read the help "
20003
"screen provided by the installation system. To do this, press F1."
20004
msgstr ""
20005
20006
#: serverguide/C/installation.xml:259(para)
20007
msgid ""
20008
"Once again, for detailed instructions see the <ulink "
20009
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
20010
"Installation Guide</ulink>."
20011
msgstr ""
20012
20013
#: serverguide/C/installation.xml:265(title)
20014
msgid "Package Tasks"
20015
msgstr ""
20016
20017
#: serverguide/C/installation.xml:266(para)
20018
msgid ""
20019
"During the Server Edition installation you have the option of installing "
20020
"additional packages from the CD. The packages are grouped by the type of "
20021
"service they provide."
20022
msgstr ""
20023
20024
#: serverguide/C/installation.xml:272(para)
20025
msgid "Cloud computing: Walrus storage service"
20026
msgstr ""
20027
20028
#: serverguide/C/installation.xml:277(para)
20029
msgid "Cloud computing: all-in-one cluster"
20030
msgstr ""
20031
20032
#: serverguide/C/installation.xml:282(para)
20033
msgid "Cloud computing: Cluster controller"
20034
msgstr ""
20035
20036
#: serverguide/C/installation.xml:287(para)
20037
msgid "Cloud computing: Node controller"
20038
msgstr ""
20039
20040
#: serverguide/C/installation.xml:292(para)
20041
msgid "Cloud computing: Storage controller"
20042
msgstr ""
20043
20044
#: serverguide/C/installation.xml:297(para)
20045
msgid "Cloud computing: top-level cloud controller"
20046
msgstr ""
20047
20048
#: serverguide/C/installation.xml:302(para)
20049
msgid "DNS server: Selects the BIND DNS server and its documentation."
20050
msgstr ""
20051
20052
#: serverguide/C/installation.xml:307(para)
20053
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
20054
msgstr ""
20055
20056
#: serverguide/C/installation.xml:312(para)
20057
msgid ""
20058
"Mail server: This task selects a variety of package useful for a general "
20059
"purpose mail server system."
20060
msgstr ""
20061
20062
#: serverguide/C/installation.xml:317(para)
20063
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
20064
msgstr ""
20065
20066
#: serverguide/C/installation.xml:322(para)
20067
msgid ""
20068
"PostgreSQL database: This task selects client and server packages for the "
20069
"PostgreSQL database."
20070
msgstr ""
20071
20072
#: serverguide/C/installation.xml:327(para)
20073
msgid "Print server: This task sets up your system to be a print server."
20074
msgstr ""
20075
20076
#: serverguide/C/installation.xml:332(para)
20077
msgid ""
20078
"Samba File server: This task sets up your system to be a Samba file server, "
20079
"which is especially suitable in networks with both Windows and Linux systems."
20080
msgstr ""
20081
20082
#: serverguide/C/installation.xml:338(para)
20083
msgid ""
20084
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
20085
"etc."
20086
msgstr ""
20087
20088
#: serverguide/C/installation.xml:343(para)
20089
msgid ""
20090
"Virtual machine host: Includes packages needed to run KVM virtual machines."
20091
msgstr ""
20092
20093
#: serverguide/C/installation.xml:348(para)
20094
msgid ""
20095
"Manually select packages: Executes <application>apptitude</application> "
20096
"allowing you to individually select packages."
20097
msgstr ""
20098
20099
#: serverguide/C/installation.xml:353(para)
20100
msgid ""
20101
"Installing the package groups is accomplished using the "
20102
"<application>tasksel</application> utility. One of the important difference "
20103
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
20104
"installed, a package is also configured to reasonable defaults, eventually "
20105
"prompting you for additional required information. Likewise, when installing "
20106
"a task, the packages are not only installed, but also configured to provided "
20107
"a fully integrated service."
20108
msgstr ""
20109
20110
#: serverguide/C/installation.xml:360(para)
20111
msgid ""
20112
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
20113
"<xref linkend=\"uec\"/>."
20114
msgstr ""
20115
20116
#: serverguide/C/installation.xml:363(para)
20117
msgid ""
20118
"Once the installation process has finished you can view a list of available "
20119
"tasks by entering the following from a terminal prompt:"
20120
msgstr ""
20121
20122
#: serverguide/C/installation.xml:368(command)
20123
msgid "tasksel --list-tasks"
20124
msgstr ""
20125
20126
#: serverguide/C/installation.xml:371(para)
20127
msgid ""
20128
"The output will list tasks from other Ubuntu based distributions such as "
20129
"Kubuntu and Edubuntu. Note that you can also invoke the "
20130
"<command>tasksel</command> command by itself, which will bring up a menu of "
20131
"the different tasks available."
20132
msgstr ""
20133
20134
#: serverguide/C/installation.xml:377(para)
20135
msgid ""
20136
"You can view a list of which packages are installed with each task using the "
20137
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20138
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20139
"following:"
20140
msgstr ""
20141
20142
#: serverguide/C/installation.xml:382(command)
20143
msgid "tasksel --task-packages dns-server"
20144
msgstr ""
20145
20146
#: serverguide/C/installation.xml:384(para)
20147
msgid "The output of the command should list:"
20148
msgstr ""
20149
20150
#: serverguide/C/installation.xml:387(programlisting)
20151
#, no-wrap
20152
msgid ""
20153
"\n"
20154
"bind9-doc \n"
20155
"bind9utils \n"
20156
"bind9\n"
20157
msgstr ""
20158
20159
#: serverguide/C/installation.xml:392(para)
20160
msgid ""
20161
"Also, if you did not install one of the tasks during the installation "
20162
"process, but for example you decide to make your new LAMP server a DNS "
20163
"server as well. Simply insert the installation CD and from a terminal:"
20164
msgstr ""
20165
20166
#: serverguide/C/installation.xml:397(command)
20167
msgid "sudo tasksel install dns-server"
20168
msgstr ""
20169
20170
#: serverguide/C/installation.xml:402(title)
20171
msgid "Upgrading"
20172
msgstr ""
20173
20174
#: serverguide/C/installation.xml:403(para)
20175
msgid ""
20176
"There are several ways to upgrade from one Ubuntu release to another. This "
20177
"section gives an overview of the recommended upgrade method."
20178
msgstr ""
20179
20180
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20181
msgid "do-release-upgrade"
20182
msgstr ""
20183
20184
#: serverguide/C/installation.xml:408(para)
20185
msgid ""
20186
"The recommended way to upgrade a Server Edition installation is to use the "
20187
"<application>do-release-upgrade</application> utility. Part of the "
20188
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20189
"graphical dependencies and is installed by default."
20190
msgstr ""
20191
20192
#: serverguide/C/installation.xml:413(para)
20193
msgid ""
20194
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20195
"upgrade</command>. However, using <application>do-release-"
20196
"upgrade</application> is recommended because it has the ability to handle "
20197
"system configuration changes sometimes needed between releases."
20198
msgstr ""
20199
20200
#: serverguide/C/installation.xml:418(para)
20201
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20202
msgstr ""
20203
20204
#: serverguide/C/installation.xml:424(para)
20205
msgid ""
20206
"It is also possible to use <application>do-release-upgrade</application> to "
20207
"upgrade to a development version of Ubuntu. To accomplish this use the "
20208
"<emphasis>-d</emphasis> switch:"
20209
msgstr ""
20210
20211
#: serverguide/C/installation.xml:429(command)
20212
msgid "do-release-upgrade -d"
20213
msgstr ""
20214
20215
#: serverguide/C/installation.xml:432(para)
20216
msgid ""
20217
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20218
"for production environments."
20219
msgstr ""
20220
20221
#: serverguide/C/installation.xml:439(title)
20222
msgid "Advanced Installation"
20223
msgstr ""
20224
20225
#: serverguide/C/installation.xml:442(title)
20226
msgid "Software RAID"
20227
msgstr ""
20228
20229
#: serverguide/C/installation.xml:444(para)
20230
msgid ""
20231
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20232
"the probability of catastrophic data loss in case of drive failure. RAID is "
20233
"implemented in either software (where the operating system knows about both "
20234
"drives and actively maintains both of them) or hardware (where a special "
20235
"controller makes the OS think there's only one drive and maintains the "
20236
"drives 'invisibly')."
20237
msgstr ""
20238
20239
#: serverguide/C/installation.xml:451(para)
20240
msgid ""
20241
"The RAID software included with current versions of Linux (and Ubuntu) is "
20242
"based on the <application>'mdadm'</application> driver and works very well, "
20243
"better even than many so-called 'hardware' RAID controllers. This section "
20244
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20245
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20246
"another for <emphasis>swap</emphasis>."
20247
msgstr ""
20248
20249
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20250
msgid ""
20251
"Follow the installation steps until you get to the <emphasis>Partition "
20252
"disks</emphasis> step, then:"
20253
msgstr ""
20254
20255
#: serverguide/C/installation.xml:468(para)
20256
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20257
msgstr ""
20258
20259
#: serverguide/C/installation.xml:475(para)
20260
msgid ""
20261
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20262
"partition table on this device?\"</emphasis>."
20263
msgstr ""
20264
20265
#: serverguide/C/installation.xml:479(para)
20266
msgid ""
20267
"Repeat this step for each drive you wish to be part of the RAID array."
20268
msgstr ""
20269
20270
#: serverguide/C/installation.xml:486(para)
20271
msgid ""
20272
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20273
"select <emphasis>\"Create a new partition\"</emphasis>."
20274
msgstr ""
20275
20276
#: serverguide/C/installation.xml:493(para)
20277
msgid ""
20278
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20279
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20280
"size is twice that of RAM. Enter the partition size, then choose "
20281
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20282
msgstr ""
20283
20284
#: serverguide/C/installation.xml:502(para)
20285
msgid ""
20286
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20287
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20288
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20289
"<emphasis>\"Done setting up partition\"</emphasis>."
20290
msgstr ""
20291
20292
#: serverguide/C/installation.xml:511(para)
20293
msgid ""
20294
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20295
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20296
"partition\"</emphasis>."
20297
msgstr ""
20298
20299
#: serverguide/C/installation.xml:519(para)
20300
msgid ""
20301
"Use the rest of the free space on the drive and choose "
20302
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20303
msgstr ""
20304
20305
#: serverguide/C/installation.xml:526(para)
20306
msgid ""
20307
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20308
"at the top, changing it to <emphasis>\"physical volume for "
20309
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20310
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20311
"<emphasis>\"Done setting up partition\"</emphasis>."
20312
msgstr ""
20313
20314
#: serverguide/C/installation.xml:536(para)
20315
msgid "Repeat steps three through eight for the other disk and partitions."
20316
msgstr ""
20317
20318
#: serverguide/C/installation.xml:545(title)
20319
msgid "RAID Configuration"
20320
msgstr ""
20321
20322
#: serverguide/C/installation.xml:547(para)
20323
msgid "With the partitions setup the arrays are ready to be configured:"
20324
msgstr ""
20325
20326
#: serverguide/C/installation.xml:554(para)
20327
msgid ""
20328
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20329
"Software RAID\"</emphasis> at the top."
20330
msgstr ""
20331
20332
#: serverguide/C/installation.xml:561(para)
20333
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20334
msgstr ""
20335
20336
#: serverguide/C/installation.xml:568(para)
20337
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20338
msgstr ""
20339
20340
#: serverguide/C/installation.xml:575(para)
20341
msgid ""
20342
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20343
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20344
msgstr ""
20345
20346
#: serverguide/C/installation.xml:581(para)
20347
msgid ""
20348
"In order to use <emphasis>RAID5</emphasis> you need at least "
20349
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20350
"<emphasis>two</emphasis> drives are required."
20351
msgstr ""
20352
20353
#: serverguide/C/installation.xml:590(para)
20354
msgid ""
20355
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20356
"of hard drives you have, for the array. Then select "
20357
"<emphasis>\"Continue\"</emphasis>."
20358
msgstr ""
20359
20360
#: serverguide/C/installation.xml:598(para)
20361
msgid ""
20362
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20363
"default, then choose <emphasis>\"Continue\"</emphasis>."
20364
msgstr ""
20365
20366
#: serverguide/C/installation.xml:605(para)
20367
msgid ""
20368
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20369
"etc. The numbers will usually match and the different letters correspond to "
20370
"different hard drives."
20371
msgstr ""
20372
20373
#: serverguide/C/installation.xml:610(para)
20374
msgid ""
20375
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20376
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20377
"go to the next step."
20378
msgstr ""
20379
20380
#: serverguide/C/installation.xml:618(para)
20381
msgid ""
20382
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20383
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20384
"and <emphasis>sdb2</emphasis>."
20385
msgstr ""
20386
20387
#: serverguide/C/installation.xml:626(para)
20388
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20389
msgstr ""
20390
20391
#: serverguide/C/installation.xml:636(title)
20392
msgid "Formatting"
20393
msgstr ""
20394
20395
#: serverguide/C/installation.xml:638(para)
20396
msgid ""
20397
"There should now be a list of hard drives and RAID devices. The next step is "
20398
"to format and set the mount point for the RAID devices. Treat the RAID "
20399
"device as a local hard drive, format and mount accordingly."
20400
msgstr ""
20401
20402
#: serverguide/C/installation.xml:646(para)
20403
msgid ""
20404
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20405
"#0\"</emphasis> partition."
20406
msgstr ""
20407
20408
#: serverguide/C/installation.xml:653(para)
20409
msgid ""
20410
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20411
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20412
msgstr ""
20413
20414
#: serverguide/C/installation.xml:661(para)
20415
msgid ""
20416
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20417
"#1\"</emphasis> partition."
20418
msgstr ""
20419
20420
#: serverguide/C/installation.xml:668(para)
20421
msgid ""
20422
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20423
"journaling file system\"</emphasis>."
20424
msgstr ""
20425
20426
#: serverguide/C/installation.xml:675(para)
20427
msgid ""
20428
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20429
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20430
"options as appropriate, then select <emphasis>\"Done setting up "
20431
"partition\"</emphasis>."
20432
msgstr ""
20433
20434
#: serverguide/C/installation.xml:683(para)
20435
msgid ""
20436
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20437
"disk\"</emphasis>."
20438
msgstr ""
20439
20440
#: serverguide/C/installation.xml:690(para)
20441
msgid ""
20442
"If you choose to place the root partition on a RAID array, the installer "
20443
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20444
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20445
msgstr ""
20446
20447
#: serverguide/C/installation.xml:695(para)
20448
msgid "The installation process will then continue normally."
20449
msgstr ""
20450
20451
#: serverguide/C/installation.xml:701(title)
20452
msgid "Degraded RAID"
20453
msgstr ""
20454
20455
#: serverguide/C/installation.xml:703(para)
20456
msgid ""
20457
"At some point in the life of the computer a disk failure event may occur. "
20458
"When this happens, using Software RAID, the operating system will place the "
20459
"array into what is known as a <emphasis>degraded</emphasis> state."
20460
msgstr ""
20461
20462
#: serverguide/C/installation.xml:708(para)
20463
msgid ""
20464
"If the array has become degraded, due to the chance of data corruption, by "
20465
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20466
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20467
"second prompt giving you the option to go ahead and boot the system, or "
20468
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20469
"the desired behavior, especially if the machine is in a remote location. "
20470
"Booting to a degraded array can be configured several ways:"
20471
msgstr ""
20472
20473
#: serverguide/C/installation.xml:719(para)
20474
msgid ""
20475
"The <application>dpkg-reconfigure</application> utility can be used to "
20476
"configure the default behavior, and during the process you will be queried "
20477
"about additional settings related to the array. Such as monitoring, email "
20478
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20479
"following:"
20480
msgstr ""
20481
20482
#: serverguide/C/installation.xml:726(command)
20483
msgid "sudo dpkg-reconfigure mdadm"
20484
msgstr ""
20485
20486
#: serverguide/C/installation.xml:732(para)
20487
msgid ""
20488
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20489
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20490
"The file has the advantage of being able to pre-configure the system's "
20491
"behavior, and can also be manually edited:"
20492
msgstr ""
20493
20494
#: serverguide/C/installation.xml:738(programlisting)
20495
#, no-wrap
20496
msgid ""
20497
"\n"
20498
"BOOT_DEGRADED=true\n"
20499
msgstr ""
20500
20501
#: serverguide/C/installation.xml:743(para)
20502
msgid "The configuration file can be overridden by using a Kernel argument."
20503
msgstr ""
20504
20505
#: serverguide/C/installation.xml:751(para)
20506
msgid ""
20507
"Using a Kernel argument will allow the system to boot to a degraded array as "
20508
"well:"
20509
msgstr ""
20510
20511
#: serverguide/C/installation.xml:757(para)
20512
msgid ""
20513
"When the server is booting press <keycap>Shift</keycap> to open the "
20514
"<application>Grub</application> menu."
20515
msgstr ""
20516
20517
#: serverguide/C/installation.xml:762(para)
20518
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20519
msgstr ""
20520
20521
#: serverguide/C/installation.xml:767(para)
20522
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20523
msgstr ""
20524
20525
#: serverguide/C/installation.xml:772(para)
20526
msgid ""
20527
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20528
"end of the line."
20529
msgstr ""
20530
20531
#: serverguide/C/installation.xml:777(para)
20532
msgid ""
20533
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20534
"the system."
20535
msgstr ""
20536
20537
#: serverguide/C/installation.xml:786(para)
20538
msgid ""
20539
"Once the system has booted you can either repair the array see <xref "
20540
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20541
"another machine due to major hardware failure."
20542
msgstr ""
20543
20544
#: serverguide/C/installation.xml:793(title)
20545
msgid "RAID Maintenance"
20546
msgstr ""
20547
20548
#: serverguide/C/installation.xml:795(para)
20549
msgid ""
20550
"The <application>mdadm</application> utility can be used to view the status "
20551
"of an array, add disks to an array, remove disks, etc:"
20552
msgstr ""
20553
20554
#: serverguide/C/installation.xml:802(para)
20555
msgid "To view the status of an array, from a terminal prompt enter:"
20556
msgstr ""
20557
20558
#: serverguide/C/installation.xml:806(command)
20559
msgid "sudo mdadm -D /dev/md0"
20560
msgstr ""
20561
20562
#: serverguide/C/installation.xml:809(para)
20563
msgid ""
20564
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20565
"display <emphasis>detailed</emphasis> information about the "
20566
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20567
"with the appropriate RAID device."
20568
msgstr ""
20569
20570
#: serverguide/C/installation.xml:815(para)
20571
msgid "To view the status of a disk in an array:"
20572
msgstr ""
20573
20574
#: serverguide/C/installation.xml:819(command)
20575
msgid "sudo mdadm -E /dev/sda1"
20576
msgstr ""
20577
20578
#: serverguide/C/installation.xml:821(para)
20579
msgid ""
20580
"The output if very similar to the <command>mdadm -D</command> command, "
20581
"adjust <filename>/dev/sda1</filename> for each disk."
20582
msgstr ""
20583
20584
#: serverguide/C/installation.xml:826(para)
20585
msgid "If a disk fails and needs to be removed from an array enter:"
20586
msgstr ""
20587
20588
#: serverguide/C/installation.xml:830(command)
20589
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20590
msgstr ""
20591
20592
#: serverguide/C/installation.xml:832(para)
20593
msgid ""
20594
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20595
"the appropriate RAID device and disk."
20596
msgstr ""
20597
20598
#: serverguide/C/installation.xml:837(para)
20599
msgid "Similarly, to add a new disk:"
20600
msgstr ""
20601
20602
#: serverguide/C/installation.xml:841(command)
20603
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20604
msgstr ""
20605
20606
#: serverguide/C/installation.xml:846(para)
20607
msgid ""
20608
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20609
"though there is nothing physically wrong with the drive. It is usually "
20610
"worthwhile to remove the drive from the array then re-add it. This will "
20611
"cause the drive to re-sync with the array. If the drive will not sync with "
20612
"the array, it is a good indication of hardware failure."
20613
msgstr ""
20614
20615
#: serverguide/C/installation.xml:852(para)
20616
msgid ""
20617
"The <filename>/proc/mdstat</filename> file also contains useful information "
20618
"about the system's RAID devices:"
20619
msgstr ""
20620
20621
#: serverguide/C/installation.xml:857(command)
20622
msgid "cat /proc/mdstat"
20623
msgstr ""
20624
20625
#: serverguide/C/installation.xml:858(computeroutput)
20626
#, no-wrap
20627
msgid ""
20628
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20629
"[raid10] \n"
20630
"md0 : active raid1 sda1[0] sdb1[1]\n"
20631
" 10016384 blocks [2/2] [UU]\n"
20632
" \n"
20633
"unused devices: <none>"
20634
msgstr ""
20635
20636
#: serverguide/C/installation.xml:865(para)
20637
msgid ""
20638
"The following command is great for watching the status of a syncing drive:"
20639
msgstr ""
20640
20641
#: serverguide/C/installation.xml:870(command)
20642
msgid "watch -n1 cat /proc/mdstat"
20643
msgstr ""
20644
20645
#: serverguide/C/installation.xml:873(para)
20646
msgid ""
20647
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20648
"<application>watch</application> command."
20649
msgstr ""
20650
20651
#: serverguide/C/installation.xml:877(para)
20652
msgid ""
20653
"If you do need to replace a faulty drive, after the drive has been replaced "
20654
"and synced, <application>grub</application> will need to be installed. To "
20655
"install <application>grub</application> on the new drive, enter the "
20656
"following:"
20657
msgstr ""
20658
20659
#: serverguide/C/installation.xml:883(command)
20660
msgid "sudo grub-install /dev/md0"
20661
msgstr ""
20662
20663
#: serverguide/C/installation.xml:886(para)
20664
msgid ""
20665
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20666
msgstr ""
20667
20668
#: serverguide/C/installation.xml:894(para)
20669
msgid ""
20670
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20671
"can be configured. Please see the following links for more information:"
20672
msgstr ""
20673
20674
#: serverguide/C/installation.xml:901(para)
20675
msgid ""
20676
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20677
"Wiki Articles on RAID</ulink>."
20678
msgstr ""
20679
20680
#: serverguide/C/installation.xml:907(ulink)
20681
msgid "Software RAID HOWTO"
20682
msgstr ""
20683
20684
#: serverguide/C/installation.xml:912(ulink)
20685
msgid "Managing RAID on Linux"
20686
msgstr ""
20687
20688
#: serverguide/C/installation.xml:919(title)
20689
msgid "Logical Volume Manager (LVM)"
20690
msgstr ""
20691
20692
#: serverguide/C/installation.xml:921(para)
20693
msgid ""
20694
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20695
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20696
"hard disks. LVM volumes can be created on both software RAID partitions and "
20697
"standard partitions residing on a single disk. Volumes can also be extended, "
20698
"giving greater flexibility to systems as requirements change."
20699
msgstr ""
20700
20701
#: serverguide/C/installation.xml:930(para)
20702
msgid ""
20703
"A side effect of LVM's power and flexibility is a greater degree of "
20704
"complication. Before diving into the LVM installation process, it is best to "
20705
"get familiar with some terms."
20706
msgstr ""
20707
20708
#: serverguide/C/installation.xml:937(para)
20709
msgid ""
20710
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20711
"Volumes (LV)."
20712
msgstr ""
20713
20714
#: serverguide/C/installation.xml:942(para)
20715
msgid ""
20716
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
20717
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
20718
"which resides the actual EXT3, XFS, JFS, etc filesystem."
20719
msgstr ""
20720
20721
#: serverguide/C/installation.xml:948(para)
20722
msgid ""
20723
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
20724
"RAID partition. The Volume Group can be extended by adding more PVs."
20725
msgstr ""
20726
20727
#: serverguide/C/installation.xml:959(para)
20728
msgid ""
20729
"As an example this section covers installing Ubuntu Server Edition with "
20730
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
20731
"the initial install only one Physical Volume (PV) will be part of the Volume "
20732
"Group (VG). Another PV will be added after install to demonstrate how a VG "
20733
"can be extended."
20734
msgstr ""
20735
20736
#: serverguide/C/installation.xml:965(para)
20737
msgid ""
20738
"There are several installation options for LVM, <emphasis>\"Guided - use the "
20739
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
20740
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
20741
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
20742
"partitions and configure LVM. At this time the only way to configure a "
20743
"system with both LVM and standard partitions, during installation, is to use "
20744
"the Manual approach."
20745
msgstr ""
20746
20747
#: serverguide/C/installation.xml:982(para)
20748
msgid ""
20749
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
20750
"<emphasis>\"Manual\"</emphasis>."
20751
msgstr ""
20752
20753
#: serverguide/C/installation.xml:989(para)
20754
msgid ""
20755
"Select the hard disk and on the next screen choose \"yes\" to "
20756
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
20757
msgstr ""
20758
20759
#: serverguide/C/installation.xml:996(para)
20760
msgid ""
20761
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
20762
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
20763
msgstr ""
20764
20765
#: serverguide/C/installation.xml:1004(para)
20766
msgid ""
20767
"For the LVM <emphasis>/srv</emphasis>, create a new "
20768
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
20769
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
20770
"<emphasis>\"Done setting up the partition\"</emphasis>."
20771
msgstr ""
20772
20773
#: serverguide/C/installation.xml:1012(para)
20774
msgid ""
20775
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
20776
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
20777
"disk."
20778
msgstr ""
20779
20780
#: serverguide/C/installation.xml:1020(para)
20781
msgid ""
20782
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
20783
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
20784
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
20785
"After entering a name, select the partition configured for LVM, and choose "
20786
"<emphasis>\"Continue\"</emphasis>."
20787
msgstr ""
20788
20789
#: serverguide/C/installation.xml:1029(para)
20790
msgid ""
20791
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
20792
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
20793
"volume group, and enter a name for the new LV, for example "
20794
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
20795
"a size, which may be the full partition because it can always be extended "
20796
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
20797
"main <emphasis>\"Partition Disks\"</emphasis> screen."
20798
msgstr ""
20799
20800
#: serverguide/C/installation.xml:1039(para)
20801
msgid ""
20802
"Now add a filesystem to the new LVM. Select the partition under "
20803
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
20804
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
20805
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
20806
"select <emphasis>\"Done setting up the partition\"</emphasis>."
20807
msgstr ""
20808
20809
#: serverguide/C/installation.xml:1048(para)
20810
msgid ""
20811
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20812
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
20813
"the installation."
20814
msgstr ""
20815
20816
#: serverguide/C/installation.xml:1056(para)
20817
msgid "There are some useful utilities to view information about LVM:"
20818
msgstr ""
20819
20820
#: serverguide/C/installation.xml:1061(para)
20821
msgid ""
20822
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
20823
msgstr ""
20824
20825
#: serverguide/C/installation.xml:1062(para)
20826
msgid ""
20827
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
20828
msgstr ""
20829
20830
#: serverguide/C/installation.xml:1063(para)
20831
msgid ""
20832
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
20833
"Physical Volumes."
20834
msgstr ""
20835
20836
#: serverguide/C/installation.xml:1068(title)
20837
msgid "Extending Volume Groups"
20838
msgstr ""
20839
20840
#: serverguide/C/installation.xml:1070(para)
20841
msgid ""
20842
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
20843
"section covers adding a second hard disk, creating a Physical Volume (PV), "
20844
"adding it to the volume group (VG), extending the logical volume <filename "
20845
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
20846
"example assumes a second hard disk has been added to the system. This hard "
20847
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
20848
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
20849
"before issuing the commands below. You could lose some data if you issue "
20850
"those commands on a non-empty disk. In our example we will use the entire "
20851
"disk as a physical volume (you could choose to create partitions and use "
20852
"them as different physical volumes)"
20853
msgstr ""
20854
20855
#: serverguide/C/installation.xml:1082(para)
20856
msgid "First, create the physical volume, in a terminal execute:"
20857
msgstr ""
20858
20859
#: serverguide/C/installation.xml:1087(command)
20860
msgid "sudo pvcreate /dev/sdb"
20861
msgstr ""
20862
20863
#: serverguide/C/installation.xml:1093(para)
20864
msgid "Now extend the Volume Group (VG):"
20865
msgstr ""
20866
20867
#: serverguide/C/installation.xml:1098(command)
20868
msgid "sudo vgextend vg01 /dev/sdb"
20869
msgstr ""
20870
20871
#: serverguide/C/installation.xml:1104(para)
20872
msgid ""
20873
"Use <application>vgdisplay</application> to find out the free physical "
20874
"extents - Free PE / size (the size you can allocate). We will assume a free "
20875
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
20876
"whole free space available. Use your own PE and/or free space."
20877
msgstr ""
20878
20879
#: serverguide/C/installation.xml:1110(para)
20880
msgid ""
20881
"The Logical Volume (LV) can now be extended by different methods, we will "
20882
"only see how to use the PE to extend the LV:"
20883
msgstr ""
20884
20885
#: serverguide/C/installation.xml:1115(command)
20886
msgid "sudo lvextend /dev/vg01/srv -l +511"
20887
msgstr ""
20888
20889
#: serverguide/C/installation.xml:1118(para)
20890
msgid ""
20891
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
20892
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
20893
"Gig, Tera, etc bytes."
20894
msgstr ""
20895
20896
#: serverguide/C/installation.xml:1126(para)
20897
msgid ""
20898
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
20899
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
20900
"pratice to unmount it anyway and check the filesystem, so that you don't "
20901
"mess up the day you want to reduce a logical volume (in that case unmounting "
20902
"first is compulsory)."
20903
msgstr ""
20904
20905
#: serverguide/C/installation.xml:1132(para)
20906
msgid ""
20907
"The following commands are for an <emphasis>EXT3</emphasis> or "
20908
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
20909
"there may be other utilities available."
20910
msgstr ""
20911
20912
#: serverguide/C/installation.xml:1139(command)
20913
msgid "sudo e2fsck -f /dev/vg01/srv"
20914
msgstr ""
20915
20916
#: serverguide/C/installation.xml:1142(para)
20917
msgid ""
20918
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
20919
"forces checking even if the system seems clean."
20920
msgstr ""
20921
20922
#: serverguide/C/installation.xml:1149(para)
20923
msgid "Finally, resize the filesystem:"
20924
msgstr ""
20925
20926
#: serverguide/C/installation.xml:1154(command)
20927
msgid "sudo resize2fs /dev/vg01/srv"
20928
msgstr ""
20929
20930
#: serverguide/C/installation.xml:1160(para)
20931
msgid "Now mount the partition and check its size."
20932
msgstr ""
20933
20934
#: serverguide/C/installation.xml:1165(command)
20935
msgid "mount /dev/vg01/srv /srv && df -h /srv"
20936
msgstr ""
20937
20938
#: serverguide/C/installation.xml:1177(para)
20939
msgid ""
20940
"See the <ulink "
20941
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
20942
"Articles</ulink>."
20943
msgstr ""
20944
20945
#: serverguide/C/installation.xml:1182(para)
20946
msgid ""
20947
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
20948
"HOWTO</ulink> for more information."
20949
msgstr ""
20950
20951
#: serverguide/C/installation.xml:1187(para)
20952
msgid ""
20953
"Another good article is <ulink "
20954
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
20955
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
20956
"linuxdevcenter.com site."
20957
msgstr ""
20958
20959
#: serverguide/C/installation.xml:1194(para)
20960
msgid ""
20961
"For more information on <application>fdisk</application> see the <ulink "
20962
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
20963
"man page</ulink>."
20964
msgstr ""
20965
20966
#: serverguide/C/file-server.xml:13(title)
20967
msgid "File Servers"
20968
msgstr ""
20969
20970
#: serverguide/C/file-server.xml:15(para)
20971
msgid ""
20972
"If you have more than one computer on a single network. At some point you "
20973
"will probably need to share files between them. In this section we cover "
20974
"installing and configuring FTP, NFS, and CUPS."
20975
msgstr ""
20976
20977
#: serverguide/C/file-server.xml:22(title)
20978
msgid "FTP Server"
20979
msgstr ""
20980
20981
#: serverguide/C/file-server.xml:24(para)
20982
msgid ""
20983
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
20984
"files between computers. FTP works on a client/server model. The server "
20985
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
20986
"listens for FTP requests from remote clients. When a request is received, it "
20987
"manages the login and sets up the connection. For the duration of the "
20988
"session it executes any of commands sent by the FTP client."
20989
msgstr ""
20990
20991
#: serverguide/C/file-server.xml:33(para)
20992
msgid "Access to an FTP server can be managed in two ways:"
20993
msgstr ""
20994
20995
#: serverguide/C/file-server.xml:37(para)
20996
msgid "Anonymous"
20997
msgstr ""
20998
20999
#: serverguide/C/file-server.xml:40(para)
21000
msgid "Authenticated"
21001
msgstr ""
21002
21003
#: serverguide/C/file-server.xml:43(para)
21004
msgid ""
21005
"In the Anonymous mode, remote clients can access the FTP server by using the "
21006
"default user account called \"anonymous\" or \"ftp\" and sending an email "
21007
"address as the password. In the Authenticated mode a user must have an "
21008
"account and a password. User access to the FTP server directories and files "
21009
"is dependent on the permissions defined for the account used at login. As a "
21010
"general rule, the FTP daemon will hide the root directory of the FTP server "
21011
"and change it to the FTP Home directory. This hides the rest of the file "
21012
"system from remote sessions."
21013
msgstr ""
21014
21015
#: serverguide/C/file-server.xml:55(title)
21016
msgid "vsftpd - FTP Server Installation"
21017
msgstr ""
21018
21019
#: serverguide/C/file-server.xml:57(para)
21020
msgid ""
21021
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
21022
"and maintain. To install <application>vsftpd</application> you can run the "
21023
"following command:"
21024
msgstr ""
21025
21026
#: serverguide/C/file-server.xml:65(command)
21027
msgid "sudo apt-get install vsftpd"
21028
msgstr ""
21029
21030
#: serverguide/C/file-server.xml:71(title)
21031
msgid "Anonymous FTP Configuration"
21032
msgstr ""
21033
21034
#: serverguide/C/file-server.xml:73(para)
21035
msgid ""
21036
"By default <application>vsftpd</application> is configured to only allow "
21037
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
21038
"created with a home directory of <filename>/home/ftp</filename>. This is the "
21039
"default FTP directory."
21040
msgstr ""
21041
21042
#: serverguide/C/file-server.xml:80(para)
21043
msgid ""
21044
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
21045
"example, simply create a directory in another location and change the "
21046
"<emphasis>ftp</emphasis> user's home directory:"
21047
msgstr ""
21048
21049
#: serverguide/C/file-server.xml:87(command)
21050
msgid "sudo mkdir /srv/ftp"
21051
msgstr ""
21052
21053
#: serverguide/C/file-server.xml:88(command)
21054
msgid "sudo usermod -d /srv/ftp ftp"
21055
msgstr ""
21056
21057
#: serverguide/C/file-server.xml:91(para)
21058
msgid "After making the change restart <application>vsftpd</application>:"
21059
msgstr ""
21060
21061
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
21062
msgid "sudo /etc/init.d/vsftpd restart"
21063
msgstr ""
21064
21065
#: serverguide/C/file-server.xml:99(para)
21066
msgid ""
21067
"Finally, copy any files and directories you would like to make available "
21068
"through anonymous FTP to <filename>/srv/ftp</filename>."
21069
msgstr ""
21070
21071
#: serverguide/C/file-server.xml:106(title)
21072
msgid "User Authenticated FTP Configuration"
21073
msgstr ""
21074
21075
#: serverguide/C/file-server.xml:108(para)
21076
msgid ""
21077
"To configure <application>vsftpd</application> to authenticate system users "
21078
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
21079
msgstr ""
21080
21081
#: serverguide/C/file-server.xml:114(programlisting)
21082
#, no-wrap
21083
msgid ""
21084
"\n"
21085
"local_enable=YES\n"
21086
"write_enable=YES\n"
21087
msgstr ""
21088
21089
#: serverguide/C/file-server.xml:119(para)
21090
msgid "Now restart <application>vsftpd</application>:"
21091
msgstr ""
21092
21093
#: serverguide/C/file-server.xml:127(para)
21094
msgid ""
21095
"Now when system users login to FTP they will start in their "
21096
"<emphasis>home</emphasis> directories where they can download, upload, "
21097
"create directories, etc."
21098
msgstr ""
21099
21100
#: serverguide/C/file-server.xml:133(para)
21101
msgid ""
21102
"Similarly, by default, the anonymous users are not allowed to upload files "
21103
"to FTP server. To change this setting, you should uncomment the following "
21104
"line, and restart <application>vsftpd</application>:"
21105
msgstr ""
21106
21107
#: serverguide/C/file-server.xml:140(programlisting)
21108
#, no-wrap
21109
msgid ""
21110
"\n"
21111
"anon_upload_enable=YES\n"
21112
msgstr ""
21113
21114
#: serverguide/C/file-server.xml:145(para)
21115
msgid ""
21116
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
21117
"not enable anonymous upload on servers accessed directly from the Internet."
21118
msgstr ""
21119
21120
#: serverguide/C/file-server.xml:151(para)
21121
msgid ""
21122
"The configuration file consists of many configuration parameters. The "
21123
"information about each parameter is available in the configuration file. "
21124
"Alternatively, you can refer to the man page, <command>man 5 "
21125
"vsftpd.conf</command> for details of each parameter."
21126
msgstr ""
21127
21128
#: serverguide/C/file-server.xml:162(title)
21129
msgid "Securing FTP"
21130
msgstr ""
21131
21132
#: serverguide/C/file-server.xml:164(para)
21133
msgid ""
21134
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21135
"<application>vsftpd</application> more secure. For example users can be "
21136
"limited to their home directories by uncommenting:"
21137
msgstr ""
21138
21139
#: serverguide/C/file-server.xml:170(programlisting)
21140
#, no-wrap
21141
msgid ""
21142
"\n"
21143
"chroot_local_user=YES\n"
21144
msgstr ""
21145
21146
#: serverguide/C/file-server.xml:174(para)
21147
msgid ""
21148
"You can also limit a specific list of users to just their home directories:"
21149
msgstr ""
21150
21151
#: serverguide/C/file-server.xml:178(programlisting)
21152
#, no-wrap
21153
msgid ""
21154
"\n"
21155
"chroot_list_enable=YES\n"
21156
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21157
msgstr ""
21158
21159
#: serverguide/C/file-server.xml:183(para)
21160
msgid ""
21161
"After uncommenting the above options, create a "
21162
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21163
"per line. Then restart <application>vsftpd</application>:"
21164
msgstr ""
21165
21166
#: serverguide/C/file-server.xml:192(para)
21167
msgid ""
21168
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21169
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21170
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21171
"add them to the list."
21172
msgstr ""
21173
21174
#: serverguide/C/file-server.xml:199(para)
21175
msgid ""
21176
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21177
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21178
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21179
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21180
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21181
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21182
"with a shell may not be ideal for some environments, such as a shared web "
21183
"host."
21184
msgstr ""
21185
21186
#: serverguide/C/file-server.xml:208(para)
21187
msgid ""
21188
"To configure <emphasis>FTPS</emphasis>, edit "
21189
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21190
msgstr ""
21191
21192
#: serverguide/C/file-server.xml:212(programlisting)
21193
#, no-wrap
21194
msgid ""
21195
"\n"
21196
"ssl_enable=Yes\n"
21197
msgstr ""
21198
21199
#: serverguide/C/file-server.xml:216(para)
21200
msgid "Also, notice the certificate and key related options:"
21201
msgstr ""
21202
21203
#: serverguide/C/file-server.xml:220(programlisting)
21204
#, no-wrap
21205
msgid ""
21206
"\n"
21207
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21208
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21209
msgstr ""
21210
21211
#: serverguide/C/file-server.xml:225(para)
21212
msgid ""
21213
"By default these options are set the certificate and key provided by the "
21214
"<application>ssl-cert</application> package. In a production environment "
21215
"these should be replaced with a certificate and key generated for the "
21216
"specific host. For more information on certificates see <xref "
21217
"linkend=\"certificates-and-security\"/>."
21218
msgstr ""
21219
21220
#: serverguide/C/file-server.xml:231(para)
21221
msgid ""
21222
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21223
"be forced to use <emphasis>FTPS</emphasis>:"
21224
msgstr ""
21225
21226
#: serverguide/C/file-server.xml:240(para)
21227
msgid ""
21228
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21229
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21230
"adding the <emphasis>nologin</emphasis> shell:"
21231
msgstr ""
21232
21233
#: serverguide/C/file-server.xml:245(programlisting)
21234
#, no-wrap
21235
msgid ""
21236
"\n"
21237
"# /etc/shells: valid login shells\n"
21238
"/bin/csh\n"
21239
"/bin/sh\n"
21240
"/usr/bin/es\n"
21241
"/usr/bin/ksh\n"
21242
"/bin/ksh\n"
21243
"/usr/bin/rc\n"
21244
"/usr/bin/tcsh\n"
21245
"/bin/tcsh\n"
21246
"/usr/bin/esh\n"
21247
"/bin/dash\n"
21248
"/bin/bash\n"
21249
"/bin/rbash\n"
21250
"/usr/bin/screen\n"
21251
"/usr/sbin/nologin\n"
21252
msgstr ""
21253
21254
#: serverguide/C/file-server.xml:263(para)
21255
msgid ""
21256
"This is necessary because, by default <application>vsftpd</application> uses "
21257
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21258
"configuration file contains:"
21259
msgstr ""
21260
21261
#: serverguide/C/file-server.xml:268(programlisting)
21262
#, no-wrap
21263
msgid ""
21264
"\n"
21265
"auth required pam_shells.so\n"
21266
msgstr ""
21267
21268
#: serverguide/C/file-server.xml:272(para)
21269
msgid ""
21270
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21271
"in the <filename>/etc/shells</filename> file."
21272
msgstr ""
21273
21274
#: serverguide/C/file-server.xml:277(para)
21275
msgid ""
21276
"Most popular FTP clients can be configured connect using FTPS. The "
21277
"<application>lftp</application> command line FTP client has the ability to "
21278
"use FTPS as well."
21279
msgstr ""
21280
21281
#: serverguide/C/file-server.xml:288(para)
21282
msgid ""
21283
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21284
"website</ulink> for more information."
21285
msgstr ""
21286
21287
#: serverguide/C/file-server.xml:293(para)
21288
msgid ""
21289
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21290
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21291
"vsftpd.conf man page</ulink>."
21292
msgstr ""
21293
21294
#: serverguide/C/file-server.xml:299(para)
21295
msgid ""
21296
"The CodeGurus article <ulink "
21297
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21298
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21299
"contrasting FTPS and SFTP."
21300
msgstr ""
21301
21302
#: serverguide/C/file-server.xml:305(para)
21303
msgid ""
21304
"Also, for more information see the <ulink "
21305
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21306
"page."
21307
msgstr ""
21308
21309
#: serverguide/C/file-server.xml:315(title)
21310
msgid "Network File System (NFS)"
21311
msgstr ""
21312
21313
#: serverguide/C/file-server.xml:316(para)
21314
msgid ""
21315
"NFS allows a system to share directories and files with others over a "
21316
"network. By using NFS, users and programs can access files on remote systems "
21317
"almost as if they were local files."
21318
msgstr ""
21319
21320
#: serverguide/C/file-server.xml:322(para)
21321
msgid "Some of the most notable benefits that NFS can provide are:"
21322
msgstr ""
21323
21324
#: serverguide/C/file-server.xml:328(para)
21325
msgid ""
21326
"Local workstations use less disk space because commonly used data can be "
21327
"stored on a single machine and still remain accessible to others over the "
21328
"network."
21329
msgstr ""
21330
21331
#: serverguide/C/file-server.xml:333(para)
21332
msgid ""
21333
"There is no need for users to have separate home directories on every "
21334
"network machine. Home directories could be set up on the NFS server and made "
21335
"available throughout the network."
21336
msgstr ""
21337
21338
#: serverguide/C/file-server.xml:339(para)
21339
msgid ""
21340
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21341
"be used by other machines on the network. This may reduce the number of "
21342
"removable media drives throughout the network."
21343
msgstr ""
21344
21345
#: serverguide/C/file-server.xml:349(para)
21346
msgid ""
21347
"At a terminal prompt enter the following command to install the NFS Server:"
21348
msgstr ""
21349
21350
#: serverguide/C/file-server.xml:355(command)
21351
msgid "sudo apt-get install nfs-kernel-server"
21352
msgstr ""
21353
21354
#: serverguide/C/file-server.xml:361(para)
21355
msgid ""
21356
"You can configure the directories to be exported by adding them to the "
21357
"<filename>/etc/exports</filename> file. For example:"
21358
msgstr ""
21359
21360
#: serverguide/C/file-server.xml:366(screen)
21361
#, no-wrap
21362
msgid ""
21363
"\n"
21364
"/ubuntu *(ro,sync,no_root_squash)\n"
21365
"/home *(rw,sync,no_root_squash)\n"
21366
msgstr ""
21367
21368
#: serverguide/C/file-server.xml:372(para)
21369
msgid ""
21370
"You can replace * with one of the hostname formats. Make the hostname "
21371
"declaration as specific as possible so unwanted systems cannot access the "
21372
"NFS mount."
21373
msgstr ""
21374
21375
#: serverguide/C/file-server.xml:378(para)
21376
msgid ""
21377
"To start the NFS server, you can run the following command at a terminal "
21378
"prompt:"
21379
msgstr ""
21380
21381
#: serverguide/C/file-server.xml:383(command)
21382
msgid "sudo /etc/init.d/nfs-kernel-server start"
21383
msgstr ""
21384
21385
#: serverguide/C/file-server.xml:388(title)
21386
msgid "NFS Client Configuration"
21387
msgstr ""
21388
21389
#: serverguide/C/file-server.xml:389(para)
21390
msgid ""
21391
"Use the <application>mount</application> command to mount a shared NFS "
21392
"directory from another machine, by typing a command line similar to the "
21393
"following at a terminal prompt:"
21394
msgstr ""
21395
21396
#: serverguide/C/file-server.xml:395(command)
21397
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21398
msgstr ""
21399
21400
#: serverguide/C/file-server.xml:399(para)
21401
msgid ""
21402
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21403
"There should be no files or subdirectories in the "
21404
"<filename>/local/ubuntu</filename> directory."
21405
msgstr ""
21406
21407
#: serverguide/C/file-server.xml:406(para)
21408
msgid ""
21409
"An alternate way to mount an NFS share from another machine is to add a line "
21410
"to the <filename>/etc/fstab</filename> file. The line must state the "
21411
"hostname of the NFS server, the directory on the server being exported, and "
21412
"the directory on the local machine where the NFS share is to be mounted."
21413
msgstr ""
21414
21415
#: serverguide/C/file-server.xml:414(para)
21416
msgid ""
21417
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21418
"as follows:"
21419
msgstr ""
21420
21421
#: serverguide/C/file-server.xml:420(programlisting)
21422
#, no-wrap
21423
msgid ""
21424
"\n"
21425
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21426
"rsize=8192,wsize=8192,timeo=14,intr\n"
21427
msgstr ""
21428
21429
#: serverguide/C/file-server.xml:424(para)
21430
msgid ""
21431
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21432
"common</application> package is installed on your client. To install "
21433
"<application>nfs-common</application> enter the following command at the "
21434
"terminal prompt: <screen>\n"
21435
"<command>sudo apt-get install nfs-common</command>\n"
21436
"</screen>"
21437
msgstr ""
21438
21439
#: serverguide/C/file-server.xml:437(ulink)
21440
msgid "Linux NFS faq"
21441
msgstr ""
21442
21443
#: serverguide/C/file-server.xml:439(ulink)
21444
msgid "Ubuntu Wiki NFS Howto"
21445
msgstr ""
21446
21447
#: serverguide/C/file-server.xml:445(title)
21448
msgid "CUPS - Print Server"
21449
msgstr ""
21450
21451
#: serverguide/C/file-server.xml:446(para)
21452
msgid ""
21453
"The primary mechanism for Ubuntu printing and print services is the "
21454
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21455
"printing system is a freely available, portable printing layer which has "
21456
"become the new standard for printing in most Linux distributions."
21457
msgstr ""
21458
21459
#: serverguide/C/file-server.xml:453(para)
21460
msgid ""
21461
"CUPS manages print jobs and queues and provides network printing using the "
21462
"standard Internet Printing Protocol (IPP), while offering support for a very "
21463
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21464
"also supports PostScript Printer Description (PPD) and auto-detection of "
21465
"network printers, and features a simple web-based configuration and "
21466
"administration tool."
21467
msgstr ""
21468
21469
#: serverguide/C/file-server.xml:463(para)
21470
msgid ""
21471
"To install CUPS on your Ubuntu computer, simply use "
21472
"<application>sudo</application> with the <application>apt-get</application> "
21473
"command and give the packages to install as the first parameter. A complete "
21474
"CUPS install has many package dependencies, but they may all be specified on "
21475
"the same command line. Enter the following at a terminal prompt to install "
21476
"CUPS:"
21477
msgstr ""
21478
21479
#: serverguide/C/file-server.xml:468(command)
21480
msgid "sudo apt-get install cups"
21481
msgstr ""
21482
21483
#: serverguide/C/file-server.xml:471(para)
21484
msgid ""
21485
"Upon authenticating with your user password, the packages should be "
21486
"downloaded and installed without error. Upon the conclusion of installation, "
21487
"the CUPS server will be started automatically."
21488
msgstr ""
21489
21490
#: serverguide/C/file-server.xml:476(para)
21491
msgid ""
21492
"For troubleshooting purposes, you can access CUPS server errors via the "
21493
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21494
"error log does not show enough information to troubleshoot any problems you "
21495
"encounter, the verbosity of the CUPS log can be increased by changing the "
21496
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21497
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21498
"everything, from the default of \"info\". If you make this change, remember "
21499
"to change it back once you've solved your problem, to prevent the log file "
21500
"from becoming overly large."
21501
msgstr ""
21502
21503
#: serverguide/C/file-server.xml:489(para)
21504
msgid ""
21505
"The Common UNIX Printing System server's behavior is configured through the "
21506
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21507
"The CUPS configuration file follows the same syntax as the primary "
21508
"configuration file for the Apache HTTP server, so users familiar with "
21509
"editing Apache's configuration file should feel at ease when editing the "
21510
"CUPS configuration file. Some examples of settings you may wish to change "
21511
"initially will be presented here."
21512
msgstr ""
21513
21514
#: serverguide/C/file-server.xml:499(para)
21515
msgid ""
21516
"Prior to editing the configuration file, you should make a copy of the "
21517
"original file and protect it from writing, so you will have the original "
21518
"settings as a reference, and to reuse as necessary."
21519
msgstr ""
21520
21521
#: serverguide/C/file-server.xml:503(para)
21522
msgid ""
21523
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21524
"writing with the following commands, issued at a terminal prompt:"
21525
msgstr ""
21526
21527
#: serverguide/C/file-server.xml:509(command)
21528
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21529
msgstr ""
21530
21531
#: serverguide/C/file-server.xml:510(command)
21532
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21533
msgstr ""
21534
21535
#: serverguide/C/file-server.xml:515(para)
21536
msgid ""
21537
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21538
"address of the designated administrator of the CUPS server, simply edit the "
21539
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21540
"preferred text editor, and add or modify the <emphasis "
21541
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21542
"you are the Administrator for the CUPS server, and your e-mail address is "
21543
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21544
"as such:"
21545
msgstr ""
21546
21547
#: serverguide/C/file-server.xml:526(screen)
21548
#, no-wrap
21549
msgid ""
21550
"\n"
21551
"ServerAdmin bjoy@somebigco.com\n"
21552
msgstr ""
21553
21554
#: serverguide/C/file-server.xml:532(para)
21555
msgid ""
21556
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21557
"server installation listens only on the loopback interface at IP address "
21558
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21559
"listen on an actual network adapter's IP address, you must specify either a "
21560
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21561
"addition of a Listen directive. For example, if your CUPS server resides on "
21562
"a local network at the IP address <emphasis "
21563
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21564
"accessible to the other systems on this subnetwork, you would edit the "
21565
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21566
"such:"
21567
msgstr ""
21568
21569
#: serverguide/C/file-server.xml:546(screen)
21570
#, no-wrap
21571
msgid ""
21572
"\n"
21573
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21574
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21575
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21576
"(IPP)\n"
21577
msgstr ""
21578
21579
#: serverguide/C/file-server.xml:552(para)
21580
msgid ""
21581
"In the example above, you may comment out or remove the reference to the "
21582
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21583
"</application> to listen on that interface, but would rather have it only "
21584
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21585
"listening for all network interfaces for which a certain hostname is bound, "
21586
"including the Loopback, you could create a Listen entry for the hostname "
21587
"<emphasis>socrates</emphasis> as such:"
21588
msgstr ""
21589
21590
#: serverguide/C/file-server.xml:562(screen)
21591
#, no-wrap
21592
msgid ""
21593
"\n"
21594
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21595
msgstr ""
21596
21597
#: serverguide/C/file-server.xml:566(para)
21598
msgid ""
21599
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21600
"instead, as in:"
21601
msgstr ""
21602
21603
#: serverguide/C/file-server.xml:568(screen)
21604
#, no-wrap
21605
msgid ""
21606
"\n"
21607
"Port 631 # Listen on port 631 on all interfaces\n"
21608
msgstr ""
21609
21610
#: serverguide/C/file-server.xml:575(para)
21611
msgid ""
21612
"For more examples of configuration directives in the CUPS server "
21613
"configuration file, view the associated system manual page by entering the "
21614
"following command at a terminal prompt:"
21615
msgstr ""
21616
21617
#: serverguide/C/file-server.xml:582(command)
21618
msgid "man cupsd.conf"
21619
msgstr ""
21620
21621
#: serverguide/C/file-server.xml:586(para)
21622
msgid ""
21623
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21624
"configuration file, you'll need to restart the CUPS server by typing the "
21625
"following command at a terminal prompt:"
21626
msgstr ""
21627
21628
#: serverguide/C/file-server.xml:592(command)
21629
msgid "sudo /etc/init.d/cups restart"
21630
msgstr ""
21631
21632
#: serverguide/C/file-server.xml:598(title)
21633
msgid "Web Interface"
21634
msgstr ""
21635
21636
#: serverguide/C/file-server.xml:600(para)
21637
msgid ""
21638
"CUPS can be configured and monitored using a web interface, which by default "
21639
"is available at <ulink "
21640
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21641
"web interface can be used to perform all printer management tasks."
21642
msgstr ""
21643
21644
#: serverguide/C/file-server.xml:604(para)
21645
msgid ""
21646
"In order to perform administrative tasks via the web interface, you must "
21647
"either have the root account enabled on your server, or authenticate as a "
21648
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21649
"reasons, CUPS won't authenticate a user that doesn't have a password."
21650
msgstr ""
21651
21652
#: serverguide/C/file-server.xml:607(para)
21653
msgid ""
21654
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21655
"at the terminal prompt: <screen>\n"
21656
"<command>sudo usermod -aG lpadmin username</command>\n"
21657
"</screen>"
21658
msgstr ""
21659
21660
#: serverguide/C/file-server.xml:613(para)
21661
msgid ""
21662
"Further documentation is available in the <emphasis "
21663
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21664
msgstr ""
21665
21666
#: serverguide/C/file-server.xml:621(ulink)
21667
msgid "CUPS Website"
21668
msgstr ""
21669
21670
#: serverguide/C/file-server.xml:624(ulink)
21671
msgid "Ubuntu Wiki CUPS page"
21672
msgstr ""
21673
21674
#: serverguide/C/dns.xml:13(title)
21675
msgid "Domain Name Service (DNS)"
21676
msgstr ""
21677
21678
#: serverguide/C/dns.xml:14(para)
21679
msgid ""
21680
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21681
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21682
"alleviates the need to remember IP addresses. Computers that run DNS are "
21683
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21684
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21685
"common program used for maintaining a name server on Linux."
21686
msgstr ""
21687
21688
#: serverguide/C/dns.xml:24(para)
21689
msgid ""
21690
"At a terminal prompt, enter the following command to install "
21691
"<application>dns</application>:"
21692
msgstr ""
21693
21694
#: serverguide/C/dns.xml:28(command)
21695
msgid "sudo apt-get install bind9"
21696
msgstr ""
21697
21698
#: serverguide/C/dns.xml:30(para)
21699
msgid ""
21700
"A very useful package for testing and troubleshooting DNS issues is the "
21701
"dnsutils package. To install <application>dnsutils</application> enter the "
21702
"following:"
21703
msgstr ""
21704
21705
#: serverguide/C/dns.xml:35(command)
21706
msgid "sudo apt-get install dnsutils"
21707
msgstr ""
21708
21709
#: serverguide/C/dns.xml:40(para)
21710
msgid ""
21711
"There a many ways to configure <application>BIND9</application>. Some of the "
21712
"most common configurations are a caching nameserver, primary master, and a "
21713
"as a secondary master."
21714
msgstr ""
21715
21716
#: serverguide/C/dns.xml:46(para)
21717
msgid ""
21718
"When configured as a caching nameserver BIND9 will find the answer to name "
21719
"queries and remember the answer when the domain is queried again."
21720
msgstr ""
21721
21722
#: serverguide/C/dns.xml:52(para)
21723
msgid ""
21724
"As a primary master server BIND9 reads the data for a zone from a file on "
21725
"it's host and is authoritative for that zone."
21726
msgstr ""
21727
21728
#: serverguide/C/dns.xml:57(para)
21729
msgid ""
21730
"In a secondary master configuration BIND9 gets the zone data from another "
21731
"nameserver authoritative for the zone."
21732
msgstr ""
21733
21734
#: serverguide/C/dns.xml:65(para)
21735
msgid ""
21736
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
21737
"directory. The primary configuration file is "
21738
"<filename>/etc/bind/named.conf</filename>."
21739
msgstr ""
21740
21741
#: serverguide/C/dns.xml:72(para)
21742
msgid ""
21743
"The <emphasis>include</emphasis> line specifies the filename which contains "
21744
"the DNS options. The <emphasis>directory</emphasis> line in the "
21745
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
21746
"look for files. All files BIND uses will be relative to this directory."
21747
msgstr ""
21748
21749
#: serverguide/C/dns.xml:80(para)
21750
msgid ""
21751
"The file named <filename>/etc/bind/db.root</filename> describes the root "
21752
"nameservers in the world. The servers change over time, so the "
21753
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
21754
"This is usually done as updates to the <application>bind9</application> "
21755
"package. The <emphasis>zone</emphasis> section defines a master server, and "
21756
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
21757
msgstr ""
21758
21759
#: serverguide/C/dns.xml:90(para)
21760
msgid ""
21761
"It is possible to configure the same server to be a caching name server, "
21762
"primary master, and secondary master. A server can be the Start of Authority "
21763
"(SOA) for one zone, while providing secondary service for another zone. All "
21764
"the while providing caching services for hosts on the local LAN."
21765
msgstr ""
21766
21767
#: serverguide/C/dns.xml:98(title)
21768
msgid "Caching Nameserver"
21769
msgstr ""
21770
21771
#: serverguide/C/dns.xml:99(para)
21772
msgid ""
21773
"The default configuration is setup to act as a caching server. All that is "
21774
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
21775
"uncomment and edit the following in "
21776
"<filename>/etc/bind/named.conf.options</filename>:"
21777
msgstr ""
21778
21779
#: serverguide/C/dns.xml:103(programlisting)
21780
#, no-wrap
21781
msgid ""
21782
"\n"
21783
"forwarders {\n"
21784
" 1.2.3.4;\n"
21785
" 5.6.7.8;\n"
21786
" };\n"
21787
msgstr ""
21788
21789
#: serverguide/C/dns.xml:110(para)
21790
msgid ""
21791
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
21792
"the IP Adresses of actual nameservers."
21793
msgstr ""
21794
21795
#: serverguide/C/dns.xml:114(para)
21796
msgid ""
21797
"Now restart the DNS server, to enable the new configuration. From a terminal "
21798
"prompt:"
21799
msgstr ""
21800
21801
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
21802
msgid "sudo /etc/init.d/bind9 restart"
21803
msgstr ""
21804
21805
#: serverguide/C/dns.xml:120(para)
21806
msgid ""
21807
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
21808
"DNS server."
21809
msgstr ""
21810
21811
#: serverguide/C/dns.xml:125(title)
21812
msgid "Primary Master"
21813
msgstr ""
21814
21815
#: serverguide/C/dns.xml:126(para)
21816
msgid ""
21817
"In this section <application>BIND9</application> will be configured as the "
21818
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
21819
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
21820
"(Fully Qualified Domain Name)."
21821
msgstr ""
21822
21823
#: serverguide/C/dns.xml:132(title)
21824
msgid "Forward Zone File"
21825
msgstr ""
21826
21827
#: serverguide/C/dns.xml:133(para)
21828
msgid ""
21829
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
21830
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
21831
msgstr ""
21832
21833
#: serverguide/C/dns.xml:137(programlisting)
21834
#, no-wrap
21835
msgid ""
21836
"\n"
21837
"zone \"example.com\" {\n"
21838
"\ttype master;\n"
21839
" file \"/etc/bind/db.example.com\";\n"
21840
"};\n"
21841
msgstr ""
21842
21843
#: serverguide/C/dns.xml:143(para)
21844
msgid ""
21845
"Now use an existing zone file as a template to create the "
21846
"<filename>/etc/bind/db.example.com</filename> file:"
21847
msgstr ""
21848
21849
#: serverguide/C/dns.xml:147(command)
21850
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
21851
msgstr ""
21852
21853
#: serverguide/C/dns.xml:149(para)
21854
msgid ""
21855
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
21856
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
21857
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
21858
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
21859
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
21860
"leaving the \".\" at the end."
21861
msgstr ""
21862
21863
#: serverguide/C/dns.xml:155(para)
21864
msgid ""
21865
"Also, create an <emphasis>A record</emphasis> for <emphasis "
21866
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
21867
msgstr ""
21868
21869
#: serverguide/C/dns.xml:159(programlisting)
21870
#, no-wrap
21871
msgid ""
21872
"\n"
21873
";\n"
21874
"; BIND data file for local loopback interface\n"
21875
";\n"
21876
"$TTL 604800\n"
21877
"@ IN SOA ns.example.com. root.example.com. (\n"
21878
" 2 ; Serial\n"
21879
" 604800 ; Refresh\n"
21880
" 86400 ; Retry\n"
21881
" 2419200 ; Expire\n"
21882
" 604800 ) ; Negative Cache TTL\n"
21883
";\n"
21884
"@ IN NS ns.example.com.\n"
21885
"@ IN A 127.0.0.1\n"
21886
"@ IN AAAA ::1\n"
21887
"ns IN A 192.168.1.10\n"
21888
msgstr ""
21889
21890
#: serverguide/C/dns.xml:176(para)
21891
msgid ""
21892
"You must increment the <emphasis>Serial Number</emphasis> every time you "
21893
"make changes to the zone file. If you make multiple changes before "
21894
"restarting BIND9, simply increment the Serial once."
21895
msgstr ""
21896
21897
#: serverguide/C/dns.xml:180(para)
21898
msgid ""
21899
"Now, you can add DNS records to the bottom of the zone file. See <xref "
21900
"linkend=\"dns-record-types\"/> for details."
21901
msgstr ""
21902
21903
#: serverguide/C/dns.xml:184(para)
21904
msgid ""
21905
"Many admins like to use the last date edited as the serial of a zone, such "
21906
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
21907
"<emphasis>ss</emphasis> is the Serial Number)"
21908
msgstr ""
21909
21910
#: serverguide/C/dns.xml:189(para)
21911
msgid ""
21912
"Once you have made a change to the zone file "
21913
"<application>BIND9</application> will need to be restarted for the changes "
21914
"to take effect:"
21915
msgstr ""
21916
21917
#: serverguide/C/dns.xml:198(title)
21918
msgid "Reverse Zone File"
21919
msgstr ""
21920
21921
#: serverguide/C/dns.xml:199(para)
21922
msgid ""
21923
"Now that the zone is setup and resolving names to IP Adresses a "
21924
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
21925
"DNS to resolve an address to a name."
21926
msgstr ""
21927
21928
#: serverguide/C/dns.xml:203(para)
21929
msgid "Edit /etc/bind/named.conf.local and add the following:"
21930
msgstr ""
21931
21932
#: serverguide/C/dns.xml:206(programlisting)
21933
#, no-wrap
21934
msgid ""
21935
"\n"
21936
"zone \"1.168.192.in-addr.arpa\" {\n"
21937
" type master;\n"
21938
" notify no;\n"
21939
" file \"/etc/bind/db.192\";\n"
21940
"};\n"
21941
msgstr ""
21942
21943
#: serverguide/C/dns.xml:214(para)
21944
msgid ""
21945
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
21946
"whatever network you are using. Also, name the zone file "
21947
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
21948
"first octet of your network."
21949
msgstr ""
21950
21951
#: serverguide/C/dns.xml:219(para)
21952
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
21953
msgstr ""
21954
21955
#: serverguide/C/dns.xml:223(command)
21956
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
21957
msgstr ""
21958
21959
#: serverguide/C/dns.xml:225(para)
21960
msgid ""
21961
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
21962
"same options as <filename>/etc/bind/db.example.com</filename>:"
21963
msgstr ""
21964
21965
#: serverguide/C/dns.xml:229(programlisting)
21966
#, no-wrap
21967
msgid ""
21968
"\n"
21969
";\n"
21970
"; BIND reverse data file for local loopback interface\n"
21971
";\n"
21972
"$TTL 604800\n"
21973
"@ IN SOA ns.example.com. root.example.com. (\n"
21974
" 2 ; Serial\n"
21975
" 604800 ; Refresh\n"
21976
" 86400 ; Retry\n"
21977
" 2419200 ; Expire\n"
21978
" 604800 ) ; Negative Cache TTL\n"
21979
";\n"
21980
"@ IN NS ns.\n"
21981
"10 IN PTR ns.example.com.\n"
21982
msgstr ""
21983
21984
#: serverguide/C/dns.xml:244(para)
21985
msgid ""
21986
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
21987
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
21988
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
21989
"create a <emphasis>PTR record</emphasis> in "
21990
"<filename>/etc/bind/db.192</filename>."
21991
msgstr ""
21992
21993
#: serverguide/C/dns.xml:249(para)
21994
msgid ""
21995
"After creating the reverse zone file restart "
21996
"<application>BIND9</application>:"
21997
msgstr ""
21998
21999
#: serverguide/C/dns.xml:258(title)
22000
msgid "Secondary Master"
22001
msgstr ""
22002
22003
#: serverguide/C/dns.xml:259(para)
22004
msgid ""
22005
"Once a <emphasis>Primary Master</emphasis> has been configured a "
22006
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
22007
"availability of the domain should the Primary become unavailable."
22008
msgstr ""
22009
22010
#: serverguide/C/dns.xml:263(para)
22011
msgid ""
22012
"First, on the Primary Master server, the zone transfer needs to be allowed. "
22013
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
22014
"and Reverse zone definitions in "
22015
"<filename>/etc/bind/named.conf.local</filename>:"
22016
msgstr ""
22017
22018
#: serverguide/C/dns.xml:267(programlisting)
22019
#, no-wrap
22020
msgid ""
22021
"\n"
22022
"zone \"example.com\" {\n"
22023
" type master;\n"
22024
"\tfile \"/etc/bind/db.example.com\";\n"
22025
" allow-transfer { 192.168.1.11; };\n"
22026
"};\n"
22027
"\n"
22028
"zone \"1.168.192.in-addr.arpa\" {\n"
22029
" type master;\n"
22030
" notify no;\n"
22031
" file \"/etc/bind/db.192\";\n"
22032
"\tallow-transfer { 192.168.1.11; };\n"
22033
"};\n"
22034
msgstr ""
22035
22036
#: serverguide/C/dns.xml:282(para)
22037
msgid ""
22038
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
22039
"Secondary nameserver."
22040
msgstr ""
22041
22042
#: serverguide/C/dns.xml:286(para)
22043
msgid ""
22044
"Next, on the Secondary Master, install the <application>bind9</application> "
22045
"package the same way as on the Primary. Then edit the "
22046
"<filename>/etc/bind/named.conf.local</filename> and add the following "
22047
"declarations for the Forward and Reverse zones:"
22048
msgstr ""
22049
22050
#: serverguide/C/dns.xml:290(programlisting)
22051
#, no-wrap
22052
msgid ""
22053
"\n"
22054
"zone \"example.com\" {\n"
22055
"\ttype slave;\n"
22056
" file \"/var/cache/bind/db.example.com\";\n"
22057
" masters { 192.168.1.10; };\n"
22058
"}; \n"
22059
" \n"
22060
"zone \"1.168.192.in-addr.arpa\" {\n"
22061
"\ttype slave;\n"
22062
" file \"/var/cache/bind/db.192\";\n"
22063
" masters { 192.168.1.10; };\n"
22064
"};\n"
22065
msgstr ""
22066
22067
#: serverguide/C/dns.xml:304(para)
22068
msgid ""
22069
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
22070
"Primary nameserver."
22071
msgstr ""
22072
22073
#: serverguide/C/dns.xml:308(para)
22074
msgid "Restart <application>BIND9</application> on the Secondary Master:"
22075
msgstr ""
22076
22077
#: serverguide/C/dns.xml:314(para)
22078
msgid ""
22079
"In <filename>/var/log/syslog</filename> you should see something similar to:"
22080
msgstr ""
22081
22082
#: serverguide/C/dns.xml:317(programlisting)
22083
#, no-wrap
22084
msgid ""
22085
"\n"
22086
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
22087
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
22088
msgstr ""
22089
22090
#: serverguide/C/dns.xml:322(para)
22091
msgid ""
22092
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
22093
"on the Primary is larger than the one on the Secondary."
22094
msgstr ""
22095
22096
#: serverguide/C/dns.xml:328(para)
22097
msgid ""
22098
"The default directory for non-authoritative zone files is "
22099
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
22100
"<application>AppArmor</application> to allow the "
22101
"<application>named</application> daemon to write to. For more information on "
22102
"AppArmor see <xref linkend=\"apparmor\"/>."
22103
msgstr ""
22104
22105
#: serverguide/C/dns.xml:339(para)
22106
msgid ""
22107
"This section covers ways to help determine the cause when problems happen "
22108
"with DNS and <application>BIND9</application>."
22109
msgstr ""
22110
22111
#: serverguide/C/dns.xml:345(title)
22112
msgid "resolv.conf"
22113
msgstr ""
22114
22115
#: serverguide/C/dns.xml:346(para)
22116
msgid ""
22117
"The first step in testing <application>BIND9</application> is to add the "
22118
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
22119
"be configured as well as another host to double check things. Simply edit "
22120
"<filename>/etc/resolv.conf</filename> and add the following:"
22121
msgstr ""
22122
22123
#: serverguide/C/dns.xml:351(programlisting)
22124
#, no-wrap
22125
msgid ""
22126
"\n"
22127
"nameserver\t192.168.1.10\n"
22128
"nameserver\t192.168.1.11\n"
22129
msgstr ""
22130
22131
#: serverguide/C/dns.xml:356(para)
22132
msgid ""
22133
"You should also add the IP Address of the Secondary nameserver in case the "
22134
"Primary becomes unavailable."
22135
msgstr ""
22136
22137
#: serverguide/C/dns.xml:362(title)
22138
msgid "dig"
22139
msgstr ""
22140
22141
#: serverguide/C/dns.xml:363(para)
22142
msgid ""
22143
"If you installed the <application>dnsutils</application> package you can "
22144
"test your setup using the DNS lookup utility <application>dig</application>:"
22145
msgstr ""
22146
22147
#: serverguide/C/dns.xml:369(para)
22148
msgid ""
22149
"After installing <application>BIND9</application> use "
22150
"<application>dig</application> against the loopback interface to make sure "
22151
"it is listening on port 53. From a terminal prompt:"
22152
msgstr ""
22153
22154
#: serverguide/C/dns.xml:374(command)
22155
msgid "dig -x 127.0.0.1"
22156
msgstr ""
22157
22158
#: serverguide/C/dns.xml:376(para)
22159
msgid "You should see lines similar to the following in the command output:"
22160
msgstr ""
22161
22162
#: serverguide/C/dns.xml:379(programlisting)
22163
#, no-wrap
22164
msgid ""
22165
"\n"
22166
";; Query time: 1 msec\n"
22167
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22168
msgstr ""
22169
22170
#: serverguide/C/dns.xml:385(para)
22171
msgid ""
22172
"If you have configured <application>BIND9</application> as a "
22173
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22174
"the query time:"
22175
msgstr ""
22176
22177
#: serverguide/C/dns.xml:390(command)
22178
msgid "dig ubuntu.com"
22179
msgstr ""
22180
22181
#: serverguide/C/dns.xml:392(para)
22182
msgid "Note the query time toward the end of the command output:"
22183
msgstr ""
22184
22185
#: serverguide/C/dns.xml:395(programlisting)
22186
#, no-wrap
22187
msgid ""
22188
"\n"
22189
";; Query time: 49 msec\n"
22190
msgstr ""
22191
22192
#: serverguide/C/dns.xml:398(para)
22193
msgid "After a second dig there should be improvement:"
22194
msgstr ""
22195
22196
#: serverguide/C/dns.xml:401(programlisting)
22197
#, no-wrap
22198
msgid ""
22199
"\n"
22200
";; Query time: 1 msec\n"
22201
msgstr ""
22202
22203
#: serverguide/C/dns.xml:408(title)
22204
msgid "ping"
22205
msgstr ""
22206
22207
#: serverguide/C/dns.xml:410(para)
22208
msgid ""
22209
"Now to demonstrate how applications make use of DNS to resolve a host name "
22210
"use the <application>ping</application> utility to send an ICMP echo "
22211
"request. From a terminal prompt enter:"
22212
msgstr ""
22213
22214
#: serverguide/C/dns.xml:416(command)
22215
msgid "ping example.com"
22216
msgstr ""
22217
22218
#: serverguide/C/dns.xml:418(para)
22219
msgid ""
22220
"This tests if the nameserver can resolve the name "
22221
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22222
"should resemble:"
22223
msgstr ""
22224
22225
#: serverguide/C/dns.xml:422(programlisting)
22226
#, no-wrap
22227
msgid ""
22228
"\n"
22229
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22230
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22231
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22232
msgstr ""
22233
22234
#: serverguide/C/dns.xml:429(title)
22235
msgid "named-checkzone"
22236
msgstr ""
22237
22238
#: serverguide/C/dns.xml:430(para)
22239
msgid ""
22240
"A great way to test your zone files is by using the <application>named-"
22241
"checkzone</application> utility installed with the "
22242
"<application>bind9</application> package. This utility allows you to make "
22243
"sure the configuration is correct before restarting "
22244
"<application>BIND9</application> and making the changes live."
22245
msgstr ""
22246
22247
#: serverguide/C/dns.xml:437(para)
22248
msgid ""
22249
"To test our example Forward zone file enter the following from a command "
22250
"prompt:"
22251
msgstr ""
22252
22253
#: serverguide/C/dns.xml:441(command)
22254
msgid "named-checkzone example.com /etc/bind/db.example.com"
22255
msgstr ""
22256
22257
#: serverguide/C/dns.xml:443(para)
22258
msgid ""
22259
"If everything is configured correctly you should see output similar to:"
22260
msgstr ""
22261
22262
#: serverguide/C/dns.xml:446(programlisting)
22263
#, no-wrap
22264
msgid ""
22265
"\n"
22266
"zone example.com/IN: loaded serial 6\n"
22267
"OK\n"
22268
msgstr ""
22269
22270
#: serverguide/C/dns.xml:452(para)
22271
msgid "Similarly, to test the Reverse zone file enter the following:"
22272
msgstr ""
22273
22274
#: serverguide/C/dns.xml:456(command)
22275
msgid "named-checkzone example.com /etc/bind/db.192"
22276
msgstr ""
22277
22278
#: serverguide/C/dns.xml:458(para)
22279
msgid "The output should be similar to:"
22280
msgstr ""
22281
22282
#: serverguide/C/dns.xml:461(programlisting)
22283
#, no-wrap
22284
msgid ""
22285
"\n"
22286
"zone example.com/IN: loaded serial 3\n"
22287
"OK\n"
22288
msgstr ""
22289
22290
#: serverguide/C/dns.xml:468(para)
22291
msgid ""
22292
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22293
"different."
22294
msgstr ""
22295
22296
#: serverguide/C/dns.xml:475(title)
22297
msgid "Logging"
22298
msgstr ""
22299
22300
#: serverguide/C/dns.xml:476(para)
22301
msgid ""
22302
"<application>BIND9</application> has a wide variety of logging configuration "
22303
"options available. There are two main options. The "
22304
"<emphasis>channel</emphasis> option configures where logs go, and the "
22305
"<emphasis>category</emphasis> option determines what information to log."
22306
msgstr ""
22307
22308
#: serverguide/C/dns.xml:480(para)
22309
msgid "If no logging option is configured the default option is:"
22310
msgstr ""
22311
22312
#: serverguide/C/dns.xml:483(programlisting)
22313
#, no-wrap
22314
msgid ""
22315
"\n"
22316
"logging {\n"
22317
" category default { default_syslog; default_debug; };\n"
22318
" category unmatched { null; };\n"
22319
"};\n"
22320
msgstr ""
22321
22322
#: serverguide/C/dns.xml:489(para)
22323
msgid ""
22324
"This section covers configuring <application>BIND9</application> to send "
22325
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22326
"file."
22327
msgstr ""
22328
22329
#: serverguide/C/dns.xml:494(para)
22330
msgid ""
22331
"First, we need to configure a channel to specify which file to send the "
22332
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22333
"the following:"
22334
msgstr ""
22335
22336
#: serverguide/C/dns.xml:498(programlisting)
22337
#, no-wrap
22338
msgid ""
22339
"\n"
22340
"logging {\n"
22341
" channel query.log { \n"
22342
" file \"/var/log/query.log\";\n"
22343
" severity debug 3; \n"
22344
" }; \n"
22345
"};\n"
22346
msgstr ""
22347
22348
#: serverguide/C/dns.xml:508(para)
22349
msgid "Next, configure a category to send all DNS queries to the query file:"
22350
msgstr ""
22351
22352
#: serverguide/C/dns.xml:511(programlisting)
22353
#, no-wrap
22354
msgid ""
22355
"\n"
22356
"logging {\n"
22357
" channel query.log { \n"
22358
" file \"/var/log/query.log\"; \n"
22359
" severity debug 3; \n"
22360
" }; \n"
22361
" <emphasis>category queries { query.log; };</emphasis> \n"
22362
"};\n"
22363
msgstr ""
22364
22365
#: serverguide/C/dns.xml:523(para)
22366
msgid ""
22367
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22368
"level isn't specified level 1 is the default."
22369
msgstr ""
22370
22371
#: serverguide/C/dns.xml:529(para)
22372
msgid ""
22373
"Since the <emphasis>named daemon</emphasis> runs as the "
22374
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22375
"file must be created and the ownership changed:"
22376
msgstr ""
22377
22378
#: serverguide/C/dns.xml:534(command)
22379
msgid "sudo touch /var/log/query.log"
22380
msgstr ""
22381
22382
#: serverguide/C/dns.xml:535(command)
22383
msgid "sudo chown bind /var/log/query.log"
22384
msgstr ""
22385
22386
#: serverguide/C/dns.xml:539(para)
22387
msgid ""
22388
"Before <application>named</application> daemon can write to the new log file "
22389
"the <application>AppArmor</application> profile must be updated. First, edit "
22390
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22391
msgstr ""
22392
22393
#: serverguide/C/dns.xml:543(programlisting)
22394
#, no-wrap
22395
msgid ""
22396
"\n"
22397
"/var/log/query.log w,\n"
22398
msgstr ""
22399
22400
#: serverguide/C/dns.xml:546(para)
22401
msgid "Next, reload the profile:"
22402
msgstr ""
22403
22404
#: serverguide/C/dns.xml:550(command)
22405
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22406
msgstr ""
22407
22408
#: serverguide/C/dns.xml:552(para)
22409
msgid ""
22410
"For more information on <application>AppArmor</application> see <xref "
22411
"linkend=\"apparmor\"/>"
22412
msgstr ""
22413
22414
#: serverguide/C/dns.xml:557(para)
22415
msgid ""
22416
"Now restart <application>BIND9</application> for the changes to take effect:"
22417
msgstr ""
22418
22419
#: serverguide/C/dns.xml:565(para)
22420
msgid ""
22421
"You should see the file <filename>/var/log/query.log</filename> fill with "
22422
"query information. This is a simple example of the "
22423
"<application>BIND9</application> logging options. For coverage of advanced "
22424
"options see <xref linkend=\"dns-more-info\"/>."
22425
msgstr ""
22426
22427
#: serverguide/C/dns.xml:574(title)
22428
msgid "Common Record Types"
22429
msgstr ""
22430
22431
#: serverguide/C/dns.xml:575(para)
22432
msgid "This section covers some of the most common DNS record types."
22433
msgstr ""
22434
22435
#: serverguide/C/dns.xml:580(para)
22436
msgid ""
22437
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22438
msgstr ""
22439
22440
#: serverguide/C/dns.xml:583(programlisting)
22441
#, no-wrap
22442
msgid ""
22443
"\n"
22444
"www IN A 192.168.1.12\n"
22445
msgstr ""
22446
22447
#: serverguide/C/dns.xml:588(para)
22448
msgid ""
22449
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22450
"record. You cannot create a CNAME record pointing to another CNAME record."
22451
msgstr ""
22452
22453
#: serverguide/C/dns.xml:591(programlisting)
22454
#, no-wrap
22455
msgid ""
22456
"\n"
22457
"web IN CNAME www\n"
22458
msgstr ""
22459
22460
#: serverguide/C/dns.xml:596(para)
22461
msgid ""
22462
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22463
"to. Must point to an A record, not a CNAME."
22464
msgstr ""
22465
22466
#: serverguide/C/dns.xml:599(programlisting)
22467
#, no-wrap
22468
msgid ""
22469
"\n"
22470
" IN MX 1 mail.example.com.\n"
22471
"mail IN A 192.168.1.13\n"
22472
msgstr ""
22473
22474
#: serverguide/C/dns.xml:605(para)
22475
msgid ""
22476
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22477
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22478
"Secondary servers are defined."
22479
msgstr ""
22480
22481
#: serverguide/C/dns.xml:609(programlisting)
22482
#, no-wrap
22483
msgid ""
22484
"\n"
22485
" IN NS ns.example.com.\n"
22486
"\tIN NS ns2.example.com.\n"
22487
"ns IN A 192.168.1.10\n"
22488
"ns2\tIN A\t 192.168.1.11\n"
22489
msgstr ""
22490
22491
#: serverguide/C/dns.xml:622(para)
22492
msgid ""
22493
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22494
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22495
msgstr ""
22496
22497
#: serverguide/C/dns.xml:627(para)
22498
msgid ""
22499
"For in depth coverage of <emphasis>DNS</emphasis> and "
22500
"<application>BIND9</application> see <ulink "
22501
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22502
msgstr ""
22503
22504
#: serverguide/C/dns.xml:632(para)
22505
msgid ""
22506
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22507
"BIND</ulink> is a popular book now in it's fifth edition."
22508
msgstr ""
22509
22510
#: serverguide/C/dns.xml:637(para)
22511
msgid ""
22512
"A great place to ask for <application>BIND9</application> assistance, and "
22513
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22514
"server</emphasis> IRC channel on <ulink "
22515
"url=\"http://freenode.net\">freenode</ulink>."
22516
msgstr ""
22517
22518
#: serverguide/C/dns.xml:643(para)
22519
msgid ""
22520
"Also, see the <ulink "
22521
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22522
"HOWTO</ulink> in the Ubuntu Wiki."
22523
msgstr ""
22524
22525
#: serverguide/C/databases.xml:13(title)
22526
msgid "Databases"
22527
msgstr ""
22528
22529
#: serverguide/C/databases.xml:14(para)
22530
msgid "Ubuntu provides two popular database servers. They are:"
22531
msgstr ""
22532
22533
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22534
msgid "PostgreSQL"
22535
msgstr ""
22536
22537
#: serverguide/C/databases.xml:25(para)
22538
msgid ""
22539
"They are available in the main repository. This section explains how to "
22540
"install and configure these database servers."
22541
msgstr ""
22542
22543
#: serverguide/C/databases.xml:32(para)
22544
msgid ""
22545
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22546
"It is intended for mission-critical, heavy-load production systems as well "
22547
"as for embedding into mass-deployed software."
22548
msgstr ""
22549
22550
#: serverguide/C/databases.xml:41(para)
22551
msgid "To install MySQL, run the following command from a terminal prompt:"
22552
msgstr ""
22553
22554
#: serverguide/C/databases.xml:46(command)
22555
msgid "sudo apt-get install mysql-server"
22556
msgstr ""
22557
22558
#: serverguide/C/databases.xml:48(para)
22559
msgid ""
22560
"During the installation process you will be prompted to enter a password for "
22561
"the <application>MySQL</application> root user."
22562
msgstr ""
22563
22564
#: serverguide/C/databases.xml:53(para)
22565
msgid ""
22566
"Once the installation is complete, the MySQL server should be started "
22567
"automatically. You can run the following command from a terminal prompt to "
22568
"check whether the MySQL server is running:"
22569
msgstr ""
22570
22571
#: serverguide/C/databases.xml:61(command)
22572
msgid "sudo netstat -tap | grep mysql"
22573
msgstr ""
22574
22575
#: serverguide/C/databases.xml:70(programlisting)
22576
#, no-wrap
22577
msgid ""
22578
"\n"
22579
"tcp 0 0 localhost:mysql *:* LISTEN "
22580
" 2556/mysqld\n"
22581
msgstr ""
22582
22583
#: serverguide/C/databases.xml:74(para)
22584
msgid ""
22585
"If the server is not running correctly, you can type the following command "
22586
"to start it:"
22587
msgstr ""
22588
22589
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22590
msgid "sudo /etc/init.d/mysql restart"
22591
msgstr ""
22592
22593
#: serverguide/C/databases.xml:85(para)
22594
msgid ""
22595
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22596
"the basic settings -- log file, port number, etc. For example, to configure "
22597
"<application>MySQL</application> to listen for connections from network "
22598
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22599
"server's IP address:"
22600
msgstr ""
22601
22602
#: serverguide/C/databases.xml:91(programlisting)
22603
#, no-wrap
22604
msgid ""
22605
"\n"
22606
"bind-address = 192.168.0.5\n"
22607
msgstr ""
22608
22609
#: serverguide/C/databases.xml:95(para)
22610
msgid "Replace 192.168.0.5 with the appropriate address."
22611
msgstr ""
22612
22613
#: serverguide/C/databases.xml:99(para)
22614
msgid ""
22615
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22616
"<application>mysql</application> daemon will need to be restarted:"
22617
msgstr ""
22618
22619
#: serverguide/C/databases.xml:107(para)
22620
msgid ""
22621
"If you would like to change the "
22622
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22623
"terminal enter:"
22624
msgstr ""
22625
22626
#: serverguide/C/databases.xml:113(command)
22627
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22628
msgstr ""
22629
22630
#: serverguide/C/databases.xml:116(para)
22631
msgid ""
22632
"The <application>mysql</application> daemon will be stopped, and you will be "
22633
"prompted to enter a new password."
22634
msgstr ""
22635
22636
#: serverguide/C/databases.xml:125(para)
22637
msgid ""
22638
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22639
"more information."
22640
msgstr ""
22641
22642
#: serverguide/C/databases.xml:130(para)
22643
msgid ""
22644
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22645
"<application>mysql-doc-5.0</application> package. To install the package "
22646
"enter the following in a terminal:"
22647
msgstr ""
22648
22649
#: serverguide/C/databases.xml:135(command)
22650
msgid "sudo apt-get install mysql-doc-5.0"
22651
msgstr ""
22652
22653
#: serverguide/C/databases.xml:137(para)
22654
msgid ""
22655
"The documentation is in HTML format, to view them enter "
22656
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22657
"chapter/index.html</command> in your browser's address bar."
22658
msgstr ""
22659
22660
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22661
msgid ""
22662
"For general SQL information see <ulink "
22663
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22664
"Special Edition</ulink> by Rafe Colburn."
22665
msgstr ""
22666
22667
#: serverguide/C/databases.xml:149(para)
22668
msgid ""
22669
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22670
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22671
msgstr ""
22672
22673
#: serverguide/C/databases.xml:158(para)
22674
msgid ""
22675
"PostgreSQL is an object-relational database system that has the features of "
22676
"traditional commercial database systems with enhancements to be found in "
22677
"next-generation DBMS systems."
22678
msgstr ""
22679
22680
#: serverguide/C/databases.xml:165(para)
22681
msgid ""
22682
"To install PostgreSQL, run the following command in the command prompt:"
22683
msgstr ""
22684
22685
#: serverguide/C/databases.xml:172(command)
22686
msgid "sudo apt-get install postgresql"
22687
msgstr ""
22688
22689
#: serverguide/C/databases.xml:176(para)
22690
msgid ""
22691
"Once the installation is complete, you should configure the PostgreSQL "
22692
"server based on your needs, although the default configuration is viable."
22693
msgstr ""
22694
22695
#: serverguide/C/databases.xml:184(para)
22696
msgid ""
22697
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22698
"client authentication methods. By default, IDENT authentication method is "
22699
"used for <application>postgres</application> and local users. Please refer "
22700
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22701
"PostgreSQL Administrator's Guide</ulink>."
22702
msgstr ""
22703
22704
#: serverguide/C/databases.xml:191(para)
22705
msgid ""
22706
"The following discussion assumes that you wish to enable TCP/IP connections "
22707
"and use the MD5 method for client authentication. PostgreSQL configuration "
22708
"files are stored in the "
22709
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22710
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22711
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22712
msgstr ""
22713
22714
#: serverguide/C/databases.xml:201(para)
22715
msgid ""
22716
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
22717
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
22718
msgstr ""
22719
22720
#: serverguide/C/databases.xml:208(para)
22721
msgid ""
22722
"To enable TCP/IP connections, edit the file "
22723
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
22724
msgstr ""
22725
22726
#: serverguide/C/databases.xml:210(para)
22727
msgid ""
22728
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
22729
"change it to:"
22730
msgstr ""
22731
22732
#: serverguide/C/databases.xml:213(programlisting)
22733
#, no-wrap
22734
msgid ""
22735
"\n"
22736
"listen_addresses = 'localhost'\n"
22737
msgstr ""
22738
22739
#: serverguide/C/databases.xml:217(para)
22740
msgid ""
22741
"To allow other computers to connect to your "
22742
"<application>PostgreSQL</application> server replace 'localhost' with the "
22743
"<emphasis>IP Address</emphasis> of your server."
22744
msgstr ""
22745
22746
#: serverguide/C/databases.xml:222(para)
22747
msgid ""
22748
"You may also edit all other parameters, if you know what you are doing! For "
22749
"details, refer to the configuration file or to the PostgreSQL documentation."
22750
msgstr ""
22751
22752
#: serverguide/C/databases.xml:227(para)
22753
msgid ""
22754
"Now that we can connect to our <application>PostgreSQL</application> server, "
22755
"the next step is to set a password for the <emphasis>postgres</emphasis> "
22756
"user. Run the following command at a terminal prompt to connect to the "
22757
"default PostgreSQL template database:"
22758
msgstr ""
22759
22760
#: serverguide/C/databases.xml:234(command)
22761
msgid "sudo -u postgres psql template1"
22762
msgstr ""
22763
22764
#: serverguide/C/databases.xml:236(para)
22765
msgid ""
22766
"The above command connects to PostgreSQL database "
22767
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
22768
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
22769
"run the following SQL command at the <application>psql</application> prompt "
22770
"to configure the password for the user <emphasis "
22771
"role=\"italics\">postgres</emphasis>."
22772
msgstr ""
22773
22774
#: serverguide/C/databases.xml:244(command)
22775
msgid "ALTER USER postgres with encrypted password 'your_password';"
22776
msgstr ""
22777
22778
#: serverguide/C/databases.xml:246(para)
22779
msgid ""
22780
"After configuring the password, edit the file "
22781
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
22782
"<emphasis>MD5</emphasis> authentication with the "
22783
"<emphasis>postgres</emphasis> user:"
22784
msgstr ""
22785
22786
#: serverguide/C/databases.xml:252(programlisting)
22787
#, no-wrap
22788
msgid ""
22789
"\n"
22790
"local all postgres md5\n"
22791
msgstr ""
22792
22793
#: serverguide/C/databases.xml:256(para)
22794
msgid ""
22795
"Finally, you should restart the <application>PostgreSQL</application> "
22796
"service to initialize the new configuration. From a terminal prompt enter "
22797
"the following to restart <application>PostgreSQL</application>:"
22798
msgstr ""
22799
22800
#: serverguide/C/databases.xml:262(command)
22801
msgid "sudo /etc/init.d/postgresql-8.4 restart"
22802
msgstr ""
22803
22804
#: serverguide/C/databases.xml:265(para)
22805
msgid ""
22806
"The above configuration is not complete by any means. Please refer <ulink "
22807
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
22808
"Administrator's Guide</ulink> to configure more parameters."
22809
msgstr ""
22810
22811
#: serverguide/C/databases.xml:276(para)
22812
msgid ""
22813
"As mentioned above the <ulink "
22814
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
22815
"Guide</ulink> is an excellent resource. The guide is also available in the "
22816
"<application>postgresql-doc-8.4</application> package. Execute the following "
22817
"in a terminal to install the package:"
22818
msgstr ""
22819
22820
#: serverguide/C/databases.xml:282(command)
22821
msgid "sudo apt-get install postgresql-doc-8.4"
22822
msgstr ""
22823
22824
#: serverguide/C/databases.xml:284(para)
22825
msgid ""
22826
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
22827
"8.4/html/index.html</command> into the address bar of your browser."
22828
msgstr ""
22829
22830
#: serverguide/C/databases.xml:296(para)
22831
msgid ""
22832
"Also, see the <ulink "
22833
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
22834
"Wiki</ulink> page for more information."
22835
msgstr ""
22836
22837
#: serverguide/C/clustering.xml:13(title)
22838
msgid "Clustering"
22839
msgstr ""
22840
22841
#: serverguide/C/clustering.xml:16(title)
22842
msgid "DRBD"
22843
msgstr ""
22844
22845
#: serverguide/C/clustering.xml:18(para)
22846
msgid ""
22847
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
22848
"multiple hosts. The replication is transparent to other applications on the "
22849
"host systems. Any block device hard disks, partitions, RAID devices, logical "
22850
"volumes, etc can be mirrored."
22851
msgstr ""
22852
22853
#: serverguide/C/clustering.xml:24(para)
22854
msgid ""
22855
"To get started using <application>drbd</application>, first install the "
22856
"necessary packages. From a terminal enter:"
22857
msgstr ""
22858
22859
#: serverguide/C/clustering.xml:29(command)
22860
msgid "sudo apt-get install drbd8-utils"
22861
msgstr ""
22862
22863
#: serverguide/C/clustering.xml:33(para)
22864
msgid ""
22865
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
22866
"virtual machine you will need to manually compile the "
22867
"<application>drbd</application> module. It may be easier to install the "
22868
"<application>linux-server</application> package inside the virtual machine."
22869
msgstr ""
22870
22871
#: serverguide/C/clustering.xml:40(para)
22872
msgid ""
22873
"This section covers setting up a <application>drbd</application> to "
22874
"replicate a separate <filename>/srv</filename> partition, with an "
22875
"<application>ext3</application> filesystem between two hosts. The partition "
22876
"size is not particularly relevant, but both partitions need to be the same "
22877
"size."
22878
msgstr ""
22879
22880
#: serverguide/C/clustering.xml:49(para)
22881
msgid ""
22882
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
22883
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
22884
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
22885
"See <xref linkend=\"dns\"/> for details."
22886
msgstr ""
22887
22888
#: serverguide/C/clustering.xml:57(para)
22889
msgid ""
22890
"To configure <application>drbd</application>, on the first host edit "
22891
"<filename>/etc/drbd.conf</filename>:"
22892
msgstr ""
22893
22894
#: serverguide/C/clustering.xml:61(programlisting)
22895
#, no-wrap
22896
msgid ""
22897
"\n"
22898
"global { usage-count no; }\n"
22899
"common { syncer { rate 100M; } }\n"
22900
"resource r0 {\n"
22901
" protocol C;\n"
22902
" startup {\n"
22903
" wfc-timeout 15;\n"
22904
" degr-wfc-timeout 60;\n"
22905
" }\n"
22906
" net {\n"
22907
" cram-hmac-alg sha1;\n"
22908
" shared-secret \"secret\";\n"
22909
" }\n"
22910
" on drbd01 {\n"
22911
" device /dev/drbd0;\n"
22912
" disk /dev/sdb1;\n"
22913
" address 192.168.0.1:7788;\n"
22914
" meta-disk internal;\n"
22915
" }\n"
22916
" on drbd02 {\n"
22917
" device /dev/drbd0;\n"
22918
" disk /dev/sdb1;\n"
22919
" address 192.168.0.2:7788;\n"
22920
" meta-disk internal;\n"
22921
" }\n"
22922
"} \n"
22923
msgstr ""
22924
22925
#: serverguide/C/clustering.xml:90(para)
22926
msgid ""
22927
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
22928
"this example their default values are fine."
22929
msgstr ""
22930
22931
#: serverguide/C/clustering.xml:98(para)
22932
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
22933
msgstr ""
22934
22935
#: serverguide/C/clustering.xml:103(command)
22936
msgid "scp /etc/drbd.conf drbd02:~"
22937
msgstr ""
22938
22939
#: serverguide/C/clustering.xml:109(para)
22940
msgid ""
22941
"And, on <emphasis>drbd02</emphasis> move the file to "
22942
"<filename>/etc</filename>:"
22943
msgstr ""
22944
22945
#: serverguide/C/clustering.xml:114(command)
22946
msgid "sudo mv drbd.conf /etc/"
22947
msgstr ""
22948
22949
#: serverguide/C/clustering.xml:120(para)
22950
msgid ""
22951
"Next, on both hosts, start the <application>drbd</application> daemon:"
22952
msgstr ""
22953
22954
#: serverguide/C/clustering.xml:125(command)
22955
msgid "sudo /etc/init.d/drbd start"
22956
msgstr ""
22957
22958
#: serverguide/C/clustering.xml:131(para)
22959
msgid ""
22960
"Now using the <application>drbdadm</application> utility initialize the meta "
22961
"data storage. On each server execute:"
22962
msgstr ""
22963
22964
#: serverguide/C/clustering.xml:137(command)
22965
msgid "sudo drbdadm create-md r0"
22966
msgstr ""
22967
22968
#: serverguide/C/clustering.xml:143(para)
22969
msgid ""
22970
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
22971
"primary, enter the following:"
22972
msgstr ""
22973
22974
#: serverguide/C/clustering.xml:148(command)
22975
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
22976
msgstr ""
22977
22978
#: serverguide/C/clustering.xml:154(para)
22979
msgid ""
22980
"After executing the above command, the data will start syncing with the "
22981
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
22982
"the following:"
22983
msgstr ""
22984
22985
#: serverguide/C/clustering.xml:160(command)
22986
msgid "watch -n1 cat /proc/drbd"
22987
msgstr ""
22988
22989
#: serverguide/C/clustering.xml:163(para)
22990
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
22991
msgstr ""
22992
22993
#: serverguide/C/clustering.xml:170(para)
22994
msgid ""
22995
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
22996
msgstr ""
22997
22998
#: serverguide/C/clustering.xml:175(command)
22999
msgid "sudo mkfs.ext3 /dev/drbd0"
23000
msgstr ""
23001
23002
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
23003
msgid "sudo mount /dev/drbd0 /srv"
23004
msgstr ""
23005
23006
#: serverguide/C/clustering.xml:186(para)
23007
msgid ""
23008
"To test that the data is actually syncing between the hosts copy some files "
23009
"on the <emphasis>drbd01</emphasis>, the primary, to "
23010
"<filename>/srv</filename>:"
23011
msgstr ""
23012
23013
#: serverguide/C/clustering.xml:195(para)
23014
msgid "Next, unmount <filename>/srv</filename>:"
23015
msgstr ""
23016
23017
#: serverguide/C/clustering.xml:203(para)
23018
msgid ""
23019
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
23020
"<emphasis>secondary</emphasis> role:"
23021
msgstr ""
23022
23023
#: serverguide/C/clustering.xml:208(command)
23024
msgid "sudo drbdadm secondary r0"
23025
msgstr ""
23026
23027
#: serverguide/C/clustering.xml:211(para)
23028
msgid ""
23029
"Now on the <emphasis>secondary</emphasis> server "
23030
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
23031
msgstr ""
23032
23033
#: serverguide/C/clustering.xml:216(command)
23034
msgid "sudo drbdadm primary r0"
23035
msgstr ""
23036
23037
#: serverguide/C/clustering.xml:219(para)
23038
msgid "Lastly, mount the partition:"
23039
msgstr ""
23040
23041
#: serverguide/C/clustering.xml:227(para)
23042
msgid ""
23043
"Using <emphasis>ls</emphasis> you should see "
23044
"<filename>/srv/default</filename> copied from the former "
23045
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
23046
msgstr ""
23047
23048
#: serverguide/C/clustering.xml:238(para)
23049
msgid ""
23050
"For more information on <application>DRBD</application> see the <ulink "
23051
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
23052
msgstr ""
23053
23054
#: serverguide/C/clustering.xml:243(para)
23055
msgid ""
23056
"The <ulink "
23057
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
23058
"bd.conf man page</ulink> contains details on the options not covered in this "
23059
"guide."
23060
msgstr ""
23061
23062
#: serverguide/C/clustering.xml:249(para)
23063
msgid ""
23064
"Also, see the <ulink "
23065
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
23066
"adm man page</ulink>."
23067
msgstr ""
23068
23069
#: serverguide/C/clustering.xml:254(para)
23070
msgid ""
23071
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
23072
"Wiki</ulink> page also has more information."
23073
msgstr ""
23074
23075
#: serverguide/C/chat.xml:13(title)
23076
msgid "Chat Applications"
23077
msgstr ""
23078
23079
#: serverguide/C/chat.xml:19(para)
23080
msgid ""
23081
"In this section, we will discuss how to install and configure a IRC server, "
23082
"<application>ircd-irc2</application>. We will also discuss how to install "
23083
"and configure Jabber, an instance messaging server."
23084
msgstr ""
23085
23086
#: serverguide/C/chat.xml:28(title)
23087
msgid "IRC Server"
23088
msgstr ""
23089
23090
#: serverguide/C/chat.xml:30(para)
23091
msgid ""
23092
"The Ubuntu repository has many Internet Relay Chat servers. This section "
23093
"explains how to install and configure the original IRC server "
23094
"<application>ircd-irc2</application>."
23095
msgstr ""
23096
23097
#: serverguide/C/chat.xml:39(para)
23098
msgid ""
23099
"To install <application>ircd-irc2</application>, run the following command "
23100
"in the command prompt:"
23101
msgstr ""
23102
23103
#: serverguide/C/chat.xml:45(command)
23104
msgid "sudo apt-get install ircd-irc2"
23105
msgstr ""
23106
23107
#: serverguide/C/chat.xml:48(para)
23108
msgid ""
23109
"The configuration files are stored in <filename>/etc/ircd</filename> "
23110
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
23111
"irc2</filename> directory."
23112
msgstr ""
23113
23114
#: serverguide/C/chat.xml:59(para)
23115
msgid ""
23116
"The IRC settings can be done in the configuration file "
23117
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
23118
"this file by editing the following line:"
23119
msgstr ""
23120
23121
#: serverguide/C/chat.xml:64(programlisting)
23122
#, no-wrap
23123
msgid ""
23124
"\n"
23125
"M:irc.localhost::Debian ircd default configuration::000A\n"
23126
msgstr ""
23127
23128
#: serverguide/C/chat.xml:68(para)
23129
msgid ""
23130
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23131
"you set irc.livecipher.com as IRC host name, please make sure "
23132
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23133
"name should not be same as the host name."
23134
msgstr ""
23135
23136
#: serverguide/C/chat.xml:75(para)
23137
msgid ""
23138
"The IRC admin details can be configured by editting the following line:"
23139
msgstr ""
23140
23141
#: serverguide/C/chat.xml:80(programlisting)
23142
#, no-wrap
23143
msgid ""
23144
"\n"
23145
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23146
"Server::IRCnet:\n"
23147
msgstr ""
23148
23149
#: serverguide/C/chat.xml:84(para)
23150
msgid ""
23151
"You should add specific lines to configure the list of IRC ports to listen "
23152
"on, to configure Operator credentials, to configure client authentication, "
23153
"etc. For details, please refer to the example configuration file "
23154
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23155
msgstr ""
23156
23157
#: serverguide/C/chat.xml:92(para)
23158
msgid ""
23159
"The IRC banner to be displayed in the IRC client, when the user connects to "
23160
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23161
msgstr ""
23162
23163
#: serverguide/C/chat.xml:97(para)
23164
msgid ""
23165
"After making necessary changes to the configuration file, you can restart "
23166
"the IRC server using following command:"
23167
msgstr ""
23168
23169
#: serverguide/C/chat.xml:101(programlisting)
23170
#, no-wrap
23171
msgid ""
23172
"\n"
23173
"sudo /etc/init.d/ircd-irc2 restart\n"
23174
msgstr ""
23175
23176
#: serverguide/C/chat.xml:109(para)
23177
msgid ""
23178
"You may also be interested to take a look at other IRC servers available in "
23179
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23180
"<application>ircd-hybrid</application>."
23181
msgstr ""
23182
23183
#: serverguide/C/chat.xml:117(para)
23184
msgid ""
23185
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23186
"FAQ</ulink> for more details about the IRC Server."
23187
msgstr ""
23188
23189
#: serverguide/C/chat.xml:124(para)
23190
msgid ""
23191
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23192
"IRCD</ulink> page has more information."
23193
msgstr ""
23194
23195
#: serverguide/C/chat.xml:132(title)
23196
msgid "Jabber Instant Messaging Server"
23197
msgstr ""
23198
23199
#: serverguide/C/chat.xml:134(para)
23200
msgid ""
23201
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23202
"XMPP, an open standard for instant messaging, and used by many popular "
23203
"applications. This section covers setting up a <emphasis>Jabberd "
23204
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23205
"to providing messaging services to users over the Internet."
23206
msgstr ""
23207
23208
#: serverguide/C/chat.xml:143(para)
23209
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23210
msgstr ""
23211
23212
#: serverguide/C/chat.xml:148(command)
23213
msgid "sudo apt-get install jabberd2"
23214
msgstr ""
23215
23216
#: serverguide/C/chat.xml:155(para)
23217
msgid ""
23218
"A couple of XML configuration files will be used to configure "
23219
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23220
"authentication. This is a very simple form of authentication. However, "
23221
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23222
"Postgresql, etc for for user authentication."
23223
msgstr ""
23224
23225
#: serverguide/C/chat.xml:162(para)
23226
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23227
msgstr ""
23228
23229
#: serverguide/C/chat.xml:166(programlisting)
23230
#, no-wrap
23231
msgid ""
23232
"\n"
23233
" <id>jabber.example.com</id>\n"
23234
msgstr ""
23235
23236
#: serverguide/C/chat.xml:171(para)
23237
msgid ""
23238
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23239
"id, of your server."
23240
msgstr ""
23241
23242
#: serverguide/C/chat.xml:176(para)
23243
msgid "Now in the <storage> section change the <driver> to:"
23244
msgstr ""
23245
23246
#: serverguide/C/chat.xml:180(programlisting)
23247
#, no-wrap
23248
msgid ""
23249
"\n"
23250
" <driver>db</driver>\n"
23251
msgstr ""
23252
23253
#: serverguide/C/chat.xml:184(para)
23254
msgid ""
23255
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23256
"<emphasis><local></emphasis> section change:"
23257
msgstr ""
23258
23259
#: serverguide/C/chat.xml:188(programlisting)
23260
#, no-wrap
23261
msgid ""
23262
"\n"
23263
" <id>jabber.example.com</id>\n"
23264
msgstr ""
23265
23266
#: serverguide/C/chat.xml:192(para)
23267
msgid ""
23268
"And in the <authreg> section adjust the <module> section to:"
23269
msgstr ""
23270
23271
#: serverguide/C/chat.xml:196(programlisting)
23272
#, no-wrap
23273
msgid ""
23274
"\n"
23275
" <module>db</module>\n"
23276
msgstr ""
23277
23278
#: serverguide/C/chat.xml:200(para)
23279
msgid ""
23280
"Finally, restart <application>jabberd2</application> to enable the new "
23281
"settings:"
23282
msgstr ""
23283
23284
#: serverguide/C/chat.xml:205(command)
23285
msgid "sudo /etc/init.d/jabberd2 restart"
23286
msgstr ""
23287
23288
#: serverguide/C/chat.xml:208(para)
23289
msgid ""
23290
"You should now be able to connect to the server using a Jabber client like "
23291
"<application>Pidgin</application> for example."
23292
msgstr ""
23293
23294
#: serverguide/C/chat.xml:213(para)
23295
msgid ""
23296
"The advantage of using Berkeley DB for user data is that after being "
23297
"configured no additional maintenance is required. If you need more control "
23298
"over user accounts and credentials another authentication method is "
23299
"recommended."
23300
msgstr ""
23301
23302
#: serverguide/C/chat.xml:225(para)
23303
msgid ""
23304
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23305
"Site</ulink> contains more details on configuring "
23306
"<application>Jabberd2</application>."
23307
msgstr ""
23308
23309
#: serverguide/C/chat.xml:231(para)
23310
msgid ""
23311
"For more authentication options see the <ulink "
23312
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23313
"Guide</ulink>."
23314
msgstr ""
23315
23316
#: serverguide/C/chat.xml:236(para)
23317
msgid ""
23318
"Also, the <ulink "
23319
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23320
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23321
msgstr ""
23322
23323
#: serverguide/C/backups.xml:13(title)
23324
msgid "Backups"
23325
msgstr ""
23326
23327
#: serverguide/C/backups.xml:14(para)
23328
msgid ""
23329
"There are many ways to backup an Ubuntu installation. The most important "
23330
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23331
"consisting of what to backup, where to back it up to, and how to restore it."
23332
msgstr ""
23333
23334
#: serverguide/C/backups.xml:18(para)
23335
msgid ""
23336
"The following sections discuss various ways of accomplishing these tasks."
23337
msgstr ""
23338
23339
#: serverguide/C/backups.xml:22(title)
23340
msgid "Shell Scripts"
23341
msgstr ""
23342
23343
#: serverguide/C/backups.xml:23(para)
23344
msgid ""
23345
"One of the simplest ways to backup a system is using a <emphasis>shell "
23346
"script</emphasis>. For example, a script can be used to configure which "
23347
"directories to backup, and use those directories as arguments to the "
23348
"<application>tar</application> utility creating an archive file. The archive "
23349
"file can then be moved or copied to another location. The archive can also "
23350
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23351
msgstr ""
23352
23353
#: serverguide/C/backups.xml:29(para)
23354
msgid ""
23355
"The <application>tar</application> utility creates one archive file out of "
23356
"many files or directories. <application>tar</application> can also filter "
23357
"the files through compression utilities reducing the size of the archive "
23358
"file."
23359
msgstr ""
23360
23361
#: serverguide/C/backups.xml:35(title)
23362
msgid "Simple Shell Script"
23363
msgstr ""
23364
23365
#: serverguide/C/backups.xml:36(para)
23366
msgid ""
23367
"The following shell script uses <application>tar</application> to create an "
23368
"archive file on a remotely mounted NFS file system. The archive filename is "
23369
"determined using additional command line utilities."
23370
msgstr ""
23371
23372
#: serverguide/C/backups.xml:40(programlisting)
23373
#, no-wrap
23374
msgid ""
23375
"\n"
23376
"#!/bin/sh\n"
23377
"####################################\n"
23378
"#\n"
23379
"# Backup to NFS mount script.\n"
23380
"#\n"
23381
"####################################\n"
23382
"\n"
23383
"# What to backup. \n"
23384
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23385
"\n"
23386
"# Where to backup to.\n"
23387
"dest=\"/mnt/backup\"\n"
23388
"\n"
23389
"# Create archive filename.\n"
23390
"day=$(date +%A)\n"
23391
"hostname=$(hostname -s)\n"
23392
"archive_file=\"$hostname-$day.tgz\"\n"
23393
"\n"
23394
"# Print start status message.\n"
23395
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23396
"date\n"
23397
"echo\n"
23398
"\n"
23399
"# Backup the files using tar.\n"
23400
"tar czf $dest/$archive_file $backup_files\n"
23401
"\n"
23402
"# Print end status message.\n"
23403
"echo\n"
23404
"echo \"Backup finished\"\n"
23405
"date\n"
23406
"\n"
23407
"# Long listing of files in $dest to check file sizes.\n"
23408
"ls -lh $dest\n"
23409
msgstr ""
23410
23411
#: serverguide/C/backups.xml:77(para)
23412
msgid ""
23413
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23414
"would like to backup. The list should be customized to fit your needs."
23415
msgstr ""
23416
23417
#: serverguide/C/backups.xml:83(para)
23418
msgid ""
23419
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23420
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23421
"day of the week, giving a backup history of seven days. There are other ways "
23422
"to accomplish this including other ways using the "
23423
"<application>date</application> utility."
23424
msgstr ""
23425
23426
#: serverguide/C/backups.xml:90(para)
23427
msgid ""
23428
"<emphasis>$hostname:</emphasis> variable containing the "
23429
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23430
"archive filename gives you the option of placing daily archive files from "
23431
"multiple systems in the same directory."
23432
msgstr ""
23433
23434
#: serverguide/C/backups.xml:97(para)
23435
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23436
msgstr ""
23437
23438
#: serverguide/C/backups.xml:102(para)
23439
msgid ""
23440
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23441
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23442
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23443
"details using <emphasis>NFS</emphasis>."
23444
msgstr ""
23445
23446
#: serverguide/C/backups.xml:109(para)
23447
msgid ""
23448
"<emphasis>status messages:</emphasis> optional messages printed to the "
23449
"console using the <application>echo</application> utility."
23450
msgstr ""
23451
23452
#: serverguide/C/backups.xml:115(para)
23453
msgid ""
23454
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23455
"<application>tar</application> command used to create the archive file."
23456
msgstr ""
23457
23458
#: serverguide/C/backups.xml:121(para)
23459
msgid "<emphasis>c:</emphasis> creates an archive."
23460
msgstr ""
23461
23462
#: serverguide/C/backups.xml:126(para)
23463
msgid ""
23464
"<emphasis>z:</emphasis> filter the archive through the "
23465
"<application>gzip</application> utility compressing the archive."
23466
msgstr ""
23467
23468
#: serverguide/C/backups.xml:131(para)
23469
msgid ""
23470
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23471
"<application>tar</application> output will be sent to STDOUT."
23472
msgstr ""
23473
23474
#: serverguide/C/backups.xml:138(para)
23475
msgid ""
23476
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23477
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23478
"of the destination directory. This is useful for a quick file size check of "
23479
"the archive file. This check should not replace testing the archive file."
23480
msgstr ""
23481
23482
#: serverguide/C/backups.xml:145(para)
23483
msgid ""
23484
"This is a simple example of a backup shell script. There are large amount of "
23485
"options that can be included in a backup script. See <xref linkend=\"backup-"
23486
"shellscript-references\"/> for links to resources providing more in depth "
23487
"shell scripting information."
23488
msgstr ""
23489
23490
#: serverguide/C/backups.xml:152(title)
23491
msgid "Executing the Script"
23492
msgstr ""
23493
23494
#: serverguide/C/backups.xml:154(title)
23495
msgid "Executing from a Terminal"
23496
msgstr ""
23497
23498
#: serverguide/C/backups.xml:155(para)
23499
msgid ""
23500
"The simplest way of executing the above backup script is to copy and paste "
23501
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23502
"from a terminal prompt:"
23503
msgstr ""
23504
23505
#: serverguide/C/backups.xml:160(command)
23506
msgid "sudo bash backup.sh"
23507
msgstr ""
23508
23509
#: serverguide/C/backups.xml:162(para)
23510
msgid ""
23511
"This is a great way to test the script to make sure everything works as "
23512
"expected."
23513
msgstr ""
23514
23515
#: serverguide/C/backups.xml:167(title)
23516
msgid "Executing with cron"
23517
msgstr ""
23518
23519
#: serverguide/C/backups.xml:168(para)
23520
msgid ""
23521
"The <application>cron</application> utility can be used to automate the "
23522
"script execution. The <application>cron</application> daemon allows the "
23523
"execution of scripts, or commands, at a specified time and date."
23524
msgstr ""
23525
23526
#: serverguide/C/backups.xml:172(para)
23527
msgid ""
23528
"<application>cron</application> is configured through entries in a "
23529
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23530
"separated into fields:"
23531
msgstr ""
23532
23533
#: serverguide/C/backups.xml:176(programlisting)
23534
#, no-wrap
23535
msgid ""
23536
"\n"
23537
"# m h dom mon dow command\n"
23538
msgstr ""
23539
23540
#: serverguide/C/backups.xml:181(para)
23541
msgid ""
23542
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23543
msgstr ""
23544
23545
#: serverguide/C/backups.xml:186(para)
23546
msgid ""
23547
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23548
msgstr ""
23549
23550
#: serverguide/C/backups.xml:191(para)
23551
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23552
msgstr ""
23553
23554
#: serverguide/C/backups.xml:196(para)
23555
msgid ""
23556
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23557
msgstr ""
23558
23559
#: serverguide/C/backups.xml:201(para)
23560
msgid ""
23561
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23562
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23563
"valid."
23564
msgstr ""
23565
23566
#: serverguide/C/backups.xml:206(para)
23567
msgid "<emphasis>command:</emphasis> the command to execute."
23568
msgstr ""
23569
23570
#: serverguide/C/backups.xml:211(para)
23571
msgid ""
23572
"To add or change entries in a <filename>crontab</filename> file the "
23573
"<application>crontab -e</application> command should be used. Also, the "
23574
"contents of a <filename>crontab</filename> file can be viewed using the "
23575
"<application>crontab -l</application> command."
23576
msgstr ""
23577
23578
#: serverguide/C/backups.xml:215(para)
23579
msgid ""
23580
"To execute the <application>backup.sh</application> script listed above "
23581
"using <application>cron</application>. Enter the following from a terminal "
23582
"prompt:"
23583
msgstr ""
23584
23585
#: serverguide/C/backups.xml:220(command)
23586
msgid "sudo crontab -e"
23587
msgstr ""
23588
23589
#: serverguide/C/backups.xml:223(para)
23590
msgid ""
23591
"Using <application>sudo</application> with the <application>crontab -"
23592
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23593
"This is necessary if you are backing up directories only the root user has "
23594
"access to."
23595
msgstr ""
23596
23597
#: serverguide/C/backups.xml:228(para)
23598
msgid "Add the following entry to the <filename>crontab</filename> file:"
23599
msgstr ""
23600
23601
#: serverguide/C/backups.xml:231(programlisting)
23602
#, no-wrap
23603
msgid ""
23604
"\n"
23605
"# m h dom mon dow command\n"
23606
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23607
msgstr ""
23608
23609
#: serverguide/C/backups.xml:235(para)
23610
msgid ""
23611
"The <application>backup.sh</application> script will now be executed every "
23612
"day at 12:00 am."
23613
msgstr ""
23614
23615
#: serverguide/C/backups.xml:239(para)
23616
msgid ""
23617
"The <application>backup.sh</application> script will need to be copied to "
23618
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23619
"to execute properly. The script can reside anywhere on the file system "
23620
"simply change the script path appropriately."
23621
msgstr ""
23622
23623
#: serverguide/C/backups.xml:244(para)
23624
msgid ""
23625
"For more in depth <application>crontab</application> options see <xref "
23626
"linkend=\"backup-shellscript-references\"/>."
23627
msgstr ""
23628
23629
#: serverguide/C/backups.xml:250(title)
23630
msgid "Restoring from the Archive"
23631
msgstr ""
23632
23633
#: serverguide/C/backups.xml:251(para)
23634
msgid ""
23635
"Once an archive has been created it is important to test the archive. The "
23636
"archive can be tested by listing the files it contains, but the best test is "
23637
"to <emphasis>restore</emphasis> a file from the archive."
23638
msgstr ""
23639
23640
#: serverguide/C/backups.xml:257(para)
23641
msgid "To see a listing of the archive contents. From a terminal prompt:"
23642
msgstr ""
23643
23644
#: serverguide/C/backups.xml:261(command)
23645
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23646
msgstr ""
23647
23648
#: serverguide/C/backups.xml:265(para)
23649
msgid "To restore a file from the archive to a different directory enter:"
23650
msgstr ""
23651
23652
#: serverguide/C/backups.xml:269(command)
23653
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23654
msgstr ""
23655
23656
#: serverguide/C/backups.xml:271(para)
23657
msgid ""
23658
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23659
"redirects the extracted files to the specified directory. The above example "
23660
"will extract the <filename>/etc/hosts</filename> file to "
23661
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23662
"recreates the directory structure that it contains."
23663
msgstr ""
23664
23665
#: serverguide/C/backups.xml:276(para)
23666
msgid ""
23667
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23668
"the file to restore."
23669
msgstr ""
23670
23671
#: serverguide/C/backups.xml:281(para)
23672
msgid "To restore all files in the archive enter the following:"
23673
msgstr ""
23674
23675
#: serverguide/C/backups.xml:285(command)
23676
msgid "cd /"
23677
msgstr ""
23678
23679
#: serverguide/C/backups.xml:286(command)
23680
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23681
msgstr ""
23682
23683
#: serverguide/C/backups.xml:291(para)
23684
msgid "This will overwrite the files currently on the file system."
23685
msgstr ""
23686
23687
#: serverguide/C/backups.xml:300(para)
23688
msgid ""
23689
"For more information on shell scripting see the <ulink "
23690
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23691
msgstr ""
23692
23693
#: serverguide/C/backups.xml:305(para)
23694
msgid ""
23695
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23696
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23697
"great resource for shell scripting."
23698
msgstr ""
23699
23700
#: serverguide/C/backups.xml:311(para)
23701
msgid ""
23702
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23703
"Wiki Page</ulink> contains details on advanced "
23704
"<application>cron</application> options."
23705
msgstr ""
23706
23707
#: serverguide/C/backups.xml:318(para)
23708
msgid ""
23709
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23710
"tar Manual</ulink> for more <application>tar</application> options."
23711
msgstr ""
23712
23713
#: serverguide/C/backups.xml:324(para)
23714
msgid ""
23715
"The Wikipedia <ulink "
23716
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
23717
"Scheme</ulink> article contains information on other backup rotation schemes."
23718
msgstr ""
23719
23720
#: serverguide/C/backups.xml:330(para)
23721
msgid ""
23722
"The shell script uses <application>tar</application> to create the archive, "
23723
"but there many other command line utilities that can be used. For example:"
23724
msgstr ""
23725
23726
#: serverguide/C/backups.xml:336(para)
23727
msgid ""
23728
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
23729
"files to and from archives."
23730
msgstr ""
23731
23732
#: serverguide/C/backups.xml:341(para)
23733
msgid ""
23734
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
23735
"the <application>coreutils</application> package. A low level utility that "
23736
"can copy data from one format to another"
23737
msgstr ""
23738
23739
#: serverguide/C/backups.xml:347(para)
23740
msgid ""
23741
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
23742
"snap shot utility used to create copies of an entire file system."
23743
msgstr ""
23744
23745
#: serverguide/C/backups.xml:358(title)
23746
msgid "Archive Rotation"
23747
msgstr ""
23748
23749
#: serverguide/C/backups.xml:359(para)
23750
msgid ""
23751
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
23752
"allows for seven different archives. For a server whose data doesn't change "
23753
"often this may be enough. If the server has a large amount of data a more "
23754
"robust rotation scheme should be used."
23755
msgstr ""
23756
23757
#: serverguide/C/backups.xml:365(title)
23758
msgid "Rotating NFS Archives"
23759
msgstr ""
23760
23761
#: serverguide/C/backups.xml:366(para)
23762
msgid ""
23763
"In this section the shell script will be slightly modified to implement a "
23764
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
23765
msgstr ""
23766
23767
#: serverguide/C/backups.xml:372(para)
23768
msgid ""
23769
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
23770
"Friday."
23771
msgstr ""
23772
23773
#: serverguide/C/backups.xml:377(para)
23774
msgid ""
23775
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
23776
"weekly backups a month."
23777
msgstr ""
23778
23779
#: serverguide/C/backups.xml:382(para)
23780
msgid ""
23781
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
23782
"rotating two monthly backups based on if the month is odd or even."
23783
msgstr ""
23784
23785
#: serverguide/C/backups.xml:388(para)
23786
msgid "Here is the new script:"
23787
msgstr ""
23788
23789
#: serverguide/C/backups.xml:391(programlisting)
23790
#, no-wrap
23791
msgid ""
23792
"\n"
23793
"#!/bin/bash\n"
23794
"####################################\n"
23795
"#\n"
23796
"# Backup to NFS mount script with\n"
23797
"# grandfather-father-son rotation.\n"
23798
"#\n"
23799
"####################################\n"
23800
"\n"
23801
"# What to backup. \n"
23802
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23803
"\n"
23804
"# Where to backup to.\n"
23805
"dest=\"/mnt/backup\"\n"
23806
"\n"
23807
"# Setup variables for the archive filename.\n"
23808
"day=$(date +%A)\n"
23809
"hostname=$(hostname -s)\n"
23810
"\n"
23811
"# Find which week of the month 1-4 it is.\n"
23812
"day_num=$(date +%d)\n"
23813
"if (( $day_num <= 7 )); then\n"
23814
" week_file=\"$hostname-week1.tgz\"\n"
23815
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
23816
" week_file=\"$hostname-week2.tgz\"\n"
23817
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
23818
" week_file=\"$hostname-week3.tgz\"\n"
23819
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
23820
" week_file=\"$hostname-week4.tgz\"\n"
23821
"fi\n"
23822
"\n"
23823
"# Find if the Month is odd or even.\n"
23824
"month_num=$(date +%m)\n"
23825
"month=$(expr $month_num % 2)\n"
23826
"if [ $month -eq 0 ]; then\n"
23827
" month_file=\"$hostname-month2.tgz\"\n"
23828
"else\n"
23829
" month_file=\"$hostname-month1.tgz\"\n"
23830
"fi\n"
23831
"\n"
23832
"# Create archive filename.\n"
23833
"if [ $day_num == 1 ]; then\n"
23834
"\tarchive_file=$month_file\n"
23835
"elif [ $day != \"Saturday\" ]; then\n"
23836
" archive_file=\"$hostname-$day.tgz\"\n"
23837
"else \n"
23838
"\tarchive_file=$week_file\n"
23839
"fi\n"
23840
"\n"
23841
"# Print start status message.\n"
23842
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23843
"date\n"
23844
"echo\n"
23845
"\n"
23846
"# Backup the files using tar.\n"
23847
"tar czf $dest/$archive_file $backup_files\n"
23848
"\n"
23849
"# Print end status message.\n"
23850
"echo\n"
23851
"echo \"Backup finished\"\n"
23852
"date\n"
23853
"\n"
23854
"# Long listing of files in $dest to check file sizes.\n"
23855
"ls -lh $dest/\n"
23856
msgstr ""
23857
23858
#: serverguide/C/backups.xml:456(para)
23859
msgid ""
23860
"The script can be executed using the same methods as in <xref "
23861
"linkend=\"backup-executing-shellscript\"/>."
23862
msgstr ""
23863
23864
#: serverguide/C/backups.xml:459(para)
23865
msgid ""
23866
"It is good practice to take backup media off site in case of a disaster. In "
23867
"the shell script example the backup media is another server providing an NFS "
23868
"share. In all likelihood taking the NFS server to another location would not "
23869
"be practical. Depending upon connection speeds it may be an option to copy "
23870
"the archive file over a WAN link to a server in another location."
23871
msgstr ""
23872
23873
#: serverguide/C/backups.xml:465(para)
23874
msgid ""
23875
"Another option is to copy the archive file to an external hard drive which "
23876
"can then be taken off site. Since the price of external hard drives continue "
23877
"to decrease it may be cost affective to use two drives for each archive "
23878
"level. This would allow you to have one external drive attached to the "
23879
"backup server and one in another location."
23880
msgstr ""
23881
23882
#: serverguide/C/backups.xml:472(title)
23883
msgid "Tape Drives"
23884
msgstr ""
23885
23886
#: serverguide/C/backups.xml:473(para)
23887
msgid ""
23888
"A tape drive attached to the server can be used instead of a NFS share. "
23889
"Using a tape drive simplifies archive rotation, and taking the media off "
23890
"site as well."
23891
msgstr ""
23892
23893
#: serverguide/C/backups.xml:477(para)
23894
msgid ""
23895
"When using a tape drive the filename portions of the script aren't needed "
23896
"because the date is sent directly to the tape device. Some commands to "
23897
"manipulate the tape are needed. This is accomplished using "
23898
"<application>mt</application>, a magnetic tape control utility part of the "
23899
"<application>cpio</application> package."
23900
msgstr ""
23901
23902
#: serverguide/C/backups.xml:482(para)
23903
msgid "Here is the shell script modified to use a tape drive:"
23904
msgstr ""
23905
23906
#: serverguide/C/backups.xml:485(programlisting)
23907
#, no-wrap
23908
msgid ""
23909
"\n"
23910
"#!/bin/bash\n"
23911
"####################################\n"
23912
"#\n"
23913
"# Backup to tape drive script.\n"
23914
"#\n"
23915
"####################################\n"
23916
"\n"
23917
"# What to backup. \n"
23918
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23919
"\n"
23920
"# Where to backup to.\n"
23921
"dest=\"/dev/st0\"\n"
23922
"\n"
23923
"# Print start status message.\n"
23924
"echo \"Backing up $backup_files to $dest\"\n"
23925
"date\n"
23926
"echo\n"
23927
"\n"
23928
"# Make sure the tape is rewound.\n"
23929
"mt -f $dest rewind\n"
23930
"\n"
23931
"# Backup the files using tar.\n"
23932
"tar czf $dest $backup_files\n"
23933
"\n"
23934
"# Rewind and eject the tape.\n"
23935
"mt -f $dest rewoffl\n"
23936
"\n"
23937
"# Print end status message.\n"
23938
"echo\n"
23939
"echo \"Backup finished\"\n"
23940
"date\n"
23941
msgstr ""
23942
23943
#: serverguide/C/backups.xml:519(para)
23944
msgid ""
23945
"The default device name for a SCSI tape drive is "
23946
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
23947
"system."
23948
msgstr ""
23949
23950
#: serverguide/C/backups.xml:524(para)
23951
msgid ""
23952
"Restoring from a tape drive is basically the same as restoring from a file. "
23953
"Simply rewind the tape and use the device path instead of a file path. For "
23954
"example to restore the <filename>/etc/hosts</filename> file to "
23955
"<filename>/tmp/etc/hosts</filename>:"
23956
msgstr ""
23957
23958
#: serverguide/C/backups.xml:529(command)
23959
msgid "mt -f /dev/st0 rewind"
23960
msgstr ""
23961
23962
#: serverguide/C/backups.xml:530(command)
23963
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
23964
msgstr ""
23965
23966
#: serverguide/C/backups.xml:535(title)
23967
msgid "Bacula"
23968
msgstr ""
23969
23970
#: serverguide/C/backups.xml:536(para)
23971
msgid ""
23972
"<application>Bacula</application> is a backup program enabling you to "
23973
"backup, restore, and verify data across your network. There are Bacula "
23974
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
23975
"wide solution."
23976
msgstr ""
23977
23978
#: serverguide/C/backups.xml:542(para)
23979
msgid ""
23980
"<application>Bacula</application> is made up of several components and "
23981
"services used to manage which files to backup and where to back them up to:"
23982
msgstr ""
23983
23984
#: serverguide/C/backups.xml:548(para)
23985
msgid ""
23986
"<application>Bacula Director:</application> a service that controls all "
23987
"backup, restore, verify, and archive operations."
23988
msgstr ""
23989
23990
#: serverguide/C/backups.xml:553(para)
23991
msgid ""
23992
"<application>Bacula Console:</application> an application allowing "
23993
"communication with the Director. There are three versions of the Console:"
23994
msgstr ""
23995
23996
#: serverguide/C/backups.xml:558(para)
23997
msgid "Text based command line version."
23998
msgstr ""
23999
24000
#: serverguide/C/backups.xml:559(para)
24001
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
24002
msgstr ""
24003
24004
#: serverguide/C/backups.xml:560(para)
24005
msgid "wxWidgets GUI interface."
24006
msgstr ""
24007
24008
#: serverguide/C/backups.xml:564(para)
24009
msgid ""
24010
"<application>Bacula File:</application> also known as the "
24011
"<application>Bacula Client</application> program. This application is "
24012
"installed on machines to be backed up, and is responsible for the data "
24013
"requested by the Director."
24014
msgstr ""
24015
24016
#: serverguide/C/backups.xml:570(para)
24017
msgid ""
24018
"<application>Bacula Storage:</application> the programs that perform the "
24019
"storage and recovery of data to the physical media."
24020
msgstr ""
24021
24022
#: serverguide/C/backups.xml:575(para)
24023
msgid ""
24024
"<application>Bacula Catalog:</application> is responsible for maintaining "
24025
"the file indexes and volume databases for all files backed up, enabling "
24026
"quick location and restoration of archived files. The Catalog supports three "
24027
"different databases MySQL, PostgreSQL, and SQLite."
24028
msgstr ""
24029
24030
#: serverguide/C/backups.xml:581(para)
24031
msgid ""
24032
"<application>Bacula Monitor:</application> allows the monitoring of the "
24033
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
24034
"available as a GTK+ GUI application."
24035
msgstr ""
24036
24037
#: serverguide/C/backups.xml:587(para)
24038
msgid ""
24039
"These services and applications can be run on multiple servers and clients, "
24040
"or they can be installed on one machine if backing up a single disk or "
24041
"volume."
24042
msgstr ""
24043
24044
#: serverguide/C/backups.xml:594(para)
24045
msgid ""
24046
"There are multiple packages containing the different "
24047
"<application>Bacula</application> components. To install Bacula, from a "
24048
"terminal prompt enter:"
24049
msgstr ""
24050
24051
#: serverguide/C/backups.xml:599(command)
24052
msgid "sudo apt-get install bacula"
24053
msgstr ""
24054
24055
#: serverguide/C/backups.xml:601(para)
24056
msgid ""
24057
"By default installing the <application>bacula</application> package will use "
24058
"a <application>MySQL</application> database for the Catalog. If you want to "
24059
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
24060
"director-sqlite3</application> or <application>bacula-director-"
24061
"pgsql</application> respectively."
24062
msgstr ""
24063
24064
#: serverguide/C/backups.xml:607(para)
24065
msgid ""
24066
"During the install process you will be asked to supply credentials for the "
24067
"database <emphasis>administrator</emphasis> and the "
24068
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
24069
"database administrator will need to have the appropriate rights to create a "
24070
"database, see <xref linkend=\"mysql\"/> for more information."
24071
msgstr ""
24072
24073
#: serverguide/C/backups.xml:617(para)
24074
msgid ""
24075
"<application>Bacula</application> configuration files are formatted based on "
24076
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
24077
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
24078
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
24079
"directory."
24080
msgstr ""
24081
24082
#: serverguide/C/backups.xml:622(para)
24083
msgid ""
24084
"The various <application>Bacula</application> components must authorize "
24085
"themselves to each other. This is accomplished using the "
24086
"<emphasis>password</emphasis> directive. For example, the "
24087
"<emphasis>Storage</emphasis> resource password in the "
24088
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
24089
"<emphasis>Director</emphasis> resource password in "
24090
"<filename>/etc/bacula/bacula-sd.conf</filename>."
24091
msgstr ""
24092
24093
#: serverguide/C/backups.xml:628(para)
24094
msgid ""
24095
"By default the backup job named <emphasis>Client1</emphasis> is configured "
24096
"to archive the <application>Bacula</application> Catalog. If you plan on "
24097
"using the server to backup more than one client you should change the name "
24098
"of this job to something more descriptive. To change the name edit "
24099
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
24100
msgstr ""
24101
24102
#: serverguide/C/backups.xml:633(programlisting)
24103
#, no-wrap
24104
msgid ""
24105
"\n"
24106
"#\n"
24107
"# Define the main nightly save backup job\n"
24108
"# By default, this job will back up to disk in \n"
24109
"Job {\n"
24110
" Name = \"BackupServer\"\n"
24111
" JobDefs = \"DefaultJob\"\n"
24112
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
24113
"}\n"
24114
msgstr ""
24115
24116
#: serverguide/C/backups.xml:644(para)
24117
msgid ""
24118
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
24119
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
24120
"your appropriate hostname, or other descriptive name."
24121
msgstr ""
24122
24123
#: serverguide/C/backups.xml:649(para)
24124
msgid ""
24125
"The <emphasis>Console</emphasis> can be used to query the "
24126
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
24127
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24128
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24129
"the following from a terminal:"
24130
msgstr ""
24131
24132
#: serverguide/C/backups.xml:655(command)
24133
msgid "sudo adduser $username bacula"
24134
msgstr ""
24135
24136
#: serverguide/C/backups.xml:658(para)
24137
msgid ""
24138
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24139
"you are adding the current user to the group you should log out and back in "
24140
"for the new permissions to take effect."
24141
msgstr ""
24142
24143
#: serverguide/C/backups.xml:665(title)
24144
msgid "Localhost Backup"
24145
msgstr ""
24146
24147
#: serverguide/C/backups.xml:666(para)
24148
msgid ""
24149
"This section describes how to backup specified directories on a single host "
24150
"to a local tape drive."
24151
msgstr ""
24152
24153
#: serverguide/C/backups.xml:671(para)
24154
msgid ""
24155
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24156
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24157
msgstr ""
24158
24159
#: serverguide/C/backups.xml:674(programlisting)
24160
#, no-wrap
24161
msgid ""
24162
"\n"
24163
"Device {\n"
24164
" Name = \"Tape Drive\"\n"
24165
" Device Type = tape\n"
24166
" Media Type = DDS-4\n"
24167
" Archive Device = /dev/st0\n"
24168
" Hardware end of medium = No;\n"
24169
" AutomaticMount = yes; # when device opened, read it\n"
24170
" AlwaysOpen = Yes;\n"
24171
" RemovableMedia = yes;\n"
24172
" RandomAccess = no;\n"
24173
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24174
"}\n"
24175
msgstr ""
24176
24177
#: serverguide/C/backups.xml:688(para)
24178
msgid ""
24179
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24180
"Type and Archive Device to match your hardware."
24181
msgstr ""
24182
24183
#: serverguide/C/backups.xml:691(para)
24184
msgid "You could also uncomment one of the other examples in the file."
24185
msgstr ""
24186
24187
#: serverguide/C/backups.xml:696(para)
24188
msgid ""
24189
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24190
"<application>Storage</application> daemon will need to be restarted:"
24191
msgstr ""
24192
24193
#: serverguide/C/backups.xml:701(command)
24194
msgid "sudo /etc/init.d/bacula-sd restart"
24195
msgstr ""
24196
24197
#: serverguide/C/backups.xml:705(para)
24198
msgid ""
24199
"Now add a <emphasis>Storage</emphasis> resource in "
24200
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24201
msgstr ""
24202
24203
#: serverguide/C/backups.xml:708(programlisting)
24204
#, no-wrap
24205
msgid ""
24206
"\n"
24207
"# Definition of \"Tape Drive\" storage device\n"
24208
"Storage {\n"
24209
" Name = TapeDrive\n"
24210
" # Do not use \"localhost\" here \n"
24211
" Address = backupserver # N.B. Use a fully qualified name "
24212
"here\n"
24213
" SDPort = 9103\n"
24214
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24215
" Device = \"Tape Drive\"\n"
24216
" Media Type = tape\n"
24217
"}\n"
24218
msgstr ""
24219
24220
#: serverguide/C/backups.xml:720(para)
24221
msgid ""
24222
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24223
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24224
"to the actual host name."
24225
msgstr ""
24226
24227
#: serverguide/C/backups.xml:724(para)
24228
msgid ""
24229
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24230
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24231
msgstr ""
24232
24233
#: serverguide/C/backups.xml:730(para)
24234
msgid ""
24235
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24236
"directories to backup, by adding:"
24237
msgstr ""
24238
24239
#: serverguide/C/backups.xml:733(programlisting)
24240
#, no-wrap
24241
msgid ""
24242
"\n"
24243
"# LocalhostBacup FileSet.\n"
24244
"FileSet {\n"
24245
" Name = \"LocalhostFiles\"\n"
24246
" Include {\n"
24247
" Options {\n"
24248
" signature = MD5\n"
24249
" compression=GZIP\n"
24250
" }\n"
24251
" File = /etc\n"
24252
" File = /home\n"
24253
" }\n"
24254
"}\n"
24255
msgstr ""
24256
24257
#: serverguide/C/backups.xml:747(para)
24258
msgid ""
24259
"This <emphasis>FileSet</emphasis> will backup the <filename "
24260
"role=\"directory\">/etc</filename> and <filename "
24261
"role=\"directory\">/home</filename> directories. The "
24262
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24263
"create a MD5 signature for each file backed up, and to compress the files "
24264
"using GZIP."
24265
msgstr ""
24266
24267
#: serverguide/C/backups.xml:754(para)
24268
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24269
msgstr ""
24270
24271
#: serverguide/C/backups.xml:757(programlisting)
24272
#, no-wrap
24273
msgid ""
24274
"\n"
24275
"# LocalhostBackup Schedule -- Daily.\n"
24276
"Schedule {\n"
24277
" Name = \"LocalhostDaily\"\n"
24278
" Run = Full daily at 00:01\n"
24279
"}\n"
24280
msgstr ""
24281
24282
#: serverguide/C/backups.xml:764(para)
24283
msgid ""
24284
"The job will run every day at 00:01 or 12:01 am. There are many other "
24285
"scheduling options available."
24286
msgstr ""
24287
24288
#: serverguide/C/backups.xml:769(para)
24289
msgid "Finally create the <emphasis>Job</emphasis>:"
24290
msgstr ""
24291
24292
#: serverguide/C/backups.xml:772(programlisting)
24293
#, no-wrap
24294
msgid ""
24295
"\n"
24296
"# Localhost backup.\n"
24297
"Job {\n"
24298
" Name = \"LocalhostBackup\"\n"
24299
" JobDefs = \"DefaultJob\"\n"
24300
" Enabled = yes\n"
24301
" Level = Full\n"
24302
" FileSet = \"LocalhostFiles\"\n"
24303
" Schedule = \"LocalhostDaily\"\n"
24304
" Storage = TapeDrive\n"
24305
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24306
"} \n"
24307
msgstr ""
24308
24309
#: serverguide/C/backups.xml:785(para)
24310
msgid ""
24311
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24312
"drive."
24313
msgstr ""
24314
24315
#: serverguide/C/backups.xml:790(para)
24316
msgid ""
24317
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24318
"current tape does not have a label <application>Bacula</application> will "
24319
"send an email letting you know. To label a tape using the "
24320
"<application>Console</application> enter the following from a terminal:"
24321
msgstr ""
24322
24323
#: serverguide/C/backups.xml:796(command)
24324
msgid "bconsole"
24325
msgstr ""
24326
24327
#: serverguide/C/backups.xml:800(para)
24328
msgid "At the Bacula Console prompt enter:"
24329
msgstr ""
24330
24331
#: serverguide/C/backups.xml:804(command)
24332
msgid "label"
24333
msgstr ""
24334
24335
#: serverguide/C/backups.xml:808(para)
24336
msgid ""
24337
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24338
msgstr ""
24339
24340
#: serverguide/C/backups.xml:818(userinput)
24341
#, no-wrap
24342
msgid "2"
24343
msgstr ""
24344
24345
#: serverguide/C/backups.xml:812(computeroutput)
24346
#, no-wrap
24347
msgid ""
24348
"\n"
24349
"Automatically selected Catalog: MyCatalog\n"
24350
"Using Catalog \"MyCatalog\"\n"
24351
"The defined Storage resources are:\n"
24352
" 1: File\n"
24353
" 2: TapeDrive\n"
24354
"Select Storage resource (1-2):<placeholder-1/>\n"
24355
msgstr ""
24356
24357
#: serverguide/C/backups.xml:823(para)
24358
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24359
msgstr ""
24360
24361
#: serverguide/C/backups.xml:828(userinput)
24362
#, no-wrap
24363
msgid "Sunday"
24364
msgstr ""
24365
24366
#: serverguide/C/backups.xml:827(computeroutput)
24367
#, no-wrap
24368
msgid ""
24369
"\n"
24370
"Enter new Volume name: <placeholder-1/>\n"
24371
"Defined Pools:\n"
24372
" 1: Default\n"
24373
" 2: Scratch"
24374
msgstr ""
24375
24376
#: serverguide/C/backups.xml:833(para)
24377
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24378
msgstr ""
24379
24380
#: serverguide/C/backups.xml:838(para)
24381
msgid "Now, select the <emphasis>Pool</emphasis>:"
24382
msgstr ""
24383
24384
#: serverguide/C/backups.xml:843(userinput)
24385
#, no-wrap
24386
msgid "1"
24387
msgstr ""
24388
24389
#: serverguide/C/backups.xml:842(computeroutput)
24390
#, no-wrap
24391
msgid ""
24392
"\n"
24393
"Select the Pool (1-2): <placeholder-1/>\n"
24394
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24395
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24396
msgstr ""
24397
24398
#: serverguide/C/backups.xml:850(para)
24399
msgid ""
24400
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24401
"backup the localhost to an attached tape drive."
24402
msgstr ""
24403
24404
#: serverguide/C/backups.xml:858(para)
24405
msgid ""
24406
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24407
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24408
"Manual</ulink>"
24409
msgstr ""
24410
24411
#: serverguide/C/backups.xml:864(para)
24412
msgid ""
24413
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24414
"the latest Bacula news and developments."
24415
msgstr ""
24416
24417
#: serverguide/C/backups.xml:869(para)
24418
msgid ""
24419
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24420
"Ubuntu Wiki</ulink> page."
24421
msgstr ""
24422
24423
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24424
#: serverguide/C/backups.xml:0(None)
24425
msgid "translator-credits"
24426
msgstr ""
24427
"Launchpad Contributions:\n"
24428
" Dario https://launchpad.net/~dario-villar-v\n"
24429
" Francisco Diéguez https://launchpad.net/~frandieguez\n"
24430
" Matthew East https://launchpad.net/~mdke\n"
24431
" Xosé https://launchpad.net/~ubuntu-galizaweb"
24432
24433
#~ msgid "sudo apt-get install likewise-open5"
24434
#~ msgstr "sudo apt-get install likewise-open5"
24435
24436
#~ msgid "To install <application>Likewise Open 5.0</application> enter:"
24437
#~ msgstr ""
24438
#~ "Para instalar o <application>Likewise Open 5.0</application> introduza:"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1