« back to all changes in this revision
Viewing changes to serverguide/po/ast.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/ast.po
1
# Asturian translation for ubuntu-docs
2
# Copyright (c) 2009 Rosetta Contributors and Canonical Ltd 2009
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2009.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2009-10-22 11:05+0000\n"
12
"Last-Translator: Xandru Martino <Unknown>\n"
13
"Language-Team: Asturian <ast@li.org>\n"
14
"MIME-Version: 1.0\n"
15
"Content-Type: text/plain; charset=UTF-8\n"
16
"Content-Transfer-Encoding: 8bit\n"
17
"X-Launchpad-Export-Date: 2010-04-17 14:52+0000\n"
18
"X-Generator: Launchpad (build Unknown)\n"
19
20
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
21
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
22
msgstr "ubuntu-doc@list.ubuntu.com (Proyeutu de Documentación d'Ubuntu)"
23
24
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
25
msgid "Ubuntu Server Guide"
26
msgstr "Guía del Sirvidor Ubuntu"
27
28
#: serverguide/C/serverguide-C.omf:9(date)
29
msgid "2007-09-30"
30
msgstr "30-09-2007"
31
32
#: serverguide/C/windows-networking.xml:13(title)
33
msgid "Windows Networking"
34
msgstr "Redes Windows"
35
36
#: serverguide/C/windows-networking.xml:15(para)
37
msgid ""
38
"Computer networks are often comprised of diverse systems, and while "
39
"operating a network made up entirely of Ubuntu desktop and server computers "
40
"would certainly be fun, some network environments must consist of both "
41
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
42
"class=\"registered\">Windows</trademark> systems working together in "
43
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
44
"principles and tools used in configuring your Ubuntu Server for sharing "
45
"network resources with Windows computers."
46
msgstr ""
47
"Les redes de computadores componense davezu de sistemes varios, y anque "
48
"trabayar con una rede compuesta dafechu d'equipos d'escritoriu Ubuntu y "
49
"sirvidores Ubuntu pue ser realmente divertíu, dellos entornos de rede "
50
"pertienen sistemes Ubuntu y <trademark "
51
"class=\"registered\">Microsoft</trademark> <trademark "
52
"class=\"registered\">Windows</trademark> trabayando xuntos n'harmonía. Esta "
53
"seición de la Guía del Sirvidor de <phrase>Ubuntu</phrase> introduz los "
54
"principios y preseos emplegaos pa configurar el so sirvidor Ubuntu pa que "
55
"pueda compartir recursos na rede con equipos Windows."
56
57
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
58
msgid "Introduction"
59
msgstr "Introducción"
60
61
#: serverguide/C/windows-networking.xml:27(para)
62
msgid ""
63
"Successfully networking your Ubuntu system with Windows clients involves "
64
"providing and integrating with services common to Windows environments. Such "
65
"services assist the sharing of data and information about the computers and "
66
"users involved in the network, and may be classified under three major "
67
"categories of functionality:"
68
msgstr ""
69
"El trabayu en rede col to sistema Ubuntu a comuña con veceros Windows "
70
"implica la provisión ya integración de los servicios comunes a los entornos "
71
"Windows. Estos servicios aiden a compartir datos ya información sobre los "
72
"equipos y usuarios implicaos na rede, y pueden clasificase en tres grandes "
73
"categoríes de funcionalidá:"
74
75
#: serverguide/C/windows-networking.xml:35(para)
76
msgid ""
77
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
78
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
79
"folders, volumes, and the sharing of printers throughout the network."
80
msgstr ""
81
"<emphasis role=\"bold\">Compartir imprentadores y ficheros</emphasis>. "
82
"Úsase'l protocolu Server Message Block (SMB) pa facilitar el compartir "
83
"ficheros, direutorios, volúmenes ya imprentadores pela rede."
84
85
#: serverguide/C/windows-networking.xml:41(para)
86
msgid ""
87
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
88
"information about the computers and users of the network with such "
89
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
90
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
91
msgstr ""
92
"<emphasis role=\"bold\">Servicios de direutoriu</emphasis>. Comparten "
93
"información vital de los equipos y usuarios de la rede coles teunoloxíes "
94
"Lightweight Directory Access Protocol (LDAP) y Microsoft <trademark "
95
"class=\"registered\">Active Directory</trademark>."
96
97
#: serverguide/C/windows-networking.xml:48(para)
98
msgid ""
99
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
100
"the identity of a computer or user of the network and determining the "
101
"information the computer or user is authorized to access using such "
102
"principles and technologies as file permissions, group policies, and the "
103
"Kerberos authentication service."
104
msgstr ""
105
"<emphasis role=\"bold\">Autenticación y accesu</emphasis>. Afiten la "
106
"identidá d'un equipu o usuariu de la rede y determinen la información a la "
107
"que'l equipu o l'usuariu ta autorizáu a acceder usando principios y "
108
"teunoloxíes como permisos de ficheros, polítiques de grupos y el serviciu "
109
"d'autentificación Kerberos."
110
111
#: serverguide/C/windows-networking.xml:56(para)
112
msgid ""
113
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
114
"clients and share network resources among them. One of the principal pieces "
115
"of software your Ubuntu system includes for Windows networking is the Samba "
116
"suite of SMB server applications and tools."
117
msgstr ""
118
"Afortunadamente, el to sistema Ubuntu puede apurrir toes eses facilidaes a "
119
"los veceros Windows, y compartir recursos de rede con ellos. Una de les "
120
"pieces principales de software qu'apurre el to sistema Ubuntu pa trabayar "
121
"con redes Windows ye'l paquete Samba d'aplicaciones y preseos de sirvidor "
122
"SMB."
123
124
#: serverguide/C/windows-networking.xml:62(para)
125
msgid ""
126
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
127
"of the common Samba use cases, and how to install and configure the "
128
"necessary packages. Additional detailed documentation and information on "
129
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
130
"website</ulink>."
131
msgstr ""
132
"Esta estaya de la Guía del Sirvidor <phrase>Ubuntu</phrase> introducirá "
133
"dellos casos d'usu más corrientes de Samba, amás de cómo instalar y "
134
"configurar los paquetes necesarios. Podrás atopar documentación detallada ya "
135
"información adicional na <ulink url=\"http://www.samba.org\">páxina web de "
136
"Samba</ulink>."
137
138
#: serverguide/C/windows-networking.xml:70(title)
139
msgid "Samba File Server"
140
msgstr "Sirvidor de ficheros Samba"
141
142
#: serverguide/C/windows-networking.xml:72(para)
143
msgid ""
144
"One of the most common ways to network Ubuntu and Windows computers is to "
145
"configure Samba as a File Server. This section covers setting up a "
146
"<application>Samba</application> server to share files with Windows clients."
147
msgstr ""
148
"Una de les víes más comunes de coneutar en rede equipos Ubuntu y Windows ye "
149
"configurar Samba como sirvidor d'archivos. Esta seición cubre la "
150
"configuración del sirvidor <application>Samba</application> pa compartir "
151
"archivos con clientes Windows."
152
153
#: serverguide/C/windows-networking.xml:77(para)
154
msgid ""
155
"The server will be configured to share files with any client on the network "
156
"without prompting for a password. If your environment requires stricter "
157
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
158
msgstr ""
159
"El sirvidor configuraráse pa compartir archivos con cualquier cliente de la "
160
"rede ensin solicitar conseña nenguna. Si'l so entornu requier controles "
161
"d'accesu más estrictos, consulte <xref linkend=\"samba-fileprint-"
162
"security\"/>."
163
164
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
165
msgid "Installation"
166
msgstr "Instalación"
167
168
#: serverguide/C/windows-networking.xml:85(para)
169
msgid ""
170
"The first step is to install the <application>samba</application> package. "
171
"From a terminal prompt enter:"
172
msgstr ""
173
"El primer pasu ye instalar el paquete <application>samba</application>. "
174
"Dende un terminal, pon:"
175
176
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
177
msgid "sudo apt-get install samba"
178
msgstr "sudo apt-get install samba"
179
180
#: serverguide/C/windows-networking.xml:93(para)
181
msgid ""
182
"That's all there is to it; you are now ready to configure Samba to share "
183
"files."
184
msgstr ""
185
"Esto ye too; agora ta preparáu pa configurar Samba y compartir archivos."
186
187
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
188
msgid "Configuration"
189
msgstr "Configuración"
190
191
#: serverguide/C/windows-networking.xml:101(para)
192
msgid ""
193
"The main Samba configuration file is located in "
194
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
195
"a significant amount of comments in order to document various configuration "
196
"directives."
197
msgstr ""
198
"L'archivu cimeru de configuración de Samba alcuentrase en "
199
"<filename>/etc/samba/smb.conf</filename>. L'archivu de configuración "
200
"predetermináu tien una cantidá significatible de comentarios al envís de "
201
"conseñar delles direutrices de configuración."
202
203
#: serverguide/C/windows-networking.xml:106(para)
204
msgid ""
205
"Not all the available options are included in the default configuration "
206
"file. See the <filename>smb.conf</filename><application>man</application> "
207
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
208
"Collection/\">Samba HOWTO Collection</ulink> for more details."
209
msgstr ""
210
"Nel archivu de configuración predetermináu nun s'incluyen toles opciones "
211
"disponibles. Consulte la páxina de <application>man</application> de "
212
"<filename>smb.conf</filename> o la <ulink "
213
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">coleición de "
214
"HOWTOs de Samba</ulink> pa más información."
215
216
#: serverguide/C/windows-networking.xml:116(para)
217
msgid ""
218
"First, edit the following key/value pairs in the "
219
"<emphasis>[global]</emphasis> section of "
220
"<filename>/etc/samba/smb.conf</filename>:"
221
msgstr ""
222
"En primer llugar, edite les vinientes pareyes clave/valor na seición "
223
"<emphasis>[global]</emphasis> de <filename>/etc/samba/smb.conf</filename>:"
224
225
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
226
#, no-wrap
227
msgid ""
228
"\n"
229
" workgroup = EXAMPLE\n"
230
" ...\n"
231
" security = user\n"
232
msgstr ""
233
"\n"
234
" workgroup = EXEMPLU\n"
235
" ...\n"
236
" seguridá = usuariu\n"
237
238
#: serverguide/C/windows-networking.xml:127(para)
239
msgid ""
240
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
241
"section, and is commented by default. Also, change "
242
"<emphasis>EXAMPLE</emphasis> to better match your environment."
243
msgstr ""
244
"El parámetru <emphasis>security</emphasis> alcuentrase más abaxo na seición "
245
"[global], y por omisión ta comentáu. Amás, camude "
246
"<emphasis>EXEMPLU</emphasis> por dalgo que s'axuste meyor al so entornu."
247
248
#: serverguide/C/windows-networking.xml:135(para)
249
msgid ""
250
"Create a new section at the bottom of the file, or uncomment one of the "
251
"examples, for the directory to be shared:"
252
msgstr ""
253
"Cree una seición nueva al final del archivu (o esborri ún de los exemplos) "
254
"pa poder compartir el direutoriu:"
255
256
#: serverguide/C/windows-networking.xml:139(programlisting)
257
#, no-wrap
258
msgid ""
259
"\n"
260
"[share]\n"
261
" comment = Ubuntu File Server Share\n"
262
" path = /srv/samba/share\n"
263
" browsable = yes\n"
264
" guest ok = yes\n"
265
" read only = no\n"
266
" create mask = 0755\n"
267
msgstr ""
268
"\n"
269
"[share]\n"
270
" comment = Carpeta compartida del sirvidor d'archivos Ubuntu\n"
271
" path = /srv/samba/share\n"
272
" browsable = sí\n"
273
" guest ok = sí\n"
274
" read only = non\n"
275
" create mask = 0755\n"
276
277
#: serverguide/C/windows-networking.xml:151(para)
278
msgid ""
279
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
280
"fit your needs."
281
msgstr ""
282
"<emphasis>comment:</emphasis> una descripción pequeña del recursu compartíu. "
283
"Adáutelu a les sos necesidaes."
284
285
#: serverguide/C/windows-networking.xml:156(para)
286
msgid "<emphasis>path:</emphasis> the path to the directory to share."
287
msgstr ""
288
"<emphasis>path:</emphasis> el camín al direutoriu que se va a compartir."
289
290
#: serverguide/C/windows-networking.xml:159(para)
291
msgid ""
292
"This example uses <filename>/srv/samba/sharename</filename> because, "
293
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
294
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
295
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
296
"specific data should be served. Technically Samba shares can be placed "
297
"anywhere on the filesystem as long as the permissions are correct, but "
298
"adhering to standards is recommended."
299
msgstr ""
300
"Esti exemplu usa <filename>/srv/samba/sharename</filename> porque, acordies "
301
"col estándar de xerarquía del sistema d'archivos <emphasis>Filesystem "
302
"Hierarchy Standard (FHS)</emphasis>, <ulink "
303
"url=\"http://www.pathname.com/fhs/pub/fhs-"
304
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> ye u han dir los "
305
"datos sirvíos pol equipu en sí. Téunicamente, les carpetes compartíes de "
306
"Samba puen colocase en cualquier parte del sistema d'archivos siempre y "
307
"cuando los permisos seyan correutos, pero ye encamentable axustase a los "
308
"estándares."
309
310
#: serverguide/C/windows-networking.xml:168(para)
311
msgid ""
312
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
313
"directory using <application>Windows Explorer</application>."
314
msgstr ""
315
"<emphasis>browsable:</emphasis> permite a los clientes Windows restolar pel "
316
"direutoriu compartíu emplegando l'<application>Explorador de "
317
"Windows</application>."
318
319
#: serverguide/C/windows-networking.xml:174(para)
320
msgid ""
321
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
322
"without supplying a password."
323
msgstr ""
324
"<emphasis>guest ok:</emphasis> permite que los clientes se puean coneutar al "
325
"recursu ensin necesidá d'introducir conseña nenguna."
326
327
#: serverguide/C/windows-networking.xml:179(para)
328
msgid ""
329
"<emphasis>read only:</emphasis> determines if the share is read only or if "
330
"write privileges are granted. Write privileges are allowed only when the "
331
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
332
"is <emphasis>yes</emphasis>, then access to the share is read only."
333
msgstr ""
334
335
#: serverguide/C/windows-networking.xml:184(para)
336
msgid ""
337
"<emphasis>create mask:</emphasis> determines the permissions new files will "
338
"have when created."
339
msgstr ""
340
"<emphasis>create mask:</emphasis> determina los permisos que tendrán los "
341
"archivos nuevos cuando se creen."
342
343
#: serverguide/C/windows-networking.xml:193(para)
344
msgid ""
345
"Now that <application>Samba</application> is configured, the directory needs "
346
"to be created and the permissions changed. From a terminal enter:"
347
msgstr ""
348
"Agora que <application>Samba</application> yá ta configuráu, necesítase "
349
"crear el direutoriu y camudar los sos permisos. Dende un terminal, teclee:"
350
351
#: serverguide/C/windows-networking.xml:199(command)
352
msgid "sudo mkdir -p /srv/samba/share"
353
msgstr "sudo mkdir -p /srv/samba/share"
354
355
#: serverguide/C/windows-networking.xml:200(command)
356
msgid "sudo chown nobody.nogroup /srv/samba/share/"
357
msgstr "sudo chown nobody.nogroup /srv/samba/share/"
358
359
#: serverguide/C/windows-networking.xml:204(para)
360
msgid ""
361
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
362
"directory tree if it doesn't exist. Change the share name to fit your "
363
"environment."
364
msgstr ""
365
"La opción <emphasis>-p</emphasis> indica a mkdir que cree l'árbol completu "
366
"hasta'l direutoriu si nun esistiera. Camude'l nome «share» por otru que "
367
"s'axuste más al so entornu."
368
369
#: serverguide/C/windows-networking.xml:213(para)
370
msgid ""
371
"Finally, restart the <application>samba</application> services to enable the "
372
"new configuration:"
373
msgstr ""
374
"A lo último, reanicie los servicios <application>samba</application> "
375
"p'afitar la configuración nueva:"
376
377
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
378
msgid "sudo /etc/init.d/samba restart"
379
msgstr "sudo /etc/init.d/samba restart"
380
381
#: serverguide/C/windows-networking.xml:225(para)
382
msgid ""
383
"Once again, the above configuration gives all access to any client on the "
384
"local network. For a more secure configuration see <xref linkend=\"samba-"
385
"fileprint-security\"/>."
386
msgstr ""
387
"Una vegada más, la configuración anterior proporciona accesu total a tolos "
388
"clientes de la rede llocal. Pa una configuración más segura, consulte <xref "
389
"linkend=\"samba-fileprint-security\"/>."
390
391
#: serverguide/C/windows-networking.xml:231(para)
392
msgid ""
393
"From a Windows client you should now be able to browse to the Ubuntu file "
394
"server and see the shared directory. To check that everything is working try "
395
"creating a directory from Windows."
396
msgstr ""
397
"Dende un cliente Windows habría poder restolar pel sirvidor d'archivos "
398
"d'Ubuntu y ver el direutoriu compartíu. Pa comprobar que too funciona bien, "
399
"pruebe a crear un direutoriu dende Windows."
400
401
#: serverguide/C/windows-networking.xml:236(para)
402
msgid ""
403
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
404
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
405
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
406
"share actually exists and the permissions are correct."
407
msgstr ""
408
"Pa crear más carpetes compartíes, simplemente cree seiciones nueves "
409
"<emphasis>[dir]</emphasis> en <filename>/etc/samba/smb.conf</filename>, y "
410
"reanicie <emphasis>Samba</emphasis>. Namái asegúrese que'l direutoriu que "
411
"quier compartir esiste daveres, y que los sos permisos son correutos."
412
413
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
414
msgid "Resources"
415
msgstr "Recursos"
416
417
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
418
msgid ""
419
"For in depth Samba configurations see the <ulink "
420
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
421
"Collection</ulink>"
422
msgstr ""
423
"Pa una configuración más detallada de Samba, consulte la <ulink "
424
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">coleición de "
425
"HOWTOs de Samba</ulink>."
426
427
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
428
msgid ""
429
"The guide is also available in <ulink "
430
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
431
"format</ulink>."
432
msgstr ""
433
"La guía tamién ta disponible en <ulink "
434
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">formatu "
435
"imprentáu</ulink>."
436
437
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
438
msgid ""
439
"O'Reilly's <ulink "
440
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
441
"another good reference."
442
msgstr ""
443
"El llibru d'O'Reilly <ulink "
444
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> ye "
445
"otra fonte bona de referencia."
446
447
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
448
msgid ""
449
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
450
"</ulink> page."
451
msgstr ""
452
453
#: serverguide/C/windows-networking.xml:274(title)
454
msgid "Samba Print Server"
455
msgstr "Sirvidor d'impresión Samba"
456
457
#: serverguide/C/windows-networking.xml:276(para)
458
msgid ""
459
"Another common use of Samba is to configure it to share printers installed, "
460
"either locally or over the network, on an Ubuntu server. Similar to <xref "
461
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
462
"any client on the local network to use the installed printers without "
463
"prompting for a username and password."
464
msgstr ""
465
"Otru usu habitual de Samba ye configuralu pa compartir impresores instalaes "
466
"nun sirvidor Ubuntu, mesmo llocalmente o al traviés de la rede. Esta seición "
467
"(asemeyada a <xref linkend=\"samba-fileserver\"/>) configurará Samba pa "
468
"permitir que cualquier veceru de la rede llocal puea usar les impresores "
469
"instalaes ensin necesidá d'introducir un nome d'usuariu y una conseña."
470
471
#: serverguide/C/windows-networking.xml:282(para)
472
msgid ""
473
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
474
"security\"/>."
475
msgstr ""
476
"Pa una configuración más segura, consulta <xref linkend=\"samba-fileprint-"
477
"security\"/>."
478
479
#: serverguide/C/windows-networking.xml:289(para)
480
msgid ""
481
"Before installing and configuring Samba it is best to already have a working "
482
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
483
"for details."
484
msgstr ""
485
"Primero d'instalar y configurar Samba, ye meyor tener enantes una "
486
"instalación funcional de <application>CUPS</application> Consulte <xref "
487
"linkend=\"cups\"/> pa más información."
488
489
#: serverguide/C/windows-networking.xml:294(para)
490
msgid ""
491
"To install the <application>samba</application> package, from a terminal "
492
"enter:"
493
msgstr ""
494
"Pa instalar el paquete <application>samba</application>, teclee nun terminal:"
495
496
#: serverguide/C/windows-networking.xml:305(para)
497
msgid ""
498
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
499
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
500
"network, and change <emphasis>security</emphasis> to <emphasis "
501
"role=\"italic\">share</emphasis>:"
502
msgstr ""
503
"N'instalando Samba, edite <filename>/etc/samba/smb.conf</filename>. Camude "
504
"l'atributu <emphasis>workgroup</emphasis> por ún afayadizu pa la so rede, y "
505
"camude <emphasis>security</emphasis> al valor <emphasis "
506
"role=\"italic\">share</emphasis>:"
507
508
#: serverguide/C/windows-networking.xml:317(para)
509
msgid ""
510
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
511
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
512
msgstr ""
513
"Na seición <emphasis>[printers]</emphasis> camude la opción <emphasis>guest "
514
"ok</emphasis> a <emphasis role=\"italic\">yes</emphasis>:"
515
516
#: serverguide/C/windows-networking.xml:321(programlisting)
517
#, no-wrap
518
msgid ""
519
"\n"
520
" browsable = yes\n"
521
" guest ok = yes\n"
522
msgstr ""
523
"\n"
524
" browsable = yes\n"
525
" guest ok = yes\n"
526
527
#: serverguide/C/windows-networking.xml:326(para)
528
msgid "After editing <filename>smb.conf</filename> restart Samba:"
529
msgstr "Depués d'editar <filename>smb.conf</filename> reanicie Samba:"
530
531
#: serverguide/C/windows-networking.xml:334(para)
532
msgid ""
533
"The default Samba configuration will automatically share any printers "
534
"installed. Simply install the printer locally on your Windows clients."
535
msgstr ""
536
"La opción predeterminada de Samba compartirá automáticamente cualquier "
537
"imprentadora instalada. Simplemente, instale la imprentadora llocalmente nos "
538
"sos veceros Windows."
539
540
#: serverguide/C/windows-networking.xml:363(para)
541
msgid ""
542
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
543
"more information on configuring CUPS."
544
msgstr ""
545
"Amás, visite la <ulink url=\"http://www.cups.org/\">páxina web de "
546
"CUPS</ulink> pa más información sobre cómo configurar CUPS."
547
548
#: serverguide/C/windows-networking.xml:377(title)
549
msgid "Securing a Samba File and Print Server"
550
msgstr "Asegurar un sirvidor Samba d'archivos ya imprentación"
551
552
#: serverguide/C/windows-networking.xml:380(title)
553
msgid "Samba Security Modes"
554
msgstr "Moos de seguridá en Samba"
555
556
#: serverguide/C/windows-networking.xml:382(para)
557
msgid ""
558
"There are two security levels available to the Common Internet Filesystem "
559
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
560
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
561
"allows more flexibility, providing four ways of implementing user-level "
562
"security and one way to implement share-level:"
563
msgstr ""
564
"Esisten dos niveles de seguranza disponibles nel protocolu de rede Common "
565
"Internet Filesystem (CIFS): <emphasis>user-level (a nivel "
566
"d'usuariu)</emphasis> y <emphasis>share-level (a nivel de "
567
"recursu)</emphasis>. L'aplicación que fai Samba de <emphasis>security "
568
"mode</emphasis> permite más flexibilidá, yá que proporciona cuatro formes "
569
"d'emplegar la seguridá user-level y una forma d'aplicar share-level:"
570
571
#: serverguide/C/windows-networking.xml:391(para)
572
msgid ""
573
"<emphasis>security = user:</emphasis> requires clients to supply a username "
574
"and password to connect to shares. Samba user accounts are separate from "
575
"system accounts, but the <application>libpam-smbpass</application> package "
576
"will sync system users and passwords with the Samba user database."
577
msgstr ""
578
"<emphasis>security = user:</emphasis> esixe que los veceros proporcionen un "
579
"nome d'usuariu y una conseña pa coneutase a los recursos compartíos. Les "
580
"cuentes d'usuariu de Samba tán separtaes de les cuentes del sistema, pero'l "
581
"paquete <application>libpam-smbpass</application> sincroniza les cuentes y "
582
"conseña del sistema cola base de datos d'usuarios de Samba."
583
584
#: serverguide/C/windows-networking.xml:398(para)
585
msgid ""
586
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
587
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
588
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
589
"linkend=\"samba-dc\"/> for further information."
590
msgstr ""
591
"<emphasis>security = domain:</emphasis> esti mou permite que'l sirvidor "
592
"Samba s'amuese a los clientes Windows como un controlador primariu de "
593
"dominiu (Primary Domain Controller, PDC), un controlador secundariu de "
594
"dominiu (Backup Domain Controller, BDC) o un sirvidor de miembros de dominiu "
595
"(Domain Member Server, DMS). Consulte <xref linkend=\"samba-dc\"/> pa más "
596
"información."
597
598
#: serverguide/C/windows-networking.xml:405(para)
599
msgid ""
600
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
601
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
602
"integration\"/> for details."
603
msgstr ""
604
"<emphasis>security = ADS:</emphasis> permite que'l sirvidor Samba puea unise "
605
"a un dominiu d'Active Directory como si fuera un miembru nativu. Consulte "
606
"<xref linkend=\"samba-ad-integration\"/> pa más información."
607
608
#: serverguide/C/windows-networking.xml:411(para)
609
msgid ""
610
"<emphasis>security = server:</emphasis> this mode is left over from before "
611
"Samba could become a member server, and due to some security issues should "
612
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
613
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
614
"of the Samba guide for more details."
615
msgstr ""
616
"<emphasis>security = server:</emphasis> esti mou usábase enantes de que "
617
"Samba pudiera ser un sirvidor de miembros, pero agora nun habría de s'usar "
618
"por mor de ciertos problemes de seguridá. Consulte la seición sobre <ulink "
619
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
620
"Collection/ServerType.html#id349531\">seguridá del sirvidor</ulink> na guía "
621
"de Samba pa más información."
622
623
#: serverguide/C/windows-networking.xml:419(para)
624
msgid ""
625
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
626
"without supplying a username and password."
627
msgstr ""
628
"<emphasis>security = share:</emphasis> permite que los veceros puean "
629
"coneutase a los recursos compartíos ensin necesidá de proporcionar un nome "
630
"d'usuariu y una conseña."
631
632
#: serverguide/C/windows-networking.xml:426(para)
633
msgid ""
634
"The security mode you choose will depend on your environment and what you "
635
"need the Samba server to accomplish."
636
msgstr ""
637
"El mou de seguridá que vaya elixir dependerá del so entornu y de lo que "
638
"necesite que faiga'l so sirvidor Samba."
639
640
#: serverguide/C/windows-networking.xml:432(title)
641
msgid "Security = User"
642
msgstr "Seguridá = Usuariu"
643
644
#: serverguide/C/windows-networking.xml:434(para)
645
msgid ""
646
"This section will reconfigure the Samba file and print server, from <xref "
647
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
648
"require authentication."
649
msgstr ""
650
"Esta seición reconfigurará'l sirvidor Samba d'archivos ya imprentación, "
651
"dende <xref linkend=\"samba-fileserver\"/> hasta <xref linkend=\"samba-"
652
"printserver\"/>, pa que requiera autenticación."
653
654
#: serverguide/C/windows-networking.xml:439(para)
655
msgid ""
656
"First, install the <application>libpam-smbpass</application> package which "
657
"will sync the system users to the Samba user database:"
658
msgstr ""
659
"En primer llugar, instalar el paquete <application>libpam-smbpass</ "
660
"application>, que sincronizará los usuarios del sistema cola base de datos "
661
"d'usuarios de Samba:"
662
663
#: serverguide/C/windows-networking.xml:445(command)
664
msgid "sudo apt-get install libpam-smbpass"
665
msgstr "sudo apt-get install libpam-smbpass"
666
667
#: serverguide/C/windows-networking.xml:449(para)
668
msgid ""
669
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
670
"<application>libpam-smbpass</application> is already installed."
671
msgstr ""
672
"Si seleiciona la xera <emphasis>Servidor Samba</emphasis> demientres la "
673
"instalación, yá tendrá instaláu'l paquete <application>libpam-"
674
"smbpass</application>."
675
676
#: serverguide/C/windows-networking.xml:455(para)
677
msgid ""
678
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
679
"<emphasis>[share]</emphasis> section change:"
680
msgstr ""
681
"Edite <filename>/etc/samba/smb.conf</filename>, y na seición "
682
"<emphasis>[share]</emphasis> camude:"
683
684
#: serverguide/C/windows-networking.xml:459(programlisting)
685
#, no-wrap
686
msgid ""
687
"\n"
688
" guest ok = no\n"
689
msgstr ""
690
"\n"
691
" guest ok = no\n"
692
693
#: serverguide/C/windows-networking.xml:463(para)
694
msgid "Finally, restart Samba for the new settings to take effect:"
695
msgstr ""
696
"A lo último, reanicie Samba pa que la configuración nueva tenga efeutu:"
697
698
#: serverguide/C/windows-networking.xml:471(para)
699
msgid ""
700
"Now when connecting to the shared directories or printers you should be "
701
"prompted for a username and password."
702
msgstr ""
703
"Agora, cuando se coneute a los direutorios o imprentadores compartíes, "
704
"solicitaráse-y un nome d'usuariu y una conseña."
705
706
#: serverguide/C/windows-networking.xml:476(para)
707
msgid ""
708
"If you choose to map a network drive to the share you can check the "
709
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
710
"enter the username and password once, at least until the password changes."
711
msgstr ""
712
"Si decide asignar una unidá de rede al recursu compartíu, pue marcar la "
713
"casina <quote>Volver a coneutar al aniciu de sesión</ quote>, lo que namái "
714
"que-y esixirá introducir el nome d'usuariu y la conseña una única vegada, "
715
"polo menos hasta que la conseña camude."
716
717
#: serverguide/C/windows-networking.xml:484(title)
718
msgid "Share Security"
719
msgstr "Compartir seguridá"
720
721
#: serverguide/C/windows-networking.xml:486(para)
722
msgid ""
723
"There are several options available to increase the security for each "
724
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
725
"this section will cover some common options."
726
msgstr ""
727
728
#: serverguide/C/windows-networking.xml:492(title)
729
msgid "Groups"
730
msgstr "Grupos"
731
732
#: serverguide/C/windows-networking.xml:494(para)
733
msgid ""
734
"Groups define a collection of computers or users which have a common level "
735
"of access to particular network resources and offer a level of granularity "
736
"in controlling access to such resources. For example, if a group <emphasis "
737
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
738
"role=\"italic\">freda</emphasis>, <emphasis "
739
"role=\"italic\">danika</emphasis>, and <emphasis "
740
"role=\"italic\">rob</emphasis> and a second group <emphasis "
741
"role=\"italic\">support</emphasis> is defined and consists of users "
742
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
743
"role=\"italic\">jeremy</emphasis>, and <emphasis "
744
"role=\"italic\">vincent</emphasis> then certain network resources configured "
745
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
746
"subsequently enable access by freda, danika, and rob, but not jeremy or "
747
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
748
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
749
"role=\"italic\">support</emphasis> groups, she will be able to access "
750
"resources configured for access by both groups, whereas all other users will "
751
"have only access to resources explicitly allowing the group they are part of."
752
msgstr ""
753
754
#: serverguide/C/windows-networking.xml:508(para)
755
msgid ""
756
"By default Samba looks for the local system groups defined in "
757
"<filename>/etc/group</filename> to determine which users belong to which "
758
"groups. For more information on adding and removing users from groups see "
759
"<xref linkend=\"adding-deleting-users\"/>."
760
msgstr ""
761
762
#: serverguide/C/windows-networking.xml:514(para)
763
msgid ""
764
"When defining groups in the Samba configuration file, "
765
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
766
"preface the group name with an \"@\" symbol. For example, if you wished to "
767
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
768
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
769
"do so by entering the group name as <emphasis "
770
"role=\"bold\">@sysadmin</emphasis>."
771
msgstr ""
772
773
#: serverguide/C/windows-networking.xml:523(title)
774
msgid "File Permissions"
775
msgstr "Permisos de ficheru"
776
777
#: serverguide/C/windows-networking.xml:525(para)
778
msgid ""
779
"File Permissions define the explicit rights a computer or user has to a "
780
"particular directory, file, or set of files. Such permissions may be defined "
781
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
782
"the explicit permissions of a defined file share."
783
msgstr ""
784
785
#: serverguide/C/windows-networking.xml:531(para)
786
msgid ""
787
"For example, if you have defined a Samba share called "
788
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
789
"only</emphasis> permissions to the group of users known as <emphasis "
790
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
791
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
792
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
793
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
794
"under the <emphasis>[share]</emphasis> entry:"
795
msgstr ""
796
797
#: serverguide/C/windows-networking.xml:540(programlisting)
798
#, no-wrap
799
msgid ""
800
"\n"
801
" read list = @qa\n"
802
" write list = @sysadmin, vincent\n"
803
msgstr ""
804
"\n"
805
" read list = @qa\n"
806
" write list = @sysadmin, vincent\n"
807
808
#: serverguide/C/windows-networking.xml:545(para)
809
msgid ""
810
"Another possible Samba permission is to declare "
811
"<emphasis>administrative</emphasis> permissions to a particular shared "
812
"resource. Users having administrative permissions may read, write, or modify "
813
"any information contained in the resource the user has been given explicit "
814
"administrative permissions to."
815
msgstr ""
816
817
#: serverguide/C/windows-networking.xml:551(para)
818
msgid ""
819
"For example, if you wanted to give the user <emphasis "
820
"role=\"italic\">melissa</emphasis> administrative permissions to the "
821
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
822
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
823
"under the <emphasis>[share]</emphasis> entry:"
824
msgstr ""
825
826
#: serverguide/C/windows-networking.xml:558(programlisting)
827
#, no-wrap
828
msgid ""
829
"\n"
830
" admin users = melissa\n"
831
msgstr ""
832
"\n"
833
" admin users = llara\n"
834
835
#: serverguide/C/windows-networking.xml:562(para)
836
msgid ""
837
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
838
"the changes to take effect:"
839
msgstr ""
840
841
#: serverguide/C/windows-networking.xml:571(para)
842
msgid ""
843
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
844
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
845
"<emphasis role=\"italic\">security = share</emphasis>"
846
msgstr ""
847
848
#: serverguide/C/windows-networking.xml:577(para)
849
msgid ""
850
"Now that Samba has been configured to limit which groups have access to the "
851
"shared directory, the filesystem permissions need to be updated."
852
msgstr ""
853
854
#: serverguide/C/windows-networking.xml:582(para)
855
msgid ""
856
"Traditional Linux file permissions do not map well to Windows NT Access "
857
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
858
"providing more fine grained control. For example, to enable ACLs on "
859
"<filename>/srv</filename> an EXT3 filesystem, edit "
860
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
861
msgstr ""
862
863
#: serverguide/C/windows-networking.xml:589(programlisting)
864
#, no-wrap
865
msgid ""
866
"\n"
867
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
868
"0 1\n"
869
msgstr ""
870
"\n"
871
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
872
"0 1\n"
873
874
#: serverguide/C/windows-networking.xml:593(para)
875
msgid "Then remount the partition:"
876
msgstr "Agora vuelvi a montar la partición:"
877
878
#: serverguide/C/windows-networking.xml:598(command)
879
msgid "sudo mount -v -o remount /srv"
880
msgstr "sudo mount -v -o remount /srv"
881
882
#: serverguide/C/windows-networking.xml:602(para)
883
msgid ""
884
"The above example assumes <filename>/srv</filename> on a separate partition. "
885
"If <filename>/srv</filename>, or wherever you have configured your share "
886
"path, is part of the <filename>/</filename> partition a reboot may be "
887
"required."
888
msgstr ""
889
890
#: serverguide/C/windows-networking.xml:609(para)
891
msgid ""
892
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
893
"group will be given read, write, and execute permissions to "
894
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
895
"will be given read and execute permissions, and the files will be owned by "
896
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
897
msgstr ""
898
899
#: serverguide/C/windows-networking.xml:617(command)
900
msgid "sudo chown -R melissa /srv/samba/share/"
901
msgstr "sudo chown -R melissa /srv/samba/share/"
902
903
#: serverguide/C/windows-networking.xml:618(command)
904
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
905
msgstr "sudo chgrp -R sysadmin /srv/samba/share/"
906
907
#: serverguide/C/windows-networking.xml:619(command)
908
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
909
msgstr "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
910
911
#: serverguide/C/windows-networking.xml:623(para)
912
msgid ""
913
"The <application>setfacl</application> command above gives "
914
"<emphasis>execute</emphasis> permissions to all files in the "
915
"<filename>/srv/samba/share</filename> directory, which you may or may not "
916
"want."
917
msgstr ""
918
919
#: serverguide/C/windows-networking.xml:629(para)
920
msgid ""
921
"Now from a Windows client you should notice the new file permissions are "
922
"implemented. See the <application>acl</application> and "
923
"<application>setfacl</application> man pages for more information on POSIX "
924
"ACLs."
925
msgstr ""
926
927
#: serverguide/C/windows-networking.xml:637(title)
928
msgid "Samba AppArmor Profile"
929
msgstr "Perfil Samba AppArmor"
930
931
#: serverguide/C/windows-networking.xml:639(para)
932
msgid ""
933
"Ubuntu comes with the <application>AppArmor</application> security module, "
934
"which provides mandatory access controls. The default AppArmor profile for "
935
"Samba will need to be adapted to your configuration. For more details on "
936
"using AppArmor see <xref linkend=\"apparmor\"/>."
937
msgstr ""
938
939
#: serverguide/C/windows-networking.xml:645(para)
940
msgid ""
941
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
942
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
943
"of the <application>apparmor-profiles</application> packages. To install the "
944
"package, from a terminal prompt enter:"
945
msgstr ""
946
947
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
948
msgid "sudo apt-get install apparmor-profiles"
949
msgstr "sudo apt-get install apparmor-profiles"
950
951
#: serverguide/C/windows-networking.xml:656(para)
952
msgid "This package contains profiles for several other binaries."
953
msgstr ""
954
955
#: serverguide/C/windows-networking.xml:661(para)
956
msgid ""
957
"By default the profiles for <application>smbd</application> and "
958
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
959
"allowing Samba to work without modifying the profile, and only logging "
960
"errors. To place the <application>smbd</application> profile into "
961
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
962
"profile will need to be modified to reflect any directories that are shared."
963
msgstr ""
964
965
#: serverguide/C/windows-networking.xml:668(para)
966
msgid ""
967
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
968
"for <emphasis>[share]</emphasis> from the file server example:"
969
msgstr ""
970
971
#: serverguide/C/windows-networking.xml:673(programlisting)
972
#, no-wrap
973
msgid ""
974
"\n"
975
" /srv/samba/share/ r,\n"
976
" /srv/samba/share/** rwkix,\n"
977
msgstr ""
978
"\n"
979
" /srv/samba/share/ r,\n"
980
" /srv/samba/share/** rwkix,\n"
981
982
#: serverguide/C/windows-networking.xml:678(para)
983
msgid ""
984
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
985
msgstr ""
986
987
#: serverguide/C/windows-networking.xml:683(command)
988
msgid "sudo aa-enforce /usr/sbin/smbd"
989
msgstr "sudo aa-enforce /usr/sbin/smbd"
990
991
#: serverguide/C/windows-networking.xml:684(command)
992
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
993
msgstr "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
994
995
#: serverguide/C/windows-networking.xml:687(para)
996
msgid ""
997
"You should now be able to read, write, and execute files in the shared "
998
"directory as normal, and the <application>smbd</application> binary will "
999
"have access to only the configured files and directories. Be sure to add "
1000
"entries for each directory you configure Samba to share. Also, any errors "
1001
"will be logged to <filename>/var/log/syslog</filename>."
1002
msgstr ""
1003
1004
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
1005
msgid ""
1006
"O'Reilly's <ulink "
1007
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
1008
"also a good reference."
1009
msgstr ""
1010
"<ulink url=\"http://www.oreilly.com/catalog/9780596007690/\">Usando "
1011
"Samba</ulink>, de O'Reilly, tamién ye una bona referencia."
1012
1013
#: serverguide/C/windows-networking.xml:718(para)
1014
msgid ""
1015
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
1016
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
1017
"security."
1018
msgstr ""
1019
1020
#: serverguide/C/windows-networking.xml:724(para)
1021
msgid ""
1022
"For more information on Samba and ACLs see the <ulink "
1023
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
1024
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
1025
msgstr ""
1026
1027
#: serverguide/C/windows-networking.xml:740(title)
1028
msgid "Samba as a Domain Controller"
1029
msgstr "Samba como controlador de dominiu"
1030
1031
#: serverguide/C/windows-networking.xml:742(para)
1032
msgid ""
1033
"Although it cannot act as an Active Directory Primary Domain Controller "
1034
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1035
"domain controller. A major advantage of this configuration is the ability to "
1036
"centralize user and machine credentials. Samba can also use multiple "
1037
"backends to store the user information."
1038
msgstr ""
1039
1040
#: serverguide/C/windows-networking.xml:749(title)
1041
msgid "Primary Domain Controller"
1042
msgstr ""
1043
1044
#: serverguide/C/windows-networking.xml:751(para)
1045
msgid ""
1046
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1047
"using the default smbpasswd backend."
1048
msgstr ""
1049
1050
#: serverguide/C/windows-networking.xml:758(para)
1051
msgid ""
1052
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1053
"the user accounts, by entering the following in a terminal prompt:"
1054
msgstr ""
1055
1056
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
1057
msgid "sudo apt-get install samba libpam-smbpass"
1058
msgstr ""
1059
1060
#: serverguide/C/windows-networking.xml:770(para)
1061
msgid ""
1062
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1063
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1064
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1065
"should relate to your organization:"
1066
msgstr ""
1067
1068
#: serverguide/C/windows-networking.xml:785(para)
1069
msgid ""
1070
"In the commented <quote>Domains</quote> section add or uncomment the "
1071
"following:"
1072
msgstr ""
1073
1074
#: serverguide/C/windows-networking.xml:789(programlisting)
1075
#, no-wrap
1076
msgid ""
1077
"\n"
1078
" domain logons = yes\n"
1079
" logon path = \\\\%N\\%U\\profile\n"
1080
" logon drive = H:\n"
1081
" logon home = \\\\%N\\%U\n"
1082
" logon script = logon.cmd\n"
1083
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1084
"/var/lib/samba -s /bin/false %u\n"
1085
msgstr ""
1086
1087
#: serverguide/C/windows-networking.xml:800(para)
1088
msgid ""
1089
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1090
"Samba to act as a domain controller."
1091
msgstr ""
1092
1093
#: serverguide/C/windows-networking.xml:805(para)
1094
msgid ""
1095
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1096
"their home directory. It is also possible to configure a "
1097
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1098
"directory."
1099
msgstr ""
1100
1101
#: serverguide/C/windows-networking.xml:811(para)
1102
msgid ""
1103
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1104
msgstr ""
1105
1106
#: serverguide/C/windows-networking.xml:816(para)
1107
msgid ""
1108
"<emphasis>logon home:</emphasis> specifies the home directory location."
1109
msgstr ""
1110
1111
#: serverguide/C/windows-networking.xml:821(para)
1112
msgid ""
1113
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1114
"once a user has logged in. The script needs to be placed in the "
1115
"<emphasis>[netlogon]</emphasis> share."
1116
msgstr ""
1117
1118
#: serverguide/C/windows-networking.xml:827(para)
1119
msgid ""
1120
"<emphasis>add machine script:</emphasis> a script that will automatically "
1121
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1122
"workstation to join the domain."
1123
msgstr ""
1124
1125
#: serverguide/C/windows-networking.xml:831(para)
1126
msgid ""
1127
"In this example the <emphasis>machines</emphasis> group will need to be "
1128
"created using the <application>addgroup</application> utility see <xref "
1129
"linkend=\"adding-deleting-users\"/> for details."
1130
msgstr ""
1131
1132
#: serverguide/C/windows-networking.xml:839(para)
1133
msgid ""
1134
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1135
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1136
"commented."
1137
msgstr ""
1138
1139
#: serverguide/C/windows-networking.xml:848(para)
1140
msgid ""
1141
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1142
"role=\"italic\">logon home</emphasis> to be mapped:"
1143
msgstr ""
1144
1145
#: serverguide/C/windows-networking.xml:853(programlisting)
1146
#, no-wrap
1147
msgid ""
1148
"\n"
1149
"[homes]\n"
1150
" comment = Home Directories\n"
1151
" browseable = no\n"
1152
" read only = no\n"
1153
" create mask = 0700\n"
1154
" directory mask = 0700\n"
1155
" valid users = %S\n"
1156
msgstr ""
1157
1158
#: serverguide/C/windows-networking.xml:866(para)
1159
msgid ""
1160
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1161
"share needs to be configured. To enable the share, uncomment:"
1162
msgstr ""
1163
1164
#: serverguide/C/windows-networking.xml:871(programlisting)
1165
#, no-wrap
1166
msgid ""
1167
"\n"
1168
"[netlogon]\n"
1169
" comment = Network Logon Service\n"
1170
" path = /srv/samba/netlogon\n"
1171
" guest ok = yes\n"
1172
" read only = yes\n"
1173
" share modes = no\n"
1174
msgstr ""
1175
1176
#: serverguide/C/windows-networking.xml:881(para)
1177
msgid ""
1178
"The original <emphasis>netlogon</emphasis> share path is "
1179
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1180
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1181
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1182
"location for site-specific data provided by the system."
1183
msgstr ""
1184
1185
#: serverguide/C/windows-networking.xml:892(para)
1186
msgid ""
1187
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1188
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1189
msgstr ""
1190
1191
#: serverguide/C/windows-networking.xml:898(command)
1192
msgid "sudo mkdir -p /srv/samba/netlogon"
1193
msgstr ""
1194
1195
#: serverguide/C/windows-networking.xml:899(command)
1196
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
1197
msgstr ""
1198
1199
#: serverguide/C/windows-networking.xml:902(para)
1200
msgid ""
1201
"You can enter any normal Windows logon script commands in "
1202
"<filename>logon.cmd</filename> to customize the client's environment."
1203
msgstr ""
1204
1205
#: serverguide/C/windows-networking.xml:910(para)
1206
msgid ""
1207
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1208
"workstation to the domain, a system group needs to be mapped to the Windows "
1209
"<emphasis>Domain Admins</emphasis> group. Using the "
1210
"<application>net</application> utility, from a terminal enter:"
1211
msgstr ""
1212
1213
#: serverguide/C/windows-networking.xml:917(command)
1214
msgid ""
1215
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1216
"type=d"
1217
msgstr ""
1218
1219
#: serverguide/C/windows-networking.xml:921(para)
1220
msgid ""
1221
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1222
"prefer. Also, the user used to join the domain needs to be a member of the "
1223
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1224
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1225
"allows <application>sudo</application> use."
1226
msgstr ""
1227
1228
#: serverguide/C/windows-networking.xml:932(para)
1229
msgid "Finally, restart Samba to enable the new domain controller:"
1230
msgstr ""
1231
1232
#: serverguide/C/windows-networking.xml:943(para)
1233
msgid ""
1234
"You should now be able to join Windows clients to the Domain in the same "
1235
"manner as joining them to an NT4 domain running on a Windows server."
1236
msgstr ""
1237
1238
#: serverguide/C/windows-networking.xml:953(title)
1239
msgid "Backup Domain Controller"
1240
msgstr ""
1241
1242
#: serverguide/C/windows-networking.xml:955(para)
1243
msgid ""
1244
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1245
"Backup Domain Controller (BDC) as well. This will allow clients to "
1246
"authenticate in case the PDC becomes unavailable."
1247
msgstr ""
1248
1249
#: serverguide/C/windows-networking.xml:960(para)
1250
msgid ""
1251
"When configuring Samba as a BDC you need a way to sync account information "
1252
"with the PDC. There are multiple ways of accomplishing this "
1253
"<application>scp</application>, <application>rsync</application>, or by "
1254
"using <application>LDAP</application> as the <emphasis>passdb "
1255
"backend</emphasis>."
1256
msgstr ""
1257
1258
#: serverguide/C/windows-networking.xml:966(para)
1259
msgid ""
1260
"Using LDAP is the most robust way to sync account information, because both "
1261
"domain controllers can use the same information in real time. However, "
1262
"setting up a LDAP server may be overly complicated for a small number of "
1263
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1264
msgstr ""
1265
1266
#: serverguide/C/windows-networking.xml:975(para)
1267
msgid ""
1268
"First, install <application>samba</application> and <application>libpam-"
1269
"smbpass</application>. From a terminal enter:"
1270
msgstr ""
1271
1272
#: serverguide/C/windows-networking.xml:986(para)
1273
msgid ""
1274
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1275
"following in the <emphasis>[global]</emphasis>:"
1276
msgstr ""
1277
1278
#: serverguide/C/windows-networking.xml:999(para)
1279
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1280
msgstr ""
1281
1282
#: serverguide/C/windows-networking.xml:1003(programlisting)
1283
#, no-wrap
1284
msgid ""
1285
"\n"
1286
" domain logons = yes\n"
1287
" domain master = no\n"
1288
msgstr ""
1289
1290
#: serverguide/C/windows-networking.xml:1011(para)
1291
msgid ""
1292
"Make sure a user has rights to read the files in "
1293
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1294
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1295
"files, enter:"
1296
msgstr ""
1297
1298
#: serverguide/C/windows-networking.xml:1017(command)
1299
msgid "sudo chgrp -R admin /var/lib/samba"
1300
msgstr ""
1301
1302
#: serverguide/C/windows-networking.xml:1023(para)
1303
msgid ""
1304
"Next, sync the user accounts, using <application>scp</application> to copy "
1305
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1306
msgstr ""
1307
1308
#: serverguide/C/windows-networking.xml:1029(command)
1309
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1310
msgstr ""
1311
1312
#: serverguide/C/windows-networking.xml:1033(para)
1313
msgid ""
1314
"Replace <emphasis>username</emphasis> with a valid username and "
1315
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1316
msgstr ""
1317
1318
#: serverguide/C/windows-networking.xml:1042(para)
1319
msgid "Finally, restart <application>samba</application>:"
1320
msgstr ""
1321
1322
#: serverguide/C/windows-networking.xml:1053(para)
1323
msgid ""
1324
"You can test that your Backup Domain controller is working by stopping the "
1325
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1326
"the domain."
1327
msgstr ""
1328
1329
#: serverguide/C/windows-networking.xml:1058(para)
1330
msgid ""
1331
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1332
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1333
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1334
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1335
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1336
msgstr ""
1337
1338
#: serverguide/C/windows-networking.xml:1088(para)
1339
msgid ""
1340
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1341
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1342
"up a Primary Domain Controller."
1343
msgstr ""
1344
1345
#: serverguide/C/windows-networking.xml:1094(para)
1346
msgid ""
1347
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1348
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1349
"explains setting up a Backup Domain Controller."
1350
msgstr ""
1351
1352
#: serverguide/C/windows-networking.xml:1109(title)
1353
msgid "Samba Active Directory Integration"
1354
msgstr ""
1355
1356
#: serverguide/C/windows-networking.xml:1112(title)
1357
msgid "Accessing a Samba Share"
1358
msgstr ""
1359
1360
#: serverguide/C/windows-networking.xml:1114(para)
1361
msgid ""
1362
"Another, use for Samba is to integrate into an existing Windows network. "
1363
"Once part of an Active Directory domain, Samba can provide file and print "
1364
"services to AD users."
1365
msgstr ""
1366
1367
#: serverguide/C/windows-networking.xml:1119(para)
1368
msgid ""
1369
"The simplest way to join an AD domain is to use <application>Likewise-"
1370
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1371
"open\"/>."
1372
msgstr ""
1373
1374
#: serverguide/C/windows-networking.xml:1124(para)
1375
msgid ""
1376
"Once part of the domain, enter the following command in the terminal prompt:"
1377
msgstr ""
1378
1379
#: serverguide/C/windows-networking.xml:1129(command)
1380
msgid "sudo apt-get install samba smbfs smbclient"
1381
msgstr ""
1382
1383
#: serverguide/C/windows-networking.xml:1132(para)
1384
msgid ""
1385
"Since the <application>likewise-open</application> and "
1386
"<application>samba</application> packages use separate "
1387
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1388
"<filename role=\"directory\">/var/lib/samba</filename>:"
1389
msgstr ""
1390
1391
#: serverguide/C/windows-networking.xml:1138(command)
1392
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1393
msgstr ""
1394
1395
#: serverguide/C/windows-networking.xml:1139(command)
1396
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1397
msgstr ""
1398
1399
#: serverguide/C/windows-networking.xml:1142(para)
1400
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1401
msgstr ""
1402
1403
#: serverguide/C/windows-networking.xml:1146(programlisting)
1404
#, no-wrap
1405
msgid ""
1406
"\n"
1407
" workgroup = EXAMPLE\n"
1408
" ...\n"
1409
" security = ads\n"
1410
" realm = EXAMPLE.COM\n"
1411
" ...\n"
1412
" idmap backend = lwopen\n"
1413
" idmap uid = 50-9999999999\n"
1414
" idmap gid = 50-9999999999\n"
1415
msgstr ""
1416
1417
#: serverguide/C/windows-networking.xml:1157(para)
1418
msgid ""
1419
"Restart <application>samba</application> for the new settings to take effect:"
1420
msgstr ""
1421
1422
#: serverguide/C/windows-networking.xml:1165(para)
1423
msgid ""
1424
"You should now be able to access any <application>Samba</application> shares "
1425
"from a Windows client. However, be sure to give the appropriate AD users or "
1426
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1427
"security\"/> for more details."
1428
msgstr ""
1429
1430
#: serverguide/C/windows-networking.xml:1173(title)
1431
msgid "Accessing a Windows Share"
1432
msgstr ""
1433
1434
#: serverguide/C/windows-networking.xml:1175(para)
1435
msgid ""
1436
"Now that the Samba server is part of the Active Directory domain you can "
1437
"access any Windows server shares:"
1438
msgstr ""
1439
1440
#: serverguide/C/windows-networking.xml:1182(para)
1441
msgid ""
1442
"To mount a Windows file share enter the following in a terminal prompt:"
1443
msgstr ""
1444
1445
#: serverguide/C/windows-networking.xml:1186(command)
1446
msgid "mount.cifs //fs01.example.com/share mount_point"
1447
msgstr ""
1448
1449
#: serverguide/C/windows-networking.xml:1189(para)
1450
msgid ""
1451
"It is also possible to access shares on computers not part of an AD domain, "
1452
"but a username and password will need to be provided."
1453
msgstr ""
1454
1455
#: serverguide/C/windows-networking.xml:1197(para)
1456
msgid ""
1457
"To mount the share during boot place an entry in "
1458
"<filename>/etc/fstab</filename>, for example:"
1459
msgstr ""
1460
1461
#: serverguide/C/windows-networking.xml:1201(programlisting)
1462
#, no-wrap
1463
msgid ""
1464
"\n"
1465
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1466
"0 0\n"
1467
msgstr ""
1468
1469
#: serverguide/C/windows-networking.xml:1208(para)
1470
msgid ""
1471
"Another way to copy files from a Windows server is to use the "
1472
"<application>smbclient</application> utility. To list the files in a Windows "
1473
"share:"
1474
msgstr ""
1475
1476
#: serverguide/C/windows-networking.xml:1214(command)
1477
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1478
msgstr ""
1479
1480
#: serverguide/C/windows-networking.xml:1220(para)
1481
msgid "To copy a file from the share, enter:"
1482
msgstr ""
1483
1484
#: serverguide/C/windows-networking.xml:1225(command)
1485
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1486
msgstr ""
1487
1488
#: serverguide/C/windows-networking.xml:1228(para)
1489
msgid ""
1490
"This will copy the <filename>file.txt</filename> into the current directory."
1491
msgstr ""
1492
1493
#: serverguide/C/windows-networking.xml:1235(para)
1494
msgid "And to copy a file to the share:"
1495
msgstr ""
1496
1497
#: serverguide/C/windows-networking.xml:1240(command)
1498
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1499
msgstr "smbclient //fs01.exemplu.com/share -k -c \"put /etc/hosts hosts\""
1500
1501
#: serverguide/C/windows-networking.xml:1243(para)
1502
msgid ""
1503
"This will copy the <filename>/etc/hosts</filename> to "
1504
"<filename>//fs01.example.com/share/hosts</filename>."
1505
msgstr ""
1506
1507
#: serverguide/C/windows-networking.xml:1250(para)
1508
msgid ""
1509
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1510
"<application>smbclient</application> command all at once. This is useful for "
1511
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1512
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1513
"and directory commands, simply execute:"
1514
msgstr ""
1515
1516
#: serverguide/C/windows-networking.xml:1257(command)
1517
msgid "smbclient //fs01.example.com/share -k"
1518
msgstr "smbclient //fs01.exemplu.com/share -k"
1519
1520
#: serverguide/C/windows-networking.xml:1264(para)
1521
msgid ""
1522
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1523
"<emphasis>//192.168.0.5/share</emphasis>, "
1524
"<emphasis>username=steve,password=secret</emphasis>, and "
1525
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1526
"file name, and an actual username and password with rights to the share."
1527
msgstr ""
1528
1529
#: serverguide/C/windows-networking.xml:1275(para)
1530
msgid ""
1531
"For more <application>smbclient</application> options see the man page: "
1532
"<command>man smbclient</command>, also available <ulink "
1533
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1534
"line</ulink>."
1535
msgstr ""
1536
1537
#: serverguide/C/windows-networking.xml:1280(para)
1538
msgid ""
1539
"The <application>mount.cifs</application><ulink "
1540
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1541
"an page</ulink> is also useful for more detailed information."
1542
msgstr ""
1543
1544
#: serverguide/C/windows-networking.xml:1293(title)
1545
msgid "Likewise Open"
1546
msgstr "Likewise Open"
1547
1548
#: serverguide/C/windows-networking.xml:1295(para)
1549
msgid ""
1550
"<application>Likewise Open</application> simplifies the necessary "
1551
"configuration needed to authenticate a Linux machine to an Active Directory "
1552
"domain. Based on <application>winbind</application>, the "
1553
"<application>likewise-open</application> package takes the pain out of "
1554
"integrating Ubuntu authentication into an existing Windows network."
1555
msgstr ""
1556
1557
#: serverguide/C/windows-networking.xml:1304(para)
1558
msgid ""
1559
"There are two ways to use Likewise Open, <application>likewise-"
1560
"open</application> the command line utility and <application>likewise-open-"
1561
"gui</application>. This section focuses on the command line utility."
1562
msgstr ""
1563
1564
#: serverguide/C/windows-networking.xml:1309(para)
1565
msgid ""
1566
"To install the <application>likewise-open</application> package, open a "
1567
"terminal prompt and enter:"
1568
msgstr ""
1569
1570
#: serverguide/C/windows-networking.xml:1314(command)
1571
msgid "sudo apt-get install likewise-open"
1572
msgstr "sudo apt-get install likewise-open"
1573
1574
#: serverguide/C/windows-networking.xml:1319(title)
1575
msgid "Joining a Domain"
1576
msgstr "Xunise a un dominiu"
1577
1578
#: serverguide/C/windows-networking.xml:1321(para)
1579
msgid ""
1580
"The main executable file of the <application>likewise-open</application> "
1581
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1582
"join your computer to the domain. Before you join a domain you will need to "
1583
"make sure you have:"
1584
msgstr ""
1585
1586
#: serverguide/C/windows-networking.xml:1329(para)
1587
msgid ""
1588
"Access to an Active Directory user with appropriate rights to join the "
1589
"domain."
1590
msgstr ""
1591
1592
#: serverguide/C/windows-networking.xml:1334(para)
1593
msgid ""
1594
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1595
"you want to join. If your AD domain does not match a valid domain such as "
1596
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1597
"the form of <emphasis>domainname.local</emphasis>."
1598
msgstr ""
1599
1600
#: serverguide/C/windows-networking.xml:1341(para)
1601
msgid ""
1602
"DNS for the domain setup properly. In a production AD environment this "
1603
"should be the case. Proper Microsoft DNS is needed so that client "
1604
"workstations can determine the Active Directory domain is available."
1605
msgstr ""
1606
1607
#: serverguide/C/windows-networking.xml:1345(para)
1608
msgid ""
1609
"If you don't have a Windows DNS server on your network, see <xref "
1610
"linkend=\"likewise-open-ms-dns\"/> for details."
1611
msgstr ""
1612
1613
#: serverguide/C/windows-networking.xml:1352(para)
1614
msgid "To join a domain, from a terminal prompt enter:"
1615
msgstr "Pa xunise a un dominiu, pon nun terminal:"
1616
1617
#: serverguide/C/windows-networking.xml:1357(command)
1618
msgid "sudo domainjoin-cli join example.com Administrator"
1619
msgstr "sudo domainjoin-cli join exemplu.com Alministrador"
1620
1621
#: serverguide/C/windows-networking.xml:1361(para)
1622
msgid ""
1623
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1624
"<emphasis>Administrator</emphasis> with the appropriate user name."
1625
msgstr ""
1626
1627
#: serverguide/C/windows-networking.xml:1367(para)
1628
msgid ""
1629
"You will then be prompted for the user's password. If all goes well a "
1630
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1631
msgstr ""
1632
1633
#: serverguide/C/windows-networking.xml:1373(para)
1634
msgid ""
1635
"After joining the domain, it is necessary to reboot before attempting to "
1636
"authenticate against the domain."
1637
msgstr ""
1638
1639
#: serverguide/C/windows-networking.xml:1379(para)
1640
msgid ""
1641
"After successfully joining an Ubuntu machine to an Active Directory domain "
1642
"you can authenticate using any valid AD user. To login you will need to "
1643
"enter the user name as 'domain\\username'. For example to ssh to a server "
1644
"joined to the domain enter:"
1645
msgstr ""
1646
1647
#: serverguide/C/windows-networking.xml:1386(command)
1648
msgid "ssh 'example\\steve'@hostname"
1649
msgstr "ssh 'exemplu\\enol'@nomedelequipu"
1650
1651
#: serverguide/C/windows-networking.xml:1390(para)
1652
msgid ""
1653
"If configuring a Desktop the user name will need to be prefixed with "
1654
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1655
msgstr ""
1656
1657
#: serverguide/C/windows-networking.xml:1396(para)
1658
msgid ""
1659
"To make likewise-open use a default domain, you can add the following "
1660
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1661
msgstr ""
1662
1663
#: serverguide/C/windows-networking.xml:1400(programlisting)
1664
#, no-wrap
1665
msgid ""
1666
"\n"
1667
"winbind use default domain = yes\n"
1668
msgstr ""
1669
"\n"
1670
"winbind use default domain = yes\n"
1671
1672
#: serverguide/C/windows-networking.xml:1404(para)
1673
msgid "Then restart the <application>likewise-open</application> daemons:"
1674
msgstr ""
1675
"Darréu, rearranca los degorrios de <application>likewise-open</application>:"
1676
1677
#: serverguide/C/windows-networking.xml:1409(command)
1678
msgid "sudo /etc/init.d/likewise-open restart"
1679
msgstr "sudo /etc/init.d/likewise-open restart"
1680
1681
#: serverguide/C/windows-networking.xml:1413(para)
1682
msgid ""
1683
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1684
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1685
"using only their username."
1686
msgstr ""
1687
1688
#: serverguide/C/windows-networking.xml:1419(para)
1689
msgid ""
1690
"The <application>domainjoin-cli</application> utility can also be used to "
1691
"leave the domain. From a terminal:"
1692
msgstr ""
1693
1694
#: serverguide/C/windows-networking.xml:1424(command)
1695
msgid "sudo domainjoin-cli leave"
1696
msgstr "sudo domainjoin-cli leave"
1697
1698
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1699
msgid "Other Utilities"
1700
msgstr "Otres utilidaes"
1701
1702
#: serverguide/C/windows-networking.xml:1431(para)
1703
msgid ""
1704
"The <application>likewise-open</application> package comes with a few other "
1705
"utilities that may be useful for gathering information about the Active "
1706
"Directory environment. These utilities are used to join the machine to the "
1707
"domain, and are the same as those available in the <application>samba-"
1708
"common</application> and <application>winbind</application> packages:"
1709
msgstr ""
1710
1711
#: serverguide/C/windows-networking.xml:1440(para)
1712
msgid ""
1713
"<application>lwinet</application>: Returns information about the network and "
1714
"the domain."
1715
msgstr ""
1716
"<application>lwinet</application>: Devuelve información sobre la rede y el "
1717
"dominiu."
1718
1719
#: serverguide/C/windows-networking.xml:1445(para)
1720
msgid ""
1721
"<application>lwimsg</application>: Allows interaction with the "
1722
"<application>likewise-winbindd</application> daemon."
1723
msgstr ""
1724
1725
#: serverguide/C/windows-networking.xml:1450(para)
1726
msgid ""
1727
"<application>lwiinfo</application>: Displays information about various parts "
1728
"of the Domain."
1729
msgstr ""
1730
1731
#: serverguide/C/windows-networking.xml:1456(para)
1732
msgid "Please refer to each utility's man page specific for details."
1733
msgstr ""
1734
1735
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1736
msgid "Troubleshooting"
1737
msgstr "Igua de problemes"
1738
1739
#: serverguide/C/windows-networking.xml:1466(para)
1740
msgid ""
1741
"If the client has trouble joining the domain, double check that the "
1742
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1743
"example:"
1744
msgstr ""
1745
1746
#: serverguide/C/windows-networking.xml:1471(programlisting)
1747
#, no-wrap
1748
msgid ""
1749
"\n"
1750
"nameserver 192.168.0.1\n"
1751
msgstr ""
1752
"\n"
1753
"nameserver 192.168.0.1\n"
1754
1755
#: serverguide/C/windows-networking.xml:1476(para)
1756
msgid ""
1757
"For more information when joining a domain, use the <emphasis>--loglevel "
1758
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1759
"<application>domainjoin-cli</application> utility:"
1760
msgstr ""
1761
1762
#: serverguide/C/windows-networking.xml:1482(command)
1763
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1764
msgstr ""
1765
"sudo domainjoin-cli --loglevel verbose join exemplu.com Alministrador"
1766
1767
#: serverguide/C/windows-networking.xml:1486(para)
1768
msgid ""
1769
"If an Active Directory user has trouble logging in, check the "
1770
"<filename>/var/log/auth.log</filename> for details."
1771
msgstr ""
1772
1773
#: serverguide/C/windows-networking.xml:1491(para)
1774
msgid ""
1775
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1776
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1777
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1778
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1779
"<emphasis>hosts</emphasis> option. For example:"
1780
msgstr ""
1781
1782
#: serverguide/C/windows-networking.xml:1497(programlisting)
1783
#, no-wrap
1784
msgid ""
1785
"\n"
1786
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1787
msgstr ""
1788
"\n"
1789
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1790
1791
#: serverguide/C/windows-networking.xml:1501(para)
1792
msgid "Change the above to:"
1793
msgstr "Camuda lo anterior por:"
1794
1795
#: serverguide/C/windows-networking.xml:1505(programlisting)
1796
#, no-wrap
1797
msgid ""
1798
"\n"
1799
"hosts: files dns [NOTFOUND=return]\n"
1800
msgstr ""
1801
"\n"
1802
"hosts: files dns [NOTFOUND=return]\n"
1803
1804
#: serverguide/C/windows-networking.xml:1509(para)
1805
msgid "Then restart networking by entering:"
1806
msgstr "Y rearranca la rede tecleando:"
1807
1808
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1809
msgid "sudo /etc/init.d/networking restart"
1810
msgstr "sudo /etc/init.d/networking restart"
1811
1812
#: serverguide/C/windows-networking.xml:1517(para)
1813
msgid "You should now be able to join the Active Directory domain."
1814
msgstr "Agora tendríes que ser quien a xunite al dominiu d'Active Directory."
1815
1816
#: serverguide/C/windows-networking.xml:1525(title)
1817
msgid "Microsoft DNS"
1818
msgstr "Microsoft DNS"
1819
1820
#: serverguide/C/windows-networking.xml:1527(para)
1821
msgid ""
1822
"The following are instructions for installing DNS on an Active Directory "
1823
"domain controller running Windows Server 2003, but the instructions should "
1824
"be similar for other versions:"
1825
msgstr ""
1826
1827
#: serverguide/C/windows-networking.xml:1536(para)
1828
msgid ""
1829
"Click "
1830
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1831
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1832
"This will open the <application>Server Role Mangement</application> utility."
1833
msgstr ""
1834
1835
#: serverguide/C/windows-networking.xml:1544(para)
1836
msgid "Click <guilabel>Add or remove a role</guilabel>"
1837
msgstr ""
1838
1839
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1840
msgid "Click Next"
1841
msgstr "Calca «Siguiente»"
1842
1843
#: serverguide/C/windows-networking.xml:1546(para)
1844
msgid "Select \"DNS Server\""
1845
msgstr "Escueyi «Sirvidor DNS»"
1846
1847
#: serverguide/C/windows-networking.xml:1548(para)
1848
msgid "Click Next again to proceed"
1849
msgstr ""
1850
1851
#: serverguide/C/windows-networking.xml:1549(para)
1852
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1853
msgstr ""
1854
1855
#: serverguide/C/windows-networking.xml:1551(para)
1856
msgid ""
1857
"Make sure \"This server maintains the zone\" is selected and click Next."
1858
msgstr ""
1859
1860
#: serverguide/C/windows-networking.xml:1552(para)
1861
msgid "Enter your domain name and click Next"
1862
msgstr ""
1863
1864
#: serverguide/C/windows-networking.xml:1553(para)
1865
msgid "Click Next to \"Allow only secure dynamic updates\""
1866
msgstr ""
1867
1868
#: serverguide/C/windows-networking.xml:1555(para)
1869
msgid ""
1870
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1871
"should not forward queries\" and click Next."
1872
msgstr ""
1873
1874
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1875
msgid "Click Finish"
1876
msgstr "Calca «Colar»"
1877
1878
#: serverguide/C/windows-networking.xml:1562(para)
1879
msgid ""
1880
"DNS is now installed and can be further configured using the "
1881
"<application>Microsoft Management Console</application> DNS snap-in."
1882
msgstr ""
1883
1884
#: serverguide/C/windows-networking.xml:1570(para)
1885
msgid "Click Start"
1886
msgstr "Calcar «Iniciu»"
1887
1888
#: serverguide/C/windows-networking.xml:1571(para)
1889
msgid "Control Panel"
1890
msgstr "Panel de Control"
1891
1892
#: serverguide/C/windows-networking.xml:1572(para)
1893
msgid "Network Connections"
1894
msgstr "Conexones de rede"
1895
1896
#: serverguide/C/windows-networking.xml:1573(para)
1897
msgid "Right Click \"Local Area Connection\""
1898
msgstr ""
1899
1900
#: serverguide/C/windows-networking.xml:1574(para)
1901
msgid "Click Properties"
1902
msgstr "Calca «Propiedaes»"
1903
1904
#: serverguide/C/windows-networking.xml:1575(para)
1905
msgid "Double click \"Internet Protocol (TCP/IP)\""
1906
msgstr ""
1907
1908
#: serverguide/C/windows-networking.xml:1576(para)
1909
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1910
msgstr ""
1911
1912
#: serverguide/C/windows-networking.xml:1577(para)
1913
msgid "Click Ok"
1914
msgstr "Calca «Aceptar»"
1915
1916
#: serverguide/C/windows-networking.xml:1578(para)
1917
msgid "Click Ok again to save the settings"
1918
msgstr ""
1919
1920
#: serverguide/C/windows-networking.xml:1567(para)
1921
msgid ""
1922
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1923
msgstr ""
1924
1925
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1926
msgid "References"
1927
msgstr "Referencies"
1928
1929
#: serverguide/C/windows-networking.xml:1587(para)
1930
msgid ""
1931
"Please refer to the <ulink "
1932
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1933
"further information."
1934
msgstr ""
1935
1936
#: serverguide/C/windows-networking.xml:1591(para)
1937
msgid ""
1938
"For more <application>domainjoin-cli</application> options see the man page: "
1939
"<command>man domainjoin-cli</command>."
1940
msgstr ""
1941
1942
#: serverguide/C/windows-networking.xml:1595(para)
1943
msgid ""
1944
"Also, see the <ulink "
1945
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1946
"LikewiseOpen</ulink> page."
1947
msgstr ""
1948
1949
#: serverguide/C/web-servers.xml:13(title)
1950
msgid "Web Servers"
1951
msgstr "Sirvidores web"
1952
1953
#: serverguide/C/web-servers.xml:14(para)
1954
msgid ""
1955
"A Web server is a software responsible for accepting HTTP requests from "
1956
"clients, which are known as Web browsers, and serving them HTTP responses "
1957
"along with optional data contents, which usually are Web pages such as HTML "
1958
"documents and linked objects (images, etc.)."
1959
msgstr ""
1960
1961
#: serverguide/C/web-servers.xml:19(title)
1962
msgid "HTTPD - Apache2 Web Server"
1963
msgstr "HTTPD - Sirvidor web Apache2"
1964
1965
#: serverguide/C/web-servers.xml:20(para)
1966
msgid ""
1967
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1968
"are used to serve Web Pages requested by client computers. Clients typically "
1969
"request and view Web Pages using Web Browser applications such as "
1970
"<application>Firefox</application>, <application>Opera</application>, or "
1971
"<application>Mozilla</application>."
1972
msgstr ""
1973
1974
#: serverguide/C/web-servers.xml:24(para)
1975
msgid ""
1976
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1977
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1978
"resource. For example, to view the home page of the <ulink "
1979
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1980
"the FQDN. To request specific information about <ulink "
1981
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1982
"enter the FQDN followed by a path."
1983
msgstr ""
1984
1985
#: serverguide/C/web-servers.xml:29(para)
1986
msgid ""
1987
"The most common protocol used to transfer Web pages is the Hyper Text "
1988
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1989
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1990
"protocol for uploading and downloading files, are also supported."
1991
msgstr ""
1992
1993
#: serverguide/C/web-servers.xml:33(para)
1994
msgid ""
1995
"Apache Web Servers are often used in combination with the "
1996
"<application>MySQL</application> database engine, the HyperText Preprocessor "
1997
"(<application>PHP</application>) scripting language, and other popular "
1998
"scripting languages such as <application>Python</application> and "
1999
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2000
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2001
"for the development and deployment of Web-based applications."
2002
msgstr ""
2003
2004
#: serverguide/C/web-servers.xml:42(para)
2005
msgid ""
2006
"The <application>Apache2</application> web server is available in Ubuntu "
2007
"Linux. To install Apache2:"
2008
msgstr ""
2009
2010
#: serverguide/C/web-servers.xml:48(para)
2011
msgid "At a terminal prompt enter the following command:"
2012
msgstr "Nun terminal pon el comandu que va darréu:"
2013
2014
#: serverguide/C/web-servers.xml:53(command)
2015
msgid "sudo apt-get install apache2"
2016
msgstr "sudo apt-get install apache2"
2017
2018
#: serverguide/C/web-servers.xml:63(para)
2019
msgid ""
2020
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2021
"text configuration files. These <emphasis>directives</emphasis> are "
2022
"separated between the following files and directories:"
2023
msgstr ""
2024
2025
#: serverguide/C/web-servers.xml:71(para)
2026
msgid ""
2027
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2028
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2029
msgstr ""
2030
2031
#: serverguide/C/web-servers.xml:77(para)
2032
msgid ""
2033
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2034
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2035
"serve content may add files, or symlinks, to this directory."
2036
msgstr ""
2037
2038
#: serverguide/C/web-servers.xml:83(para)
2039
msgid ""
2040
"<emphasis>envvars:</emphasis> file where Apache2 "
2041
"<emphasis>environment</emphasis> variables are set."
2042
msgstr ""
2043
2044
#: serverguide/C/web-servers.xml:88(para)
2045
msgid ""
2046
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2047
"file, named after the <application>httpd</application> daemon. The file can "
2048
"be used for <emphasis>user specific</emphasis> configuration options that "
2049
"globally effect Apache2."
2050
msgstr ""
2051
2052
#: serverguide/C/web-servers.xml:95(para)
2053
msgid ""
2054
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2055
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2056
"modules will have specific configuration files, however."
2057
msgstr ""
2058
2059
#: serverguide/C/web-servers.xml:101(para)
2060
msgid ""
2061
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2062
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2063
"configuration file is symlinked it will be enabled the next time "
2064
"<application>apache2</application> is restarted."
2065
msgstr ""
2066
2067
#: serverguide/C/web-servers.xml:108(para)
2068
msgid ""
2069
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2070
"TCP ports Apache2 is listening on."
2071
msgstr ""
2072
2073
#: serverguide/C/web-servers.xml:113(para)
2074
msgid ""
2075
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2076
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2077
"to be configured for multiple sites that have separate configurations."
2078
msgstr ""
2079
2080
#: serverguide/C/web-servers.xml:119(para)
2081
msgid ""
2082
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2083
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2084
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2085
"a configuration file in sites-available is symlinked, the site configured by "
2086
"it will be active once Apache2 is restarted."
2087
msgstr ""
2088
2089
#: serverguide/C/web-servers.xml:127(para)
2090
msgid ""
2091
"In addition, other configuration files may be added using the "
2092
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2093
"many configuration files. Any directive may be placed in any of these "
2094
"configuration files. Changes to the main configuration files are only "
2095
"recognized by Apache2 when it is started or restarted."
2096
msgstr ""
2097
2098
#: serverguide/C/web-servers.xml:136(para)
2099
msgid ""
2100
"The server also reads a file containing mime document types; the filename is "
2101
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2102
"<filename>/etc/mime.types</filename> by default."
2103
msgstr ""
2104
2105
#: serverguide/C/web-servers.xml:141(title)
2106
msgid "Basic Settings"
2107
msgstr "Opciones básiques"
2108
2109
#: serverguide/C/web-servers.xml:142(para)
2110
msgid ""
2111
"This section explains Apache2 server essential configuration parameters. "
2112
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2113
"Documentation</ulink> for more details."
2114
msgstr ""
2115
2116
#: serverguide/C/web-servers.xml:150(para)
2117
msgid ""
2118
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2119
"it is configured with a single default virtual host (using the "
2120
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2121
"if you have a single site, or used as a template for additional virtual "
2122
"hosts if you have multiple sites. If left alone, the default virtual host "
2123
"will serve as your default site, or the site users will see if the URL they "
2124
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2125
"your custom sites. To modify the default virtual host, edit the file "
2126
"<filename>/etc/apache2/sites-available/default</filename>."
2127
msgstr ""
2128
2129
#: serverguide/C/web-servers.xml:163(para)
2130
msgid ""
2131
"The directives set for a virtual host only apply to that particular virtual "
2132
"host. If a directive is set server-wide and not defined within the virtual "
2133
"host settings, the default setting is used. For example, you can define a "
2134
"Webmaster email address and not define individual email addresses for each "
2135
"virtual host."
2136
msgstr ""
2137
2138
#: serverguide/C/web-servers.xml:171(para)
2139
msgid ""
2140
"If you wish to configure a new virtual host or site, copy that file into the "
2141
"same directory with a name you choose. For example:"
2142
msgstr ""
2143
2144
#: serverguide/C/web-servers.xml:177(command)
2145
msgid ""
2146
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2147
"available/mynewsite"
2148
msgstr ""
2149
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2150
"available/mynewsite"
2151
2152
#: serverguide/C/web-servers.xml:180(para)
2153
msgid ""
2154
"Edit the new file to configure the new site using some of the directives "
2155
"described below."
2156
msgstr ""
2157
2158
#: serverguide/C/web-servers.xml:187(para)
2159
msgid ""
2160
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
2161
"to be advertised for the server's administrator. The default value is "
2162
"webmaster@localhost. This should be changed to an email address that is "
2163
"delivered to you (if you are the server's administrator). If your website "
2164
"has a problem, Apache2 will display an error message containing this email "
2165
"address to report the problem to. Find this directive in your site's "
2166
"configuration file in /etc/apache2/sites-available."
2167
msgstr ""
2168
2169
#: serverguide/C/web-servers.xml:198(para)
2170
msgid ""
2171
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2172
"the IP address, Apache2 should listen on. If the IP address is not "
2173
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2174
"it runs on. The default value for the Listen directive is 80. Change this to "
2175
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2176
"that it will not be available to the Internet, to (for example) 81 to change "
2177
"the port that it listens on, or leave it as is for normal operation. This "
2178
"directive can be found and changed in its own file, "
2179
"<filename>/etc/apache2/ports.conf</filename>"
2180
msgstr ""
2181
2182
#: serverguide/C/web-servers.xml:211(para)
2183
msgid ""
2184
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2185
"FQDN your site should answer to. The default virtual host has no ServerName "
2186
"directive specified, so it will respond to all requests that do not match a "
2187
"ServerName directive in another virtual host. If you have just acquired the "
2188
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2189
"value of the ServerName directive in your virtual host configuration file "
2190
"should be ubunturocks.com. Add this directive to the new virtual host file "
2191
"you created earlier (<filename>/etc/apache2/sites-"
2192
"available/mynewsite</filename>)."
2193
msgstr ""
2194
2195
#: serverguide/C/web-servers.xml:223(para)
2196
msgid ""
2197
"You may also want your site to respond to www.ubunturocks.com, since many "
2198
"users will assume the www prefix is appropriate. Use the "
2199
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2200
"wildcards in the ServerAlias directive."
2201
msgstr ""
2202
2203
#: serverguide/C/web-servers.xml:230(para)
2204
msgid ""
2205
"For example, the following configuration will cause your site to respond to "
2206
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2207
msgstr ""
2208
2209
#: serverguide/C/web-servers.xml:236(programlisting)
2210
#, no-wrap
2211
msgid ""
2212
"\n"
2213
"ServerAlias *.ubunturocks.com\n"
2214
msgstr ""
2215
"\n"
2216
"ServerAlias *.ubunturocks.com\n"
2217
2218
#: serverguide/C/web-servers.xml:242(para)
2219
msgid ""
2220
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2221
"should look for the files that make up the site. The default value is "
2222
"/var/www. No site is configured there, but if you uncomment the "
2223
"<emphasis>RedirectMatch</emphasis> directive in "
2224
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2225
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2226
"this value in your site's virtual host file, and remember to create that "
2227
"directory if necessary!"
2228
msgstr ""
2229
2230
#: serverguide/C/web-servers.xml:254(para)
2231
msgid ""
2232
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2233
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2234
"enabled point to \"available\" sites."
2235
msgstr ""
2236
2237
#: serverguide/C/web-servers.xml:260(para)
2238
msgid ""
2239
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2240
"<application>a2ensite</application> utility and restart Apache2:"
2241
msgstr ""
2242
2243
#: serverguide/C/web-servers.xml:266(command)
2244
msgid "sudo a2ensite mynewsite"
2245
msgstr "sudo a2ensite mynewsite"
2246
2247
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2248
msgid "sudo /etc/init.d/apache2 restart"
2249
msgstr "sudo /etc/init.d/apache2 restart"
2250
2251
#: serverguide/C/web-servers.xml:271(para)
2252
msgid ""
2253
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2254
"name for the VirtualHost. One method is to name the file after the "
2255
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2256
msgstr ""
2257
2258
#: serverguide/C/web-servers.xml:278(para)
2259
msgid ""
2260
"Similarly, use the <application>a2dissite</application> utility to disable "
2261
"sites. This is can be useful when troubleshooting configuration problems "
2262
"with multiple VirtualHosts:"
2263
msgstr ""
2264
2265
#: serverguide/C/web-servers.xml:284(command)
2266
msgid "sudo a2dissite mynewsite"
2267
msgstr "sudo a2dissite mynewsite"
2268
2269
#: serverguide/C/web-servers.xml:290(title)
2270
msgid "Default Settings"
2271
msgstr "Configuración predeterminada"
2272
2273
#: serverguide/C/web-servers.xml:292(para)
2274
msgid ""
2275
"This section explains configuration of the Apache2 server default settings. "
2276
"For example, if you add a virtual host, the settings you configure for the "
2277
"virtual host take precedence for that virtual host. For a directive not "
2278
"defined within the virtual host settings, the default value is used."
2279
msgstr ""
2280
2281
#: serverguide/C/web-servers.xml:304(para)
2282
msgid ""
2283
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2284
"server when a user requests an index of a directory by specifying a forward "
2285
"slash (/) at the end of the directory name."
2286
msgstr ""
2287
2288
#: serverguide/C/web-servers.xml:311(para)
2289
msgid ""
2290
"For example, when a user requests the page "
2291
"http://www.example.com/this_directory/, he or she will get either the "
2292
"DirectoryIndex page if it exists, a server-generated directory list if it "
2293
"does not and the Indexes option is specified, or a Permission Denied page if "
2294
"neither is true. The server will try to find one of the files listed in the "
2295
"DirectoryIndex directive and will return the first one it finds. If it does "
2296
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2297
"set for that directory, the server will generate and return a list, in HTML "
2298
"format, of the subdirectories and files in the directory. The default value, "
2299
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2300
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2301
"Apache2 finds a file in a requested directory matching any of these names, "
2302
"the first will be displayed."
2303
msgstr ""
2304
2305
#: serverguide/C/web-servers.xml:332(para)
2306
msgid ""
2307
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2308
"file for Apache2 to use for specific error events. For example, if a user "
2309
"requests a resource that does not exist, a 404 error will occur, and per "
2310
"Apache2's default configuration, the file "
2311
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2312
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2313
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2314
"redirects requests to the /error directory to "
2315
"<filename>/usr/share/apache2/error/</filename>."
2316
msgstr ""
2317
2318
#: serverguide/C/web-servers.xml:344(para)
2319
msgid ""
2320
"To see a list of the default ErrorDocument directives, use this command:"
2321
msgstr "Pa ver la llista de les direutives ErrorDocument usa esta orde:"
2322
2323
#: serverguide/C/web-servers.xml:350(command)
2324
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2325
msgstr "grep ErrorDocument /etc/apache2/apache2.conf"
2326
2327
#: serverguide/C/web-servers.xml:355(para)
2328
msgid ""
2329
"By default, the server writes the transfer log to the file "
2330
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2331
"per-site basis in your virtual host configuration files with the "
2332
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2333
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2334
"specify the file to which errors are logged, via the "
2335
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2336
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2337
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2338
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2339
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2340
"/etc/apache2/apache2.conf</filename> for the default value)."
2341
msgstr ""
2342
2343
#: serverguide/C/web-servers.xml:370(para)
2344
msgid ""
2345
"Some options are specified on a per-directory basis rather than per-server. "
2346
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2347
"is enclosed in XML-like tags, like so:"
2348
msgstr ""
2349
2350
#: serverguide/C/web-servers.xml:376(programlisting)
2351
#, no-wrap
2352
msgid ""
2353
"\n"
2354
"<Directory /var/www/mynewsite>\n"
2355
"...\n"
2356
"</Directory>\n"
2357
msgstr ""
2358
"\n"
2359
"<Directory /var/www/mynewsite>\n"
2360
"...\n"
2361
"</Directory>\n"
2362
2363
#: serverguide/C/web-servers.xml:382(para)
2364
msgid ""
2365
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2366
"one or more of the following values (among others), separated by spaces:"
2367
msgstr ""
2368
2369
#: serverguide/C/web-servers.xml:394(para)
2370
msgid ""
2371
"Most files should not be executed as CGI scripts. This would be very "
2372
"dangerous. CGI scripts should kept in a directory separate from and outside "
2373
"your DocumentRoot, and only this directory should have the ExecCGI option "
2374
"set. This is the default, and the default location for CGI scripts is "
2375
"<filename>/usr/lib/cgi-bin</filename>."
2376
msgstr ""
2377
2378
#: serverguide/C/web-servers.xml:389(para)
2379
msgid ""
2380
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2381
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2382
msgstr ""
2383
2384
#: serverguide/C/web-servers.xml:405(para)
2385
msgid ""
2386
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2387
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2388
"other files. This is not a common option. See <ulink "
2389
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2390
"HOWTO</ulink> for more information."
2391
msgstr ""
2392
2393
#: serverguide/C/web-servers.xml:414(para)
2394
msgid ""
2395
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2396
"includes, but disable the <emphasis>#exec</emphasis> and "
2397
"<emphasis>#include</emphasis> commands in CGI scripts."
2398
msgstr ""
2399
2400
#: serverguide/C/web-servers.xml:426(para)
2401
msgid ""
2402
"For security reasons, this should usually not be set, and certainly should "
2403
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2404
"per-directory basis only if you are certain you want users to see the entire "
2405
"contents of the directory."
2406
msgstr ""
2407
2408
#: serverguide/C/web-servers.xml:421(para)
2409
msgid ""
2410
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2411
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2412
"index.html) exists in the requested directory. <placeholder-1/>"
2413
msgstr ""
2414
2415
#: serverguide/C/web-servers.xml:436(para)
2416
msgid ""
2417
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2418
"multiviews; this option is disabled by default for security reasons. See the "
2419
"<ulink "
2420
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2421
"Apache2 documentation on this option</ulink>."
2422
msgstr ""
2423
2424
#: serverguide/C/web-servers.xml:444(para)
2425
msgid ""
2426
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2427
"symbolic links if the target file or directory has the same owner as the "
2428
"link."
2429
msgstr ""
2430
2431
#: serverguide/C/web-servers.xml:456(title)
2432
msgid "httpd Settings"
2433
msgstr "Configuración httpd"
2434
2435
#: serverguide/C/web-servers.xml:458(para)
2436
msgid ""
2437
"This section explains some basic <application>httpd</application> daemon "
2438
"configuration settings."
2439
msgstr ""
2440
2441
#: serverguide/C/web-servers.xml:462(para)
2442
msgid ""
2443
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2444
"the path to the lockfile used when the server is compiled with either "
2445
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2446
"stored on the local disk. It should be left to the default value unless the "
2447
"logs directory is located on an NFS share. If this is the case, the default "
2448
"value should be changed to a location on the local disk and to a directory "
2449
"that is readable only by root."
2450
msgstr ""
2451
2452
#: serverguide/C/web-servers.xml:471(para)
2453
msgid ""
2454
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2455
"file in which the server records its process ID (pid). This file should only "
2456
"be readable by root. In most cases, it should be left to the default value."
2457
msgstr ""
2458
2459
#: serverguide/C/web-servers.xml:477(para)
2460
msgid ""
2461
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2462
"used by the server to answer requests. This setting determines the server's "
2463
"access. Any files inaccessible to this user will also be inaccessible to "
2464
"your website's visitors. The default value for User is www-data."
2465
msgstr ""
2466
2467
#: serverguide/C/web-servers.xml:484(para)
2468
msgid ""
2469
"Unless you know exactly what you are doing, do not set the User directive to "
2470
"root. Using root as the User will create large security holes for your Web "
2471
"server."
2472
msgstr ""
2473
2474
#: serverguide/C/web-servers.xml:490(para)
2475
msgid ""
2476
"The Group directive is similar to the User directive. Group sets the group "
2477
"under which the server will answer requests. The default group is also www-"
2478
"data."
2479
msgstr ""
2480
2481
#: serverguide/C/web-servers.xml:496(title)
2482
msgid "Apache2 Modules"
2483
msgstr ""
2484
2485
#: serverguide/C/web-servers.xml:498(para)
2486
msgid ""
2487
"Apache2 is a modular server. This implies that only the most basic "
2488
"functionality is included in the core server. Extended features are "
2489
"available through modules which can be loaded into Apache2. By default, a "
2490
"base set of modules is included in the server at compile-time. If the server "
2491
"is compiled to use dynamically loaded modules, then modules can be compiled "
2492
"separately, and added at any time using the LoadModule directive. Otherwise, "
2493
"Apache2 must be recompiled to add or remove modules."
2494
msgstr ""
2495
2496
#: serverguide/C/web-servers.xml:510(para)
2497
msgid ""
2498
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2499
"Configuration directives may be conditionally included on the presence of a "
2500
"particular module by enclosing them in an "
2501
"<emphasis><IfModule></emphasis> block."
2502
msgstr ""
2503
2504
#: serverguide/C/web-servers.xml:517(para)
2505
msgid ""
2506
"You can install additional Apache2 modules and use them with your Web "
2507
"server. For example, run the following command from a terminal prompt to "
2508
"install the <emphasis>MySQL Authentication</emphasis> module:"
2509
msgstr ""
2510
2511
#: serverguide/C/web-servers.xml:524(command)
2512
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2513
msgstr "sudo apt-get install libapache2-mod-auth-mysql"
2514
2515
#: serverguide/C/web-servers.xml:527(para)
2516
msgid ""
2517
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2518
"additional modules."
2519
msgstr ""
2520
2521
#: serverguide/C/web-servers.xml:531(para)
2522
msgid ""
2523
"Use the <application>a2enmod</application> utility to enable a module:"
2524
msgstr ""
2525
2526
#: serverguide/C/web-servers.xml:537(command)
2527
msgid "sudo a2enmod auth_mysql"
2528
msgstr "sudo a2enmod auth_mysql"
2529
2530
#: serverguide/C/web-servers.xml:541(para)
2531
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2532
msgstr ""
2533
2534
#: serverguide/C/web-servers.xml:546(command)
2535
msgid "sudo a2dismod auth_mysql"
2536
msgstr "sudo a2dismod auth_mysql"
2537
2538
#: serverguide/C/web-servers.xml:553(title)
2539
msgid "HTTPS Configuration"
2540
msgstr "Configuración HTTPS"
2541
2542
#: serverguide/C/web-servers.xml:555(para)
2543
msgid ""
2544
"The <application>mod_ssl</application> module adds an important feature to "
2545
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2546
"browser is communicating using SSL, the https:// prefix is used at the "
2547
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2548
"bar."
2549
msgstr ""
2550
2551
#: serverguide/C/web-servers.xml:564(para)
2552
msgid ""
2553
"The <application>mod_ssl</application> module is available in "
2554
"<application>apache2-common</application> package. Execute the following "
2555
"command from a terminal prompt to enable the "
2556
"<application>mod_ssl</application> module:"
2557
msgstr ""
2558
2559
#: serverguide/C/web-servers.xml:571(command)
2560
msgid "sudo a2enmod ssl"
2561
msgstr "sudo a2enmod ssl"
2562
2563
#: serverguide/C/web-servers.xml:574(para)
2564
msgid ""
2565
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2566
"available/default-ssl</filename>. In order for "
2567
"<application>Apache2</application> to provide HTTPS, a "
2568
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2569
"needed. The default HTTPS configuration will use a certificate and key "
2570
"generated by the <application>ssl-cert</application> package. They are good "
2571
"for testing, but the auto-generated certificate and key should be replaced "
2572
"by a certificate specific to the site or server. For information on "
2573
"generating a key and obtaining a certificate see <xref "
2574
"linkend=\"certificates-and-security\"/>"
2575
msgstr ""
2576
2577
#: serverguide/C/web-servers.xml:584(para)
2578
msgid ""
2579
"To configure <application>Apache2</application> for HTTPS, enter the "
2580
"following:"
2581
msgstr ""
2582
2583
#: serverguide/C/web-servers.xml:589(command)
2584
msgid "sudo a2ensite default-ssl"
2585
msgstr "sudo a2ensite default-ssl"
2586
2587
#: serverguide/C/web-servers.xml:593(para)
2588
msgid ""
2589
"The directories <filename>/etc/ssl/certs</filename> and "
2590
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2591
"install the certificate and key in another directory make sure to change "
2592
"<emphasis>SSLCertificateFile</emphasis> and "
2593
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2594
msgstr ""
2595
2596
#: serverguide/C/web-servers.xml:600(para)
2597
msgid ""
2598
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2599
"settings:"
2600
msgstr ""
2601
2602
#: serverguide/C/web-servers.xml:611(para)
2603
msgid ""
2604
"Depending on how you obtained your certificate you may need to enter a "
2605
"passphrase when <application>Apache2</application> starts."
2606
msgstr ""
2607
2608
#: serverguide/C/web-servers.xml:617(para)
2609
msgid ""
2610
"You can access the secure server pages by typing https://your_hostname/url/ "
2611
"in your browser address bar."
2612
msgstr ""
2613
2614
#: serverguide/C/web-servers.xml:628(para)
2615
msgid ""
2616
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2617
"Documentation</ulink> contains in depth information on Apache2 configuration "
2618
"directives. Also, see the <application>apache2-doc</application> package for "
2619
"the official Apache2 docs."
2620
msgstr ""
2621
2622
#: serverguide/C/web-servers.xml:635(para)
2623
msgid ""
2624
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2625
"Documentation</ulink> site for more SSL related information."
2626
msgstr ""
2627
2628
#: serverguide/C/web-servers.xml:641(para)
2629
msgid ""
2630
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2631
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2632
"configurations."
2633
msgstr ""
2634
2635
#: serverguide/C/web-servers.xml:647(para)
2636
msgid ""
2637
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2638
"server</emphasis> IRC channel on <ulink "
2639
"url=\"http://freenode.net/\">freenode.net</ulink>."
2640
msgstr ""
2641
2642
#: serverguide/C/web-servers.xml:653(para)
2643
msgid ""
2644
"Usually integrated with PHP and MySQL the <ulink "
2645
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2646
"Ubuntu Wiki </ulink> page is a good resource."
2647
msgstr ""
2648
2649
#: serverguide/C/web-servers.xml:664(title)
2650
msgid "PHP5 - Scripting Language"
2651
msgstr "PHP5 - Llinguax de scripts"
2652
2653
#: serverguide/C/web-servers.xml:665(para)
2654
msgid ""
2655
"PHP is a general-purpose scripting language suited for Web development. The "
2656
"PHP script can be embedded into HTML. This section explains how to install "
2657
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2658
msgstr ""
2659
2660
#: serverguide/C/web-servers.xml:669(para)
2661
msgid ""
2662
"This section assumes you have installed and configured Apache2 Web Server "
2663
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2664
"sections in this document to install and configure Apache2 and MySQL "
2665
"respectively."
2666
msgstr ""
2667
2668
#: serverguide/C/web-servers.xml:676(para)
2669
msgid "The PHP5 is available in Ubuntu Linux."
2670
msgstr "PHP5 ta disponible n'Ubuntu Linux."
2671
2672
#: serverguide/C/web-servers.xml:678(para)
2673
msgid ""
2674
"To install PHP5 you can enter the following command in the terminal prompt: "
2675
"<screen>\n"
2676
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2677
"</screen>"
2678
msgstr ""
2679
2680
#: serverguide/C/web-servers.xml:687(para)
2681
msgid ""
2682
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2683
"line you should install <application>php5-cli</application> package. To "
2684
"install <application>php5-cli</application> you can enter the following "
2685
"command in the terminal prompt: <screen>\n"
2686
"<command>sudo apt-get install php5-cli</command>\n"
2687
"</screen>"
2688
msgstr ""
2689
2690
#: serverguide/C/web-servers.xml:696(para)
2691
msgid ""
2692
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2693
"accomplish this, you should install <application>php5-cgi</application> "
2694
"package. You can run the following command in a terminal prompt to install "
2695
"<application>php5-cgi</application> package: <screen>\n"
2696
"<command>sudo apt-get install php5-cgi</command>\n"
2697
"</screen>"
2698
msgstr ""
2699
2700
#: serverguide/C/web-servers.xml:706(para)
2701
msgid ""
2702
"To use <application>MySQL</application> with PHP5 you should install "
2703
"<application>php5-mysql</application> package. To install <application>php5-"
2704
"mysql</application> you can enter the following command in the terminal "
2705
"prompt: <screen>\n"
2706
"<command>sudo apt-get install php5-mysql</command>\n"
2707
"</screen>"
2708
msgstr ""
2709
2710
#: serverguide/C/web-servers.xml:714(para)
2711
msgid ""
2712
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2713
"install <application>php5-pgsql</application> package. To install "
2714
"<application>php5-pgsql</application> you can enter the following command in "
2715
"the terminal prompt: <screen>\n"
2716
"<command>sudo apt-get install php5-pgsql</command>\n"
2717
"</screen>"
2718
msgstr ""
2719
2720
#: serverguide/C/web-servers.xml:727(para)
2721
msgid ""
2722
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2723
"you have installed <application>php5-cli</application> package, you can run "
2724
"PHP5 scripts from your command prompt."
2725
msgstr ""
2726
2727
#: serverguide/C/web-servers.xml:734(para)
2728
msgid ""
2729
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2730
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2731
"when you install the module. Please verify if the files "
2732
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2733
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2734
"not exists, you can enable the module using <command>a2enmod</command> "
2735
"command."
2736
msgstr ""
2737
2738
#: serverguide/C/web-servers.xml:745(para)
2739
msgid ""
2740
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2741
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2742
"following command at a terminal prompt to restart your web server: "
2743
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2744
msgstr ""
2745
2746
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2747
msgid "Testing"
2748
msgstr "Prebes"
2749
2750
#: serverguide/C/web-servers.xml:754(para)
2751
msgid ""
2752
"To verify your installation, you can run following PHP5 phpinfo script:"
2753
msgstr ""
2754
2755
#: serverguide/C/web-servers.xml:757(programlisting)
2756
#, no-wrap
2757
msgid ""
2758
"\n"
2759
"<?php\n"
2760
" phpinfo();\n"
2761
"?>\n"
2762
msgstr ""
2763
"\n"
2764
"<?php\n"
2765
" phpinfo();\n"
2766
"?>\n"
2767
2768
#: serverguide/C/web-servers.xml:762(para)
2769
msgid ""
2770
"You can save the content in a file <filename>phpinfo.php</filename> and "
2771
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2772
"server. When point your browser to "
2773
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2774
"various PHP5 configuration parameters."
2775
msgstr ""
2776
2777
#: serverguide/C/web-servers.xml:776(para)
2778
msgid ""
2779
"For more in depth information see <ulink "
2780
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2781
msgstr ""
2782
2783
#: serverguide/C/web-servers.xml:781(para)
2784
msgid ""
2785
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2786
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2787
"5</ulink> and the <ulink "
2788
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2789
msgstr ""
2790
2791
#: serverguide/C/web-servers.xml:788(para)
2792
msgid ""
2793
"Also, see the <ulink "
2794
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2795
"Ubuntu Wiki</ulink> page for more information."
2796
msgstr ""
2797
2798
#: serverguide/C/web-servers.xml:799(title)
2799
msgid "Squid - Proxy Server"
2800
msgstr "Sirvidor proxy Squid"
2801
2802
#: serverguide/C/web-servers.xml:800(para)
2803
msgid ""
2804
"Squid is a full-featured web proxy cache server application which provides "
2805
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2806
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2807
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2808
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2809
"caching. Squid also supports a wide variety of caching protocols, such as "
2810
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2811
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2812
"Protocol. (WCCP)"
2813
msgstr ""
2814
2815
#: serverguide/C/web-servers.xml:808(para)
2816
msgid ""
2817
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2818
"and caching server needs, and scales from the branch office to enterprise "
2819
"level networks while providing extensive, granular access control mechanisms "
2820
"and monitoring of critical parameters via the Simple Network Management "
2821
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2822
"Squid proxy, or caching servers, ensure your system is configured with a "
2823
"large amount of physical memory, as Squid maintains an in-memory cache for "
2824
"increased performance."
2825
msgstr ""
2826
2827
#: serverguide/C/web-servers.xml:817(para)
2828
msgid ""
2829
"At a terminal prompt, enter the following command to install the Squid "
2830
"server:"
2831
msgstr ""
2832
2833
#: serverguide/C/web-servers.xml:822(command)
2834
msgid "sudo apt-get install squid"
2835
msgstr "sudo apt-get install squid"
2836
2837
#: serverguide/C/web-servers.xml:828(para)
2838
msgid ""
2839
"Squid is configured by editing the directives contained within the "
2840
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2841
"examples illustrate some of the directives which may be modified to affect "
2842
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2843
"see the References section."
2844
msgstr ""
2845
2846
#: serverguide/C/web-servers.xml:834(para)
2847
msgid ""
2848
"Prior to editing the configuration file, you should make a copy of the "
2849
"original file and protect it from writing so you will have the original "
2850
"settings as a reference, and to re-use as necessary."
2851
msgstr ""
2852
2853
#: serverguide/C/web-servers.xml:837(para)
2854
msgid ""
2855
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2856
"writing with the following commands entered at a terminal prompt:"
2857
msgstr ""
2858
2859
#: serverguide/C/web-servers.xml:842(command)
2860
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2861
msgstr ""
2862
2863
#: serverguide/C/web-servers.xml:843(command)
2864
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2865
msgstr ""
2866
2867
#: serverguide/C/web-servers.xml:849(para)
2868
msgid ""
2869
"To set your Squid server to listen on TCP port 8888 instead of the default "
2870
"TCP port 3128, change the http_port directive as such:"
2871
msgstr ""
2872
2873
#: serverguide/C/web-servers.xml:853(programlisting)
2874
#, no-wrap
2875
msgid ""
2876
"\n"
2877
"http_port 8888\n"
2878
msgstr ""
2879
2880
#: serverguide/C/web-servers.xml:858(para)
2881
msgid ""
2882
"Change the visible_hostname directive in order to give the Squid server a "
2883
"specific hostname. This hostname does not necessarily need to be the "
2884
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2885
msgstr ""
2886
2887
#: serverguide/C/web-servers.xml:862(programlisting)
2888
#, no-wrap
2889
msgid ""
2890
"\n"
2891
"visible_hostname weezie\n"
2892
msgstr ""
2893
2894
#: serverguide/C/web-servers.xml:867(para)
2895
msgid ""
2896
"Using Squid's access control, you may configure use of Internet services "
2897
"proxied by Squid to be available only users with certain Internet Protocol "
2898
"(IP) addresses. For example, we will illustrate access by users of the "
2899
"192.168.42.0/24 subnetwork only:"
2900
msgstr ""
2901
2902
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2903
msgid ""
2904
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2905
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2906
msgstr ""
2907
2908
#: serverguide/C/web-servers.xml:875(programlisting)
2909
#, no-wrap
2910
msgid ""
2911
"\n"
2912
"acl fortytwo_network src 192.168.42.0/24\n"
2913
msgstr ""
2914
2915
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2916
msgid ""
2917
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2918
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2919
msgstr ""
2920
2921
#: serverguide/C/web-servers.xml:882(programlisting)
2922
#, no-wrap
2923
msgid ""
2924
"\n"
2925
"http_access allow fortytwo_network\n"
2926
msgstr ""
2927
2928
#: serverguide/C/web-servers.xml:887(para)
2929
msgid ""
2930
"Using the excellent access control features of Squid, you may configure use "
2931
"of Internet services proxied by Squid to be available only during normal "
2932
"business hours. For example, we'll illustrate access by employees of a "
2933
"business which is operating between 9:00AM and 5:00PM, Monday through "
2934
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2935
msgstr ""
2936
2937
#: serverguide/C/web-servers.xml:895(programlisting)
2938
#, no-wrap
2939
msgid ""
2940
"\n"
2941
"acl biz_network src 10.1.42.0/24\n"
2942
"acl biz_hours time M T W T F 9:00-17:00\n"
2943
msgstr ""
2944
2945
#: serverguide/C/web-servers.xml:903(programlisting)
2946
#, no-wrap
2947
msgid ""
2948
"\n"
2949
"http_access allow biz_network biz_hours\n"
2950
msgstr ""
2951
2952
#: serverguide/C/web-servers.xml:910(para)
2953
msgid ""
2954
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2955
"save the file and restart the <application>squid</application> server "
2956
"application to effect the changes using the following command entered at a "
2957
"terminal prompt:"
2958
msgstr ""
2959
2960
#: serverguide/C/web-servers.xml:917(command)
2961
msgid "sudo /etc/init.d/squid restart"
2962
msgstr ""
2963
2964
#: serverguide/C/web-servers.xml:924(ulink)
2965
msgid "Squid Website"
2966
msgstr ""
2967
2968
#: serverguide/C/web-servers.xml:926(para)
2969
msgid ""
2970
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2971
"Squid</ulink> page."
2972
msgstr ""
2973
2974
#: serverguide/C/web-servers.xml:933(title)
2975
msgid "Ruby on Rails"
2976
msgstr ""
2977
2978
#: serverguide/C/web-servers.xml:934(para)
2979
msgid ""
2980
"Ruby on Rails is an open source web framework for developing database backed "
2981
"web applications. It is optimized for sustainable productivity of the "
2982
"programmer since it lets the programmer to write code by favouring "
2983
"convention over configuration."
2984
msgstr ""
2985
2986
#: serverguide/C/web-servers.xml:941(para)
2987
msgid ""
2988
"Before installing <application>Rails</application> you should install "
2989
"<application>Apache</application> and <application>MySQL</application>. To "
2990
"install the <application>Apache</application> package, please refer to <xref "
2991
"linkend=\"httpd\"/>. For instructions on installing "
2992
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
2993
msgstr ""
2994
2995
#: serverguide/C/web-servers.xml:949(para)
2996
msgid ""
2997
"Once you have <application>Apache</application> and "
2998
"<application>MySQL</application> packages installed, you are ready to "
2999
"install <application>Ruby on Rails</application> package."
3000
msgstr ""
3001
3002
#: serverguide/C/web-servers.xml:956(para)
3003
msgid ""
3004
"To install the <application>Ruby</application> base packages and "
3005
"<application>Ruby on Rails</application>, you can enter the following "
3006
"command in the terminal prompt:"
3007
msgstr ""
3008
3009
#: serverguide/C/web-servers.xml:962(command)
3010
msgid "sudo apt-get install rails"
3011
msgstr ""
3012
3013
#: serverguide/C/web-servers.xml:968(para)
3014
msgid ""
3015
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3016
"configuration file to setup your domains."
3017
msgstr ""
3018
3019
#: serverguide/C/web-servers.xml:972(para)
3020
msgid ""
3021
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3022
msgstr ""
3023
3024
#: serverguide/C/web-servers.xml:976(programlisting)
3025
#, no-wrap
3026
msgid ""
3027
"\n"
3028
"DocumentRoot /path/to/rails/application/public\n"
3029
msgstr ""
3030
3031
#: serverguide/C/web-servers.xml:979(para)
3032
msgid ""
3033
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3034
"directive:"
3035
msgstr ""
3036
3037
#: serverguide/C/web-servers.xml:983(programlisting)
3038
#, no-wrap
3039
msgid ""
3040
"\n"
3041
"<Directory \"/path/to/rails/application/public\">\n"
3042
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3043
" AllowOverride All\n"
3044
" Order allow,deny\n"
3045
" allow from all\n"
3046
" AddHandler cgi-script .cgi\n"
3047
"</Directory>\n"
3048
msgstr ""
3049
3050
#: serverguide/C/web-servers.xml:993(para)
3051
msgid ""
3052
"You should also enable the <application>mod_rewrite</application> module for "
3053
"Apache. To enable <application>mod_rewrite</application> module, please "
3054
"enter the following command in a terminal prompt:"
3055
msgstr ""
3056
3057
#: serverguide/C/web-servers.xml:999(command)
3058
msgid "sudo a2enmod rewrite"
3059
msgstr ""
3060
3061
#: serverguide/C/web-servers.xml:1002(para)
3062
msgid ""
3063
"Finally you will need to change the ownership of the "
3064
"<filename>/path/to/rails/application/public</filename> and "
3065
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3066
"used to run the <application>Apache</application> process:"
3067
msgstr ""
3068
3069
#: serverguide/C/web-servers.xml:1008(command)
3070
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
3071
msgstr ""
3072
3073
#: serverguide/C/web-servers.xml:1009(command)
3074
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3075
msgstr ""
3076
3077
#: serverguide/C/web-servers.xml:1012(para)
3078
msgid ""
3079
"That's it! Now you have your Server ready for your <application>Ruby on "
3080
"Rails</application> applications."
3081
msgstr ""
3082
3083
#: serverguide/C/web-servers.xml:1021(para)
3084
msgid ""
3085
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3086
"for more information."
3087
msgstr ""
3088
3089
#: serverguide/C/web-servers.xml:1026(para)
3090
msgid ""
3091
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3092
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3093
"resource."
3094
msgstr ""
3095
3096
#: serverguide/C/web-servers.xml:1032(para)
3097
msgid ""
3098
"Another place for more information is the <ulink "
3099
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
3100
"Wiki</ulink> page."
3101
msgstr ""
3102
3103
#: serverguide/C/web-servers.xml:1043(title)
3104
msgid "Apache Tomcat"
3105
msgstr ""
3106
3107
#: serverguide/C/web-servers.xml:1044(para)
3108
msgid ""
3109
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3110
"JSP (Java Server Pages) web applications."
3111
msgstr ""
3112
3113
#: serverguide/C/web-servers.xml:1046(para)
3114
msgid ""
3115
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3116
"different ways of running Tomcat. You can install them as a classic unique "
3117
"system-wide instance, that will be started at boot time and will run as the "
3118
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3119
"will run with your own user rights, and that you should start and stop by "
3120
"yourself. This second way is particularly useful in a development server "
3121
"context where multiple users need to test on their own private Tomcat "
3122
"instances."
3123
msgstr ""
3124
3125
#: serverguide/C/web-servers.xml:1056(title)
3126
msgid "System-wide installation"
3127
msgstr ""
3128
3129
#: serverguide/C/web-servers.xml:1057(para)
3130
msgid ""
3131
"To install the <application>Tomcat</application> server, you can enter the "
3132
"following command in the terminal prompt:"
3133
msgstr ""
3134
3135
#: serverguide/C/web-servers.xml:1060(command)
3136
msgid "sudo apt-get install tomcat6"
3137
msgstr ""
3138
3139
#: serverguide/C/web-servers.xml:1062(para)
3140
msgid ""
3141
"This will install a Tomcat server with just a default ROOT webapp that "
3142
"displays a minimal \"It works\" page by default."
3143
msgstr ""
3144
3145
#: serverguide/C/web-servers.xml:1068(para)
3146
msgid ""
3147
"Tomcat configuration files can be found in "
3148
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
3149
"will be described here, please see <ulink "
3150
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
3151
"documentation</ulink> for more."
3152
msgstr ""
3153
3154
#: serverguide/C/web-servers.xml:1074(title)
3155
msgid "Changing default ports"
3156
msgstr ""
3157
3158
#: serverguide/C/web-servers.xml:1075(para)
3159
msgid ""
3160
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
3161
"connector on port 8009. You might want to change those default ports to "
3162
"avoid conflict with another server on the system. This is done by changing "
3163
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
3164
msgstr ""
3165
3166
#: serverguide/C/web-servers.xml:1080(programlisting)
3167
#, no-wrap
3168
msgid ""
3169
"\n"
3170
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
3171
" connectionTimeout=\"20000\" \n"
3172
" redirectPort=\"8443\" />\n"
3173
"...\n"
3174
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
3175
"/>\n"
3176
msgstr ""
3177
3178
#: serverguide/C/web-servers.xml:1089(title)
3179
msgid "Changing JVM used"
3180
msgstr ""
3181
3182
#: serverguide/C/web-servers.xml:1090(para)
3183
msgid ""
3184
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
3185
"then try some other JVMs. If you have various JVMs installed, you can set "
3186
"which should be used by setting JAVA_HOME in "
3187
"<filename>/etc/default/tomcat6</filename>:"
3188
msgstr ""
3189
3190
#: serverguide/C/web-servers.xml:1094(programlisting)
3191
#, no-wrap
3192
msgid ""
3193
"\n"
3194
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
3195
msgstr ""
3196
3197
#: serverguide/C/web-servers.xml:1099(title)
3198
msgid "Declaring users and roles"
3199
msgstr ""
3200
3201
#: serverguide/C/web-servers.xml:1100(para)
3202
msgid ""
3203
"Usernames, passwords and roles (groups) can be defined centrally in a "
3204
"Servlet container. In Tomcat 6.0 this is done in the "
3205
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
3206
msgstr ""
3207
3208
#: serverguide/C/web-servers.xml:1103(programlisting)
3209
#, no-wrap
3210
msgid ""
3211
"\n"
3212
"<role rolename=\"admin\"/>\n"
3213
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
3214
msgstr ""
3215
3216
#: serverguide/C/web-servers.xml:1111(title)
3217
msgid "Using Tomcat standard webapps"
3218
msgstr ""
3219
3220
#: serverguide/C/web-servers.xml:1112(para)
3221
msgid ""
3222
"Tomcat is shipped with webapps that you can install for documentation, "
3223
"administration or demo purposes."
3224
msgstr ""
3225
3226
#: serverguide/C/web-servers.xml:1115(title)
3227
msgid "Tomcat documentation"
3228
msgstr ""
3229
3230
#: serverguide/C/web-servers.xml:1116(para)
3231
msgid ""
3232
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3233
"documentation, packaged as a webapp that you can access by default at "
3234
"http://yourserver:8080/docs. You can install it by entering the following "
3235
"command in the terminal prompt:"
3236
msgstr ""
3237
3238
#: serverguide/C/web-servers.xml:1121(command)
3239
msgid "sudo apt-get install tomcat6-docs"
3240
msgstr ""
3241
3242
#: serverguide/C/web-servers.xml:1125(title)
3243
msgid "Tomcat administration webapps"
3244
msgstr ""
3245
3246
#: serverguide/C/web-servers.xml:1126(para)
3247
msgid ""
3248
"The <application>tomcat6-admin</application> package contains two webapps "
3249
"that can be used to administer the Tomcat server using a web interface. You "
3250
"can install them by entering the following command in the terminal prompt:"
3251
msgstr ""
3252
3253
#: serverguide/C/web-servers.xml:1131(command)
3254
msgid "sudo apt-get install tomcat6-admin"
3255
msgstr ""
3256
3257
#: serverguide/C/web-servers.xml:1133(para)
3258
msgid ""
3259
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3260
"access by default at http://yourserver:8080/manager/html. It is primarily "
3261
"used to get server status and restart webapps."
3262
msgstr ""
3263
3264
#: serverguide/C/web-servers.xml:1136(para)
3265
msgid ""
3266
"Access to the <emphasis>manager</emphasis> application is protected by "
3267
"default: you need to define a user with the role \"manager\" in "
3268
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3269
msgstr ""
3270
3271
#: serverguide/C/web-servers.xml:1140(para)
3272
msgid ""
3273
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3274
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3275
"used to create virtual hosts dynamically."
3276
msgstr ""
3277
3278
#: serverguide/C/web-servers.xml:1144(para)
3279
msgid ""
3280
"Access to the <emphasis>host-manager</emphasis> application is also "
3281
"protected by default: you need to define a user with the role \"admin\" in "
3282
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3283
msgstr ""
3284
3285
#: serverguide/C/web-servers.xml:1149(para)
3286
msgid ""
3287
"For security reasons, the tomcat6 user cannot write to the "
3288
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3289
"these admin webapps (application deployment, virtual host creation) need "
3290
"write access to that directory. If you want to use these features execute "
3291
"the following, to give users in the tomcat6 group the necessary rights:"
3292
msgstr ""
3293
3294
#: serverguide/C/web-servers.xml:1156(command)
3295
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3296
msgstr ""
3297
3298
#: serverguide/C/web-servers.xml:1157(command)
3299
msgid "sudo chmod -R g+w /etc/tomcat6"
3300
msgstr ""
3301
3302
#: serverguide/C/web-servers.xml:1162(title)
3303
msgid "Tomcat examples webapps"
3304
msgstr ""
3305
3306
#: serverguide/C/web-servers.xml:1163(para)
3307
msgid ""
3308
"The <application>tomcat6-examples</application> package contains two webapps "
3309
"that can be used to test or demonstrate Servlets and JSP features, which you "
3310
"can access them by default at http://yourserver:8080/examples. You can "
3311
"install them by entering the following command in the terminal prompt:"
3312
msgstr ""
3313
3314
#: serverguide/C/web-servers.xml:1169(command)
3315
msgid "sudo apt-get install tomcat6-examples"
3316
msgstr ""
3317
3318
#: serverguide/C/web-servers.xml:1175(title)
3319
msgid "Using private instances"
3320
msgstr ""
3321
3322
#: serverguide/C/web-servers.xml:1176(para)
3323
msgid ""
3324
"Tomcat is heavily used in development and testing scenarios where using a "
3325
"single system-wide instance doesn't meet the requirements of multiple users "
3326
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3327
"help deploy your own user-oriented instances, allowing every user on a "
3328
"system to run (without root rights) separate private instances while still "
3329
"using the system-installed libraries."
3330
msgstr ""
3331
3332
#: serverguide/C/web-servers.xml:1183(para)
3333
msgid ""
3334
"It is possible to run the system-wide instance and the private instances in "
3335
"parallel, as long as they do not use the same TCP ports."
3336
msgstr ""
3337
3338
#: serverguide/C/web-servers.xml:1187(title)
3339
msgid "Installing private instance support"
3340
msgstr ""
3341
3342
#: serverguide/C/web-servers.xml:1188(para)
3343
msgid ""
3344
"You can install everything necessary to run private instances by entering "
3345
"the following command in the terminal prompt:"
3346
msgstr ""
3347
3348
#: serverguide/C/web-servers.xml:1191(command)
3349
msgid "sudo apt-get install tomcat6-user"
3350
msgstr ""
3351
3352
#: serverguide/C/web-servers.xml:1195(title)
3353
msgid "Creating a private instance"
3354
msgstr ""
3355
3356
#: serverguide/C/web-servers.xml:1196(para)
3357
msgid ""
3358
"You can create a private instance directory by entering the following "
3359
"command in the terminal prompt:"
3360
msgstr ""
3361
3362
#: serverguide/C/web-servers.xml:1199(command)
3363
msgid "tomcat6-instance-create my-instance"
3364
msgstr ""
3365
3366
#: serverguide/C/web-servers.xml:1201(para)
3367
msgid ""
3368
"This will create a new <filename>my-instance</filename> directory with all "
3369
"the necessary subdirectories and scripts. You can for example install your "
3370
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3371
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3372
"are deployed by default."
3373
msgstr ""
3374
3375
#: serverguide/C/web-servers.xml:1209(title)
3376
msgid "Configuring your private instance"
3377
msgstr ""
3378
3379
#: serverguide/C/web-servers.xml:1210(para)
3380
msgid ""
3381
"You will find the classic Tomcat configuration files for your private "
3382
"instance in the <filename>conf/</filename> subdirectory. You should for "
3383
"example certainly edit the <filename>conf/server.xml</filename> file to "
3384
"change the default ports used by your private Tomcat instance to avoid "
3385
"conflict with other instances that might be running."
3386
msgstr ""
3387
3388
#: serverguide/C/web-servers.xml:1218(title)
3389
msgid "Starting/stopping your private instance"
3390
msgstr ""
3391
3392
#: serverguide/C/web-servers.xml:1219(para)
3393
msgid ""
3394
"You can start your private instance by entering the following command in the "
3395
"terminal prompt (supposing your instance is located in the <filename>my-"
3396
"instance</filename> directory):"
3397
msgstr ""
3398
3399
#: serverguide/C/web-servers.xml:1223(command)
3400
msgid "my-instance/bin/startup.sh"
3401
msgstr ""
3402
3403
#: serverguide/C/web-servers.xml:1225(para)
3404
msgid ""
3405
"You should check the <filename>logs/</filename> subdirectory for any error. "
3406
"If you have a <emphasis>java.net.BindException: Address already in "
3407
"use<null>:8080</emphasis> error, it means that the port you're using "
3408
"is already taken and that you should change it."
3409
msgstr ""
3410
3411
#: serverguide/C/web-servers.xml:1230(para)
3412
msgid ""
3413
"You can stop your instance by entering the following command in the terminal "
3414
"prompt (supposing your instance is located in the <filename>my-"
3415
"instance</filename> directory):"
3416
msgstr ""
3417
3418
#: serverguide/C/web-servers.xml:1234(command)
3419
msgid "my-instance/bin/shutdown.sh"
3420
msgstr ""
3421
3422
#: serverguide/C/web-servers.xml:1243(para)
3423
msgid ""
3424
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3425
"website for more information."
3426
msgstr ""
3427
3428
#: serverguide/C/web-servers.xml:1248(para)
3429
msgid ""
3430
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3431
"Definitive Guide</ulink> is a good resource for building web applications "
3432
"with Tomcat."
3433
msgstr ""
3434
3435
#: serverguide/C/web-servers.xml:1254(para)
3436
msgid ""
3437
"For additional books see the <ulink "
3438
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3439
"page."
3440
msgstr ""
3441
3442
#: serverguide/C/web-servers.xml:1259(para)
3443
msgid ""
3444
"Also, see the<ulink "
3445
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3446
"Tomcat</ulink> page."
3447
msgstr ""
3448
3449
#: serverguide/C/vpn.xml:13(title)
3450
msgid "VPN"
3451
msgstr ""
3452
3453
#: serverguide/C/vpn.xml:15(para)
3454
msgid ""
3455
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3456
"network connection between two or more networks. There are several ways to "
3457
"create a VPN using software as well as dedicated hardware appliances. This "
3458
"chapter will cover installing and configuring "
3459
"<application>OpenVPN</application> to create a VPN between two servers."
3460
msgstr ""
3461
3462
#: serverguide/C/vpn.xml:23(title)
3463
msgid "OpenVPN"
3464
msgstr ""
3465
3466
#: serverguide/C/vpn.xml:25(para)
3467
msgid ""
3468
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3469
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3470
"clients through a bridge interface on the VPN server. This guide will assume "
3471
"that one VPN node, the server in this case, has a bridge interface "
3472
"configured. For more information on setting up a bridge see <xref "
3473
"linkend=\"bridging\"/>."
3474
msgstr ""
3475
3476
#: serverguide/C/vpn.xml:35(para)
3477
msgid "To install <application>openvpn</application> in a terminal enter:"
3478
msgstr ""
3479
3480
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3481
msgid "sudo apt-get install openvpn"
3482
msgstr ""
3483
3484
#: serverguide/C/vpn.xml:45(title)
3485
msgid "Server Certificates"
3486
msgstr ""
3487
3488
#: serverguide/C/vpn.xml:47(para)
3489
msgid ""
3490
"Now that the <application>openvpn</application> package is installed, the "
3491
"certificates for the VPN server need to be created."
3492
msgstr ""
3493
3494
#: serverguide/C/vpn.xml:52(para)
3495
msgid ""
3496
"First, copy the <filename>easy-rsa</filename> directory to "
3497
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3498
"scripts will not be lost when the package is updated. You will also need to "
3499
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3500
"the current user permission to create files. From a terminal enter:"
3501
msgstr ""
3502
3503
#: serverguide/C/vpn.xml:59(command)
3504
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3505
msgstr ""
3506
3507
#: serverguide/C/vpn.xml:60(command)
3508
msgid ""
3509
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3510
"rsa/"
3511
msgstr ""
3512
3513
#: serverguide/C/vpn.xml:61(command)
3514
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3515
msgstr ""
3516
3517
#: serverguide/C/vpn.xml:64(para)
3518
msgid ""
3519
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3520
"following to your environment:"
3521
msgstr ""
3522
3523
#: serverguide/C/vpn.xml:68(programlisting)
3524
#, no-wrap
3525
msgid ""
3526
"\n"
3527
"export KEY_COUNTRY=\"US\"\n"
3528
"export KEY_PROVINCE=\"NC\"\n"
3529
"export KEY_CITY=\"Winston-Salem\"\n"
3530
"export KEY_ORG=\"Example Company\"\n"
3531
"export KEY_EMAIL=\"steve@example.com\"\n"
3532
msgstr ""
3533
3534
#: serverguide/C/vpn.xml:76(para)
3535
msgid "Enter the following to create the server certificates:"
3536
msgstr ""
3537
3538
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3539
msgid "cd /etc/openvpn/easy-rsa/"
3540
msgstr ""
3541
3542
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3543
msgid "source vars"
3544
msgstr ""
3545
3546
#: serverguide/C/vpn.xml:83(command)
3547
msgid "./clean-all"
3548
msgstr ""
3549
3550
#: serverguide/C/vpn.xml:84(command)
3551
msgid "./build-dh"
3552
msgstr ""
3553
3554
#: serverguide/C/vpn.xml:85(command)
3555
msgid "./pkitool --initca"
3556
msgstr ""
3557
3558
#: serverguide/C/vpn.xml:86(command)
3559
msgid "./pkitool --server server"
3560
msgstr ""
3561
3562
#: serverguide/C/vpn.xml:87(command)
3563
msgid "cd keys"
3564
msgstr ""
3565
3566
#: serverguide/C/vpn.xml:88(command)
3567
msgid "openvpn --genkey --secret ta.key"
3568
msgstr ""
3569
3570
#: serverguide/C/vpn.xml:89(command)
3571
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3572
msgstr ""
3573
3574
#: serverguide/C/vpn.xml:94(title)
3575
msgid "Client Certificates"
3576
msgstr ""
3577
3578
#: serverguide/C/vpn.xml:96(para)
3579
msgid ""
3580
"The VPN client will also need a certificate to authenticate itself to the "
3581
"server. To create the certificate, enter the following in a terminal:"
3582
msgstr ""
3583
3584
#: serverguide/C/vpn.xml:104(command)
3585
msgid "./pkitool hostname"
3586
msgstr ""
3587
3588
#: serverguide/C/vpn.xml:108(para)
3589
msgid ""
3590
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3591
"machine connecting to the VPN."
3592
msgstr ""
3593
3594
#: serverguide/C/vpn.xml:113(para)
3595
msgid "Copy the following files to the client:"
3596
msgstr ""
3597
3598
#: serverguide/C/vpn.xml:118(para)
3599
msgid "/etc/openvpn/ca.crt"
3600
msgstr ""
3601
3602
#: serverguide/C/vpn.xml:119(para)
3603
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3604
msgstr ""
3605
3606
#: serverguide/C/vpn.xml:120(para)
3607
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3608
msgstr ""
3609
3610
#: serverguide/C/vpn.xml:121(para)
3611
msgid "/etc/openvpn/ta.key"
3612
msgstr ""
3613
3614
#: serverguide/C/vpn.xml:125(para)
3615
msgid ""
3616
"Remember to adjust the above file names for your client machine's "
3617
"<emphasis>hostname</emphasis>."
3618
msgstr ""
3619
3620
#: serverguide/C/vpn.xml:130(para)
3621
msgid ""
3622
"It is best to use a secure method to copy the certificate and key files. The "
3623
"<application>scp</application> utility is a good choice, but copying the "
3624
"files to removable media then to the client, also works well."
3625
msgstr ""
3626
3627
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3628
msgid "Server Configuration"
3629
msgstr ""
3630
3631
#: serverguide/C/vpn.xml:143(para)
3632
msgid ""
3633
"Now configure the <application>openvpn</application> server by creating "
3634
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3635
"terminal enter:"
3636
msgstr ""
3637
3638
#: serverguide/C/vpn.xml:149(command)
3639
msgid ""
3640
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3641
"/etc/openvpn/"
3642
msgstr ""
3643
3644
#: serverguide/C/vpn.xml:150(command)
3645
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3646
msgstr ""
3647
3648
#: serverguide/C/vpn.xml:153(para)
3649
msgid ""
3650
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3651
"options to:"
3652
msgstr ""
3653
3654
#: serverguide/C/vpn.xml:157(programlisting)
3655
#, no-wrap
3656
msgid ""
3657
"\n"
3658
"local 172.18.100.101\n"
3659
"dev tap0\n"
3660
"up \"/etc/openvpn/up.sh br0\"\n"
3661
"down \"/etc/openvpn/down.sh br0\"\n"
3662
";server 10.8.0.0 255.255.255.0\n"
3663
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3664
"push \"route 172.18.100.1 255.255.255.0\"\n"
3665
"push \"dhcp-option DNS 172.18.100.20\"\n"
3666
"push \"dhcp-option DOMAIN example.com\"\n"
3667
"tls-auth ta.key 0 # This file is secret\n"
3668
"user nobody\n"
3669
"group nogroup\n"
3670
msgstr ""
3671
3672
#: serverguide/C/vpn.xml:174(para)
3673
msgid ""
3674
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3675
msgstr ""
3676
3677
#: serverguide/C/vpn.xml:179(para)
3678
msgid ""
3679
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3680
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3681
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3682
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3683
"to clients."
3684
msgstr ""
3685
3686
#: serverguide/C/vpn.xml:186(para)
3687
msgid ""
3688
"<emphasis>push</emphasis>: are directives to add networking options for "
3689
"clients."
3690
msgstr ""
3691
3692
#: serverguide/C/vpn.xml:191(para)
3693
msgid ""
3694
"<emphasis>user and group</emphasis>: configure which user and group the "
3695
"<application>openvpn</application> daemon executes as."
3696
msgstr ""
3697
3698
#: serverguide/C/vpn.xml:198(para)
3699
msgid ""
3700
"Replace all IP addresses and domain names above with those of your network."
3701
msgstr ""
3702
3703
#: serverguide/C/vpn.xml:203(para)
3704
msgid ""
3705
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3706
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3707
msgstr ""
3708
3709
#: serverguide/C/vpn.xml:207(programlisting)
3710
#, no-wrap
3711
msgid ""
3712
"\n"
3713
"#!/bin/sh\n"
3714
"\n"
3715
"BR=$1\n"
3716
"DEV=$2\n"
3717
"MTU=$3\n"
3718
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3719
"/usr/sbin/brctl addif $BR $DEV\n"
3720
msgstr ""
3721
3722
#: serverguide/C/vpn.xml:217(para)
3723
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3724
msgstr ""
3725
3726
#: serverguide/C/vpn.xml:221(programlisting)
3727
#, no-wrap
3728
msgid ""
3729
"\n"
3730
"#!/bin/sh\n"
3731
"\n"
3732
"BR=$1\n"
3733
"DEV=$2\n"
3734
"\n"
3735
"/usr/sbin/brctl delif $BR $DEV\n"
3736
"/sbin/ifconfig $DEV down\n"
3737
msgstr ""
3738
3739
#: serverguide/C/vpn.xml:231(para)
3740
msgid "Then make them executable:"
3741
msgstr ""
3742
3743
#: serverguide/C/vpn.xml:236(command)
3744
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3745
msgstr ""
3746
3747
#: serverguide/C/vpn.xml:237(command)
3748
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3749
msgstr ""
3750
3751
#: serverguide/C/vpn.xml:240(para)
3752
msgid ""
3753
"After configuring the server, restart <application>openvpn</application> by "
3754
"entering:"
3755
msgstr ""
3756
3757
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3758
msgid "sudo /etc/init.d/openvpn restart"
3759
msgstr ""
3760
3761
#: serverguide/C/vpn.xml:250(title)
3762
msgid "Client Configuration"
3763
msgstr ""
3764
3765
#: serverguide/C/vpn.xml:252(para)
3766
msgid "First, install <application>openvpn</application> on the client:"
3767
msgstr ""
3768
3769
#: serverguide/C/vpn.xml:260(para)
3770
msgid ""
3771
"Then with the server configured and the client certificates copied to the "
3772
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3773
"file by copying the example. In a terminal on the client machine enter:"
3774
msgstr ""
3775
3776
#: serverguide/C/vpn.xml:266(command)
3777
msgid ""
3778
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3779
"/etc/openvpn"
3780
msgstr ""
3781
3782
#: serverguide/C/vpn.xml:269(para)
3783
msgid ""
3784
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3785
"following options:"
3786
msgstr ""
3787
3788
#: serverguide/C/vpn.xml:273(programlisting)
3789
#, no-wrap
3790
msgid ""
3791
"\n"
3792
"dev tap\n"
3793
"remote vpn.example.com 1194\n"
3794
"cert hostname.crt\n"
3795
"key hostname.key\n"
3796
"tls-auth ta.key 1\n"
3797
msgstr ""
3798
3799
#: serverguide/C/vpn.xml:282(para)
3800
msgid ""
3801
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3802
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3803
"key filenames."
3804
msgstr ""
3805
3806
#: serverguide/C/vpn.xml:288(para)
3807
msgid "Finally, restart <application>openvpn</application>:"
3808
msgstr ""
3809
3810
#: serverguide/C/vpn.xml:296(para)
3811
msgid "You should now be able to connect to the remote LAN through the VPN."
3812
msgstr ""
3813
3814
#: serverguide/C/vpn.xml:307(para)
3815
msgid ""
3816
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3817
"additional information."
3818
msgstr ""
3819
3820
#: serverguide/C/vpn.xml:312(para)
3821
msgid ""
3822
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3823
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3824
msgstr ""
3825
3826
#: serverguide/C/vpn.xml:318(para)
3827
msgid ""
3828
"Another source of further information is the <ulink "
3829
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3830
"OpenVPN</ulink> page."
3831
msgstr ""
3832
3833
#: serverguide/C/virtualization.xml:13(title)
3834
msgid "Virtualization"
3835
msgstr ""
3836
3837
#: serverguide/C/virtualization.xml:14(para)
3838
msgid ""
3839
"Virtualization is being adopted in many different environments and "
3840
"situations. If you are a developer, virtualization can provide you with a "
3841
"contained environment where you can safely do almost any sort of development "
3842
"safe from messing up your main working environment. If you are a systems "
3843
"administrator, you can use virtualization to more easily separate your "
3844
"services and move them around based on demand."
3845
msgstr ""
3846
3847
#: serverguide/C/virtualization.xml:20(para)
3848
msgid ""
3849
"The default virtualization technology supported in Ubuntu is "
3850
"<application>KVM</application>, a technology that takes advantage of "
3851
"virtualization extensions built into Intel and AMD hardware. For hardware "
3852
"without virtualization extensions <application>Xen</application> and "
3853
"<application>Qemu</application> are popular solutions."
3854
msgstr ""
3855
3856
#: serverguide/C/virtualization.xml:27(title)
3857
msgid "libvirt"
3858
msgstr ""
3859
3860
#: serverguide/C/virtualization.xml:28(para)
3861
msgid ""
3862
"The <application>libvirt</application> library is used to interface with "
3863
"different virtualization technologies. Before getting started with "
3864
"<application>libvirt</application> it is best to make sure your hardware "
3865
"supports the necessary virtualization extensions for "
3866
"<application>KVM</application>. Enter the following from a terminal prompt:"
3867
msgstr ""
3868
3869
#: serverguide/C/virtualization.xml:35(command)
3870
msgid "kvm-ok"
3871
msgstr ""
3872
3873
#: serverguide/C/virtualization.xml:37(para)
3874
msgid ""
3875
"A message will be printed informing you if your CPU "
3876
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3877
"virtualization."
3878
msgstr ""
3879
3880
#: serverguide/C/virtualization.xml:41(para)
3881
msgid ""
3882
"On most computer whose processor supports virtualization, it is necessary to "
3883
"activate an option in the BIOS to enable it."
3884
msgstr ""
3885
3886
#: serverguide/C/virtualization.xml:47(title)
3887
msgid "Virtual Networking"
3888
msgstr ""
3889
3890
#: serverguide/C/virtualization.xml:49(para)
3891
msgid ""
3892
"There are a few different ways to allow a virtual machine access to the "
3893
"external network. The default virtual network configuration is "
3894
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3895
"traffic is NATed through the host interface to the outside network."
3896
msgstr ""
3897
3898
#: serverguide/C/virtualization.xml:54(para)
3899
msgid ""
3900
"To enable external hosts to directly access services on virtual machines a "
3901
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3902
"interfaces to connect to the outside network through the physical interface, "
3903
"making them appear as normal hosts to the rest of the network. For "
3904
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3905
msgstr ""
3906
3907
#: serverguide/C/virtualization.xml:63(para)
3908
msgid "To install the necessary packages, from a terminal prompt enter:"
3909
msgstr ""
3910
3911
#: serverguide/C/virtualization.xml:67(command)
3912
msgid "sudo apt-get install kvm libvirt-bin"
3913
msgstr ""
3914
3915
#: serverguide/C/virtualization.xml:69(para)
3916
msgid ""
3917
"After installing <application>libvirt-bin</application>, the user used to "
3918
"manage virtual machines will need to be added to the "
3919
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3920
"the advanced networking options."
3921
msgstr ""
3922
3923
#: serverguide/C/virtualization.xml:73(para)
3924
msgid "In a terminal enter:"
3925
msgstr ""
3926
3927
#: serverguide/C/virtualization.xml:77(command)
3928
msgid "sudo adduser $USER libvirtd"
3929
msgstr ""
3930
3931
#: serverguide/C/virtualization.xml:80(para)
3932
msgid ""
3933
"If the user chosen is the current user, you will need to log out and back in "
3934
"for the new group membership to take effect."
3935
msgstr ""
3936
3937
#: serverguide/C/virtualization.xml:84(para)
3938
msgid ""
3939
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3940
"Installing a virtual machine follows the same process as installing the "
3941
"operating system directly on the hardware. You either need a way to automate "
3942
"the installation, or a keyboard and monitor will need to be attached to the "
3943
"physical machine."
3944
msgstr ""
3945
3946
#: serverguide/C/virtualization.xml:89(para)
3947
msgid ""
3948
"In the case of virtual machines a Graphical User Interface (GUI) is "
3949
"analogous to using a physical keyboard and mouse. Instead of installing a "
3950
"GUI the <application>virt-viewer</application> application can be used to "
3951
"connect to a virtual machine's console using <application>VNC</application>. "
3952
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3953
msgstr ""
3954
3955
#: serverguide/C/virtualization.xml:94(para)
3956
msgid ""
3957
"There are several ways to automate the Ubuntu installation process, for "
3958
"example using preseeds, kickstart, etc. Refer to the <ulink "
3959
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3960
"Installation Guide</ulink> for details."
3961
msgstr ""
3962
3963
#: serverguide/C/virtualization.xml:98(para)
3964
msgid ""
3965
"Yet another way to install an Ubuntu virtual machine is to use "
3966
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
3967
"builder</application> allows you to setup advanced partitions, execute "
3968
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
3969
"vmbuilder\"/>"
3970
msgstr ""
3971
3972
#: serverguide/C/virtualization.xml:104(title)
3973
msgid "virt-install"
3974
msgstr ""
3975
3976
#: serverguide/C/virtualization.xml:105(para)
3977
msgid ""
3978
"<application>virt-install</application> is part of the <application>python-"
3979
"virtinst</application> package. To install it, from a terminal prompt enter:"
3980
msgstr ""
3981
3982
#: serverguide/C/virtualization.xml:109(command)
3983
msgid "sudo apt-get install python-virtinst"
3984
msgstr ""
3985
3986
#: serverguide/C/virtualization.xml:111(para)
3987
msgid ""
3988
"There are several options available when using <application>virt-"
3989
"install</application>. For example:"
3990
msgstr ""
3991
3992
#: serverguide/C/virtualization.xml:115(command)
3993
msgid ""
3994
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
3995
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
3996
msgstr ""
3997
3998
#: serverguide/C/virtualization.xml:122(para)
3999
msgid ""
4000
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
4001
"be <emphasis>web_devel</emphasis> in this example."
4002
msgstr ""
4003
4004
#: serverguide/C/virtualization.xml:127(para)
4005
msgid ""
4006
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
4007
"machine will use."
4008
msgstr ""
4009
4010
#: serverguide/C/virtualization.xml:132(para)
4011
msgid ""
4012
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
4013
"disk which can be a file, partition, or logical volume. In this example a "
4014
"file named <filename>web_devel.img</filename>."
4015
msgstr ""
4016
4017
#: serverguide/C/virtualization.xml:138(para)
4018
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
4019
msgstr ""
4020
4021
#: serverguide/C/virtualization.xml:143(para)
4022
msgid ""
4023
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
4024
"file can be either an ISO file or the path to the host's CDROM device."
4025
msgstr ""
4026
4027
#: serverguide/C/virtualization.xml:149(para)
4028
msgid ""
4029
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
4030
"technologies."
4031
msgstr ""
4032
4033
#: serverguide/C/virtualization.xml:154(para)
4034
msgid ""
4035
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
4036
msgstr ""
4037
4038
#: serverguide/C/virtualization.xml:159(para)
4039
msgid ""
4040
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
4041
"virtual machine's console."
4042
msgstr ""
4043
4044
#: serverguide/C/virtualization.xml:164(para)
4045
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
4046
msgstr ""
4047
4048
#: serverguide/C/virtualization.xml:169(para)
4049
msgid ""
4050
"After launching <application>virt-install</application> you can connect to "
4051
"the virtual machine's console either locally using a GUI or with the "
4052
"<application>virt-viewer</application> utility."
4053
msgstr ""
4054
4055
#: serverguide/C/virtualization.xml:175(title)
4056
msgid "virt-clone"
4057
msgstr ""
4058
4059
#: serverguide/C/virtualization.xml:176(para)
4060
msgid ""
4061
"The <application>virt-clone</application> application can be used to copy "
4062
"one virtual machine to another. For example:"
4063
msgstr ""
4064
4065
#: serverguide/C/virtualization.xml:180(command)
4066
msgid ""
4067
"sudo virt-clone -o web_devel -n database_devel -f "
4068
"/path/to/database_devel.img --connect=qemu:///system"
4069
msgstr ""
4070
"sudo virt-clone -o web_devel -n database_devel -f /ruta/a/database_devel.img "
4071
"--connect=qemu:///system"
4072
4073
#: serverguide/C/virtualization.xml:184(para)
4074
msgid "<emphasis>-o:</emphasis> original virtual machine."
4075
msgstr "<emphasis>-o:</emphasis> máquina virtual orixinal."
4076
4077
#: serverguide/C/virtualization.xml:189(para)
4078
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
4079
msgstr "<emphasis>-n:</emphasis> nome de la nueva máquina virtual."
4080
4081
#: serverguide/C/virtualization.xml:194(para)
4082
msgid ""
4083
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
4084
"be used by the new virtual machine."
4085
msgstr ""
4086
4087
#: serverguide/C/virtualization.xml:199(para)
4088
msgid ""
4089
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
4090
msgstr ""
4091
4092
#: serverguide/C/virtualization.xml:204(para)
4093
msgid ""
4094
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
4095
"help troubleshoot problems with <application>virt-clone</application>."
4096
msgstr ""
4097
4098
#: serverguide/C/virtualization.xml:209(para)
4099
msgid ""
4100
"Replace <emphasis>web_devel</emphasis> and "
4101
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
4102
msgstr ""
4103
4104
#: serverguide/C/virtualization.xml:215(title)
4105
msgid "Virtual Machine Management"
4106
msgstr "Xestión de máquines virtuales"
4107
4108
#: serverguide/C/virtualization.xml:217(title)
4109
msgid "virsh"
4110
msgstr "virsh"
4111
4112
#: serverguide/C/virtualization.xml:218(para)
4113
msgid ""
4114
"There are several utilities available to manage virtual machines and "
4115
"<application>libvirt</application>. The <application>virsh</application> "
4116
"utility can be used from the command line. Some examples:"
4117
msgstr ""
4118
4119
#: serverguide/C/virtualization.xml:224(para)
4120
msgid "To list running virtual machines:"
4121
msgstr ""
4122
4123
#: serverguide/C/virtualization.xml:228(command)
4124
msgid "virsh -c qemu:///system list"
4125
msgstr "virsh -c qemu:///system list"
4126
4127
#: serverguide/C/virtualization.xml:232(para)
4128
msgid "To start a virtual machine:"
4129
msgstr ""
4130
4131
#: serverguide/C/virtualization.xml:236(command)
4132
msgid "virsh -c qemu:///system start web_devel"
4133
msgstr "virsh -c qemu:///system start web_devel"
4134
4135
#: serverguide/C/virtualization.xml:240(para)
4136
msgid "Similarly, to start a virtual machine at boot:"
4137
msgstr ""
4138
4139
#: serverguide/C/virtualization.xml:244(command)
4140
msgid "virsh -c qemu:///system autostart web_devel"
4141
msgstr "virsh -c qemu:///system autostart web_devel"
4142
4143
#: serverguide/C/virtualization.xml:248(para)
4144
msgid "Reboot a virtual machine with:"
4145
msgstr "Reanicie una máquina virtual con:"
4146
4147
#: serverguide/C/virtualization.xml:252(command)
4148
msgid "virsh -c qemu:///system reboot web_devel"
4149
msgstr "virsh -c qemu:///system reboot web_devel"
4150
4151
#: serverguide/C/virtualization.xml:256(para)
4152
msgid ""
4153
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
4154
"order to be restored later. The following will save the virtual machine "
4155
"state into a file named according to the date:"
4156
msgstr ""
4157
4158
#: serverguide/C/virtualization.xml:261(command)
4159
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
4160
msgstr "virsh -c qemu:///system save web_devel web_devel-022708.state"
4161
4162
#: serverguide/C/virtualization.xml:263(para)
4163
msgid "Once saved the virtual machine will no longer be running."
4164
msgstr ""
4165
4166
#: serverguide/C/virtualization.xml:268(para)
4167
msgid "A saved virtual machine can be restored using:"
4168
msgstr ""
4169
4170
#: serverguide/C/virtualization.xml:272(command)
4171
msgid "virsh -c qemu:///system restore web_devel-022708.state"
4172
msgstr ""
4173
4174
#: serverguide/C/virtualization.xml:276(para)
4175
msgid "To shutdown a virtual machine do:"
4176
msgstr ""
4177
4178
#: serverguide/C/virtualization.xml:280(command)
4179
msgid "virsh -c qemu:///system shutdown web_devel"
4180
msgstr ""
4181
4182
#: serverguide/C/virtualization.xml:284(para)
4183
msgid "A CDROM device can be mounted in a virtual machine by entering:"
4184
msgstr ""
4185
4186
#: serverguide/C/virtualization.xml:288(command)
4187
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
4188
msgstr ""
4189
4190
#: serverguide/C/virtualization.xml:293(para)
4191
msgid ""
4192
"In the above examples replace <emphasis>web_devel</emphasis> with the "
4193
"appropriate virtual machine name, and <filename>web_devel-"
4194
"022708.state</filename> with a descriptive file name."
4195
msgstr ""
4196
4197
#: serverguide/C/virtualization.xml:300(title)
4198
msgid "Virtual Machine Manager"
4199
msgstr ""
4200
4201
#: serverguide/C/virtualization.xml:301(para)
4202
msgid ""
4203
"The <application>virt-manager</application> package contains a graphical "
4204
"utility to manage local and remote virtual machines. To install virt-manager "
4205
"enter:"
4206
msgstr ""
4207
4208
#: serverguide/C/virtualization.xml:306(command)
4209
msgid "sudo apt-get install virt-manager"
4210
msgstr ""
4211
4212
#: serverguide/C/virtualization.xml:308(para)
4213
msgid ""
4214
"Since <application>virt-manager</application> requires a Graphical User "
4215
"Interface (GUI) environment it is recommended to be installed on a "
4216
"workstation or test machine instead of a production server. To connect to "
4217
"the local <application>libvirt</application> service enter:"
4218
msgstr ""
4219
4220
#: serverguide/C/virtualization.xml:314(command)
4221
msgid "virt-manager -c qemu:///system"
4222
msgstr ""
4223
4224
#: serverguide/C/virtualization.xml:316(para)
4225
msgid ""
4226
"You can connect to the <application>libvirt</application> service running on "
4227
"another host by entering the following in a terminal prompt:"
4228
msgstr ""
4229
4230
#: serverguide/C/virtualization.xml:320(command)
4231
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
4232
msgstr ""
4233
4234
#: serverguide/C/virtualization.xml:323(para)
4235
msgid ""
4236
"The above example assumes that <application>SSH</application> connectivity "
4237
"between the management system and virtnode1.mydomain.com has already been "
4238
"configured, and uses SSH keys for authentication. SSH "
4239
"<emphasis>keys</emphasis> are needed because "
4240
"<application>libvirt</application> sends the password prompt to another "
4241
"process. For details on configuring <application>SSH</application> see <xref "
4242
"linkend=\"openssh-server\"/>"
4243
msgstr ""
4244
4245
#: serverguide/C/virtualization.xml:333(title)
4246
msgid "Virtual Machine Viewer"
4247
msgstr ""
4248
4249
#: serverguide/C/virtualization.xml:334(para)
4250
msgid ""
4251
"The <application>virt-viewer</application> application allows you to connect "
4252
"to a virtual machine's console. <application>virt-viewer</application> does "
4253
"require a Graphical User Interface (GUI) to interface with the virtual "
4254
"machine."
4255
msgstr ""
4256
4257
#: serverguide/C/virtualization.xml:338(para)
4258
msgid ""
4259
"To install <application>virt-viewer</application> from a terminal enter:"
4260
msgstr ""
4261
4262
#: serverguide/C/virtualization.xml:342(command)
4263
msgid "sudo apt-get install virt-viewer"
4264
msgstr ""
4265
4266
#: serverguide/C/virtualization.xml:344(para)
4267
msgid ""
4268
"Once a virtual machine is installed and running you can connect to the "
4269
"virtual machine's console by using:"
4270
msgstr ""
4271
4272
#: serverguide/C/virtualization.xml:348(command)
4273
msgid "virt-viewer -c qemu:///system web_devel"
4274
msgstr ""
4275
4276
#: serverguide/C/virtualization.xml:350(para)
4277
msgid ""
4278
"Similar to <application>virt-manager</application>, <application>virt-"
4279
"viewer</application> can connect to a remote host using "
4280
"<emphasis>SSH</emphasis> with key authentication, as well:"
4281
msgstr ""
4282
4283
#: serverguide/C/virtualization.xml:355(command)
4284
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4285
msgstr ""
4286
4287
#: serverguide/C/virtualization.xml:357(para)
4288
msgid ""
4289
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4290
"appropriate virtual machine name."
4291
msgstr ""
4292
4293
#: serverguide/C/virtualization.xml:360(para)
4294
msgid ""
4295
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4296
"can also setup <application>SSH</application> access to the virtual machine. "
4297
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4298
"more details."
4299
msgstr ""
4300
4301
#: serverguide/C/virtualization.xml:369(para)
4302
msgid ""
4303
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4304
"for more details."
4305
msgstr ""
4306
4307
#: serverguide/C/virtualization.xml:374(para)
4308
msgid ""
4309
"For more information on <application>libvirt</application> see the <ulink "
4310
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4311
msgstr ""
4312
4313
#: serverguide/C/virtualization.xml:379(para)
4314
msgid ""
4315
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4316
"Manager</ulink> site has more information on <application>virt-"
4317
"manager</application> development."
4318
msgstr ""
4319
4320
#: serverguide/C/virtualization.xml:385(para)
4321
msgid ""
4322
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4323
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4324
"technology in Ubuntu."
4325
msgstr ""
4326
4327
#: serverguide/C/virtualization.xml:391(para)
4328
msgid ""
4329
"Another good resource is the <ulink "
4330
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4331
msgstr ""
4332
4333
#: serverguide/C/virtualization.xml:399(title)
4334
msgid "JeOS and vmbuilder"
4335
msgstr ""
4336
4337
#: serverguide/C/virtualization.xml:405(title)
4338
msgid "What is JeOS"
4339
msgstr ""
4340
4341
#: serverguide/C/virtualization.xml:407(para)
4342
msgid ""
4343
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4344
"variant of the Ubuntu Server operating system, configured specifically for "
4345
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4346
"only as an option either:"
4347
msgstr ""
4348
4349
#: serverguide/C/virtualization.xml:414(para)
4350
msgid ""
4351
"While installing from the Server Edition ISO (pressing "
4352
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4353
"installation\", which is the package selection equivalent to JeOS)."
4354
msgstr ""
4355
4356
#: serverguide/C/virtualization.xml:420(para)
4357
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4358
msgstr ""
4359
4360
#: serverguide/C/virtualization.xml:426(para)
4361
msgid ""
4362
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4363
"kernel that only contains the base elements needed to run within a "
4364
"virtualized environment."
4365
msgstr ""
4366
4367
#: serverguide/C/virtualization.xml:431(para)
4368
msgid ""
4369
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4370
"in the latest virtualization products from VMware. This combination of "
4371
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4372
"delivers a highly efficient use of server resources in large virtual "
4373
"deployments."
4374
msgstr ""
4375
4376
#: serverguide/C/virtualization.xml:437(para)
4377
msgid ""
4378
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4379
"can configure their supporting OS exactly as they require. They have the "
4380
"peace of mind that updates, whether for security or enhancement reasons, "
4381
"will be limited to the bare minimum of what is required in their specific "
4382
"environment. In turn, users deploying virtual appliances built on top of "
4383
"JeOS will have to go through fewer updates and therefore less maintenance "
4384
"than they would have had to with a standard full installation of a server."
4385
msgstr ""
4386
4387
#: serverguide/C/virtualization.xml:446(title)
4388
msgid "What is vmbuilder"
4389
msgstr ""
4390
4391
#: serverguide/C/virtualization.xml:448(para)
4392
msgid ""
4393
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4394
"will fetch the various package and build a virtual machine tailored for your "
4395
"needs in about a minute. vmbuilder is a script that automates the process of "
4396
"creating a ready to use Linux based VM. The currently supported hypervisors "
4397
"are KVM and Xen."
4398
msgstr ""
4399
4400
#: serverguide/C/virtualization.xml:454(para)
4401
msgid ""
4402
"You can pass command line options to add extra packages, remove packages, "
4403
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4404
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4405
"a local mirror, you can bootstrap a VM in less than a minute."
4406
msgstr ""
4407
4408
#: serverguide/C/virtualization.xml:460(para)
4409
msgid ""
4410
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4411
"vm-builder</application> started with little emphasis as a hack to help "
4412
"developers test their new code in a virtual machine without having to "
4413
"restart from scratch each time. As a few Ubuntu administrators started to "
4414
"notice this script, a few of them went on improving it and adapting it for "
4415
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4416
"virtualization specialist, not the golf player) decided to rewrite it from "
4417
"scratch for Intrepid as a python script with a few new design goals:"
4418
msgstr ""
4419
4420
#: serverguide/C/virtualization.xml:470(para)
4421
msgid "Develop it so that it can be reused by other distributions."
4422
msgstr ""
4423
4424
#: serverguide/C/virtualization.xml:475(para)
4425
msgid ""
4426
"Use a plugin mechanisms for all virtualization interactions so that others "
4427
"can easily add logic for other virtualization environments."
4428
msgstr ""
4429
4430
#: serverguide/C/virtualization.xml:480(para)
4431
msgid ""
4432
"Provide an easy to maintain web interface as an option to the command line "
4433
"interface."
4434
msgstr ""
4435
4436
#: serverguide/C/virtualization.xml:486(para)
4437
msgid "But the general principles and commands remain the same."
4438
msgstr ""
4439
4440
#: serverguide/C/virtualization.xml:493(title)
4441
msgid "Initial Setup"
4442
msgstr ""
4443
4444
#: serverguide/C/virtualization.xml:495(para)
4445
msgid ""
4446
"It is assumed that you have installed and configured "
4447
"<application>libvirt</application> and <application>KVM</application> "
4448
"locally on the machine you are using. For details on how to perform this, "
4449
"please refer to:"
4450
msgstr ""
4451
4452
#: serverguide/C/virtualization.xml:507(para)
4453
msgid ""
4454
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4455
"page."
4456
msgstr ""
4457
4458
#: serverguide/C/virtualization.xml:513(para)
4459
msgid ""
4460
"We also assume that you know how to use a text based text editor such as "
4461
"nano or vi. If you have not used any of them before, you can get an overview "
4462
"of the various text editors available by reading the <ulink "
4463
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4464
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4465
"principle should remain on other virtualization technologies."
4466
msgstr ""
4467
4468
#: serverguide/C/virtualization.xml:521(title)
4469
msgid "Install vmbuilder"
4470
msgstr ""
4471
4472
#: serverguide/C/virtualization.xml:523(para)
4473
msgid ""
4474
"The name of the package that we need to install is <application>python-vm-"
4475
"builder</application>. In a terminal prompt enter:"
4476
msgstr ""
4477
4478
#: serverguide/C/virtualization.xml:528(command)
4479
msgid "sudo apt-get install python-vm-builder"
4480
msgstr ""
4481
4482
#: serverguide/C/virtualization.xml:532(para)
4483
msgid ""
4484
"If you are running Hardy, you can still perform most of this using the older "
4485
"version of the package named <application>ubuntu-vm-builder</application>, "
4486
"there are only a few changes to the syntax of the tool."
4487
msgstr ""
4488
4489
#: serverguide/C/virtualization.xml:541(title)
4490
msgid "Defining Your Virtual Machine"
4491
msgstr ""
4492
4493
#: serverguide/C/virtualization.xml:543(para)
4494
msgid ""
4495
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4496
"are a few thing to consider:"
4497
msgstr ""
4498
4499
#: serverguide/C/virtualization.xml:549(para)
4500
msgid ""
4501
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4502
"will know how to extend disk size to fit their need, so either plan for a "
4503
"large virtual disk to allow for your appliance to grow, or explain fairly "
4504
"well in your documentation how to allocate more space. It might actually be "
4505
"a good idea to store data on some separate external storage."
4506
msgstr ""
4507
4508
#: serverguide/C/virtualization.xml:556(para)
4509
msgid ""
4510
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4511
"whatever you think is a safe minimum for your appliance."
4512
msgstr ""
4513
4514
#: serverguide/C/virtualization.xml:562(para)
4515
msgid ""
4516
"The <application>vmbuilder</application> command has 2 main parameters: the "
4517
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4518
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4519
"and can be found using the following command:"
4520
msgstr ""
4521
4522
#: serverguide/C/virtualization.xml:568(command)
4523
msgid "vmbuilder --help"
4524
msgstr "vmbuilder --help"
4525
4526
#: serverguide/C/virtualization.xml:572(title)
4527
msgid "Base Parameters"
4528
msgstr "Parámetros básicos"
4529
4530
#: serverguide/C/virtualization.xml:574(para)
4531
msgid ""
4532
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4533
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4534
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4535
msgstr ""
4536
4537
#: serverguide/C/virtualization.xml:580(command)
4538
msgid ""
4539
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4540
"libvirt qemu:///system"
4541
msgstr ""
4542
4543
#: serverguide/C/virtualization.xml:583(para)
4544
msgid ""
4545
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4546
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4547
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4548
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4549
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4550
"libvirt</emphasis> tells to inform the local virtualization environment to "
4551
"add the resulting VM to the list of available machines."
4552
msgstr ""
4553
4554
#: serverguide/C/virtualization.xml:591(para)
4555
msgid "Notes:"
4556
msgstr "Notes:"
4557
4558
#: serverguide/C/virtualization.xml:597(para)
4559
msgid ""
4560
"Because of the nature of operations performed by vmbuilder, it needs to have "
4561
"root privilege, hence the use of sudo."
4562
msgstr ""
4563
4564
#: serverguide/C/virtualization.xml:602(para)
4565
msgid ""
4566
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4567
"a 64 bit machine (--arch amd64)."
4568
msgstr ""
4569
4570
#: serverguide/C/virtualization.xml:607(para)
4571
msgid ""
4572
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4573
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4574
"use <emphasis>--flavour</emphasis> server instead."
4575
msgstr ""
4576
4577
#: serverguide/C/virtualization.xml:615(title)
4578
msgid "JeOS Installation Parameters"
4579
msgstr "Parámetros d'instalación de JeOS"
4580
4581
#: serverguide/C/virtualization.xml:618(title)
4582
msgid "JeOS Networking"
4583
msgstr "Rede JeOS"
4584
4585
#: serverguide/C/virtualization.xml:621(title)
4586
msgid "Assigning a fixed IP address"
4587
msgstr "Asignar una direición IP fixa"
4588
4589
#: serverguide/C/virtualization.xml:623(para)
4590
msgid ""
4591
"As a virtual appliance that may be deployed on various very different "
4592
"networks, it is very difficult to know what the actual network will look "
4593
"like. In order to simplify configuration, it is a good idea to take an "
4594
"approach similar to what network hardware vendors usually do, namely "
4595
"assigning an initial fixed IP address to the appliance in a private class "
4596
"network that you will provide in your documentation. An address in the range "
4597
"192.168.0.0/255 is usually a good choice."
4598
msgstr ""
4599
4600
#: serverguide/C/virtualization.xml:630(para)
4601
msgid "To do this we'll use the following parameters:"
4602
msgstr ""
4603
4604
#: serverguide/C/virtualization.xml:636(para)
4605
msgid ""
4606
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4607
"dhcp if not specified)"
4608
msgstr ""
4609
4610
#: serverguide/C/virtualization.xml:641(para)
4611
msgid ""
4612
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4613
"255.255.255.0)"
4614
msgstr ""
4615
4616
#: serverguide/C/virtualization.xml:646(para)
4617
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4618
msgstr ""
4619
4620
#: serverguide/C/virtualization.xml:651(para)
4621
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4622
msgstr ""
4623
"<emphasis>--bcast VALUE</ emphasis>: difusión d'IP (predeterminada: "
4624
"X.X.X.255)"
4625
4626
#: serverguide/C/virtualization.xml:656(para)
4627
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4628
msgstr ""
4629
4630
#: serverguide/C/virtualization.xml:661(para)
4631
msgid ""
4632
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4633
msgstr ""
4634
4635
#: serverguide/C/virtualization.xml:667(para)
4636
msgid ""
4637
"We assume for now that default values are good enough, so the resulting "
4638
"invocation becomes:"
4639
msgstr ""
4640
4641
#: serverguide/C/virtualization.xml:672(command)
4642
msgid ""
4643
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4644
"libvirt qemu:///system --ip 192.168.0.100"
4645
msgstr ""
4646
4647
#: serverguide/C/virtualization.xml:677(title)
4648
msgid "Modifying the libvirt Template to use Bridging"
4649
msgstr ""
4650
4651
#: serverguide/C/virtualization.xml:679(para)
4652
msgid ""
4653
"Because our appliance will be likely to need to be accessed by remote hosts, "
4654
"we need to configure libvirt so that the appliance uses bridge networking. "
4655
"To do this we use vmbuilder template mechanism to modify the default one."
4656
msgstr ""
4657
4658
#: serverguide/C/virtualization.xml:684(para)
4659
msgid ""
4660
"In our working directory we create the template hierarchy and copy the "
4661
"default template:"
4662
msgstr ""
4663
4664
#: serverguide/C/virtualization.xml:689(command)
4665
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4666
msgstr "mkdir -p VMBuilder/plugins/libvirt/templates"
4667
4668
#: serverguide/C/virtualization.xml:690(command)
4669
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4670
msgstr "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4671
4672
#: serverguide/C/virtualization.xml:693(para)
4673
msgid ""
4674
"We can then edit "
4675
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4676
"change:"
4677
msgstr ""
4678
"Podemos editar <filename> "
4679
"VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl </filename> pa camudar:"
4680
4681
#: serverguide/C/virtualization.xml:697(programlisting)
4682
#, no-wrap
4683
msgid ""
4684
"\n"
4685
" <interface type='network'>\n"
4686
" <source network='default'/>\n"
4687
" </interface>\n"
4688
msgstr ""
4689
"\n"
4690
" <interface type='network'>\n"
4691
" <source network='default'/>\n"
4692
" </interface>\n"
4693
4694
#: serverguide/C/virtualization.xml:703(para)
4695
msgid "To:"
4696
msgstr "Fasta:"
4697
4698
#: serverguide/C/virtualization.xml:707(programlisting)
4699
#, no-wrap
4700
msgid ""
4701
"\n"
4702
" <interface type='bridge'>\n"
4703
" <source bridge='br0'/>\n"
4704
" </interface>\n"
4705
msgstr ""
4706
"\n"
4707
" <interface type='bridge'>\n"
4708
" <source bridge='br0'/>\n"
4709
" </interface>\n"
4710
4711
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4712
msgid "Partitioning"
4713
msgstr "Particionar"
4714
4715
#: serverguide/C/virtualization.xml:719(para)
4716
msgid ""
4717
"Partitioning of the virtual appliance will have to take into consideration "
4718
"what you are planning to do with is. Because most appliances want to have a "
4719
"separate storage for data, having a separate <filename>/var</filename> would "
4720
"make sense."
4721
msgstr ""
4722
4723
#: serverguide/C/virtualization.xml:724(para)
4724
msgid ""
4725
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4726
msgstr ""
4727
4728
#: serverguide/C/virtualization.xml:728(programlisting)
4729
#, no-wrap
4730
msgid ""
4731
"\n"
4732
"--part PATH\n"
4733
" Allows you to specify a partition table in a partition file, located at "
4734
"PATH. Each line of the partition file should specify\n"
4735
" (root first):\n"
4736
" mountpoint size\n"
4737
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4738
"disk starts on a\n"
4739
" line with ’---’. ie :\n"
4740
" root 1000\n"
4741
" /opt 1000\n"
4742
" swap 256\n"
4743
" ---\n"
4744
" /var 2000\n"
4745
" /log 1500\n"
4746
msgstr ""
4747
4748
#: serverguide/C/virtualization.xml:743(para)
4749
msgid ""
4750
"In our case we will define a text file name "
4751
"<filename>vmbuilder.partition</filename> which will contain the following:"
4752
msgstr ""
4753
4754
#: serverguide/C/virtualization.xml:747(programlisting)
4755
#, no-wrap
4756
msgid ""
4757
"\n"
4758
"root 8000\n"
4759
"swap 4000\n"
4760
"---\n"
4761
"/var 20000\n"
4762
msgstr ""
4763
"\n"
4764
"root 8000\n"
4765
"swap 4000\n"
4766
"---\n"
4767
"/var 20000\n"
4768
4769
#: serverguide/C/virtualization.xml:755(para)
4770
msgid ""
4771
"Note that as we are using virtual disk images, the actual sizes that we put "
4772
"here are maximum sizes for these volumes."
4773
msgstr ""
4774
4775
#: serverguide/C/virtualization.xml:760(para)
4776
msgid "Our command line now looks like:"
4777
msgstr ""
4778
4779
#: serverguide/C/virtualization.xml:765(command)
4780
msgid ""
4781
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4782
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4783
msgstr ""
4784
4785
#: serverguide/C/virtualization.xml:770(para)
4786
msgid ""
4787
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4788
"next line."
4789
msgstr ""
4790
4791
#: serverguide/C/virtualization.xml:777(title)
4792
msgid "User and Password"
4793
msgstr "Usuariu y contraseña"
4794
4795
#: serverguide/C/virtualization.xml:779(para)
4796
msgid ""
4797
"Again setting up a virtual appliance, you will need to provide a default "
4798
"user and password that is generic so that you can include it in your "
4799
"documentation. We will see later on in this tutorial how we will provide "
4800
"some security by defining a script that will be run the first time a user "
4801
"actually logs in the appliance, that will, among other things, ask him to "
4802
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4803
"as my user name, and <emphasis>'default'</emphasis> as the password."
4804
msgstr ""
4805
4806
#: serverguide/C/virtualization.xml:787(para)
4807
msgid "To do this we use the following optional parameters:"
4808
msgstr ""
4809
4810
#: serverguide/C/virtualization.xml:793(para)
4811
msgid ""
4812
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4813
"Default: ubuntu."
4814
msgstr ""
4815
4816
#: serverguide/C/virtualization.xml:798(para)
4817
msgid ""
4818
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4819
"added. Default: Ubuntu."
4820
msgstr ""
4821
4822
#: serverguide/C/virtualization.xml:803(para)
4823
msgid ""
4824
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4825
"Default: ubuntu."
4826
msgstr ""
4827
4828
#: serverguide/C/virtualization.xml:809(para)
4829
msgid "Our resulting command line becomes:"
4830
msgstr ""
4831
4832
#: serverguide/C/virtualization.xml:814(command)
4833
msgid ""
4834
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4835
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4836
"user user --name user --pass default"
4837
msgstr ""
4838
4839
#: serverguide/C/virtualization.xml:822(title)
4840
msgid "Installing Required Packages"
4841
msgstr "Instalar los paquetes necesarios"
4842
4843
#: serverguide/C/virtualization.xml:824(para)
4844
msgid ""
4845
"In this example we will be installing a package "
4846
"<application>(Limesurvey)</application> that accesses a "
4847
"<application>MySQL</application> database and has a web interface. We will "
4848
"therefore require our OS to provide us with:"
4849
msgstr ""
4850
4851
#: serverguide/C/virtualization.xml:831(para)
4852
msgid "Apache"
4853
msgstr "Apache"
4854
4855
#: serverguide/C/virtualization.xml:832(para)
4856
msgid "PHP"
4857
msgstr "PHP"
4858
4859
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4860
msgid "MySQL"
4861
msgstr "MySQL"
4862
4863
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4864
msgid "OpenSSH Server"
4865
msgstr "Sirvidor OpenSSH"
4866
4867
#: serverguide/C/virtualization.xml:835(para)
4868
msgid "Limesurvey (as an example application that we have packaged)"
4869
msgstr ""
4870
4871
#: serverguide/C/virtualization.xml:838(para)
4872
msgid ""
4873
"This is done using vmbuilder by specifying the --addpkg option multiple "
4874
"times:"
4875
msgstr ""
4876
4877
#: serverguide/C/virtualization.xml:842(programlisting)
4878
#, no-wrap
4879
msgid ""
4880
"\n"
4881
"--addpkg PKG\n"
4882
" Install PKG into the guest (can be specfied multiple times)\n"
4883
msgstr ""
4884
4885
#: serverguide/C/virtualization.xml:847(para)
4886
msgid ""
4887
"However, due to the way vmbuilder operates, packages that have to ask "
4888
"questions to the user during the post install phase are not supported and "
4889
"should instead be installed while interactivity can occur. This is the case "
4890
"of Limesurvey, which we will have to install later, once the user logs in."
4891
msgstr ""
4892
4893
#: serverguide/C/virtualization.xml:853(para)
4894
msgid ""
4895
"Other packages that ask simple debconf question, such as <application>mysql-"
4896
"server</application> asking to set a password, the package can be installed "
4897
"immediately, but we will have to reconfigure it the first time the user logs "
4898
"in."
4899
msgstr ""
4900
4901
#: serverguide/C/virtualization.xml:859(para)
4902
msgid ""
4903
"If some packages that we need to install are not in main, we need to enable "
4904
"the additional repositories using --comp and --ppa:"
4905
msgstr ""
4906
4907
#: serverguide/C/virtualization.xml:863(programlisting)
4908
#, no-wrap
4909
msgid ""
4910
"\n"
4911
"--components COMP1,COMP2,...,COMPN\n"
4912
" A comma separated list of distro components to include (e.g. "
4913
"main,universe). This defaults\n"
4914
" to \"main\"\n"
4915
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4916
msgstr ""
4917
4918
#: serverguide/C/virtualization.xml:870(para)
4919
msgid ""
4920
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4921
"PPA (personal package archive) address so that it is added to the VM "
4922
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4923
"to the command line:"
4924
msgstr ""
4925
4926
#: serverguide/C/virtualization.xml:876(command)
4927
msgid ""
4928
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4929
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4930
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4931
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4932
"server --ppa nijaba"
4933
msgstr ""
4934
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4935
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4936
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4937
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4938
"server --ppa nijaba"
4939
4940
#: serverguide/C/virtualization.xml:883(title)
4941
msgid "OpenSSH"
4942
msgstr "OpenSSH"
4943
4944
#: serverguide/C/virtualization.xml:885(para)
4945
msgid ""
4946
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4947
"it will allow our admins to access the appliance remotely. However, pushing "
4948
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4949
"security risk as all these server will share the same secret key, making it "
4950
"very easy for hackers to target our appliance with all the tools they need "
4951
"to crack it open in a breeze. As for the user password, we will instead rely "
4952
"on a script that will install OpenSSH the first time a user logs in so that "
4953
"the key generated will be different for each appliance. For this we'll use a "
4954
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4955
"interaction."
4956
msgstr ""
4957
4958
#: serverguide/C/virtualization.xml:897(title)
4959
msgid "Speed Considerations"
4960
msgstr "Consideraciones de velocidá"
4961
4962
#: serverguide/C/virtualization.xml:900(title)
4963
msgid "Package Caching"
4964
msgstr "Caché de paquetes"
4965
4966
#: serverguide/C/virtualization.xml:902(para)
4967
msgid ""
4968
"When vmbuilder creates builds your system, it has to go fetch each one of "
4969
"the packages that composes it over the network to one of the official "
4970
"repositories, which, depending on your internet connection speed and the "
4971
"load of the mirror, can have a big impact on the actual build time. In order "
4972
"to reduce this, it is recommended to either have a local repository (which "
4973
"can be created using <application>apt-mirror</application>) or using a "
4974
"caching proxy such as <application>apt-proxy</application>. The later option "
4975
"being much simpler to implement and requiring less disk space, it is the one "
4976
"we will pick in this tutorial. To install it, simply type:"
4977
msgstr ""
4978
4979
#: serverguide/C/virtualization.xml:912(command)
4980
msgid "sudo apt-get install apt-proxy"
4981
msgstr "sudo apt-get install apt-proxy"
4982
4983
#: serverguide/C/virtualization.xml:915(para)
4984
msgid ""
4985
"Once this is complete, your (empty) proxy is ready for use on "
4986
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
4987
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
4988
"option:"
4989
msgstr ""
4990
4991
#: serverguide/C/virtualization.xml:920(programlisting)
4992
#, no-wrap
4993
msgid ""
4994
"\n"
4995
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
4996
" is http://archive.ubuntu.com/ubuntu for official\n"
4997
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
4998
" otherwise\n"
4999
msgstr ""
5000
5001
#: serverguide/C/virtualization.xml:927(para)
5002
msgid "So we add to the command line:"
5003
msgstr ""
5004
5005
#: serverguide/C/virtualization.xml:932(command)
5006
msgid "--mirror http://mirroraddress:9999/ubuntu"
5007
msgstr "--mirror http://mirroraddress:9999/ubuntu"
5008
5009
#: serverguide/C/virtualization.xml:936(para)
5010
msgid ""
5011
"The mirror address specified here will also be used in the "
5012
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
5013
"is useful to specify here an address that can be resolved by the guest or to "
5014
"plan on reseting this address later on, such as in a <emphasis>--"
5015
"firstboot</emphasis> script."
5016
msgstr ""
5017
5018
#: serverguide/C/virtualization.xml:945(title)
5019
msgid "Install a Local Mirror"
5020
msgstr "Instalar una réplica llocal"
5021
5022
#: serverguide/C/virtualization.xml:947(para)
5023
msgid ""
5024
"If we are in a larger environment, it may make sense to setup a local mirror "
5025
"of the Ubuntu repositories. The package apt-mirror provides you with a "
5026
"script that will handle the mirroring for you. You should plan on having "
5027
"about 20 gigabyte of free space per supported release and architecture."
5028
msgstr ""
5029
5030
#: serverguide/C/virtualization.xml:953(para)
5031
msgid ""
5032
"By default, <application>apt-mirror</application> uses the configuration "
5033
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
5034
"replicate only the architecture of the local machine. If you would like to "
5035
"support other architectures on your mirror, simply duplicate the lines "
5036
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
5037
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
5038
"archives as well, you will have:"
5039
msgstr ""
5040
5041
#: serverguide/C/virtualization.xml:960(programlisting)
5042
#, no-wrap
5043
msgid ""
5044
"\n"
5045
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
5046
"multiverse \n"
5047
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
5048
"multiverse\n"
5049
"\n"
5050
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
5051
"multiverse \n"
5052
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
5053
"universe multiverse \n"
5054
"\n"
5055
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
5056
"universe multiverse \n"
5057
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
5058
"universe multiverse \n"
5059
"\n"
5060
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
5061
"universe multiverse \n"
5062
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
5063
"universe multiverse \n"
5064
"\n"
5065
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
5066
"restricted/debian-installer universe/debian-installer multiverse/debian-"
5067
"installer \n"
5068
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
5069
"restricted/debian-installer universe/debian-installer multiverse/debian-"
5070
"installer \n"
5071
msgstr ""
5072
5073
#: serverguide/C/virtualization.xml:977(para)
5074
msgid ""
5075
"Notice that the source packages are not mirrored as they are seldom used "
5076
"compared to the binaries and they do take a lot more space, but they can be "
5077
"easily added to the list."
5078
msgstr ""
5079
5080
#: serverguide/C/virtualization.xml:982(para)
5081
msgid ""
5082
"Once the mirror has finished replicating (and this can be quite long), you "
5083
"need to configure Apache so that your mirror files (in "
5084
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
5085
"default), are published by your Apache server. For more information on "
5086
"Apache see <xref linkend=\"httpd\"/>."
5087
msgstr ""
5088
5089
#: serverguide/C/virtualization.xml:991(title)
5090
msgid "Installing in a RAM Disk"
5091
msgstr "Instalar nun discu RAM"
5092
5093
#: serverguide/C/virtualization.xml:993(para)
5094
msgid ""
5095
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
5096
"faster than writing to disk. If you have some free memory, letting vmbuilder "
5097
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
5098
"-tmpfs</emphasis> will help you do just that:"
5099
msgstr ""
5100
5101
#: serverguide/C/virtualization.xml:999(programlisting)
5102
#, no-wrap
5103
msgid ""
5104
"\n"
5105
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
5106
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
5107
msgstr ""
5108
5109
#: serverguide/C/virtualization.xml:1004(para)
5110
msgid ""
5111
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
5112
"have 1G of free ram."
5113
msgstr ""
5114
5115
#: serverguide/C/virtualization.xml:1011(title)
5116
msgid "Package the Application"
5117
msgstr "Empaquetar l'aplicación"
5118
5119
#: serverguide/C/virtualization.xml:1013(para)
5120
msgid "Two option are available to us:"
5121
msgstr ""
5122
5123
#: serverguide/C/virtualization.xml:1019(para)
5124
msgid ""
5125
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
5126
"package. Since this is outside of the scope of this tutorial, we will not "
5127
"perform this here and invite the reader to read the documentation on how to "
5128
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
5129
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
5130
"repository for your package so that updates can be conveniently pulled from "
5131
"it. See the <ulink url=\"http://www.debian-"
5132
"administration.org/articles/286\">Debian Administration</ulink> article for "
5133
"a tutorial on this."
5134
msgstr ""
5135
5136
#: serverguide/C/virtualization.xml:1028(para)
5137
msgid ""
5138
"Manually install the application under <filename>/opt</filename> as "
5139
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
5140
"guidelines</ulink>."
5141
msgstr ""
5142
5143
#: serverguide/C/virtualization.xml:1035(para)
5144
msgid ""
5145
"In our case we'll use <application>Limesurvey</application> as example web "
5146
"application for which we wish to provide a virtual appliance. As noted "
5147
"before, we've made a version of the package available in a PPA (Personal "
5148
"Package Archive)."
5149
msgstr ""
5150
5151
#: serverguide/C/virtualization.xml:1042(title)
5152
msgid "Finishing Install"
5153
msgstr "Acabar la instalación"
5154
5155
#: serverguide/C/virtualization.xml:1045(title)
5156
msgid "First Boot"
5157
msgstr "Primer arranque"
5158
5159
#: serverguide/C/virtualization.xml:1047(para)
5160
msgid ""
5161
"As we mentioned earlier, the first time the machine boots we'll need to "
5162
"install <application>openssh-server</application> so that the key generated "
5163
"for it is unique for each machine. To do this, we'll write a script called "
5164
"<filename>boot.sh</filename> as follows:"
5165
msgstr ""
5166
5167
#: serverguide/C/virtualization.xml:1053(programlisting)
5168
#, no-wrap
5169
msgid ""
5170
"\n"
5171
"# This script will run the first time the virtual machine boots\n"
5172
"# It is ran as root.\n"
5173
"\n"
5174
"apt-get update\n"
5175
"apt-get install -qqy --force-yes openssh-server\n"
5176
msgstr ""
5177
5178
#: serverguide/C/virtualization.xml:1061(para)
5179
msgid ""
5180
"And we add the <command>--firstboot boot.sh</command> option to our command "
5181
"line."
5182
msgstr ""
5183
5184
#: serverguide/C/virtualization.xml:1067(title)
5185
msgid "First Login"
5186
msgstr "Primera entrada"
5187
5188
#: serverguide/C/virtualization.xml:1069(para)
5189
msgid ""
5190
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
5191
"set them up the first time a user logs in using a script named login.sh. "
5192
"We'll also use this script to let the user specify:"
5193
msgstr ""
5194
5195
#: serverguide/C/virtualization.xml:1075(para)
5196
msgid "His own password"
5197
msgstr "La to propia contraseña"
5198
5199
#: serverguide/C/virtualization.xml:1076(para)
5200
msgid "Define the keyboard and other locale info he wants to use"
5201
msgstr ""
5202
5203
#: serverguide/C/virtualization.xml:1079(para)
5204
msgid "So we'll define <filename>login.sh</filename> as follows:"
5205
msgstr ""
5206
5207
#: serverguide/C/virtualization.xml:1083(programlisting)
5208
#, no-wrap
5209
msgid ""
5210
"\n"
5211
"# This script is ran the first time a user logs in\n"
5212
"\n"
5213
"echo \"Your appliance is about to be finished to be set up.\"\n"
5214
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
5215
"echo \"starting by changing your user password.\"\n"
5216
"\n"
5217
"passwd\n"
5218
"\n"
5219
"#give the opportunity to change the keyboard\n"
5220
"sudo dpkg-reconfigure console-setup\n"
5221
"\n"
5222
"#configure the mysql server root password\n"
5223
"sudo dpkg-reconfigure mysql-server-5.0\n"
5224
"\n"
5225
"#install limesurvey\n"
5226
"sudo apt-get install -qqy --force-yes limesurvey\n"
5227
"\n"
5228
"echo \"Your appliance is now configured. To use it point your\"\n"
5229
"echo \"browser to http://serverip/limesurvey/admin\"\n"
5230
msgstr ""
5231
5232
#: serverguide/C/virtualization.xml:1105(para)
5233
msgid ""
5234
"And we add the <command>--firstlogin login.sh</command> option to our "
5235
"command line."
5236
msgstr ""
5237
5238
#: serverguide/C/virtualization.xml:1112(title)
5239
msgid "Useful Additions"
5240
msgstr "Sumes útiles"
5241
5242
#: serverguide/C/virtualization.xml:1115(title)
5243
msgid "Configuring Automatic Updates"
5244
msgstr "Configurar anovamientos automáticos"
5245
5246
#: serverguide/C/virtualization.xml:1117(para)
5247
msgid ""
5248
"To have your system be configured to update itself on a regular basis, we "
5249
"will just install <application>unattended-upgrades</application>, so we add "
5250
"the following option to our command line:"
5251
msgstr ""
5252
5253
#: serverguide/C/virtualization.xml:1123(command)
5254
msgid "--addpkg unattended-upgrades"
5255
msgstr "--addpkg unattended-upgrades"
5256
5257
#: serverguide/C/virtualization.xml:1126(para)
5258
msgid ""
5259
"As we have put our application package in a PPA, the process will update not "
5260
"only the system, but also the application each time we update the version in "
5261
"the PPA."
5262
msgstr ""
5263
5264
#: serverguide/C/virtualization.xml:1133(title)
5265
msgid "ACPI Event Handling"
5266
msgstr "Remanamientu d'eventu ACPI"
5267
5268
#: serverguide/C/virtualization.xml:1135(para)
5269
msgid ""
5270
"For your virtual machine to be able to handle restart and shutdown events it "
5271
"is being sent, it is a good idea to install the acpid package as well. To do "
5272
"this we just add the following option:"
5273
msgstr ""
5274
5275
#: serverguide/C/virtualization.xml:1141(command)
5276
msgid "--addpkg acpid"
5277
msgstr ""
5278
5279
#: serverguide/C/virtualization.xml:1147(title)
5280
msgid "Final Command"
5281
msgstr ""
5282
5283
#: serverguide/C/virtualization.xml:1149(para)
5284
msgid "Here is the command with all the options discussed above:"
5285
msgstr ""
5286
5287
#: serverguide/C/virtualization.xml:1154(command)
5288
msgid ""
5289
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5290
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5291
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5292
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5293
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5294
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5295
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5296
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5297
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5298
"firstlogin login.sh es"
5299
msgstr ""
5300
5301
#: serverguide/C/virtualization.xml:1169(para)
5302
msgid ""
5303
"If you are interested in learning more, have questions or suggestions, "
5304
"please contact the Ubuntu Server Team at:"
5305
msgstr ""
5306
5307
#: serverguide/C/virtualization.xml:1174(para)
5308
msgid "IRC: #ubuntu-server on freenode"
5309
msgstr ""
5310
5311
#: serverguide/C/virtualization.xml:1179(para)
5312
msgid ""
5313
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5314
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5315
msgstr ""
5316
5317
#: serverguide/C/virtualization.xml:1184(para)
5318
msgid ""
5319
"Also, see the <ulink "
5320
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5321
"Wiki</ulink> page."
5322
msgstr ""
5323
5324
#: serverguide/C/virtualization.xml:1192(title)
5325
msgid "UEC"
5326
msgstr ""
5327
5328
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5329
msgid "Overview"
5330
msgstr ""
5331
5332
#: serverguide/C/virtualization.xml:1197(para)
5333
msgid ""
5334
"This tutorial covers <application>UEC</application> installation from the "
5335
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5336
"with a single system serving as the <emphasis>\"all-in-one "
5337
"controller\"</emphasis>, and one or more nodes attached."
5338
msgstr ""
5339
5340
#: serverguide/C/virtualization.xml:1202(para)
5341
msgid ""
5342
"From this Tutorial you will learn how to install, configure, register and "
5343
"perform several operations on a basic <application>UEC</application> setup "
5344
"that results in a cloud with a one controller <emphasis>\"front-"
5345
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5346
"instances. You will also use examples to help get you started using your own "
5347
"private compute cloud."
5348
msgstr ""
5349
5350
#: serverguide/C/virtualization.xml:1210(title)
5351
msgid "Prerequisites"
5352
msgstr ""
5353
5354
#: serverguide/C/virtualization.xml:1212(para)
5355
msgid ""
5356
"To deploy a minimal cloud infrastructure, you’ll need at least "
5357
"<emphasis>two</emphasis> dedicated systems:"
5358
msgstr ""
5359
5360
#: serverguide/C/virtualization.xml:1218(para)
5361
msgid "A front end."
5362
msgstr ""
5363
5364
#: serverguide/C/virtualization.xml:1223(para)
5365
msgid "One or more node(s)."
5366
msgstr ""
5367
5368
#: serverguide/C/virtualization.xml:1229(para)
5369
msgid ""
5370
"The following are recommendations, rather than fixed requirements. However, "
5371
"our experience in developing this documentation indicated the following "
5372
"suggestions."
5373
msgstr ""
5374
5375
#: serverguide/C/virtualization.xml:1234(title)
5376
msgid "Front End Requirements"
5377
msgstr ""
5378
5379
#: serverguide/C/virtualization.xml:1236(para)
5380
msgid "Use the following table for a system that will run one or more of:"
5381
msgstr ""
5382
5383
#: serverguide/C/virtualization.xml:1241(para)
5384
msgid "Cloud Controller (CLC)"
5385
msgstr ""
5386
5387
#: serverguide/C/virtualization.xml:1242(para)
5388
msgid "Cluster Controller (CC)"
5389
msgstr ""
5390
5391
#: serverguide/C/virtualization.xml:1243(para)
5392
msgid "Walrus (the S3-like storage service)"
5393
msgstr ""
5394
5395
#: serverguide/C/virtualization.xml:1244(para)
5396
msgid "Storage Controller (SC)"
5397
msgstr ""
5398
5399
#: serverguide/C/virtualization.xml:1248(title)
5400
msgid "UEC Front End Requirements"
5401
msgstr ""
5402
5403
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5404
msgid "Hardware"
5405
msgstr ""
5406
5407
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5408
msgid "Minimum"
5409
msgstr ""
5410
5411
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5412
msgid "Suggested"
5413
msgstr ""
5414
5415
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5416
msgid "Notes"
5417
msgstr ""
5418
5419
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5420
msgid "CPU"
5421
msgstr ""
5422
5423
#: serverguide/C/virtualization.xml:1265(para)
5424
msgid "1 GHz"
5425
msgstr ""
5426
5427
#: serverguide/C/virtualization.xml:1266(para)
5428
msgid "2 x 2 GHz"
5429
msgstr ""
5430
5431
#: serverguide/C/virtualization.xml:1267(para)
5432
msgid ""
5433
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5434
"a dual core processor."
5435
msgstr ""
5436
5437
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5438
msgid "Memory"
5439
msgstr ""
5440
5441
#: serverguide/C/virtualization.xml:1271(para)
5442
msgid "512 MB"
5443
msgstr ""
5444
5445
#: serverguide/C/virtualization.xml:1272(para)
5446
msgid "2 GB"
5447
msgstr ""
5448
5449
#: serverguide/C/virtualization.xml:1273(para)
5450
msgid "The Java web front end benefits from lots of available memory."
5451
msgstr ""
5452
5453
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5454
msgid "Disk"
5455
msgstr ""
5456
5457
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5458
msgid "5400 RPM IDE"
5459
msgstr ""
5460
5461
#: serverguide/C/virtualization.xml:1278(para)
5462
msgid "7200 RPM SATA"
5463
msgstr ""
5464
5465
#: serverguide/C/virtualization.xml:1279(para)
5466
msgid ""
5467
"Slower disks will work, but will yield much longer instance startup times."
5468
msgstr ""
5469
5470
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5471
msgid "Disk Space"
5472
msgstr ""
5473
5474
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5475
msgid "40 GB"
5476
msgstr ""
5477
5478
#: serverguide/C/virtualization.xml:1284(para)
5479
msgid "200 GB"
5480
msgstr ""
5481
5482
#: serverguide/C/virtualization.xml:1285(para)
5483
msgid ""
5484
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5485
"does not like to run out of disk space."
5486
msgstr ""
5487
5488
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5489
msgid "Networking"
5490
msgstr ""
5491
5492
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5493
msgid "100 Mbps"
5494
msgstr ""
5495
5496
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5497
msgid "1000 Mbps"
5498
msgstr ""
5499
5500
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5501
msgid ""
5502
"Machine images are hundreds of MB, and need to be copied over the network to "
5503
"nodes."
5504
msgstr ""
5505
5506
#: serverguide/C/virtualization.xml:1299(title)
5507
msgid "Node Requirements"
5508
msgstr ""
5509
5510
#: serverguide/C/virtualization.xml:1301(para)
5511
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5512
msgstr ""
5513
5514
#: serverguide/C/virtualization.xml:1306(para)
5515
msgid "the Node Controller (NC)"
5516
msgstr ""
5517
5518
#: serverguide/C/virtualization.xml:1310(title)
5519
msgid "UEC Node Requirements"
5520
msgstr ""
5521
5522
#: serverguide/C/virtualization.xml:1327(para)
5523
msgid "VT Extensions"
5524
msgstr ""
5525
5526
#: serverguide/C/virtualization.xml:1328(para)
5527
msgid "VT, 64-bit, Multicore"
5528
msgstr ""
5529
5530
#: serverguide/C/virtualization.xml:1329(para)
5531
msgid ""
5532
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5533
"only run 1 VM per CPU core on a Node."
5534
msgstr ""
5535
5536
#: serverguide/C/virtualization.xml:1333(para)
5537
msgid "1 GB"
5538
msgstr ""
5539
5540
#: serverguide/C/virtualization.xml:1334(para)
5541
msgid "4 GB"
5542
msgstr ""
5543
5544
#: serverguide/C/virtualization.xml:1335(para)
5545
msgid "Additional memory means more, and larger guests."
5546
msgstr ""
5547
5548
#: serverguide/C/virtualization.xml:1340(para)
5549
msgid "7200 RPM SATA or SCSI"
5550
msgstr ""
5551
5552
#: serverguide/C/virtualization.xml:1341(para)
5553
msgid ""
5554
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5555
"bottleneck."
5556
msgstr ""
5557
5558
#: serverguide/C/virtualization.xml:1346(para)
5559
msgid "100 GB"
5560
msgstr ""
5561
5562
#: serverguide/C/virtualization.xml:1347(para)
5563
msgid ""
5564
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5565
"space."
5566
msgstr ""
5567
5568
#: serverguide/C/virtualization.xml:1363(title)
5569
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5570
msgstr ""
5571
5572
#: serverguide/C/virtualization.xml:1367(para)
5573
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5574
msgstr ""
5575
5576
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5577
msgid ""
5578
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5579
msgstr ""
5580
5581
#: serverguide/C/virtualization.xml:1377(para)
5582
msgid ""
5583
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5584
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5585
msgstr ""
5586
5587
#: serverguide/C/virtualization.xml:1383(para)
5588
msgid ""
5589
"It will ask two other cloud-specific questions during the course of the "
5590
"install:"
5591
msgstr ""
5592
5593
#: serverguide/C/virtualization.xml:1388(para)
5594
msgid "Name of your cluster."
5595
msgstr ""
5596
5597
#: serverguide/C/virtualization.xml:1391(para)
5598
msgid "e.g. <emphasis>cluster1</emphasis>."
5599
msgstr ""
5600
5601
#: serverguide/C/virtualization.xml:1394(para)
5602
msgid ""
5603
"A range of public IP addresses on the LAN that the cloud can allocate to "
5604
"instances."
5605
msgstr ""
5606
5607
#: serverguide/C/virtualization.xml:1397(para)
5608
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5609
msgstr ""
5610
5611
#: serverguide/C/virtualization.xml:1405(title)
5612
msgid "Installing the Node Controller(s)"
5613
msgstr ""
5614
5615
#: serverguide/C/virtualization.xml:1407(para)
5616
msgid ""
5617
"The node controller install is even simpler. Just make sure that you are "
5618
"connected to the network on which the cloud/cluster controller is already "
5619
"running."
5620
msgstr ""
5621
5622
#: serverguide/C/virtualization.xml:1413(para)
5623
msgid "Boot from the same ISO on the node(s)."
5624
msgstr ""
5625
5626
#: serverguide/C/virtualization.xml:1423(para)
5627
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5628
msgstr ""
5629
5630
#: serverguide/C/virtualization.xml:1428(para)
5631
msgid ""
5632
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5633
"install for you."
5634
msgstr ""
5635
5636
#: serverguide/C/virtualization.xml:1433(para)
5637
msgid "Confirm the partitioning scheme."
5638
msgstr ""
5639
5640
#: serverguide/C/virtualization.xml:1438(para)
5641
msgid ""
5642
"The rest of the installation should proceed uninterrupted; complete the "
5643
"installation and reboot the node."
5644
msgstr ""
5645
5646
#: serverguide/C/virtualization.xml:1446(title)
5647
msgid "Register the Node(s)"
5648
msgstr ""
5649
5650
#: serverguide/C/virtualization.xml:1448(para)
5651
msgid ""
5652
"Nodes are the physical systems within <application>UEC</application> that "
5653
"actually run the virtual machine instances of the cloud."
5654
msgstr ""
5655
5656
#: serverguide/C/virtualization.xml:1452(para)
5657
msgid ""
5658
"Once one or more Ubuntu Server node(s) are installed and running the "
5659
"<application>eucalyptus-nc</application> service, log onto the "
5660
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5661
msgstr ""
5662
5663
#: serverguide/C/virtualization.xml:1458(command)
5664
msgid "sudo euca_conf --no-rsync --discover-nodes"
5665
msgstr ""
5666
5667
#: serverguide/C/virtualization.xml:1461(para)
5668
msgid ""
5669
"This will discover the systems on the network running the "
5670
"<application>eucalyptus-nc</application> service, and the administrator can "
5671
"confirm the registration of each node by its IP address."
5672
msgstr ""
5673
5674
#: serverguide/C/virtualization.xml:1467(para)
5675
msgid ""
5676
"If you get prompted for passwords, or receive errors from scp, you may need "
5677
"to revisit the key synchronization instructions at <ulink "
5678
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5679
"lation</ulink>."
5680
msgstr ""
5681
5682
#: serverguide/C/virtualization.xml:1475(title)
5683
msgid "Obtain Credentials"
5684
msgstr ""
5685
5686
#: serverguide/C/virtualization.xml:1477(para)
5687
msgid ""
5688
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5689
"users of the cloud will need to retrieve their credentials. This can be done "
5690
"either through a web browser, or at the command line."
5691
msgstr ""
5692
5693
#: serverguide/C/virtualization.xml:1483(title)
5694
msgid "From a Web Browser"
5695
msgstr ""
5696
5697
#: serverguide/C/virtualization.xml:1487(para)
5698
msgid ""
5699
"From your web browser (either remotely or on your Ubuntu server) access the "
5700
"following URL:"
5701
msgstr ""
5702
5703
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5704
#, no-wrap
5705
msgid ""
5706
"\n"
5707
"https://<cloud-controller-ip-address>:8443/\n"
5708
msgstr ""
5709
5710
#: serverguide/C/virtualization.xml:1495(para)
5711
msgid ""
5712
"You must use a secure connection, so make sure you use \"https\" not "
5713
"\"http\" in your URL. You will get a security certificate warning. You will "
5714
"have to add an exception to view the page. If you do not accept it you will "
5715
"not be able to view the Eucalyptus configuration page."
5716
msgstr ""
5717
5718
#: serverguide/C/virtualization.xml:1503(para)
5719
msgid ""
5720
"Use username <emphasis>'admin'</emphasis> and password "
5721
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5722
"to change your password)."
5723
msgstr ""
5724
5725
#: serverguide/C/virtualization.xml:1509(para)
5726
msgid ""
5727
"Then follow the on-screen instructions to update the admin password and "
5728
"email address."
5729
msgstr ""
5730
5731
#: serverguide/C/virtualization.xml:1514(para)
5732
msgid ""
5733
"Once the first time configuration process is completed, click the "
5734
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5735
"the screen."
5736
msgstr ""
5737
5738
#: serverguide/C/virtualization.xml:1520(para)
5739
msgid ""
5740
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5741
"certificates."
5742
msgstr ""
5743
5744
#: serverguide/C/virtualization.xml:1525(para)
5745
msgid "Save them to <filename>~/.euca</filename>."
5746
msgstr ""
5747
5748
#: serverguide/C/virtualization.xml:1530(para)
5749
msgid ""
5750
"Unzip the downloaded zip file into a safe location "
5751
"(<filename>~/.euca</filename>)."
5752
msgstr ""
5753
5754
#: serverguide/C/virtualization.xml:1534(command)
5755
msgid "unzip -d ~/.euca mycreds.zip"
5756
msgstr ""
5757
5758
#: serverguide/C/virtualization.xml:1541(title)
5759
msgid "From a Command Line"
5760
msgstr ""
5761
5762
#: serverguide/C/virtualization.xml:1545(para)
5763
msgid ""
5764
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5765
"Controller</emphasis>, you can run:"
5766
msgstr ""
5767
5768
#: serverguide/C/virtualization.xml:1549(command)
5769
msgid "mkdir -p ~/.euca"
5770
msgstr ""
5771
5772
#: serverguide/C/virtualization.xml:1550(command)
5773
msgid "chmod 700 ~/.euca"
5774
msgstr ""
5775
5776
#: serverguide/C/virtualization.xml:1551(command)
5777
msgid "cd ~/.euca"
5778
msgstr ""
5779
5780
#: serverguide/C/virtualization.xml:1552(command)
5781
msgid "sudo euca_conf --get-credentials mycreds.zip"
5782
msgstr ""
5783
5784
#: serverguide/C/virtualization.xml:1553(command)
5785
msgid "unzip mycreds.zip"
5786
msgstr ""
5787
5788
#: serverguide/C/virtualization.xml:1554(command)
5789
msgid "cd -"
5790
msgstr ""
5791
5792
#: serverguide/C/virtualization.xml:1561(title)
5793
msgid "Extracting and Using Your Credentials"
5794
msgstr ""
5795
5796
#: serverguide/C/virtualization.xml:1563(para)
5797
msgid ""
5798
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5799
"certificates."
5800
msgstr ""
5801
5802
#: serverguide/C/virtualization.xml:1569(para)
5803
msgid ""
5804
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5805
"Eucalyptus environment:"
5806
msgstr ""
5807
5808
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5809
msgid ". ~/.euca/eucarc"
5810
msgstr ""
5811
5812
#: serverguide/C/virtualization.xml:1577(para)
5813
msgid ""
5814
"You may additionally wish to add this command to your "
5815
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5816
"set up automatically when you log in. Eucalyptus treats this set of "
5817
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5818
"the holder global privileges across the cloud. As such, they should be "
5819
"protected in the same way that other elevated-priority access is protected "
5820
"(e.g. should not be made visible to the general user population)."
5821
msgstr ""
5822
5823
#: serverguide/C/virtualization.xml:1584(command)
5824
msgid ""
5825
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5826
msgstr ""
5827
5828
#: serverguide/C/virtualization.xml:1588(para)
5829
msgid "Install the required cloud user tools:"
5830
msgstr ""
5831
5832
#: serverguide/C/virtualization.xml:1592(command)
5833
msgid "sudo apt-get install euca2ools"
5834
msgstr ""
5835
5836
#: serverguide/C/virtualization.xml:1596(para)
5837
msgid ""
5838
"To validate that everything is working correctly, get the local cluster "
5839
"availability details:"
5840
msgstr ""
5841
5842
#: serverguide/C/virtualization.xml:1601(command)
5843
msgid "euca-describe-availability-zones verbose"
5844
msgstr ""
5845
5846
#: serverguide/C/virtualization.xml:1602(computeroutput)
5847
#, no-wrap
5848
msgid ""
5849
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5850
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5851
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5852
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5853
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5854
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5855
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5856
msgstr ""
5857
5858
#: serverguide/C/virtualization.xml:1612(para)
5859
msgid "Your output from the above command will vary."
5860
msgstr ""
5861
5862
#: serverguide/C/virtualization.xml:1622(title)
5863
msgid "Running an Image"
5864
msgstr ""
5865
5866
#: serverguide/C/virtualization.xml:1624(para)
5867
msgid "There are multiple ways to instantiate an image in UEC:"
5868
msgstr ""
5869
5870
#: serverguide/C/virtualization.xml:1629(para)
5871
msgid "Use the command line."
5872
msgstr ""
5873
5874
#: serverguide/C/virtualization.xml:1630(para)
5875
msgid ""
5876
"Use one of the UEC compatible management tools such as "
5877
"<emphasis>Landscape</emphasis>."
5878
msgstr ""
5879
5880
#: serverguide/C/virtualization.xml:1632(para)
5881
msgid ""
5882
"Use the <ulink "
5883
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5884
"extension to Firefox."
5885
msgstr ""
5886
5887
#: serverguide/C/virtualization.xml:1638(para)
5888
msgid "Here we will describe the process from the command line:"
5889
msgstr ""
5890
5891
#: serverguide/C/virtualization.xml:1644(para)
5892
msgid ""
5893
"Before running an instance of your image, you should first create a "
5894
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5895
"instance as root, once it boots. The key is stored, so you will only have to "
5896
"do this once."
5897
msgstr ""
5898
5899
#: serverguide/C/virtualization.xml:1648(para)
5900
msgid "Run the following command:"
5901
msgstr ""
5902
5903
#: serverguide/C/virtualization.xml:1651(programlisting)
5904
#, no-wrap
5905
msgid ""
5906
"\n"
5907
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5908
" touch ~/.euca/mykey.priv\n"
5909
" chmod 0600 ~/.euca/mykey.priv\n"
5910
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5911
"fi\n"
5912
msgstr ""
5913
5914
#: serverguide/C/virtualization.xml:1659(para)
5915
msgid ""
5916
"You can call your key whatever you like (in this example, the key is called "
5917
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5918
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5919
"a list of created keys stored in the system."
5920
msgstr ""
5921
5922
#: serverguide/C/virtualization.xml:1666(para)
5923
msgid "You must also allow access to port 22 in your instances:"
5924
msgstr ""
5925
5926
#: serverguide/C/virtualization.xml:1670(command)
5927
msgid "euca-describe-groups"
5928
msgstr ""
5929
5930
#: serverguide/C/virtualization.xml:1671(command)
5931
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5932
msgstr ""
5933
5934
#: serverguide/C/virtualization.xml:1675(para)
5935
msgid "Next, you can create instances of your registered image:"
5936
msgstr ""
5937
5938
#: serverguide/C/virtualization.xml:1679(command)
5939
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5940
msgstr ""
5941
5942
#: serverguide/C/virtualization.xml:1682(para)
5943
msgid ""
5944
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5945
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5946
"on the <emphasis>Store</emphasis> page to see the sample command."
5947
msgstr ""
5948
5949
#: serverguide/C/virtualization.xml:1689(para)
5950
msgid ""
5951
"The first time you run an instance, the system will be setting up caches for "
5952
"the image from which it will be created. This can often take some time the "
5953
"first time an instance is run given that VM images are usually quite large."
5954
msgstr ""
5955
5956
#: serverguide/C/virtualization.xml:1693(para)
5957
msgid "To monitor the state of your instance, run:"
5958
msgstr ""
5959
5960
#: serverguide/C/virtualization.xml:1697(command)
5961
msgid "watch -n5 euca-describe-instances"
5962
msgstr ""
5963
5964
#: serverguide/C/virtualization.xml:1699(para)
5965
msgid ""
5966
"In the output, you should see information about the instance, including its "
5967
"state. While first-time caching is being performed, the instance's state "
5968
"will be <emphasis>'pending'</emphasis>."
5969
msgstr ""
5970
5971
#: serverguide/C/virtualization.xml:1705(para)
5972
msgid ""
5973
"When the instance is fully started, the above state will become "
5974
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5975
"instance in the output, then connect to it:"
5976
msgstr ""
5977
5978
#: serverguide/C/virtualization.xml:1710(command)
5979
msgid ""
5980
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5981
"'{print $4}')"
5982
msgstr ""
5983
5984
#: serverguide/C/virtualization.xml:1711(command)
5985
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
5986
msgstr ""
5987
5988
#: serverguide/C/virtualization.xml:1715(para)
5989
msgid ""
5990
"And when you are done with this instance, exit your SSH connection, then "
5991
"terminate your instance:"
5992
msgstr ""
5993
5994
#: serverguide/C/virtualization.xml:1719(command)
5995
msgid ""
5996
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
5997
"awk '{print $2}')"
5998
msgstr ""
5999
6000
#: serverguide/C/virtualization.xml:1720(command)
6001
msgid "euca-terminate-instances $INSTANCEID"
6002
msgstr ""
6003
6004
#: serverguide/C/virtualization.xml:1727(title)
6005
msgid "Install an Image from the Store"
6006
msgstr ""
6007
6008
#: serverguide/C/virtualization.xml:1729(para)
6009
msgid ""
6010
"The following is by far the simplest way to install an image. However, "
6011
"advanced users may be interested in learning how to <ulink "
6012
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
6013
"own image</ulink>."
6014
msgstr ""
6015
6016
#: serverguide/C/virtualization.xml:1734(para)
6017
msgid ""
6018
"The simplest way to add an image to <application>UEC</application> is to "
6019
"install it from the Image Store on the UEC web interface."
6020
msgstr ""
6021
6022
#: serverguide/C/virtualization.xml:1740(para)
6023
msgid ""
6024
"Access the web interface at the following URL (Make sure you specify https):"
6025
msgstr ""
6026
6027
#: serverguide/C/virtualization.xml:1748(para)
6028
msgid ""
6029
"Enter your login and password (if requested, as you may still be logged in "
6030
"from earlier)."
6031
msgstr ""
6032
6033
#: serverguide/C/virtualization.xml:1753(para)
6034
msgid "Click on the <emphasis>Store</emphasis> tab."
6035
msgstr ""
6036
6037
#: serverguide/C/virtualization.xml:1758(para)
6038
msgid "Browse available images."
6039
msgstr ""
6040
6041
#: serverguide/C/virtualization.xml:1763(para)
6042
msgid "Click on <emphasis>install</emphasis> for the image you want."
6043
msgstr ""
6044
6045
#: serverguide/C/virtualization.xml:1769(para)
6046
msgid ""
6047
"Once the image has been downloaded and installed, you can click on "
6048
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
6049
"button to view the command to execute to instantiate (start) this image. The "
6050
"image will also appear on the list given on the <emphasis>Image</emphasis> "
6051
"tab."
6052
msgstr ""
6053
6054
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
6055
msgid "More Information"
6056
msgstr ""
6057
6058
#: serverguide/C/virtualization.xml:1779(para)
6059
msgid ""
6060
"How to use the <ulink "
6061
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
6062
"Controller</ulink>"
6063
msgstr ""
6064
6065
#: serverguide/C/virtualization.xml:1783(para)
6066
msgid "Controlling eucalyptus services:"
6067
msgstr ""
6068
6069
#: serverguide/C/virtualization.xml:1788(para)
6070
msgid ""
6071
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
6072
msgstr ""
6073
6074
#: serverguide/C/virtualization.xml:1789(para)
6075
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
6076
msgstr ""
6077
6078
#: serverguide/C/virtualization.xml:1792(para)
6079
msgid "Locations of some important files:"
6080
msgstr ""
6081
6082
#: serverguide/C/virtualization.xml:1799(emphasis)
6083
msgid "Log files:"
6084
msgstr ""
6085
6086
#: serverguide/C/virtualization.xml:1802(para)
6087
msgid "/var/log/eucalyptus"
6088
msgstr ""
6089
6090
#: serverguide/C/virtualization.xml:1807(emphasis)
6091
msgid "Configuration files:"
6092
msgstr ""
6093
6094
#: serverguide/C/virtualization.xml:1810(para)
6095
msgid "/etc/eucalyptus"
6096
msgstr ""
6097
6098
#: serverguide/C/virtualization.xml:1815(emphasis)
6099
msgid "Database:"
6100
msgstr ""
6101
6102
#: serverguide/C/virtualization.xml:1818(para)
6103
msgid "/var/lib/eucalyptus/db"
6104
msgstr ""
6105
6106
#: serverguide/C/virtualization.xml:1823(emphasis)
6107
msgid "Keys:"
6108
msgstr ""
6109
6110
#: serverguide/C/virtualization.xml:1826(para)
6111
msgid "/var/lib/eucalyptus"
6112
msgstr ""
6113
6114
#: serverguide/C/virtualization.xml:1827(para)
6115
msgid "/var/lib/eucalyptus/.ssh"
6116
msgstr ""
6117
6118
#: serverguide/C/virtualization.xml:1833(para)
6119
msgid ""
6120
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
6121
"running the client tools."
6122
msgstr ""
6123
6124
#: serverguide/C/virtualization.xml:1844(para)
6125
msgid ""
6126
"For information on loading instances see the <ulink "
6127
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
6128
"page."
6129
msgstr ""
6130
6131
#: serverguide/C/virtualization.xml:1849(para)
6132
msgid ""
6133
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
6134
"documentation, downloads)</ulink>."
6135
msgstr ""
6136
6137
#: serverguide/C/virtualization.xml:1854(para)
6138
msgid ""
6139
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
6140
"(bugs, code)</ulink>."
6141
msgstr ""
6142
6143
#: serverguide/C/virtualization.xml:1859(para)
6144
msgid ""
6145
"<ulink "
6146
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
6147
"ptus Troubleshooting (1.5)</ulink>."
6148
msgstr ""
6149
6150
#: serverguide/C/virtualization.xml:1864(para)
6151
msgid ""
6152
"<ulink url=\"http://support.rightscale.com/2._References/02-"
6153
"Cloud_Infrastructures/Eucalyptus/03-"
6154
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
6155
"RightScale</ulink>."
6156
msgstr ""
6157
6158
#: serverguide/C/virtualization.xml:1870(para)
6159
msgid ""
6160
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
6161
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
6162
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
6163
msgstr ""
6164
6165
#: serverguide/C/virtualization.xml:1879(title)
6166
msgid "Glossary"
6167
msgstr ""
6168
6169
#: serverguide/C/virtualization.xml:1881(para)
6170
msgid ""
6171
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
6172
"unfamiliar to some readers. This page is intended to provide a glossary of "
6173
"such terms and acronyms."
6174
msgstr ""
6175
6176
#: serverguide/C/virtualization.xml:1888(para)
6177
msgid ""
6178
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
6179
"computing resources through virtual machines, provisioned and recollected "
6180
"dynamically."
6181
msgstr ""
6182
6183
#: serverguide/C/virtualization.xml:1894(para)
6184
msgid ""
6185
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
6186
"provides the web UI (an https server on port 8443), and implements the "
6187
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
6188
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
6189
"cloud</application> package."
6190
msgstr ""
6191
6192
#: serverguide/C/virtualization.xml:1901(para)
6193
msgid ""
6194
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
6195
"Cluster Controller. There can be more than one Cluster in an installation of "
6196
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
6197
"floor2, floor2)."
6198
msgstr ""
6199
6200
#: serverguide/C/virtualization.xml:1907(para)
6201
msgid ""
6202
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
6203
"manages collections of node resources. This service is provided by the "
6204
"Ubuntu <application>eucalyptus-cc</application> package."
6205
msgstr ""
6206
6207
#: serverguide/C/virtualization.xml:1913(para)
6208
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
6209
msgstr ""
6210
6211
#: serverguide/C/virtualization.xml:1918(para)
6212
msgid ""
6213
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
6214
"pay-by-the-gigabyte public cloud computing offering."
6215
msgstr ""
6216
6217
#: serverguide/C/virtualization.xml:1923(para)
6218
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
6219
msgstr ""
6220
6221
#: serverguide/C/virtualization.xml:1928(para)
6222
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
6223
msgstr ""
6224
6225
#: serverguide/C/virtualization.xml:1933(para)
6226
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
6227
msgstr ""
6228
6229
#: serverguide/C/virtualization.xml:1938(para)
6230
msgid ""
6231
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
6232
"Linking Your Programs To Useful Systems. An open source project originally "
6233
"from the University of California at Santa Barbara, now supported by "
6234
"Eucalyptus Systems, a Canonical Partner."
6235
msgstr ""
6236
6237
#: serverguide/C/virtualization.xml:1945(para)
6238
msgid ""
6239
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
6240
"the high level Eucalyptus components (cloud, walrus, storage controller, "
6241
"cluster controller)."
6242
msgstr ""
6243
6244
#: serverguide/C/virtualization.xml:1951(para)
6245
msgid ""
6246
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
6247
"running virtual machines, running a node controller. Within Ubuntu, this "
6248
"generally means that the CPU has VT extensions, and can run the KVM "
6249
"hypervisor."
6250
msgstr ""
6251
6252
#: serverguide/C/virtualization.xml:1957(para)
6253
msgid ""
6254
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
6255
"on nodes which host the virtual machines that comprise the cloud. This "
6256
"service is provided by the Ubuntu package <application>eucalyptus-"
6257
"nc</application>."
6258
msgstr ""
6259
6260
#: serverguide/C/virtualization.xml:1963(para)
6261
msgid ""
6262
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6263
"gigabyte persistent storage solution for EC2."
6264
msgstr ""
6265
6266
#: serverguide/C/virtualization.xml:1968(para)
6267
msgid ""
6268
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6269
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6270
"installation can have its own Storage Controller. This component is provided "
6271
"by the <application>eucalyptus-sc</application> package."
6272
msgstr ""
6273
6274
#: serverguide/C/virtualization.xml:1975(para)
6275
msgid ""
6276
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6277
"solution, based on Eucalyptus."
6278
msgstr ""
6279
6280
#: serverguide/C/virtualization.xml:1980(para)
6281
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6282
msgstr ""
6283
6284
#: serverguide/C/virtualization.xml:1985(para)
6285
msgid ""
6286
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6287
"some modern CPUs, allowing for accelerated virtual machine hosting."
6288
msgstr ""
6289
6290
#: serverguide/C/virtualization.xml:1990(para)
6291
msgid ""
6292
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6293
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6294
"put/get abstractions."
6295
msgstr ""
6296
6297
#: serverguide/C/virtualization.xml:2000(title)
6298
msgid "OpenNebula"
6299
msgstr ""
6300
6301
#: serverguide/C/virtualization.xml:2002(para)
6302
msgid ""
6303
"<application>OpenNebula</application> allows virtual machines to be placed "
6304
"and re-placed dynamically on a pool of physical resources. This allows a "
6305
"virtual machine to be hosted from any location available."
6306
msgstr ""
6307
6308
#: serverguide/C/virtualization.xml:2007(para)
6309
msgid ""
6310
"This section will detail configuring an OpenNebula cluster using three "
6311
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6312
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6313
"also need a bridge configured to allow the virtual machines access to the "
6314
"local network. For details see <xref linkend=\"bridging\"/>."
6315
msgstr ""
6316
6317
#: serverguide/C/virtualization.xml:2016(para)
6318
msgid "First, from a terminal on the Front-End enter:"
6319
msgstr ""
6320
6321
#: serverguide/C/virtualization.xml:2021(command)
6322
msgid "sudo apt-get install opennebula"
6323
msgstr ""
6324
6325
#: serverguide/C/virtualization.xml:2024(para)
6326
msgid "On each Compute Node install:"
6327
msgstr ""
6328
6329
#: serverguide/C/virtualization.xml:2029(command)
6330
msgid "sudo apt-get install opennebula-node"
6331
msgstr ""
6332
6333
#: serverguide/C/virtualization.xml:2032(para)
6334
msgid ""
6335
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6336
"to have a password. On each machine execute:"
6337
msgstr ""
6338
6339
#: serverguide/C/virtualization.xml:2037(command)
6340
msgid "sudo passwd oneadmin"
6341
msgstr ""
6342
6343
#: serverguide/C/virtualization.xml:2040(para)
6344
msgid ""
6345
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6346
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6347
msgstr ""
6348
6349
#: serverguide/C/virtualization.xml:2045(command)
6350
msgid ""
6351
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6352
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6353
msgstr ""
6354
6355
#: serverguide/C/virtualization.xml:2046(command)
6356
msgid ""
6357
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6358
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6359
msgstr ""
6360
6361
#: serverguide/C/virtualization.xml:2047(command)
6362
msgid ""
6363
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6364
"/var/lib/one/.ssh/authorized_keys\""
6365
msgstr ""
6366
6367
#: serverguide/C/virtualization.xml:2050(para)
6368
msgid ""
6369
"The SSH key for the Compute Nodes needs to be added to the "
6370
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6371
"accomplish this <application>ssh</application> to each Compute Node as a "
6372
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6373
"session, and execute the following to copy the SSH key from "
6374
"<filename>~/.ssh/known_hosts</filename> to "
6375
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6376
msgstr ""
6377
6378
#: serverguide/C/virtualization.xml:2057(command)
6379
msgid ""
6380
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6381
"/etc/ssh/ssh_known_hosts\""
6382
msgstr ""
6383
6384
#: serverguide/C/virtualization.xml:2058(command)
6385
msgid ""
6386
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6387
"/etc/ssh/ssh_known_hosts\""
6388
msgstr ""
6389
6390
#: serverguide/C/virtualization.xml:2062(para)
6391
msgid ""
6392
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6393
"appropriate host names."
6394
msgstr ""
6395
6396
#: serverguide/C/virtualization.xml:2067(para)
6397
msgid ""
6398
"This allows the <emphasis>oneadmin</emphasis> to use "
6399
"<application>scp</application>, without a password or manual intervention, "
6400
"to deploy an image to the Compute Nodes."
6401
msgstr ""
6402
6403
#: serverguide/C/virtualization.xml:2072(para)
6404
msgid ""
6405
"On the Front-End create a directory to store the VM images, giving the "
6406
"<emphasis>oneadmin</emphasis> user access to the directory:"
6407
msgstr ""
6408
6409
#: serverguide/C/virtualization.xml:2077(command)
6410
msgid "sudo mkdir /var/lib/one/images"
6411
msgstr ""
6412
6413
#: serverguide/C/virtualization.xml:2078(command)
6414
msgid "sudo chown oneadmin /var/lib/one/images/"
6415
msgstr ""
6416
6417
#: serverguide/C/virtualization.xml:2081(para)
6418
msgid ""
6419
"Finally, copy a virtual machine disk file into "
6420
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6421
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6422
"and-vmbuilder\"/> for details."
6423
msgstr ""
6424
6425
#: serverguide/C/virtualization.xml:2090(para)
6426
msgid ""
6427
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6428
"and virtual machines added to the cluster."
6429
msgstr ""
6430
6431
#: serverguide/C/virtualization.xml:2094(para)
6432
msgid "From a terminal prompt enter:"
6433
msgstr ""
6434
6435
#: serverguide/C/virtualization.xml:2099(command)
6436
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6437
msgstr ""
6438
6439
#: serverguide/C/virtualization.xml:2100(command)
6440
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6441
msgstr ""
6442
6443
#: serverguide/C/virtualization.xml:2103(para)
6444
msgid ""
6445
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6446
"<filename>vnet01.template</filename>:"
6447
msgstr ""
6448
6449
#: serverguide/C/virtualization.xml:2107(programlisting)
6450
#, no-wrap
6451
msgid ""
6452
"\n"
6453
"NAME = \"LAN\"\n"
6454
"TYPE = RANGED\n"
6455
"BRIDGE = br0\n"
6456
"NETWORK_SIZE = C\n"
6457
"NETWORK_ADDRESS = 192.168.0.0\n"
6458
msgstr ""
6459
6460
#: serverguide/C/virtualization.xml:2116(para)
6461
msgid ""
6462
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6463
msgstr ""
6464
6465
#: serverguide/C/virtualization.xml:2121(para)
6466
msgid ""
6467
"Using the <application>onevnet</application> utility, add the virtual "
6468
"network to OpenNebula:"
6469
msgstr ""
6470
6471
#: serverguide/C/virtualization.xml:2126(command)
6472
msgid "onevnet create vnet01.template"
6473
msgstr ""
6474
6475
#: serverguide/C/virtualization.xml:2129(para)
6476
msgid ""
6477
"Now create a <emphasis>VM Template</emphasis> file named "
6478
"<filename>vm01.template</filename>:"
6479
msgstr ""
6480
6481
#: serverguide/C/virtualization.xml:2133(programlisting)
6482
#, no-wrap
6483
msgid ""
6484
"\n"
6485
"NAME = vm01\n"
6486
"CPU = 0.5\n"
6487
"MEMORY = 512\n"
6488
"\n"
6489
"OS = [ BOOT = hd ]\n"
6490
"\n"
6491
"DISK = [\n"
6492
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6493
" target = \"hda\",\n"
6494
" readonly = \"no\" ]\n"
6495
"\n"
6496
"NIC = [ NETWORK=\"LAN\" ]\n"
6497
"\n"
6498
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6499
msgstr ""
6500
6501
#: serverguide/C/virtualization.xml:2150(para)
6502
msgid "Start the virtual machine using <application>onevm</application>:"
6503
msgstr ""
6504
6505
#: serverguide/C/virtualization.xml:2155(command)
6506
msgid "onevm submit vm01.template"
6507
msgstr ""
6508
6509
#: serverguide/C/virtualization.xml:2158(para)
6510
msgid ""
6511
"Use the <application>onevm list</application> option to view information "
6512
"about virtual machines. Also, the <application>onevm show vm01</application> "
6513
"option will display more details about a specific virtual machine."
6514
msgstr ""
6515
6516
#: serverguide/C/virtualization.xml:2169(para)
6517
msgid ""
6518
"See the <ulink "
6519
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6520
"> for more information."
6521
msgstr ""
6522
6523
#: serverguide/C/virtualization.xml:2174(para)
6524
msgid ""
6525
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6526
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6527
"url=\"http://freenode.net\">Freenode</ulink>."
6528
msgstr ""
6529
6530
#: serverguide/C/virtualization.xml:2180(para)
6531
msgid ""
6532
"Also, the <ulink "
6533
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6534
"Wiki</ulink> page has more details."
6535
msgstr ""
6536
6537
#: serverguide/C/vcs.xml:13(title)
6538
msgid "Version Control System"
6539
msgstr ""
6540
6541
#: serverguide/C/vcs.xml:14(para)
6542
msgid ""
6543
"Version control is the art of managing changes to information. It has long "
6544
"been a critical tool for programmers, who typically spend their time making "
6545
"small changes to software and then undoing those changes the next day. But "
6546
"the usefulness of version control software extends far beyond the bounds of "
6547
"the software development world. Anywhere you can find people using computers "
6548
"to manage information that changes often, there is room for version control."
6549
msgstr ""
6550
6551
#: serverguide/C/vcs.xml:17(title)
6552
msgid "Bazaar"
6553
msgstr ""
6554
6555
#: serverguide/C/vcs.xml:18(para)
6556
msgid ""
6557
"Bazaar is a new version control system sponsored by Canonical, the "
6558
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6559
"support a central repository model, Bazaar also supports "
6560
"<emphasis>distributed version control</emphasis>, giving people the ability "
6561
"to collaborate more efficiently. In particular, Bazaar is designed to "
6562
"maximize the level of community participation in open source projects."
6563
msgstr ""
6564
6565
#: serverguide/C/vcs.xml:29(para)
6566
msgid ""
6567
"At a terminal prompt, enter the following command to install "
6568
"<application>bzr</application>: <screen>\n"
6569
"<command>sudo apt-get install bzr</command>\n"
6570
"</screen>"
6571
msgstr ""
6572
6573
#: serverguide/C/vcs.xml:40(para)
6574
msgid ""
6575
"To introduce yourself to <application>bzr</application>, use the "
6576
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6577
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6578
"</screen>"
6579
msgstr ""
6580
6581
#: serverguide/C/vcs.xml:49(title)
6582
msgid "Learning Bazaar"
6583
msgstr ""
6584
6585
#: serverguide/C/vcs.xml:50(para)
6586
msgid ""
6587
"Bazaar comes with bundled documentation installed into "
6588
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6589
"is a good place to start. The <application>bzr</application> command also "
6590
"comes with built-in help: <screen>\n"
6591
"<command>$ bzr help</command>\n"
6592
"</screen>"
6593
msgstr ""
6594
6595
#: serverguide/C/vcs.xml:60(para)
6596
msgid ""
6597
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6598
"<command>$ bzr help foo</command>\n"
6599
"</screen>"
6600
msgstr ""
6601
6602
#: serverguide/C/vcs.xml:68(title)
6603
msgid "Launchpad Integration"
6604
msgstr ""
6605
6606
#: serverguide/C/vcs.xml:69(para)
6607
msgid ""
6608
"While highly useful as a stand-alone system, Bazaar has good, optional "
6609
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6610
"the collaborative development system used by Canonical and the broader open "
6611
"source community to manage and extend Ubuntu itself. For information on how "
6612
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6613
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6614
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6615
msgstr ""
6616
6617
#: serverguide/C/vcs.xml:81(title)
6618
msgid "Subversion"
6619
msgstr ""
6620
6621
#: serverguide/C/vcs.xml:82(para)
6622
msgid ""
6623
"Subversion is an open source version control system. Using Subversion, you "
6624
"can record the history of source files and documents. It manages files and "
6625
"directories over time. A tree of files is placed into a central repository. "
6626
"The repository is much like an ordinary file server, except that it "
6627
"remembers every change ever made to files and directories."
6628
msgstr ""
6629
6630
#: serverguide/C/vcs.xml:87(para)
6631
msgid ""
6632
"To access Subversion repository using the HTTP protocol, you must install "
6633
"and configure a web server. Apache2 is proven to work with Subversion. "
6634
"Please refer to the HTTP subsection in the Apache2 section to install and "
6635
"configure Apache2. To access the Subversion repository using the HTTPS "
6636
"protocol, you must install and configure a digital certificate in your "
6637
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6638
"section to install and configure the digital certificate."
6639
msgstr ""
6640
6641
#: serverguide/C/vcs.xml:96(para)
6642
msgid ""
6643
"To install Subversion, run the following command from a terminal prompt:"
6644
msgstr ""
6645
6646
#: serverguide/C/vcs.xml:101(command)
6647
msgid "sudo apt-get install subversion libapache2-svn"
6648
msgstr ""
6649
6650
#: serverguide/C/vcs.xml:108(para)
6651
msgid ""
6652
"This step assumes you have installed above mentioned packages on your "
6653
"system. This section explains how to create a Subversion repository and "
6654
"access the project."
6655
msgstr ""
6656
6657
#: serverguide/C/vcs.xml:111(title)
6658
msgid "Create Subversion Repository"
6659
msgstr ""
6660
6661
#: serverguide/C/vcs.xml:112(para)
6662
msgid ""
6663
"The Subversion repository can be created using the following command from a "
6664
"terminal prompt:"
6665
msgstr ""
6666
6667
#: serverguide/C/vcs.xml:116(command)
6668
msgid "svnadmin create /path/to/repos/project"
6669
msgstr ""
6670
6671
#: serverguide/C/vcs.xml:121(title)
6672
msgid "Importing Files"
6673
msgstr ""
6674
6675
#: serverguide/C/vcs.xml:122(para)
6676
msgid ""
6677
"Once you create the repository you can <emphasis>import</emphasis> files "
6678
"into the repository. To import a directory, enter the following from a "
6679
"terminal prompt: <screen>\n"
6680
"<command>svn import /path/to/import/directory "
6681
"file:///path/to/repos/project</command>\n"
6682
"</screen>"
6683
msgstr ""
6684
6685
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6686
msgid "Access Methods"
6687
msgstr ""
6688
6689
#: serverguide/C/vcs.xml:135(para)
6690
msgid ""
6691
"Subversion repositories can be accessed (checked out) through many different "
6692
"methods --on local disk, or through various network protocols. A repository "
6693
"location, however, is always a URL. The table describes how different URL "
6694
"schemes map to the available access methods."
6695
msgstr ""
6696
6697
#: serverguide/C/vcs.xml:146(para)
6698
msgid "Schema"
6699
msgstr ""
6700
6701
#: serverguide/C/vcs.xml:147(para)
6702
msgid "Access Method"
6703
msgstr ""
6704
6705
#: serverguide/C/vcs.xml:152(para)
6706
msgid "file://"
6707
msgstr ""
6708
6709
#: serverguide/C/vcs.xml:153(para)
6710
msgid "direct repository access (on local disk)"
6711
msgstr ""
6712
6713
#: serverguide/C/vcs.xml:156(para)
6714
msgid "http://"
6715
msgstr ""
6716
6717
#: serverguide/C/vcs.xml:157(para)
6718
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6719
msgstr ""
6720
6721
#: serverguide/C/vcs.xml:160(para)
6722
msgid "https://"
6723
msgstr ""
6724
6725
#: serverguide/C/vcs.xml:161(para)
6726
msgid "Same as http://, but with SSL encryption"
6727
msgstr ""
6728
6729
#: serverguide/C/vcs.xml:164(para)
6730
msgid "svn://"
6731
msgstr ""
6732
6733
#: serverguide/C/vcs.xml:165(para)
6734
msgid "Access via custom protocol to an svnserve server"
6735
msgstr ""
6736
6737
#: serverguide/C/vcs.xml:168(para)
6738
msgid "svn+ssh://"
6739
msgstr ""
6740
6741
#: serverguide/C/vcs.xml:169(para)
6742
msgid "Same as svn://, but through an SSH tunnel"
6743
msgstr ""
6744
6745
#: serverguide/C/vcs.xml:175(para)
6746
msgid ""
6747
"In this section, we will see how to configure Subversion for all these "
6748
"access methods. Here, we cover the basics. For more advanced usage details, "
6749
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6750
msgstr ""
6751
6752
#: serverguide/C/vcs.xml:182(title)
6753
msgid "Direct repository access (file://)"
6754
msgstr ""
6755
6756
#: serverguide/C/vcs.xml:183(para)
6757
msgid ""
6758
"This is the simplest of all access methods. It does not require any "
6759
"Subversion server process to be running. This access method is used to "
6760
"access Subversion from the same machine. The syntax of the command, entered "
6761
"at a terminal prompt, is as follows:"
6762
msgstr ""
6763
6764
#: serverguide/C/vcs.xml:190(command)
6765
msgid "svn co file:///path/to/repos/project"
6766
msgstr ""
6767
6768
#: serverguide/C/vcs.xml:193(para)
6769
msgid "or"
6770
msgstr ""
6771
6772
#: serverguide/C/vcs.xml:196(command)
6773
msgid "svn co file://localhost/path/to/repos/project"
6774
msgstr ""
6775
6776
#: serverguide/C/vcs.xml:200(para)
6777
msgid ""
6778
"If you do not specify the hostname, there are three forward slashes (///) -- "
6779
"two for the protocol (file, in this case) plus the leading slash in the "
6780
"path. If you specify the hostname, you must use two forward slashes (//)."
6781
msgstr ""
6782
6783
#: serverguide/C/vcs.xml:202(para)
6784
msgid ""
6785
"The repository permissions depend on filesystem permissions. If the user has "
6786
"read/write permission, he can checkout from and commit to the repository."
6787
msgstr ""
6788
6789
#: serverguide/C/vcs.xml:205(title)
6790
msgid "Access via WebDAV protocol (http://)"
6791
msgstr ""
6792
6793
#: serverguide/C/vcs.xml:206(para)
6794
msgid ""
6795
"To access the Subversion repository via WebDAV protocol, you must configure "
6796
"your Apache 2 web server. Add the following snippet between the "
6797
"<emphasis><VirtualHost></emphasis> and "
6798
"<emphasis></VirtualHost></emphasis> elements in "
6799
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6800
"VirtualHost file:"
6801
msgstr ""
6802
6803
#: serverguide/C/vcs.xml:212(programlisting)
6804
#, no-wrap
6805
msgid ""
6806
"\n"
6807
" <Location /svn>\n"
6808
" DAV svn\n"
6809
" SVNPath /home/svn\n"
6810
" AuthType Basic\n"
6811
" AuthName \"Your repository name\"\n"
6812
" AuthUserFile /etc/subversion/passwd\n"
6813
" Require valid-user\n"
6814
" </Location> \n"
6815
msgstr ""
6816
6817
#: serverguide/C/vcs.xml:223(para)
6818
msgid ""
6819
"The above configuration snippet assumes that Subversion repositories are "
6820
"created under <filename>/home/svn/</filename> directory using "
6821
"<command>svnadmin</command> command. They can be accessible using "
6822
"<command>http://hostname/svn/repos_name</command> url."
6823
msgstr ""
6824
6825
#: serverguide/C/vcs.xml:229(para)
6826
msgid ""
6827
"To import or commit files to your Subversion repository over HTTP, the "
6828
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6829
"HTTP user is <command>www-data</command>. To change the ownership of the "
6830
"repository files enter the following command from terminal prompt:"
6831
msgstr ""
6832
6833
#: serverguide/C/vcs.xml:238(command)
6834
msgid "sudo chown -R www-data:www-data /path/to/repos"
6835
msgstr ""
6836
6837
#: serverguide/C/vcs.xml:241(para)
6838
msgid ""
6839
"By changing the ownership of repository as <command>www-data</command> you "
6840
"will not be able to import or commit files into the repository by running "
6841
"<command>svn import file:///</command> command as any user other than "
6842
"<command>www-data</command>."
6843
msgstr ""
6844
6845
#: serverguide/C/vcs.xml:250(para)
6846
msgid ""
6847
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6848
"that will contain user authentication details. To create a file issue the "
6849
"following command at a command prompt (which will create the file and add "
6850
"the first user):"
6851
msgstr ""
6852
6853
#: serverguide/C/vcs.xml:256(command)
6854
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6855
msgstr ""
6856
6857
#: serverguide/C/vcs.xml:259(para)
6858
msgid ""
6859
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6860
"option replaces the old file. Instead use this form:"
6861
msgstr ""
6862
6863
#: serverguide/C/vcs.xml:264(command)
6864
msgid "sudo htpasswd /etc/subversion/password user_name"
6865
msgstr ""
6866
6867
#: serverguide/C/vcs.xml:268(para)
6868
msgid ""
6869
"This command will prompt you to enter the password. Once you enter the "
6870
"password, the user is added. Now, to access the repository you can run the "
6871
"following command:"
6872
msgstr ""
6873
6874
#: serverguide/C/vcs.xml:269(command)
6875
msgid "svn co http://servername/svn"
6876
msgstr ""
6877
6878
#: serverguide/C/vcs.xml:271(para)
6879
msgid ""
6880
"The password is transmitted as plain text. If you are worried about password "
6881
"snooping, you are advised to use SSL encryption. For details, please refer "
6882
"next section."
6883
msgstr ""
6884
6885
#: serverguide/C/vcs.xml:277(title)
6886
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6887
msgstr ""
6888
6889
#: serverguide/C/vcs.xml:278(para)
6890
msgid ""
6891
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6892
"(https://) is similar to http:// except that you must install and configure "
6893
"the digital certificate in your Apache2 web server. To use SSL with "
6894
"Subversion add the above Apache2 configuration to "
6895
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6896
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6897
"configuration\"/>."
6898
msgstr ""
6899
6900
#: serverguide/C/vcs.xml:287(para)
6901
msgid ""
6902
"You can install a digital certificate issued by a signing authority. "
6903
"Alternatively, you can install your own self-signed certificate."
6904
msgstr ""
6905
6906
#: serverguide/C/vcs.xml:292(para)
6907
msgid ""
6908
"This step assumes you have installed and configured a digital certificate in "
6909
"your Apache 2 web server. Now, to access the Subversion repository, please "
6910
"refer to the above section! The access methods are exactly the same, except "
6911
"the protocol. You must use https:// to access the Subversion repository."
6912
msgstr ""
6913
6914
#: serverguide/C/vcs.xml:302(title)
6915
msgid "Access via custom protocol (svn://)"
6916
msgstr ""
6917
6918
#: serverguide/C/vcs.xml:303(para)
6919
msgid ""
6920
"Once the Subversion repository is created, you can configure the access "
6921
"control. You can edit the <filename> "
6922
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6923
"access control. For example, to set up authentication, you can uncomment the "
6924
"following lines in the configuration file:"
6925
msgstr ""
6926
6927
#: serverguide/C/vcs.xml:310(programlisting)
6928
#, no-wrap
6929
msgid ""
6930
"# [general]\n"
6931
"# password-db = passwd"
6932
msgstr ""
6933
6934
#: serverguide/C/vcs.xml:313(para)
6935
msgid ""
6936
"After uncommenting the above lines, you can maintain the user list in the "
6937
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6938
"directory and add the new user. The syntax is as follows:"
6939
msgstr ""
6940
6941
#: serverguide/C/vcs.xml:319(programlisting)
6942
#, no-wrap
6943
msgid "username = password"
6944
msgstr ""
6945
6946
#: serverguide/C/vcs.xml:320(para)
6947
msgid "For more details, please refer to the file."
6948
msgstr ""
6949
6950
#: serverguide/C/vcs.xml:324(para)
6951
msgid ""
6952
"Now, to access Subversion via the svn:// custom protocol, either from the "
6953
"same machine or a different machine, you can run svnserver using svnserve "
6954
"command. The syntax is as follows:"
6955
msgstr ""
6956
6957
#: serverguide/C/vcs.xml:329(programlisting)
6958
#, no-wrap
6959
msgid ""
6960
"$ svnserve -d --foreground -r /path/to/repos\n"
6961
"# -d -- daemon mode\n"
6962
"# --foreground -- run in foreground (useful for debugging)\n"
6963
"# -r -- root of directory to serve\n"
6964
"\n"
6965
"For more usage details, please refer to:\n"
6966
"$ svnserve --help"
6967
msgstr ""
6968
6969
#: serverguide/C/vcs.xml:337(para)
6970
msgid ""
6971
"Once you run this command, Subversion starts listening on default port "
6972
"(3690). To access the project repository, you must run the following command "
6973
"from a terminal prompt:"
6974
msgstr ""
6975
6976
#: serverguide/C/vcs.xml:340(command)
6977
msgid "svn co svn://hostname/project project --username user_name"
6978
msgstr ""
6979
6980
#: serverguide/C/vcs.xml:343(para)
6981
msgid ""
6982
"Based on server configuration, it prompts for password. Once you are "
6983
"authenticated, it checks out the code from Subversion repository. To "
6984
"synchronize the project repository with the local copy, you can run the "
6985
"<command>update</command> sub-command. The syntax of the command, entered at "
6986
"a terminal prompt, is as follows:"
6987
msgstr ""
6988
6989
#: serverguide/C/vcs.xml:351(command)
6990
msgid "cd project_dir ; svn update"
6991
msgstr ""
6992
6993
#: serverguide/C/vcs.xml:354(para)
6994
msgid ""
6995
"For more details about using each Subversion sub-command, you can refer to "
6996
"the manual. For example, to learn more about the co (checkout) command, "
6997
"please run the following command from a terminal prompt:"
6998
msgstr ""
6999
7000
#: serverguide/C/vcs.xml:358(command)
7001
msgid "svn co help"
7002
msgstr ""
7003
7004
#: serverguide/C/vcs.xml:362(title)
7005
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
7006
msgstr ""
7007
7008
#: serverguide/C/vcs.xml:363(para)
7009
msgid ""
7010
"The configuration and server process is same as in the svn:// method. For "
7011
"details, please refer to the above section. This step assumes you have "
7012
"followed the above step and started the Subversion server using "
7013
"<application>svnserve</application> command."
7014
msgstr ""
7015
7016
#: serverguide/C/vcs.xml:369(para)
7017
msgid ""
7018
"It is also assumed that the ssh server is running on that machine and that "
7019
"it is allowing incoming connections. To confirm, please try to login to that "
7020
"machine using ssh. If you can login, everything is perfect. If you cannot "
7021
"login, please address it before continuing further."
7022
msgstr ""
7023
7024
#: serverguide/C/vcs.xml:375(para)
7025
msgid ""
7026
"The svn+ssh:// protocol is used to access the Subversion repository using "
7027
"SSL encryption. The data transfer is encrypted using this method. To access "
7028
"the project repository (for example with a checkout), you must use the "
7029
"following command syntax:"
7030
msgstr ""
7031
7032
#: serverguide/C/vcs.xml:382(command)
7033
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
7034
msgstr ""
7035
7036
#: serverguide/C/vcs.xml:386(para)
7037
msgid ""
7038
"You must use the full path (/path/to/repos/project) to access the Subversion "
7039
"repository using this access method."
7040
msgstr ""
7041
7042
#: serverguide/C/vcs.xml:389(para)
7043
msgid ""
7044
"Based on server configuration, it prompts for password. You must enter the "
7045
"password you use to login via ssh. Once you are authenticated, it checks out "
7046
"the code from the Subversion repository."
7047
msgstr ""
7048
7049
#: serverguide/C/vcs.xml:399(title)
7050
msgid "CVS Server"
7051
msgstr ""
7052
7053
#: serverguide/C/vcs.xml:400(para)
7054
msgid ""
7055
"CVS is a version control system. You can use it to record the history of "
7056
"source files."
7057
msgstr ""
7058
7059
#: serverguide/C/vcs.xml:406(para)
7060
msgid ""
7061
"To install <application>CVS</application>, run the following command from a "
7062
"terminal prompt: <screen>\n"
7063
"<command>sudo apt-get install cvs</command>\n"
7064
"</screen> After you install <application>cvs</application>, you should "
7065
"install <application>xinetd</application> to start/stop the cvs server. At "
7066
"the prompt, enter the following command to install "
7067
"<application>xinetd</application>: <screen>\n"
7068
"<command>sudo apt-get install xinetd</command>\n"
7069
"</screen>"
7070
msgstr ""
7071
7072
#: serverguide/C/vcs.xml:439(programlisting)
7073
#, no-wrap
7074
msgid ""
7075
"\n"
7076
"service cvspserver\n"
7077
"{\n"
7078
" port = 2401\n"
7079
" socket_type = stream\n"
7080
" protocol = tcp\n"
7081
" user = root\n"
7082
" wait = no\n"
7083
" type = UNLISTED\n"
7084
" server = /usr/bin/cvs\n"
7085
" server_args = -f --allow-root /var/lib/cvs pserver\n"
7086
" disable = no\n"
7087
"}\n"
7088
msgstr ""
7089
7090
#: serverguide/C/vcs.xml:455(para)
7091
msgid ""
7092
"Be sure to edit the repository if you have changed the default repository "
7093
"(<application>/var/lib/cvs</application>) directory."
7094
msgstr ""
7095
7096
#: serverguide/C/vcs.xml:424(para)
7097
msgid ""
7098
"Once you install cvs, the repository will be automatically initialized. By "
7099
"default, the repository resides under the "
7100
"<application>/var/lib/cvs</application> directory. You can change this path "
7101
"by running following command: <screen>\n"
7102
"<command>cvs -d /your/new/cvs/repo init</command>\n"
7103
"</screen> Once the initial repository is set up, you can configure "
7104
"<application>xinetd</application> to start the CVS server. You can copy the "
7105
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
7106
"<placeholder-1/><placeholder-2/> Once you have configured "
7107
"<application>xinetd</application> you can start the cvs server by running "
7108
"following command: <screen>\n"
7109
"<command>sudo /etc/init.d/xinetd restart</command>\n"
7110
"</screen>"
7111
msgstr ""
7112
7113
#: serverguide/C/vcs.xml:468(para)
7114
msgid ""
7115
"You can confirm that the CVS server is running by issuing the following "
7116
"command:"
7117
msgstr ""
7118
7119
#: serverguide/C/vcs.xml:475(command)
7120
msgid "sudo netstat -tap | grep cvs"
7121
msgstr ""
7122
7123
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
7124
msgid ""
7125
"When you run this command, you should see the following line or something "
7126
"similar:"
7127
msgstr ""
7128
7129
#: serverguide/C/vcs.xml:484(programlisting)
7130
#, no-wrap
7131
msgid ""
7132
"\n"
7133
"tcp 0 0 *:cvspserver *:* LISTEN \n"
7134
msgstr ""
7135
7136
#: serverguide/C/vcs.xml:488(para)
7137
msgid ""
7138
"From here you can continue to add users, add new projects, and manage the "
7139
"CVS server."
7140
msgstr ""
7141
7142
#: serverguide/C/vcs.xml:493(para)
7143
msgid ""
7144
"CVS allows the user to add users independently of the underlying OS "
7145
"installation. Probably the easiest way is to use the Linux Users for CVS, "
7146
"although it has potential security issues. Please refer to the CVS manual "
7147
"for details."
7148
msgstr ""
7149
7150
#: serverguide/C/vcs.xml:503(title)
7151
msgid "Add Projects"
7152
msgstr ""
7153
7154
#: serverguide/C/vcs.xml:515(para)
7155
msgid ""
7156
"You can use the CVSROOT environment variable to store the CVS root "
7157
"directory. Once you export the CVSROOT environment variable, you can avoid "
7158
"using -d option in the above cvs command."
7159
msgstr ""
7160
7161
#: serverguide/C/vcs.xml:527(para)
7162
msgid ""
7163
"When you add a new project, the CVS user you use must have write access to "
7164
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
7165
"the <application>src</application> group has write access to the CVS "
7166
"repository. So, you can add the user to this group, and he can then add and "
7167
"manage projects in the CVS repository."
7168
msgstr ""
7169
7170
#: serverguide/C/vcs.xml:504(para)
7171
msgid ""
7172
"This section explains how to add new project to the CVS repository. Create "
7173
"the directory and add necessary document and source files to the directory. "
7174
"Now, run the following command to add this project to CVS repository: "
7175
"<screen>\n"
7176
"<command>cd your/project</command>\n"
7177
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
7178
"\"Importing my project to CVS repository\" . new_project start</command>\n"
7179
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
7180
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
7181
"purpose in this context, but since CVS requires them, they must be present. "
7182
"<placeholder-2/>"
7183
msgstr ""
7184
7185
#: serverguide/C/vcs.xml:540(ulink)
7186
msgid "Bazaar Home Page"
7187
msgstr ""
7188
7189
#: serverguide/C/vcs.xml:541(ulink)
7190
msgid "Launchpad"
7191
msgstr ""
7192
7193
#: serverguide/C/vcs.xml:542(ulink)
7194
msgid "Subversion Home Page"
7195
msgstr ""
7196
7197
#: serverguide/C/vcs.xml:543(ulink)
7198
msgid "Subversion Book"
7199
msgstr ""
7200
7201
#: serverguide/C/vcs.xml:545(ulink)
7202
msgid "CVS Manual"
7203
msgstr ""
7204
7205
#: serverguide/C/vcs.xml:546(ulink)
7206
msgid "Easy Bazaar Ubuntu Wiki page"
7207
msgstr ""
7208
7209
#: serverguide/C/vcs.xml:547(ulink)
7210
msgid "Ubuntu Wiki Subversion page"
7211
msgstr ""
7212
7213
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
7214
msgid "Credits and License"
7215
msgstr ""
7216
7217
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
7218
msgid ""
7219
"This document is maintained by the Ubuntu documentation team "
7220
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
7221
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
7222
msgstr ""
7223
7224
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
7225
msgid ""
7226
"This document is made available under the Creative Commons ShareAlike 2.5 "
7227
"License (CC-BY-SA)."
7228
msgstr ""
7229
7230
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
7231
msgid ""
7232
"You are free to modify, extend, and improve the Ubuntu documentation source "
7233
"code under the terms of this license. All derivative works must be released "
7234
"under this license."
7235
msgstr ""
7236
7237
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
7238
msgid ""
7239
"This documentation is distributed in the hope that it will be useful, but "
7240
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
7241
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
7242
msgstr ""
7243
7244
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
7245
msgid ""
7246
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
7247
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
7248
msgstr ""
7249
7250
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
7251
msgid "2008"
7252
msgstr ""
7253
7254
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
7255
msgid "Ubuntu Documentation Project"
7256
msgstr ""
7257
7258
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7259
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7260
msgstr ""
7261
7262
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7263
msgid "The Ubuntu Documentation Project"
7264
msgstr ""
7265
7266
#: serverguide/C/serverguide.xml:17(para)
7267
msgid ""
7268
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7269
"information on how to install and configure various server applications on "
7270
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7271
"guide for configuring and customizing your system."
7272
msgstr ""
7273
7274
#: serverguide/C/security.xml:13(title)
7275
msgid "Security"
7276
msgstr ""
7277
7278
#: serverguide/C/security.xml:14(para)
7279
msgid ""
7280
"Security should always be considered when installing, deploying, and using "
7281
"any type of computer system. Although a fresh installation of Ubuntu is "
7282
"relatively safe for immediate use on the Internet, it is important to have a "
7283
"balanced understanding of your systems security posture based on how it will "
7284
"be used after deployment."
7285
msgstr ""
7286
7287
#: serverguide/C/security.xml:17(para)
7288
msgid ""
7289
"This chapter provides an overview of security related topics as they pertain "
7290
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7291
"to protect your server and network from any number of potential security "
7292
"threats."
7293
msgstr ""
7294
7295
#: serverguide/C/security.xml:21(title)
7296
msgid "User Management"
7297
msgstr ""
7298
7299
#: serverguide/C/security.xml:22(para)
7300
msgid ""
7301
"User management is a critical part of maintaining a secure system. "
7302
"Ineffective user and privilege management often lead many systems into being "
7303
"compromised. Therefore, it is important that you understand how you can "
7304
"protect your server through simple and effective user account management "
7305
"techniques."
7306
msgstr ""
7307
7308
#: serverguide/C/security.xml:26(title)
7309
msgid "Where is root?"
7310
msgstr ""
7311
7312
#: serverguide/C/security.xml:27(para)
7313
msgid ""
7314
"Ubuntu developers made a conscientious decision to disable the "
7315
"administrative root account by default in all Ubuntu installations. This "
7316
"does not mean that the root account has been deleted or that it may not be "
7317
"accessed. It merely has been given a password which matches no possible "
7318
"encrypted value, therefore may not log in directly by itself."
7319
msgstr ""
7320
7321
#: serverguide/C/security.xml:30(para)
7322
msgid ""
7323
"Instead, users are encouraged to make use of a tool by the name of "
7324
"<application>sudo</application> to carry out system administrative duties. "
7325
"<application>Sudo</application> allows an authorized user to temporarily "
7326
"elevate their privileges using their own password instead of having to know "
7327
"the password belonging to the root account. This simple yet effective "
7328
"methodology provides accountability for all user actions, and gives the "
7329
"administrator granular control over which actions a user can perform with "
7330
"said privileges."
7331
msgstr ""
7332
7333
#: serverguide/C/security.xml:35(para)
7334
msgid ""
7335
"If for some reason you wish to enable the root account, simply give it a "
7336
"password:"
7337
msgstr ""
7338
7339
#: serverguide/C/security.xml:39(command)
7340
msgid "sudo passwd"
7341
msgstr ""
7342
7343
#: serverguide/C/security.xml:41(para)
7344
msgid ""
7345
"Sudo will prompt you for your password, and then ask you to supply a new "
7346
"password for root as shown below:"
7347
msgstr ""
7348
7349
#: serverguide/C/security.xml:44(userinput)
7350
#, no-wrap
7351
msgid "(enter your own password)"
7352
msgstr ""
7353
7354
#: serverguide/C/security.xml:45(userinput)
7355
#, no-wrap
7356
msgid "(enter a new password for root)"
7357
msgstr ""
7358
7359
#: serverguide/C/security.xml:46(userinput)
7360
#, no-wrap
7361
msgid "(repeat new password for root)"
7362
msgstr ""
7363
7364
#: serverguide/C/security.xml:44(computeroutput)
7365
#, no-wrap
7366
msgid ""
7367
"[sudo] password for username: <placeholder-1/>\n"
7368
"Enter new UNIX password: <placeholder-2/>\n"
7369
"Retype new UNIX password: <placeholder-3/>\n"
7370
"passwd: password updated successfully"
7371
msgstr ""
7372
7373
#: serverguide/C/security.xml:51(para)
7374
msgid "To disable the root account, use the following passwd syntax:"
7375
msgstr ""
7376
7377
#: serverguide/C/security.xml:55(command)
7378
msgid "sudo passwd -l root"
7379
msgstr ""
7380
7381
#: serverguide/C/security.xml:59(para)
7382
msgid ""
7383
"You should read more on <application>Sudo</application> by checking out it's "
7384
"man page:"
7385
msgstr ""
7386
7387
#: serverguide/C/security.xml:63(command)
7388
msgid "man sudo"
7389
msgstr ""
7390
7391
#: serverguide/C/security.xml:67(para)
7392
msgid ""
7393
"By default, the initial user created by the Ubuntu installer is a member of "
7394
"the group \"admin\" which is added to the file "
7395
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7396
"give any other account full root access through "
7397
"<application>sudo</application>, simply add them to the admin group."
7398
msgstr ""
7399
7400
#: serverguide/C/security.xml:73(title)
7401
msgid "Adding and Deleting Users"
7402
msgstr ""
7403
7404
#: serverguide/C/security.xml:74(para)
7405
msgid ""
7406
"The process for managing local users and groups is straight forward and "
7407
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7408
"other Debian based distributions, encourage the use of the \"adduser\" "
7409
"package for account management."
7410
msgstr ""
7411
7412
#: serverguide/C/security.xml:79(para)
7413
msgid ""
7414
"To add a user account, use the following syntax, and follow the prompts to "
7415
"give the account a password and identifiable characteristics such as a full "
7416
"name, phone number, etc."
7417
msgstr ""
7418
7419
#: serverguide/C/security.xml:83(command)
7420
msgid "sudo adduser username"
7421
msgstr ""
7422
7423
#: serverguide/C/security.xml:87(para)
7424
msgid ""
7425
"To delete a user account and its primary group, use the following syntax:"
7426
msgstr ""
7427
7428
#: serverguide/C/security.xml:91(command)
7429
msgid "sudo deluser username"
7430
msgstr ""
7431
7432
#: serverguide/C/security.xml:93(para)
7433
msgid ""
7434
"Deleting an account does not remove their respective home folder. It is up "
7435
"to you whether or not you wish to delete the folder manually or keep it "
7436
"according to your desired retention policies."
7437
msgstr ""
7438
7439
#: serverguide/C/security.xml:96(para)
7440
msgid ""
7441
"Remember, any user added later on with the same UID/GID as the previous "
7442
"owner will now have access to this folder if you have not taken the "
7443
"necessary precautions."
7444
msgstr ""
7445
7446
#: serverguide/C/security.xml:99(para)
7447
msgid ""
7448
"You may want to change these UID/GID values to something more appropriate, "
7449
"such as the root account, and perhaps even relocate the folder to avoid "
7450
"future conflicts:"
7451
msgstr ""
7452
7453
#: serverguide/C/security.xml:103(command)
7454
msgid "sudo chown -R root:root /home/username/"
7455
msgstr ""
7456
7457
#: serverguide/C/security.xml:104(command)
7458
msgid "sudo mkdir /home/archived_users/"
7459
msgstr ""
7460
7461
#: serverguide/C/security.xml:105(command)
7462
msgid "sudo mv /home/username /home/archived_users/"
7463
msgstr ""
7464
7465
#: serverguide/C/security.xml:109(para)
7466
msgid ""
7467
"To temporarily lock or unlock a user account, use the following syntax, "
7468
"respectively:"
7469
msgstr ""
7470
7471
#: serverguide/C/security.xml:113(command)
7472
msgid "sudo passwd -l username"
7473
msgstr ""
7474
7475
#: serverguide/C/security.xml:114(command)
7476
msgid "sudo passwd -u username"
7477
msgstr ""
7478
7479
#: serverguide/C/security.xml:118(para)
7480
msgid ""
7481
"To add or delete a personalized group, use the following syntax, "
7482
"respectively:"
7483
msgstr ""
7484
7485
#: serverguide/C/security.xml:122(command)
7486
msgid "sudo addgroup groupname"
7487
msgstr ""
7488
7489
#: serverguide/C/security.xml:123(command)
7490
msgid "sudo delgroup groupname"
7491
msgstr ""
7492
7493
#: serverguide/C/security.xml:127(para)
7494
msgid "To add a user to a group, use the following syntax:"
7495
msgstr ""
7496
7497
#: serverguide/C/security.xml:131(command)
7498
msgid "sudo adduser username groupname"
7499
msgstr ""
7500
7501
#: serverguide/C/security.xml:138(title)
7502
msgid "User Profile Security"
7503
msgstr ""
7504
7505
#: serverguide/C/security.xml:139(para)
7506
msgid ""
7507
"When a new user is created, the adduser utility creates a brand new home "
7508
"directory named <filename class=\"directory\">/home/username</filename>, "
7509
"respectively. The default profile is modeled after the contents found in the "
7510
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7511
"includes all profile basics."
7512
msgstr ""
7513
7514
#: serverguide/C/security.xml:142(para)
7515
msgid ""
7516
"If your server will be home to multiple users, you should pay close "
7517
"attention to the user home directory permissions to ensure confidentiality. "
7518
"By default, user home directories in Ubuntu are created with world "
7519
"read/execute permissions. This means that all users can browse and access "
7520
"the contents of other users home directories. This may not be suitable for "
7521
"your environment."
7522
msgstr ""
7523
7524
#: serverguide/C/security.xml:147(para)
7525
msgid ""
7526
"To verify your current users home directory permissions, use the following "
7527
"syntax:"
7528
msgstr ""
7529
7530
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7531
msgid "ls -ld /home/username"
7532
msgstr ""
7533
7534
#: serverguide/C/security.xml:153(para)
7535
msgid ""
7536
"The following output shows that the directory <filename "
7537
"class=\"directory\">/home/username</filename> has world readable permissions:"
7538
msgstr ""
7539
7540
#: serverguide/C/security.xml:156(computeroutput)
7541
#, no-wrap
7542
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7543
msgstr ""
7544
7545
#: serverguide/C/security.xml:160(para)
7546
msgid ""
7547
"You can remove the world readable permissions using the following syntax:"
7548
msgstr ""
7549
7550
#: serverguide/C/security.xml:164(command)
7551
msgid "sudo chmod 0750 /home/username"
7552
msgstr ""
7553
7554
#: serverguide/C/security.xml:167(para)
7555
msgid ""
7556
"Some people tend to use the recursive option (-R) indiscriminately which "
7557
"modifies all child folders and files, but this is not necessary, and may "
7558
"yield other undesirable results. The parent directory alone is sufficient "
7559
"for preventing unauthorized access to anything below the parent."
7560
msgstr ""
7561
7562
#: serverguide/C/security.xml:171(para)
7563
msgid ""
7564
"A much more efficient approach to the matter would be to modify the "
7565
"<application>adduser</application> global default permissions when creating "
7566
"user home folders. Simply edit the file "
7567
"<filename>/etc/adduser.conf</filename> and modify the "
7568
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7569
"new home directories will receive the correct permissions."
7570
msgstr ""
7571
7572
#: serverguide/C/security.xml:174(programlisting)
7573
#, no-wrap
7574
msgid ""
7575
"\n"
7576
"DIR_MODE=0750\n"
7577
msgstr ""
7578
7579
#: serverguide/C/security.xml:179(para)
7580
msgid ""
7581
"After correcting the directory permissions using any of the previously "
7582
"mentioned techniques, verify the results using the following syntax:"
7583
msgstr ""
7584
7585
#: serverguide/C/security.xml:185(para)
7586
msgid ""
7587
"The results below show that world readable permissions have been removed:"
7588
msgstr ""
7589
7590
#: serverguide/C/security.xml:188(computeroutput)
7591
#, no-wrap
7592
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7593
msgstr ""
7594
7595
#: serverguide/C/security.xml:195(title)
7596
msgid "Password Policy"
7597
msgstr ""
7598
7599
#: serverguide/C/security.xml:196(para)
7600
msgid ""
7601
"A strong password policy is one of the most important aspects of your "
7602
"security posture. Many successful security breaches involve simple brute "
7603
"force and dictionary attacks against weak passwords. If you intend to offer "
7604
"any form of remote access involving your local password system, make sure "
7605
"you adequately address minimum password complexity requirements, maximum "
7606
"password lifetimes, and frequent audits of your authentication systems."
7607
msgstr ""
7608
7609
#: serverguide/C/security.xml:200(title)
7610
msgid "Minimum Password Length"
7611
msgstr ""
7612
7613
#: serverguide/C/security.xml:201(para)
7614
msgid ""
7615
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7616
"well as some basic entropy checks. These values are controlled in the file "
7617
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7618
msgstr ""
7619
7620
#: serverguide/C/security.xml:204(programlisting)
7621
#, no-wrap
7622
msgid ""
7623
"\n"
7624
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7625
msgstr ""
7626
7627
#: serverguide/C/security.xml:207(para)
7628
msgid ""
7629
"If you would like to adjust the minimum length to 6 characters, change the "
7630
"appropriate variable to min=6. The modification is outlined below."
7631
msgstr ""
7632
7633
#: serverguide/C/security.xml:210(programlisting)
7634
#, no-wrap
7635
msgid ""
7636
"\n"
7637
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7638
msgstr ""
7639
7640
#: serverguide/C/security.xml:214(para)
7641
msgid ""
7642
"The <varname>max=8</varname> variable does not represent the maximum length "
7643
"of a password. It only means that complexity requirements will not be "
7644
"checked on passwords over 8 characters. You may want to look at the "
7645
"<application>libpam-cracklib</application> package for additional password "
7646
"entropy assistance."
7647
msgstr ""
7648
7649
#: serverguide/C/security.xml:220(title)
7650
msgid "Password Expiration"
7651
msgstr ""
7652
7653
#: serverguide/C/security.xml:221(para)
7654
msgid ""
7655
"When creating user accounts, you should make it a policy to have a minimum "
7656
"and maximum password age forcing users to change their passwords when they "
7657
"expire."
7658
msgstr ""
7659
7660
#: serverguide/C/security.xml:226(para)
7661
msgid ""
7662
"To easily view the current status of a user account, use the following "
7663
"syntax:"
7664
msgstr ""
7665
7666
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7667
msgid "sudo chage -l username"
7668
msgstr ""
7669
7670
#: serverguide/C/security.xml:232(para)
7671
msgid ""
7672
"The output below shows interesting facts about the user account, namely that "
7673
"there are no policies applied:"
7674
msgstr ""
7675
7676
#: serverguide/C/security.xml:235(computeroutput)
7677
#, no-wrap
7678
msgid ""
7679
"Last password change : Jan 20, 2008\n"
7680
"Password expires : never\n"
7681
"Password inactive : never\n"
7682
"Account expires : never\n"
7683
"Minimum number of days between password change : 0\n"
7684
"Maximum number of days between password change : 99999\n"
7685
"Number of days of warning before password expires : 7"
7686
msgstr ""
7687
7688
#: serverguide/C/security.xml:245(para)
7689
msgid ""
7690
"To set any of these values, simply use the following syntax, and follow the "
7691
"interactive prompts:"
7692
msgstr ""
7693
7694
#: serverguide/C/security.xml:249(command)
7695
msgid "sudo chage username"
7696
msgstr ""
7697
7698
#: serverguide/C/security.xml:251(para)
7699
msgid ""
7700
"The following is also an example of how you can manually change the explicit "
7701
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7702
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7703
"password expiration, and a warning time period (-W) of 14 days before "
7704
"password expiration."
7705
msgstr ""
7706
7707
#: serverguide/C/security.xml:255(command)
7708
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7709
msgstr ""
7710
7711
#: serverguide/C/security.xml:259(para)
7712
msgid "To verify changes, use the same syntax as mentioned previously:"
7713
msgstr ""
7714
7715
#: serverguide/C/security.xml:265(para)
7716
msgid ""
7717
"The output below shows the new policies that have been established for the "
7718
"account:"
7719
msgstr ""
7720
7721
#: serverguide/C/security.xml:268(computeroutput)
7722
#, no-wrap
7723
msgid ""
7724
"Last password change : Jan 20, 2008\n"
7725
"Password expires : Apr 19, 2008\n"
7726
"Password inactive : May 19, 2008\n"
7727
"Account expires : Jan 31, 2008\n"
7728
"Minimum number of days between password change : 5\n"
7729
"Maximum number of days between password change : 90\n"
7730
"Number of days of warning before password expires : 14"
7731
msgstr ""
7732
7733
#: serverguide/C/security.xml:284(title)
7734
msgid "Other Security Considerations"
7735
msgstr ""
7736
7737
#: serverguide/C/security.xml:285(para)
7738
msgid ""
7739
"Many applications use alternate authentication mechanisms that can be easily "
7740
"overlooked by even experienced system administrators. Therefore, it is "
7741
"important to understand and control how users authenticate and gain access "
7742
"to services and applications on your server."
7743
msgstr ""
7744
7745
#: serverguide/C/security.xml:290(title)
7746
msgid "SSH Access by Disabled Users"
7747
msgstr ""
7748
7749
#: serverguide/C/security.xml:291(para)
7750
msgid ""
7751
"Simply disabling/locking a user account will not prevent a user from logging "
7752
"into your server remotely if they have previously set up RSA public key "
7753
"authentication. They will still be able to gain shell access to the server, "
7754
"without the need for any password. Remember to check the users home "
7755
"directory for files that will allow for this type of authenticated SSH "
7756
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7757
msgstr ""
7758
7759
#: serverguide/C/security.xml:294(para)
7760
msgid ""
7761
"Remove or rename the directory <filename "
7762
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7763
"further SSH authentication capabilities."
7764
msgstr ""
7765
7766
#: serverguide/C/security.xml:297(para)
7767
msgid ""
7768
"Be sure to check for any established SSH connections by the disabled user, "
7769
"as it is possible they may have existing inbound or outbound connections. "
7770
"Kill any that are found."
7771
msgstr ""
7772
7773
#: serverguide/C/security.xml:300(para)
7774
msgid ""
7775
"Restrict SSH access to only user accounts that should have it. For example, "
7776
"you may create a group called \"sshlogin\" and add the group name as the "
7777
"value associated with the <varname>AllowGroups</varname> variable located in "
7778
"the file <filename>/etc/ssh/sshd_config</filename>."
7779
msgstr ""
7780
7781
#: serverguide/C/security.xml:303(programlisting)
7782
#, no-wrap
7783
msgid ""
7784
"\n"
7785
"AllowGroups sshlogin\n"
7786
msgstr ""
7787
7788
#: serverguide/C/security.xml:306(para)
7789
msgid ""
7790
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7791
"SSH service."
7792
msgstr ""
7793
7794
#: serverguide/C/security.xml:310(command)
7795
msgid "sudo adduser username sshlogin"
7796
msgstr ""
7797
7798
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7799
msgid "sudo /etc/init.d/ssh restart"
7800
msgstr ""
7801
7802
#: serverguide/C/security.xml:315(title)
7803
msgid "External User Database Authentication"
7804
msgstr ""
7805
7806
#: serverguide/C/security.xml:316(para)
7807
msgid ""
7808
"Most enterprise networks require centralized authentication and access "
7809
"controls for all system resources. If you have configured your server to "
7810
"authenticate users against external databases, be sure to disable the user "
7811
"accounts both externally and locally, this way you ensure that local "
7812
"fallback authentication is not possible."
7813
msgstr ""
7814
7815
#: serverguide/C/security.xml:325(title)
7816
msgid "Console Security"
7817
msgstr ""
7818
7819
#: serverguide/C/security.xml:326(para)
7820
msgid ""
7821
"As with any other security barrier you put in place to protect your server, "
7822
"it is pretty tough to defend against untold damage caused by someone with "
7823
"physical access to your environment, for example, theft of hard drives, "
7824
"power or service disruption and so on. Therefore, console security should be "
7825
"addressed merely as one component of your overall physical security "
7826
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7827
"very least slow down a determined one, so it is still advisable to perform "
7828
"basic precautions with regard to console security."
7829
msgstr ""
7830
7831
#: serverguide/C/security.xml:329(para)
7832
msgid ""
7833
"The following instructions will help defend your server against issues that "
7834
"could otherwise yield very serious consequences."
7835
msgstr ""
7836
7837
#: serverguide/C/security.xml:334(title)
7838
msgid "Disable Ctrl+Alt+Delete"
7839
msgstr ""
7840
7841
#: serverguide/C/security.xml:335(para)
7842
msgid ""
7843
"First and foremost, anyone that has physical access to the keyboard can "
7844
"simply use the "
7845
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7846
"eycombo> key combination to reboot the server without having to log on. "
7847
"Sure, someone could simply unplug the power source, but you should still "
7848
"prevent the use of this key combination on a production server. This forces "
7849
"an attacker to take more drastic measures to reboot the server, and will "
7850
"prevent accidental reboots at the same time."
7851
msgstr ""
7852
7853
#: serverguide/C/security.xml:340(para)
7854
msgid ""
7855
"To disable the reboot action taken by pressing the "
7856
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7857
"eycombo> key combination, comment out the following line in the file "
7858
"<filename>/etc/init/control-alt-delete.conf</filename>."
7859
msgstr ""
7860
7861
#: serverguide/C/security.xml:343(programlisting)
7862
#, no-wrap
7863
msgid ""
7864
"\n"
7865
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7866
msgstr ""
7867
7868
#: serverguide/C/security.xml:352(title)
7869
msgid "Firewall"
7870
msgstr ""
7871
7872
#: serverguide/C/security.xml:355(para)
7873
msgid ""
7874
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7875
"which is used to manipulate or decide the fate of network traffic headed "
7876
"into or through your server. All modern Linux firewall solutions use this "
7877
"system for packet filtering."
7878
msgstr ""
7879
7880
#: serverguide/C/security.xml:360(para)
7881
msgid ""
7882
"The kernel's packet filtering system would be of little use to "
7883
"administrators without a userspace interface to manage it. This is the "
7884
"purpose of iptables. When a packet reaches your server, it will be handed "
7885
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7886
"based on the rules supplied to it from userspace via iptables. Thus, "
7887
"iptables is all you need to manage your firewall if you're familiar with it, "
7888
"but many frontends are available to simplify the task."
7889
msgstr ""
7890
7891
#: serverguide/C/security.xml:370(title)
7892
msgid "ufw - Uncomplicated Firewall"
7893
msgstr ""
7894
7895
#: serverguide/C/security.xml:371(para)
7896
msgid ""
7897
"The default firewall configuration tool for Ubuntu is "
7898
"<application>ufw</application>. Developed to ease iptables firewall "
7899
"configuration, <application>ufw</application> provides a user friendly way "
7900
"to create an IPv4 or IPv6 host-based firewall."
7901
msgstr ""
7902
7903
#: serverguide/C/security.xml:375(para)
7904
msgid ""
7905
"<application>ufw</application> by default is initially disabled. From the "
7906
"<application>ufw</application> man page:"
7907
msgstr ""
7908
7909
#: serverguide/C/security.xml:379(quote)
7910
msgid ""
7911
"ufw is not intended to provide complete firewall functionality via its "
7912
"command interface, but instead provides an easy way to add or remove simple "
7913
"rules. It is currently mainly used for host-based firewalls."
7914
msgstr ""
7915
7916
#: serverguide/C/security.xml:383(para)
7917
msgid ""
7918
"The following are some examples of how to use <application>ufw</application>:"
7919
msgstr ""
7920
7921
#: serverguide/C/security.xml:388(para)
7922
msgid ""
7923
"First, <application>ufw</application> needs to be enabled. From a terminal "
7924
"prompt enter:"
7925
msgstr ""
7926
7927
#: serverguide/C/security.xml:392(command)
7928
msgid "sudo ufw enable"
7929
msgstr ""
7930
7931
#: serverguide/C/security.xml:396(para)
7932
msgid "To open a port (ssh in this example):"
7933
msgstr ""
7934
7935
#: serverguide/C/security.xml:400(command)
7936
msgid "sudo ufw allow 22"
7937
msgstr ""
7938
7939
#: serverguide/C/security.xml:404(para)
7940
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7941
msgstr ""
7942
7943
#: serverguide/C/security.xml:408(command)
7944
msgid "sudo ufw insert 1 allow 80"
7945
msgstr ""
7946
7947
#: serverguide/C/security.xml:412(para)
7948
msgid "Similarly, to close an opened port:"
7949
msgstr ""
7950
7951
#: serverguide/C/security.xml:416(command)
7952
msgid "sudo ufw deny 22"
7953
msgstr ""
7954
7955
#: serverguide/C/security.xml:420(para)
7956
msgid "To remove a rule, use delete followed by the rule:"
7957
msgstr ""
7958
7959
#: serverguide/C/security.xml:424(command)
7960
msgid "sudo ufw delete deny 22"
7961
msgstr ""
7962
7963
#: serverguide/C/security.xml:428(para)
7964
msgid ""
7965
"It is also possible to allow access from specific hosts or networks to a "
7966
"port. The following example allows ssh access from host 192.168.0.2 to any "
7967
"ip address on this host:"
7968
msgstr ""
7969
7970
#: serverguide/C/security.xml:433(command)
7971
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7972
msgstr ""
7973
7974
#: serverguide/C/security.xml:435(para)
7975
msgid ""
7976
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7977
"subnet."
7978
msgstr ""
7979
7980
#: serverguide/C/security.xml:441(para)
7981
msgid ""
7982
"Adding the <emphasis>--dry-run</emphasis> option to a "
7983
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
7984
"apply them. For example, the following is what would be applied if opening "
7985
"the HTTP port:"
7986
msgstr ""
7987
7988
#: serverguide/C/security.xml:447(command)
7989
msgid "sudo ufw --dry-run allow http"
7990
msgstr ""
7991
7992
#: serverguide/C/security.xml:451(computeroutput)
7993
#, no-wrap
7994
msgid ""
7995
"*filter\n"
7996
":ufw-user-input - [0:0]\n"
7997
":ufw-user-output - [0:0]\n"
7998
":ufw-user-forward - [0:0]\n"
7999
":ufw-user-limit - [0:0]\n"
8000
":ufw-user-limit-accept - [0:0]\n"
8001
"### RULES ###\n"
8002
"\n"
8003
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
8004
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
8005
"\n"
8006
"### END RULES ###\n"
8007
"-A ufw-user-input -j RETURN\n"
8008
"-A ufw-user-output -j RETURN\n"
8009
"-A ufw-user-forward -j RETURN\n"
8010
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
8011
"LIMIT]: \"\n"
8012
"-A ufw-user-limit -j REJECT\n"
8013
"-A ufw-user-limit-accept -j ACCEPT\n"
8014
"COMMIT\n"
8015
"Rules updated"
8016
msgstr ""
8017
8018
#: serverguide/C/security.xml:475(para)
8019
msgid "<application>ufw</application> can be disabled by:"
8020
msgstr ""
8021
8022
#: serverguide/C/security.xml:479(command)
8023
msgid "sudo ufw disable"
8024
msgstr ""
8025
8026
#: serverguide/C/security.xml:483(para)
8027
msgid "To see the firewall status, enter:"
8028
msgstr ""
8029
8030
#: serverguide/C/security.xml:487(command)
8031
msgid "sudo ufw status"
8032
msgstr ""
8033
8034
#: serverguide/C/security.xml:491(para)
8035
msgid "And for more verbose status information use:"
8036
msgstr ""
8037
8038
#: serverguide/C/security.xml:495(command)
8039
msgid "sudo ufw status verbose"
8040
msgstr ""
8041
8042
#: serverguide/C/security.xml:499(para)
8043
msgid "To view the <emphasis>numbered</emphasis> format:"
8044
msgstr ""
8045
8046
#: serverguide/C/security.xml:503(command)
8047
msgid "sudo ufw status numbered"
8048
msgstr ""
8049
8050
#: serverguide/C/security.xml:508(para)
8051
msgid ""
8052
"If the port you want to open or close is defined in "
8053
"<filename>/etc/services</filename>, you can use the port name instead of the "
8054
"number. In the above examples, replace <emphasis>22</emphasis> with "
8055
"<emphasis>ssh</emphasis>."
8056
msgstr ""
8057
8058
#: serverguide/C/security.xml:514(para)
8059
msgid ""
8060
"This is a quick introduction to using <application>ufw</application>. Please "
8061
"refer to the <application>ufw</application> man page for more information."
8062
msgstr ""
8063
8064
#: serverguide/C/security.xml:520(title)
8065
msgid "ufw Application Integration"
8066
msgstr ""
8067
8068
#: serverguide/C/security.xml:522(para)
8069
msgid ""
8070
"Applications that open ports can include an <application>ufw</application> "
8071
"profile, which details the ports needed for the application to function "
8072
"properly. The profiles are kept in <filename "
8073
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
8074
"the default ports have been changed."
8075
msgstr ""
8076
8077
#: serverguide/C/security.xml:531(para)
8078
msgid ""
8079
"To view which applications have installed a profile, enter the following in "
8080
"a terminal:"
8081
msgstr ""
8082
8083
#: serverguide/C/security.xml:536(command)
8084
msgid "sudo ufw app list"
8085
msgstr ""
8086
8087
#: serverguide/C/security.xml:542(para)
8088
msgid ""
8089
"Similar to allowing traffic to a port, using an application profile is "
8090
"accomplished by entering:"
8091
msgstr ""
8092
8093
#: serverguide/C/security.xml:547(command)
8094
msgid "sudo ufw allow Samba"
8095
msgstr ""
8096
8097
#: serverguide/C/security.xml:553(para)
8098
msgid "An extended syntax is available as well:"
8099
msgstr ""
8100
8101
#: serverguide/C/security.xml:558(command)
8102
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
8103
msgstr ""
8104
8105
#: serverguide/C/security.xml:561(para)
8106
msgid ""
8107
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
8108
"with the application profile you are using and the IP range for your network."
8109
msgstr ""
8110
8111
#: serverguide/C/security.xml:567(para)
8112
msgid ""
8113
"There is no need to specify the <emphasis>protocol</emphasis> for the "
8114
"application, because that information is detailed in the profile. Also, note "
8115
"that the <emphasis>app</emphasis> name replaces the "
8116
"<emphasis>port</emphasis> number."
8117
msgstr ""
8118
8119
#: serverguide/C/security.xml:576(para)
8120
msgid ""
8121
"To view details about which ports, protocols, etc are defined for an "
8122
"application, enter:"
8123
msgstr ""
8124
8125
#: serverguide/C/security.xml:581(command)
8126
msgid "sudo ufw app info Samba"
8127
msgstr ""
8128
8129
#: serverguide/C/security.xml:587(para)
8130
msgid ""
8131
"Not all applications that require opening a network port come with "
8132
"<application>ufw</application> profiles, but if you have profiled an "
8133
"application and want the file to be included with the package, please file a "
8134
"bug against the package in <ulink "
8135
"url=\"https://launchpad.net/\">Launchpad</ulink>."
8136
msgstr ""
8137
8138
#: serverguide/C/security.xml:596(title)
8139
msgid "IP Masquerading"
8140
msgstr ""
8141
8142
#: serverguide/C/security.xml:597(para)
8143
msgid ""
8144
"The purpose of IP Masquerading is to allow machines with private, non-"
8145
"routable IP addresses on your network to access the Internet through the "
8146
"machine doing the masquerading. Traffic from your private network destined "
8147
"for the Internet must be manipulated for replies to be routable back to the "
8148
"machine that made the request. To do this, the kernel must modify the "
8149
"<emphasis>source</emphasis> IP address of each packet so that replies will "
8150
"be routed back to it, rather than to the private IP address that made the "
8151
"request, which is impossible over the Internet. Linux uses "
8152
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
8153
"connections belong to which machines and reroute each return packet "
8154
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
8155
"having originated from your Ubuntu gateway machine. This process is referred "
8156
"to in Microsoft documentation as Internet Connection Sharing."
8157
msgstr ""
8158
8159
#: serverguide/C/security.xml:613(title)
8160
msgid "ufw Masquerading"
8161
msgstr ""
8162
8163
#: serverguide/C/security.xml:614(para)
8164
msgid ""
8165
"IP Masquerading can be achieved using custom <application>ufw</application> "
8166
"rules. This is possible because the current back-end for "
8167
"<application>ufw</application> is <application>iptables-"
8168
"restore</application> with the rules files located in "
8169
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
8170
"legacy iptables rules used without <application>ufw</application>, and rules "
8171
"that are more network gateway or bridge related."
8172
msgstr ""
8173
8174
#: serverguide/C/security.xml:620(para)
8175
msgid ""
8176
"The rules are split into two different files, rules that should be executed "
8177
"before <application>ufw</application> command line rules, and rules that are "
8178
"executed after <application>ufw</application> command line rules."
8179
msgstr ""
8180
8181
#: serverguide/C/security.xml:626(para)
8182
msgid ""
8183
"First, packet forwarding needs to be enabled in "
8184
"<application>ufw</application>. Two configuration files will need to be "
8185
"adjusted, in <filename>/etc/default/ufw</filename> change the "
8186
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
8187
msgstr ""
8188
8189
#: serverguide/C/security.xml:630(programlisting)
8190
#, no-wrap
8191
msgid ""
8192
"\n"
8193
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
8194
msgstr ""
8195
8196
#: serverguide/C/security.xml:633(para)
8197
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
8198
msgstr ""
8199
8200
#: serverguide/C/security.xml:636(programlisting)
8201
#, no-wrap
8202
msgid ""
8203
"\n"
8204
"net/ipv4/ip_forward=1\n"
8205
msgstr ""
8206
8207
#: serverguide/C/security.xml:639(para)
8208
msgid "Similarly, for IPv6 forwarding uncomment:"
8209
msgstr ""
8210
8211
#: serverguide/C/security.xml:642(programlisting)
8212
#, no-wrap
8213
msgid ""
8214
"\n"
8215
"net/ipv6/conf/default/forwarding=1\n"
8216
msgstr ""
8217
8218
#: serverguide/C/security.xml:647(para)
8219
msgid ""
8220
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
8221
"file. The default rules only configure the <emphasis>filter</emphasis> "
8222
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
8223
"need to be configured. Add the following to the top of the file just after "
8224
"the header comments:"
8225
msgstr ""
8226
8227
#: serverguide/C/security.xml:652(programlisting)
8228
#, no-wrap
8229
msgid ""
8230
"\n"
8231
"# nat Table rules\n"
8232
"*nat\n"
8233
":POSTROUTING ACCEPT [0:0]\n"
8234
"\n"
8235
"# Forward traffic from eth1 through eth0.\n"
8236
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
8237
"\n"
8238
"# don't delete the 'COMMIT' line or these nat table rules won't be "
8239
"processed\n"
8240
"COMMIT\n"
8241
msgstr ""
8242
8243
#: serverguide/C/security.xml:663(para)
8244
msgid ""
8245
"The comments are not strictly necessary, but it is considered good practice "
8246
"to document your configuration. Also, when modifying any of the "
8247
"<emphasis>rules</emphasis> files in <filename "
8248
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
8249
"line for each table modified:"
8250
msgstr ""
8251
8252
#: serverguide/C/security.xml:669(programlisting)
8253
#, no-wrap
8254
msgid ""
8255
"\n"
8256
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8257
"COMMIT\n"
8258
msgstr ""
8259
8260
#: serverguide/C/security.xml:674(para)
8261
msgid ""
8262
"For each <emphasis>Table</emphasis> a corresponding "
8263
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8264
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8265
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8266
"<emphasis>mangle</emphasis> tables."
8267
msgstr ""
8268
8269
#: serverguide/C/security.xml:681(para)
8270
msgid ""
8271
"In the above example replace <emphasis>eth0</emphasis>, "
8272
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8273
"appropriate interfaces and IP range for your network."
8274
msgstr ""
8275
8276
#: serverguide/C/security.xml:689(para)
8277
msgid ""
8278
"Finally, disable and re-enable <application>ufw</application> to apply the "
8279
"changes:"
8280
msgstr ""
8281
8282
#: serverguide/C/security.xml:693(command)
8283
msgid "sudo ufw disable && sudo ufw enable"
8284
msgstr ""
8285
8286
#: serverguide/C/security.xml:697(para)
8287
msgid ""
8288
"IP Masquerading should now be enabled. You can also add any additional "
8289
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8290
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8291
"forward</emphasis> chain."
8292
msgstr ""
8293
8294
#: serverguide/C/security.xml:704(title)
8295
msgid "iptables Masquerading"
8296
msgstr ""
8297
8298
#: serverguide/C/security.xml:705(para)
8299
msgid ""
8300
"<application>iptables</application> can also be used to enable masquerading."
8301
msgstr ""
8302
8303
#: serverguide/C/security.xml:710(para)
8304
msgid ""
8305
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8306
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8307
"uncomment the following line"
8308
msgstr ""
8309
8310
#: serverguide/C/security.xml:714(programlisting)
8311
#, no-wrap
8312
msgid ""
8313
"\n"
8314
"net.ipv4.ip_forward=1\n"
8315
msgstr ""
8316
8317
#: serverguide/C/security.xml:717(para)
8318
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8319
msgstr ""
8320
8321
#: serverguide/C/security.xml:720(programlisting)
8322
#, no-wrap
8323
msgid ""
8324
"\n"
8325
"net.ipv6.conf.default.forwarding=1\n"
8326
msgstr ""
8327
8328
#: serverguide/C/security.xml:725(para)
8329
msgid ""
8330
"Next, execute the <application>sysctl</application> command to enable the "
8331
"new settings in the configuration file:"
8332
msgstr ""
8333
8334
#: serverguide/C/security.xml:729(command)
8335
msgid "sudo sysctl -p"
8336
msgstr ""
8337
8338
#: serverguide/C/security.xml:733(para)
8339
msgid ""
8340
"IP Masquerading can now be accomplished with a single iptables rule, which "
8341
"may differ slightly based on your network configuration:"
8342
msgstr ""
8343
8344
#: serverguide/C/security.xml:736(screen)
8345
#, no-wrap
8346
msgid ""
8347
"\n"
8348
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8349
msgstr ""
8350
8351
#: serverguide/C/security.xml:739(para)
8352
msgid ""
8353
"The above command assumes that your private address space is 192.168.0.0/16 "
8354
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8355
"follows:"
8356
msgstr ""
8357
8358
#: serverguide/C/security.xml:744(para)
8359
msgid "-t nat -- the rule is to go into the nat table"
8360
msgstr ""
8361
8362
#: serverguide/C/security.xml:745(para)
8363
msgid ""
8364
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8365
msgstr ""
8366
8367
#: serverguide/C/security.xml:746(para)
8368
msgid ""
8369
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8370
"specified address space"
8371
msgstr ""
8372
8373
#: serverguide/C/security.xml:747(para)
8374
msgid ""
8375
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8376
"specified network device"
8377
msgstr ""
8378
8379
#: serverguide/C/security.xml:749(para)
8380
msgid ""
8381
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8382
"MASQUERADE target to be manipulated as described above"
8383
msgstr ""
8384
8385
#: serverguide/C/security.xml:757(para)
8386
msgid ""
8387
"Also, each chain in the filter table (the default table, and where most or "
8388
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8389
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8390
"you may have set the policies to DROP or REJECT, in which case your "
8391
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8392
"above rule to work:"
8393
msgstr ""
8394
8395
#: serverguide/C/security.xml:764(screen)
8396
#, no-wrap
8397
msgid ""
8398
"\n"
8399
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8400
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8401
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8402
msgstr ""
8403
8404
#: serverguide/C/security.xml:768(para)
8405
msgid ""
8406
"The above commands will allow all connections from your local network to the "
8407
"Internet and all traffic related to those connections to return to the "
8408
"machine that initiated them."
8409
msgstr ""
8410
8411
#: serverguide/C/security.xml:775(para)
8412
msgid ""
8413
"If you want masquerading to be enabled on reboot, which you probably do, "
8414
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8415
"example add the first command with no filtering:"
8416
msgstr ""
8417
8418
#: serverguide/C/security.xml:779(screen)
8419
#, no-wrap
8420
msgid ""
8421
"\n"
8422
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8423
msgstr ""
8424
8425
#: serverguide/C/security.xml:787(title)
8426
msgid "Logs"
8427
msgstr ""
8428
8429
#: serverguide/C/security.xml:788(para)
8430
msgid ""
8431
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8432
"firewall rules, and noticing unusual activity on your network. You must "
8433
"include logging rules in your firewall for them to be generated, though, and "
8434
"logging rules must come before any applicable terminating rule (a rule with "
8435
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8436
"REJECT)."
8437
msgstr ""
8438
8439
#: serverguide/C/security.xml:795(para)
8440
msgid ""
8441
"If you are using <application>ufw</application>, you can turn on logging by "
8442
"entering the following in a terminal:"
8443
msgstr ""
8444
8445
#: serverguide/C/security.xml:799(command)
8446
msgid "sudo ufw logging on"
8447
msgstr ""
8448
8449
#: serverguide/C/security.xml:801(para)
8450
msgid ""
8451
"To turn logging off in <application>ufw</application>, simply replace "
8452
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8453
"role=\"italic\">off</emphasis> in the above command."
8454
msgstr ""
8455
8456
#: serverguide/C/security.xml:804(para)
8457
msgid ""
8458
"If using <application>iptables</application> instead of "
8459
"<application>ufw</application>, enter:"
8460
msgstr ""
8461
8462
#: serverguide/C/security.xml:807(screen)
8463
#, no-wrap
8464
msgid ""
8465
"\n"
8466
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8467
"prefix \"NEW_HTTP_CONN: \"\n"
8468
msgstr ""
8469
8470
#: serverguide/C/security.xml:810(para)
8471
msgid ""
8472
"A request on port 80 from the local machine, then, would generate a log in "
8473
"dmesg that looks like this:"
8474
msgstr ""
8475
8476
#: serverguide/C/security.xml:815(programlisting)
8477
#, no-wrap
8478
msgid ""
8479
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8480
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8481
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8482
"WINDOW=32767 RES=0x00 SYN URGP=0"
8483
msgstr ""
8484
8485
#: serverguide/C/security.xml:817(para)
8486
msgid ""
8487
"The above log will also appear in <filename>/var/log/messages</filename>, "
8488
"<filename>/var/log/syslog</filename>, and "
8489
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8490
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8491
"and configuring <application>ulogd</application> and using the ULOG target "
8492
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8493
"server that listens for logging instructions from the kernel specifically "
8494
"for firewalls, and can log to any file you like, or even to a "
8495
"<application>PostgreSQL</application> or <application>MySQL</application> "
8496
"database. Making sense of your firewall logs can be simplified by using a "
8497
"log analyzing tool such as <application>fwanalog</application>, "
8498
"<application> fwlogwatch</application>, or <application>lire</application>."
8499
msgstr ""
8500
8501
#: serverguide/C/security.xml:832(title)
8502
msgid "Other Tools"
8503
msgstr ""
8504
8505
#: serverguide/C/security.xml:833(para)
8506
msgid ""
8507
"There are many tools available to help you construct a complete firewall "
8508
"without intimate knowledge of iptables. For the GUI-inclined:"
8509
msgstr ""
8510
8511
#: serverguide/C/security.xml:839(para)
8512
msgid ""
8513
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8514
"popular and easy to use."
8515
msgstr ""
8516
8517
#: serverguide/C/security.xml:844(para)
8518
msgid ""
8519
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8520
"and will look familiar to an administrator who has used a commercial "
8521
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8522
msgstr ""
8523
8524
#: serverguide/C/security.xml:850(para)
8525
msgid ""
8526
"If you prefer a command-line tool with plain-text configuration files:"
8527
msgstr ""
8528
8529
#: serverguide/C/security.xml:855(para)
8530
msgid ""
8531
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8532
"powerful solution to help you configure an advanced firewall for any network."
8533
msgstr ""
8534
8535
#: serverguide/C/security.xml:861(para)
8536
msgid ""
8537
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8538
"a working firewall \"out of the box\" with zero configuration, and will "
8539
"allow you to easily set up a more advanced firewall by editing simple, well-"
8540
"documented configuration files."
8541
msgstr ""
8542
8543
#: serverguide/C/security.xml:868(para)
8544
msgid ""
8545
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8546
"designed to be a desktop firewall application. It is made up of a server "
8547
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8548
"like many popular interactive firewall applications for Windows."
8549
msgstr ""
8550
8551
#: serverguide/C/security.xml:880(para)
8552
msgid ""
8553
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8554
"Firewall</ulink> wiki page contains information on the development of "
8555
"<application>ufw</application>."
8556
msgstr ""
8557
8558
#: serverguide/C/security.xml:886(para)
8559
msgid ""
8560
"Also, the <application>ufw</application> manual page contains some very "
8561
"useful information: <command>man ufw</command>."
8562
msgstr ""
8563
8564
#: serverguide/C/security.xml:891(para)
8565
msgid ""
8566
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8567
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8568
"on using <application>iptables</application>."
8569
msgstr ""
8570
8571
#: serverguide/C/security.xml:897(para)
8572
msgid ""
8573
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8574
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8575
msgstr ""
8576
8577
#: serverguide/C/security.xml:903(para)
8578
msgid ""
8579
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8580
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8581
msgstr ""
8582
8583
#: serverguide/C/security.xml:911(title)
8584
msgid "AppArmor"
8585
msgstr ""
8586
8587
#: serverguide/C/security.xml:912(para)
8588
msgid ""
8589
"<application>AppArmor</application> is a Linux Security Module "
8590
"implementation of name-based mandatory access controls. AppArmor confines "
8591
"individual programs to a set of listed files and posix 1003.1e draft "
8592
"capabilities."
8593
msgstr ""
8594
8595
#: serverguide/C/security.xml:916(para)
8596
msgid ""
8597
"<application>AppArmor</application> is installed and loaded by default. It "
8598
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8599
"and permissions the application requires. Some packages will install their "
8600
"own profiles, and additional profiles can be found in the "
8601
"<application>apparmor-profiles</application> package."
8602
msgstr ""
8603
8604
#: serverguide/C/security.xml:921(para)
8605
msgid ""
8606
"To install the <application>apparmor-profiles</application> package from a "
8607
"terminal prompt:"
8608
msgstr ""
8609
8610
#: serverguide/C/security.xml:927(para)
8611
msgid "AppArmor profiles have two modes of execution:"
8612
msgstr ""
8613
8614
#: serverguide/C/security.xml:932(para)
8615
msgid ""
8616
"Complaining/Learning: profile violations are permitted and logged. Useful "
8617
"for testing and developing new profiles."
8618
msgstr ""
8619
8620
#: serverguide/C/security.xml:937(para)
8621
msgid ""
8622
"Enforced/Confined: enforces profile policy as well as logging the violation."
8623
msgstr ""
8624
8625
#: serverguide/C/security.xml:943(title)
8626
msgid "Using AppArmor"
8627
msgstr ""
8628
8629
#: serverguide/C/security.xml:944(para)
8630
msgid ""
8631
"The <application>apparmor-utils</application> package contains command line "
8632
"utilities that you can use to change the <application>AppArmor</application> "
8633
"execution mode, find the status of a profile, create new profiles, etc."
8634
msgstr ""
8635
8636
#: serverguide/C/security.xml:950(para)
8637
msgid ""
8638
"<application>apparmor_status</application> is used to view the current "
8639
"status of AppArmor profiles."
8640
msgstr ""
8641
8642
#: serverguide/C/security.xml:954(command)
8643
msgid "sudo apparmor_status"
8644
msgstr ""
8645
8646
#: serverguide/C/security.xml:958(para)
8647
msgid ""
8648
"<application>aa-complain</application> places a profile into "
8649
"<emphasis>complain</emphasis> mode."
8650
msgstr ""
8651
8652
#: serverguide/C/security.xml:962(command)
8653
msgid "sudo aa-complain /path/to/bin"
8654
msgstr ""
8655
8656
#: serverguide/C/security.xml:966(para)
8657
msgid ""
8658
"<application>aa-enforce</application> places a profile into "
8659
"<emphasis>enforce</emphasis> mode."
8660
msgstr ""
8661
8662
#: serverguide/C/security.xml:970(command)
8663
msgid "sudo aa-enforce /path/to/bin"
8664
msgstr ""
8665
8666
#: serverguide/C/security.xml:974(para)
8667
msgid ""
8668
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8669
"profiles are located. It can be used to manipulate the "
8670
"<emphasis>mode</emphasis> of all profiles."
8671
msgstr ""
8672
8673
#: serverguide/C/security.xml:978(para)
8674
msgid "Enter the following to place all profiles into complain mode:"
8675
msgstr ""
8676
8677
#: serverguide/C/security.xml:982(command)
8678
msgid "sudo aa-complain /etc/apparmor.d/*"
8679
msgstr ""
8680
8681
#: serverguide/C/security.xml:984(para)
8682
msgid "To place all profiles in enforce mode:"
8683
msgstr ""
8684
8685
#: serverguide/C/security.xml:988(command)
8686
msgid "sudo aa-enforce /etc/apparmor.d/*"
8687
msgstr "sudo aa-enforce /etc/apparmor.d/*"
8688
8689
#: serverguide/C/security.xml:992(para)
8690
msgid ""
8691
"<application>apparmor_parser</application> is used to load a profile into "
8692
"the kernel. It can also be used to reload a currently loaded profile using "
8693
"the <emphasis>-r</emphasis> option. To load a profile:"
8694
msgstr ""
8695
8696
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8697
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8698
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8699
8700
#: serverguide/C/security.xml:999(para)
8701
msgid "To reload a profile:"
8702
msgstr "Pa recargar un perfil:"
8703
8704
#: serverguide/C/security.xml:1003(command)
8705
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8706
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8707
8708
#: serverguide/C/security.xml:1007(para)
8709
msgid ""
8710
"<filename>/etc/init.d/apparmor</filename> can be used to "
8711
"<emphasis>reload</emphasis> all profiles:"
8712
msgstr ""
8713
"<filename>/etc/init.d/apparmor</filename> puede usase pa "
8714
"<emphasis>recargar</emphasis> tolos perfiles:"
8715
8716
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8717
msgid "sudo /etc/init.d/apparmor reload"
8718
msgstr "sudo /etc/init.d/apparmor reload"
8719
8720
#: serverguide/C/security.xml:1015(para)
8721
msgid ""
8722
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8723
"with the <application>apparmor_parser -R</application> option to "
8724
"<emphasis>disable</emphasis> a profile."
8725
msgstr ""
8726
8727
#: serverguide/C/security.xml:1020(command)
8728
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8729
msgstr "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8730
8731
#: serverguide/C/security.xml:1021(command)
8732
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8733
msgstr ""
8734
8735
#: serverguide/C/security.xml:1023(para)
8736
msgid ""
8737
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8738
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8739
"load the profile using the <emphasis>-a</emphasis> option."
8740
msgstr ""
8741
8742
#: serverguide/C/security.xml:1028(command)
8743
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8744
msgstr ""
8745
8746
#: serverguide/C/security.xml:1033(para)
8747
msgid ""
8748
"<application>AppArmor</application> can be disabled, and the kernel module "
8749
"unloaded by entering the following:"
8750
msgstr ""
8751
8752
#: serverguide/C/security.xml:1037(command)
8753
msgid "sudo /etc/init.d/apparmor stop"
8754
msgstr "sudo /etc/init.d/apparmor stop"
8755
8756
#: serverguide/C/security.xml:1038(command)
8757
msgid "sudo update-rc.d -f apparmor remove"
8758
msgstr "sudo update-rc.d -f apparmor remove"
8759
8760
#: serverguide/C/security.xml:1042(para)
8761
msgid "To re-enable <application>AppArmor</application> enter:"
8762
msgstr "Pa rehabilitar <application>AppArmor</application> pon:"
8763
8764
#: serverguide/C/security.xml:1046(command)
8765
msgid "sudo /etc/init.d/apparmor start"
8766
msgstr "sudo /etc/init.d/apparmor start"
8767
8768
#: serverguide/C/security.xml:1047(command)
8769
msgid "sudo update-rc.d apparmor defaults"
8770
msgstr "sudo update-rc.d apparmor defaults"
8771
8772
#: serverguide/C/security.xml:1052(para)
8773
msgid ""
8774
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8775
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8776
"the actual executable file path. For example for the "
8777
"<application>ping</application> command use <filename>/bin/ping</filename>"
8778
msgstr ""
8779
8780
#: serverguide/C/security.xml:1060(title)
8781
msgid "Profiles"
8782
msgstr "Perfiles"
8783
8784
#: serverguide/C/security.xml:1061(para)
8785
msgid ""
8786
"<application>AppArmor</application> profiles are simple text files located "
8787
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8788
"path to the executable they profile replacing the \"/\" with \".\". For "
8789
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8790
"profile for the <filename>/bin/ping</filename> command."
8791
msgstr ""
8792
8793
#: serverguide/C/security.xml:1067(para)
8794
msgid "There are two main type of rules used in profiles:"
8795
msgstr "Hai dos tribes principales de regles usaes en pefiles:"
8796
8797
#: serverguide/C/security.xml:1072(para)
8798
msgid ""
8799
"<emphasis>Path entries:</emphasis> which detail which files an application "
8800
"can access in the file system."
8801
msgstr ""
8802
8803
#: serverguide/C/security.xml:1077(para)
8804
msgid ""
8805
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8806
"confined process is allowed to use."
8807
msgstr ""
8808
8809
#: serverguide/C/security.xml:1082(para)
8810
msgid ""
8811
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8812
msgstr ""
8813
8814
#: serverguide/C/security.xml:1085(programlisting)
8815
#, no-wrap
8816
msgid ""
8817
"\n"
8818
"#include <tunables/global>\n"
8819
"/bin/ping flags=(complain) {\n"
8820
" #include <abstractions/base>\n"
8821
" #include <abstractions/consoles>\n"
8822
" #include <abstractions/nameservice>\n"
8823
"\n"
8824
" capability net_raw,\n"
8825
" capability setuid,\n"
8826
" network inet raw,\n"
8827
" \n"
8828
" /bin/ping mixr,\n"
8829
" /etc/modules.conf r,\n"
8830
"}\n"
8831
msgstr ""
8832
"\n"
8833
"#include <tunables/global>\n"
8834
"/bin/ping flags=(complain) {\n"
8835
" #include <abstractions/base>\n"
8836
" #include <abstractions/consoles>\n"
8837
" #include <abstractions/nameservice>\n"
8838
"\n"
8839
" capability net_raw,\n"
8840
" capability setuid,\n"
8841
" network inet raw,\n"
8842
" \n"
8843
" /bin/ping mixr,\n"
8844
" /etc/modules.conf r,\n"
8845
"}\n"
8846
8847
#: serverguide/C/security.xml:1102(para)
8848
msgid ""
8849
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8850
"from other files. This allows statements pertaining to multiple applications "
8851
"to be placed in a common file."
8852
msgstr ""
8853
8854
#: serverguide/C/security.xml:1108(para)
8855
msgid ""
8856
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8857
"program, also setting the mode to <emphasis>complain</emphasis>."
8858
msgstr ""
8859
8860
#: serverguide/C/security.xml:1114(para)
8861
msgid ""
8862
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8863
"the CAP_NET_RAW Posix.1e capability."
8864
msgstr ""
8865
8866
#: serverguide/C/security.xml:1119(para)
8867
msgid ""
8868
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8869
"execute access to the file."
8870
msgstr ""
8871
8872
#: serverguide/C/security.xml:1125(para)
8873
msgid ""
8874
"After editing a profile file the profile must be reloaded. See <xref "
8875
"linkend=\"apparmor-usage\"/> for details."
8876
msgstr ""
8877
8878
#: serverguide/C/security.xml:1130(title)
8879
msgid "Creating a Profile"
8880
msgstr "Crear un perfil"
8881
8882
#: serverguide/C/security.xml:1133(para)
8883
msgid ""
8884
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8885
"application should be exercised. The test plan should be divided into small "
8886
"test cases. Each test case should have a small description and list the "
8887
"steps to follow."
8888
msgstr ""
8889
8890
#: serverguide/C/security.xml:1137(para)
8891
msgid "Some standard test cases are:"
8892
msgstr "Dellos casos estándar de preba son:"
8893
8894
#: serverguide/C/security.xml:1142(para)
8895
msgid "Starting the program."
8896
msgstr "Arrancando'l programa."
8897
8898
#: serverguide/C/security.xml:1147(para)
8899
msgid "Stopping the program."
8900
msgstr ""
8901
8902
#: serverguide/C/security.xml:1152(para)
8903
msgid "Reloading the program."
8904
msgstr ""
8905
8906
#: serverguide/C/security.xml:1157(para)
8907
msgid "Testing all the commands supported by the init script."
8908
msgstr ""
8909
8910
#: serverguide/C/security.xml:1164(para)
8911
msgid ""
8912
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8913
"genprof</application> to generate a new profile. From a terminal:"
8914
msgstr ""
8915
8916
#: serverguide/C/security.xml:1169(command)
8917
msgid "sudo aa-genprof executable"
8918
msgstr ""
8919
8920
#: serverguide/C/security.xml:1171(para)
8921
msgid "For example:"
8922
msgstr ""
8923
8924
#: serverguide/C/security.xml:1175(command)
8925
msgid "sudo aa-genprof slapd"
8926
msgstr "sudo aa-genprof slapd"
8927
8928
#: serverguide/C/security.xml:1179(para)
8929
msgid ""
8930
"To get your new profile included in the <application>apparmor-"
8931
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8932
"against the <ulink "
8933
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8934
"/ulink> package:"
8935
msgstr ""
8936
8937
#: serverguide/C/security.xml:1186(para)
8938
msgid "Include your test plan and test cases."
8939
msgstr ""
8940
8941
#: serverguide/C/security.xml:1191(para)
8942
msgid "Attach your new profile to the bug."
8943
msgstr ""
8944
8945
#: serverguide/C/security.xml:1200(title)
8946
msgid "Updating Profiles"
8947
msgstr "Anovando perfiles"
8948
8949
#: serverguide/C/security.xml:1201(para)
8950
msgid ""
8951
"When the program is misbehaving, audit messages are sent to the log files. "
8952
"The program <application>aa-logprof</application> can be used to scan log "
8953
"files for <application>AppArmor</application> audit messages, review them "
8954
"and update the profiles. From a terminal:"
8955
msgstr ""
8956
8957
#: serverguide/C/security.xml:1206(command)
8958
msgid "sudo aa-logprof"
8959
msgstr "sudo aa-logprof"
8960
8961
#: serverguide/C/security.xml:1214(para)
8962
msgid ""
8963
"See the <ulink "
8964
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8965
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8966
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8967
"configuration options."
8968
msgstr ""
8969
8970
#: serverguide/C/security.xml:1221(para)
8971
msgid ""
8972
"For details using AppArmor with other Ubuntu releases see the <ulink "
8973
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8974
"Wiki</ulink> page."
8975
msgstr ""
8976
8977
#: serverguide/C/security.xml:1229(para)
8978
msgid ""
8979
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8980
"page is another introduction to AppArmor."
8981
msgstr ""
8982
8983
#: serverguide/C/security.xml:1236(para)
8984
msgid ""
8985
"A great place to ask for <application>AppArmor</application> assistance, and "
8986
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8987
"server</emphasis> IRC channel on <ulink "
8988
"url=\"http://freenode.net\">freenode</ulink>."
8989
msgstr ""
8990
8991
#: serverguide/C/security.xml:1246(title)
8992
msgid "Certificates"
8993
msgstr ""
8994
8995
#: serverguide/C/security.xml:1247(para)
8996
msgid ""
8997
"One of the most common forms of cryptography today is <emphasis>public-"
8998
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8999
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
9000
"system works by <emphasis>encrypting</emphasis> information using the public "
9001
"key. The information can then only be <emphasis>decrypted</emphasis> using "
9002
"the private key."
9003
msgstr ""
9004
9005
#: serverguide/C/security.xml:1253(para)
9006
msgid ""
9007
"A common use for public-key cryptography is encrypting application traffic "
9008
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
9009
"connection. For example, configuring Apache to provide "
9010
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
9011
"encrypt traffic using a protocol that does not itself provide encryption."
9012
msgstr ""
9013
9014
#: serverguide/C/security.xml:1258(para)
9015
msgid ""
9016
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
9017
"<emphasis>public key</emphasis> and other information about a server and the "
9018
"organization who is responsible for it. Certificates can be digitally signed "
9019
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
9020
"third party that has confirmed that the information contained in the "
9021
"certificate is accurate."
9022
msgstr ""
9023
9024
#: serverguide/C/security.xml:1265(title)
9025
msgid "Types of Certificates"
9026
msgstr ""
9027
9028
#: serverguide/C/security.xml:1266(para)
9029
msgid ""
9030
"To set up a secure server using public-key cryptography, in most cases, you "
9031
"send your certificate request (including your public key), proof of your "
9032
"company's identity, and payment to a CA. The CA verifies the certificate "
9033
"request and your identity, and then sends back a certificate for your secure "
9034
"server. Alternatively, you can create your own <emphasis>self-"
9035
"signed</emphasis> certificate."
9036
msgstr ""
9037
9038
#: serverguide/C/security.xml:1276(para)
9039
msgid ""
9040
"Note, that self-signed certificates should not be used in most production "
9041
"environments."
9042
msgstr ""
9043
9044
#: serverguide/C/security.xml:1280(para)
9045
msgid ""
9046
"Continuing the HTTPS example, a CA-signed certificate provides two important "
9047
"capabilities that a self-signed certificate does not:"
9048
msgstr ""
9049
9050
#: serverguide/C/security.xml:1287(para)
9051
msgid ""
9052
"Browsers (usually) automatically recognize the certificate and allow a "
9053
"secure connection to be made without prompting the user."
9054
msgstr ""
9055
9056
#: serverguide/C/security.xml:1294(para)
9057
msgid ""
9058
"When a CA issues a signed certificate, it is guaranteeing the identity of "
9059
"the organization that is providing the web pages to the browser."
9060
msgstr ""
9061
9062
#: serverguide/C/security.xml:1302(para)
9063
msgid ""
9064
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
9065
"certificates they automatically accept. If a browser encounters a "
9066
"certificate whose authorizing CA is not in the list, the browser asks the "
9067
"user to either accept or decline the connection. Also, other applications "
9068
"may generate an error message when using a self-singed certificate."
9069
msgstr ""
9070
9071
#: serverguide/C/security.xml:1310(para)
9072
msgid ""
9073
"The process of getting a certificate from a CA is fairly easy. A quick "
9074
"overview is as follows:"
9075
msgstr ""
9076
9077
#: serverguide/C/security.xml:1317(para)
9078
msgid "Create a private and public encryption key pair."
9079
msgstr ""
9080
9081
#: serverguide/C/security.xml:1320(para)
9082
msgid ""
9083
"Create a certificate request based on the public key. The certificate "
9084
"request contains information about your server and the company hosting it."
9085
msgstr ""
9086
9087
#: serverguide/C/security.xml:1325(para)
9088
msgid ""
9089
"Send the certificate request, along with documents proving your identity, to "
9090
"a CA. We cannot tell you which certificate authority to choose. Your "
9091
"decision may be based on your past experiences, or on the experiences of "
9092
"your friends or colleagues, or purely on monetary factors."
9093
msgstr ""
9094
9095
#: serverguide/C/security.xml:1331(para)
9096
msgid ""
9097
"Once you have decided upon a CA, you need to follow the instructions they "
9098
"provide on how to obtain a certificate from them."
9099
msgstr ""
9100
9101
#: serverguide/C/security.xml:1336(para)
9102
msgid ""
9103
"When the CA is satisfied that you are indeed who you claim to be, they send "
9104
"you a digital certificate."
9105
msgstr ""
9106
9107
#: serverguide/C/security.xml:1340(para)
9108
msgid ""
9109
"Install this certificate on your secure server, and configure the "
9110
"appropriate applications to use the certificate."
9111
msgstr ""
9112
9113
#: serverguide/C/security.xml:1349(title)
9114
msgid "Generating a Certificate Signing Request (CSR)"
9115
msgstr ""
9116
9117
#: serverguide/C/security.xml:1351(para)
9118
msgid ""
9119
"Whether you are getting a certificate from a CA or generating your own self-"
9120
"signed certificate, the first step is to generate a key."
9121
msgstr ""
9122
9123
#: serverguide/C/security.xml:1356(para)
9124
msgid ""
9125
"If the certificate will be used by service daemons, such as Apache, Postfix, "
9126
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
9127
"passphrase allows the services to start without manual intervention, usually "
9128
"the preferred way to start a daemon."
9129
msgstr ""
9130
9131
#: serverguide/C/security.xml:1362(para)
9132
msgid ""
9133
"This section will cover generating a key with a passphrase, and one without. "
9134
"The non-passphrase key will then be used to generate a certificate that can "
9135
"be used with various service daemons."
9136
msgstr ""
9137
9138
#: serverguide/C/security.xml:1368(para)
9139
msgid ""
9140
"Running your secure service without a passphrase is convenient because you "
9141
"will not need to enter the passphrase every time you start your secure "
9142
"service. But it is insecure and a compromise of the key means a compromise "
9143
"of the server as well."
9144
msgstr ""
9145
9146
#: serverguide/C/security.xml:1375(para)
9147
msgid ""
9148
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
9149
"Request (CSR) run the following command from a terminal prompt:"
9150
msgstr ""
9151
9152
#: serverguide/C/security.xml:1381(command)
9153
msgid "openssl genrsa -des3 -out server.key 1024"
9154
msgstr "openssl genrsa -des3 -out server.key 1024"
9155
9156
#: serverguide/C/security.xml:1384(programlisting)
9157
#, no-wrap
9158
msgid ""
9159
"\n"
9160
"Generating RSA private key, 1024 bit long modulus\n"
9161
".....................++++++\n"
9162
".................++++++\n"
9163
"unable to write 'random state'\n"
9164
"e is 65537 (0x10001)\n"
9165
"Enter pass phrase for server.key:\n"
9166
msgstr ""
9167
"\n"
9168
"Generating RSA private key, 1024 bit long modulus\n"
9169
"\n"
9170
".....................++++++\n"
9171
"\n"
9172
".................++++++\n"
9173
"\n"
9174
"unable to write 'random state'\n"
9175
"\n"
9176
"e is 65537 (0x10001)\n"
9177
"\n"
9178
"Enter pass phrase for server.key:\n"
9179
9180
#: serverguide/C/security.xml:1393(para)
9181
msgid ""
9182
"You can now enter your passphrase. For best security, it should at least "
9183
"contain eight characters. The minimum length when specifying -des3 is four "
9184
"characters. It should include numbers and/or punctuation and not be a word "
9185
"in a dictionary. Also remember that your passphrase is case-sensitive."
9186
msgstr ""
9187
9188
#: serverguide/C/security.xml:1401(para)
9189
msgid ""
9190
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
9191
"server key is generated and stored in the <filename>server.key</filename> "
9192
"file."
9193
msgstr ""
9194
9195
#: serverguide/C/security.xml:1407(para)
9196
msgid ""
9197
"Now create the insecure key, the one without a passphrase, and shuffle the "
9198
"key names:"
9199
msgstr ""
9200
9201
#: serverguide/C/security.xml:1413(command)
9202
msgid "openssl rsa -in server.key -out server.key.insecure"
9203
msgstr "openssl rsa -in server.key -out server.key.insecure"
9204
9205
#: serverguide/C/security.xml:1414(command)
9206
msgid "mv server.key server.key.secure"
9207
msgstr ""
9208
9209
#: serverguide/C/security.xml:1415(command)
9210
msgid "mv server.key.insecure server.key"
9211
msgstr ""
9212
9213
#: serverguide/C/security.xml:1418(para)
9214
msgid ""
9215
"The insecure key is now named <filename>server.key</filename>, and you can "
9216
"use this file to generate the CSR without passphrase."
9217
msgstr ""
9218
9219
#: serverguide/C/security.xml:1423(para)
9220
msgid "To create the CSR, run the following command at a terminal prompt:"
9221
msgstr ""
9222
9223
#: serverguide/C/security.xml:1428(command)
9224
msgid "openssl req -new -key server.key -out server.csr"
9225
msgstr ""
9226
9227
#: serverguide/C/security.xml:1431(para)
9228
msgid ""
9229
"It will prompt you enter the passphrase. If you enter the correct "
9230
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
9231
"etc. Once you enter all these details, your CSR will be created and it will "
9232
"be stored in the <filename>server.csr</filename> file."
9233
msgstr ""
9234
9235
#: serverguide/C/security.xml:1439(para)
9236
msgid ""
9237
"You can now submit this CSR file to a CA for processing. The CA will use "
9238
"this CSR file and issue the certificate. On the other hand, you can create "
9239
"self-signed certificate using this CSR."
9240
msgstr ""
9241
9242
#: serverguide/C/security.xml:1447(title)
9243
msgid "Creating a Self-Signed Certificate"
9244
msgstr ""
9245
9246
#: serverguide/C/security.xml:1448(para)
9247
msgid ""
9248
"To create the self-signed certificate, run the following command at a "
9249
"terminal prompt:"
9250
msgstr ""
9251
9252
#: serverguide/C/security.xml:1453(command)
9253
msgid ""
9254
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
9255
"server.crt"
9256
msgstr ""
9257
"openssl·x509·-req·-days·365·-in·server.csr·-signkey·server.key·-"
9258
"out·server.crt"
9259
9260
#: serverguide/C/security.xml:1456(para)
9261
msgid ""
9262
"The above command will prompt you to enter the passphrase. Once you enter "
9263
"the correct passphrase, your certificate will be created and it will be "
9264
"stored in the <filename>server.crt</filename> file."
9265
msgstr ""
9266
9267
#: serverguide/C/security.xml:1461(para)
9268
msgid ""
9269
"If your secure server is to be used in a production environment, you "
9270
"probably need a CA-signed certificate. It is not recommended to use self-"
9271
"signed certificate."
9272
msgstr ""
9273
9274
#: serverguide/C/security.xml:1469(title)
9275
msgid "Installing the Certificate"
9276
msgstr "Instalar el Certificáu"
9277
9278
#: serverguide/C/security.xml:1471(para)
9279
msgid ""
9280
"You can install the key file <filename>server.key</filename> and certificate "
9281
"file <filename>server.crt</filename>, or the certificate file issued by your "
9282
"CA, by running following commands at a terminal prompt:"
9283
msgstr ""
9284
9285
#: serverguide/C/security.xml:1477(command)
9286
msgid "sudo cp server.crt /etc/ssl/certs"
9287
msgstr "sudo cp server.crt /etc/ssl/certs"
9288
9289
#: serverguide/C/security.xml:1478(command)
9290
msgid "sudo cp server.key /etc/ssl/private"
9291
msgstr "sudo cp server.key /etc/ssl/private"
9292
9293
#: serverguide/C/security.xml:1480(para)
9294
msgid ""
9295
"Now simply configure any applications, with the ability to use public-key "
9296
"cryptography, to use the <emphasis>certificate</emphasis> and "
9297
"<emphasis>key</emphasis> files. For example, "
9298
"<application>Apache</application> can provide HTTPS, "
9299
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9300
msgstr ""
9301
9302
#: serverguide/C/security.xml:1487(title)
9303
msgid "Certification Authority"
9304
msgstr "Autoridá de certificación"
9305
9306
#: serverguide/C/security.xml:1489(para)
9307
msgid ""
9308
"If the services on your network require more than a few self-signed "
9309
"certificates it may be worth the additional effort to setup your own "
9310
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9311
"certificates signed by your own CA, allows the various services using the "
9312
"certificates to easily trust other services using certificates issued from "
9313
"the same CA."
9314
msgstr ""
9315
9316
#: serverguide/C/security.xml:1499(para)
9317
msgid ""
9318
"First, create the directories to hold the CA certificate and related files:"
9319
msgstr ""
9320
9321
#: serverguide/C/security.xml:1504(command)
9322
msgid "sudo mkdir /etc/ssl/CA"
9323
msgstr ""
9324
9325
#: serverguide/C/security.xml:1505(command)
9326
msgid "sudo mkdir /etc/ssl/newcerts"
9327
msgstr ""
9328
9329
#: serverguide/C/security.xml:1511(para)
9330
msgid ""
9331
"The CA needs a few additional files to operate, one to keep track of the "
9332
"last serial number used by the CA, each certificate must have a unique "
9333
"serial number, and another file to record which certificates have been "
9334
"issued:"
9335
msgstr ""
9336
9337
#: serverguide/C/security.xml:1518(command)
9338
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9339
msgstr "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9340
9341
#: serverguide/C/security.xml:1519(command)
9342
msgid "sudo touch /etc/ssl/CA/index.txt"
9343
msgstr "sudo touch /etc/ssl/CA/index.txt"
9344
9345
#: serverguide/C/security.xml:1525(para)
9346
msgid ""
9347
"The third file is a CA configuration file. Though not strictly necessary, it "
9348
"is very convenient when issuing multiple certificates. Edit "
9349
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9350
"]</emphasis> change:"
9351
msgstr ""
9352
9353
#: serverguide/C/security.xml:1531(programlisting)
9354
#, no-wrap
9355
msgid ""
9356
"\n"
9357
"dir = /etc/ssl/ # Where everything is kept\n"
9358
"database = $dir/CA/index.txt # database index file.\n"
9359
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9360
"serial = $dir/CA/serial # The current serial number\n"
9361
"private_key = $dir/private/cakey.pem# The private key\n"
9362
msgstr ""
9363
9364
#: serverguide/C/security.xml:1542(para)
9365
msgid "Next, create the self-singed root certificate:"
9366
msgstr ""
9367
9368
#: serverguide/C/security.xml:1547(command)
9369
msgid ""
9370
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9371
"days 3650"
9372
msgstr ""
9373
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9374
"days 3650"
9375
9376
#: serverguide/C/security.xml:1550(para)
9377
msgid "You will then be asked to enter the details about the certificate."
9378
msgstr ""
9379
9380
#: serverguide/C/security.xml:1557(para)
9381
msgid "Now install the root certificate and key:"
9382
msgstr "Agora instala'l certificáu raigañu y la clave:"
9383
9384
#: serverguide/C/security.xml:1562(command)
9385
msgid "sudo mv cakey.pem /etc/ssl/private/"
9386
msgstr "sudo mv cakey.pem /etc/ssl/private/"
9387
9388
#: serverguide/C/security.xml:1563(command)
9389
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9390
msgstr "sudo mv cacert.pem /etc/ssl/certs/"
9391
9392
#: serverguide/C/security.xml:1569(para)
9393
msgid ""
9394
"You are now ready to start signing certificates. The first item needed is a "
9395
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9396
"for details. Once you have a CSR, enter the following to generate a "
9397
"certificate signed by the CA:"
9398
msgstr ""
9399
9400
#: serverguide/C/security.xml:1576(command)
9401
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9402
msgstr "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9403
9404
#: serverguide/C/security.xml:1579(para)
9405
msgid ""
9406
"After entering the password for the CA key, you will be prompted to sign the "
9407
"certificate, and again to commit the new certificate. You should then see a "
9408
"somewhat large amount of output related to the certificate creation."
9409
msgstr ""
9410
9411
#: serverguide/C/security.xml:1588(para)
9412
msgid ""
9413
"There should now be a new file, "
9414
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9415
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9416
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9417
"file named after the hostname of the server where the certificate will be "
9418
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9419
"descriptive name."
9420
msgstr ""
9421
9422
#: serverguide/C/security.xml:1596(para)
9423
msgid ""
9424
"Subsequent certificates will be named <filename>02.pem</filename>, "
9425
"<filename>03.pem</filename>, etc."
9426
msgstr ""
9427
9428
#: serverguide/C/security.xml:1601(para)
9429
msgid ""
9430
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9431
"name."
9432
msgstr ""
9433
9434
#: serverguide/C/security.xml:1609(para)
9435
msgid ""
9436
"Finally, copy the new certificate to the host that needs it, and configure "
9437
"the appropriate applications to use it. The default location to install "
9438
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9439
"enables multiple services to use the same certificate without overly "
9440
"complicated file permissions."
9441
msgstr ""
9442
9443
#: serverguide/C/security.xml:1615(para)
9444
msgid ""
9445
"For applications that can be configured to use a CA certificate, you should "
9446
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9447
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9448
"server."
9449
msgstr ""
9450
9451
#: serverguide/C/security.xml:1629(para)
9452
msgid ""
9453
"For more detailed instructions on using cryptography see the <ulink "
9454
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9455
"Certificates HOWTO</ulink> by tlpd.org"
9456
msgstr ""
9457
9458
#: serverguide/C/security.xml:1635(para)
9459
msgid ""
9460
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9461
"of Certificate Authorities."
9462
msgstr ""
9463
9464
#: serverguide/C/security.xml:1640(para)
9465
msgid ""
9466
"The Wikipedia <ulink "
9467
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9468
"information regarding HTTPS."
9469
msgstr ""
9470
9471
#: serverguide/C/security.xml:1645(para)
9472
msgid ""
9473
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9474
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9475
msgstr ""
9476
9477
#: serverguide/C/security.xml:1650(para)
9478
msgid ""
9479
"Also, O'Reilly's <ulink "
9480
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9481
"OpenSSL</ulink> is a good in depth reference."
9482
msgstr ""
9483
9484
#: serverguide/C/security.xml:1659(title)
9485
msgid "eCryptfs"
9486
msgstr "eCryptfs"
9487
9488
#: serverguide/C/security.xml:1661(para)
9489
msgid ""
9490
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9491
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9492
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9493
"filesystem, partition type, etc."
9494
msgstr ""
9495
9496
#: serverguide/C/security.xml:1667(para)
9497
msgid ""
9498
"During installation there is an option to encrypt the <filename "
9499
"role=\"directory\">/home</filename> partition. This will automatically "
9500
"configure everything needed to encrypt and mount the partition."
9501
msgstr ""
9502
9503
#: serverguide/C/security.xml:1672(para)
9504
msgid ""
9505
"As an example, this section will cover configuring <filename "
9506
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9507
msgstr ""
9508
9509
#: serverguide/C/security.xml:1677(title)
9510
msgid "Using eCryptfs"
9511
msgstr "Usar eCryptfs"
9512
9513
#: serverguide/C/security.xml:1679(para)
9514
msgid "First, install the necessary packages. From a terminal prompt enter:"
9515
msgstr ""
9516
9517
#: serverguide/C/security.xml:1684(command)
9518
msgid "sudo apt-get install ecryptfs-utils"
9519
msgstr "sudo apt-get install ecryptfs-utils"
9520
9521
#: serverguide/C/security.xml:1687(para)
9522
msgid "Now mount the partition to be encrypted:"
9523
msgstr "Agora monta la partición pa cifrar:"
9524
9525
#: serverguide/C/security.xml:1692(command)
9526
msgid "sudo mount -t ecryptfs /srv /srv"
9527
msgstr "sudo mount -t ecryptfs /srv /srv"
9528
9529
#: serverguide/C/security.xml:1695(para)
9530
msgid ""
9531
"You will then be prompted for some details on how "
9532
"<application>ecryptfs</application> should encrypt the data."
9533
msgstr ""
9534
9535
#: serverguide/C/security.xml:1699(para)
9536
msgid ""
9537
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9538
"copy the <filename>/etc/default</filename> folder to "
9539
"<filename>/srv</filename>:"
9540
msgstr ""
9541
9542
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9543
msgid "sudo cp -r /etc/default /srv"
9544
msgstr "sudo cp -r /etc/default /srv"
9545
9546
#: serverguide/C/security.xml:1708(para)
9547
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9548
msgstr ""
9549
9550
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9551
msgid "sudo umount /srv"
9552
msgstr "sudo umount /srv"
9553
9554
#: serverguide/C/security.xml:1714(command)
9555
msgid "cat /srv/default/cron"
9556
msgstr "cat /srv/default/cron"
9557
9558
#: serverguide/C/security.xml:1717(para)
9559
msgid ""
9560
"Remounting <filename>/srv</filename> using "
9561
"<application>ecryptfs</application> will make the data viewable once again."
9562
msgstr ""
9563
9564
#: serverguide/C/security.xml:1723(title)
9565
msgid "Automatically Mounting Encrypted Partitions"
9566
msgstr "Montar automáticamente particiones cifraes"
9567
9568
#: serverguide/C/security.xml:1725(para)
9569
msgid ""
9570
"There are a couple of ways to automatically mount an "
9571
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9572
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9573
"mount options, along with a passphrase file residing on a USB key."
9574
msgstr ""
9575
9576
#: serverguide/C/security.xml:1731(para)
9577
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9578
msgstr ""
9579
9580
#: serverguide/C/security.xml:1735(programlisting)
9581
#, no-wrap
9582
msgid ""
9583
"\n"
9584
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9585
"ecryptfs_sig=5826dd62cf81c615\n"
9586
"ecryptfs_cipher=aes\n"
9587
"ecryptfs_key_bytes=16\n"
9588
"ecryptfs_passthrough=n\n"
9589
"ecryptfs_enable_filename_crypto=n\n"
9590
msgstr ""
9591
"\n"
9592
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9593
"ecryptfs_sig=5826dd62cf81c615\n"
9594
"ecryptfs_cipher=aes\n"
9595
"ecryptfs_key_bytes=16\n"
9596
"ecryptfs_passthrough=n\n"
9597
"ecryptfs_enable_filename_crypto=n\n"
9598
9599
#: serverguide/C/security.xml:1745(para)
9600
msgid ""
9601
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9602
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9603
msgstr ""
9604
9605
#: serverguide/C/security.xml:1750(para)
9606
msgid ""
9607
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9608
"file:"
9609
msgstr ""
9610
9611
#: serverguide/C/security.xml:1754(programlisting)
9612
#, no-wrap
9613
msgid ""
9614
"\n"
9615
"passphrase_passwd=[secrets]\n"
9616
msgstr ""
9617
"\n"
9618
"passphrase_passwd=[secrets]\n"
9619
9620
#: serverguide/C/security.xml:1758(para)
9621
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9622
msgstr ""
9623
9624
#: serverguide/C/security.xml:1762(programlisting)
9625
#, no-wrap
9626
msgid ""
9627
"\n"
9628
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9629
"/srv /srv ecryptfs defaults 0 0\n"
9630
msgstr ""
9631
"\n"
9632
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9633
"/srv /srv ecryptfs defaults 0 0\n"
9634
9635
#: serverguide/C/security.xml:1767(para)
9636
msgid "Make sure the USB drive is mounted before the encrypted partition."
9637
msgstr ""
9638
9639
#: serverguide/C/security.xml:1771(para)
9640
msgid ""
9641
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9642
"ecryptfs."
9643
msgstr ""
9644
9645
#: serverguide/C/security.xml:1779(para)
9646
msgid ""
9647
"The <application>ecryptfs-utils</application> package includes several other "
9648
"useful utilities:"
9649
msgstr ""
9650
9651
#: serverguide/C/security.xml:1785(para)
9652
msgid ""
9653
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9654
"<filename>~/Private</filename> directory to contain encrypted information. "
9655
"This utility can be run by unprivileged users to keep data private from "
9656
"other users on the system."
9657
msgstr ""
9658
9659
#: serverguide/C/security.xml:1792(para)
9660
msgid ""
9661
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9662
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9663
"directory."
9664
msgstr ""
9665
9666
#: serverguide/C/security.xml:1798(para)
9667
msgid ""
9668
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9669
"kernel keyring."
9670
msgstr ""
9671
9672
#: serverguide/C/security.xml:1803(para)
9673
msgid ""
9674
"<emphasis>ecryptfs-manager:</emphasis> manages "
9675
"<application>eCryptfs</application> objects such as keys."
9676
msgstr ""
9677
9678
#: serverguide/C/security.xml:1808(para)
9679
msgid ""
9680
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9681
"<application>ecryptfs</application> meta information for a file."
9682
msgstr ""
9683
9684
#: serverguide/C/security.xml:1821(para)
9685
msgid ""
9686
"For more information on eCryptfs see the <ulink "
9687
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9688
msgstr ""
9689
9690
#: serverguide/C/security.xml:1826(para)
9691
msgid ""
9692
"There is also a <ulink "
9693
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9694
"article covering eCryptfs."
9695
msgstr ""
9696
9697
#: serverguide/C/security.xml:1831(para)
9698
msgid ""
9699
"Also, for more <application>ecryptfs</application> options see the <ulink "
9700
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9701
"yptfs man page</ulink>."
9702
msgstr ""
9703
9704
#: serverguide/C/security.xml:1837(para)
9705
msgid ""
9706
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9707
"Ubuntu Wiki</ulink> page also has more details."
9708
msgstr ""
9709
9710
#: serverguide/C/reporting-bugs.xml:13(title)
9711
msgid "Appendix"
9712
msgstr ""
9713
9714
#: serverguide/C/reporting-bugs.xml:16(title)
9715
msgid "Reporting Bugs in Ubuntu Server Edition"
9716
msgstr ""
9717
9718
#: serverguide/C/reporting-bugs.xml:18(para)
9719
msgid ""
9720
"While the Ubuntu Project attempts to release software with as few bugs as "
9721
"possible, they do occur. You can help fix these bugs by reporting ones that "
9722
"you find to the project. The Ubuntu Project uses <ulink "
9723
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9724
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9725
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9726
"account</ulink>."
9727
msgstr ""
9728
9729
#: serverguide/C/reporting-bugs.xml:30(title)
9730
msgid "Reporting Bugs With ubuntu-bug"
9731
msgstr ""
9732
9733
#: serverguide/C/reporting-bugs.xml:32(para)
9734
msgid ""
9735
"The preferred way to report a bug is with the <application>ubuntu-"
9736
"bug</application> command. The ubuntu-bug tool gathers information about the "
9737
"system useful to developers in diagnosing the reported problem that will "
9738
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9739
"need to be filed against a specific software package, thus the name of the "
9740
"package that the bug occurs in needs to be given to ubuntu-bug:"
9741
msgstr ""
9742
9743
#: serverguide/C/reporting-bugs.xml:43(command)
9744
msgid "ubuntu-bug PACKAGENAME"
9745
msgstr ""
9746
9747
#: serverguide/C/reporting-bugs.xml:46(para)
9748
msgid ""
9749
"For example, to file a bug against the openssh-server package, you would do:"
9750
msgstr ""
9751
9752
#: serverguide/C/reporting-bugs.xml:51(command)
9753
msgid "ubuntu-bug openssh-server"
9754
msgstr ""
9755
9756
#: serverguide/C/reporting-bugs.xml:54(para)
9757
msgid ""
9758
"You can specify either a binary package or the source package for ubuntu-"
9759
"bug. Again using openssh-server as an example, you could also generate the "
9760
"report against the source package for openssh-server, openssh:"
9761
msgstr ""
9762
9763
#: serverguide/C/reporting-bugs.xml:62(command)
9764
msgid "ubuntu-bug openssh"
9765
msgstr ""
9766
9767
#: serverguide/C/reporting-bugs.xml:66(para)
9768
msgid ""
9769
"See <xref linkend=\"package-management\"/> for more information about "
9770
"packages in Ubuntu."
9771
msgstr ""
9772
9773
#: serverguide/C/reporting-bugs.xml:72(para)
9774
msgid ""
9775
"The ubuntu-bug command will gather information about the system in question, "
9776
"possibly including information specific to the specified package, and then "
9777
"ask you what you would like to do with collected information:"
9778
msgstr ""
9779
9780
#: serverguide/C/reporting-bugs.xml:80(command)
9781
msgid "ubuntu-bug postgresql"
9782
msgstr ""
9783
9784
#: serverguide/C/reporting-bugs.xml:79(screen)
9785
#, no-wrap
9786
msgid ""
9787
"\n"
9788
"<placeholder-1/>\n"
9789
"\n"
9790
"*** Collecting problem information\n"
9791
"\n"
9792
"The collected information can be sent to the developers to improve the\n"
9793
"application. This might take a few minutes.\n"
9794
"..........\n"
9795
"\n"
9796
"*** Send problem report to the developers?\n"
9797
"\n"
9798
"After the problem report has been sent, please fill out the form in the\n"
9799
"automatically opened web browser.\n"
9800
"\n"
9801
"What would you like to do? Your options are:\n"
9802
" S: Send report (1.7 KiB)\n"
9803
" V: View report\n"
9804
" K: Keep report file for sending later or copying to somewhere else\n"
9805
" C: Cancel\n"
9806
"Please choose (S/V/K/C):\n"
9807
msgstr ""
9808
9809
#: serverguide/C/reporting-bugs.xml:101(para)
9810
msgid "The options available are:"
9811
msgstr ""
9812
9813
#: serverguide/C/reporting-bugs.xml:108(para)
9814
msgid ""
9815
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9816
"the collected information to Launchpad as part of the the process of filing "
9817
"a bug report. You will be given the opportunity to describe the situation "
9818
"that led up to the occurrance of the bug."
9819
msgstr ""
9820
9821
#: serverguide/C/reporting-bugs.xml:115(screen)
9822
#, no-wrap
9823
msgid ""
9824
"\n"
9825
"*** Uploading problem information\n"
9826
"\n"
9827
"The collected information is being sent to the bug tracking system.\n"
9828
"This might take a few minutes.\n"
9829
"91%\n"
9830
"\n"
9831
"*** To continue, you must visit the following URL:\n"
9832
"\n"
9833
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9834
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9835
"\n"
9836
"You can launch a browser now, or copy this URL into a browser on another\n"
9837
"computer.\n"
9838
"\n"
9839
"Choices:\n"
9840
" 1: Launch a browser now\n"
9841
" C: Cancel\n"
9842
"Please choose (1/C):\n"
9843
msgstr ""
9844
9845
#: serverguide/C/reporting-bugs.xml:135(para)
9846
msgid ""
9847
"If you choose to start a browser, by default the text based web browser "
9848
"<application>w3m</application> will be used to finish filing the bug report. "
9849
"Alternately, you can copy the given URL to a currently running web browser."
9850
msgstr ""
9851
9852
#: serverguide/C/reporting-bugs.xml:144(para)
9853
msgid ""
9854
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9855
"the collected information to be displayed to the terminal for review."
9856
msgstr ""
9857
9858
#: serverguide/C/reporting-bugs.xml:150(screen)
9859
#, no-wrap
9860
msgid ""
9861
"\n"
9862
"Package: postgresql 8.4.2-2\n"
9863
"PackageArchitecture: all\n"
9864
"Tags: lucid\n"
9865
"ProblemType: Bug\n"
9866
"ProcEnviron:\n"
9867
" LANG=en_US.UTF-8\n"
9868
" SHELL=/bin/bash\n"
9869
"Uname: Linux 2.6.32-16-server x86_64\n"
9870
"Dependencies:\n"
9871
" adduser 3.112ubuntu1\n"
9872
" base-files 5.0.0ubuntu10\n"
9873
" base-passwd 3.5.22\n"
9874
" coreutils 7.4-2ubuntu2\n"
9875
"...\n"
9876
msgstr ""
9877
9878
#: serverguide/C/reporting-bugs.xml:167(para)
9879
msgid ""
9880
"After viewing the report, you will be brought back to the same menu asking "
9881
"what you would like to do with the report."
9882
msgstr ""
9883
9884
#: serverguide/C/reporting-bugs.xml:174(para)
9885
msgid ""
9886
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9887
"File causes the gathered information to be written to a file. This file can "
9888
"then be used to later file a bug report or transferred to a different Ubuntu "
9889
"system for reporting. To submit the report file, simply give it as an "
9890
"argument to the ubuntu-bug command:"
9891
msgstr ""
9892
9893
#: serverguide/C/reporting-bugs.xml:189(userinput)
9894
#, no-wrap
9895
msgid "k"
9896
msgstr ""
9897
9898
#: serverguide/C/reporting-bugs.xml:192(command)
9899
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9900
msgstr ""
9901
9902
#: serverguide/C/reporting-bugs.xml:183(screen)
9903
#, no-wrap
9904
msgid ""
9905
"\n"
9906
"What would you like to do? Your options are:\n"
9907
" S: Send report (1.7 KiB)\n"
9908
" V: View report\n"
9909
" K: Keep report file for sending later or copying to somewhere else\n"
9910
" C: Cancel\n"
9911
"Please choose (S/V/K/C): <placeholder-1/>\n"
9912
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9913
"\n"
9914
"<placeholder-2/>\n"
9915
"\n"
9916
"*** Send problem report to the developers?\n"
9917
"...\n"
9918
msgstr ""
9919
9920
#: serverguide/C/reporting-bugs.xml:200(para)
9921
msgid ""
9922
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9923
"collected information to be discarded."
9924
msgstr ""
9925
9926
#: serverguide/C/reporting-bugs.xml:210(title)
9927
msgid "Reporting Application Crashes"
9928
msgstr ""
9929
9930
#: serverguide/C/reporting-bugs.xml:212(para)
9931
msgid ""
9932
"The software package that provides the ubuntu-bug utility, "
9933
"<application>apport</application>, can be configured to trigger when "
9934
"applications crash. This is disabled by default, as capturing a crash can be "
9935
"resource intensive depending on how much memory the application that crashed "
9936
"was using as apport captures and processes the core dump."
9937
msgstr ""
9938
9939
#: serverguide/C/reporting-bugs.xml:221(para)
9940
msgid ""
9941
"Configuring apport to capture information about crashing applications "
9942
"requires a couple of steps. First, <application>gdb</application> needs to "
9943
"be installed; it is not installed by default in Ubuntu Server Edition."
9944
msgstr ""
9945
9946
#: serverguide/C/reporting-bugs.xml:229(command)
9947
msgid "sudo apt-get install gdb"
9948
msgstr ""
9949
9950
#: serverguide/C/reporting-bugs.xml:232(para)
9951
msgid ""
9952
"See <xref linkend=\"package-management\"/> for more information about "
9953
"managing packages in Ubuntu."
9954
msgstr ""
9955
9956
#: serverguide/C/reporting-bugs.xml:237(para)
9957
msgid ""
9958
"Once you have ensured that gdb is installed, open the file "
9959
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9960
"<emphasis>enabled</emphasis> setting to be <emphasis "
9961
"role=\"bold\">1</emphasis> like so:"
9962
msgstr ""
9963
9964
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9965
#, no-wrap
9966
msgid ""
9967
"\n"
9968
"# set this to 0 to disable apport, or to 1 to enable it\n"
9969
"# you can temporarily override this with\n"
9970
"# sudo service apport start force_start=1\n"
9971
"enabled=<userinput>1</userinput>\n"
9972
"\n"
9973
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9974
"maxsize=209715200\n"
9975
msgstr ""
9976
9977
#: serverguide/C/reporting-bugs.xml:254(para)
9978
msgid ""
9979
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9980
"start the apport service:"
9981
msgstr ""
9982
9983
#: serverguide/C/reporting-bugs.xml:261(command)
9984
msgid "sudo start apport"
9985
msgstr ""
9986
9987
#: serverguide/C/reporting-bugs.xml:264(para)
9988
msgid ""
9989
"After an application crashes, use the <application>apport-cli</application> "
9990
"command to search for the existing saved crash report information:"
9991
msgstr ""
9992
9993
#: serverguide/C/reporting-bugs.xml:271(command)
9994
msgid "apport-cli"
9995
msgstr ""
9996
9997
#: serverguide/C/reporting-bugs.xml:270(screen)
9998
#, no-wrap
9999
msgid ""
10000
"\n"
10001
"<placeholder-1/>\n"
10002
"\n"
10003
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
10004
"\n"
10005
"If you were not doing anything confidential (entering passwords or other\n"
10006
"private information), you can help to improve the application by\n"
10007
"reporting\n"
10008
"the problem.\n"
10009
"\n"
10010
"What would you like to do? Your options are:\n"
10011
" R: Report Problem...\n"
10012
" I: Cancel and ignore future crashes of this program version\n"
10013
" C: Cancel\n"
10014
"Please choose (R/I/C):\n"
10015
msgstr ""
10016
10017
#: serverguide/C/reporting-bugs.xml:287(para)
10018
msgid ""
10019
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
10020
"steps as when using ubuntu-bug. One important difference is that a crash "
10021
"report will be marked as private when filed on Launchpad, meaning that it "
10022
"will be visible to only a limited set of bug triagers. These triagers will "
10023
"review the gathered data for private information before making the bug "
10024
"report publicly visible."
10025
msgstr ""
10026
10027
#: serverguide/C/reporting-bugs.xml:307(para)
10028
msgid ""
10029
"See the <ulink "
10030
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
10031
"Bugs</ulink> Ubuntu wiki page."
10032
msgstr ""
10033
10034
#: serverguide/C/reporting-bugs.xml:313(para)
10035
msgid ""
10036
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
10037
"has some useful information. Though some of it pertains to using a GUI."
10038
msgstr ""
10039
10040
#: serverguide/C/remote-administration.xml:13(title)
10041
msgid "Remote Administration"
10042
msgstr "Alministración Remota"
10043
10044
#: serverguide/C/remote-administration.xml:14(para)
10045
msgid ""
10046
"There are many ways to remotely administer a Linux server. This chapter will "
10047
"cover one of the most popular <application>SSH</application> as well as "
10048
"<application>eBox</application>, a web based administration framework."
10049
msgstr ""
10050
10051
#: serverguide/C/remote-administration.xml:23(para)
10052
msgid ""
10053
"This section of the Ubuntu Server Guide introduces a powerful collection of "
10054
"tools for the remote control of networked computers and transfer of data "
10055
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
10056
"also learn about some of the configuration settings possible with the "
10057
"OpenSSH server application and how to change them on your Ubuntu system."
10058
msgstr ""
10059
10060
#: serverguide/C/remote-administration.xml:30(para)
10061
msgid ""
10062
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
10063
"family of tools for remotely controlling a computer or transferring files "
10064
"between computers. Traditional tools used to accomplish these functions, "
10065
"such as <application>telnet</application> or <application>rcp</application>, "
10066
"are insecure and transmit the user's password in cleartext when used. "
10067
"OpenSSH provides a server daemon and client tools to facilitate secure, "
10068
"encrypted remote control and file transfer operations, effectively replacing "
10069
"the legacy tools."
10070
msgstr ""
10071
10072
#: serverguide/C/remote-administration.xml:39(para)
10073
msgid ""
10074
"The OpenSSH server component, <application>sshd</application>, listens "
10075
"continuously for client connections from any of the client tools. When a "
10076
"connection request occurs, <application>sshd</application> sets up the "
10077
"correct connection depending on the type of client tool connecting. For "
10078
"example, if the remote computer is connecting with the "
10079
"<application>ssh</application> client application, the OpenSSH server sets "
10080
"up a remote control session after authentication. If a remote user connects "
10081
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
10082
"daemon initiates a secure copy of files between the server and client after "
10083
"authentication. OpenSSH can use many authentication methods, including plain "
10084
"password, public key, and <application>Kerberos</application> tickets."
10085
msgstr ""
10086
10087
#: serverguide/C/remote-administration.xml:53(para)
10088
msgid ""
10089
"Installation of the OpenSSH client and server applications is simple. To "
10090
"install the OpenSSH client applications on your Ubuntu system, use this "
10091
"command at a terminal prompt:"
10092
msgstr ""
10093
10094
#: serverguide/C/remote-administration.xml:59(command)
10095
msgid "sudo apt-get install openssh-client"
10096
msgstr ""
10097
10098
#: serverguide/C/remote-administration.xml:61(para)
10099
msgid ""
10100
"To install the OpenSSH server application, and related support files, use "
10101
"this command at a terminal prompt:"
10102
msgstr ""
10103
10104
#: serverguide/C/remote-administration.xml:66(command)
10105
msgid "sudo apt-get install openssh-server"
10106
msgstr ""
10107
10108
#: serverguide/C/remote-administration.xml:68(para)
10109
msgid ""
10110
"The <application>openssh-server</application> package can also be selected "
10111
"to install during the Server Edition installation process."
10112
msgstr ""
10113
10114
#: serverguide/C/remote-administration.xml:75(para)
10115
msgid ""
10116
"You may configure the default behavior of the OpenSSH server application, "
10117
"<application>sshd</application>, by editing the file "
10118
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
10119
"configuration directives used in this file, you may view the appropriate "
10120
"manual page with the following command, issued at a terminal prompt:"
10121
msgstr ""
10122
10123
#: serverguide/C/remote-administration.xml:83(command)
10124
msgid "man sshd_config"
10125
msgstr "man sshd_config"
10126
10127
#: serverguide/C/remote-administration.xml:85(para)
10128
msgid ""
10129
"There are many directives in the <application>sshd</application> "
10130
"configuration file controlling such things as communication settings and "
10131
"authentication modes. The following are examples of configuration directives "
10132
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
10133
"file."
10134
msgstr ""
10135
10136
#: serverguide/C/remote-administration.xml:92(para)
10137
msgid ""
10138
"Prior to editing the configuration file, you should make a copy of the "
10139
"original file and protect it from writing so you will have the original "
10140
"settings as a reference and to reuse as necessary."
10141
msgstr ""
10142
10143
#: serverguide/C/remote-administration.xml:96(para)
10144
msgid ""
10145
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
10146
"writing with the following commands, issued at a terminal prompt:"
10147
msgstr ""
10148
10149
#: serverguide/C/remote-administration.xml:101(command)
10150
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
10151
msgstr "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
10152
10153
#: serverguide/C/remote-administration.xml:102(command)
10154
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
10155
msgstr "sudo chmod a-w /etc/ssh/sshd_config.original"
10156
10157
#: serverguide/C/remote-administration.xml:104(para)
10158
msgid ""
10159
"The following are examples of configuration directives you may change:"
10160
msgstr ""
10161
10162
#: serverguide/C/remote-administration.xml:109(para)
10163
msgid ""
10164
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
10165
"port 22, change the Port directive as such:"
10166
msgstr ""
10167
10168
#: serverguide/C/remote-administration.xml:113(para)
10169
msgid "Port 2222"
10170
msgstr "Port 2222"
10171
10172
#: serverguide/C/remote-administration.xml:118(para)
10173
msgid ""
10174
"To have <application>sshd</application> allow public key-based login "
10175
"credentials, simply add or modify the line:"
10176
msgstr ""
10177
10178
#: serverguide/C/remote-administration.xml:122(para)
10179
msgid "PubkeyAuthentication yes"
10180
msgstr ""
10181
10182
#: serverguide/C/remote-administration.xml:125(para)
10183
msgid ""
10184
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
10185
"present, ensure the line is not commented out."
10186
msgstr ""
10187
10188
#: serverguide/C/remote-administration.xml:131(para)
10189
msgid ""
10190
"To make your OpenSSH server display the contents of the "
10191
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
10192
"or modify the line:"
10193
msgstr ""
10194
10195
#: serverguide/C/remote-administration.xml:136(para)
10196
msgid "Banner /etc/issue.net"
10197
msgstr "Banner /etc/issue.net"
10198
10199
#: serverguide/C/remote-administration.xml:139(para)
10200
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
10201
msgstr ""
10202
10203
#: serverguide/C/remote-administration.xml:144(para)
10204
msgid ""
10205
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
10206
"save the file, and restart the <application>sshd</application> server "
10207
"application to effect the changes using the following command at a terminal "
10208
"prompt:"
10209
msgstr ""
10210
10211
#: serverguide/C/remote-administration.xml:153(para)
10212
msgid ""
10213
"Many other configuration directives for <application>sshd</application> are "
10214
"available for changing the server application's behavior to fit your needs. "
10215
"Be advised, however, if your only method of access to a server is "
10216
"<application>ssh</application>, and you make a mistake in configuring "
10217
"<application>sshd</application> via the "
10218
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
10219
"out of the server upon restarting it, or that the "
10220
"<application>sshd</application> server refuses to start due to an incorrect "
10221
"configuration directive, so be extra careful when editing this file on a "
10222
"remote server."
10223
msgstr ""
10224
10225
#: serverguide/C/remote-administration.xml:168(title)
10226
msgid "SSH Keys"
10227
msgstr "Claves SSH"
10228
10229
#: serverguide/C/remote-administration.xml:169(para)
10230
msgid ""
10231
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
10232
"the need of a password. SSH key authentication uses two keys a "
10233
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
10234
msgstr ""
10235
10236
#: serverguide/C/remote-administration.xml:173(para)
10237
msgid "To generate the keys, from a terminal prompt enter:"
10238
msgstr "Pa xenerar les claves, escribi nun terminal:"
10239
10240
#: serverguide/C/remote-administration.xml:177(command)
10241
msgid "ssh-keygen -t dsa"
10242
msgstr "ssh-keygen -t dsa"
10243
10244
#: serverguide/C/remote-administration.xml:179(para)
10245
msgid ""
10246
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
10247
"identity of the user. During the process you will be prompted for a "
10248
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
10249
"key."
10250
msgstr ""
10251
10252
#: serverguide/C/remote-administration.xml:183(para)
10253
msgid ""
10254
"By default the <emphasis>public</emphasis> key is saved in the file "
10255
"<filename>~/.ssh/id_dsa.pub</filename>, while "
10256
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
10257
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
10258
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
10259
msgstr ""
10260
10261
#: serverguide/C/remote-administration.xml:189(command)
10262
msgid "ssh-copy-id username@remotehost"
10263
msgstr "ssh-copy-id username@remotehost"
10264
10265
#: serverguide/C/remote-administration.xml:191(para)
10266
msgid ""
10267
"Finally, double check the permissions on the "
10268
"<filename>authorized_keys</filename> file, only the authenticated user "
10269
"should have read and write permissions. If the permissions are not correct "
10270
"change them by:"
10271
msgstr ""
10272
10273
#: serverguide/C/remote-administration.xml:196(command)
10274
msgid "chmod 600 .ssh/authorized_keys"
10275
msgstr ""
10276
10277
#: serverguide/C/remote-administration.xml:198(para)
10278
msgid ""
10279
"You should now be able to SSH to the host without being prompted for a "
10280
"password."
10281
msgstr ""
10282
10283
#: serverguide/C/remote-administration.xml:207(para)
10284
msgid ""
10285
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
10286
"page."
10287
msgstr ""
10288
10289
#: serverguide/C/remote-administration.xml:213(ulink)
10290
msgid "OpenSSH Website"
10291
msgstr "Sitiu web d'OpenSSH"
10292
10293
#: serverguide/C/remote-administration.xml:218(ulink)
10294
msgid "Advanced OpenSSH Wiki Page"
10295
msgstr "Páxina Wiki Avanzada d'OpenSSH"
10296
10297
#: serverguide/C/remote-administration.xml:226(title)
10298
msgid "eBox"
10299
msgstr "eBox"
10300
10301
#: serverguide/C/remote-administration.xml:227(para)
10302
msgid ""
10303
"<application>eBox</application> is a web framework used to manage server "
10304
"application configuration. The modular design of eBox allows you to pick and "
10305
"choose which services you want to configure using eBox."
10306
msgstr ""
10307
10308
#: serverguide/C/remote-administration.xml:234(para)
10309
msgid ""
10310
"The different <application>eBox</application> modules are split into "
10311
"different packages, allowing you to only install those necessary. One way to "
10312
"view the available packages is to enter the following from a terminal:"
10313
msgstr ""
10314
10315
#: serverguide/C/remote-administration.xml:240(command)
10316
msgid "apt-cache rdepends ebox | uniq"
10317
msgstr "apt-cache rdepends ebox | uniq"
10318
10319
#: serverguide/C/remote-administration.xml:242(para)
10320
msgid ""
10321
"To install the <application>ebox</application> package, which contains the "
10322
"default modules, enter the following:"
10323
msgstr ""
10324
10325
#: serverguide/C/remote-administration.xml:247(command)
10326
msgid "sudo apt-get install ebox"
10327
msgstr ""
10328
10329
#: serverguide/C/remote-administration.xml:250(para)
10330
msgid ""
10331
"During the installation you will be asked to supply a password for the ebox "
10332
"user. After installing eBox the web interface can be accessed from: "
10333
"<emphasis>https://yourserver/ebox</emphasis>."
10334
msgstr ""
10335
10336
#: serverguide/C/remote-administration.xml:259(para)
10337
msgid ""
10338
"An important thing to remember when using <application>eBox</application> is "
10339
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10340
"button that implements the new configuration. After clicking the Change "
10341
"button most, but not all, modules will then need to be "
10342
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10343
"<quote>Save changes</quote> link in the top right hand corner."
10344
msgstr ""
10345
10346
#: serverguide/C/remote-administration.xml:267(para)
10347
msgid ""
10348
"Once you make a change that requires a Save, the link will change from green "
10349
"to red."
10350
msgstr ""
10351
10352
#: serverguide/C/remote-administration.xml:273(title)
10353
msgid "eBox Modules"
10354
msgstr "Módulos d'eBox"
10355
10356
#: serverguide/C/remote-administration.xml:274(para)
10357
msgid ""
10358
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10359
"new module is installed it will not be automatically enabled."
10360
msgstr ""
10361
10362
#: serverguide/C/remote-administration.xml:278(para)
10363
msgid ""
10364
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10365
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10366
"which modules you would like to enable and click the <quote>Save</quote> "
10367
"link."
10368
msgstr ""
10369
10370
#: serverguide/C/remote-administration.xml:284(title)
10371
msgid "Default Modules"
10372
msgstr "Módulos por defeutu"
10373
10374
#: serverguide/C/remote-administration.xml:285(para)
10375
msgid ""
10376
"This section provides a quick summary of the default "
10377
"<application>eBox</application> modules."
10378
msgstr ""
10379
10380
#: serverguide/C/remote-administration.xml:291(para)
10381
msgid ""
10382
"<emphasis>System:</emphasis> contains options allowing configuration of "
10383
"general eBox items."
10384
msgstr ""
10385
10386
#: serverguide/C/remote-administration.xml:297(para)
10387
msgid ""
10388
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10389
"and contains a change password form."
10390
msgstr ""
10391
10392
#: serverguide/C/remote-administration.xml:303(para)
10393
msgid ""
10394
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10395
"about disk usage."
10396
msgstr ""
10397
10398
#: serverguide/C/remote-administration.xml:309(para)
10399
msgid ""
10400
"<emphasis>Backup:</emphasis> is used to backup "
10401
"<application>eBox</application> configuration information, and the "
10402
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10403
"information not included in the <emphasis>Configuration</emphasis> option "
10404
"such as log files."
10405
msgstr ""
10406
10407
#: serverguide/C/remote-administration.xml:317(para)
10408
msgid ""
10409
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10410
msgstr ""
10411
10412
#: serverguide/C/remote-administration.xml:322(para)
10413
msgid ""
10414
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10415
"when reporting bugs to the eBox developers."
10416
msgstr ""
10417
10418
#: serverguide/C/remote-administration.xml:330(para)
10419
msgid ""
10420
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10421
"queried depending on the purge time configured."
10422
msgstr ""
10423
10424
#: serverguide/C/remote-administration.xml:336(para)
10425
msgid ""
10426
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10427
"through rss, jabber, and log file."
10428
msgstr ""
10429
10430
#: serverguide/C/remote-administration.xml:343(emphasis)
10431
msgid "Available Events:"
10432
msgstr "Eventos Disponibles:"
10433
10434
#: serverguide/C/remote-administration.xml:347(para)
10435
msgid ""
10436
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10437
"drops below a configured percentage, 10% by default."
10438
msgstr ""
10439
10440
#: serverguide/C/remote-administration.xml:353(para)
10441
msgid ""
10442
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10443
"has logged something."
10444
msgstr ""
10445
10446
#: serverguide/C/remote-administration.xml:359(para)
10447
msgid ""
10448
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10449
"any issues arise."
10450
msgstr ""
10451
10452
#: serverguide/C/remote-administration.xml:365(para)
10453
msgid ""
10454
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10455
"times in a short time period."
10456
msgstr ""
10457
10458
#: serverguide/C/remote-administration.xml:371(para)
10459
msgid ""
10460
"<emphasis>State:</emphasis> alerts on the state of "
10461
"<application>eBox</application>, either up or down."
10462
msgstr ""
10463
10464
#: serverguide/C/remote-administration.xml:380(emphasis)
10465
msgid "Dispatchers:"
10466
msgstr "Despachadores:"
10467
10468
#: serverguide/C/remote-administration.xml:384(para)
10469
msgid ""
10470
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10471
"<application>eBox</application> log file "
10472
"<filename>/var/log/ebox/ebox.log</filename>."
10473
msgstr ""
10474
10475
#: serverguide/C/remote-administration.xml:391(para)
10476
msgid ""
10477
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10478
"configure it by clicking on the <quote>Configure</quote> icon."
10479
msgstr ""
10480
10481
#: serverguide/C/remote-administration.xml:397(para)
10482
msgid ""
10483
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10484
"subscribe to the link in order to view event alerts."
10485
msgstr ""
10486
10487
#: serverguide/C/remote-administration.xml:410(title)
10488
msgid "Additional Modules"
10489
msgstr "Módulos Adicionales"
10490
10491
#: serverguide/C/remote-administration.xml:411(para)
10492
msgid ""
10493
"Here is a quick description of other available "
10494
"<application>eBox</application> modules:"
10495
msgstr ""
10496
10497
#: serverguide/C/remote-administration.xml:416(para)
10498
msgid ""
10499
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10500
"options through eBox."
10501
msgstr ""
10502
10503
#: serverguide/C/remote-administration.xml:422(para)
10504
msgid ""
10505
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10506
msgstr ""
10507
10508
#: serverguide/C/remote-administration.xml:427(para)
10509
msgid ""
10510
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10511
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10512
msgstr ""
10513
10514
#: serverguide/C/remote-administration.xml:433(para)
10515
msgid ""
10516
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10517
"server."
10518
msgstr ""
10519
10520
#: serverguide/C/remote-administration.xml:438(para)
10521
msgid ""
10522
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10523
"server configuration options."
10524
msgstr ""
10525
10526
#: serverguide/C/remote-administration.xml:444(para)
10527
msgid ""
10528
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10529
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10530
"group of IPs."
10531
msgstr ""
10532
10533
#: serverguide/C/remote-administration.xml:451(para)
10534
msgid ""
10535
"<emphasis>Services:</emphasis> displays configuration information for "
10536
"services that are available to the network."
10537
msgstr ""
10538
10539
#: serverguide/C/remote-administration.xml:457(para)
10540
msgid ""
10541
"<emphasis>Squid:</emphasis> configuration options for the "
10542
"<application>Squid</application> proxy server."
10543
msgstr ""
10544
10545
#: serverguide/C/remote-administration.xml:463(para)
10546
msgid ""
10547
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10548
msgstr ""
10549
10550
#: serverguide/C/remote-administration.xml:468(para)
10551
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10552
msgstr ""
10553
10554
#: serverguide/C/remote-administration.xml:473(para)
10555
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10556
msgstr ""
10557
10558
#: serverguide/C/remote-administration.xml:478(para)
10559
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10560
msgstr ""
10561
10562
#: serverguide/C/remote-administration.xml:483(para)
10563
msgid ""
10564
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10565
"Network application."
10566
msgstr ""
10567
10568
#: serverguide/C/remote-administration.xml:494(para)
10569
msgid ""
10570
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10571
"Wiki</ulink> page has more details."
10572
msgstr ""
10573
10574
#: serverguide/C/remote-administration.xml:499(para)
10575
msgid ""
10576
"For more information also see the <ulink url=\"http://ebox-"
10577
"platform.com/\">eBox Home Page</ulink>."
10578
msgstr ""
10579
10580
#: serverguide/C/package-management.xml:13(title)
10581
msgid "Package Management"
10582
msgstr ""
10583
10584
#: serverguide/C/package-management.xml:14(para)
10585
msgid ""
10586
"Ubuntu features a comprehensive package management system for the "
10587
"installation, upgrade, configuration, and removal of software. In addition "
10588
"to providing access to an organized base of over 24,000 software packages "
10589
"for your Ubuntu computer, the package management facilities also feature "
10590
"dependency resolution capabilities and software update checking."
10591
msgstr ""
10592
10593
#: serverguide/C/package-management.xml:16(para)
10594
msgid ""
10595
"Several tools are available for interacting with Ubuntu's package management "
10596
"system, from simple command-line utilities which may be easily automated by "
10597
"system administrators, to a simple graphical interface which is easy to use "
10598
"by those new to Ubuntu."
10599
msgstr ""
10600
10601
#: serverguide/C/package-management.xml:21(para)
10602
msgid ""
10603
"Ubuntu's package management system is derived from the same system used by "
10604
"the Debian GNU/Linux distribution. The package files contain all of the "
10605
"necessary files, meta-data, and instructions to implement a particular "
10606
"functionality or software application on your Ubuntu computer."
10607
msgstr ""
10608
10609
#: serverguide/C/package-management.xml:24(para)
10610
msgid ""
10611
"Debian package files typically have the extension '.deb', and typically "
10612
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10613
"collections of packages found on various media, such as CD-ROM discs, or "
10614
"online. Packages are normally of the pre-compiled binary format; thus "
10615
"installation is quick and requires no compiling of software."
10616
msgstr ""
10617
10618
#: serverguide/C/package-management.xml:27(para)
10619
msgid ""
10620
"Many complex packages use the concept of <emphasis "
10621
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10622
"packages required by the principal package in order to function properly. "
10623
"For example, the speech synthesis package "
10624
"<application>Festival</application> depends upon the package "
10625
"<application>libasound2</application>, which is a package supplying the "
10626
"<application>ALSA</application> sound library needed for audio playback. In "
10627
"order for <application>Festival</application> to function, it and all of its "
10628
"dependencies must be installed. The software management tools in Ubuntu will "
10629
"do this automatically."
10630
msgstr ""
10631
10632
#: serverguide/C/package-management.xml:32(title)
10633
msgid "dpkg"
10634
msgstr ""
10635
10636
#: serverguide/C/package-management.xml:34(para)
10637
msgid ""
10638
"<application>dpkg</application> is a package manager for "
10639
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10640
"packages, but unlike other package management system's it can not "
10641
"automatically download and install packages and their dependencies. This "
10642
"section covers using <application>dpkg</application> to manage locally "
10643
"installed packages:"
10644
msgstr ""
10645
10646
#: serverguide/C/package-management.xml:43(para)
10647
msgid ""
10648
"To list all packages installed on the system, from a terminal prompt enter:"
10649
msgstr ""
10650
10651
#: serverguide/C/package-management.xml:48(command)
10652
msgid "dpkg -l"
10653
msgstr ""
10654
10655
#: serverguide/C/package-management.xml:54(para)
10656
msgid ""
10657
"Depending on the amount of packages on your system, this can generate a "
10658
"large amount of output. Pipe the output through "
10659
"<application>grep</application> to see if a specific package is installed:"
10660
msgstr ""
10661
10662
#: serverguide/C/package-management.xml:60(command)
10663
msgid "dpkg -l | grep apache2"
10664
msgstr ""
10665
10666
#: serverguide/C/package-management.xml:63(para)
10667
msgid ""
10668
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10669
"package name, or other regular expression."
10670
msgstr ""
10671
10672
#: serverguide/C/package-management.xml:70(para)
10673
msgid ""
10674
"To list the files installed by a package, in this case the "
10675
"<application>ufw</application> package, enter:"
10676
msgstr ""
10677
10678
#: serverguide/C/package-management.xml:75(command)
10679
msgid "dpkg -L ufw"
10680
msgstr ""
10681
10682
#: serverguide/C/package-management.xml:81(para)
10683
msgid ""
10684
"If you are not sure which package installed a file, <application>dpkg -"
10685
"S</application> may be able to tell you. For example:"
10686
msgstr ""
10687
10688
#: serverguide/C/package-management.xml:87(command)
10689
msgid "dpkg -S /etc/host.conf"
10690
msgstr ""
10691
10692
#: serverguide/C/package-management.xml:88(computeroutput)
10693
#, no-wrap
10694
msgid "base-files: /etc/host.conf"
10695
msgstr ""
10696
10697
#: serverguide/C/package-management.xml:91(para)
10698
msgid ""
10699
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10700
"<application>base-files</application> package."
10701
msgstr ""
10702
10703
#: serverguide/C/package-management.xml:96(para)
10704
msgid ""
10705
"Many files are automatically generated during the package install process, "
10706
"and even though they are on the filesystem <command>dpkg -S</command> may "
10707
"not know which package they belong to."
10708
msgstr ""
10709
10710
#: serverguide/C/package-management.xml:105(para)
10711
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10712
msgstr ""
10713
10714
#: serverguide/C/package-management.xml:110(command)
10715
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10716
msgstr ""
10717
10718
#: serverguide/C/package-management.xml:113(para)
10719
msgid ""
10720
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10721
"the local .deb file."
10722
msgstr ""
10723
10724
#: serverguide/C/package-management.xml:120(para)
10725
msgid "Uninstalling a package can be accomplished by:"
10726
msgstr ""
10727
10728
#: serverguide/C/package-management.xml:125(command)
10729
msgid "sudo dpkg -r zip"
10730
msgstr ""
10731
10732
#: serverguide/C/package-management.xml:129(para)
10733
msgid ""
10734
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10735
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10736
"manager that handles dependencies, to ensure that the system is in a "
10737
"consistent state. For example using <command>dpkg -r</command> you can "
10738
"remove the <application>zip</application> package, but any packages that "
10739
"depend on it will still be installed and may no longer function correctly."
10740
msgstr ""
10741
10742
#: serverguide/C/package-management.xml:140(para)
10743
msgid ""
10744
"For more <application>dpkg</application> options see the man page: "
10745
"<command>man dpkg</command>."
10746
msgstr ""
10747
10748
#: serverguide/C/package-management.xml:146(title)
10749
msgid "Apt-Get"
10750
msgstr ""
10751
10752
#: serverguide/C/package-management.xml:147(para)
10753
msgid ""
10754
"The <application>apt-get</application> command is a powerful command-line "
10755
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10756
"(APT) performing such functions as installation of new software packages, "
10757
"upgrade of existing software packages, updating of the package list index, "
10758
"and even upgrading the entire Ubuntu system."
10759
msgstr ""
10760
10761
#: serverguide/C/package-management.xml:150(para)
10762
msgid ""
10763
"Being a simple command-line tool, <application>apt-get</application> has "
10764
"numerous advantages over other package management tools available in Ubuntu "
10765
"for server administrators. Some of these advantages include ease of use over "
10766
"simple terminal connections (SSH) and the ability to be used in system "
10767
"administration scripts, which can in turn be automated by the "
10768
"<application>cron</application> scheduling utility."
10769
msgstr ""
10770
10771
#: serverguide/C/package-management.xml:157(para)
10772
msgid ""
10773
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10774
"packages using the <application>apt-get</application> tool is quite simple. "
10775
"For example, to install the network scanner <emphasis "
10776
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10777
"<command>sudo apt-get install nmap</command>\n"
10778
"</screen>"
10779
msgstr ""
10780
10781
#: serverguide/C/package-management.xml:165(para)
10782
msgid ""
10783
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10784
"packages is also a straightforward and simple process. To remove the nmap "
10785
"package installed in the previous example, type the following: <screen>\n"
10786
"<command>sudo apt-get remove nmap</command>\n"
10787
"</screen>"
10788
msgstr ""
10789
10790
#: serverguide/C/package-management.xml:172(para)
10791
msgid ""
10792
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10793
"multiple packages to be installed or removed, separated by spaces."
10794
msgstr ""
10795
10796
#: serverguide/C/package-management.xml:175(para)
10797
msgid ""
10798
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10799
"remove</command> will remove the package configuration files as well. This "
10800
"may or may not be the desired effect so use with caution."
10801
msgstr ""
10802
10803
#: serverguide/C/package-management.xml:181(para)
10804
msgid ""
10805
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10806
"index is essentially a database of available packages from the repositories "
10807
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10808
"the local package index with the latest changes made in repositories, type "
10809
"the following: <screen>\n"
10810
"<command>sudo apt-get update</command>\n"
10811
"</screen>"
10812
msgstr ""
10813
10814
#: serverguide/C/package-management.xml:189(para)
10815
msgid ""
10816
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10817
"versions of packages currently installed on your computer may become "
10818
"available from the package repositories (for example security updates). To "
10819
"upgrade your system, first update your package index as outlined above, and "
10820
"then type: <screen>\n"
10821
"<command>sudo apt-get upgrade</command>\n"
10822
"</screen>"
10823
msgstr ""
10824
10825
#: serverguide/C/package-management.xml:195(para)
10826
msgid ""
10827
"For information on upgrading to a new Ubuntu release see <xref "
10828
"linkend=\"installing-upgrading\"/>."
10829
msgstr ""
10830
10831
#: serverguide/C/package-management.xml:153(para)
10832
msgid ""
10833
"Some examples of popular uses for the <application>apt-get</application> "
10834
"utility: <placeholder-1/>"
10835
msgstr ""
10836
10837
#: serverguide/C/package-management.xml:201(para)
10838
msgid ""
10839
"Actions of the <application>apt-get</application> command, such as "
10840
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10841
"log file."
10842
msgstr ""
10843
10844
#: serverguide/C/package-management.xml:204(para)
10845
msgid ""
10846
"For further information about the use of <application>APT</application>, "
10847
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10848
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10849
"help</screen>"
10850
msgstr ""
10851
10852
#: serverguide/C/package-management.xml:208(title)
10853
msgid "Aptitude"
10854
msgstr ""
10855
10856
#: serverguide/C/package-management.xml:209(para)
10857
msgid ""
10858
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10859
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10860
"the common package management functions, such as installation, removal, and "
10861
"upgrade, are performed in <application>Aptitude</application> with single-"
10862
"key commands, which are typically lowercase letters."
10863
msgstr ""
10864
10865
#: serverguide/C/package-management.xml:212(para)
10866
msgid ""
10867
"<application>Aptitude</application> is best suited for use in a non-"
10868
"graphical terminal environment to ensure proper functioning of the command "
10869
"keys. You may start <application>Aptitude</application> as a normal user "
10870
"with the following command at a terminal prompt: <screen>\n"
10871
"<command>sudo aptitude</command>\n"
10872
"</screen>"
10873
msgstr ""
10874
10875
#: serverguide/C/package-management.xml:219(para)
10876
msgid ""
10877
"When <application>Aptitude</application> starts, you will see a menu bar at "
10878
"the top of the screen and two panes below the menu bar. The top pane "
10879
"contains package categories, such as <emphasis role=\"italics\">New "
10880
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10881
"Packages</emphasis>. The bottom pane contains information related to the "
10882
"packages and package categories."
10883
msgstr ""
10884
10885
#: serverguide/C/package-management.xml:222(para)
10886
msgid ""
10887
"Using <application>Aptitude</application> for package management is "
10888
"relatively straightforward, and the user interface makes common tasks simple "
10889
"to perform. The following are examples of common package management "
10890
"functions as performed in <application>Aptitude</application>:"
10891
msgstr ""
10892
10893
#: serverguide/C/package-management.xml:226(para)
10894
msgid ""
10895
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10896
"locate the package via the Not Installed Packages package category, for "
10897
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10898
"key, and highlight the package you wish to install. After highlighting the "
10899
"package you wish to install, press the <keycap>+</keycap> key, and the "
10900
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10901
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10902
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10903
"again, and you will be prompted to become root to complete the installation. "
10904
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10905
"your user password to become root. Finally, press <keycap>g</keycap> once "
10906
"more and you'll be prompted to download the package. Press "
10907
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10908
"prompt, and downloading and installation of the package will commence."
10909
msgstr ""
10910
10911
#: serverguide/C/package-management.xml:230(para)
10912
msgid ""
10913
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10914
"locate the package via the Installed Packages package category, for example, "
10915
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10916
"highlight the package you wish to remove. After highlighting the package you "
10917
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10918
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10919
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10920
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10921
"prompted to become root to complete the installation. Press "
10922
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10923
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10924
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10925
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10926
"the package will commence."
10927
msgstr ""
10928
10929
#: serverguide/C/package-management.xml:234(para)
10930
msgid ""
10931
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10932
"package index, simply press the <keycap>u</keycap> key and you will be "
10933
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10934
"which will result in a Password: prompt. Enter your user password to become "
10935
"root. Updating of the package index will commence. Press "
10936
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10937
"presented to complete the process."
10938
msgstr ""
10939
10940
#: serverguide/C/package-management.xml:238(para)
10941
msgid ""
10942
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10943
"perform the update of the package index as detailed above, and then press "
10944
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10945
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10946
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10947
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10948
"result in a Password: prompt. Enter your user password to become root. "
10949
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10950
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10951
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10952
"will commence."
10953
msgstr ""
10954
10955
#: serverguide/C/package-management.xml:245(para)
10956
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10957
msgstr ""
10958
10959
#: serverguide/C/package-management.xml:250(para)
10960
msgid ""
10961
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10962
"configuration remains on system"
10963
msgstr ""
10964
10965
#: serverguide/C/package-management.xml:254(para)
10966
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10967
msgstr ""
10968
10969
#: serverguide/C/package-management.xml:258(para)
10970
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10971
msgstr ""
10972
10973
#: serverguide/C/package-management.xml:262(para)
10974
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10975
msgstr ""
10976
10977
#: serverguide/C/package-management.xml:266(para)
10978
msgid ""
10979
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10980
"configured"
10981
msgstr ""
10982
10983
#: serverguide/C/package-management.xml:270(para)
10984
msgid ""
10985
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10986
"and requires fix"
10987
msgstr ""
10988
10989
#: serverguide/C/package-management.xml:274(para)
10990
msgid ""
10991
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10992
"requires fix"
10993
msgstr ""
10994
10995
#: serverguide/C/package-management.xml:242(para)
10996
msgid ""
10997
"The first column of information displayed in the package list in the top "
10998
"pane, when actually viewing packages lists the current state of the package, "
10999
"and uses the following key to describe the state of the package: "
11000
"<placeholder-1/>"
11001
msgstr ""
11002
11003
#: serverguide/C/package-management.xml:280(para)
11004
msgid ""
11005
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
11006
"wish to exit. Many other functions are available from the Aptitude menu by "
11007
"pressing the <keycap>F10</keycap> key."
11008
msgstr ""
11009
11010
#: serverguide/C/package-management.xml:285(title)
11011
msgid "Automatic Updates"
11012
msgstr ""
11013
11014
#: serverguide/C/package-management.xml:287(para)
11015
msgid ""
11016
"The <application>unattended-upgrades</application> package can be used to "
11017
"automatically install updated packages, and can be configured to update all "
11018
"packages or just install security updates. First, install the package by "
11019
"entering the following in a terminal:"
11020
msgstr ""
11021
11022
#: serverguide/C/package-management.xml:293(command)
11023
msgid "sudo apt-get install unattended-upgrades"
11024
msgstr ""
11025
11026
#: serverguide/C/package-management.xml:296(para)
11027
msgid ""
11028
"To configure <application>unattended-upgrades</application>, edit "
11029
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
11030
"the following to fit your needs:"
11031
msgstr ""
11032
11033
#: serverguide/C/package-management.xml:301(programlisting)
11034
#, no-wrap
11035
msgid ""
11036
"\n"
11037
"Unattended-Upgrade::Allowed-Origins {\n"
11038
" \"Ubuntu lucid-security\";\n"
11039
"// \"Ubuntu lucid-updates\";\n"
11040
"};\n"
11041
msgstr ""
11042
11043
#: serverguide/C/package-management.xml:308(para)
11044
msgid ""
11045
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
11046
"will not be automatically updated. To blacklist a package, add it to the "
11047
"list:"
11048
msgstr ""
11049
11050
#: serverguide/C/package-management.xml:313(programlisting)
11051
#, no-wrap
11052
msgid ""
11053
"\n"
11054
"Unattended-Upgrade::Package-Blacklist {\n"
11055
"// \"vim\";\n"
11056
"// \"libc6\";\n"
11057
"// \"libc6-dev\";\n"
11058
"// \"libc6-i686\";\n"
11059
"};\n"
11060
msgstr ""
11061
11062
#: serverguide/C/package-management.xml:323(para)
11063
msgid ""
11064
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
11065
"whatever follows \"//\" will not be evaluated."
11066
msgstr ""
11067
11068
#: serverguide/C/package-management.xml:328(para)
11069
msgid ""
11070
"To enable automatic updates, edit "
11071
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
11072
"<application>apt</application> configuration options:"
11073
msgstr ""
11074
11075
#: serverguide/C/package-management.xml:332(programlisting)
11076
#, no-wrap
11077
msgid ""
11078
"\n"
11079
"APT::Periodic::Update-Package-Lists \"1\";\n"
11080
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
11081
"APT::Periodic::AutocleanInterval \"7\";\n"
11082
"APT::Periodic::Unattended-Upgrade \"1\";\n"
11083
msgstr ""
11084
11085
#: serverguide/C/package-management.xml:339(para)
11086
msgid ""
11087
"The above configuration updates the package list, downloads, and installs "
11088
"available upgrades every day. The local download archive is cleaned every "
11089
"week."
11090
msgstr ""
11091
11092
#: serverguide/C/package-management.xml:345(para)
11093
msgid ""
11094
"You can read more about <application>apt</application> Periodic "
11095
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
11096
"header."
11097
msgstr ""
11098
11099
#: serverguide/C/package-management.xml:350(para)
11100
msgid ""
11101
"The results of <application>unattended-upgrades</application> will be logged "
11102
"to <filename>/var/log/unattended-upgrades</filename>."
11103
msgstr ""
11104
11105
#: serverguide/C/package-management.xml:355(title)
11106
msgid "Notifications"
11107
msgstr ""
11108
11109
#: serverguide/C/package-management.xml:357(para)
11110
msgid ""
11111
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
11112
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
11113
"<application>unattended-upgrades</application> to email an administrator "
11114
"detailing any packages that need upgrading or have problems."
11115
msgstr ""
11116
11117
#: serverguide/C/package-management.xml:362(para)
11118
msgid ""
11119
"Another useful package is <application>apticron</application>. "
11120
"<application>apticron</application> will configure a "
11121
"<application>cron</application> job to email an administrator information "
11122
"about any packages on the system that have updates available, as well as a "
11123
"summary of changes in each package."
11124
msgstr ""
11125
11126
#: serverguide/C/package-management.xml:368(para)
11127
msgid ""
11128
"To install the <application>apticron</application> package, in a terminal "
11129
"enter:"
11130
msgstr ""
11131
11132
#: serverguide/C/package-management.xml:373(command)
11133
msgid "sudo apt-get install apticron"
11134
msgstr ""
11135
11136
#: serverguide/C/package-management.xml:376(para)
11137
msgid ""
11138
"Once the package is installed edit "
11139
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
11140
"and other options:"
11141
msgstr ""
11142
11143
#: serverguide/C/package-management.xml:380(programlisting)
11144
#, no-wrap
11145
msgid ""
11146
"\n"
11147
"EMAIL=\"root@example.com\"\n"
11148
msgstr ""
11149
11150
#: serverguide/C/package-management.xml:389(para)
11151
msgid ""
11152
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
11153
"system repositories is stored in the /etc/apt/sources.list configuration "
11154
"file. An example of this file is referenced here, along with information on "
11155
"adding or removing repository references from the file."
11156
msgstr ""
11157
11158
#: serverguide/C/package-management.xml:395(para)
11159
msgid ""
11160
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
11161
"typical <filename>/etc/apt/sources.list</filename> file."
11162
msgstr ""
11163
11164
#: serverguide/C/package-management.xml:399(para)
11165
msgid ""
11166
"You may edit the file to enable repositories or disable them. For example, "
11167
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
11168
"operations occur, simply comment out the appropriate line for the CD-ROM, "
11169
"which appears at the top of the file:"
11170
msgstr ""
11171
11172
#: serverguide/C/package-management.xml:404(screen)
11173
#, no-wrap
11174
msgid ""
11175
"\n"
11176
"# no more prompting for CD-ROM please\n"
11177
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
11178
"main restricted\n"
11179
msgstr ""
11180
11181
#: serverguide/C/package-management.xml:410(title)
11182
msgid "Extra Repositories"
11183
msgstr ""
11184
11185
#: serverguide/C/package-management.xml:411(para)
11186
msgid ""
11187
"In addition to the officially supported package repositories available for "
11188
"Ubuntu, there exist additional community-maintained repositories which add "
11189
"thousands more potential packages for installation. Two of the most popular "
11190
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
11191
"repositories. These repositories are not officially supported by Ubuntu, but "
11192
"because they are maintained by the community they generally provide packages "
11193
"which are safe for use with your Ubuntu computer."
11194
msgstr ""
11195
11196
#: serverguide/C/package-management.xml:414(para)
11197
msgid ""
11198
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
11199
"licensing issues that prevent them from being distributed with a free "
11200
"operating system, and they may be illegal in your locality."
11201
msgstr ""
11202
11203
#: serverguide/C/package-management.xml:416(para)
11204
msgid ""
11205
"Be advised that neither the <emphasis>Universe</emphasis> or "
11206
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
11207
"packages. In particular, there may not be security updates for these "
11208
"packages."
11209
msgstr ""
11210
11211
#: serverguide/C/package-management.xml:420(para)
11212
msgid ""
11213
"Many other package sources are available, sometimes even offering only one "
11214
"package, as in the case of package sources provided by the developer of a "
11215
"single application. You should always be very careful and cautious when "
11216
"using non-standard package sources, however. Research the source and "
11217
"packages carefully before performing any installation, as some package "
11218
"sources and their packages could render your system unstable or non-"
11219
"functional in some respects."
11220
msgstr ""
11221
11222
#: serverguide/C/package-management.xml:423(para)
11223
msgid ""
11224
"By default, the <emphasis>Universe</emphasis> and "
11225
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
11226
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
11227
"comment the following lines:"
11228
msgstr ""
11229
11230
#: serverguide/C/package-management.xml:430(programlisting)
11231
#, no-wrap
11232
msgid ""
11233
"\n"
11234
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11235
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11236
"\n"
11237
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11238
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11239
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11240
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11241
"\n"
11242
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11243
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11244
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11245
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11246
"\n"
11247
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
11248
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
11249
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11250
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11251
msgstr ""
11252
11253
#: serverguide/C/package-management.xml:456(para)
11254
msgid ""
11255
"Most of the material covered in this chapter is available in "
11256
"<application>man</application> pages, many of which are available online."
11257
msgstr ""
11258
11259
#: serverguide/C/package-management.xml:463(para)
11260
msgid ""
11261
"The <ulink "
11262
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
11263
"re</ulink> Ubuntu wiki page has more information."
11264
msgstr ""
11265
11266
#: serverguide/C/package-management.xml:468(para)
11267
msgid ""
11268
"For more <application>dpkg</application> details see the <ulink "
11269
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
11270
"man page</ulink>."
11271
msgstr ""
11272
11273
#: serverguide/C/package-management.xml:474(para)
11274
msgid ""
11275
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
11276
"HOWTO</ulink> and <ulink "
11277
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
11278
"get man page</ulink> contain useful information regarding <application>apt-"
11279
"get</application> usage."
11280
msgstr ""
11281
11282
#: serverguide/C/package-management.xml:481(para)
11283
msgid ""
11284
"See the <ulink "
11285
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
11286
"de man page</ulink> for more <application>aptitude</application> options."
11287
msgstr ""
11288
11289
#: serverguide/C/package-management.xml:487(para)
11290
msgid ""
11291
"The <ulink "
11292
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
11293
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
11294
"adding repositories."
11295
msgstr ""
11296
11297
#: serverguide/C/other-apps.xml:13(title)
11298
msgid "Other Useful Applications"
11299
msgstr ""
11300
11301
#: serverguide/C/other-apps.xml:15(para)
11302
msgid ""
11303
"There are many very useful applications developed by the Ubuntu Server Team, "
11304
"and others that are well integrated with Ubuntu Server Edition, that might "
11305
"not be well known. This chapter will showcase some useful applications that "
11306
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11307
"easier."
11308
msgstr ""
11309
11310
#: serverguide/C/other-apps.xml:23(title)
11311
msgid "pam_motd"
11312
msgstr ""
11313
11314
#: serverguide/C/other-apps.xml:25(para)
11315
msgid ""
11316
"When logging into an Ubuntu server you may have noticed the informative "
11317
"Message Of The Day (MOTD). This information is obtained and displayed using "
11318
"a couple of packages:"
11319
msgstr ""
11320
11321
#: serverguide/C/other-apps.xml:32(para)
11322
msgid ""
11323
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11324
"<application>landscape-client</application>, which can be used to manage "
11325
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11326
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11327
"utility which is used to gather the information displayed in the MOTD."
11328
msgstr ""
11329
11330
#: serverguide/C/other-apps.xml:40(para)
11331
msgid ""
11332
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11333
"the MOTD via <application>pam_motd</application> module."
11334
msgstr ""
11335
11336
#: serverguide/C/other-apps.xml:46(para)
11337
msgid ""
11338
"<application>pam_motd</application> executes the scripts in "
11339
"<filename>/etc/update-motd.d</filename> in order based on the number "
11340
"prepended to the script. The output of the scripts is written to "
11341
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11342
"concatenated with <filename>/etc/motd.tail</filename>."
11343
msgstr ""
11344
11345
#: serverguide/C/other-apps.xml:52(para)
11346
msgid ""
11347
"You can add your own dynamic information to the MOTD. For example, to add "
11348
"local weather information:"
11349
msgstr ""
11350
11351
#: serverguide/C/other-apps.xml:58(para)
11352
msgid "First, install the <application>weather-util</application> package:"
11353
msgstr ""
11354
11355
#: serverguide/C/other-apps.xml:63(command)
11356
msgid "sudo apt-get install weather-util"
11357
msgstr ""
11358
11359
#: serverguide/C/other-apps.xml:68(para)
11360
msgid ""
11361
"The <application>weather</application> utility uses METAR data from the "
11362
"National Oceanic and Atmospheric Administration and forecasts from the "
11363
"National Weather Service. In order to find local information you will need "
11364
"the 4-character ICAO location indicator. This can be determined by browsing "
11365
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11366
"Weather Service</ulink> site."
11367
msgstr ""
11368
11369
#: serverguide/C/other-apps.xml:75(para)
11370
msgid ""
11371
"Although the National Weather Service is a United States government agency "
11372
"there are weather stations available world wide. However, local weather "
11373
"information for all locations outside the U.S. may not be available."
11374
msgstr ""
11375
11376
#: serverguide/C/other-apps.xml:81(para)
11377
msgid ""
11378
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11379
"script to use <application>weather</application> with your local ICAO "
11380
"indicator:"
11381
msgstr ""
11382
11383
#: serverguide/C/other-apps.xml:86(programlisting)
11384
#, no-wrap
11385
msgid ""
11386
"\n"
11387
"#!/bin/sh\n"
11388
"#\n"
11389
"#\n"
11390
"# Prints the local weather information for the MOTD.\n"
11391
"#\n"
11392
"#\n"
11393
"\n"
11394
"# Replace KINT with your local weather station.\n"
11395
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11396
"\n"
11397
"echo\n"
11398
"weather -i KINT\n"
11399
"echo\n"
11400
"\n"
11401
msgstr ""
11402
11403
#: serverguide/C/other-apps.xml:104(para)
11404
msgid "Make the script executable:"
11405
msgstr ""
11406
11407
#: serverguide/C/other-apps.xml:109(command)
11408
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11409
msgstr ""
11410
11411
#: serverguide/C/other-apps.xml:113(para)
11412
msgid ""
11413
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11414
"weather</filename>:"
11415
msgstr ""
11416
11417
#: serverguide/C/other-apps.xml:118(command)
11418
msgid ""
11419
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11420
msgstr ""
11421
11422
#: serverguide/C/other-apps.xml:122(para)
11423
msgid "Finally, exit the server and re-login to view the new MOTD."
11424
msgstr ""
11425
11426
#: serverguide/C/other-apps.xml:128(para)
11427
msgid ""
11428
"You should now be greeted with some useful information, and some information "
11429
"about the local weather that may not be quite so useful. Hopefully the "
11430
"<application>local-weather</application> example demonstrates the "
11431
"flexibility of <application>pam_motd</application>."
11432
msgstr ""
11433
11434
#: serverguide/C/other-apps.xml:136(title)
11435
msgid "etckeeper"
11436
msgstr ""
11437
11438
#: serverguide/C/other-apps.xml:138(para)
11439
msgid ""
11440
"<application>etckeeper</application> allows the contents of <filename "
11441
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11442
"System (VCS) repository. It hooks into <application>apt</application> to "
11443
"automatically commit changes to <filename>/etc</filename> when packages are "
11444
"installed or upgraded. Placing <filename>/etc</filename> under version "
11445
"control is considered an industry best practice, and the goal of "
11446
"<application>etckeeper</application> is to make this process as painless as "
11447
"possible."
11448
msgstr ""
11449
11450
#: serverguide/C/other-apps.xml:146(para)
11451
msgid ""
11452
"Install <application>etckeeper</application> by entering the following in a "
11453
"terminal:"
11454
msgstr ""
11455
11456
#: serverguide/C/other-apps.xml:151(command)
11457
msgid "sudo apt-get install etckeeper"
11458
msgstr ""
11459
11460
#: serverguide/C/other-apps.xml:154(para)
11461
msgid ""
11462
"The main configuration file, "
11463
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11464
"main option is which VCS to use. By default "
11465
"<application>etckeeper</application> is configured to use "
11466
"<application>bzr</application> for version control. The repository is "
11467
"automatically initialized (and committed for the first time) during package "
11468
"installation. It is possible to undo this by entering the following command:"
11469
msgstr ""
11470
11471
#: serverguide/C/other-apps.xml:164(command)
11472
msgid "sudo etckeeper uninit"
11473
msgstr ""
11474
11475
#: serverguide/C/other-apps.xml:167(para)
11476
msgid ""
11477
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11478
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11479
"It will also automatically commit changes before and after package "
11480
"installation. For a more precise tracking of changes, it is recommended to "
11481
"commit your changes manually, together with a commit message, using:"
11482
msgstr ""
11483
11484
#: serverguide/C/other-apps.xml:176(command)
11485
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11486
msgstr ""
11487
11488
#: serverguide/C/other-apps.xml:179(para)
11489
msgid ""
11490
"Using the VCS commands you can view log information about files in "
11491
"<filename>/etc</filename>:"
11492
msgstr ""
11493
11494
#: serverguide/C/other-apps.xml:184(command)
11495
msgid "sudo bzr log /etc/passwd"
11496
msgstr ""
11497
11498
#: serverguide/C/other-apps.xml:187(para)
11499
msgid ""
11500
"To demonstrate the integration with the package management system, install "
11501
"<application>postfix</application>:"
11502
msgstr ""
11503
11504
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11505
msgid "sudo apt-get install postfix"
11506
msgstr ""
11507
11508
#: serverguide/C/other-apps.xml:195(para)
11509
msgid ""
11510
"When the installation is finished, all the "
11511
"<application>postfix</application> configuration files should be committed "
11512
"to the repository:"
11513
msgstr ""
11514
11515
#: serverguide/C/other-apps.xml:201(computeroutput)
11516
#, no-wrap
11517
msgid ""
11518
"Committing to: /etc/\n"
11519
"added aliases.db\n"
11520
"modified group\n"
11521
"modified group-\n"
11522
"modified gshadow\n"
11523
"modified gshadow-\n"
11524
"modified passwd\n"
11525
"modified passwd-\n"
11526
"added postfix\n"
11527
"added resolvconf\n"
11528
"added rsyslog.d\n"
11529
"modified shadow\n"
11530
"modified shadow-\n"
11531
"added init.d/postfix\n"
11532
"added network/if-down.d/postfix\n"
11533
"added network/if-up.d/postfix\n"
11534
"added postfix/dynamicmaps.cf\n"
11535
"added postfix/main.cf\n"
11536
"added postfix/master.cf\n"
11537
"added postfix/post-install\n"
11538
"added postfix/postfix-files\n"
11539
"added postfix/postfix-script\n"
11540
"added postfix/sasl\n"
11541
"added ppp/ip-down.d\n"
11542
"added ppp/ip-down.d/postfix\n"
11543
"added ppp/ip-up.d/postfix\n"
11544
"added rc0.d/K20postfix\n"
11545
"added rc1.d/K20postfix\n"
11546
"added rc2.d/S20postfix\n"
11547
"added rc3.d/S20postfix\n"
11548
"added rc4.d/S20postfix\n"
11549
"added rc5.d/S20postfix\n"
11550
"added rc6.d/K20postfix\n"
11551
"added resolvconf/update-libc.d\n"
11552
"added resolvconf/update-libc.d/postfix\n"
11553
"added rsyslog.d/postfix.conf\n"
11554
"added ufw/applications.d/postfix\n"
11555
"Committed revision 2."
11556
msgstr ""
11557
11558
#: serverguide/C/other-apps.xml:241(para)
11559
msgid ""
11560
"For an example of how <application>etckeeper</application> tracks manual "
11561
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11562
"<application>bzr</application> you can see which files have been modified:"
11563
msgstr ""
11564
11565
#: serverguide/C/other-apps.xml:247(command)
11566
msgid "sudo bzr status /etc/"
11567
msgstr ""
11568
11569
#: serverguide/C/other-apps.xml:248(computeroutput)
11570
#, no-wrap
11571
msgid ""
11572
"modified:\n"
11573
" hosts"
11574
msgstr ""
11575
11576
#: serverguide/C/other-apps.xml:252(para)
11577
msgid "Now commit the changes:"
11578
msgstr ""
11579
11580
#: serverguide/C/other-apps.xml:257(command)
11581
msgid "sudo etckeeper commit \"new host\""
11582
msgstr ""
11583
11584
#: serverguide/C/other-apps.xml:260(para)
11585
msgid ""
11586
"For more information on <application>bzr</application> see <xref "
11587
"linkend=\"bazaar\"/>."
11588
msgstr ""
11589
11590
#: serverguide/C/other-apps.xml:266(title)
11591
msgid "Byobu"
11592
msgstr ""
11593
11594
#: serverguide/C/other-apps.xml:268(para)
11595
msgid ""
11596
"One of the most useful applications for any system administrator is "
11597
"<application>screen</application>. It allows the execution of multiple "
11598
"shells in one terminal. To make some of the advanced "
11599
"<application>screen</application> features more user friendly, and provide "
11600
"some useful information about the system, the "
11601
"<application>byobu</application> package was created."
11602
msgstr ""
11603
11604
#: serverguide/C/other-apps.xml:275(para)
11605
msgid ""
11606
"When executing <application>byobu</application> pressing the "
11607
"<emphasis>F9</emphasis> key will bring up the "
11608
"<application>Configuration</application> menu. This menu will allow you to:"
11609
msgstr ""
11610
11611
#: serverguide/C/other-apps.xml:281(para)
11612
msgid "View the Help menu"
11613
msgstr ""
11614
11615
#: serverguide/C/other-apps.xml:282(para)
11616
msgid "Change Byobu's background color"
11617
msgstr ""
11618
11619
#: serverguide/C/other-apps.xml:283(para)
11620
msgid "Change Byobu's foreground color"
11621
msgstr ""
11622
11623
#: serverguide/C/other-apps.xml:284(para)
11624
msgid "Toggle status notifications"
11625
msgstr ""
11626
11627
#: serverguide/C/other-apps.xml:285(para)
11628
msgid "Change the key binding set"
11629
msgstr ""
11630
11631
#: serverguide/C/other-apps.xml:286(para)
11632
msgid "Change the escape sequence"
11633
msgstr ""
11634
11635
#: serverguide/C/other-apps.xml:287(para)
11636
msgid "Create new windows"
11637
msgstr ""
11638
11639
#: serverguide/C/other-apps.xml:288(para)
11640
msgid "Manage the default windows"
11641
msgstr ""
11642
11643
#: serverguide/C/other-apps.xml:289(para)
11644
msgid "Byobu currently does not launch at login (toggle on)"
11645
msgstr ""
11646
11647
#: serverguide/C/other-apps.xml:292(para)
11648
msgid ""
11649
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11650
"sequence, new window, change window, etc. There are two key binding sets to "
11651
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11652
"keys</emphasis>. If you wish to use the original key bindings choose the "
11653
"<emphasis>none</emphasis> set."
11654
msgstr ""
11655
11656
#: serverguide/C/other-apps.xml:298(para)
11657
msgid ""
11658
"<application>byobu</application> provides a menu which displays the Ubuntu "
11659
"release, processor information, memory information, and the time and date. "
11660
"The effect is similar to a desktop menu."
11661
msgstr ""
11662
11663
#: serverguide/C/other-apps.xml:303(para)
11664
msgid ""
11665
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11666
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11667
"executed any time a terminal is opened. Changes made to "
11668
"<application>byobu</application> are on a per user basis, and will not "
11669
"affect other users on the system."
11670
msgstr ""
11671
11672
#: serverguide/C/other-apps.xml:309(para)
11673
msgid ""
11674
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11675
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11676
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11677
"commands. Here is a quick list of movement commands:"
11678
msgstr ""
11679
11680
#: serverguide/C/other-apps.xml:316(para)
11681
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11682
msgstr ""
11683
11684
#: serverguide/C/other-apps.xml:317(para)
11685
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11686
msgstr ""
11687
11688
#: serverguide/C/other-apps.xml:318(para)
11689
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11690
msgstr ""
11691
11692
#: serverguide/C/other-apps.xml:319(para)
11693
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11694
msgstr ""
11695
11696
#: serverguide/C/other-apps.xml:320(para)
11697
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11698
msgstr ""
11699
11700
#: serverguide/C/other-apps.xml:321(para)
11701
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11702
msgstr ""
11703
11704
#: serverguide/C/other-apps.xml:322(para)
11705
msgid ""
11706
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11707
"the buffer)"
11708
msgstr ""
11709
11710
#: serverguide/C/other-apps.xml:323(para)
11711
msgid "<emphasis>/</emphasis> - Search forward"
11712
msgstr ""
11713
11714
#: serverguide/C/other-apps.xml:324(para)
11715
msgid "<emphasis>?</emphasis> - Search backward"
11716
msgstr ""
11717
11718
#: serverguide/C/other-apps.xml:325(para)
11719
msgid ""
11720
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11721
msgstr ""
11722
11723
#: serverguide/C/other-apps.xml:334(para)
11724
msgid ""
11725
"See the <ulink "
11726
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11727
"update-motd man page</ulink> for more options available to "
11728
"<application>update-motd</application>."
11729
msgstr ""
11730
11731
#: serverguide/C/other-apps.xml:340(para)
11732
msgid ""
11733
"The Debian Package of the Day <ulink "
11734
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11735
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11736
"details about using the <application>weather</application>utility."
11737
msgstr ""
11738
11739
#: serverguide/C/other-apps.xml:347(para)
11740
msgid ""
11741
"See the <ulink "
11742
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11743
"more details on using <application>etckeeper</application>."
11744
msgstr ""
11745
11746
#: serverguide/C/other-apps.xml:353(para)
11747
msgid ""
11748
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11749
"Ubuntu Wiki</ulink> page."
11750
msgstr ""
11751
11752
#: serverguide/C/other-apps.xml:358(para)
11753
msgid ""
11754
"For the latest news and information about <application>bzr</application> see "
11755
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11756
msgstr ""
11757
11758
#: serverguide/C/other-apps.xml:363(para)
11759
msgid ""
11760
"For more information on <application>screen</application> see the <ulink "
11761
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11762
msgstr ""
11763
11764
#: serverguide/C/other-apps.xml:368(para)
11765
msgid ""
11766
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11767
"screen</ulink> page."
11768
msgstr ""
11769
11770
#: serverguide/C/other-apps.xml:373(para)
11771
msgid ""
11772
"Also, see the <application>byobu</application><ulink "
11773
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11774
"information."
11775
msgstr ""
11776
11777
#: serverguide/C/network-config.xml:14(para)
11778
msgid ""
11779
"Networks consist of two or more devices, such as computer systems, printers, "
11780
"and related equipment which are connected by either physical cabling or "
11781
"wireless links for the purpose of sharing and distributing information among "
11782
"the connected devices."
11783
msgstr ""
11784
11785
#: serverguide/C/network-config.xml:20(para)
11786
msgid ""
11787
"This section provides general and specific information pertaining to "
11788
"networking, including an overview of network concepts and detailed "
11789
"discussion of popular network protocols."
11790
msgstr ""
11791
11792
#: serverguide/C/network-config.xml:27(title)
11793
msgid "Network Configuration"
11794
msgstr ""
11795
11796
#: serverguide/C/network-config.xml:28(para)
11797
msgid ""
11798
"Ubuntu ships with a number of graphical utilities to configure your network "
11799
"devices. This document is geared toward server administrators and will focus "
11800
"on managing your network on the command line."
11801
msgstr ""
11802
11803
#: serverguide/C/network-config.xml:35(title)
11804
msgid "Ethernet Interfaces"
11805
msgstr ""
11806
11807
#: serverguide/C/network-config.xml:36(para)
11808
msgid ""
11809
"Ethernet interfaces are identified by the system using the naming convention "
11810
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11811
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11812
"interface is typically identified as <emphasis "
11813
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11814
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11815
"order."
11816
msgstr ""
11817
11818
#: serverguide/C/network-config.xml:46(title)
11819
msgid "Identify Ethernet Interfaces"
11820
msgstr ""
11821
11822
#: serverguide/C/network-config.xml:47(para)
11823
msgid ""
11824
"To quickly identify all available Ethernet interfaces, you can use the "
11825
"<application>ifconfig</application> command as shown below."
11826
msgstr ""
11827
11828
#: serverguide/C/network-config.xml:52(userinput)
11829
#, no-wrap
11830
msgid "ifconfig -a | grep eth"
11831
msgstr ""
11832
11833
#: serverguide/C/network-config.xml:51(screen)
11834
#, no-wrap
11835
msgid ""
11836
"\n"
11837
"<placeholder-1/>\n"
11838
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11839
msgstr ""
11840
11841
#: serverguide/C/network-config.xml:55(para)
11842
msgid ""
11843
"Another application that can help identify all network interfaces available "
11844
"to your system is the <application>lshw</application> command. In the "
11845
"example below, <application>lshw</application> shows a single Ethernet "
11846
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11847
"along with bus information, driver details and all supported capabilities."
11848
msgstr ""
11849
11850
#: serverguide/C/network-config.xml:62(userinput)
11851
#, no-wrap
11852
msgid "sudo lshw -class network"
11853
msgstr ""
11854
11855
#: serverguide/C/network-config.xml:61(screen)
11856
#, no-wrap
11857
msgid ""
11858
"\n"
11859
"<placeholder-1/>\n"
11860
" *-network\n"
11861
" description: Ethernet interface\n"
11862
" product: BCM4401-B0 100Base-TX\n"
11863
" vendor: Broadcom Corporation\n"
11864
" physical id: 0\n"
11865
" bus info: pci@0000:03:00.0\n"
11866
" logical name: eth0\n"
11867
" version: 02\n"
11868
" serial: 00:15:c5:4a:16:5a\n"
11869
" size: 10MB/s\n"
11870
" capacity: 100MB/s\n"
11871
" width: 32 bits\n"
11872
" clock: 33MHz\n"
11873
" capabilities: (snipped for brevity)\n"
11874
" configuration: (snipped for brevity)\n"
11875
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11876
msgstr ""
11877
11878
#: serverguide/C/network-config.xml:83(title)
11879
msgid "Ethernet Interface Logical Names"
11880
msgstr ""
11881
11882
#: serverguide/C/network-config.xml:84(para)
11883
msgid ""
11884
"Interface logical names are configured in the file "
11885
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11886
"like control which interface receives a particular logical name, find the "
11887
"line matching the interfaces physical MAC address and modify the value of "
11888
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11889
"Reboot the system to commit your changes."
11890
msgstr ""
11891
11892
#: serverguide/C/network-config.xml:92(programlisting)
11893
#, no-wrap
11894
msgid ""
11895
"\n"
11896
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11897
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11898
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11899
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11900
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11901
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11902
msgstr ""
11903
11904
#: serverguide/C/network-config.xml:99(title)
11905
msgid "Ethernet Interface Settings"
11906
msgstr ""
11907
11908
#: serverguide/C/network-config.xml:100(para)
11909
msgid ""
11910
"<application>ethtool</application> is a program that displays and changes "
11911
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11912
"and Wake-on-LAN. It is not installed by default, but is available for "
11913
"installation in the repositories."
11914
msgstr ""
11915
11916
#: serverguide/C/network-config.xml:106(userinput)
11917
#, no-wrap
11918
msgid "sudo apt-get install ethtool"
11919
msgstr ""
11920
11921
#: serverguide/C/network-config.xml:108(para)
11922
msgid ""
11923
"The following is an example of how to view supported features and configured "
11924
"settings of an Ethernet interface."
11925
msgstr ""
11926
11927
#: serverguide/C/network-config.xml:113(userinput)
11928
#, no-wrap
11929
msgid "sudo ethtool eth0"
11930
msgstr ""
11931
11932
#: serverguide/C/network-config.xml:112(screen)
11933
#, no-wrap
11934
msgid ""
11935
"\n"
11936
"<placeholder-1/>\n"
11937
"Settings for eth0:\n"
11938
" Supported ports: [ TP ]\n"
11939
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11940
" 100baseT/Half 100baseT/Full \n"
11941
" 1000baseT/Half 1000baseT/Full \n"
11942
" Supports auto-negotiation: Yes\n"
11943
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11944
" 100baseT/Half 100baseT/Full \n"
11945
" 1000baseT/Half 1000baseT/Full \n"
11946
" Advertised auto-negotiation: Yes\n"
11947
" Speed: 1000Mb/s\n"
11948
" Duplex: Full\n"
11949
" Port: Twisted Pair\n"
11950
" PHYAD: 1\n"
11951
" Transceiver: internal\n"
11952
" Auto-negotiation: on\n"
11953
" Supports Wake-on: g\n"
11954
" Wake-on: d\n"
11955
" Current message level: 0x000000ff (255)\n"
11956
" Link detected: yes\n"
11957
msgstr ""
11958
11959
#: serverguide/C/network-config.xml:135(para)
11960
msgid ""
11961
"Changes made with the <application>ethtool</application> command are "
11962
"temporary and will be lost after a reboot. If you would like to retain "
11963
"settings, simply add the desired <application>ethtool</application> command "
11964
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11965
"configuration file <filename>/etc/network/interfaces</filename>."
11966
msgstr ""
11967
11968
#: serverguide/C/network-config.xml:141(para)
11969
msgid ""
11970
"The following is an example of how the interface identified as <emphasis "
11971
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11972
"speed of 1000Mb/s running in full duplex mode."
11973
msgstr ""
11974
11975
#: serverguide/C/network-config.xml:145(programlisting)
11976
#, no-wrap
11977
msgid ""
11978
"\n"
11979
"auto eth0\n"
11980
"iface eth0 inet static\n"
11981
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11982
msgstr ""
11983
11984
#: serverguide/C/network-config.xml:151(para)
11985
msgid ""
11986
"Although the example above shows the interface configured to use the "
11987
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11988
"other methods as well, such as DHCP. The example is meant to demonstrate "
11989
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11990
"statement in relation to the rest of the interface configuration."
11991
msgstr ""
11992
11993
#: serverguide/C/network-config.xml:163(title)
11994
msgid "IP Addressing"
11995
msgstr ""
11996
11997
#: serverguide/C/network-config.xml:164(para)
11998
msgid ""
11999
"The following section describes the process of configuring your systems IP "
12000
"address and default gateway needed for communicating on a local area network "
12001
"and the Internet."
12002
msgstr ""
12003
12004
#: serverguide/C/network-config.xml:171(title)
12005
msgid "Temporary IP Address Assignment"
12006
msgstr ""
12007
12008
#: serverguide/C/network-config.xml:172(para)
12009
msgid ""
12010
"For temporary network configurations, you can use standard commands such as "
12011
"<application>ip</application>, <application>ifconfig</application> and "
12012
"<application>route</application>, which are also found on most other "
12013
"GNU/Linux operating systems. These commands allow you to configure settings "
12014
"which take effect immediately, however they are not persistent and will be "
12015
"lost after a reboot."
12016
msgstr ""
12017
12018
#: serverguide/C/network-config.xml:180(para)
12019
msgid ""
12020
"To temporarily configure an IP address, you can use the "
12021
"<application>ifconfig</application> command in the following manner. Just "
12022
"modify the IP address and subnet mask to match your network requirements."
12023
msgstr ""
12024
12025
#: serverguide/C/network-config.xml:186(userinput)
12026
#, no-wrap
12027
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
12028
msgstr ""
12029
12030
#: serverguide/C/network-config.xml:188(para)
12031
msgid ""
12032
"To verify the IP address configuration of <application>eth0</application>, "
12033
"you can use the <application>ifconfig</application> command in the following "
12034
"manner."
12035
msgstr ""
12036
12037
#: serverguide/C/network-config.xml:193(userinput)
12038
#, no-wrap
12039
msgid "ifconfig eth0"
12040
msgstr ""
12041
12042
#: serverguide/C/network-config.xml:192(screen)
12043
#, no-wrap
12044
msgid ""
12045
"\n"
12046
"<placeholder-1/>\n"
12047
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
12048
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
12049
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
12050
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
12051
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
12052
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
12053
" collisions:0 txqueuelen:1000 \n"
12054
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
12055
" Interrupt:16 \n"
12056
msgstr ""
12057
12058
#: serverguide/C/network-config.xml:204(para)
12059
msgid ""
12060
"To configure a default gateway, you can use the "
12061
"<application>route</application> command in the following manner. Modify the "
12062
"default gateway address to match your network requirements."
12063
msgstr ""
12064
12065
#: serverguide/C/network-config.xml:210(userinput)
12066
#, no-wrap
12067
msgid "sudo route add default gw 10.0.0.1 eth0"
12068
msgstr ""
12069
12070
#: serverguide/C/network-config.xml:212(para)
12071
msgid ""
12072
"To verify your default gateway configuration, you can use the "
12073
"<application>route</application> command in the following manner."
12074
msgstr ""
12075
12076
#: serverguide/C/network-config.xml:217(userinput)
12077
#, no-wrap
12078
msgid "route -n"
12079
msgstr ""
12080
12081
#: serverguide/C/network-config.xml:216(screen)
12082
#, no-wrap
12083
msgid ""
12084
"\n"
12085
"<placeholder-1/>\n"
12086
"Kernel IP routing table\n"
12087
"Destination Gateway Genmask Flags Metric Ref Use "
12088
"Iface\n"
12089
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
12090
"eth0\n"
12091
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
12092
"eth0\n"
12093
msgstr ""
12094
12095
#: serverguide/C/network-config.xml:223(para)
12096
msgid ""
12097
"If you require DNS for your temporary network configuration, you can add DNS "
12098
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
12099
"example below shows how to enter two DNS servers to "
12100
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
12101
"appropriate for your network. A more lengthy description of DNS client "
12102
"configuration is in a following section."
12103
msgstr ""
12104
12105
#: serverguide/C/network-config.xml:230(programlisting)
12106
#, no-wrap
12107
msgid ""
12108
"\n"
12109
"nameserver 8.8.8.8\n"
12110
"nameserver 8.8.4.4\n"
12111
msgstr ""
12112
12113
#: serverguide/C/network-config.xml:234(para)
12114
msgid ""
12115
"If you no longer need this configuration and wish to purge all IP "
12116
"configuration from an interface, you can use the "
12117
"<application>ip</application> command with the flush option as shown below."
12118
msgstr ""
12119
12120
#: serverguide/C/network-config.xml:240(userinput)
12121
#, no-wrap
12122
msgid "ip addr flush eth0"
12123
msgstr ""
12124
12125
#: serverguide/C/network-config.xml:243(para)
12126
msgid ""
12127
"Flushing the IP configuration using the <application>ip</application> "
12128
"command does not clear the contents of "
12129
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
12130
"entries manually."
12131
msgstr ""
12132
12133
#: serverguide/C/network-config.xml:251(title)
12134
msgid "Dynamic IP Address Assignment (DHCP Client)"
12135
msgstr ""
12136
12137
#: serverguide/C/network-config.xml:252(para)
12138
msgid ""
12139
"To configure your server to use DHCP for dynamic address assignment, add the "
12140
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
12141
"statement for the appropriate interface in the file "
12142
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
12143
"are configuring your first Ethernet interface identified as <emphasis "
12144
"role=\"italic\">eth0</emphasis>."
12145
msgstr ""
12146
12147
#: serverguide/C/network-config.xml:259(programlisting)
12148
#, no-wrap
12149
msgid ""
12150
"\n"
12151
"auto eth0\n"
12152
"iface eth0 inet dhcp\n"
12153
msgstr ""
12154
12155
#: serverguide/C/network-config.xml:263(para)
12156
msgid ""
12157
"By adding an interface configuration as shown above, you can manually enable "
12158
"the interface through the <application>ifup</application> command which "
12159
"initiates the DHCP process via <application>dhclient</application>."
12160
msgstr ""
12161
12162
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
12163
#, no-wrap
12164
msgid "sudo ifup eth0"
12165
msgstr ""
12166
12167
#: serverguide/C/network-config.xml:271(para)
12168
msgid ""
12169
"To manually disable the interface, you can use the "
12170
"<application>ifdown</application> command, which in turn will initiate the "
12171
"DHCP release process and shut down the interface."
12172
msgstr ""
12173
12174
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
12175
#, no-wrap
12176
msgid "sudo ifdown eth0"
12177
msgstr ""
12178
12179
#: serverguide/C/network-config.xml:282(title)
12180
msgid "Static IP Address Assignment"
12181
msgstr ""
12182
12183
#: serverguide/C/network-config.xml:283(para)
12184
msgid ""
12185
"To configure your system to use a static IP address assignment, add the "
12186
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
12187
"family statement for the appropriate interface in the file "
12188
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
12189
"are configuring your first Ethernet interface identified as <emphasis "
12190
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
12191
"role=\"italic\">address</emphasis>, <emphasis "
12192
"role=\"italic\">netmask</emphasis>, and <emphasis "
12193
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
12194
"network."
12195
msgstr ""
12196
12197
#: serverguide/C/network-config.xml:292(programlisting)
12198
#, no-wrap
12199
msgid ""
12200
"\n"
12201
"auto eth0\n"
12202
"iface eth0 inet static\n"
12203
"address 10.0.0.100\n"
12204
"netmask 255.255.255.0\n"
12205
"gateway 10.0.0.1\n"
12206
msgstr ""
12207
12208
#: serverguide/C/network-config.xml:299(para)
12209
msgid ""
12210
"By adding an interface configuration as shown above, you can manually enable "
12211
"the interface through the <application>ifup</application> command."
12212
msgstr ""
12213
12214
#: serverguide/C/network-config.xml:306(para)
12215
msgid ""
12216
"To manually disable the interface, you can use the "
12217
"<application>ifdown</application> command."
12218
msgstr ""
12219
12220
#: serverguide/C/network-config.xml:316(title)
12221
msgid "Loopback Interface"
12222
msgstr ""
12223
12224
#: serverguide/C/network-config.xml:317(para)
12225
msgid ""
12226
"The loopback interface is identified by the system as <emphasis "
12227
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
12228
"can be viewed using the ifconfig command."
12229
msgstr ""
12230
12231
#: serverguide/C/network-config.xml:322(userinput)
12232
#, no-wrap
12233
msgid "ifconfig lo"
12234
msgstr ""
12235
12236
#: serverguide/C/network-config.xml:321(screen)
12237
#, no-wrap
12238
msgid ""
12239
"\n"
12240
"<placeholder-1/>\n"
12241
"lo Link encap:Local Loopback \n"
12242
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
12243
" inet6 addr: ::1/128 Scope:Host\n"
12244
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
12245
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
12246
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
12247
" collisions:0 txqueuelen:0 \n"
12248
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
12249
msgstr ""
12250
12251
#: serverguide/C/network-config.xml:332(para)
12252
msgid ""
12253
"By default, there should be two lines in "
12254
"<filename>/etc/network/interfaces</filename> responsible for automatically "
12255
"configuring your loopback interface. It is recommended that you keep the "
12256
"default settings unless you have a specific purpose for changing them. An "
12257
"example of the two default lines are shown below."
12258
msgstr ""
12259
12260
#: serverguide/C/network-config.xml:338(programlisting)
12261
#, no-wrap
12262
msgid ""
12263
"\n"
12264
"auto lo\n"
12265
"iface lo inet loopback\n"
12266
msgstr ""
12267
12268
#: serverguide/C/network-config.xml:347(title)
12269
msgid "Name Resolution"
12270
msgstr ""
12271
12272
#: serverguide/C/network-config.xml:348(para)
12273
msgid ""
12274
"Name resolution as it relates to IP networking is the process of mapping IP "
12275
"addresses to hostnames, making it easier to identify resources on a network. "
12276
"The following section will explain how to properly configure your system for "
12277
"name resolution using DNS and static hostname records."
12278
msgstr ""
12279
12280
#: serverguide/C/network-config.xml:356(title)
12281
msgid "DNS Client Configuration"
12282
msgstr ""
12283
12284
#: serverguide/C/network-config.xml:357(para)
12285
msgid ""
12286
"To configure your system to use DNS for name resolution, add the IP "
12287
"addresses of the DNS servers that are appropriate for your network in the "
12288
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
12289
"suffix search-lists to match your network domain names."
12290
msgstr ""
12291
12292
#: serverguide/C/network-config.xml:362(para)
12293
msgid ""
12294
"Below is an example of a typical configuration of "
12295
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
12296
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
12297
msgstr ""
12298
12299
#: serverguide/C/network-config.xml:367(programlisting)
12300
#, no-wrap
12301
msgid ""
12302
"\n"
12303
"search example.com\n"
12304
"nameserver 8.8.8.8\n"
12305
"nameserver 8.8.4.4\n"
12306
msgstr ""
12307
12308
#: serverguide/C/network-config.xml:372(para)
12309
msgid ""
12310
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12311
"multiple domain names so that DNS queries will be appended in the order in "
12312
"which they are entered. For example, your network may have multiple sub-"
12313
"domains to search; a parent domain of <emphasis "
12314
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12315
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12316
"role=\"italic\">dev.example.com</emphasis>."
12317
msgstr ""
12318
12319
#: serverguide/C/network-config.xml:380(para)
12320
msgid ""
12321
"If you have multiple domains you wish to search, your configuration might "
12322
"look like the following."
12323
msgstr ""
12324
12325
#: serverguide/C/network-config.xml:383(programlisting)
12326
#, no-wrap
12327
msgid ""
12328
"\n"
12329
"search example.com sales.example.com dev.example.com\n"
12330
"nameserver 8.8.8.8\n"
12331
"nameserver 8.8.4.4\n"
12332
msgstr ""
12333
12334
#: serverguide/C/network-config.xml:388(para)
12335
msgid ""
12336
"If you try to ping a host with the name of <emphasis "
12337
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12338
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12339
msgstr ""
12340
12341
#: serverguide/C/network-config.xml:394(para)
12342
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12343
msgstr ""
12344
12345
#: serverguide/C/network-config.xml:399(para)
12346
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12347
msgstr ""
12348
12349
#: serverguide/C/network-config.xml:404(para)
12350
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12351
msgstr ""
12352
12353
#: serverguide/C/network-config.xml:409(para)
12354
msgid ""
12355
"If no matches are found, the DNS server will provide a result of <emphasis "
12356
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12357
msgstr ""
12358
12359
#: serverguide/C/network-config.xml:416(title)
12360
msgid "Static Hostnames"
12361
msgstr ""
12362
12363
#: serverguide/C/network-config.xml:417(para)
12364
msgid ""
12365
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12366
"file <filename>/etc/hosts</filename>. Entries in the "
12367
"<filename>hosts</filename> file will have precedence over DNS by default. "
12368
"This means that if your system tries to resolve a hostname and it matches an "
12369
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12370
"some configurations, especially when Internet access is not required, "
12371
"servers that communicate with a limited number of resources can be "
12372
"conveniently set to use static hostnames instead of DNS."
12373
msgstr ""
12374
12375
#: serverguide/C/network-config.xml:424(para)
12376
msgid ""
12377
"The following is an example of a <filename>hosts</filename> file where a "
12378
"number of local servers have been identified by simple hostnames, aliases "
12379
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12380
msgstr ""
12381
12382
#: serverguide/C/network-config.xml:428(programlisting)
12383
#, no-wrap
12384
msgid ""
12385
"\n"
12386
"127.0.0.1\tlocalhost\n"
12387
"127.0.1.1\tubuntu-server\n"
12388
"10.0.0.11\tserver1 vpn server1.example.com\n"
12389
"10.0.0.12\tserver2 mail server2.example.com\n"
12390
"10.0.0.13\tserver3 www server3.example.com\n"
12391
"10.0.0.14\tserver4 file server4.example.com\n"
12392
msgstr ""
12393
12394
#: serverguide/C/network-config.xml:437(para)
12395
msgid ""
12396
"In the above example, notice that each of the servers have been given "
12397
"aliases in addition to their proper names and FQDN's. <emphasis "
12398
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12399
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12400
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12401
"role=\"italic\">server3</emphasis> as <emphasis "
12402
"role=\"italic\">www</emphasis>, and <emphasis "
12403
"role=\"italic\">server4</emphasis> as <emphasis "
12404
"role=\"italic\">file</emphasis>."
12405
msgstr ""
12406
12407
#: serverguide/C/network-config.xml:449(title)
12408
msgid "Name Service Switch Configuration"
12409
msgstr ""
12410
12411
#: serverguide/C/network-config.xml:450(para)
12412
msgid ""
12413
"The order in which your system selects a method of resolving hostnames to IP "
12414
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12415
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12416
"section, typically static hostnames defined in the systems "
12417
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12418
"from DNS. The following is an example of the line responsible for this order "
12419
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12420
msgstr ""
12421
12422
#: serverguide/C/network-config.xml:458(programlisting)
12423
#, no-wrap
12424
msgid ""
12425
"\n"
12426
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12427
msgstr ""
12428
12429
#: serverguide/C/network-config.xml:464(para)
12430
msgid ""
12431
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12432
"hostnames located in <filename>/etc/hosts</filename>."
12433
msgstr ""
12434
12435
#: serverguide/C/network-config.xml:470(para)
12436
msgid ""
12437
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12438
"name using Multicast DNS."
12439
msgstr ""
12440
12441
#: serverguide/C/network-config.xml:475(para)
12442
msgid ""
12443
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12444
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12445
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12446
"authoritative and that the system should not try to continue hunting for an "
12447
"answer."
12448
msgstr ""
12449
12450
#: serverguide/C/network-config.xml:483(para)
12451
msgid ""
12452
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12453
msgstr ""
12454
12455
#: serverguide/C/network-config.xml:488(para)
12456
msgid ""
12457
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12458
msgstr ""
12459
12460
#: serverguide/C/network-config.xml:494(para)
12461
msgid ""
12462
"To modify the order of the above mentioned name resolution methods, you can "
12463
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12464
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12465
"versus Multicast DNS, you can change the string in "
12466
"<filename>/etc/nsswitch.conf</filename> as shown below."
12467
msgstr ""
12468
12469
#: serverguide/C/network-config.xml:501(programlisting)
12470
#, no-wrap
12471
msgid ""
12472
"\n"
12473
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12474
msgstr ""
12475
12476
#: serverguide/C/network-config.xml:508(title)
12477
msgid "Bridging"
12478
msgstr ""
12479
12480
#: serverguide/C/network-config.xml:510(para)
12481
msgid ""
12482
"Bridging multiple interfaces is a more advanced configuration, but is very "
12483
"useful in multiple scenarios. One scenario is setting up a bridge with "
12484
"multiple network interfaces, then using a firewall to filter traffic between "
12485
"two network segments. Another scenario is using bridge on a system with one "
12486
"interface to allow virtual machines direct access to the outside network. "
12487
"The following example covers the latter scenario."
12488
msgstr ""
12489
12490
#: serverguide/C/network-config.xml:517(para)
12491
msgid ""
12492
"Before configuring a bridge you will need to install the <application>bridge-"
12493
"utils</application> package. To install the package, in a terminal enter:"
12494
msgstr ""
12495
12496
#: serverguide/C/network-config.xml:523(command)
12497
msgid "sudo apt-get install bridge-utils"
12498
msgstr ""
12499
12500
#: serverguide/C/network-config.xml:526(para)
12501
msgid ""
12502
"Next, configure the bridge by editing "
12503
"<filename>/etc/network/interfaces</filename>:"
12504
msgstr ""
12505
12506
#: serverguide/C/network-config.xml:530(programlisting)
12507
#, no-wrap
12508
msgid ""
12509
"\n"
12510
"auto lo\n"
12511
"iface lo inet loopback\n"
12512
"\n"
12513
"auto br0\n"
12514
"iface br0 inet static\n"
12515
" address 192.168.0.10\n"
12516
" network 192.168.0.0\n"
12517
" netmask 255.255.255.0\n"
12518
" broadcast 192.168.0.255\n"
12519
" gateway 192.168.0.1\n"
12520
" bridge_ports eth0\n"
12521
" bridge_fd 9\n"
12522
" bridge_hello 2\n"
12523
" bridge_maxage 12\n"
12524
" bridge_stp off\n"
12525
msgstr ""
12526
12527
#: serverguide/C/network-config.xml:549(para)
12528
msgid "Enter the appropriate values for your physical interface and network."
12529
msgstr ""
12530
12531
#: serverguide/C/network-config.xml:554(para)
12532
msgid "Now restart networking to enable the bridge interface:"
12533
msgstr ""
12534
12535
#: serverguide/C/network-config.xml:561(para)
12536
msgid ""
12537
"The new bridge interface should now be up and running. The "
12538
"<application>brctl</application> provides useful information about the state "
12539
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12540
"<command>man brctl</command> for more information."
12541
msgstr ""
12542
12543
#: serverguide/C/network-config.xml:577(para)
12544
msgid ""
12545
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12546
"Network page</ulink> has links to articles covering more advanced network "
12547
"configuration."
12548
msgstr ""
12549
12550
#: serverguide/C/network-config.xml:583(para)
12551
msgid ""
12552
"The <ulink "
12553
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12554
"nterfaces man page</ulink> has details on more options for "
12555
"<filename>/etc/network/interfaces</filename>."
12556
msgstr ""
12557
12558
#: serverguide/C/network-config.xml:589(para)
12559
msgid ""
12560
"The <ulink "
12561
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12562
"lient man page</ulink> has details on more options for configuring DHCP "
12563
"client settings."
12564
msgstr ""
12565
12566
#: serverguide/C/network-config.xml:595(para)
12567
msgid ""
12568
"For more information on DNS client configuration see the <ulink "
12569
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12570
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12571
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12572
"Administrator's Guide</ulink> is a good source of resolver and name service "
12573
"configuration information."
12574
msgstr ""
12575
12576
#: serverguide/C/network-config.xml:603(para)
12577
msgid ""
12578
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12579
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12580
"man page</ulink> and the Linux Foundation's <ulink "
12581
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12582
msgstr ""
12583
12584
#: serverguide/C/network-config.xml:614(title)
12585
msgid "TCP/IP"
12586
msgstr ""
12587
12588
#: serverguide/C/network-config.xml:615(para)
12589
msgid ""
12590
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12591
"standard set of protocols developed in the late 1970s by the Defense "
12592
"Advanced Research Projects Agency (DARPA) as a means of communication "
12593
"between different types of computers and computer networks. TCP/IP is the "
12594
"driving force of the Internet, and thus it is the most popular set of "
12595
"network protocols on Earth."
12596
msgstr ""
12597
12598
#: serverguide/C/network-config.xml:623(title)
12599
msgid "TCP/IP Introduction"
12600
msgstr ""
12601
12602
#: serverguide/C/network-config.xml:624(para)
12603
msgid ""
12604
"The two protocol components of TCP/IP deal with different aspects of "
12605
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12606
"TCP/IP is a connectionless protocol which deals only with network packet "
12607
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12608
"basic unit of networking information. The IP Datagram consists of a header "
12609
"followed by a message. The <emphasis> Transmission Control "
12610
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12611
"establish connections which may be used to exchange data streams. TCP also "
12612
"guarantees that the data between connections is delivered and that it "
12613
"arrives at one network host in the same order as sent from another network "
12614
"host."
12615
msgstr ""
12616
12617
#: serverguide/C/network-config.xml:637(title)
12618
msgid "TCP/IP Configuration"
12619
msgstr ""
12620
12621
#: serverguide/C/network-config.xml:638(para)
12622
msgid ""
12623
"The TCP/IP protocol configuration consists of several elements which must be "
12624
"set by editing the appropriate configuration files, or deploying solutions "
12625
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12626
"can be configured to provide the proper TCP/IP configuration settings to "
12627
"network clients automatically. These configuration values must be set "
12628
"correctly in order to facilitate the proper network operation of your Ubuntu "
12629
"system."
12630
msgstr ""
12631
12632
#: serverguide/C/network-config.xml:650(para)
12633
msgid ""
12634
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12635
"identifying string expressed as four decimal numbers ranging from zero (0) "
12636
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12637
"four numbers representing eight (8) bits of the address for a total length "
12638
"of thirty-two (32) bits for the whole address. This format is called "
12639
"<emphasis>dotted quad notation</emphasis>."
12640
msgstr ""
12641
12642
#: serverguide/C/network-config.xml:660(para)
12643
msgid ""
12644
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12645
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12646
"separate the portions of an IP address significant to the network from the "
12647
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12648
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12649
"three bytes of the IP address and allows the last byte of the IP address to "
12650
"remain available for specifying hosts on the subnetwork."
12651
msgstr ""
12652
12653
#: serverguide/C/network-config.xml:671(para)
12654
msgid ""
12655
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12656
"represents the bytes comprising the network portion of an IP address. For "
12657
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12658
"network address, where twelve (12) represents the first byte of the IP "
12659
"address, (the network part) and zeroes (0) in all of the remaining three "
12660
"bytes to represent the potential host values. A network host using the "
12661
"private IP address 192.168.1.100 would in turn use a Network Address of "
12662
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12663
"network and a zero (0) for all the possible hosts on the network."
12664
msgstr ""
12665
12666
#: serverguide/C/network-config.xml:684(para)
12667
msgid ""
12668
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12669
"is an IP address which allows network data to be sent simultaneously to all "
12670
"hosts on a given subnetwork rather than specifying a particular host. The "
12671
"standard general broadcast address for IP networks is 255.255.255.255, but "
12672
"this broadcast address cannot be used to send a broadcast message to every "
12673
"host on the Internet because routers block it. A more appropriate broadcast "
12674
"address is set to match a specific subnetwork. For example, on the private "
12675
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12676
"Broadcast messages are typically produced by network protocols such as the "
12677
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12678
msgstr ""
12679
12680
#: serverguide/C/network-config.xml:697(para)
12681
msgid ""
12682
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12683
"IP address through which a particular network, or host on a network, may be "
12684
"reached. If one network host wishes to communicate with another network "
12685
"host, and that host is not located on the same network, then a "
12686
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12687
"Address will be that of a router on the same network, which will in turn "
12688
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12689
"value of the Gateway Address setting must be correct, or your system will "
12690
"not be able to reach any hosts beyond those on the same network."
12691
msgstr ""
12692
12693
#: serverguide/C/network-config.xml:708(para)
12694
msgid ""
12695
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12696
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12697
"resolve network hostnames into IP addresses. There are three levels of "
12698
"Nameserver Addresses, which may be specified in order of precedence: The "
12699
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12700
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12701
"your system to be able to resolve network hostnames into their corresponding "
12702
"IP addresses, you must specify valid Nameserver Addresses which you are "
12703
"authorized to use in your system's TCP/IP configuration. In many cases these "
12704
"addresses can and will be provided by your network service provider, but "
12705
"many free and publicly accessible nameservers are available for use, such as "
12706
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12707
msgstr ""
12708
12709
#: serverguide/C/network-config.xml:722(para)
12710
msgid ""
12711
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12712
"Address are typically specified via the appropriate directives in the file "
12713
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12714
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12715
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12716
"system manual page for <filename>interfaces</filename> or "
12717
"<filename>resolv.conf</filename> respectively, with the following commands "
12718
"typed at a terminal prompt:"
12719
msgstr ""
12720
12721
#: serverguide/C/network-config.xml:729(para)
12722
msgid ""
12723
"Access the system manual page for <filename>interfaces</filename> with the "
12724
"following command:"
12725
msgstr ""
12726
12727
#: serverguide/C/network-config.xml:734(command)
12728
msgid "man interfaces"
12729
msgstr ""
12730
12731
#: serverguide/C/network-config.xml:737(para)
12732
msgid ""
12733
"Access the system manual page for <filename>resolv.conf</filename> with the "
12734
"following command:"
12735
msgstr ""
12736
12737
#: serverguide/C/network-config.xml:741(command)
12738
msgid "man resolv.conf"
12739
msgstr ""
12740
12741
#: serverguide/C/network-config.xml:646(para)
12742
msgid ""
12743
"The common configuration elements of TCP/IP and their purposes are as "
12744
"follows: <placeholder-1/>"
12745
msgstr ""
12746
12747
#: serverguide/C/network-config.xml:748(title)
12748
msgid "IP Routing"
12749
msgstr ""
12750
12751
#: serverguide/C/network-config.xml:749(para)
12752
msgid ""
12753
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12754
"network along which network data may be sent. Routing uses a set of "
12755
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12756
"packets from their source to the destination, often via many intermediary "
12757
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12758
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12759
"<emphasis>Dynamic Routing.</emphasis>"
12760
msgstr ""
12761
12762
#: serverguide/C/network-config.xml:758(para)
12763
msgid ""
12764
"Static routing involves manually adding IP routes to the system's routing "
12765
"table, and this is usually done by manipulating the routing table with the "
12766
"<application>route</application> command. Static routing enjoys many "
12767
"advantages over dynamic routing, such as simplicity of implementation on "
12768
"smaller networks, predictability (the routing table is always computed in "
12769
"advance, and thus the route is precisely the same each time it is used), and "
12770
"low overhead on other routers and network links due to the lack of a dynamic "
12771
"routing protocol. However, static routing does present some disadvantages as "
12772
"well. For example, static routing is limited to small networks and does not "
12773
"scale well. Static routing also fails completely to adapt to network outages "
12774
"and failures along the route due to the fixed nature of the route."
12775
msgstr ""
12776
12777
#: serverguide/C/network-config.xml:768(para)
12778
msgid ""
12779
"Dynamic routing depends on large networks with multiple possible IP routes "
12780
"from a source to a destination and makes use of special routing protocols, "
12781
"such as the Router Information Protocol (RIP), which handle the automatic "
12782
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12783
"routing has several advantages over static routing, such as superior "
12784
"scalability and the ability to adapt to failures and outages along network "
12785
"routes. Additionally, there is less manual configuration of the routing "
12786
"tables, since routers learn from one another about their existence and "
12787
"available routes. This trait also eliminates the possibility of introducing "
12788
"mistakes in the routing tables via human error. Dynamic routing is not "
12789
"perfect, however, and presents disadvantages such as heightened complexity "
12790
"and additional network overhead from router communications, which does not "
12791
"immediately benefit the end users, but still consumes network bandwidth."
12792
msgstr ""
12793
12794
#: serverguide/C/network-config.xml:782(title)
12795
msgid "TCP and UDP"
12796
msgstr ""
12797
12798
#: serverguide/C/network-config.xml:783(para)
12799
msgid ""
12800
"TCP is a connection-based protocol, offering error correction and guaranteed "
12801
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12802
"Flow control determines when the flow of a data stream needs to be stopped, "
12803
"and previously sent data packets should to be re-sent due to problems such "
12804
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12805
"accurate delivery of the data. TCP is typically used in the exchange of "
12806
"important information such as database transactions."
12807
msgstr ""
12808
12809
#: serverguide/C/network-config.xml:791(para)
12810
msgid ""
12811
"The User Datagram Protocol (UDP), on the other hand, is a "
12812
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12813
"transmission of important data because it lacks flow control or any other "
12814
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12815
"applications as audio and video streaming, where it is considerably faster "
12816
"than TCP due to the lack of error correction and flow control, and where the "
12817
"loss of a few packets is not generally catastrophic."
12818
msgstr ""
12819
12820
#: serverguide/C/network-config.xml:801(title)
12821
msgid "ICMP"
12822
msgstr ""
12823
12824
#: serverguide/C/network-config.xml:802(para)
12825
msgid ""
12826
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12827
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12828
"supports network packets containing control, error, and informational "
12829
"messages. ICMP is used by such network applications as the "
12830
"<application>ping</application> utility, which can determine the "
12831
"availability of a network host or device. Examples of some error messages "
12832
"returned by ICMP which are useful to both network hosts and devices such as "
12833
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12834
"<emphasis>Time Exceeded</emphasis>."
12835
msgstr ""
12836
12837
#: serverguide/C/network-config.xml:812(title)
12838
msgid "Daemons"
12839
msgstr ""
12840
12841
#: serverguide/C/network-config.xml:813(para)
12842
msgid ""
12843
"Daemons are special system applications which typically execute continuously "
12844
"in the background and await requests for the functions they provide from "
12845
"other applications. Many daemons are network-centric; that is, a large "
12846
"number of daemons executing in the background on an Ubuntu system may "
12847
"provide network-related functionality. Some examples of such network daemons "
12848
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12849
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12850
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12851
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12852
"Daemon</emphasis> (imapd), which provides E-Mail services."
12853
msgstr ""
12854
12855
#: serverguide/C/network-config.xml:828(para)
12856
msgid ""
12857
"There are man pages for <ulink "
12858
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12859
"nk> and <ulink "
12860
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12861
"that contain more useful information."
12862
msgstr ""
12863
12864
#: serverguide/C/network-config.xml:834(para)
12865
msgid ""
12866
"Also, see the <ulink "
12867
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12868
"and Technical Overview</ulink> IBM Redbook."
12869
msgstr ""
12870
12871
#: serverguide/C/network-config.xml:840(para)
12872
msgid ""
12873
"Another resource is O'Reilly's <ulink "
12874
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12875
"Administration</ulink>."
12876
msgstr ""
12877
12878
#: serverguide/C/network-config.xml:849(title)
12879
msgid "Dynamic Host Configuration Protocol (DHCP)"
12880
msgstr ""
12881
12882
#: serverguide/C/network-config.xml:850(para)
12883
msgid ""
12884
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12885
"enables host computers to be automatically assigned settings from a server "
12886
"as opposed to manually configuring each network host. Computers configured "
12887
"to be DHCP clients have no control over the settings they receive from the "
12888
"DHCP server, and the configuration is transparent to the computer's user."
12889
msgstr ""
12890
12891
#: serverguide/C/network-config.xml:857(para)
12892
msgid ""
12893
"The most common settings provided by a DHCP server to DHCP clients include:"
12894
msgstr ""
12895
12896
#: serverguide/C/network-config.xml:862(para)
12897
msgid "IP-Address and Netmask"
12898
msgstr ""
12899
12900
#: serverguide/C/network-config.xml:865(para)
12901
msgid "DNS"
12902
msgstr ""
12903
12904
#: serverguide/C/network-config.xml:868(para)
12905
msgid "WINS"
12906
msgstr ""
12907
12908
#: serverguide/C/network-config.xml:871(para)
12909
msgid ""
12910
"However, a DHCP server can also supply configuration properties such as:"
12911
msgstr ""
12912
12913
#: serverguide/C/network-config.xml:876(para)
12914
msgid "Host Name"
12915
msgstr ""
12916
12917
#: serverguide/C/network-config.xml:879(para)
12918
msgid "Domain Name"
12919
msgstr ""
12920
12921
#: serverguide/C/network-config.xml:882(para)
12922
msgid "Default Gateway"
12923
msgstr ""
12924
12925
#: serverguide/C/network-config.xml:885(para)
12926
msgid "Time Server"
12927
msgstr ""
12928
12929
#: serverguide/C/network-config.xml:888(para)
12930
msgid "Print Server"
12931
msgstr ""
12932
12933
#: serverguide/C/network-config.xml:891(para)
12934
msgid ""
12935
"The advantage of using DHCP is that changes to the network, for example a "
12936
"change in the address of the DNS server, need only be changed at the DHCP "
12937
"server, and all network hosts will be reconfigured the next time their DHCP "
12938
"clients poll the DHCP server. As an added advantage, it is also easier to "
12939
"integrate new computers into the network, as there is no need to check for "
12940
"the availability of an IP address. Conflicts in IP address allocation are "
12941
"also reduced."
12942
msgstr ""
12943
12944
#: serverguide/C/network-config.xml:899(para)
12945
msgid "A DHCP server can provide configuration settings using two methods:"
12946
msgstr ""
12947
12948
#: serverguide/C/network-config.xml:904(term)
12949
msgid "MAC Address"
12950
msgstr ""
12951
12952
#: serverguide/C/network-config.xml:906(para)
12953
msgid ""
12954
"This method entails using DHCP to identify the unique hardware address of "
12955
"each network card connected to the network and then continually supplying a "
12956
"constant configuration each time the DHCP client makes a request to the DHCP "
12957
"server using that network device."
12958
msgstr ""
12959
12960
#: serverguide/C/network-config.xml:915(term)
12961
msgid "Address Pool"
12962
msgstr ""
12963
12964
#: serverguide/C/network-config.xml:917(para)
12965
msgid ""
12966
"This method entails defining a pool (sometimes also called a range or scope) "
12967
"of IP addresses from which DHCP clients are supplied their configuration "
12968
"properties dynamically and on a \"first come, first served\" basis. When a "
12969
"DHCP client is no longer on the network for a specified period, the "
12970
"configuration is expired and released back to the address pool for use by "
12971
"other DHCP Clients."
12972
msgstr ""
12973
12974
#: serverguide/C/network-config.xml:928(para)
12975
msgid ""
12976
"Ubuntu is shipped with both DHCP server and client. The server is "
12977
"<application>dhcpd</application> (dynamic host configuration protocol "
12978
"daemon). The client provided with Ubuntu is "
12979
"<application>dhclient</application> and should be installed on all computers "
12980
"required to be automatically configured. Both programs are easy to install "
12981
"and configure and will be automatically started at system boot."
12982
msgstr ""
12983
12984
#: serverguide/C/network-config.xml:938(para)
12985
msgid ""
12986
"At a terminal prompt, enter the following command to install "
12987
"<application>dhcpd</application>:"
12988
msgstr ""
12989
12990
#: serverguide/C/network-config.xml:943(command)
12991
msgid "sudo apt-get install dhcp3-server"
12992
msgstr ""
12993
12994
#: serverguide/C/network-config.xml:945(para)
12995
msgid ""
12996
"You will probably need to change the default configuration by editing "
12997
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12998
msgstr ""
12999
13000
#: serverguide/C/network-config.xml:949(para)
13001
msgid ""
13002
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
13003
"dhcpd should listen to. By default it listens to eth0."
13004
msgstr ""
13005
13006
#: serverguide/C/network-config.xml:953(para)
13007
msgid ""
13008
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
13009
"messages."
13010
msgstr ""
13011
13012
#: serverguide/C/network-config.xml:960(para)
13013
msgid ""
13014
"The error message the installation ends with might be a little confusing, "
13015
"but the following steps will help you configure the service:"
13016
msgstr ""
13017
13018
#: serverguide/C/network-config.xml:964(para)
13019
msgid ""
13020
"Most commonly, what you want to do is assign an IP address randomly. This "
13021
"can be done with settings as follows:"
13022
msgstr ""
13023
13024
#: serverguide/C/network-config.xml:968(programlisting)
13025
#, no-wrap
13026
msgid ""
13027
"\n"
13028
"# Sample /etc/dhcpd.conf\n"
13029
"# (add your comments here) \n"
13030
"default-lease-time 600;\n"
13031
"max-lease-time 7200;\n"
13032
"option subnet-mask 255.255.255.0;\n"
13033
"option broadcast-address 192.168.1.255;\n"
13034
"option routers 192.168.1.254;\n"
13035
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
13036
"option domain-name \"mydomain.example\";\n"
13037
"\n"
13038
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
13039
"range 192.168.1.10 192.168.1.100;\n"
13040
"range 192.168.1.150 192.168.1.200;\n"
13041
"} \n"
13042
msgstr ""
13043
13044
#: serverguide/C/network-config.xml:984(para)
13045
msgid ""
13046
"This will result in the DHCP server giving a client an IP address from the "
13047
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
13048
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
13049
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
13050
"server will also \"advise\" the client that it should use 255.255.255.0 as "
13051
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
13052
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
13053
msgstr ""
13054
13055
#: serverguide/C/network-config.xml:993(para)
13056
msgid ""
13057
"If you need to specify a WINS server for your Windows clients, you will need "
13058
"to include the netbios-name-servers option, e.g."
13059
msgstr ""
13060
13061
#: serverguide/C/network-config.xml:997(programlisting)
13062
#, no-wrap
13063
msgid ""
13064
"\n"
13065
"option netbios-name-servers 192.168.1.1; \n"
13066
msgstr ""
13067
13068
#: serverguide/C/network-config.xml:1000(para)
13069
msgid ""
13070
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
13071
"be found <ulink "
13072
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
13073
msgstr ""
13074
13075
#: serverguide/C/network-config.xml:1010(para)
13076
msgid ""
13077
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
13078
"server Ubuntu Wiki</ulink> page has more information."
13079
msgstr ""
13080
13081
#: serverguide/C/network-config.xml:1015(para)
13082
msgid ""
13083
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
13084
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
13085
"hcpd.conf man page</ulink>."
13086
msgstr ""
13087
13088
#: serverguide/C/network-config.xml:1021(para)
13089
msgid ""
13090
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
13091
"FAQ</ulink>"
13092
msgstr ""
13093
13094
#: serverguide/C/network-config.xml:1031(title)
13095
msgid "Time Synchronisation with NTP"
13096
msgstr ""
13097
13098
#: serverguide/C/network-config.xml:1032(para)
13099
msgid ""
13100
"This page describes methods for keeping your computer's time accurate. This "
13101
"is useful for servers, but is not necessary (or desirable) for desktop "
13102
"machines."
13103
msgstr ""
13104
13105
#: serverguide/C/network-config.xml:1035(para)
13106
msgid ""
13107
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
13108
"client requests the current time from a server, and uses it to set its own "
13109
"clock."
13110
msgstr ""
13111
13112
#: serverguide/C/network-config.xml:1038(para)
13113
msgid ""
13114
"Behind this simple description, there is a lot of complexity - there are "
13115
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
13116
"clocks (often via GPS), and tier two and three servers spreading the load of "
13117
"actually handling requests across the Internet. Also the client software is "
13118
"a lot more complex than you might think - it has to factor out communication "
13119
"delays, and adjust the time in a way that does not upset all the other "
13120
"processes that run on the server. But luckily all that complexity is hidden "
13121
"from you!"
13122
msgstr ""
13123
13124
#: serverguide/C/network-config.xml:1041(para)
13125
msgid ""
13126
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
13127
msgstr ""
13128
13129
#: serverguide/C/network-config.xml:1046(title)
13130
msgid "ntpdate"
13131
msgstr ""
13132
13133
#: serverguide/C/network-config.xml:1047(para)
13134
msgid ""
13135
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
13136
"set up your time according to Ubuntu's NTP server. However, a server's clock "
13137
"is likely to drift considerably between reboots, so it makes sense to "
13138
"correct the time occasionally. The easiest way to do this is to get cron to "
13139
"run ntpdate every day. With your favorite editor, as root, create a file "
13140
"<code>/etc/cron.daily/ntpdate</code> containing:"
13141
msgstr ""
13142
13143
#: serverguide/C/network-config.xml:1052(screen)
13144
#, no-wrap
13145
msgid "ntpdate ntp.ubuntu.com\n"
13146
msgstr ""
13147
13148
#: serverguide/C/network-config.xml:1054(para)
13149
msgid ""
13150
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
13151
msgstr ""
13152
13153
#: serverguide/C/network-config.xml:1057(screen)
13154
#, no-wrap
13155
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
13156
msgstr ""
13157
13158
#: serverguide/C/network-config.xml:1061(title)
13159
msgid "ntpd"
13160
msgstr ""
13161
13162
#: serverguide/C/network-config.xml:1062(para)
13163
msgid ""
13164
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
13165
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
13166
"calculates the drift of your system clock and continuously adjusts it, so "
13167
"there are no large corrections that could lead to inconsistent logs for "
13168
"instance. The cost is a little processing power and memory, but for a modern "
13169
"server this is negligible."
13170
msgstr ""
13171
13172
#: serverguide/C/network-config.xml:1065(para)
13173
msgid "To set up ntpd:"
13174
msgstr ""
13175
13176
#: serverguide/C/network-config.xml:1066(screen)
13177
#, no-wrap
13178
msgid "sudo apt-get install ntp\n"
13179
msgstr ""
13180
13181
#: serverguide/C/network-config.xml:1071(title)
13182
msgid "Changing Time Servers"
13183
msgstr ""
13184
13185
#: serverguide/C/network-config.xml:1072(para)
13186
msgid ""
13187
"In both cases above, your system will use Ubuntu's NTP server at "
13188
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
13189
"use several servers to increase accuracy and resilience, and you may want to "
13190
"use time servers that are geographically closer to you. to do this for "
13191
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
13192
msgstr ""
13193
13194
#: serverguide/C/network-config.xml:1079(screen)
13195
#, no-wrap
13196
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
13197
msgstr ""
13198
13199
#: serverguide/C/network-config.xml:1081(para)
13200
msgid ""
13201
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
13202
"lines:"
13203
msgstr ""
13204
13205
#: serverguide/C/network-config.xml:1086(screen)
13206
#, no-wrap
13207
msgid ""
13208
"server ntp.ubuntu.com\n"
13209
"server pool.ntp.org\n"
13210
msgstr ""
13211
13212
#: serverguide/C/network-config.xml:1089(para)
13213
msgid ""
13214
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
13215
"really good idea which uses round-robin DNS to return an NTP server from a "
13216
"pool, spreading the load between several different servers. Even better, "
13217
"they have pools for different regions - for instance, if you are in New "
13218
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
13219
"<code>pool.ntp.org</code> . Look at <ulink "
13220
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
13221
"details."
13222
msgstr ""
13223
13224
#: serverguide/C/network-config.xml:1100(para)
13225
msgid ""
13226
"You can also Google for NTP servers in your region, and add these to your "
13227
"configuration. To test that a server works, just type <code>sudo ntpdate "
13228
"ntp.server.name</code> and see what happens."
13229
msgstr ""
13230
13231
#: serverguide/C/network-config.xml:1111(para)
13232
msgid ""
13233
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
13234
"Time</ulink> wiki page for more information."
13235
msgstr ""
13236
13237
#: serverguide/C/network-config.xml:1117(ulink)
13238
msgid "NTP Support"
13239
msgstr ""
13240
13241
#: serverguide/C/network-config.xml:1122(ulink)
13242
msgid "The NTP FAQ and HOWTO"
13243
msgstr ""
13244
13245
#: serverguide/C/network-auth.xml:13(title)
13246
msgid "Network Authentication"
13247
msgstr ""
13248
13249
#: serverguide/C/network-auth.xml:15(para)
13250
msgid "This section explains various Network Authentication protocols."
13251
msgstr ""
13252
13253
#: serverguide/C/network-auth.xml:19(title)
13254
msgid "OpenLDAP Server"
13255
msgstr ""
13256
13257
#: serverguide/C/network-auth.xml:20(para)
13258
msgid ""
13259
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
13260
"simplified version of the X.500 protocol. The directory setup in this "
13261
"section will be used for authentication. Nevertheless, LDAP can be used in "
13262
"numerous ways: authentication, shared directory (for mail clients), address "
13263
"book, etc."
13264
msgstr ""
13265
13266
#: serverguide/C/network-auth.xml:28(para)
13267
msgid ""
13268
"To describe LDAP quickly, all information is stored in a tree structure. "
13269
"With <application>OpenLDAP</application> you have freedom to determine the "
13270
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
13271
"We will begin with a basic tree containing two nodes below the root:"
13272
msgstr ""
13273
13274
#: serverguide/C/network-auth.xml:37(para)
13275
msgid "\"People\" node where your users will be stored"
13276
msgstr ""
13277
13278
#: serverguide/C/network-auth.xml:40(para)
13279
msgid "\"Groups\" node where your groups will be stored"
13280
msgstr ""
13281
13282
#: serverguide/C/network-auth.xml:44(para)
13283
msgid ""
13284
"Before beginning, you should determine what the root of your LDAP directory "
13285
"will be. By default, your tree will be determined by your Fully Qualified "
13286
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
13287
"example), your root node will be dc=example,dc=com."
13288
msgstr ""
13289
13290
#: serverguide/C/network-auth.xml:54(para)
13291
msgid ""
13292
"First, install the <application>OpenLDAP</application> server daemon "
13293
"<application>slapd</application> and <application>ldap-utils</application>, "
13294
"a package containing LDAP management utilities:"
13295
msgstr ""
13296
13297
#: serverguide/C/network-auth.xml:60(command)
13298
msgid "sudo apt-get install slapd ldap-utils"
13299
msgstr ""
13300
13301
#: serverguide/C/network-auth.xml:63(para)
13302
msgid ""
13303
"By default <application>slapd</application> is configured with minimal "
13304
"options needed to run the <application>slapd</application> daemon."
13305
msgstr ""
13306
13307
#: serverguide/C/network-auth.xml:68(para)
13308
msgid ""
13309
"The configuration example in the following sections will match the domain "
13310
"name of the server. For example, if the machine's Fully Qualified Domain "
13311
"Name (FQDN) is ldap.example.com, the default suffix will be "
13312
"<emphasis>dc=example,dc=com</emphasis>."
13313
msgstr ""
13314
13315
#: serverguide/C/network-auth.xml:76(title)
13316
msgid "Populating LDAP"
13317
msgstr ""
13318
13319
#: serverguide/C/network-auth.xml:78(para)
13320
msgid ""
13321
"<application>OpenLDAP</application> uses a separate directory which contains "
13322
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13323
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13324
"<application>slapd</application> daemon, allowing the modification of schema "
13325
"definitions, indexes, ACLs, etc without stopping the service."
13326
msgstr ""
13327
13328
#: serverguide/C/network-auth.xml:86(para)
13329
msgid ""
13330
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13331
"configuration and will need additional configuration options in order to "
13332
"populate the frontend directory. The frontend will be populated with a "
13333
"\"classical\" scheme that will be compatible with address book applications "
13334
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13335
"various applications, such as web applications, email Mail Transfer Agent "
13336
"(MTA) applications, etc."
13337
msgstr ""
13338
13339
#: serverguide/C/network-auth.xml:95(para)
13340
msgid ""
13341
"For external applications to authenticate using LDAP they will each need to "
13342
"be specifically configured to do so. Refer to the individual application "
13343
"documentation for details."
13344
msgstr ""
13345
13346
#: serverguide/C/network-auth.xml:103(para)
13347
msgid ""
13348
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13349
"examples to match your LDAP configuration."
13350
msgstr ""
13351
13352
#: serverguide/C/network-auth.xml:108(para)
13353
msgid ""
13354
"First, some additional schema files need to be loaded. In a terminal enter:"
13355
msgstr ""
13356
13357
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13358
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13359
msgstr ""
13360
13361
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13362
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13363
msgstr ""
13364
13365
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13366
msgid ""
13367
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13368
msgstr ""
13369
13370
#: serverguide/C/network-auth.xml:118(para)
13371
msgid ""
13372
"Next, copy the following example LDIF file, naming it "
13373
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13374
msgstr ""
13375
13376
#: serverguide/C/network-auth.xml:123(programlisting)
13377
#, no-wrap
13378
msgid ""
13379
"\n"
13380
"# Load dynamic backend modules\n"
13381
"dn: cn=module,cn=config\n"
13382
"objectClass: olcModuleList\n"
13383
"cn: module\n"
13384
"olcModulepath: /usr/lib/ldap\n"
13385
"olcModuleload: back_hdb\n"
13386
"\n"
13387
"# Database settings\n"
13388
"dn: olcDatabase=hdb,cn=config\n"
13389
"objectClass: olcDatabaseConfig\n"
13390
"objectClass: olcHdbConfig\n"
13391
"olcDatabase: {1}hdb\n"
13392
"olcSuffix: dc=example,dc=com\n"
13393
"olcDbDirectory: /var/lib/ldap\n"
13394
"olcRootDN: cn=admin,dc=example,dc=com\n"
13395
"olcRootPW: secret\n"
13396
"olcDbConfig: set_cachesize 0 2097152 0\n"
13397
"olcDbConfig: set_lk_max_objects 1500\n"
13398
"olcDbConfig: set_lk_max_locks 1500\n"
13399
"olcDbConfig: set_lk_max_lockers 1500\n"
13400
"olcDbIndex: objectClass eq\n"
13401
"olcLastMod: TRUE\n"
13402
"olcDbCheckpoint: 512 30\n"
13403
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13404
"by anonymous auth by self write by * none\n"
13405
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13406
"olcAccess: to dn.base=\"\" by * read\n"
13407
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13408
"\n"
13409
msgstr ""
13410
13411
#: serverguide/C/network-auth.xml:155(para)
13412
msgid ""
13413
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13414
msgstr ""
13415
13416
#: serverguide/C/network-auth.xml:160(para)
13417
msgid "Now add the LDIF to the directory:"
13418
msgstr ""
13419
13420
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13421
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13422
msgstr ""
13423
13424
#: serverguide/C/network-auth.xml:168(para)
13425
msgid ""
13426
"The frontend directory is now ready to be populated. Create a "
13427
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13428
msgstr ""
13429
13430
#: serverguide/C/network-auth.xml:173(programlisting)
13431
#, no-wrap
13432
msgid ""
13433
"\n"
13434
"# Create top-level object in domain\n"
13435
"dn: dc=example,dc=com\n"
13436
"objectClass: top\n"
13437
"objectClass: dcObject\n"
13438
"objectclass: organization\n"
13439
"o: Example Organization\n"
13440
"dc: Example\n"
13441
"description: LDAP Example \n"
13442
"\n"
13443
"# Admin user.\n"
13444
"dn: cn=admin,dc=example,dc=com\n"
13445
"objectClass: simpleSecurityObject\n"
13446
"objectClass: organizationalRole\n"
13447
"cn: admin\n"
13448
"description: LDAP administrator\n"
13449
"userPassword: secret\n"
13450
"\n"
13451
"dn: ou=people,dc=example,dc=com\n"
13452
"objectClass: organizationalUnit\n"
13453
"ou: people\n"
13454
"\n"
13455
"dn: ou=groups,dc=example,dc=com\n"
13456
"objectClass: organizationalUnit\n"
13457
"ou: groups\n"
13458
"\n"
13459
"dn: uid=john,ou=people,dc=example,dc=com\n"
13460
"objectClass: inetOrgPerson\n"
13461
"objectClass: posixAccount\n"
13462
"objectClass: shadowAccount\n"
13463
"uid: john\n"
13464
"sn: Doe\n"
13465
"givenName: John\n"
13466
"cn: John Doe\n"
13467
"displayName: John Doe\n"
13468
"uidNumber: 1000\n"
13469
"gidNumber: 10000\n"
13470
"userPassword: password\n"
13471
"gecos: John Doe\n"
13472
"loginShell: /bin/bash\n"
13473
"homeDirectory: /home/john\n"
13474
"shadowExpire: -1\n"
13475
"shadowFlag: 0\n"
13476
"shadowWarning: 7\n"
13477
"shadowMin: 8\n"
13478
"shadowMax: 999999\n"
13479
"shadowLastChange: 10877\n"
13480
"mail: john.doe@example.com\n"
13481
"postalCode: 31000\n"
13482
"l: Toulouse\n"
13483
"o: Example\n"
13484
"mobile: +33 (0)6 xx xx xx xx\n"
13485
"homePhone: +33 (0)5 xx xx xx xx\n"
13486
"title: System Administrator\n"
13487
"postalAddress: \n"
13488
"initials: JD\n"
13489
"\n"
13490
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13491
"objectClass: posixGroup\n"
13492
"cn: example\n"
13493
"gidNumber: 10000\n"
13494
msgstr ""
13495
13496
#: serverguide/C/network-auth.xml:236(para)
13497
msgid ""
13498
"In this example the directory structure, a user, and a group have been "
13499
"setup. In other examples you might see the <emphasis>objectClass: "
13500
"top</emphasis> added in every entry, but that is the default behaviour so "
13501
"you do not have to add it explicitly."
13502
msgstr ""
13503
13504
#: serverguide/C/network-auth.xml:243(para)
13505
msgid "Add the entries to the LDAP directory:"
13506
msgstr ""
13507
13508
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13509
msgid ""
13510
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13511
msgstr ""
13512
13513
#: serverguide/C/network-auth.xml:252(para)
13514
msgid ""
13515
"We can check that the content has been correctly added with the "
13516
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13517
"directory:"
13518
msgstr ""
13519
13520
#: serverguide/C/network-auth.xml:258(command)
13521
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13522
msgstr ""
13523
13524
#: serverguide/C/network-auth.xml:259(computeroutput)
13525
#, no-wrap
13526
msgid ""
13527
"\n"
13528
"dn: uid=john,ou=people,dc=example,dc=com\n"
13529
"cn: John Doe\n"
13530
"sn: Doe\n"
13531
"givenName: John\n"
13532
msgstr ""
13533
13534
#: serverguide/C/network-auth.xml:267(para)
13535
msgid "Just a quick explanation:"
13536
msgstr ""
13537
13538
#: serverguide/C/network-auth.xml:273(para)
13539
msgid ""
13540
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13541
"the default."
13542
msgstr ""
13543
13544
#: serverguide/C/network-auth.xml:279(para)
13545
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13546
msgstr ""
13547
13548
#: serverguide/C/network-auth.xml:287(title)
13549
msgid "Further Configuration"
13550
msgstr ""
13551
13552
#: serverguide/C/network-auth.xml:290(para)
13553
msgid ""
13554
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13555
"utilities in the <application>ldap-utils</application> package. For example:"
13556
msgstr ""
13557
13558
#: serverguide/C/network-auth.xml:298(para)
13559
msgid ""
13560
"Use <application>ldapsearch</application> to view the tree, entering the "
13561
"admin password set during installation or reconfiguration:"
13562
msgstr ""
13563
13564
#: serverguide/C/network-auth.xml:304(command)
13565
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13566
msgstr ""
13567
13568
#: serverguide/C/network-auth.xml:308(computeroutput)
13569
#, no-wrap
13570
msgid ""
13571
"\n"
13572
"SASL/EXTERNAL authentication started\n"
13573
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13574
"SASL SSF: 0\n"
13575
"dn: cn=config\n"
13576
"\n"
13577
"dn: cn=module{0},cn=config\n"
13578
"\n"
13579
"dn: cn=schema,cn=config\n"
13580
"\n"
13581
"dn: cn={0}core,cn=schema,cn=config\n"
13582
"\n"
13583
"dn: cn={1}cosine,cn=schema,cn=config\n"
13584
"\n"
13585
"dn: cn={2}nis,cn=schema,cn=config\n"
13586
"\n"
13587
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13588
"\n"
13589
"dn: olcDatabase={-1}frontend,cn=config\n"
13590
"\n"
13591
"dn: olcDatabase={0}config,cn=config\n"
13592
"\n"
13593
"dn: olcDatabase={1}hdb,cn=config\n"
13594
msgstr ""
13595
13596
#: serverguide/C/network-auth.xml:334(para)
13597
msgid ""
13598
"The output above is the current configuration options for the "
13599
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13600
msgstr ""
13601
13602
#: serverguide/C/network-auth.xml:342(para)
13603
msgid ""
13604
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13605
"another attribute to the index list using "
13606
"<application>ldapmodify</application>:"
13607
msgstr ""
13608
13609
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13610
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13611
msgstr ""
13612
13613
#: serverguide/C/network-auth.xml:356(userinput)
13614
#, no-wrap
13615
msgid ""
13616
"dn: olcDatabase={1}hdb,cn=config\n"
13617
"add: olcDbIndex\n"
13618
"olcDbIndex: uidNumber eq"
13619
msgstr ""
13620
13621
#: serverguide/C/network-auth.xml:352(computeroutput)
13622
#, no-wrap
13623
msgid ""
13624
"\n"
13625
"SASL/EXTERNAL authentication started\n"
13626
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13627
"SASL SSF: 0\n"
13628
"<placeholder-1/>\n"
13629
"\n"
13630
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13631
msgstr ""
13632
13633
#: serverguide/C/network-auth.xml:364(para)
13634
msgid ""
13635
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13636
"exit the utility."
13637
msgstr ""
13638
13639
#: serverguide/C/network-auth.xml:371(para)
13640
msgid ""
13641
"<application>ldapmodify</application> can also read the changes from a file. "
13642
"Copy and paste the following into a file named "
13643
"<filename>uid_index.ldif</filename>:"
13644
msgstr ""
13645
13646
#: serverguide/C/network-auth.xml:376(programlisting)
13647
#, no-wrap
13648
msgid ""
13649
"\n"
13650
"dn: olcDatabase={1}hdb,cn=config\n"
13651
"add: olcDbIndex\n"
13652
"olcDbIndex: uid eq,pres,sub\n"
13653
msgstr ""
13654
13655
#: serverguide/C/network-auth.xml:382(para)
13656
msgid "Then execute <application>ldapmodify</application>:"
13657
msgstr ""
13658
13659
#: serverguide/C/network-auth.xml:387(command)
13660
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13661
msgstr ""
13662
13663
#: serverguide/C/network-auth.xml:391(computeroutput)
13664
#, no-wrap
13665
msgid ""
13666
"\n"
13667
"SASL/EXTERNAL authentication started\n"
13668
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13669
"SASL SSF: 0\n"
13670
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13671
msgstr ""
13672
13673
#: serverguide/C/network-auth.xml:399(para)
13674
msgid "The file method is very useful for large changes."
13675
msgstr ""
13676
13677
#: serverguide/C/network-auth.xml:406(para)
13678
msgid ""
13679
"Adding additional <emphasis>schemas</emphasis> to "
13680
"<application>slapd</application> requires the schema to be converted to LDIF "
13681
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13682
"directory contains some schema files already converted to LDIF format as "
13683
"demonstrated in the previous section. Fortunately, the "
13684
"<application>slapd</application> program can be used to automate the "
13685
"conversion. The following example will add the "
13686
"<emphasis>dyngoup.schema</emphasis>:"
13687
msgstr ""
13688
13689
#: serverguide/C/network-auth.xml:416(para)
13690
msgid ""
13691
"First, create a conversion <filename>schema_convert.conf</filename> file "
13692
"containing the following lines:"
13693
msgstr ""
13694
13695
#: serverguide/C/network-auth.xml:421(programlisting)
13696
#, no-wrap
13697
msgid ""
13698
"\n"
13699
"include /etc/ldap/schema/core.schema\n"
13700
"include /etc/ldap/schema/collective.schema\n"
13701
"include /etc/ldap/schema/corba.schema\n"
13702
"include /etc/ldap/schema/cosine.schema\n"
13703
"include /etc/ldap/schema/duaconf.schema\n"
13704
"include /etc/ldap/schema/dyngroup.schema\n"
13705
"include /etc/ldap/schema/inetorgperson.schema\n"
13706
"include /etc/ldap/schema/java.schema\n"
13707
"include /etc/ldap/schema/misc.schema\n"
13708
"include /etc/ldap/schema/nis.schema\n"
13709
"include /etc/ldap/schema/openldap.schema\n"
13710
"include /etc/ldap/schema/ppolicy.schema\n"
13711
msgstr ""
13712
13713
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13714
msgid "Next, create a temporary directory to hold the output:"
13715
msgstr ""
13716
13717
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13718
msgid "mkdir /tmp/ldif_output"
13719
msgstr ""
13720
13721
#: serverguide/C/network-auth.xml:450(para)
13722
msgid ""
13723
"Now using <application>slapcat</application> convert the schema files to "
13724
"LDIF:"
13725
msgstr ""
13726
13727
#: serverguide/C/network-auth.xml:455(command)
13728
msgid ""
13729
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13730
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13731
msgstr ""
13732
13733
#: serverguide/C/network-auth.xml:458(para)
13734
msgid ""
13735
"Adjust the configuration file name and temporary directory names if yours "
13736
"are different. Also, it may be worthwhile to keep the "
13737
"<filename>ldif_output</filename> directory around in case you want to add "
13738
"additional schemas in the future."
13739
msgstr ""
13740
13741
#: serverguide/C/network-auth.xml:467(para)
13742
msgid ""
13743
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13744
"following attributes:"
13745
msgstr ""
13746
13747
#: serverguide/C/network-auth.xml:471(programlisting)
13748
#, no-wrap
13749
msgid ""
13750
"\n"
13751
"dn: cn=dyngroup,cn=schema,cn=config\n"
13752
"...\n"
13753
"cn: dyngroup\n"
13754
msgstr ""
13755
13756
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13757
msgid "And remove the following lines from the bottom of the file:"
13758
msgstr ""
13759
13760
#: serverguide/C/network-auth.xml:481(programlisting)
13761
#, no-wrap
13762
msgid ""
13763
"\n"
13764
"structuralObjectClass: olcSchemaConfig\n"
13765
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13766
"creatorsName: cn=config\n"
13767
"createTimestamp: 20080826021140Z\n"
13768
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13769
"modifiersName: cn=config\n"
13770
"modifyTimestamp: 20080826021140Z\n"
13771
msgstr ""
13772
13773
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13774
msgid ""
13775
"The attribute values will vary, just be sure the attributes are removed."
13776
msgstr ""
13777
13778
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13779
msgid ""
13780
"Finally, using the <application>ldapadd</application> utility, add the new "
13781
"schema to the directory:"
13782
msgstr ""
13783
13784
#: serverguide/C/network-auth.xml:506(command)
13785
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13786
msgstr ""
13787
13788
#: serverguide/C/network-auth.xml:512(para)
13789
msgid ""
13790
"There should now be a <emphasis>dn: "
13791
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13792
msgstr ""
13793
13794
#: serverguide/C/network-auth.xml:522(title)
13795
msgid "LDAP Replication"
13796
msgstr ""
13797
13798
#: serverguide/C/network-auth.xml:524(para)
13799
msgid ""
13800
"LDAP often quickly becomes a highly critical service to the network. "
13801
"Multiple systems will come to depend on LDAP for authentication, "
13802
"authorization, configuration, etc. It is a good idea to setup a redundant "
13803
"system through replication."
13804
msgstr ""
13805
13806
#: serverguide/C/network-auth.xml:530(para)
13807
msgid ""
13808
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13809
"Syncrepl allows the changes to be synced using a "
13810
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13811
"provider sends directory changes to consumers."
13812
msgstr ""
13813
13814
#: serverguide/C/network-auth.xml:537(title)
13815
msgid "Provider Configuration"
13816
msgstr ""
13817
13818
#: serverguide/C/network-auth.xml:539(para)
13819
msgid ""
13820
"The following is an example of a <emphasis>Single-Master</emphasis> "
13821
"configuration. In this configuration one OpenLDAP server is configured as a "
13822
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13823
msgstr ""
13824
13825
#: serverguide/C/network-auth.xml:547(para)
13826
msgid ""
13827
"First, configure the provider server. Copy the following to a file named "
13828
"<filename>provider_sync.ldif</filename>:"
13829
msgstr ""
13830
13831
#: serverguide/C/network-auth.xml:552(programlisting)
13832
#, no-wrap
13833
msgid ""
13834
"\n"
13835
"# Add indexes to the frontend db.\n"
13836
"dn: olcDatabase={1}hdb,cn=config\n"
13837
"changetype: modify\n"
13838
"add: olcDbIndex\n"
13839
"olcDbIndex: entryCSN eq\n"
13840
"-\n"
13841
"add: olcDbIndex\n"
13842
"olcDbIndex: entryUUID eq\n"
13843
"\n"
13844
"#Load the syncprov and accesslog modules.\n"
13845
"dn: cn=module{0},cn=config\n"
13846
"changetype: modify\n"
13847
"add: olcModuleLoad\n"
13848
"olcModuleLoad: syncprov\n"
13849
"-\n"
13850
"add: olcModuleLoad\n"
13851
"olcModuleLoad: accesslog\n"
13852
"\n"
13853
"# Accesslog database definitions\n"
13854
"dn: olcDatabase={2}hdb,cn=config\n"
13855
"objectClass: olcDatabaseConfig\n"
13856
"objectClass: olcHdbConfig\n"
13857
"olcDatabase: {2}hdb\n"
13858
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13859
"olcSuffix: cn=accesslog\n"
13860
"olcRootDN: cn=admin,dc=example,dc=com\n"
13861
"olcDbIndex: default eq\n"
13862
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13863
"\n"
13864
"# Accesslog db syncprov.\n"
13865
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13866
"changetype: add\n"
13867
"objectClass: olcOverlayConfig\n"
13868
"objectClass: olcSyncProvConfig\n"
13869
"olcOverlay: syncprov\n"
13870
"olcSpNoPresent: TRUE\n"
13871
"olcSpReloadHint: TRUE\n"
13872
"\n"
13873
"# syncrepl Provider for primary db\n"
13874
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13875
"changetype: add\n"
13876
"objectClass: olcOverlayConfig\n"
13877
"objectClass: olcSyncProvConfig\n"
13878
"olcOverlay: syncprov\n"
13879
"olcSpNoPresent: TRUE\n"
13880
"\n"
13881
"# accesslog overlay definitions for primary db\n"
13882
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13883
"objectClass: olcOverlayConfig\n"
13884
"objectClass: olcAccessLogConfig\n"
13885
"olcOverlay: accesslog\n"
13886
"olcAccessLogDB: cn=accesslog\n"
13887
"olcAccessLogOps: writes\n"
13888
"olcAccessLogSuccess: TRUE\n"
13889
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13890
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13891
msgstr ""
13892
13893
#: serverguide/C/network-auth.xml:614(para)
13894
msgid ""
13895
"The <application>AppArmor</application> profile for "
13896
"<application>slapd</application> will need to be adjusted for the accesslog "
13897
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13898
"adding:"
13899
msgstr ""
13900
13901
#: serverguide/C/network-auth.xml:619(programlisting)
13902
#, no-wrap
13903
msgid ""
13904
"\n"
13905
" /var/lib/ldap/accesslog/ r,\n"
13906
" /var/lib/ldap/accesslog/** rwk,\n"
13907
msgstr ""
13908
13909
#: serverguide/C/network-auth.xml:624(para)
13910
msgid ""
13911
"Then create the directory, reload the <application>apparmor</application> "
13912
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13913
msgstr ""
13914
13915
#: serverguide/C/network-auth.xml:630(command)
13916
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13917
msgstr ""
13918
13919
#: serverguide/C/network-auth.xml:631(command)
13920
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13921
msgstr ""
13922
13923
#: serverguide/C/network-auth.xml:636(para)
13924
msgid ""
13925
"Using the <emphasis>-u openldap</emphasis> option with the "
13926
"<application>sudo</application> commands above removes the need to adjust "
13927
"permissions for the new directory later."
13928
msgstr ""
13929
13930
#: serverguide/C/network-auth.xml:645(para)
13931
msgid ""
13932
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13933
"directory:"
13934
msgstr ""
13935
13936
#: serverguide/C/network-auth.xml:649(programlisting)
13937
#, no-wrap
13938
msgid ""
13939
"\n"
13940
"olcRootDN: cn=admin,dc=example,dc=com\n"
13941
msgstr ""
13942
13943
#: serverguide/C/network-auth.xml:657(para)
13944
msgid ""
13945
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13946
msgstr ""
13947
13948
#: serverguide/C/network-auth.xml:662(command)
13949
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13950
msgstr ""
13951
13952
#: serverguide/C/network-auth.xml:669(para)
13953
msgid "Restart <application>slapd</application>:"
13954
msgstr ""
13955
13956
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13957
msgid "sudo /etc/init.d/slapd restart"
13958
msgstr ""
13959
13960
#: serverguide/C/network-auth.xml:680(para)
13961
msgid ""
13962
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13963
"to configure a <emphasis>Consumer</emphasis> server."
13964
msgstr ""
13965
13966
#: serverguide/C/network-auth.xml:687(title)
13967
msgid "Consumer Configuration"
13968
msgstr ""
13969
13970
#: serverguide/C/network-auth.xml:692(para)
13971
msgid ""
13972
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13973
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13974
"configuration steps."
13975
msgstr ""
13976
13977
#: serverguide/C/network-auth.xml:697(para)
13978
msgid "Add the additional schema files:"
13979
msgstr ""
13980
13981
#: serverguide/C/network-auth.xml:707(para)
13982
msgid ""
13983
"Also, create, or copy from the provider server, the "
13984
"<filename>backend.example.com.ldif</filename>"
13985
msgstr ""
13986
13987
#: serverguide/C/network-auth.xml:711(programlisting)
13988
#, no-wrap
13989
msgid ""
13990
"\n"
13991
"# Load dynamic backend modules\n"
13992
"dn: cn=module,cn=config\n"
13993
"objectClass: olcModuleList\n"
13994
"cn: module\n"
13995
"olcModulepath: /usr/lib/ldap\n"
13996
"olcModuleload: back_hdb\n"
13997
"\n"
13998
"# Database settings\n"
13999
"dn: olcDatabase=hdb,cn=config\n"
14000
"objectClass: olcDatabaseConfig\n"
14001
"objectClass: olcHdbConfig\n"
14002
"olcDatabase: {1}hdb\n"
14003
"olcSuffix: dc=example,dc=com\n"
14004
"olcDbDirectory: /var/lib/ldap\n"
14005
"olcRootDN: cn=admin,dc=example,dc=com\n"
14006
"olcRootPW: secret\n"
14007
"olcDbConfig: set_cachesize 0 2097152 0\n"
14008
"olcDbConfig: set_lk_max_objects 1500\n"
14009
"olcDbConfig: set_lk_max_locks 1500\n"
14010
"olcDbConfig: set_lk_max_lockers 1500\n"
14011
"olcDbIndex: objectClass eq\n"
14012
"olcLastMod: TRUE\n"
14013
"olcDbCheckpoint: 512 30\n"
14014
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
14015
"by anonymous auth by self write by * none\n"
14016
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
14017
"olcAccess: to dn.base=\"\" by * read\n"
14018
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
14019
msgstr ""
14020
14021
#: serverguide/C/network-auth.xml:741(para)
14022
msgid "And add the LDIF by entering:"
14023
msgstr ""
14024
14025
#: serverguide/C/network-auth.xml:752(para)
14026
msgid ""
14027
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
14028
"listed above, and add it:"
14029
msgstr ""
14030
14031
#: serverguide/C/network-auth.xml:760(para)
14032
msgid ""
14033
"The two severs should now have the same configuration except for the "
14034
"<emphasis>Syncrepl</emphasis> options."
14035
msgstr ""
14036
14037
#: serverguide/C/network-auth.xml:768(para)
14038
msgid ""
14039
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
14040
msgstr ""
14041
14042
#: serverguide/C/network-auth.xml:772(programlisting)
14043
#, no-wrap
14044
msgid ""
14045
"\n"
14046
"#Load the syncprov module.\n"
14047
"dn: cn=module{0},cn=config\n"
14048
"changetype: modify\n"
14049
"add: olcModuleLoad\n"
14050
"olcModuleLoad: syncprov\n"
14051
"\n"
14052
"# syncrepl specific indices\n"
14053
"dn: olcDatabase={1}hdb,cn=config\n"
14054
"changetype: modify\n"
14055
"add: olcDbIndex\n"
14056
"olcDbIndex: entryUUID eq\n"
14057
"-\n"
14058
"add: olcSyncRepl\n"
14059
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14060
"binddn=\"cn=admin,dc=example,dc=com\" \n"
14061
" credentials=secret searchbase=\"dc=example,dc=com\" "
14062
"logbase=\"cn=accesslog\" \n"
14063
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
14064
"schemachecking=on \n"
14065
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
14066
"-\n"
14067
"add: olcUpdateRef\n"
14068
"olcUpdateRef: ldap://ldap01.example.com\n"
14069
msgstr ""
14070
14071
#: serverguide/C/network-auth.xml:795(para)
14072
msgid "You will probably want to change the following attributes:"
14073
msgstr ""
14074
14075
#: serverguide/C/network-auth.xml:800(para)
14076
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
14077
msgstr ""
14078
14079
#: serverguide/C/network-auth.xml:801(emphasis)
14080
msgid "binddn"
14081
msgstr ""
14082
14083
#: serverguide/C/network-auth.xml:802(emphasis)
14084
msgid "credentials"
14085
msgstr ""
14086
14087
#: serverguide/C/network-auth.xml:803(emphasis)
14088
msgid "searchbase"
14089
msgstr ""
14090
14091
#: serverguide/C/network-auth.xml:804(emphasis)
14092
msgid "olcUpdateRef:"
14093
msgstr ""
14094
14095
#: serverguide/C/network-auth.xml:810(para)
14096
msgid "Add the LDIF file to the configuration tree:"
14097
msgstr ""
14098
14099
#: serverguide/C/network-auth.xml:815(command)
14100
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
14101
msgstr ""
14102
14103
#: serverguide/C/network-auth.xml:821(para)
14104
msgid ""
14105
"The frontend database should now sync between servers. You can add "
14106
"additional servers using the steps above as the need arises."
14107
msgstr ""
14108
14109
#: serverguide/C/network-auth.xml:831(programlisting)
14110
#, no-wrap
14111
msgid "127.0.0.1\tldap01.example.com ldap01"
14112
msgstr ""
14113
14114
#: serverguide/C/network-auth.xml:827(para)
14115
msgid ""
14116
"The <application>slapd</application> daemon will send log information to "
14117
"<filename>/var/log/syslog</filename> by default. So if all does "
14118
"<emphasis>not</emphasis> go well check there for errors and other "
14119
"troubleshooting information. Also, be sure that each server knows it's Fully "
14120
"Qualified Domain Name (FQDN). This is configured in "
14121
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
14122
msgstr ""
14123
14124
#: serverguide/C/network-auth.xml:839(title)
14125
msgid "Setting up ACL"
14126
msgstr ""
14127
14128
#: serverguide/C/network-auth.xml:841(para)
14129
msgid ""
14130
"Authentication requires access to the password field, that should be not "
14131
"accessible by default. Also, in order for users to change their own "
14132
"password, using <command>passwd</command> or other utilities, "
14133
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
14134
"authenticated."
14135
msgstr ""
14136
14137
#: serverguide/C/network-auth.xml:848(para)
14138
msgid ""
14139
"To view the Access Control List (ACL), use the "
14140
"<application>ldapsearch</application> utility:"
14141
msgstr ""
14142
14143
#: serverguide/C/network-auth.xml:853(command)
14144
msgid ""
14145
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
14146
"olcAccess"
14147
msgstr ""
14148
14149
#: serverguide/C/network-auth.xml:857(computeroutput)
14150
#, no-wrap
14151
msgid ""
14152
"Enter LDAP Password: \n"
14153
"dn: olcDatabase={1}hdb,cn=config\n"
14154
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
14155
"dn=\"cn=admin,dc=exampl\n"
14156
" e,dc=com\" write by anonymous auth by self write by * none\n"
14157
"olcAccess: {1}to dn.base=\"\" by * read\n"
14158
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
14159
msgstr ""
14160
14161
#: serverguide/C/network-auth.xml:869(title)
14162
msgid "TLS and SSL"
14163
msgstr ""
14164
14165
#: serverguide/C/network-auth.xml:871(para)
14166
msgid ""
14167
"When authenticating to an OpenLDAP server it is best to do so using an "
14168
"encrypted session. This can be accomplished using Transport Layer Security "
14169
"(TLS) and/or Secure Sockets Layer (SSL)."
14170
msgstr ""
14171
14172
#: serverguide/C/network-auth.xml:876(para)
14173
msgid ""
14174
"The first step in the process is to obtain or create a "
14175
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
14176
"is compiled using the <application>gnutls</application> library, the "
14177
"<application>certtool</application> utility will be used to create "
14178
"certificates."
14179
msgstr ""
14180
14181
#: serverguide/C/network-auth.xml:885(para)
14182
msgid ""
14183
"First, install <application>gnutls-bin</application> by entering the "
14184
"following in a terminal:"
14185
msgstr ""
14186
14187
#: serverguide/C/network-auth.xml:890(command)
14188
msgid "sudo apt-get install gnutls-bin"
14189
msgstr ""
14190
14191
#: serverguide/C/network-auth.xml:896(para)
14192
msgid ""
14193
"Next, create a private key for the <emphasis>Certificate "
14194
"Authority</emphasis> (CA):"
14195
msgstr ""
14196
14197
#: serverguide/C/network-auth.xml:901(command)
14198
msgid ""
14199
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
14200
msgstr ""
14201
14202
#: serverguide/C/network-auth.xml:907(para)
14203
msgid ""
14204
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
14205
"CA certificate containing:"
14206
msgstr ""
14207
14208
#: serverguide/C/network-auth.xml:911(programlisting)
14209
#, no-wrap
14210
msgid ""
14211
"\n"
14212
"cn = Example Company\n"
14213
"ca\n"
14214
"cert_signing_key\n"
14215
msgstr ""
14216
14217
#: serverguide/C/network-auth.xml:920(para)
14218
msgid "Now create the self-signed CA certificate:"
14219
msgstr ""
14220
14221
#: serverguide/C/network-auth.xml:925(command)
14222
msgid ""
14223
"sudo certtool --generate-self-signed --load-privkey "
14224
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
14225
"/etc/ssl/certs/cacert.pem"
14226
msgstr ""
14227
14228
#: serverguide/C/network-auth.xml:932(para)
14229
msgid "Make a private key for the server:"
14230
msgstr ""
14231
14232
#: serverguide/C/network-auth.xml:937(command)
14233
msgid ""
14234
"sudo sh -c \"certtool --generate-privkey > "
14235
"/etc/ssl/private/ldap01_slapd_key.pem\""
14236
msgstr ""
14237
14238
#: serverguide/C/network-auth.xml:941(para)
14239
msgid ""
14240
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
14241
"hostname. Naming the certificate and key for the host and service that will "
14242
"be using them will help keep filenames and paths straight."
14243
msgstr ""
14244
14245
#: serverguide/C/network-auth.xml:950(para)
14246
msgid ""
14247
"To sign the server's certificate with the CA, create the "
14248
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
14249
msgstr ""
14250
14251
#: serverguide/C/network-auth.xml:954(programlisting)
14252
#, no-wrap
14253
msgid ""
14254
"\n"
14255
"organization = Example Company\n"
14256
"cn = ldap01.example.com\n"
14257
"tls_www_server\n"
14258
"encryption_key\n"
14259
"signing_key\n"
14260
msgstr ""
14261
14262
#: serverguide/C/network-auth.xml:965(para)
14263
msgid "Create the server's certificate:"
14264
msgstr ""
14265
14266
#: serverguide/C/network-auth.xml:970(command)
14267
msgid ""
14268
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
14269
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
14270
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
14271
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
14272
msgstr ""
14273
14274
#: serverguide/C/network-auth.xml:978(para)
14275
msgid ""
14276
"Once you have a certificate, key, and CA cert installed, use "
14277
"<application>ldapmodify</application> to add the new configuration options:"
14278
msgstr ""
14279
14280
#: serverguide/C/network-auth.xml:989(userinput)
14281
#, no-wrap
14282
msgid ""
14283
"dn: cn=config\n"
14284
"add: olcTLSCACertificateFile\n"
14285
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14286
"-\n"
14287
"add: olcTLSCertificateFile\n"
14288
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
14289
"-\n"
14290
"add: olcTLSCertificateKeyFile\n"
14291
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
14292
msgstr ""
14293
14294
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
14295
#, no-wrap
14296
msgid ""
14297
"Enter LDAP Password:\n"
14298
"<placeholder-1/>\n"
14299
"\n"
14300
"modifying entry \"cn=config\"\n"
14301
msgstr ""
14302
14303
#: serverguide/C/network-auth.xml:1004(para)
14304
msgid ""
14305
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14306
"<filename>ldap01_slapd_key.pem</filename>, and "
14307
"<filename>cacert.pem</filename> names if yours are different."
14308
msgstr ""
14309
14310
#: serverguide/C/network-auth.xml:1010(para)
14311
msgid ""
14312
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14313
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14314
msgstr ""
14315
14316
#: serverguide/C/network-auth.xml:1014(programlisting)
14317
#, no-wrap
14318
msgid ""
14319
"\n"
14320
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14321
msgstr ""
14322
14323
#: serverguide/C/network-auth.xml:1018(para)
14324
msgid ""
14325
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14326
msgstr ""
14327
14328
#: serverguide/C/network-auth.xml:1023(command)
14329
msgid "sudo adduser openldap ssl-cert"
14330
msgstr ""
14331
14332
#: serverguide/C/network-auth.xml:1024(command)
14333
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14334
msgstr ""
14335
14336
#: serverguide/C/network-auth.xml:1025(command)
14337
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14338
msgstr ""
14339
14340
#: serverguide/C/network-auth.xml:1029(para)
14341
msgid ""
14342
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14343
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14344
"adjust the commands appropriately."
14345
msgstr ""
14346
14347
#: serverguide/C/network-auth.xml:1035(para)
14348
msgid "Finally, restart <application>slapd</application>:"
14349
msgstr ""
14350
14351
#: serverguide/C/network-auth.xml:1043(para)
14352
msgid ""
14353
"The <application>slapd</application> daemon should now be listening for "
14354
"LDAPS connections and be able to use STARTTLS during authentication."
14355
msgstr ""
14356
14357
#: serverguide/C/network-auth.xml:1049(para)
14358
msgid ""
14359
"If you run into troubles with the server not starting, check the "
14360
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14361
"it is likely there is a configuration problem. Check that the certificate is "
14362
"signed by the authority from in the files configured, and that the ssl-cert "
14363
"group has read permissions on the private key."
14364
msgstr ""
14365
14366
#: serverguide/C/network-auth.xml:1061(title)
14367
msgid "TLS Replication"
14368
msgstr ""
14369
14370
#: serverguide/C/network-auth.xml:1063(para)
14371
msgid ""
14372
"If you have setup <application>Syncrepl</application> between servers, it is "
14373
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14374
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14375
"linkend=\"openldap-server-replication\"/>."
14376
msgstr ""
14377
14378
#: serverguide/C/network-auth.xml:1069(para)
14379
msgid ""
14380
"Assuming you have followed the above instructions and created a CA "
14381
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14382
"server. Follow the following instructions to create a certificate and key "
14383
"for the <emphasis>Consumer</emphasis> server."
14384
msgstr ""
14385
14386
#: serverguide/C/network-auth.xml:1078(para)
14387
msgid "Create a new key for the Consumer server:"
14388
msgstr ""
14389
14390
#: serverguide/C/network-auth.xml:1083(command)
14391
msgid "mkdir ldap02-ssl"
14392
msgstr ""
14393
14394
#: serverguide/C/network-auth.xml:1084(command)
14395
msgid "cd ldap02-ssl"
14396
msgstr ""
14397
14398
#: serverguide/C/network-auth.xml:1085(command)
14399
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14400
msgstr ""
14401
14402
#: serverguide/C/network-auth.xml:1089(para)
14403
msgid ""
14404
"Creating a new directory is not strictly necessary, but it will help keep "
14405
"things organized and make it easier to copy the files to the Consumer server."
14406
msgstr ""
14407
14408
#: serverguide/C/network-auth.xml:1098(para)
14409
msgid ""
14410
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14411
"server, changing the attributes to match your locality and server:"
14412
msgstr ""
14413
14414
#: serverguide/C/network-auth.xml:1103(programlisting)
14415
#, no-wrap
14416
msgid ""
14417
"\n"
14418
"country = US\n"
14419
"state = North Carolina\n"
14420
"locality = Winston-Salem\n"
14421
"organization = Example Company\n"
14422
"cn = ldap02.salem.edu\n"
14423
"tls_www_client\n"
14424
"encryption_key\n"
14425
"signing_key\n"
14426
msgstr ""
14427
14428
#: serverguide/C/network-auth.xml:1117(para)
14429
msgid "Create the certificate:"
14430
msgstr ""
14431
14432
#: serverguide/C/network-auth.xml:1122(command)
14433
msgid ""
14434
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14435
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14436
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14437
"ldap02_slapd_cert.pem"
14438
msgstr ""
14439
14440
#: serverguide/C/network-auth.xml:1130(para)
14441
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14442
msgstr ""
14443
14444
#: serverguide/C/network-auth.xml:1135(command)
14445
msgid "cp /etc/ssl/certs/cacert.pem ."
14446
msgstr ""
14447
14448
#: serverguide/C/network-auth.xml:1141(para)
14449
msgid ""
14450
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14451
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14452
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14453
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14454
"<filename>/etc/ssl/private</filename>."
14455
msgstr ""
14456
14457
#: serverguide/C/network-auth.xml:1150(para)
14458
msgid ""
14459
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14460
"by entering:"
14461
msgstr ""
14462
14463
#: serverguide/C/network-auth.xml:1160(userinput)
14464
#, no-wrap
14465
msgid ""
14466
"dn: cn=config\n"
14467
"add: olcTLSCACertificateFile\n"
14468
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14469
"-\n"
14470
"add: olcTLSCertificateFile\n"
14471
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14472
"-\n"
14473
"add: olcTLSCertificateKeyFile\n"
14474
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14475
msgstr ""
14476
14477
#: serverguide/C/network-auth.xml:1177(para)
14478
msgid ""
14479
"As with the Provider you can now edit "
14480
"<filename>/etc/default/slapd</filename> and add the "
14481
"<emphasis>ldaps:///</emphasis> parameter to the "
14482
"<emphasis>SLAPD_SERVICES</emphasis> option."
14483
msgstr ""
14484
14485
#: serverguide/C/network-auth.xml:1185(para)
14486
msgid ""
14487
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14488
"modify the <emphasis>Consumer</emphasis> server's "
14489
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14490
msgstr ""
14491
14492
#: serverguide/C/network-auth.xml:1198(userinput)
14493
#, no-wrap
14494
msgid ""
14495
"\n"
14496
"dn: olcDatabase={1}hdb,cn=config\n"
14497
"replace: olcSyncrepl\n"
14498
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14499
"binddn=\"cn=ad\n"
14500
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14501
"logbas\n"
14502
" e=\"cn=accesslog\" "
14503
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14504
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14505
"starttls=yes"
14506
msgstr ""
14507
14508
#: serverguide/C/network-auth.xml:1195(computeroutput)
14509
#, no-wrap
14510
msgid ""
14511
"SASL/EXTERNAL authentication started\n"
14512
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14513
"SASL SSF: 0\n"
14514
"<placeholder-1/>\n"
14515
"\n"
14516
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14517
msgstr ""
14518
14519
#: serverguide/C/network-auth.xml:1210(para)
14520
msgid ""
14521
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14522
"(FQDN) in the certificate, you may have to edit "
14523
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14524
msgstr ""
14525
14526
#: serverguide/C/network-auth.xml:1215(programlisting)
14527
#, no-wrap
14528
msgid ""
14529
"\n"
14530
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14531
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14532
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14533
msgstr ""
14534
14535
#: serverguide/C/network-auth.xml:1222(para)
14536
msgid ""
14537
"Finally, restart <application>slapd</application> on each of the servers:"
14538
msgstr ""
14539
14540
#: serverguide/C/network-auth.xml:1235(title)
14541
msgid "LDAP Authentication"
14542
msgstr ""
14543
14544
#: serverguide/C/network-auth.xml:1237(para)
14545
msgid ""
14546
"Once you have a working LDAP server, the <application>auth-client-"
14547
"config</application> and <application>libnss-ldap</application> packages "
14548
"take the pain out of configuring an Ubuntu client to authenticate using "
14549
"LDAP. To install the packages from, a terminal prompt enter:"
14550
msgstr ""
14551
14552
#: serverguide/C/network-auth.xml:1244(command)
14553
msgid "sudo apt-get install libnss-ldap"
14554
msgstr ""
14555
14556
#: serverguide/C/network-auth.xml:1247(para)
14557
msgid ""
14558
"During the install a menu dialog will ask you connection details about your "
14559
"LDAP server."
14560
msgstr ""
14561
14562
#: serverguide/C/network-auth.xml:1251(para)
14563
msgid ""
14564
"If you make a mistake when entering your information you can execute the "
14565
"dialog again using:"
14566
msgstr ""
14567
14568
#: serverguide/C/network-auth.xml:1256(command)
14569
msgid "sudo dpkg-reconfigure ldap-auth-config"
14570
msgstr ""
14571
14572
#: serverguide/C/network-auth.xml:1259(para)
14573
msgid ""
14574
"The results of the dialog can be seen in "
14575
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14576
"covered in the menu edit this file accordingly."
14577
msgstr ""
14578
14579
#: serverguide/C/network-auth.xml:1264(para)
14580
msgid ""
14581
"Now that <application>libnss-ldap</application> is configured enable the "
14582
"<application>auth-client-config</application> LDAP profile by entering:"
14583
msgstr ""
14584
14585
#: serverguide/C/network-auth.xml:1270(command)
14586
msgid "sudo auth-client-config -t nss -p lac_ldap"
14587
msgstr ""
14588
14589
#: serverguide/C/network-auth.xml:1275(para)
14590
msgid ""
14591
"<emphasis>-t:</emphasis> only modifies "
14592
"<filename>/etc/nsswitch.conf</filename>."
14593
msgstr ""
14594
14595
#: serverguide/C/network-auth.xml:1280(para)
14596
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14597
msgstr ""
14598
14599
#: serverguide/C/network-auth.xml:1285(para)
14600
msgid ""
14601
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14602
"config</application> profile that is part of the <application>ldap-auth-"
14603
"config</application> package."
14604
msgstr ""
14605
14606
#: serverguide/C/network-auth.xml:1292(para)
14607
msgid ""
14608
"Using the <application>pam-auth-update</application> utility, configure the "
14609
"system to use LDAP for authentication:"
14610
msgstr ""
14611
14612
#: serverguide/C/network-auth.xml:1297(command)
14613
msgid "sudo pam-auth-update"
14614
msgstr ""
14615
14616
#: serverguide/C/network-auth.xml:1300(para)
14617
msgid ""
14618
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14619
"any other authentication mechanisms you need."
14620
msgstr ""
14621
14622
#: serverguide/C/network-auth.xml:1304(para)
14623
msgid ""
14624
"You should now be able to login using user credentials stored in the LDAP "
14625
"directory."
14626
msgstr ""
14627
14628
#: serverguide/C/network-auth.xml:1309(para)
14629
msgid ""
14630
"If you are going to use LDAP to store Samba users you will need to configure "
14631
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14632
"for details."
14633
msgstr ""
14634
14635
#: serverguide/C/network-auth.xml:1317(title)
14636
msgid "User and Group Management"
14637
msgstr ""
14638
14639
#: serverguide/C/network-auth.xml:1319(para)
14640
msgid ""
14641
"The <application>ldap-utils</application> package comes with multiple "
14642
"utilities to manage the directory, but the long string of options needed, "
14643
"can make them a burden to use. The <application>ldapscripts</application> "
14644
"package contains configurable scripts to easily manage LDAP users and groups."
14645
msgstr ""
14646
14647
#: serverguide/C/network-auth.xml:1325(para)
14648
msgid "To install the package, from a terminal enter:"
14649
msgstr ""
14650
14651
#: serverguide/C/network-auth.xml:1330(command)
14652
msgid "sudo apt-get install ldapscripts"
14653
msgstr ""
14654
14655
#: serverguide/C/network-auth.xml:1333(para)
14656
msgid ""
14657
"Next, edit the config file "
14658
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14659
"changing the following to match your environment:"
14660
msgstr ""
14661
14662
#: serverguide/C/network-auth.xml:1338(programlisting)
14663
#, no-wrap
14664
msgid ""
14665
"\n"
14666
"SERVER=localhost\n"
14667
"BINDDN='cn=admin,dc=example,dc=com'\n"
14668
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14669
"SUFFIX='dc=example,dc=com'\n"
14670
"GSUFFIX='ou=Groups'\n"
14671
"USUFFIX='ou=People'\n"
14672
"MSUFFIX='ou=Computers'\n"
14673
"GIDSTART=10000\n"
14674
"UIDSTART=10000\n"
14675
"MIDSTART=10000\n"
14676
msgstr ""
14677
14678
#: serverguide/C/network-auth.xml:1351(para)
14679
msgid ""
14680
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14681
"authenticated access to the directory:"
14682
msgstr ""
14683
14684
#: serverguide/C/network-auth.xml:1356(command)
14685
msgid ""
14686
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14687
msgstr ""
14688
14689
#: serverguide/C/network-auth.xml:1357(command)
14690
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14691
msgstr ""
14692
14693
#: serverguide/C/network-auth.xml:1361(para)
14694
msgid ""
14695
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14696
"user."
14697
msgstr ""
14698
14699
#: serverguide/C/network-auth.xml:1366(para)
14700
msgid ""
14701
"The <application>ldapscripts</application> are now ready to help manage your "
14702
"directory. The following are some examples of how to use the scripts:"
14703
msgstr ""
14704
14705
#: serverguide/C/network-auth.xml:1373(para)
14706
msgid "Create a new user:"
14707
msgstr ""
14708
14709
#: serverguide/C/network-auth.xml:1377(command)
14710
msgid "sudo ldapadduser george example"
14711
msgstr ""
14712
14713
#: serverguide/C/network-auth.xml:1379(para)
14714
msgid ""
14715
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14716
"and set the user's primary group (gid) to <emphasis "
14717
"role=\"italic\">example</emphasis>"
14718
msgstr ""
14719
14720
#: serverguide/C/network-auth.xml:1385(para)
14721
msgid "Change a user's password:"
14722
msgstr ""
14723
14724
#: serverguide/C/network-auth.xml:1389(command)
14725
msgid "sudo ldapsetpasswd george"
14726
msgstr ""
14727
14728
#: serverguide/C/network-auth.xml:1390(computeroutput)
14729
#, no-wrap
14730
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14731
msgstr ""
14732
14733
#: serverguide/C/network-auth.xml:1391(userinput)
14734
#, no-wrap
14735
msgid "New Password: "
14736
msgstr ""
14737
14738
#: serverguide/C/network-auth.xml:1392(userinput)
14739
#, no-wrap
14740
msgid "New Password (verify): "
14741
msgstr ""
14742
14743
#: serverguide/C/network-auth.xml:1396(para)
14744
msgid "Delete a user:"
14745
msgstr ""
14746
14747
#: serverguide/C/network-auth.xml:1400(command)
14748
msgid "sudo ldapdeleteuser george"
14749
msgstr ""
14750
14751
#: serverguide/C/network-auth.xml:1405(para)
14752
msgid "Add a group:"
14753
msgstr ""
14754
14755
#: serverguide/C/network-auth.xml:1409(command)
14756
msgid "sudo ldapaddgroup qa"
14757
msgstr ""
14758
14759
#: serverguide/C/network-auth.xml:1413(para)
14760
msgid "Delete a group:"
14761
msgstr ""
14762
14763
#: serverguide/C/network-auth.xml:1417(command)
14764
msgid "sudo ldapdeletegroup qa"
14765
msgstr ""
14766
14767
#: serverguide/C/network-auth.xml:1421(para)
14768
msgid "Add a user to a group:"
14769
msgstr ""
14770
14771
#: serverguide/C/network-auth.xml:1425(command)
14772
msgid "sudo ldapaddusertogroup george qa"
14773
msgstr ""
14774
14775
#: serverguide/C/network-auth.xml:1427(para)
14776
msgid ""
14777
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14778
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14779
"role=\"italic\">george</emphasis>."
14780
msgstr ""
14781
14782
#: serverguide/C/network-auth.xml:1433(para)
14783
msgid "Remove a user from a group:"
14784
msgstr ""
14785
14786
#: serverguide/C/network-auth.xml:1437(command)
14787
msgid "sudo ldapdeleteuserfromgroup george qa"
14788
msgstr ""
14789
14790
#: serverguide/C/network-auth.xml:1439(para)
14791
msgid ""
14792
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14793
"<emphasis role=\"italic\">qa</emphasis> group."
14794
msgstr ""
14795
14796
#: serverguide/C/network-auth.xml:1445(para)
14797
msgid ""
14798
"The <application>ldapmodifyuser</application> script allows you to add, "
14799
"remove, or replace a user's attributes. The script uses the same syntax as "
14800
"the <application>ldapmodify</application> utility. For example:"
14801
msgstr ""
14802
14803
#: serverguide/C/network-auth.xml:1450(command)
14804
msgid "sudo ldapmodifyuser george"
14805
msgstr ""
14806
14807
#: serverguide/C/network-auth.xml:1451(computeroutput)
14808
#, no-wrap
14809
msgid ""
14810
"# About to modify the following entry :\n"
14811
"dn: uid=george,ou=People,dc=example,dc=com\n"
14812
"objectClass: account\n"
14813
"objectClass: posixAccount\n"
14814
"cn: george\n"
14815
"uid: george\n"
14816
"uidNumber: 1001\n"
14817
"gidNumber: 1001\n"
14818
"homeDirectory: /home/george\n"
14819
"loginShell: /bin/bash\n"
14820
"gecos: george\n"
14821
"description: User account\n"
14822
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14823
"\n"
14824
"# Enter your modifications here, end with CTRL-D.\n"
14825
"dn: uid=george,ou=People,dc=example,dc=com"
14826
msgstr ""
14827
14828
#: serverguide/C/network-auth.xml:1467(userinput)
14829
#, no-wrap
14830
msgid ""
14831
"replace: gecos\n"
14832
"gecos: George Carlin"
14833
msgstr ""
14834
14835
#: serverguide/C/network-auth.xml:1470(para)
14836
msgid ""
14837
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14838
"Carlin</quote>."
14839
msgstr ""
14840
14841
#: serverguide/C/network-auth.xml:1475(para)
14842
msgid ""
14843
"Another great feature of <application>ldapscripts</application>, is the "
14844
"template system. Templates allow you to customize the attributes of user, "
14845
"group, and machine objectes. For example, to enable the "
14846
"<emphasis>user</emphasis> template edit "
14847
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14848
msgstr ""
14849
14850
#: serverguide/C/network-auth.xml:1482(programlisting)
14851
#, no-wrap
14852
msgid ""
14853
"\n"
14854
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14855
msgstr ""
14856
14857
#: serverguide/C/network-auth.xml:1486(para)
14858
msgid ""
14859
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14860
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14861
"<filename>ldapadduser.template.sample</filename> file to "
14862
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14863
msgstr ""
14864
14865
#: serverguide/C/network-auth.xml:1493(command)
14866
msgid ""
14867
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14868
"/etc/ldapscripts/ldapadduser.template"
14869
msgstr ""
14870
14871
#: serverguide/C/network-auth.xml:1496(para)
14872
msgid ""
14873
"Edit the new template to add the desired attributes. The following will "
14874
"create new user's as with an <emphasis>objectClass</emphasis> of "
14875
"<emphasis>inetOrgPerson</emphasis>:"
14876
msgstr ""
14877
14878
#: serverguide/C/network-auth.xml:1501(programlisting)
14879
#, no-wrap
14880
msgid ""
14881
"\n"
14882
"dn: uid=<user>,<usuffix>,<suffix>\n"
14883
"objectClass: inetOrgPerson\n"
14884
"objectClass: posixAccount\n"
14885
"cn: <user>\n"
14886
"sn: <ask>\n"
14887
"uid: <user>\n"
14888
"uidNumber: <uid>\n"
14889
"gidNumber: <gid>\n"
14890
"homeDirectory: <home>\n"
14891
"loginShell: <shell>\n"
14892
"gecos: <user>\n"
14893
"description: User account\n"
14894
"title: Employee\n"
14895
msgstr ""
14896
14897
#: serverguide/C/network-auth.xml:1517(para)
14898
msgid ""
14899
"Notice the <emphasis><ask></emphasis> option used for the "
14900
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14901
"<application>ldapadduser</application> to prompt you for the attribute value "
14902
"during user creation."
14903
msgstr ""
14904
14905
#: serverguide/C/network-auth.xml:1525(para)
14906
msgid ""
14907
"There are more useful scripts in the package, to see a full list enter: "
14908
"<command>dpkg -L ldapscripts | grep bin</command>"
14909
msgstr ""
14910
14911
#: serverguide/C/network-auth.xml:1534(para)
14912
msgid ""
14913
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14914
"Ubuntu Wiki</ulink> page has more details."
14915
msgstr ""
14916
14917
#: serverguide/C/network-auth.xml:1539(para)
14918
msgid ""
14919
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14920
"Home Page</ulink>"
14921
msgstr ""
14922
14923
#: serverguide/C/network-auth.xml:1544(para)
14924
msgid ""
14925
"Though starting to show it's age, a great source for in depth LDAP "
14926
"information is O'Reilly's <ulink "
14927
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14928
"Administration</ulink>"
14929
msgstr ""
14930
14931
#: serverguide/C/network-auth.xml:1550(para)
14932
msgid ""
14933
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14934
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14935
"newer versions of OpenLDAP."
14936
msgstr ""
14937
14938
#: serverguide/C/network-auth.xml:1556(para)
14939
msgid ""
14940
"For more information on <application>auth-client-config</application> see "
14941
"the man page: <command>man auth-client-config</command>."
14942
msgstr ""
14943
14944
#: serverguide/C/network-auth.xml:1561(para)
14945
msgid ""
14946
"For more details regarding the <application>ldapscripts</application> "
14947
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14948
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14949
msgstr ""
14950
14951
#: serverguide/C/network-auth.xml:1571(title)
14952
msgid "Samba and LDAP"
14953
msgstr ""
14954
14955
#: serverguide/C/network-auth.xml:1573(para)
14956
msgid ""
14957
"This section covers configuring Samba to use LDAP for user, group, and "
14958
"machine account information and authentication. The assumption is, you "
14959
"already have a working OpenLDAP directory installed and the server is "
14960
"configured to use it for authentication. See <xref linkend=\"openldap-"
14961
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14962
"setting up OpenLDAP. For more information on installing and configuring "
14963
"Samba see <xref linkend=\"windows-networking\"/>."
14964
msgstr ""
14965
14966
#: serverguide/C/network-auth.xml:1583(para)
14967
msgid ""
14968
"There are three packages needed when integrating Samba with LDAP. "
14969
"<application>samba</application>, <application>samba-doc</application>, and "
14970
"<application>smbldap-tools</application> packages . To install the packages, "
14971
"from a terminal enter:"
14972
msgstr ""
14973
14974
#: serverguide/C/network-auth.xml:1589(command)
14975
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14976
msgstr ""
14977
14978
#: serverguide/C/network-auth.xml:1592(para)
14979
msgid ""
14980
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14981
"needed, but unless you have another package or custom scripts, a method of "
14982
"managing users, groups, and computer accounts is needed."
14983
msgstr ""
14984
14985
#: serverguide/C/network-auth.xml:1599(title)
14986
msgid "OpenLDAP Configuration"
14987
msgstr ""
14988
14989
#: serverguide/C/network-auth.xml:1601(para)
14990
msgid ""
14991
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14992
"the user objects in the directory will need additional attributes. This "
14993
"section assumes you want Samba to be configured as a Windows NT domain "
14994
"controller, and will add the necessary LDAP objects and attributes."
14995
msgstr ""
14996
14997
#: serverguide/C/network-auth.xml:1609(para)
14998
msgid ""
14999
"The Samba attributes are defined in the <filename>samba.schema</filename> "
15000
"file which is part of the <application>samba-doc</application> package. The "
15001
"schema file needs to be unzipped and copied to "
15002
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
15003
msgstr ""
15004
15005
#: serverguide/C/network-auth.xml:1616(command)
15006
msgid ""
15007
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
15008
"/etc/ldap/schema/"
15009
msgstr ""
15010
15011
#: serverguide/C/network-auth.xml:1617(command)
15012
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
15013
msgstr ""
15014
15015
#: serverguide/C/network-auth.xml:1623(para)
15016
msgid ""
15017
"The <emphasis>samba</emphasis> schema needs to be added to the "
15018
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
15019
"<application>slapd</application> is also detailed in <xref "
15020
"linkend=\"openldap-configuration\"/>."
15021
msgstr ""
15022
15023
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
15024
msgid ""
15025
"First, create a configuration file named "
15026
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
15027
"containing the following lines:"
15028
msgstr ""
15029
15030
#: serverguide/C/network-auth.xml:1636(programlisting)
15031
#, no-wrap
15032
msgid ""
15033
"\n"
15034
"include /etc/ldap/schema/core.schema\n"
15035
"include /etc/ldap/schema/collective.schema\n"
15036
"include /etc/ldap/schema/corba.schema\n"
15037
"include /etc/ldap/schema/cosine.schema\n"
15038
"include /etc/ldap/schema/duaconf.schema\n"
15039
"include /etc/ldap/schema/dyngroup.schema\n"
15040
"include /etc/ldap/schema/inetorgperson.schema\n"
15041
"include /etc/ldap/schema/java.schema\n"
15042
"include /etc/ldap/schema/misc.schema\n"
15043
"include /etc/ldap/schema/nis.schema\n"
15044
"include /etc/ldap/schema/openldap.schema\n"
15045
"include /etc/ldap/schema/ppolicy.schema\n"
15046
"include /etc/ldap/schema/samba.schema\n"
15047
msgstr ""
15048
15049
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
15050
msgid ""
15051
"Now use <application>slapcat</application> to convert the schema files:"
15052
msgstr ""
15053
15054
#: serverguide/C/network-auth.xml:1671(command)
15055
msgid ""
15056
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
15057
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
15058
msgstr ""
15059
15060
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
15061
msgid ""
15062
"Change the above file and path names to match your own if they are different."
15063
msgstr ""
15064
15065
#: serverguide/C/network-auth.xml:1681(para)
15066
msgid ""
15067
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
15068
"the following attributes:"
15069
msgstr ""
15070
15071
#: serverguide/C/network-auth.xml:1685(programlisting)
15072
#, no-wrap
15073
msgid ""
15074
"\n"
15075
"dn: cn=samba,cn=schema,cn=config\n"
15076
"...\n"
15077
"cn: samba\n"
15078
msgstr ""
15079
15080
#: serverguide/C/network-auth.xml:1695(programlisting)
15081
#, no-wrap
15082
msgid ""
15083
"\n"
15084
"structuralObjectClass: olcSchemaConfig\n"
15085
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
15086
"creatorsName: cn=config\n"
15087
"createTimestamp: 20080827045234Z\n"
15088
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
15089
"modifiersName: cn=config\n"
15090
"modifyTimestamp: 20080827045234Z\n"
15091
msgstr ""
15092
15093
#: serverguide/C/network-auth.xml:1720(command)
15094
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
15095
msgstr ""
15096
15097
#: serverguide/C/network-auth.xml:1726(para)
15098
msgid ""
15099
"There should now be a <emphasis>dn: "
15100
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
15101
"sequential schema, entry in the cn=config tree."
15102
msgstr ""
15103
15104
#: serverguide/C/network-auth.xml:1734(para)
15105
msgid ""
15106
"Copy and paste the following into a file named "
15107
"<filename>samba_indexes.ldif</filename>:"
15108
msgstr ""
15109
15110
#: serverguide/C/network-auth.xml:1738(programlisting)
15111
#, no-wrap
15112
msgid ""
15113
"\n"
15114
"dn: olcDatabase={1}hdb,cn=config\n"
15115
"changetype: modify\n"
15116
"add: olcDbIndex\n"
15117
"olcDbIndex: uidNumber eq\n"
15118
"olcDbIndex: gidNumber eq\n"
15119
"olcDbIndex: loginShell eq\n"
15120
"olcDbIndex: uid eq,pres,sub\n"
15121
"olcDbIndex: memberUid eq,pres,sub\n"
15122
"olcDbIndex: uniqueMember eq,pres\n"
15123
"olcDbIndex: sambaSID eq\n"
15124
"olcDbIndex: sambaPrimaryGroupSID eq\n"
15125
"olcDbIndex: sambaGroupType eq\n"
15126
"olcDbIndex: sambaSIDList eq\n"
15127
"olcDbIndex: sambaDomainName eq\n"
15128
"olcDbIndex: default sub\n"
15129
msgstr ""
15130
15131
#: serverguide/C/network-auth.xml:1756(para)
15132
msgid ""
15133
"Using the <application>ldapmodify</application> utility load the new indexes:"
15134
msgstr ""
15135
15136
#: serverguide/C/network-auth.xml:1761(command)
15137
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
15138
msgstr ""
15139
15140
#: serverguide/C/network-auth.xml:1763(para)
15141
msgid ""
15142
"If all went well you should see the new indexes using "
15143
"<application>ldapsearch</application>:"
15144
msgstr ""
15145
15146
#: serverguide/C/network-auth.xml:1768(command)
15147
msgid ""
15148
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
15149
msgstr ""
15150
15151
#: serverguide/C/network-auth.xml:1774(para)
15152
msgid ""
15153
"Next, configure the <application>smbldap-tools</application> package to "
15154
"match your environment. The package comes with a configuration script that "
15155
"will ask questions about the needed options. To run the script enter:"
15156
msgstr ""
15157
15158
#: serverguide/C/network-auth.xml:1780(command)
15159
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
15160
msgstr ""
15161
15162
#: serverguide/C/network-auth.xml:1781(command)
15163
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
15164
msgstr ""
15165
15166
#: serverguide/C/network-auth.xml:1784(para)
15167
msgid ""
15168
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
15169
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
15170
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
15171
"configure script, so if you made any mistakes while executing the script it "
15172
"may be simpler to edit the file appropriately."
15173
msgstr ""
15174
15175
#: serverguide/C/network-auth.xml:1794(para)
15176
msgid ""
15177
"The <application>smbldap-populate</application> script will add the "
15178
"necessary users, groups, and LDAP objects required for Samba. It is a good "
15179
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
15180
"<application>slapcat</application> before executing the command:"
15181
msgstr ""
15182
15183
#: serverguide/C/network-auth.xml:1801(command)
15184
msgid "sudo slapcat -l backup.ldif"
15185
msgstr ""
15186
15187
#: serverguide/C/network-auth.xml:1807(para)
15188
msgid ""
15189
"Once you have a current backup execute <application>smbldap-"
15190
"populate</application> by entering:"
15191
msgstr ""
15192
15193
#: serverguide/C/network-auth.xml:1812(command)
15194
msgid "sudo smbldap-populate"
15195
msgstr ""
15196
15197
#: serverguide/C/network-auth.xml:1816(para)
15198
msgid ""
15199
"You can create an LDIF file containing the new Samba objects by executing "
15200
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
15201
"look over the changes making sure everything is correct."
15202
msgstr ""
15203
15204
#: serverguide/C/network-auth.xml:1824(para)
15205
msgid ""
15206
"Your LDAP directory now has the necessary domain information to authenticate "
15207
"Samba users."
15208
msgstr ""
15209
15210
#: serverguide/C/network-auth.xml:1830(title)
15211
msgid "Samba Configuration"
15212
msgstr ""
15213
15214
#: serverguide/C/network-auth.xml:1832(para)
15215
msgid ""
15216
"There a multiple ways to configure Samba for details on some common "
15217
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
15218
"Samba to use LDAP, edit the main Samba configuration file "
15219
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
15220
"backend</emphasis> option and adding the following:"
15221
msgstr ""
15222
15223
#: serverguide/C/network-auth.xml:1838(programlisting)
15224
#, no-wrap
15225
msgid ""
15226
"\n"
15227
"# passdb backend = tdbsam\n"
15228
"\n"
15229
"# LDAP Settings\n"
15230
" passdb backend = ldapsam:ldap://hostname\n"
15231
" ldap suffix = dc=example,dc=com\n"
15232
" ldap user suffix = ou=People\n"
15233
" ldap group suffix = ou=Groups\n"
15234
" ldap machine suffix = ou=Computers\n"
15235
" ldap idmap suffix = ou=Idmap\n"
15236
" ldap admin dn = cn=admin,dc=example,dc=com\n"
15237
" ldap ssl = start tls\n"
15238
" ldap passwd sync = yes\n"
15239
"...\n"
15240
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
15241
msgstr ""
15242
15243
#: serverguide/C/network-auth.xml:1855(para)
15244
msgid "Restart <application>samba</application> to enable the new settings:"
15245
msgstr ""
15246
15247
#: serverguide/C/network-auth.xml:1863(para)
15248
msgid ""
15249
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
15250
"enter:"
15251
msgstr ""
15252
15253
#: serverguide/C/network-auth.xml:1868(command)
15254
msgid "sudo smbpasswd -w secret"
15255
msgstr ""
15256
15257
#: serverguide/C/network-auth.xml:1872(para)
15258
msgid ""
15259
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
15260
"password."
15261
msgstr ""
15262
15263
#: serverguide/C/network-auth.xml:1877(para)
15264
msgid ""
15265
"If you currently have users in LDAP, and you want them to authenticate using "
15266
"Samba, they will need some Samba attributes defined in the "
15267
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
15268
"users using the <application>smbpasswd</application> utility, replacing "
15269
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
15270
msgstr ""
15271
15272
#: serverguide/C/network-auth.xml:1885(command)
15273
msgid "sudo smbpasswd -a username"
15274
msgstr ""
15275
15276
#: serverguide/C/network-auth.xml:1888(para)
15277
msgid "You will then be asked to enter the user's password."
15278
msgstr ""
15279
15280
#: serverguide/C/network-auth.xml:1892(para)
15281
msgid ""
15282
"To add new user, group, and machine accounts use the utilities from the "
15283
"<application>smbldap-tools</application> package. Here are some examples:"
15284
msgstr ""
15285
15286
#: serverguide/C/network-auth.xml:1899(para)
15287
msgid ""
15288
"To add a new user to LDAP with Samba attributes enter the following, "
15289
"replacing username with an actual username:"
15290
msgstr ""
15291
15292
#: serverguide/C/network-auth.xml:1903(command)
15293
msgid "sudo smbldap-useradd -a -P username"
15294
msgstr ""
15295
15296
#: serverguide/C/network-auth.xml:1905(para)
15297
msgid ""
15298
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
15299
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
15300
"passwd</application> utility after the user is created allowing you to enter "
15301
"a password for the user."
15302
msgstr ""
15303
15304
#: serverguide/C/network-auth.xml:1911(para)
15305
msgid "To remove a user from the directory enter:"
15306
msgstr ""
15307
15308
#: serverguide/C/network-auth.xml:1915(command)
15309
msgid "sudo smbldap-userdel username"
15310
msgstr ""
15311
15312
#: serverguide/C/network-auth.xml:1917(para)
15313
msgid ""
15314
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15315
"r</emphasis> option to remove the user's home directory."
15316
msgstr ""
15317
15318
#: serverguide/C/network-auth.xml:1922(para)
15319
msgid ""
15320
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15321
"groupname with an appropriate group:"
15322
msgstr ""
15323
15324
#: serverguide/C/network-auth.xml:1926(command)
15325
msgid "sudo smbldap-groupadd -a groupname"
15326
msgstr ""
15327
15328
#: serverguide/C/network-auth.xml:1928(para)
15329
msgid ""
15330
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15331
"a</emphasis> adds the Samba attributes."
15332
msgstr ""
15333
15334
#: serverguide/C/network-auth.xml:1933(para)
15335
msgid ""
15336
"To add a user to a group use <application>smbldap-groupmod</application>:"
15337
msgstr ""
15338
15339
#: serverguide/C/network-auth.xml:1937(command)
15340
msgid "sudo smbldap-groupmod -m username groupname"
15341
msgstr ""
15342
15343
#: serverguide/C/network-auth.xml:1939(para)
15344
msgid ""
15345
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15346
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15347
"listing them in <emphasis>comma separated</emphasis> format."
15348
msgstr ""
15349
15350
#: serverguide/C/network-auth.xml:1945(para)
15351
msgid ""
15352
"<application>smbldap-groupmod</application> can also be used to remove a "
15353
"user from a group:"
15354
msgstr ""
15355
15356
#: serverguide/C/network-auth.xml:1949(command)
15357
msgid "sudo smbldap-groupmod -x username groupname"
15358
msgstr ""
15359
15360
#: serverguide/C/network-auth.xml:1953(para)
15361
msgid ""
15362
"Additionally, the <application>smbldap-useradd</application> utility can add "
15363
"Samba machine accounts:"
15364
msgstr ""
15365
15366
#: serverguide/C/network-auth.xml:1957(command)
15367
msgid "sudo smbldap-useradd -t 0 -w username"
15368
msgstr ""
15369
15370
#: serverguide/C/network-auth.xml:1959(para)
15371
msgid ""
15372
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15373
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15374
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15375
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15376
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15377
"<application>smbldap-useradd</application>."
15378
msgstr ""
15379
15380
#: serverguide/C/network-auth.xml:1968(para)
15381
msgid ""
15382
"There are more useful utilities and options in the <application>smbldap-"
15383
"tools</application> package. The man page for each utility provides more "
15384
"details."
15385
msgstr ""
15386
15387
#: serverguide/C/network-auth.xml:1979(para)
15388
msgid ""
15389
"There are multiple places where LDAP and Samba is documented in the <ulink "
15390
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15391
"Collection</ulink>."
15392
msgstr ""
15393
15394
#: serverguide/C/network-auth.xml:1985(para)
15395
msgid ""
15396
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15397
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15398
msgstr ""
15399
15400
#: serverguide/C/network-auth.xml:1991(para)
15401
msgid ""
15402
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15403
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15404
msgstr ""
15405
15406
#: serverguide/C/network-auth.xml:1997(para)
15407
msgid ""
15408
"Again, for more information on <application>smbldap-tools</application> see "
15409
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15410
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15411
msgstr ""
15412
15413
#: serverguide/C/network-auth.xml:2004(para)
15414
msgid ""
15415
"Also, there is a list of <ulink "
15416
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15417
"wiki</ulink> articles with more information."
15418
msgstr ""
15419
15420
#: serverguide/C/network-auth.xml:2013(title)
15421
msgid "Kerberos"
15422
msgstr ""
15423
15424
#: serverguide/C/network-auth.xml:2015(para)
15425
msgid ""
15426
"<application>Kerberos</application> is a network authentication system based "
15427
"on the principal of a trusted third party. The other two parties being the "
15428
"user and the service the user wishes to authenticate to. Not all services "
15429
"and applications can use Kerberos, but for those that can, it brings the "
15430
"network environment one step closer to being Single Sign On (SSO)."
15431
msgstr ""
15432
15433
#: serverguide/C/network-auth.xml:2021(para)
15434
msgid ""
15435
"This section covers installation and configuration of a Kerberos server, and "
15436
"some example client configurations."
15437
msgstr ""
15438
15439
#: serverguide/C/network-auth.xml:2028(para)
15440
msgid ""
15441
"If you are new to Kerberos there are a few terms that are good to understand "
15442
"before setting up a Kerberos server. Most of the terms will relate to things "
15443
"you may be familiar with in other environments:"
15444
msgstr ""
15445
15446
#: serverguide/C/network-auth.xml:2035(para)
15447
msgid ""
15448
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15449
"by servers need to be defined as Kerberos Principals."
15450
msgstr ""
15451
15452
#: serverguide/C/network-auth.xml:2040(para)
15453
msgid ""
15454
"<emphasis>Instances:</emphasis> are used for service principals and special "
15455
"administrative principals."
15456
msgstr ""
15457
15458
#: serverguide/C/network-auth.xml:2045(para)
15459
msgid ""
15460
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15461
"Kerberos installation. Usually the DNS domain converted to uppercase "
15462
"(EXAMPLE.COM)."
15463
msgstr ""
15464
15465
#: serverguide/C/network-auth.xml:2051(para)
15466
msgid ""
15467
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15468
"a database of all principals, the authentication server, and the ticket "
15469
"granting server. For each realm there must be at least one KDC."
15470
msgstr ""
15471
15472
#: serverguide/C/network-auth.xml:2057(para)
15473
msgid ""
15474
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15475
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15476
"password which is known only to the user and the KDC."
15477
msgstr ""
15478
15479
#: serverguide/C/network-auth.xml:2063(para)
15480
msgid ""
15481
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15482
"clients upon request."
15483
msgstr ""
15484
15485
#: serverguide/C/network-auth.xml:2068(para)
15486
msgid ""
15487
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15488
"One principal being a user and the other a service requested by the user. "
15489
"Tickets establish an encryption key used for secure communication during the "
15490
"authenticated session."
15491
msgstr ""
15492
15493
#: serverguide/C/network-auth.xml:2074(para)
15494
msgid ""
15495
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15496
"principal database and contain the encryption key for a service or host."
15497
msgstr ""
15498
15499
#: serverguide/C/network-auth.xml:2081(para)
15500
msgid ""
15501
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15502
"redundancy, which contains a database of Principals. When a user principal "
15503
"logs into a workstation, configured for Kerberos authentication, the KDC "
15504
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15505
"match, the user is authenticated and can then request tickets for Kerberized "
15506
"services from the Ticket Granting Server (TGS). The service tickets allow "
15507
"the user to authenticate to the service without entering another username "
15508
"and password."
15509
msgstr ""
15510
15511
#: serverguide/C/network-auth.xml:2090(title)
15512
msgid "Kerberos Server"
15513
msgstr ""
15514
15515
#: serverguide/C/network-auth.xml:2094(para)
15516
msgid ""
15517
"Before installing the Kerberos server a properly configured DNS server is "
15518
"needed for your domain. Since the Kerberos Realm by convention matches the "
15519
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15520
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15521
msgstr ""
15522
15523
#: serverguide/C/network-auth.xml:2100(para)
15524
msgid ""
15525
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15526
"between a client machine and the server differs by more than five minutes "
15527
"(by default), the workstation will not be able to authenticate. To correct "
15528
"the problem all hosts should have their time synchronized using the "
15529
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15530
"NTP see <xref linkend=\"NTP\"/>."
15531
msgstr ""
15532
15533
#: serverguide/C/network-auth.xml:2107(para)
15534
msgid ""
15535
"The first step in installing a Kerberos Realm is to install the "
15536
"<application>krb5-kdc</application> and <application>krb5-admin-"
15537
"server</application> packages. From a terminal enter:"
15538
msgstr ""
15539
15540
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15541
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15542
msgstr ""
15543
15544
#: serverguide/C/network-auth.xml:2116(para)
15545
msgid ""
15546
"You will be asked at the end of the install to supply a name for the "
15547
"Kerberos and Admin servers, which may or may not be the same server, for the "
15548
"realm."
15549
msgstr ""
15550
15551
#: serverguide/C/network-auth.xml:2121(para)
15552
msgid ""
15553
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15554
"utility:"
15555
msgstr ""
15556
15557
#: serverguide/C/network-auth.xml:2126(command)
15558
msgid "sudo krb5_newrealm"
15559
msgstr ""
15560
15561
#: serverguide/C/network-auth.xml:2133(para)
15562
msgid ""
15563
"The questions asked during installation are used to configure the "
15564
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15565
"Distribution Center (KDC) settings simply edit the file and restart the "
15566
"<application>krb5-kdc</application> daemon."
15567
msgstr ""
15568
15569
#: serverguide/C/network-auth.xml:2141(para)
15570
msgid ""
15571
"Now that the KDC running an admin user is needed. It is recommended to use a "
15572
"different username from your everyday username. Using the "
15573
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15574
msgstr ""
15575
15576
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15577
msgid "sudo kadmin.local"
15578
msgstr ""
15579
15580
#: serverguide/C/network-auth.xml:2148(computeroutput)
15581
#, no-wrap
15582
msgid ""
15583
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15584
"kadmin.local:"
15585
msgstr ""
15586
15587
#: serverguide/C/network-auth.xml:2149(userinput)
15588
#, no-wrap
15589
msgid " addprinc steve/admin"
15590
msgstr ""
15591
15592
#: serverguide/C/network-auth.xml:2150(computeroutput)
15593
#, no-wrap
15594
msgid ""
15595
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15596
"policy\n"
15597
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15598
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15599
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15600
"kadmin.local:"
15601
msgstr ""
15602
15603
#: serverguide/C/network-auth.xml:2154(userinput)
15604
#, no-wrap
15605
msgid " quit"
15606
msgstr ""
15607
15608
#: serverguide/C/network-auth.xml:2157(para)
15609
msgid ""
15610
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15611
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15612
"is an <emphasis>Instance</emphasis>, and <emphasis "
15613
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15614
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15615
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15616
"rights."
15617
msgstr ""
15618
15619
#: serverguide/C/network-auth.xml:2165(para)
15620
msgid ""
15621
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15622
"your Realm and admin username."
15623
msgstr ""
15624
15625
#: serverguide/C/network-auth.xml:2173(para)
15626
msgid ""
15627
"Next, the new admin user needs to have the appropriate Access Control List "
15628
"(ACL) permissions. The permissions are configured in the "
15629
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15630
msgstr ""
15631
15632
#: serverguide/C/network-auth.xml:2178(programlisting)
15633
#, no-wrap
15634
msgid ""
15635
"\n"
15636
"steve/admin@EXAMPLE.COM *\n"
15637
msgstr ""
15638
15639
#: serverguide/C/network-auth.xml:2182(para)
15640
msgid ""
15641
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15642
"any operation on all principals in the realm."
15643
msgstr ""
15644
15645
#: serverguide/C/network-auth.xml:2189(para)
15646
msgid ""
15647
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15648
"to take affect:"
15649
msgstr ""
15650
15651
#: serverguide/C/network-auth.xml:2194(command)
15652
msgid "sudo /etc/init.d/krb5-admin-server restart"
15653
msgstr ""
15654
15655
#: serverguide/C/network-auth.xml:2200(para)
15656
msgid ""
15657
"The new user principal can be tested using the <application>kinit "
15658
"utility</application>:"
15659
msgstr ""
15660
15661
#: serverguide/C/network-auth.xml:2205(command)
15662
msgid "kinit steve/admin"
15663
msgstr ""
15664
15665
#: serverguide/C/network-auth.xml:2206(computeroutput)
15666
#, no-wrap
15667
msgid "steve/admin@EXAMPLE.COM's Password:"
15668
msgstr ""
15669
15670
#: serverguide/C/network-auth.xml:2209(para)
15671
msgid ""
15672
"After entering the password, use the <application>klist</application> "
15673
"utility to view information about the Ticket Granting Ticket (TGT):"
15674
msgstr ""
15675
15676
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15677
msgid "klist"
15678
msgstr ""
15679
15680
#: serverguide/C/network-auth.xml:2216(computeroutput)
15681
#, no-wrap
15682
msgid ""
15683
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15684
" Principal: steve/admin@EXAMPLE.COM\n"
15685
"\n"
15686
" Issued Expires Principal\n"
15687
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15688
msgstr ""
15689
15690
#: serverguide/C/network-auth.xml:2223(para)
15691
msgid ""
15692
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15693
"the KDC. For example:"
15694
msgstr ""
15695
15696
#: serverguide/C/network-auth.xml:2227(programlisting)
15697
#, no-wrap
15698
msgid ""
15699
"\n"
15700
"192.168.0.1 kdc01.example.com kdc01\n"
15701
msgstr ""
15702
15703
#: serverguide/C/network-auth.xml:2231(para)
15704
msgid ""
15705
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15706
msgstr ""
15707
15708
#: serverguide/C/network-auth.xml:2238(para)
15709
msgid ""
15710
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15711
"are needed. Add the following to "
15712
"<filename>/etc/named/db.example.com</filename>:"
15713
msgstr ""
15714
15715
#: serverguide/C/network-auth.xml:2243(programlisting)
15716
#, no-wrap
15717
msgid ""
15718
"\n"
15719
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15720
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15721
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15722
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15723
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15724
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15725
msgstr ""
15726
15727
#: serverguide/C/network-auth.xml:2253(para)
15728
msgid ""
15729
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15730
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15731
"KDC."
15732
msgstr ""
15733
15734
#: serverguide/C/network-auth.xml:2259(para)
15735
msgid ""
15736
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15737
msgstr ""
15738
15739
#: serverguide/C/network-auth.xml:2266(para)
15740
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15741
msgstr ""
15742
15743
#: serverguide/C/network-auth.xml:2273(title)
15744
msgid "Secondary KDC"
15745
msgstr ""
15746
15747
#: serverguide/C/network-auth.xml:2275(para)
15748
msgid ""
15749
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15750
"practice to have a Secondary KDC in case the primary becomes unavailable."
15751
msgstr ""
15752
15753
#: serverguide/C/network-auth.xml:2283(para)
15754
msgid ""
15755
"First, install the packages, and when asked for the Kerberos and Admin "
15756
"server names enter the name of the Primary KDC:"
15757
msgstr ""
15758
15759
#: serverguide/C/network-auth.xml:2294(para)
15760
msgid ""
15761
"Once you have the packages installed, create the Secondary KDC's host "
15762
"principal. From a terminal prompt, enter:"
15763
msgstr ""
15764
15765
#: serverguide/C/network-auth.xml:2299(command)
15766
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15767
msgstr ""
15768
15769
#: serverguide/C/network-auth.xml:2303(para)
15770
msgid ""
15771
"After, issuing any <application>kadmin</application> commands you will be "
15772
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15773
"password."
15774
msgstr ""
15775
15776
#: serverguide/C/network-auth.xml:2312(para)
15777
msgid "Extract the <emphasis>keytab</emphasis> file:"
15778
msgstr ""
15779
15780
#: serverguide/C/network-auth.xml:2317(command)
15781
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15782
msgstr ""
15783
15784
#: serverguide/C/network-auth.xml:2323(para)
15785
msgid ""
15786
"There should now be a <filename>keytab.kdc02</filename> in the current "
15787
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15788
msgstr ""
15789
15790
#: serverguide/C/network-auth.xml:2329(command)
15791
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15792
msgstr ""
15793
15794
#: serverguide/C/network-auth.xml:2333(para)
15795
msgid ""
15796
"If the path to the <filename>keytab.kdc02</filename> file is different "
15797
"adjust accordingly."
15798
msgstr ""
15799
15800
#: serverguide/C/network-auth.xml:2338(para)
15801
msgid ""
15802
"Also, you can list the principals in a Keytab file, which can be useful when "
15803
"troubleshooting, using the <application>klist</application> utility:"
15804
msgstr ""
15805
15806
#: serverguide/C/network-auth.xml:2344(command)
15807
msgid "sudo klist -k /etc/krb5.keytab"
15808
msgstr ""
15809
15810
#: serverguide/C/network-auth.xml:2350(para)
15811
msgid ""
15812
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15813
"that lists all KDCs for the Realm. For example, on both primary and "
15814
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15815
msgstr ""
15816
15817
#: serverguide/C/network-auth.xml:2355(programlisting)
15818
#, no-wrap
15819
msgid ""
15820
"\n"
15821
"host/kdc01.example.com@EXAMPLE.COM\n"
15822
"host/kdc02.example.com@EXAMPLE.COM\n"
15823
msgstr ""
15824
15825
#: serverguide/C/network-auth.xml:2363(para)
15826
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15827
msgstr ""
15828
15829
#: serverguide/C/network-auth.xml:2368(command)
15830
msgid "sudo kdb5_util -s create"
15831
msgstr ""
15832
15833
#: serverguide/C/network-auth.xml:2374(para)
15834
msgid ""
15835
"Now start the <application>kpropd</application> daemon, which listens for "
15836
"connections from the <application>kprop</application> utility. "
15837
"<application>kprop</application> is used to transfer dump files:"
15838
msgstr ""
15839
15840
#: serverguide/C/network-auth.xml:2381(command)
15841
msgid "sudo kpropd -S"
15842
msgstr ""
15843
15844
#: serverguide/C/network-auth.xml:2387(para)
15845
msgid ""
15846
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15847
"of the principal database:"
15848
msgstr ""
15849
15850
#: serverguide/C/network-auth.xml:2392(command)
15851
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15852
msgstr ""
15853
15854
#: serverguide/C/network-auth.xml:2398(para)
15855
msgid ""
15856
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15857
"<filename>/etc/krb5.keytab</filename>:"
15858
msgstr ""
15859
15860
#: serverguide/C/network-auth.xml:2403(command)
15861
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15862
msgstr ""
15863
15864
#: serverguide/C/network-auth.xml:2404(command)
15865
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15866
msgstr ""
15867
15868
#: serverguide/C/network-auth.xml:2408(para)
15869
msgid ""
15870
"Make sure there is a <emphasis>host</emphasis> for "
15871
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15872
msgstr ""
15873
15874
#: serverguide/C/network-auth.xml:2416(para)
15875
msgid ""
15876
"Using the <application>kprop</application> utility push the database to the "
15877
"Secondary KDC:"
15878
msgstr ""
15879
15880
#: serverguide/C/network-auth.xml:2421(command)
15881
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15882
msgstr ""
15883
15884
#: serverguide/C/network-auth.xml:2425(para)
15885
msgid ""
15886
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15887
"worked. If there is an error message check "
15888
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15889
"information."
15890
msgstr ""
15891
15892
#: serverguide/C/network-auth.xml:2431(para)
15893
msgid ""
15894
"You may also want to create a <application>cron</application> job to "
15895
"periodically update the database on the Secondary KDC. For example, the "
15896
"following will push the database every hour:"
15897
msgstr ""
15898
15899
#: serverguide/C/network-auth.xml:2436(programlisting)
15900
#, no-wrap
15901
msgid ""
15902
"\n"
15903
"# m h dom mon dow command\n"
15904
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15905
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15906
msgstr ""
15907
15908
#: serverguide/C/network-auth.xml:2444(para)
15909
msgid ""
15910
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15911
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15912
msgstr ""
15913
15914
#: serverguide/C/network-auth.xml:2450(command)
15915
msgid "sudo kdb5_util stash"
15916
msgstr ""
15917
15918
#: serverguide/C/network-auth.xml:2456(para)
15919
msgid ""
15920
"Finally, start the <application>krb5-kdc</application> daemon on the "
15921
"Secondary KDC:"
15922
msgstr ""
15923
15924
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15925
msgid "sudo /etc/init.d/krb5-kdc start"
15926
msgstr ""
15927
15928
#: serverguide/C/network-auth.xml:2467(para)
15929
msgid ""
15930
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15931
"for the Realm. You can test this by stopping the <application>krb5-"
15932
"kdc</application> daemon on the Primary KDC, then use "
15933
"<application>kinit</application> to request a ticket. If all goes well you "
15934
"should receive a ticket from the Secondary KDC."
15935
msgstr ""
15936
15937
#: serverguide/C/network-auth.xml:2475(title)
15938
msgid "Kerberos Linux Client"
15939
msgstr ""
15940
15941
#: serverguide/C/network-auth.xml:2477(para)
15942
msgid ""
15943
"This section covers configuring a Linux system as a "
15944
"<application>Kerberos</application> client. This will allow access to any "
15945
"kerberized services once a user has successfully logged into the system."
15946
msgstr ""
15947
15948
#: serverguide/C/network-auth.xml:2485(para)
15949
msgid ""
15950
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15951
"user</application> and <application>libpam-krb5</application> packages are "
15952
"needed, along with a few others that are not strictly necessary but make "
15953
"life easier. To install the packages enter the following in a terminal "
15954
"prompt:"
15955
msgstr ""
15956
15957
#: serverguide/C/network-auth.xml:2492(command)
15958
msgid ""
15959
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15960
msgstr ""
15961
15962
#: serverguide/C/network-auth.xml:2495(para)
15963
msgid ""
15964
"The <application>auth-client-config</application> package allows simple "
15965
"configuration of PAM for authentication from multiple sources, and the "
15966
"<application>libpam-ccreds</application> will cache authentication "
15967
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15968
"is unavailable. This package is also useful for laptops that may "
15969
"authenticate using Kerberos while on the corporate network, but will need to "
15970
"be accessed off the network as well."
15971
msgstr ""
15972
15973
#: serverguide/C/network-auth.xml:2506(para)
15974
msgid "To configure the client in a terminal enter:"
15975
msgstr ""
15976
15977
#: serverguide/C/network-auth.xml:2511(command)
15978
msgid "sudo dpkg-reconfigure krb5-config"
15979
msgstr ""
15980
15981
#: serverguide/C/network-auth.xml:2514(para)
15982
msgid ""
15983
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15984
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15985
"records, the menu will prompt you for the hostname of the Key Distribution "
15986
"Center (KDC) and Realm Administration server."
15987
msgstr ""
15988
15989
#: serverguide/C/network-auth.xml:2520(para)
15990
msgid ""
15991
"The <application>dpkg-reconfigure</application> adds entries to the "
15992
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15993
"entries similar to the following:"
15994
msgstr ""
15995
15996
#: serverguide/C/network-auth.xml:2525(programlisting)
15997
#, no-wrap
15998
msgid ""
15999
"\n"
16000
"[libdefaults]\n"
16001
" default_realm = EXAMPLE.COM\n"
16002
"...\n"
16003
"[realms]\n"
16004
" EXAMPLE.COM = } \n"
16005
" kdc = 192.168.0.1 \n"
16006
" admin_server = 192.168.0.1\n"
16007
" }\n"
16008
msgstr ""
16009
16010
#: serverguide/C/network-auth.xml:2536(para)
16011
msgid ""
16012
"You can test the configuration by requesting a ticket using the "
16013
"<application>kinit</application> utility. For example:"
16014
msgstr ""
16015
16016
#: serverguide/C/network-auth.xml:2541(command)
16017
msgid "kinit steve@EXAMPLE.COM"
16018
msgstr ""
16019
16020
#: serverguide/C/network-auth.xml:2542(computeroutput)
16021
#, no-wrap
16022
msgid "Password for steve@EXAMPLE.COM:"
16023
msgstr ""
16024
16025
#: serverguide/C/network-auth.xml:2545(para)
16026
msgid ""
16027
"When a ticket has been granted, the details can be viewed using "
16028
"<application>klist</application>:"
16029
msgstr ""
16030
16031
#: serverguide/C/network-auth.xml:2551(computeroutput)
16032
#, no-wrap
16033
msgid ""
16034
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
16035
"Default principal: steve@EXAMPLE.COM\n"
16036
"\n"
16037
"Valid starting Expires Service principal\n"
16038
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
16039
" renew until 07/25/08 05:18:57\n"
16040
"\n"
16041
"\n"
16042
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
16043
"klist: You have no tickets cached"
16044
msgstr ""
16045
16046
#: serverguide/C/network-auth.xml:2563(para)
16047
msgid ""
16048
"Next, use the <application>auth-client-config</application> to configure the "
16049
"<application>libpam-krb5</application> module to request a ticket during "
16050
"login:"
16051
msgstr ""
16052
16053
#: serverguide/C/network-auth.xml:2569(command)
16054
msgid "sudo auth-client-config -a -p kerberos_example"
16055
msgstr ""
16056
16057
#: serverguide/C/network-auth.xml:2572(para)
16058
msgid ""
16059
"You will should now receive a ticket upon successful login authentication."
16060
msgstr ""
16061
16062
#: serverguide/C/network-auth.xml:2583(para)
16063
msgid ""
16064
"For more information on Kerberos see the <ulink "
16065
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
16066
msgstr ""
16067
16068
#: serverguide/C/network-auth.xml:2588(para)
16069
msgid ""
16070
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
16071
"Kerberos</ulink> page has more details."
16072
msgstr ""
16073
16074
#: serverguide/C/network-auth.xml:2593(para)
16075
msgid ""
16076
"O'Reilly's <ulink "
16077
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
16078
"Guide</ulink> is a great reference when setting up Kerberos."
16079
msgstr ""
16080
16081
#: serverguide/C/network-auth.xml:2599(para)
16082
msgid ""
16083
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
16084
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
16085
"Kerberos questions."
16086
msgstr ""
16087
16088
#: serverguide/C/network-auth.xml:2609(title)
16089
msgid "Kerberos and LDAP"
16090
msgstr ""
16091
16092
#: serverguide/C/network-auth.xml:2611(para)
16093
msgid ""
16094
"Replicating a Kerberos principal database between two servers can be "
16095
"complicated, and adds an additional user database to your network. "
16096
"Fortunately, MIT Kerberos can be configured to use an "
16097
"<application>LDAP</application> directory as a principal database. This "
16098
"section covers configuring a primary and secondary kerberos server to use "
16099
"<application>OpenLDAP</application> for the principal database."
16100
msgstr ""
16101
16102
#: serverguide/C/network-auth.xml:2619(title)
16103
msgid "Configuring OpenLDAP"
16104
msgstr ""
16105
16106
#: serverguide/C/network-auth.xml:2621(para)
16107
msgid ""
16108
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
16109
"<application>OpenLDAP</application> server that has network connectivity to "
16110
"the Primary and Secondary KDCs. The rest of this section assumes that you "
16111
"also have LDAP replication configured between at least two servers. For "
16112
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
16113
msgstr ""
16114
16115
#: serverguide/C/network-auth.xml:2628(para)
16116
msgid ""
16117
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
16118
"that traffic between the KDC and LDAP server is encrypted. See <xref "
16119
"linkend=\"openldap-tls\"/> for details."
16120
msgstr ""
16121
16122
#: serverguide/C/network-auth.xml:2635(para)
16123
msgid ""
16124
"To load the schema into LDAP, on the LDAP server install the "
16125
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
16126
msgstr ""
16127
16128
#: serverguide/C/network-auth.xml:2641(command)
16129
msgid "sudo apt-get install krb5-kdc-ldap"
16130
msgstr ""
16131
16132
#: serverguide/C/network-auth.xml:2646(para)
16133
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
16134
msgstr ""
16135
16136
#: serverguide/C/network-auth.xml:2651(command)
16137
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
16138
msgstr ""
16139
16140
#: serverguide/C/network-auth.xml:2652(command)
16141
msgid ""
16142
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
16143
msgstr ""
16144
16145
#: serverguide/C/network-auth.xml:2658(para)
16146
msgid ""
16147
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
16148
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
16149
"<application>slapd</application> is also detailed in <xref "
16150
"linkend=\"openldap-configuration\"/>."
16151
msgstr ""
16152
16153
#: serverguide/C/network-auth.xml:2671(programlisting)
16154
#, no-wrap
16155
msgid ""
16156
"\n"
16157
"include /etc/ldap/schema/core.schema\n"
16158
"include /etc/ldap/schema/collective.schema\n"
16159
"include /etc/ldap/schema/corba.schema\n"
16160
"include /etc/ldap/schema/cosine.schema\n"
16161
"include /etc/ldap/schema/duaconf.schema\n"
16162
"include /etc/ldap/schema/dyngroup.schema\n"
16163
"include /etc/ldap/schema/inetorgperson.schema\n"
16164
"include /etc/ldap/schema/java.schema\n"
16165
"include /etc/ldap/schema/misc.schema\n"
16166
"include /etc/ldap/schema/nis.schema\n"
16167
"include /etc/ldap/schema/openldap.schema\n"
16168
"include /etc/ldap/schema/ppolicy.schema\n"
16169
"include /etc/ldap/schema/kerberos.schema\n"
16170
msgstr ""
16171
16172
#: serverguide/C/network-auth.xml:2691(para)
16173
msgid "Create a temporary directory to hold the LDIF files:"
16174
msgstr ""
16175
16176
#: serverguide/C/network-auth.xml:2706(command)
16177
msgid ""
16178
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
16179
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
16180
msgstr ""
16181
16182
#: serverguide/C/network-auth.xml:2716(para)
16183
msgid ""
16184
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
16185
"changing the following attributes:"
16186
msgstr ""
16187
16188
#: serverguide/C/network-auth.xml:2720(programlisting)
16189
#, no-wrap
16190
msgid ""
16191
"\n"
16192
"dn: cn=kerberos,cn=schema,cn=config\n"
16193
"...\n"
16194
"cn: kerberos\n"
16195
msgstr ""
16196
16197
#: serverguide/C/network-auth.xml:2726(para)
16198
msgid "And remove the following lines from the end of the file:"
16199
msgstr ""
16200
16201
#: serverguide/C/network-auth.xml:2730(programlisting)
16202
#, no-wrap
16203
msgid ""
16204
"\n"
16205
"structuralObjectClass: olcSchemaConfig\n"
16206
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
16207
"creatorsName: cn=config\n"
16208
"createTimestamp: 20090111203515Z\n"
16209
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
16210
"modifiersName: cn=config\n"
16211
"modifyTimestamp: 20090111203515Z\n"
16212
msgstr ""
16213
16214
#: serverguide/C/network-auth.xml:2749(para)
16215
msgid "Load the new schema with <application>ldapadd</application>:"
16216
msgstr ""
16217
16218
#: serverguide/C/network-auth.xml:2754(command)
16219
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
16220
msgstr ""
16221
16222
#: serverguide/C/network-auth.xml:2760(para)
16223
msgid ""
16224
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
16225
msgstr ""
16226
16227
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
16228
msgid "ldapmodify -x -D cn=admin,cn=config -W"
16229
msgstr ""
16230
16231
#: serverguide/C/network-auth.xml:2767(userinput)
16232
#, no-wrap
16233
msgid ""
16234
"dn: olcDatabase={1}hdb,cn=config\n"
16235
"add: olcDbIndex\n"
16236
"olcDbIndex: krbPrincipalName eq,pres,sub"
16237
msgstr ""
16238
16239
#: serverguide/C/network-auth.xml:2766(computeroutput)
16240
#, no-wrap
16241
msgid ""
16242
"Enter LDAP Password:\n"
16243
"<placeholder-1/>\n"
16244
"\n"
16245
"modifying entry \"olcDatabase={1}hdb,cn=config\""
16246
msgstr ""
16247
16248
#: serverguide/C/network-auth.xml:2777(para)
16249
msgid "Finally, update the Access Control Lists (ACL):"
16250
msgstr ""
16251
16252
#: serverguide/C/network-auth.xml:2784(userinput)
16253
#, no-wrap
16254
msgid ""
16255
"dn: olcDatabase={1}hdb,cn=config\n"
16256
"replace: olcAccess\n"
16257
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
16258
"dn=\"cn=admin,dc=exampl\n"
16259
" e,dc=com\" write by anonymous auth by self write by * none\n"
16260
"-\n"
16261
"add: olcAccess\n"
16262
"olcAccess: to dn.base=\"\" by * read\n"
16263
"-\n"
16264
"add: olcAccess\n"
16265
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
16266
msgstr ""
16267
16268
#: serverguide/C/network-auth.xml:2783(computeroutput)
16269
#, no-wrap
16270
msgid ""
16271
"Enter LDAP Password: \n"
16272
"<placeholder-1/>\n"
16273
"\n"
16274
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16275
msgstr ""
16276
16277
#: serverguide/C/network-auth.xml:2804(para)
16278
msgid ""
16279
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
16280
"database."
16281
msgstr ""
16282
16283
#: serverguide/C/network-auth.xml:2810(title)
16284
msgid "Primary KDC Configuration"
16285
msgstr ""
16286
16287
#: serverguide/C/network-auth.xml:2812(para)
16288
msgid ""
16289
"With <application>OpenLDAP</application> configured it is time to configure "
16290
"the KDC."
16291
msgstr ""
16292
16293
#: serverguide/C/network-auth.xml:2818(para)
16294
msgid "First, install the necessary packages, from a terminal enter:"
16295
msgstr ""
16296
16297
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
16298
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
16299
msgstr ""
16300
16301
#: serverguide/C/network-auth.xml:2829(para)
16302
msgid ""
16303
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16304
"under the appropriate sections:"
16305
msgstr ""
16306
16307
#: serverguide/C/network-auth.xml:2833(programlisting)
16308
#, no-wrap
16309
msgid ""
16310
"\n"
16311
"[libdefaults]\n"
16312
" default_realm = EXAMPLE.COM\n"
16313
"\n"
16314
"...\n"
16315
"\n"
16316
"[realms]\n"
16317
" EXAMPLE.COM = {\n"
16318
" kdc = kdc01.example.com\n"
16319
" kdc = kdc02.example.com\n"
16320
" admin_server = kdc01.example.com\n"
16321
" admin_server = kdc02.example.com\n"
16322
" default_domain = example.com\n"
16323
" database_module = openldap_ldapconf\n"
16324
" }\n"
16325
"\n"
16326
"...\n"
16327
"\n"
16328
"[domain_realm]\n"
16329
" .example.com = EXAMPLE.COM\n"
16330
"\n"
16331
"\n"
16332
"...\n"
16333
"\n"
16334
"[dbdefaults]\n"
16335
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16336
"\n"
16337
"[dbmodules]\n"
16338
" openldap_ldapconf = {\n"
16339
" db_library = kldap\n"
16340
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16341
"\n"
16342
" # this object needs to have read rights on\n"
16343
" # the realm container, principal container and realm sub-"
16344
"trees\n"
16345
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16346
"\n"
16347
" # this object needs to have read and write rights on\n"
16348
" # the realm container, principal container and realm sub-"
16349
"trees\n"
16350
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16351
" ldap_servers = ldaps://ldap01.example.com "
16352
"ldaps://ldap02.example.com\n"
16353
" ldap_conns_per_server = 5\n"
16354
" }\n"
16355
msgstr ""
16356
16357
#: serverguide/C/network-auth.xml:2878(para)
16358
msgid ""
16359
"Change <emphasis>example.com</emphasis>, "
16360
"<emphasis>dc=example,dc=com</emphasis>, "
16361
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16362
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16363
"object, and LDAP server for your network."
16364
msgstr ""
16365
16366
#: serverguide/C/network-auth.xml:2887(para)
16367
msgid ""
16368
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16369
"the realm:"
16370
msgstr ""
16371
16372
#: serverguide/C/network-auth.xml:2892(command)
16373
msgid ""
16374
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16375
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16376
msgstr ""
16377
16378
#: serverguide/C/network-auth.xml:2898(para)
16379
msgid ""
16380
"Create a stash of the password used to bind to the LDAP server. This "
16381
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16382
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16383
"<filename>/etc/krb5.conf</filename>:"
16384
msgstr ""
16385
16386
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16387
msgid ""
16388
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16389
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16390
msgstr ""
16391
16392
#: serverguide/C/network-auth.xml:2910(para)
16393
msgid "Copy the CA certificate from the LDAP server:"
16394
msgstr ""
16395
16396
#: serverguide/C/network-auth.xml:2915(command)
16397
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16398
msgstr ""
16399
16400
#: serverguide/C/network-auth.xml:2916(command)
16401
msgid "sudo cp cacert.pem /etc/ssl/certs"
16402
msgstr ""
16403
16404
#: serverguide/C/network-auth.xml:2919(para)
16405
msgid ""
16406
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16407
msgstr ""
16408
16409
#: serverguide/C/network-auth.xml:2923(programlisting)
16410
#, no-wrap
16411
msgid ""
16412
"\n"
16413
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16414
msgstr ""
16415
16416
#: serverguide/C/network-auth.xml:2928(para)
16417
msgid ""
16418
"The certificate will also need to be copied to the Secondary KDC, to allow "
16419
"the connection to the LDAP servers using LDAPS."
16420
msgstr ""
16421
16422
#: serverguide/C/network-auth.xml:2937(para)
16423
msgid ""
16424
"You can now add Kerberos principals to the LDAP database, and they will be "
16425
"copied to any other LDAP servers configured for replication. To add a "
16426
"principal using the <application>kadmin.local</application> utility enter:"
16427
msgstr ""
16428
16429
#: serverguide/C/network-auth.xml:2945(userinput)
16430
#, no-wrap
16431
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16432
msgstr ""
16433
16434
#: serverguide/C/network-auth.xml:2944(computeroutput)
16435
#, no-wrap
16436
msgid ""
16437
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16438
"kadmin.local: <placeholder-1/>\n"
16439
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16440
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16441
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16442
"Principal \"steve@EXAMPLE.COM\" created."
16443
msgstr ""
16444
16445
#: serverguide/C/network-auth.xml:2952(para)
16446
msgid ""
16447
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16448
"krbExtraData attributes added to the "
16449
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16450
"the <application>kinit</application> and <application>klist</application> "
16451
"utilities to test that the user is indeed issued a ticket."
16452
msgstr ""
16453
16454
#: serverguide/C/network-auth.xml:2959(para)
16455
msgid ""
16456
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16457
"option is needed to add the Kerberos attributes. Otherwise a new "
16458
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16459
msgstr ""
16460
16461
#: serverguide/C/network-auth.xml:2967(title)
16462
msgid "Secondary KDC Configuration"
16463
msgstr ""
16464
16465
#: serverguide/C/network-auth.xml:2969(para)
16466
msgid ""
16467
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16468
"one using the normal Kerberos database."
16469
msgstr ""
16470
16471
#: serverguide/C/network-auth.xml:2975(para)
16472
msgid "First, install the necessary packages. In a terminal enter:"
16473
msgstr ""
16474
16475
#: serverguide/C/network-auth.xml:2986(para)
16476
msgid ""
16477
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16478
msgstr ""
16479
16480
#: serverguide/C/network-auth.xml:2990(programlisting)
16481
#, no-wrap
16482
msgid ""
16483
"\n"
16484
"[libdefaults]\n"
16485
" default_realm = EXAMPLE.COM\n"
16486
"\n"
16487
"...\n"
16488
"\n"
16489
"[realms]\n"
16490
" EXAMPLE.COM = {\n"
16491
" kdc = kdc01.example.com\n"
16492
" kdc = kdc02.example.com\n"
16493
" admin_server = kdc01.example.com\n"
16494
" admin_server = kdc02.example.com\n"
16495
" default_domain = example.com\n"
16496
" database_module = openldap_ldapconf\n"
16497
" }\n"
16498
"\n"
16499
"...\n"
16500
"\n"
16501
"[domain_realm]\n"
16502
" .example.com = EXAMPLE.COM\n"
16503
"\n"
16504
"...\n"
16505
"\n"
16506
"[dbdefaults]\n"
16507
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16508
"\n"
16509
"[dbmodules]\n"
16510
" openldap_ldapconf = {\n"
16511
" db_library = kldap\n"
16512
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16513
"\n"
16514
" # this object needs to have read rights on\n"
16515
" # the realm container, principal container and realm sub-"
16516
"trees\n"
16517
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16518
"\n"
16519
" # this object needs to have read and write rights on\n"
16520
" # the realm container, principal container and realm sub-"
16521
"trees\n"
16522
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16523
" ldap_servers = ldaps://ldap01.example.com "
16524
"ldaps://ldap02.example.com\n"
16525
" ldap_conns_per_server = 5\n"
16526
" }\n"
16527
msgstr ""
16528
16529
#: serverguide/C/network-auth.xml:3037(para)
16530
msgid "Create the stash for the LDAP bind password:"
16531
msgstr ""
16532
16533
#: serverguide/C/network-auth.xml:3048(para)
16534
msgid ""
16535
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16536
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16537
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16538
"encrypted connection such as <application>scp</application>, or on physical "
16539
"media."
16540
msgstr ""
16541
16542
#: serverguide/C/network-auth.xml:3055(command)
16543
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16544
msgstr ""
16545
16546
#: serverguide/C/network-auth.xml:3056(command)
16547
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16548
msgstr ""
16549
16550
#: serverguide/C/network-auth.xml:3060(para)
16551
msgid ""
16552
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16553
msgstr ""
16554
16555
#: serverguide/C/network-auth.xml:3068(para)
16556
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16557
msgstr ""
16558
16559
#: serverguide/C/network-auth.xml:3079(para)
16560
msgid ""
16561
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16562
"you should be able to continue to authenticate users if one LDAP server, one "
16563
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16564
msgstr ""
16565
16566
#: serverguide/C/network-auth.xml:3091(para)
16567
msgid ""
16568
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16569
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16570
"Guide</ulink> has some additional details."
16571
msgstr ""
16572
16573
#: serverguide/C/network-auth.xml:3097(para)
16574
msgid ""
16575
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16576
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16577
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16578
"5.6</ulink> and the <ulink "
16579
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16580
"\">kdb5_ldap_util man page</ulink>."
16581
msgstr ""
16582
16583
#: serverguide/C/network-auth.xml:3105(para)
16584
msgid ""
16585
"Another useful link is the <ulink "
16586
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16587
"b5.conf man page</ulink>."
16588
msgstr ""
16589
16590
#: serverguide/C/network-auth.xml:3110(para)
16591
msgid ""
16592
"Also, see the <ulink "
16593
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16594
"and LDAP</ulink> Ubuntu wiki page."
16595
msgstr ""
16596
16597
#: serverguide/C/monitoring.xml:13(title)
16598
msgid "Monitoring"
16599
msgstr ""
16600
16601
#: serverguide/C/monitoring.xml:17(para)
16602
msgid ""
16603
"The monitoring of essential servers and services is an important part of "
16604
"system administration. Most network services are monitored for performance, "
16605
"availability, or both. This section will cover installation and "
16606
"configuration of <application>Nagios</application> for availability "
16607
"monitoring, and <application>Munin</application> for performance monitoring."
16608
msgstr ""
16609
16610
#: serverguide/C/monitoring.xml:24(para)
16611
msgid ""
16612
"The examples in this section will use two servers with hostnames "
16613
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16614
"<emphasis>Server01</emphasis> will be configured with "
16615
"<application>Nagios</application> to monitor services on itself and "
16616
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16617
"<application>munin</application> package to gather information from the "
16618
"network. Using the <application>munin-node</application> package, "
16619
"<emphasis>server02</emphasis> will be configured to send information to "
16620
"<emphasis>server01</emphasis>."
16621
msgstr ""
16622
16623
#: serverguide/C/monitoring.xml:33(para)
16624
msgid ""
16625
"Hopefully these simple examples will allow you to monitor additional servers "
16626
"and services on your network."
16627
msgstr ""
16628
16629
#: serverguide/C/monitoring.xml:39(title)
16630
msgid "Nagios"
16631
msgstr ""
16632
16633
#: serverguide/C/monitoring.xml:44(para)
16634
msgid ""
16635
"First, on <emphasis>server01</emphasis> install the "
16636
"<application>nagios</application> package. In a terminal enter:"
16637
msgstr ""
16638
16639
#: serverguide/C/monitoring.xml:50(command)
16640
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16641
msgstr ""
16642
16643
#: serverguide/C/monitoring.xml:53(para)
16644
msgid ""
16645
"You will be asked to enter a password for the "
16646
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16647
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16648
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16649
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16650
"of the <application>apache2-utils</application> package."
16651
msgstr ""
16652
16653
#: serverguide/C/monitoring.xml:60(para)
16654
msgid ""
16655
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16656
"user enter:"
16657
msgstr ""
16658
16659
#: serverguide/C/monitoring.xml:65(command)
16660
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16661
msgstr ""
16662
16663
#: serverguide/C/monitoring.xml:68(para)
16664
msgid "To add a user:"
16665
msgstr ""
16666
16667
#: serverguide/C/monitoring.xml:73(command)
16668
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16669
msgstr ""
16670
16671
#: serverguide/C/monitoring.xml:76(para)
16672
msgid ""
16673
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16674
"server</application> package. From a terminal on server02 enter:"
16675
msgstr ""
16676
16677
#: serverguide/C/monitoring.xml:82(command)
16678
msgid "sudo apt-get install nagios-nrpe-server"
16679
msgstr ""
16680
16681
#: serverguide/C/monitoring.xml:86(para)
16682
msgid ""
16683
"<application>NRPE</application> allows you to execute local checks on remote "
16684
"hosts. There are other ways of accomplishing this through other Nagios "
16685
"plugins as well as other checks."
16686
msgstr ""
16687
16688
#: serverguide/C/monitoring.xml:94(title)
16689
msgid "Configuration Overview"
16690
msgstr ""
16691
16692
#: serverguide/C/monitoring.xml:96(para)
16693
msgid ""
16694
"There are a couple of directories containing "
16695
"<application>Nagios</application> configuration and check files."
16696
msgstr ""
16697
16698
#: serverguide/C/monitoring.xml:102(para)
16699
msgid ""
16700
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16701
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16702
"etc."
16703
msgstr ""
16704
16705
#: serverguide/C/monitoring.xml:108(para)
16706
msgid ""
16707
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16708
"service checks."
16709
msgstr ""
16710
16711
#: serverguide/C/monitoring.xml:113(para)
16712
msgid ""
16713
"<filename>/etc/nagios</filename>: on the remote host contains the "
16714
"<application>nagios-nrpe-server</application> configuration files."
16715
msgstr ""
16716
16717
#: serverguide/C/monitoring.xml:118(para)
16718
msgid ""
16719
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16720
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16721
msgstr ""
16722
16723
#: serverguide/C/monitoring.xml:123(para)
16724
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16725
msgstr ""
16726
16727
#: serverguide/C/monitoring.xml:129(para)
16728
msgid ""
16729
"There are a plethora of checks <application>Nagios</application> can be "
16730
"configured to execute for any given host. For this example Nagios will be "
16731
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16732
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16733
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16734
msgstr ""
16735
16736
#: serverguide/C/monitoring.xml:136(para)
16737
msgid ""
16738
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16739
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16740
msgstr ""
16741
16742
#: serverguide/C/monitoring.xml:141(para)
16743
msgid ""
16744
"Additionally, there are some terms that once explained will hopefully make "
16745
"understanding Nagios configuration easier:"
16746
msgstr ""
16747
16748
#: serverguide/C/monitoring.xml:147(para)
16749
msgid ""
16750
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16751
"is being monitored."
16752
msgstr ""
16753
16754
#: serverguide/C/monitoring.xml:152(para)
16755
msgid ""
16756
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16757
"could group all web servers, file server, etc."
16758
msgstr ""
16759
16760
#: serverguide/C/monitoring.xml:157(para)
16761
msgid ""
16762
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16763
"as HTTP, DNS, NFS, etc."
16764
msgstr ""
16765
16766
#: serverguide/C/monitoring.xml:162(para)
16767
msgid ""
16768
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16769
"together. This is useful for grouping multiple HTTP for example."
16770
msgstr ""
16771
16772
#: serverguide/C/monitoring.xml:168(para)
16773
msgid ""
16774
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16775
"place. Nagios can be configured to send emails, SMS messages, etc."
16776
msgstr ""
16777
16778
#: serverguide/C/monitoring.xml:174(para)
16779
msgid ""
16780
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16781
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16782
"will also <application>ping</application> check the "
16783
"<emphasis>gateway</emphasis>."
16784
msgstr ""
16785
16786
#: serverguide/C/monitoring.xml:179(para)
16787
msgid ""
16788
"Large Nagios installations can be quite complex to configure. It is usually "
16789
"best to start small, one or two hosts, get things configured the way you "
16790
"like then expand."
16791
msgstr ""
16792
16793
#: serverguide/C/monitoring.xml:194(para)
16794
msgid ""
16795
"First, create a <emphasis>host</emphasis> configuration file for "
16796
"<emphasis>server02</emphasis>. In a terminal enter:"
16797
msgstr ""
16798
16799
#: serverguide/C/monitoring.xml:199(command)
16800
msgid ""
16801
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16802
"/etc/nagios3/conf.d/server02.cfg"
16803
msgstr ""
16804
16805
#: serverguide/C/monitoring.xml:203(para)
16806
msgid ""
16807
"In the above and following command examples, replace "
16808
"<emphasis>\"server01\"</emphasis>, "
16809
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16810
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16811
"your servers."
16812
msgstr ""
16813
16814
#: serverguide/C/monitoring.xml:212(para)
16815
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16816
msgstr ""
16817
16818
#: serverguide/C/monitoring.xml:216(programlisting)
16819
#, no-wrap
16820
msgid ""
16821
"\n"
16822
"define host{\n"
16823
" use generic-host ; Name of host "
16824
"template to use\n"
16825
" host_name server02\n"
16826
" alias Server 02\n"
16827
" address 172.18.100.101\n"
16828
"}\n"
16829
"\n"
16830
"# check DNS service.\n"
16831
"define service {\n"
16832
" use generic-service\n"
16833
" host_name server02\n"
16834
" service_description DNS\n"
16835
" check_command check_dns!172.18.100.101\n"
16836
"}\n"
16837
msgstr ""
16838
16839
#: serverguide/C/monitoring.xml:236(para)
16840
msgid ""
16841
"Restart the <application>nagios</application> daemon to enable the new "
16842
"configuration:"
16843
msgstr ""
16844
16845
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16846
msgid "sudo /etc/init.d/nagios3 restart"
16847
msgstr ""
16848
16849
#: serverguide/C/monitoring.xml:251(para)
16850
msgid ""
16851
"Now add a service definition for the MySQL check by adding the following to "
16852
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16853
msgstr ""
16854
16855
#: serverguide/C/monitoring.xml:255(programlisting)
16856
#, no-wrap
16857
msgid ""
16858
"\n"
16859
"# check MySQL servers.\n"
16860
"define service {\n"
16861
" hostgroup_name mysql-servers\n"
16862
" service_description MySQL\n"
16863
" check_command "
16864
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16865
" use generic-service\n"
16866
" notification_interval 0 ; set > 0 if you want to be "
16867
"renotified\n"
16868
"}\n"
16869
msgstr ""
16870
16871
#: serverguide/C/monitoring.xml:269(para)
16872
msgid ""
16873
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16874
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16875
msgstr ""
16876
16877
#: serverguide/C/monitoring.xml:274(programlisting)
16878
#, no-wrap
16879
msgid ""
16880
"\n"
16881
"# MySQL hostgroup.\n"
16882
"define hostgroup {\n"
16883
" hostgroup_name mysql-servers\n"
16884
" alias MySQL servers\n"
16885
" members localhost, server02\n"
16886
" }\n"
16887
msgstr ""
16888
16889
#: serverguide/C/monitoring.xml:286(para)
16890
msgid ""
16891
"The Nagios check needs to authenticate to MySQL. To add a "
16892
"<emphasis>nagios</emphasis> user to MySQL enter:"
16893
msgstr ""
16894
16895
#: serverguide/C/monitoring.xml:291(command)
16896
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16897
msgstr ""
16898
16899
#: serverguide/C/monitoring.xml:295(para)
16900
msgid ""
16901
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16902
"<emphasis>mysql-servers</emphasis> hostgroup."
16903
msgstr ""
16904
16905
#: serverguide/C/monitoring.xml:303(para)
16906
msgid ""
16907
"Restart <application>nagios</application> to start checking the MySQL "
16908
"servers."
16909
msgstr ""
16910
16911
#: serverguide/C/monitoring.xml:318(para)
16912
msgid ""
16913
"Lastly configure NRPE to check the disk space on "
16914
"<emphasis>server02</emphasis>."
16915
msgstr ""
16916
16917
#: serverguide/C/monitoring.xml:322(para)
16918
msgid ""
16919
"On <emphasis>server01</emphasis> add the service check to "
16920
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16921
msgstr ""
16922
16923
#: serverguide/C/monitoring.xml:327(programlisting)
16924
#, no-wrap
16925
msgid ""
16926
"\n"
16927
"# NRPE disk check.\n"
16928
"define service {\n"
16929
" use generic-service\n"
16930
" host_name server02\n"
16931
" service_description nrpe-disk\n"
16932
" check_command "
16933
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16934
"}\n"
16935
msgstr ""
16936
"\n"
16937
"# NRPE disk check.\n"
16938
"define service {\n"
16939
" use generic-service\n"
16940
" host_name server02\n"
16941
" service_description nrpe-disk\n"
16942
" check_command "
16943
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16944
"}\n"
16945
16946
#: serverguide/C/monitoring.xml:340(para)
16947
msgid ""
16948
"Now on <emphasis>server02</emphasis> edit "
16949
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16950
msgstr ""
16951
"Agora en <emphasis>server02</emphasis> edita "
16952
"<filename>/etc/nagios/nrpe.cfg</filename> camudando:"
16953
16954
#: serverguide/C/monitoring.xml:344(programlisting)
16955
#, no-wrap
16956
msgid ""
16957
"\n"
16958
"allowed_hosts=172.18.100.100\n"
16959
msgstr ""
16960
"\n"
16961
"allowed_hosts=172.18.100.100\n"
16962
16963
#: serverguide/C/monitoring.xml:348(para)
16964
msgid "And below in the command definition area add:"
16965
msgstr ""
16966
16967
#: serverguide/C/monitoring.xml:352(programlisting)
16968
#, no-wrap
16969
msgid ""
16970
"\n"
16971
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16972
"e\n"
16973
msgstr ""
16974
"\n"
16975
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16976
"e\n"
16977
16978
#: serverguide/C/monitoring.xml:359(para)
16979
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16980
msgstr ""
16981
"P'acabar, vuelvi arrancar <application>nagios-nrpe-server</application>:"
16982
16983
#: serverguide/C/monitoring.xml:364(command)
16984
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16985
msgstr "sudo /etc/init.d/nagios-nrpe-server restart"
16986
16987
#: serverguide/C/monitoring.xml:370(para)
16988
msgid ""
16989
"Also, on <emphasis>server01</emphasis> restart "
16990
"<application>nagios</application>:"
16991
msgstr ""
16992
"Tamién, en <emphasis>server01</emphasis> rearranca "
16993
"<application>nagios</application>:"
16994
16995
#: serverguide/C/monitoring.xml:383(para)
16996
msgid ""
16997
"You should now be able to see the host and service checks in the Nagios CGI "
16998
"files. To access them point a browser to http://server01/nagios3. You will "
16999
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
17000
"password."
17001
msgstr ""
17002
17003
#: serverguide/C/monitoring.xml:393(para)
17004
msgid ""
17005
"This section has just scratched the surface of Nagios' features. The "
17006
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
17007
"plugins</application> contain many more service checks."
17008
msgstr ""
17009
17010
#: serverguide/C/monitoring.xml:400(para)
17011
msgid ""
17012
"For more information see <ulink "
17013
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
17014
msgstr ""
17015
17016
#: serverguide/C/monitoring.xml:405(para)
17017
msgid ""
17018
"Specifically the <ulink "
17019
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
17020
"site."
17021
msgstr ""
17022
17023
#: serverguide/C/monitoring.xml:410(para)
17024
msgid ""
17025
"There is also a list of <ulink "
17026
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
17027
"Nagios and network monitoring:"
17028
msgstr ""
17029
17030
#: serverguide/C/monitoring.xml:416(para)
17031
msgid ""
17032
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
17033
"Wiki</ulink> page also has more details."
17034
msgstr ""
17035
17036
#: serverguide/C/monitoring.xml:425(title)
17037
msgid "Munin"
17038
msgstr ""
17039
17040
#: serverguide/C/monitoring.xml:430(para)
17041
msgid ""
17042
"Before installing <application>Munin</application> on "
17043
"<emphasis>server01</emphasis><application>apache2</application> will need to "
17044
"be installed. The default configuration is fine for running a "
17045
"<application>munin</application> server. For more information see <xref "
17046
"linkend=\"httpd\"/>."
17047
msgstr ""
17048
17049
#: serverguide/C/monitoring.xml:436(para)
17050
msgid ""
17051
"First, on <emphasis>server01</emphasis> install "
17052
"<application>munin</application>. In a terminal enter:"
17053
msgstr ""
17054
17055
#: serverguide/C/monitoring.xml:441(command)
17056
msgid "sudo apt-get install munin"
17057
msgstr ""
17058
17059
#: serverguide/C/monitoring.xml:444(para)
17060
msgid ""
17061
"Now on <emphasis>server02</emphasis> install the <application>munin-"
17062
"node</application> package:"
17063
msgstr ""
17064
17065
#: serverguide/C/monitoring.xml:449(command)
17066
msgid "sudo apt-get install munin-node"
17067
msgstr "sudo apt-get install munin-node"
17068
17069
#: serverguide/C/monitoring.xml:456(para)
17070
msgid ""
17071
"On <emphasis>server01</emphasis> edit the "
17072
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
17073
"<emphasis>server02</emphasis>:"
17074
msgstr ""
17075
"En <emphasis>server01</emphasis> edita "
17076
"<filename>/etc/munin/munin.conf</filename> amestando la direición IP de "
17077
"<emphasis>server02</emphasis>:"
17078
17079
#: serverguide/C/monitoring.xml:461(programlisting)
17080
#, no-wrap
17081
msgid ""
17082
"\n"
17083
"## First our \"normal\" host.\n"
17084
"[server02]\n"
17085
" address 172.18.100.101\n"
17086
msgstr ""
17087
"\n"
17088
"## First our \"normal\" host.\n"
17089
"[server02]\n"
17090
" address 172.18.100.101\n"
17091
17092
#: serverguide/C/monitoring.xml:468(para)
17093
msgid ""
17094
"Replace <emphasis>server02</emphasis> and "
17095
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
17096
"for your server."
17097
msgstr ""
17098
17099
#: serverguide/C/monitoring.xml:474(para)
17100
msgid ""
17101
"Next, configure <application>munin-node</application> on "
17102
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
17103
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
17104
msgstr ""
17105
17106
#: serverguide/C/monitoring.xml:479(programlisting)
17107
#, no-wrap
17108
msgid ""
17109
"\n"
17110
"allow ^172\\.18\\.100\\.100$\n"
17111
msgstr ""
17112
"\n"
17113
"allow ^172\\.18\\.100\\.100$\n"
17114
17115
#: serverguide/C/monitoring.xml:484(para)
17116
msgid ""
17117
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
17118
"<application>munin</application> server."
17119
msgstr ""
17120
17121
#: serverguide/C/monitoring.xml:489(para)
17122
msgid ""
17123
"Now restart <application>munin-node</application> on "
17124
"<emphasis>server02</emphasis> for the changes to take effect:"
17125
msgstr ""
17126
17127
#: serverguide/C/monitoring.xml:494(command)
17128
msgid "sudo /etc/init.d/munin-node restart"
17129
msgstr "sudo /etc/init.d/munin-node restart"
17130
17131
#: serverguide/C/monitoring.xml:497(para)
17132
msgid ""
17133
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
17134
"you should see links to nice graphs displaying information from the standard "
17135
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
17136
msgstr ""
17137
17138
#: serverguide/C/monitoring.xml:503(para)
17139
msgid ""
17140
"Since this is a new install it may take some time for the graphs to display "
17141
"anything useful."
17142
msgstr ""
17143
17144
#: serverguide/C/monitoring.xml:510(title)
17145
msgid "Additional Plugins"
17146
msgstr ""
17147
17148
#: serverguide/C/monitoring.xml:512(para)
17149
msgid ""
17150
"The <application>munin-plugins-extra</application> package contains "
17151
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
17152
"install the package, from a terminal enter:"
17153
msgstr ""
17154
17155
#: serverguide/C/monitoring.xml:518(command)
17156
msgid "sudo apt-get install munin-plugins-extra"
17157
msgstr ""
17158
17159
#: serverguide/C/monitoring.xml:521(para)
17160
msgid "Be sure to install the package on both the server and node machines."
17161
msgstr ""
17162
17163
#: serverguide/C/monitoring.xml:531(para)
17164
msgid ""
17165
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
17166
"website for more details."
17167
msgstr ""
17168
17169
#: serverguide/C/monitoring.xml:536(para)
17170
msgid ""
17171
"Specifically the <ulink "
17172
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
17173
"Documentation</ulink> page includes information on additional plugins, "
17174
"writing plugins, etc."
17175
msgstr ""
17176
17177
#: serverguide/C/monitoring.xml:542(para)
17178
msgid ""
17179
"Also, there is a book in German by Open Source Press: <ulink "
17180
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
17181
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
17182
msgstr ""
17183
17184
#: serverguide/C/monitoring.xml:548(para)
17185
msgid ""
17186
"Another resource is the <ulink "
17187
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
17188
"page."
17189
msgstr ""
17190
17191
#: serverguide/C/mail.xml:13(title)
17192
msgid "Email Services"
17193
msgstr ""
17194
17195
#: serverguide/C/mail.xml:14(para)
17196
msgid ""
17197
"The process of getting an email from one person to another over a network or "
17198
"the Internet involves many systems working together. Each of these systems "
17199
"must be correctly configured for the process to work. The sender uses a "
17200
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
17201
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
17202
"the last of which will hand it off to a <emphasis>Mail Delivery "
17203
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
17204
"it will be retrieved by the recipient's email client, usually via a POP3 or "
17205
"IMAP server."
17206
msgstr ""
17207
17208
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
17209
msgid "Postfix"
17210
msgstr ""
17211
17212
#: serverguide/C/mail.xml:25(para)
17213
msgid ""
17214
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
17215
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
17216
"compatible with the MTA <application>sendmail</application>. This section "
17217
"explains how to install and configure <application>postfix</application>. It "
17218
"also explains how to set it up as an SMTP server using a secure connection "
17219
"(for sending emails securely)."
17220
msgstr ""
17221
17222
#: serverguide/C/mail.xml:34(para)
17223
msgid ""
17224
"This guide does not cover setting up Postfix <emphasis>Virtual "
17225
"Domains</emphasis>, for information on Virtual Domains and other advanced "
17226
"configurations see <xref linkend=\"postfix-references\"/>."
17227
msgstr ""
17228
17229
#: serverguide/C/mail.xml:41(para)
17230
msgid ""
17231
"To install <application>postfix</application> run the following command:"
17232
msgstr ""
17233
17234
#: serverguide/C/mail.xml:47(para)
17235
msgid ""
17236
"Simply press return when the installation process asks questions, the "
17237
"configuration will be done in greater detail in the next stage."
17238
msgstr ""
17239
17240
#: serverguide/C/mail.xml:52(title)
17241
msgid "Basic Configuration"
17242
msgstr "Configuración básica"
17243
17244
#: serverguide/C/mail.xml:53(para)
17245
msgid ""
17246
"To configure <application>postfix</application>, run the following command:"
17247
msgstr ""
17248
17249
#: serverguide/C/mail.xml:57(command)
17250
msgid "sudo dpkg-reconfigure postfix"
17251
msgstr "sudo dpkg-reconfigure postfix"
17252
17253
#: serverguide/C/mail.xml:63(para)
17254
msgid "Internet Site"
17255
msgstr "Sitiu d'Internet"
17256
17257
#: serverguide/C/mail.xml:64(para)
17258
msgid "mail.example.com"
17259
msgstr "mail.example.com"
17260
17261
#: serverguide/C/mail.xml:65(para)
17262
msgid "steve"
17263
msgstr "steve"
17264
17265
#: serverguide/C/mail.xml:66(para)
17266
msgid "mail.example.com, localhost.localdomain, localhost"
17267
msgstr "mail.example.com, localhost.localdomain, localhost"
17268
17269
#: serverguide/C/mail.xml:67(para)
17270
msgid "No"
17271
msgstr "Non"
17272
17273
#: serverguide/C/mail.xml:68(para)
17274
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
17275
msgstr ""
17276
17277
#: serverguide/C/mail.xml:69(para)
17278
msgid "0"
17279
msgstr ""
17280
17281
#: serverguide/C/mail.xml:70(para)
17282
msgid "+"
17283
msgstr ""
17284
17285
#: serverguide/C/mail.xml:71(para)
17286
msgid "all"
17287
msgstr ""
17288
17289
#: serverguide/C/mail.xml:59(para)
17290
msgid ""
17291
"The user interface will be displayed. On each screen, select the following "
17292
"values: <placeholder-1/>"
17293
msgstr ""
17294
17295
#: serverguide/C/mail.xml:75(para)
17296
msgid ""
17297
"Replace mail.example.com with the domain for which you'll accept email, "
17298
"192.168.0.0/24 with the actual network and class range of your mail server, "
17299
"and steve with the appropriate username."
17300
msgstr ""
17301
17302
#: serverguide/C/mail.xml:81(para)
17303
msgid ""
17304
"Now is a good time to decide which mailbox format you want to use. By "
17305
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
17306
"mailbox format. Rather than editing the configuration file directly, you can "
17307
"use the <command>postconf</command> command to configure all "
17308
"<application>postfix</application> parameters. The configuration parameters "
17309
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
17310
"you wish to re-configure a particular parameter, you can either run the "
17311
"command or change it manually in the file."
17312
msgstr ""
17313
17314
#: serverguide/C/mail.xml:92(para)
17315
msgid ""
17316
"To configure the mailbox format for <emphasis "
17317
"role=\"strong\">Maildir:</emphasis>"
17318
msgstr ""
17319
17320
#: serverguide/C/mail.xml:97(command)
17321
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
17322
msgstr "sudo postconf -e 'home_mailbox = Maildir/'"
17323
17324
#: serverguide/C/mail.xml:100(para)
17325
msgid ""
17326
"This will place new mail in /home/<emphasis "
17327
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
17328
"your Mail Delivery Agent (MDA) to use the same path."
17329
msgstr ""
17330
17331
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17332
msgid "SMTP Authentication"
17333
msgstr "Autentificación SMTP"
17334
17335
#: serverguide/C/mail.xml:110(para)
17336
msgid ""
17337
"SMTP-AUTH allows a client to identify itself through an authentication "
17338
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17339
"the authentication process. Once authenticated the SMTP server will allow "
17340
"the client to relay mail."
17341
msgstr ""
17342
17343
#: serverguide/C/mail.xml:117(para)
17344
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17345
msgstr "Configura Postfix pa SMTP-AUTH usando SASL (Dovecot SASL):"
17346
17347
#: serverguide/C/mail.xml:120(screen)
17348
#, no-wrap
17349
msgid ""
17350
"\n"
17351
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17352
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17353
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17354
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17355
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17356
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17357
"sudo postconf -e 'smtpd_recipient_restrictions = "
17358
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17359
"sudo postconf -e 'inet_interfaces = all'\n"
17360
msgstr ""
17361
"\n"
17362
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17363
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17364
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17365
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17366
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17367
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17368
"sudo postconf -e 'smtpd_recipient_restrictions = "
17369
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17370
"sudo postconf -e 'inet_interfaces = all'\n"
17371
17372
#: serverguide/C/mail.xml:131(para)
17373
msgid ""
17374
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17375
"the Postfix queue directory."
17376
msgstr ""
17377
"La configuración de <emphasis>smtpd_sasl_path</emphasis> ye un camín que "
17378
"cinca'l direutoriu de coles de Postfix."
17379
17380
#: serverguide/C/mail.xml:137(para)
17381
msgid ""
17382
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17383
"and-security\"/> for details. This example also uses a Certificate Authority "
17384
"(CA). For information on generating a CA certificate see <xref "
17385
"linkend=\"certificate-authority\"/>."
17386
msgstr ""
17387
17388
#: serverguide/C/mail.xml:143(para)
17389
msgid ""
17390
"You can get the digital certificate from a certificate authority. But unlike "
17391
"web clients, SMTP clients rarely complain about \"self-signed "
17392
"certificates\", so alternatively, you can create the certificate yourself. "
17393
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17394
"details."
17395
msgstr ""
17396
17397
#: serverguide/C/mail.xml:155(para)
17398
msgid ""
17399
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17400
"both incoming and outgoing mail:"
17401
msgstr ""
17402
17403
#: serverguide/C/mail.xml:158(screen)
17404
#, no-wrap
17405
msgid ""
17406
"\n"
17407
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17408
"sudo postconf -e 'smtp_use_tls = yes'\n"
17409
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17410
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17411
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17412
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17413
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17414
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17415
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17416
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17417
"sudo postconf -e 'myhostname = mail.example.com'\n"
17418
msgstr ""
17419
17420
#: serverguide/C/mail.xml:173(para)
17421
msgid ""
17422
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17423
"the certificate enter:"
17424
msgstr ""
17425
17426
#: serverguide/C/mail.xml:177(command)
17427
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17428
msgstr ""
17429
17430
#: serverguide/C/mail.xml:180(para)
17431
msgid ""
17432
"Again, for more details about certificates see <xref linkend=\"certificates-"
17433
"and-security\"/>."
17434
msgstr ""
17435
17436
#: serverguide/C/mail.xml:186(para)
17437
msgid ""
17438
"After running all the commands, <application>Postfix</application> is "
17439
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17440
"TLS encryption."
17441
msgstr ""
17442
17443
#: serverguide/C/mail.xml:191(para)
17444
msgid ""
17445
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17446
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17447
msgstr ""
17448
17449
#: serverguide/C/mail.xml:195(para)
17450
msgid ""
17451
"The postfix initial configuration is complete. Run the following command to "
17452
"restart the postfix daemon:"
17453
msgstr ""
17454
17455
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17456
msgid "sudo /etc/init.d/postfix restart"
17457
msgstr ""
17458
17459
#: serverguide/C/mail.xml:204(para)
17460
msgid ""
17461
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17462
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17463
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17464
"However it is still necessary to set up SASL authentication before you can "
17465
"use SMTP-AUTH."
17466
msgstr ""
17467
17468
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17469
msgid "Configuring SASL"
17470
msgstr "Configuración de SASL"
17471
17472
#: serverguide/C/mail.xml:215(para)
17473
msgid ""
17474
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17475
"enable Dovecot SASL the <application>dovecot-common</application> package "
17476
"will need to be installed. From a terminal prompt enter the following:"
17477
msgstr ""
17478
17479
#: serverguide/C/mail.xml:221(command)
17480
msgid "sudo apt-get install dovecot-common"
17481
msgstr "sudo apt-get install dovecot-common"
17482
17483
#: serverguide/C/mail.xml:223(para)
17484
msgid ""
17485
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17486
"In the <emphasis>auth default</emphasis> section uncomment the "
17487
"<emphasis>socket listen</emphasis> option and change the following:"
17488
msgstr ""
17489
17490
#: serverguide/C/mail.xml:227(programlisting)
17491
#, no-wrap
17492
msgid ""
17493
"\n"
17494
" socket listen {\n"
17495
" #master {\n"
17496
" # Master socket provides access to userdb information. It's typically\n"
17497
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17498
" # can find mailbox locations.\n"
17499
" #path = /var/run/dovecot/auth-master\n"
17500
" #mode = 0600\n"
17501
" # Default user/group is the one who started dovecot-auth (root)\n"
17502
" #user = \n"
17503
" #group = \n"
17504
" #}\n"
17505
" client {\n"
17506
" # The client socket is generally safe to export to everyone. Typical "
17507
"use\n"
17508
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17509
" # using it.\n"
17510
" path = /var/spool/postfix/private/auth-client\n"
17511
" mode = 0660\n"
17512
" user = postfix\n"
17513
" group = postfix\n"
17514
" }\n"
17515
" }\n"
17516
msgstr ""
17517
"\n"
17518
" socket listen {\n"
17519
" #master {\n"
17520
" # Master socket provides access to userdb information. It's typically\n"
17521
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17522
" # can find mailbox locations.\n"
17523
" #path = /var/run/dovecot/auth-master\n"
17524
" #mode = 0600\n"
17525
" # Default user/group is the one who started dovecot-auth (root)\n"
17526
" #user = \n"
17527
" #group = \n"
17528
" #}\n"
17529
" client {\n"
17530
" # The client socket is generally safe to export to everyone. Typical "
17531
"use\n"
17532
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17533
" # using it.\n"
17534
" path = /var/spool/postfix/private/auth-client\n"
17535
" mode = 0660\n"
17536
" user = postfix\n"
17537
" group = postfix\n"
17538
" }\n"
17539
" }\n"
17540
17541
#: serverguide/C/mail.xml:251(para)
17542
msgid ""
17543
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17544
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17545
"add <emphasis>\"login\"</emphasis>:"
17546
msgstr ""
17547
17548
#: serverguide/C/mail.xml:256(programlisting)
17549
#, no-wrap
17550
msgid ""
17551
"\n"
17552
" mechanisms = plain login\n"
17553
msgstr ""
17554
"\n"
17555
" mechanisms = plain login\n"
17556
17557
#: serverguide/C/mail.xml:260(para)
17558
msgid ""
17559
"Once you have <application>Dovecot</application> configured restart it with:"
17560
msgstr ""
17561
"En teniendo <application>Dovecot</application> configuráu rearráncalu con:"
17562
17563
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17564
msgid "sudo /etc/init.d/dovecot restart"
17565
msgstr "sudo /etc/init.d/dovecot restart"
17566
17567
#: serverguide/C/mail.xml:269(title)
17568
msgid "Postfix-Dovecot"
17569
msgstr "Postfix-Dovecot"
17570
17571
#: serverguide/C/mail.xml:271(para)
17572
msgid ""
17573
"Another option for configuring <application>Postfix</application> for SMTP-"
17574
"AUTH is using the <application>dovecot-postfix</application> package. This "
17575
"package will install <application>Dovecot</application> and configure "
17576
"<application>Postfix</application> to use it for both SASL authentication "
17577
"and as a Mail Delivery Agent (MDA). The package also configures "
17578
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17579
msgstr ""
17580
17581
#: serverguide/C/mail.xml:280(para)
17582
msgid ""
17583
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17584
"server. For example, if you are configuring your server to be a mail "
17585
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17586
"the above commands to configure Postfix for SMTPAUTH."
17587
msgstr ""
17588
17589
#: serverguide/C/mail.xml:287(para)
17590
msgid "To install the package, from a terminal prompt enter:"
17591
msgstr ""
17592
17593
#: serverguide/C/mail.xml:292(command)
17594
msgid "sudo apt-get install dovecot-postfix"
17595
msgstr ""
17596
17597
#: serverguide/C/mail.xml:295(para)
17598
msgid ""
17599
"You should now have a working mail server, but there are a few options that "
17600
"you may wish to further customize. For example, the package uses the "
17601
"certificate and key from the <application>ssl-cert</application> package, "
17602
"and in a production environment you should use a certificate and key "
17603
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17604
"for more details."
17605
msgstr ""
17606
17607
#: serverguide/C/mail.xml:301(para)
17608
msgid ""
17609
"Once you have a customized certificate and key for the host, change the "
17610
"following options in <filename>/etc/postfix/main.cf</filename>:"
17611
msgstr ""
17612
17613
#: serverguide/C/mail.xml:305(programlisting)
17614
#, no-wrap
17615
msgid ""
17616
"\n"
17617
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17618
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17619
msgstr ""
17620
17621
#: serverguide/C/mail.xml:310(para)
17622
msgid "Then restart Postfix:"
17623
msgstr ""
17624
17625
#: serverguide/C/mail.xml:321(para)
17626
msgid ""
17627
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17628
msgstr ""
17629
17630
#: serverguide/C/mail.xml:324(para)
17631
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17632
msgstr ""
17633
17634
#: serverguide/C/mail.xml:329(command)
17635
msgid "telnet mail.example.com 25"
17636
msgstr ""
17637
17638
#: serverguide/C/mail.xml:331(para)
17639
msgid ""
17640
"After you have established the connection to the postfix mail server, type:"
17641
msgstr ""
17642
17643
#: serverguide/C/mail.xml:335(screen)
17644
#, no-wrap
17645
msgid ""
17646
"\n"
17647
"ehlo mail.example.com\n"
17648
msgstr ""
17649
"\n"
17650
"ehlo mail.example.com\n"
17651
17652
#: serverguide/C/mail.xml:338(para)
17653
msgid ""
17654
"If you see the following lines among others, then everything is working "
17655
"perfectly. Type <command>quit</command> to exit."
17656
msgstr ""
17657
17658
#: serverguide/C/mail.xml:342(programlisting)
17659
#, no-wrap
17660
msgid ""
17661
"\n"
17662
"250-STARTTLS\n"
17663
"250-AUTH LOGIN PLAIN\n"
17664
"250-AUTH=LOGIN PLAIN\n"
17665
"250 8BITMIME\n"
17666
msgstr ""
17667
"\n"
17668
"250-STARTTLS\n"
17669
"250-AUTH LOGIN PLAIN\n"
17670
"250-AUTH=LOGIN PLAIN\n"
17671
"250 8BITMIME\n"
17672
17673
#: serverguide/C/mail.xml:352(para)
17674
msgid ""
17675
"This section introduces some common ways to determine the cause if problems "
17676
"arise."
17677
msgstr ""
17678
17679
#: serverguide/C/mail.xml:356(title)
17680
msgid "Escaping chroot"
17681
msgstr "Colando de chroot"
17682
17683
#: serverguide/C/mail.xml:357(para)
17684
msgid ""
17685
"The Ubuntu <application>postfix</application> package will by default "
17686
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17687
"This can add greater complexity when troubleshooting problems."
17688
msgstr ""
17689
17690
#: serverguide/C/mail.xml:361(para)
17691
msgid ""
17692
"To turn off the chroot operation locate for the following line in the "
17693
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17694
msgstr ""
17695
17696
#: serverguide/C/mail.xml:365(screen)
17697
#, no-wrap
17698
msgid ""
17699
"\n"
17700
"smtp inet n - - - - smtpd\n"
17701
msgstr ""
17702
"\n"
17703
"smtp inet n - - - - smtpd\n"
17704
17705
#: serverguide/C/mail.xml:368(para)
17706
msgid "and modify it as follows:"
17707
msgstr ""
17708
17709
#: serverguide/C/mail.xml:371(screen)
17710
#, no-wrap
17711
msgid ""
17712
"\n"
17713
"smtp inet n - n - - smtpd\n"
17714
msgstr ""
17715
"\n"
17716
"smtp inet n - n - - smtpd\n"
17717
17718
#: serverguide/C/mail.xml:374(para)
17719
msgid ""
17720
"You will then need to restart Postfix to use the new configuration. From a "
17721
"terminal prompt enter:"
17722
msgstr ""
17723
17724
#: serverguide/C/mail.xml:382(title)
17725
msgid "Log Files"
17726
msgstr ""
17727
17728
#: serverguide/C/mail.xml:383(para)
17729
msgid ""
17730
"<application>Postfix</application> sends all log messages to "
17731
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17732
"can sometimes get lost in the normal log output so they are also logged to "
17733
"<filename>/var/log/mail.err</filename> and "
17734
"<filename>/var/log/mail.warn</filename> respectively."
17735
msgstr ""
17736
17737
#: serverguide/C/mail.xml:388(para)
17738
msgid ""
17739
"To see messages entered into the logs in real time you can use the "
17740
"<application>tail -f</application> command:"
17741
msgstr ""
17742
17743
#: serverguide/C/mail.xml:393(command)
17744
msgid "tail -f /var/log/mail.err"
17745
msgstr ""
17746
17747
#: serverguide/C/mail.xml:395(para)
17748
msgid ""
17749
"The amount of detail that is recorded in the logs can be increased. Below "
17750
"are some configuration options for increasing the log level for some of the "
17751
"areas covered above."
17752
msgstr ""
17753
17754
#: serverguide/C/mail.xml:401(para)
17755
msgid ""
17756
"To increase <emphasis>TLS</emphasis> activity logging set the "
17757
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17758
msgstr ""
17759
17760
#: serverguide/C/mail.xml:405(command)
17761
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17762
msgstr "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17763
17764
#: serverguide/C/mail.xml:409(para)
17765
msgid ""
17766
"If you are having trouble sending or receiving mail from a specific domain "
17767
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17768
msgstr ""
17769
17770
#: serverguide/C/mail.xml:414(command)
17771
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17772
msgstr "sudo postconf -e 'debug_peer_list = problem.domain'"
17773
17774
#: serverguide/C/mail.xml:418(para)
17775
msgid ""
17776
"You can increase the verbosity of any <application>Postfix</application> "
17777
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17778
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17779
"<emphasis>smtp</emphasis> entry:"
17780
msgstr ""
17781
17782
#: serverguide/C/mail.xml:422(programlisting)
17783
#, no-wrap
17784
msgid ""
17785
"\n"
17786
"smtp unix - - - - - smtp -v\n"
17787
msgstr ""
17788
"\n"
17789
"smtp unix - - - - - smtp -v\n"
17790
17791
#: serverguide/C/mail.xml:428(para)
17792
msgid ""
17793
"It is important to note that after making one of the logging changes above "
17794
"the <application>Postfix</application> process will need to be reloaded in "
17795
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17796
"reload</command>"
17797
msgstr ""
17798
17799
#: serverguide/C/mail.xml:435(para)
17800
msgid ""
17801
"To increase the amount of information logged when troubleshooting "
17802
"<emphasis>SASL</emphasis> issues you can set the following options in "
17803
"<filename>/etc/dovecot/dovecot.conf</filename>"
17804
msgstr ""
17805
17806
#: serverguide/C/mail.xml:439(programlisting)
17807
#, no-wrap
17808
msgid ""
17809
"\n"
17810
"auth_debug=yes\n"
17811
"auth_debug_passwords=yes\n"
17812
msgstr ""
17813
"\n"
17814
"auth_debug=yes\n"
17815
"auth_debug_passwords=yes\n"
17816
17817
#: serverguide/C/mail.xml:446(para)
17818
msgid ""
17819
"Just like <application>Postfix</application> if you change a "
17820
"<application>Dovecot</application> configuration the process will need to be "
17821
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17822
msgstr ""
17823
17824
#: serverguide/C/mail.xml:452(para)
17825
msgid ""
17826
"Some of the options above can drastically increase the amount of information "
17827
"sent to the log files. Remember to return the log level back to normal after "
17828
"you have corrected the problem. Then reload the appropriate daemon for the "
17829
"new configuration to take affect."
17830
msgstr ""
17831
17832
#: serverguide/C/mail.xml:460(para)
17833
msgid ""
17834
"Administering a <application>Postfix</application> server can be a very "
17835
"complicated task. At some point you may need to turn to the Ubuntu community "
17836
"for more experienced help."
17837
msgstr ""
17838
17839
#: serverguide/C/mail.xml:464(para)
17840
msgid ""
17841
"A great place to ask for <application>Postfix</application> assistance, and "
17842
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17843
"server</emphasis> IRC channel on <ulink "
17844
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17845
"one of the <ulink "
17846
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17847
msgstr ""
17848
17849
#: serverguide/C/mail.xml:469(para)
17850
msgid ""
17851
"For in depth <application>Postfix</application> information Ubuntu "
17852
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17853
"Book of Postfix</ulink>."
17854
msgstr ""
17855
17856
#: serverguide/C/mail.xml:473(para)
17857
msgid ""
17858
"Finally, the <ulink "
17859
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17860
"also has great documentation on all the different configuration options "
17861
"available."
17862
msgstr ""
17863
17864
#: serverguide/C/mail.xml:477(para)
17865
msgid ""
17866
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17867
"Wiki Postifx</ulink> page has more information."
17868
msgstr ""
17869
17870
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17871
msgid "Exim4"
17872
msgstr "Exim4"
17873
17874
#: serverguide/C/mail.xml:486(para)
17875
msgid ""
17876
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17877
"developed at the University of Cambridge for use on Unix systems connected "
17878
"to the Internet. Exim can be installed in place of "
17879
"<application>sendmail</application>, although the configuration of "
17880
"<application>exim</application> is quite different to that of "
17881
"<application>sendmail</application>."
17882
msgstr ""
17883
17884
#: serverguide/C/mail.xml:497(para)
17885
msgid ""
17886
"To install <application>exim4</application>, run the following command: "
17887
"<screen>\n"
17888
"<command>sudo apt-get install exim4</command>\n"
17889
"</screen>"
17890
msgstr ""
17891
17892
#: serverguide/C/mail.xml:506(para)
17893
msgid ""
17894
"To configure <application>Exim4</application>, run the following command:"
17895
msgstr ""
17896
17897
#: serverguide/C/mail.xml:510(command)
17898
msgid "sudo dpkg-reconfigure exim4-config"
17899
msgstr "sudo dpkg-reconfigure exim4-config"
17900
17901
#: serverguide/C/mail.xml:512(para)
17902
msgid ""
17903
"The user interface will be displayed. The user interface lets you configure "
17904
"many parameters. For example, In <application>Exim4</application> the "
17905
"configuration files are split among multiple files. If you wish to have them "
17906
"in one file you can configure accordingly in this user interface."
17907
msgstr ""
17908
17909
#: serverguide/C/mail.xml:520(para)
17910
msgid ""
17911
"All the parameters you configure in the user interface are stored in "
17912
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17913
"re-configure, either you re-run the configuration wizard or manually edit "
17914
"this file using your favorite editor. Once you configure, you can run the "
17915
"following command to generate the master configuration file:"
17916
msgstr ""
17917
17918
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17919
msgid "sudo update-exim4.conf"
17920
msgstr "sudo update-exim4.conf"
17921
17922
#: serverguide/C/mail.xml:533(para)
17923
msgid ""
17924
"The master configuration file, is generated and it is stored in "
17925
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17926
msgstr ""
17927
17928
#: serverguide/C/mail.xml:539(para)
17929
msgid ""
17930
"At any time, you should not edit the master configuration file, "
17931
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17932
"updated automatically every time you run <command>update-exim4.conf</command>"
17933
msgstr ""
17934
17935
#: serverguide/C/mail.xml:547(para)
17936
msgid ""
17937
"You can run the following command to start <application>Exim4</application> "
17938
"daemon."
17939
msgstr ""
17940
17941
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17942
msgid "sudo /etc/init.d/exim4 start"
17943
msgstr ""
17944
17945
#: serverguide/C/mail.xml:557(para)
17946
msgid ""
17947
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17948
msgstr ""
17949
17950
#: serverguide/C/mail.xml:560(para)
17951
msgid ""
17952
"The first step is to create a certificate for use with TLS. Enter the "
17953
"following into a terminal prompt:"
17954
msgstr ""
17955
17956
#: serverguide/C/mail.xml:564(command)
17957
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17958
msgstr ""
17959
17960
#: serverguide/C/mail.xml:566(para)
17961
msgid ""
17962
"Now Exim4 needs to be configured for TLS by editing "
17963
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17964
"the following:"
17965
msgstr ""
17966
17967
#: serverguide/C/mail.xml:570(programlisting)
17968
#, no-wrap
17969
msgid ""
17970
"\n"
17971
"MAIN_TLS_ENABLE = yes\n"
17972
msgstr ""
17973
17974
#: serverguide/C/mail.xml:573(para)
17975
msgid ""
17976
"Next you need to configure <application>Exim4</application> to use the "
17977
"<application>saslauthd</application> for authentication. Edit "
17978
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17979
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17980
"<emphasis>login_saslauthd_server</emphasis> sections:"
17981
msgstr ""
17982
17983
#: serverguide/C/mail.xml:578(programlisting)
17984
#, no-wrap
17985
msgid ""
17986
"\n"
17987
" plain_saslauthd_server:\n"
17988
" driver = plaintext\n"
17989
" public_name = PLAIN\n"
17990
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17991
" server_set_id = $auth2\n"
17992
" server_prompts = :\n"
17993
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17994
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17995
" .endif\n"
17996
"#\n"
17997
" login_saslauthd_server:\n"
17998
" driver = plaintext\n"
17999
" public_name = LOGIN\n"
18000
" server_prompts = \"Username:: : Password::\"\n"
18001
" # don't send system passwords over unencrypted connections\n"
18002
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
18003
" server_set_id = $auth1\n"
18004
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
18005
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
18006
" .endif\n"
18007
msgstr ""
18008
18009
#: serverguide/C/mail.xml:600(para)
18010
msgid "Finally, update the Exim4 configuration and restart the service:"
18011
msgstr ""
18012
18013
#: serverguide/C/mail.xml:605(command)
18014
msgid "sudo /etc/init.d/exim4 restart"
18015
msgstr "sudo /etc/init.d/exim4 restart"
18016
18017
#: serverguide/C/mail.xml:610(para)
18018
msgid ""
18019
"This section provides details on configuring the saslauthd to provide "
18020
"authentication for <application>Exim4</application>."
18021
msgstr ""
18022
18023
#: serverguide/C/mail.xml:613(para)
18024
msgid ""
18025
"The first step is to install the sasl2-bin package. From a terminal prompt "
18026
"enter the following:"
18027
msgstr ""
18028
18029
#: serverguide/C/mail.xml:617(command)
18030
msgid "sudo apt-get install sasl2-bin"
18031
msgstr "sudo apt-get install sasl2-bin"
18032
18033
#: serverguide/C/mail.xml:619(para)
18034
msgid ""
18035
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
18036
"and set START=no to:"
18037
msgstr ""
18038
18039
#: serverguide/C/mail.xml:622(programlisting)
18040
#, no-wrap
18041
msgid ""
18042
"\n"
18043
"START=yes\n"
18044
msgstr ""
18045
"\n"
18046
"START=yes\n"
18047
18048
#: serverguide/C/mail.xml:625(para)
18049
msgid ""
18050
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
18051
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
18052
"service:"
18053
msgstr ""
18054
18055
#: serverguide/C/mail.xml:630(command)
18056
msgid "sudo adduser Debian-exim sasl"
18057
msgstr "sudo adduser Debian-exim sasl"
18058
18059
#: serverguide/C/mail.xml:632(para)
18060
msgid "Now start the <application>saslauthd</application> service:"
18061
msgstr ""
18062
18063
#: serverguide/C/mail.xml:636(command)
18064
msgid "sudo /etc/init.d/saslauthd start"
18065
msgstr ""
18066
18067
#: serverguide/C/mail.xml:638(para)
18068
msgid ""
18069
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
18070
"and SASL authentication."
18071
msgstr ""
18072
18073
#: serverguide/C/mail.xml:647(para)
18074
msgid ""
18075
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
18076
"information."
18077
msgstr ""
18078
18079
#: serverguide/C/mail.xml:652(para)
18080
msgid ""
18081
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
18082
"server\">Exim4 Book</ulink> available."
18083
msgstr ""
18084
18085
#: serverguide/C/mail.xml:657(para)
18086
msgid ""
18087
"Another resource is the <ulink "
18088
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
18089
"page."
18090
msgstr ""
18091
18092
#: serverguide/C/mail.xml:666(title)
18093
msgid "Dovecot Server"
18094
msgstr ""
18095
18096
#: serverguide/C/mail.xml:667(para)
18097
msgid ""
18098
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
18099
"security primarily in mind. It supports the major mailbox formats: mbox or "
18100
"Maildir. This section explain how to set it up as an imap or pop3 server."
18101
msgstr ""
18102
18103
#: serverguide/C/mail.xml:675(para)
18104
msgid ""
18105
"To install <application>dovecot</application>, run the following command in "
18106
"the command prompt:"
18107
msgstr ""
18108
18109
#: serverguide/C/mail.xml:680(command)
18110
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
18111
msgstr "sudo apt-get install dovecot-imapd dovecot-pop3d"
18112
18113
#: serverguide/C/mail.xml:685(para)
18114
msgid ""
18115
"To configure <application>dovecot</application>, you can edit the file "
18116
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
18117
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
18118
"secure). A description of these protocols is beyond the scope of this guide. "
18119
"For further information, refer to the Wikipedia articles on <ulink "
18120
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
18121
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
18122
"link>."
18123
msgstr ""
18124
18125
#: serverguide/C/mail.xml:695(para)
18126
msgid ""
18127
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
18128
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
18129
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
18130
msgstr ""
18131
18132
#: serverguide/C/mail.xml:701(programlisting)
18133
#, no-wrap
18134
msgid ""
18135
"\n"
18136
"protocols = pop3 pop3s imap imaps\n"
18137
msgstr ""
18138
"\n"
18139
"protocols = pop3 pop3s imap imaps\n"
18140
18141
#: serverguide/C/mail.xml:704(para)
18142
msgid ""
18143
"Next, choose the mailbox you would like to use. "
18144
"<application>Dovecot</application> supports <emphasis "
18145
"role=\"strong\">maildir</emphasis> and <emphasis "
18146
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
18147
"mailbox formats. They both have their own benefits and are discussed on "
18148
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
18149
"site</ulink>."
18150
msgstr ""
18151
18152
#: serverguide/C/mail.xml:712(para)
18153
msgid ""
18154
"Once you have chosen your mailbox type, edit the file "
18155
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
18156
msgstr ""
18157
18158
#: serverguide/C/mail.xml:717(programlisting)
18159
#, no-wrap
18160
msgid ""
18161
"\n"
18162
"mail_location = maildir:~/Maildir # (for maildir)\n"
18163
"or\n"
18164
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
18165
msgstr ""
18166
"\n"
18167
"mail_location = maildir:~/Maildir # (para maildir)\n"
18168
"or\n"
18169
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (para mbox)\n"
18170
18171
#: serverguide/C/mail.xml:723(para)
18172
msgid ""
18173
"You should configure your Mail Transport Agent (MTA) to transfer the "
18174
"incoming mail to this type of mailbox if it is different from the one you "
18175
"have configured."
18176
msgstr ""
18177
18178
#: serverguide/C/mail.xml:729(para)
18179
msgid ""
18180
"Once you have configured dovecot, restart the "
18181
"<application>dovecot</application> daemon in order to test your setup:"
18182
msgstr ""
18183
18184
#: serverguide/C/mail.xml:738(para)
18185
msgid ""
18186
"If you have enabled imap, or pop3, you can also try to log in with the "
18187
"commands <command>telnet localhost pop3</command> or <command>telnet "
18188
"localhost imap2</command>. If you see something like the following, the "
18189
"installation has been successful:"
18190
msgstr ""
18191
18192
#: serverguide/C/mail.xml:745(programlisting)
18193
#, no-wrap
18194
msgid ""
18195
"\n"
18196
"bhuvan@rainbow:~$ telnet localhost pop3\n"
18197
"Trying 127.0.0.1...\n"
18198
"Connected to localhost.localdomain.\n"
18199
"Escape character is '^]'.\n"
18200
"+OK Dovecot ready.\n"
18201
msgstr ""
18202
18203
#: serverguide/C/mail.xml:754(title)
18204
msgid "Dovecot SSL Configuration"
18205
msgstr ""
18206
18207
#: serverguide/C/mail.xml:755(para)
18208
msgid ""
18209
"To configure <application>dovecot</application> to use SSL, you can edit the "
18210
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
18211
"lines:"
18212
msgstr ""
18213
18214
#: serverguide/C/mail.xml:760(programlisting)
18215
#, no-wrap
18216
msgid ""
18217
"\n"
18218
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
18219
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
18220
"ssl_disable = no\n"
18221
"disable_plaintext_auth = no\n"
18222
msgstr ""
18223
18224
#: serverguide/C/mail.xml:766(para)
18225
msgid ""
18226
"You can get the SSL certificate from a Certificate Issuing Authority or you "
18227
"can create self signed SSL certificate. The latter is a good option for "
18228
"email, because SMTP clients rarely complain about \"self-signed "
18229
"certificates\". Please refer to <xref linkend=\"certificates-and-"
18230
"security\"/> for details about how to create self signed SSL certificate. "
18231
"Once you create the certificate, you will have a key file and a certificate "
18232
"file. Please copy them to the location pointed in the "
18233
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
18234
msgstr ""
18235
18236
#: serverguide/C/mail.xml:781(title)
18237
msgid "Firewall Configuration for an Email Server"
18238
msgstr "Configuración del torgafueos pa un sirvidor de corréu"
18239
18240
#: serverguide/C/mail.xml:787(para)
18241
msgid "IMAP - 143"
18242
msgstr "IMAP - 143"
18243
18244
#: serverguide/C/mail.xml:788(para)
18245
msgid "IMAPS - 993"
18246
msgstr "IMAPS - 993"
18247
18248
#: serverguide/C/mail.xml:789(para)
18249
msgid "POP3 - 110"
18250
msgstr "POP3 - 110"
18251
18252
#: serverguide/C/mail.xml:790(para)
18253
msgid "POP3S - 995"
18254
msgstr "POP3S - 995"
18255
18256
#: serverguide/C/mail.xml:782(para)
18257
msgid ""
18258
"To access your mail server from another computer, you must configure your "
18259
"firewall to allow connections to the server on the necessary ports. "
18260
"<placeholder-1/>"
18261
msgstr ""
18262
18263
#: serverguide/C/mail.xml:799(para)
18264
msgid ""
18265
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
18266
"more information."
18267
msgstr ""
18268
18269
#: serverguide/C/mail.xml:804(para)
18270
msgid ""
18271
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
18272
"Ubuntu Wiki</ulink> page has more details."
18273
msgstr ""
18274
18275
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
18276
msgid "Mailman"
18277
msgstr "Mailman"
18278
18279
#: serverguide/C/mail.xml:814(para)
18280
msgid ""
18281
"Mailman is an open source program for managing electronic mail discussions "
18282
"and e-newsletter lists. Many open source mailing lists (including all the "
18283
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
18284
"Mailman as their mailing list software. It is powerful and easy to install "
18285
"and maintain."
18286
msgstr ""
18287
18288
#: serverguide/C/mail.xml:824(para)
18289
msgid ""
18290
"Mailman provides a web interface for the administrators and users, using an "
18291
"external mail server to send and receive emails. It works perfectly with the "
18292
"following mail servers:"
18293
msgstr ""
18294
18295
#: serverguide/C/mail.xml:835(application)
18296
msgid "Exim"
18297
msgstr ""
18298
18299
#: serverguide/C/mail.xml:838(application)
18300
msgid "Sendmail"
18301
msgstr ""
18302
18303
#: serverguide/C/mail.xml:841(application)
18304
msgid "Qmail"
18305
msgstr ""
18306
18307
#: serverguide/C/mail.xml:846(para)
18308
msgid ""
18309
"We will see how to install and configure Mailman with, the Apache web "
18310
"server, and either the Postfix or Exim mail server. If you wish to install "
18311
"Mailman with a different mail server, please refer to the references section."
18312
msgstr ""
18313
18314
#: serverguide/C/mail.xml:853(para)
18315
msgid ""
18316
"You only need to install one mail server and "
18317
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
18318
msgstr ""
18319
18320
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
18321
msgid "Apache2"
18322
msgstr "Apache2"
18323
18324
#: serverguide/C/mail.xml:859(para)
18325
msgid ""
18326
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
18327
"installation\">HTTPD Installation</ulink> section for details."
18328
msgstr ""
18329
18330
#: serverguide/C/mail.xml:867(para)
18331
msgid ""
18332
"For instructions on installing and configuring Postfix refer to <xref "
18333
"linkend=\"postfix\"/>"
18334
msgstr ""
18335
18336
#: serverguide/C/mail.xml:873(para)
18337
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
18338
msgstr ""
18339
18340
#: serverguide/C/mail.xml:884(application)
18341
msgid "dc_use_split_config='true'"
18342
msgstr "dc_use_split_config='true'"
18343
18344
#: serverguide/C/mail.xml:876(para)
18345
msgid ""
18346
"Once exim4 is installed, the configuration files are stored in the "
18347
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
18348
"configuration files are split across different files. You can change this "
18349
"behavior by changing the following variable in the "
18350
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
18351
msgstr ""
18352
18353
#: serverguide/C/mail.xml:891(para)
18354
msgid ""
18355
"To install <application>Mailman</application>, run following command at a "
18356
"terminal prompt:"
18357
msgstr ""
18358
18359
#: serverguide/C/mail.xml:895(command)
18360
msgid "sudo apt-get install mailman"
18361
msgstr "sudo apt-get install mailman"
18362
18363
#: serverguide/C/mail.xml:897(para)
18364
msgid ""
18365
"It copies the installation files in "
18366
"<application>/var/lib/mailman</application> directory. It installs the CGI "
18367
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
18368
"creates <emphasis>list</emphasis> linux user. It creates the "
18369
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
18370
"this user."
18371
msgstr ""
18372
18373
#: serverguide/C/mail.xml:909(para)
18374
msgid ""
18375
"This section assumes you have successfully installed "
18376
"<application>mailman</application>, <application>apache2</application>, and "
18377
"<application>postfix</application> or <application>exim4</application>. Now "
18378
"you just need to configure them."
18379
msgstr ""
18380
18381
#: serverguide/C/mail.xml:918(para)
18382
msgid ""
18383
"An example Apache configuration file comes with "
18384
"<application>Mailman</application> and is placed in "
18385
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
18386
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
18387
"available</filename>:"
18388
msgstr ""
18389
18390
#: serverguide/C/mail.xml:924(command)
18391
msgid ""
18392
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18393
msgstr ""
18394
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18395
18396
#: serverguide/C/mail.xml:926(para)
18397
msgid ""
18398
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18399
"Mailman administration site. Now enable the new configuration and restart "
18400
"Apache:"
18401
msgstr ""
18402
18403
#: serverguide/C/mail.xml:931(command)
18404
msgid "sudo a2ensite mailman.conf"
18405
msgstr "sudo a2ensite mailman.conf"
18406
18407
#: serverguide/C/mail.xml:934(para)
18408
msgid ""
18409
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18410
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18411
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18412
"can make changes to the <filename>/etc/apache2/sites-"
18413
"available/mailman.conf</filename> file if you wish to change this behavior."
18414
msgstr ""
18415
18416
#: serverguide/C/mail.xml:945(para)
18417
msgid ""
18418
"For <application>Postfix</application> integration, we will associate the "
18419
"domain lists.example.com with the mailing lists. Please replace "
18420
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18421
msgstr ""
18422
18423
#: serverguide/C/mail.xml:949(para)
18424
msgid ""
18425
"You can use the postconf command to add the necessary configuration to "
18426
"<filename>/etc/postfix/main.cf</filename>:"
18427
msgstr ""
18428
18429
#: serverguide/C/mail.xml:953(command)
18430
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18431
msgstr "sudo postconf -e 'relay_domains = lists.example.com'"
18432
18433
#: serverguide/C/mail.xml:954(command)
18434
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18435
msgstr "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18436
18437
#: serverguide/C/mail.xml:955(command)
18438
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18439
msgstr "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18440
18441
#: serverguide/C/mail.xml:957(para)
18442
msgid ""
18443
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18444
"the following transport:"
18445
msgstr ""
18446
18447
#: serverguide/C/mail.xml:960(programlisting)
18448
#, no-wrap
18449
msgid ""
18450
"\n"
18451
"mailman unix - n n - - pipe\n"
18452
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18453
" ${nexthop} ${user}\n"
18454
msgstr ""
18455
18456
#: serverguide/C/mail.xml:965(para)
18457
msgid ""
18458
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18459
"is delivered to a list."
18460
msgstr ""
18461
18462
#: serverguide/C/mail.xml:968(para)
18463
msgid ""
18464
"Associate the domain lists.example.com to the Mailman transport with the "
18465
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18466
msgstr ""
18467
18468
#: serverguide/C/mail.xml:971(programlisting)
18469
#, no-wrap
18470
msgid ""
18471
"\n"
18472
"lists.example.com mailman:\n"
18473
msgstr ""
18474
18475
#: serverguide/C/mail.xml:974(para)
18476
msgid ""
18477
"Now have <application>Postfix</application> build the transport map by "
18478
"entering the following from a terminal prompt:"
18479
msgstr ""
18480
18481
#: serverguide/C/mail.xml:978(command)
18482
msgid "sudo postmap -v /etc/postfix/transport"
18483
msgstr ""
18484
18485
#: serverguide/C/mail.xml:980(para)
18486
msgid "Then restart Postfix to enable the new configurations:"
18487
msgstr ""
18488
18489
#: serverguide/C/mail.xml:989(para)
18490
msgid ""
18491
"Once Exim4 is installed, you can start the Exim server using the following "
18492
"command from a terminal prompt:"
18493
msgstr ""
18494
18495
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18496
msgid "Main"
18497
msgstr ""
18498
18499
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18500
msgid "Transport"
18501
msgstr ""
18502
18503
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18504
msgid "Router"
18505
msgstr ""
18506
18507
#: serverguide/C/mail.xml:996(para)
18508
msgid ""
18509
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18510
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18511
"different types. For details, please refer to the <ulink "
18512
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18513
"add new a configuration file to the following configuration types: "
18514
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18515
"these mini configuration files. So, the order of these configuration files "
18516
"is very important."
18517
msgstr ""
18518
18519
#: serverguide/C/mail.xml:1027(programlisting)
18520
#, no-wrap
18521
msgid ""
18522
"\n"
18523
"# start\n"
18524
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18525
"# directory.\n"
18526
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18527
"# This is normally the same as ~mailman\n"
18528
"MM_HOME=/var/lib/mailman\n"
18529
"#\n"
18530
"# User and group for Mailman, should match your --with-mail-gid\n"
18531
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18532
"MM_UID=list\n"
18533
"MM_GID=list\n"
18534
"#\n"
18535
"# Domains that your lists are in - colon separated list\n"
18536
"# you may wish to add these into local_domains as well\n"
18537
"domainlist mm_domains=hostname.com\n"
18538
"#\n"
18539
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18540
"#\n"
18541
"# These values are derived from the ones above and should not need\n"
18542
"# editing unless you have munged your mailman installation\n"
18543
"#\n"
18544
"# The path of the Mailman mail wrapper script\n"
18545
"MM_WRAP=MM_HOME/mail/mailman\n"
18546
"#\n"
18547
"# The path of the list config file (used as a required file when\n"
18548
"# verifying list addresses)\n"
18549
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18550
"# end\n"
18551
msgstr ""
18552
18553
#: serverguide/C/mail.xml:1021(para)
18554
msgid ""
18555
"All the configuration files belonging to the main type are stored in the "
18556
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18557
"following content to a new file, named <filename>04_exim4-"
18558
"config_mailman</filename>: <placeholder-1/>"
18559
msgstr ""
18560
18561
#: serverguide/C/mail.xml:1067(programlisting)
18562
#, no-wrap
18563
msgid ""
18564
"\n"
18565
" mailman_transport:\n"
18566
" driver = pipe\n"
18567
" command = MM_WRAP \\\n"
18568
" '${if def:local_part_suffix \\\n"
18569
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18570
"\\\n"
18571
" {post}}' \\\n"
18572
" $local_part\n"
18573
" current_directory = MM_HOME\n"
18574
" home_directory = MM_HOME\n"
18575
" user = MM_UID\n"
18576
" group = MM_GID\n"
18577
msgstr ""
18578
"\n"
18579
" mailman_transport:\n"
18580
" driver = pipe\n"
18581
" command = MM_WRAP \\\n"
18582
" '${if def:local_part_suffix \\\n"
18583
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18584
"\\\n"
18585
" {post}}' \\\n"
18586
" $local_part\n"
18587
" current_directory = MM_HOME\n"
18588
" home_directory = MM_HOME\n"
18589
" user = MM_UID\n"
18590
" group = MM_GID\n"
18591
18592
#: serverguide/C/mail.xml:1061(para)
18593
msgid ""
18594
"All the configuration files belonging to transport type are stored in the "
18595
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18596
"following content to a new file named <filename> 40_exim4-"
18597
"config_mailman</filename>: <placeholder-1/>"
18598
msgstr ""
18599
18600
#: serverguide/C/mail.xml:1088(programlisting)
18601
#, no-wrap
18602
msgid ""
18603
"\n"
18604
" mailman_router:\n"
18605
" driver = accept\n"
18606
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18607
" local_part_suffix_optional\n"
18608
" local_part_suffix = -bounces : -bounces+* : \\\n"
18609
" -confirm+* : -join : -leave : \\\n"
18610
" -owner : -request : -admin\n"
18611
" transport = mailman_transport\n"
18612
msgstr ""
18613
"\n"
18614
" mailman_router:\n"
18615
" driver = accept\n"
18616
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18617
" local_part_suffix_optional\n"
18618
" local_part_suffix = -bounces : -bounces+* : \\\n"
18619
" -confirm+* : -join : -leave : \\\n"
18620
" -owner : -request : -admin\n"
18621
" transport = mailman_transport\n"
18622
18623
#: serverguide/C/mail.xml:1084(para)
18624
msgid ""
18625
"All the configuration files belonging to router type are stored in the "
18626
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18627
"following content in to a new file named <filename>101_exim4-"
18628
"config_mailman</filename>: <placeholder-1/>"
18629
msgstr ""
18630
18631
#: serverguide/C/mail.xml:1101(para)
18632
msgid ""
18633
"The order of main and transport configuration files can be in any order. "
18634
"But, the order of router configuration files must be the same. This "
18635
"particular file must appear before the <application>200_exim4-"
18636
"config_primary</application> file. These two configuration files contain "
18637
"same type of information. The first file takes the precedence. For more "
18638
"details, please refer to the references section."
18639
msgstr ""
18640
18641
#: serverguide/C/mail.xml:1114(para)
18642
msgid ""
18643
"Once mailman is installed, you can run it using the following command:"
18644
msgstr ""
18645
18646
#: serverguide/C/mail.xml:1118(command)
18647
msgid "sudo /etc/init.d/mailman start"
18648
msgstr "sudo /etc/init.d/mailman start"
18649
18650
#: serverguide/C/mail.xml:1120(para)
18651
msgid ""
18652
"Once mailman is installed, you should create the default mailing list. Run "
18653
"the following command to create the mailing list:"
18654
msgstr ""
18655
18656
#: serverguide/C/mail.xml:1126(command)
18657
msgid "sudo /usr/sbin/newlist mailman"
18658
msgstr ""
18659
18660
#: serverguide/C/mail.xml:1129(programlisting)
18661
#, no-wrap
18662
msgid ""
18663
"\n"
18664
" Enter the email address of the person running the list: bhuvan at "
18665
"ubuntu.com\n"
18666
" Initial mailman password:\n"
18667
" To finish creating your mailing list, you must edit your "
18668
"<filename>/etc/aliases</filename> (or\n"
18669
" equivalent) file by adding the following lines, and possibly running the\n"
18670
" `newaliases' program:\n"
18671
"\n"
18672
" ## mailman mailing list\n"
18673
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18674
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18675
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18676
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18677
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18678
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18679
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18680
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18681
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18682
"mailman\"\n"
18683
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18684
"mailman\"\n"
18685
"\n"
18686
" Hit enter to notify mailman owner...\n"
18687
"\n"
18688
" # \n"
18689
msgstr ""
18690
18691
#: serverguide/C/mail.xml:1152(para)
18692
msgid ""
18693
"We have configured either Postfix or Exim4 to recognize all emails from "
18694
"mailman. So, it is not mandatory to make any new entries in "
18695
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18696
"configuration files, please ensure that you restart those services before "
18697
"continuing to next section."
18698
msgstr ""
18699
18700
#: serverguide/C/mail.xml:1160(para)
18701
msgid ""
18702
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18703
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18704
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18705
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18706
msgstr ""
18707
18708
#: serverguide/C/mail.xml:1171(title)
18709
msgid "Administration"
18710
msgstr "Alministración"
18711
18712
#: serverguide/C/mail.xml:1172(para)
18713
msgid ""
18714
"We assume you have a default installation. The mailman cgi scripts are still "
18715
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18716
"Mailman provides a web based administration facility. To access this page, "
18717
"point your browser to the following url:"
18718
msgstr ""
18719
18720
#: serverguide/C/mail.xml:1180(para)
18721
msgid "http://hostname/cgi-bin/mailman/admin"
18722
msgstr "http://nomehost/cgi-bin/mailman/admin"
18723
18724
#: serverguide/C/mail.xml:1184(para)
18725
msgid ""
18726
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18727
"screen. If you click the mailing list name, it will ask for your "
18728
"authentication password. If you enter the correct password, you will be able "
18729
"to change administrative settings of this mailing list. You can create a new "
18730
"mailing list using the command line utility "
18731
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18732
"mailing list using the web interface."
18733
msgstr ""
18734
18735
#: serverguide/C/mail.xml:1197(title)
18736
msgid "Users"
18737
msgstr "Usuarios"
18738
18739
#: serverguide/C/mail.xml:1198(para)
18740
msgid ""
18741
"Mailman provides a web based interface for users. To access this page, point "
18742
"your browser to the following url:"
18743
msgstr ""
18744
18745
#: serverguide/C/mail.xml:1203(para)
18746
msgid "http://hostname/cgi-bin/mailman/listinfo"
18747
msgstr "http://nomehost/cgi-bin/mailman/listinfo"
18748
18749
#: serverguide/C/mail.xml:1207(para)
18750
msgid ""
18751
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18752
"screen. If you click the mailing list name, it will display the subscription "
18753
"form. You can enter your email address, name (optional), and password to "
18754
"subscribe. An email invitation will be sent to you. You can follow the "
18755
"instructions in the email to subscribe."
18756
msgstr ""
18757
18758
#: serverguide/C/mail.xml:1219(ulink)
18759
msgid "GNU Mailman - Installation Manual"
18760
msgstr ""
18761
18762
#: serverguide/C/mail.xml:1223(ulink)
18763
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18764
msgstr ""
18765
18766
#: serverguide/C/mail.xml:1226(para)
18767
msgid ""
18768
"Also, see the <ulink "
18769
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18770
"Wiki</ulink> page."
18771
msgstr ""
18772
18773
#: serverguide/C/mail.xml:1232(title)
18774
msgid "Mail Filtering"
18775
msgstr ""
18776
18777
#: serverguide/C/mail.xml:1233(para)
18778
msgid ""
18779
"One of the largest issues with email today is the problem of Unsolicited "
18780
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18781
"and other forms of malware. According to some reports these messages make up "
18782
"the bulk of all email traffic on the Internet."
18783
msgstr ""
18784
18785
#: serverguide/C/mail.xml:1238(para)
18786
msgid ""
18787
"This section will cover integrating <application>Amavisd-new</application>, "
18788
"<application>Spamassassin</application>, and "
18789
"<application>ClamAV</application> with the "
18790
"<application>Postfix</application> Mail Transport Agent (MTA). "
18791
"<application>Postfix</application> can also check email validity by passing "
18792
"it through external content filters. These filters can sometimes determine "
18793
"if a message is spam without needing to process it with more resource "
18794
"intensive applications. Two common filters are <application>dkim-"
18795
"filter</application> and <application>python-policyd-spf</application>."
18796
msgstr ""
18797
18798
#: serverguide/C/mail.xml:1248(para)
18799
msgid ""
18800
"<application>Amavisd-new</application> is a wrapper program that can call "
18801
"any number of content filtering programs for spam detection, antivirus, etc."
18802
msgstr ""
18803
18804
#: serverguide/C/mail.xml:1254(para)
18805
msgid ""
18806
"<application>Spamassassin</application> uses a variety of mechanisms to "
18807
"filter email based on the message content."
18808
msgstr ""
18809
18810
#: serverguide/C/mail.xml:1259(para)
18811
msgid ""
18812
"<application>ClamAV</application> is an open source antivirus application."
18813
msgstr ""
18814
18815
#: serverguide/C/mail.xml:1264(para)
18816
msgid ""
18817
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18818
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18819
msgstr ""
18820
18821
#: serverguide/C/mail.xml:1270(para)
18822
msgid ""
18823
"<application>python-policyd-spf</application> enables Sender Policy "
18824
"Framework (SPF) checking with <application>Postfix</application>."
18825
msgstr ""
18826
18827
#: serverguide/C/mail.xml:1275(para)
18828
msgid "This is how the pieces fit together:"
18829
msgstr ""
18830
18831
#: serverguide/C/mail.xml:1280(para)
18832
msgid "An email message is accepted by <application>Postfix</application>."
18833
msgstr ""
18834
18835
#: serverguide/C/mail.xml:1285(para)
18836
msgid ""
18837
"The message is passed through any external filters <application>dkim-"
18838
"filter</application> and <application>python-policyd-spf</application> in "
18839
"this case."
18840
msgstr ""
18841
18842
#: serverguide/C/mail.xml:1291(para)
18843
msgid "<application>Amavisd-new</application> then processes the message."
18844
msgstr ""
18845
18846
#: serverguide/C/mail.xml:1296(para)
18847
msgid ""
18848
"<application>ClamAV</application> is used to scan the message. If the "
18849
"message contains a virus <application>Postfix</application> will reject the "
18850
"message."
18851
msgstr ""
18852
18853
#: serverguide/C/mail.xml:1302(para)
18854
msgid ""
18855
"Clean messages will then be analyzed by "
18856
"<application>Spamassassin</application> to find out if the message is spam. "
18857
"<application>Spamassassin</application> will then add X-Header lines "
18858
"allowing <application>Amavisd-new</application> to further manipulate the "
18859
"message."
18860
msgstr ""
18861
18862
#: serverguide/C/mail.xml:1309(para)
18863
msgid ""
18864
"For example, if a message has a Spam score of over fifty the message could "
18865
"be automatically dropped from the queue without the recipient ever having to "
18866
"be bothered. Another, way to handle flagged messages is to deliver them to "
18867
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18868
"see fit."
18869
msgstr ""
18870
18871
#: serverguide/C/mail.xml:1316(para)
18872
msgid ""
18873
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18874
"configuring Postfix."
18875
msgstr ""
18876
18877
#: serverguide/C/mail.xml:1319(para)
18878
msgid ""
18879
"To install the rest of the applications enter the following from a terminal "
18880
"prompt:"
18881
msgstr ""
18882
18883
#: serverguide/C/mail.xml:1323(command)
18884
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18885
msgstr ""
18886
18887
#: serverguide/C/mail.xml:1324(command)
18888
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18889
msgstr ""
18890
18891
#: serverguide/C/mail.xml:1326(para)
18892
msgid ""
18893
"There are some optional packages that integrate with "
18894
"<application>Spamassassin</application> for better spam detection:"
18895
msgstr ""
18896
18897
#: serverguide/C/mail.xml:1330(command)
18898
msgid "sudo apt-get install pyzor razor"
18899
msgstr ""
18900
18901
#: serverguide/C/mail.xml:1332(para)
18902
msgid ""
18903
"Along with the main filtering applications compression utilities are needed "
18904
"to process some email attachments:"
18905
msgstr ""
18906
18907
#: serverguide/C/mail.xml:1336(command)
18908
msgid ""
18909
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18910
msgstr ""
18911
18912
#: serverguide/C/mail.xml:1339(para)
18913
msgid ""
18914
"If some packages are not found, check that the "
18915
"<emphasis>multiverse</emphasis> repository is enabled in "
18916
"<filename>/etc/apt/sources.list</filename>"
18917
msgstr ""
18918
18919
#: serverguide/C/mail.xml:1340(para)
18920
msgid ""
18921
"If you make changes to the file, be sure to run <command>sudo apt-get "
18922
"update</command> before trying to install again."
18923
msgstr ""
18924
18925
#: serverguide/C/mail.xml:1345(para)
18926
msgid "Now configure everything to work together and filter email."
18927
msgstr ""
18928
18929
#: serverguide/C/mail.xml:1349(title)
18930
msgid "ClamAV"
18931
msgstr ""
18932
18933
#: serverguide/C/mail.xml:1350(para)
18934
msgid ""
18935
"The default behaviour of <application>ClamAV</application> will fit our "
18936
"needs. For more ClamAV configuration options, check the configuration files "
18937
"in <filename>/etc/clamav</filename>."
18938
msgstr ""
18939
18940
#: serverguide/C/mail.xml:1355(para)
18941
msgid ""
18942
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18943
"group in order for <application>Amavisd-new</application> to have the "
18944
"appropriate access to scan files:"
18945
msgstr ""
18946
18947
#: serverguide/C/mail.xml:1360(command)
18948
msgid "sudo adduser clamav amavis"
18949
msgstr ""
18950
18951
#: serverguide/C/mail.xml:1364(title)
18952
msgid "Spamassassin"
18953
msgstr ""
18954
18955
#: serverguide/C/mail.xml:1365(para)
18956
msgid ""
18957
"Spamassassin automatically detects optional components and will use them if "
18958
"they are present. This means that there is no need to configure "
18959
"<application>pyzor</application> and <application>razor</application>."
18960
msgstr ""
18961
18962
#: serverguide/C/mail.xml:1369(para)
18963
msgid ""
18964
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18965
"<application>Spamassassin</application> daemon. Change "
18966
"<emphasis>ENABLED=0</emphasis> to:"
18967
msgstr ""
18968
18969
#: serverguide/C/mail.xml:1373(programlisting)
18970
#, no-wrap
18971
msgid ""
18972
"\n"
18973
"ENABLED=1\n"
18974
msgstr ""
18975
18976
#: serverguide/C/mail.xml:1376(para)
18977
msgid "Now start the daemon:"
18978
msgstr ""
18979
18980
#: serverguide/C/mail.xml:1380(command)
18981
msgid "sudo /etc/init.d/spamassassin start"
18982
msgstr ""
18983
18984
#: serverguide/C/mail.xml:1384(title)
18985
msgid "Amavisd-new"
18986
msgstr ""
18987
18988
#: serverguide/C/mail.xml:1385(para)
18989
msgid ""
18990
"First activate spam and antivirus detection in <application>Amavisd-"
18991
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18992
"content_filter_mode</filename>:"
18993
msgstr ""
18994
18995
#: serverguide/C/mail.xml:1389(programlisting)
18996
#, no-wrap
18997
msgid ""
18998
"\n"
18999
"use strict;\n"
19000
"\n"
19001
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
19002
"# and to re-enable antivirus checking.\n"
19003
"\n"
19004
"#\n"
19005
"# Default antivirus checking mode\n"
19006
"# Uncomment the two lines below to enable it\n"
19007
"#\n"
19008
"\n"
19009
"@bypass_virus_checks_maps = (\n"
19010
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
19011
"$bypass_virus_checks_re);\n"
19012
"\n"
19013
"\n"
19014
"#\n"
19015
"# Default SPAM checking mode\n"
19016
"# Uncomment the two lines below to enable it\n"
19017
"#\n"
19018
"\n"
19019
"@bypass_spam_checks_maps = (\n"
19020
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
19021
"$bypass_spam_checks_re);\n"
19022
"\n"
19023
"1; # insure a defined return\n"
19024
msgstr ""
19025
19026
#: serverguide/C/mail.xml:1414(para)
19027
msgid ""
19028
"Bouncing spam can be a bad idea as the return address is often faked. "
19029
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
19030
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
19031
"D_BOUNCE, as follows:"
19032
msgstr ""
19033
19034
#: serverguide/C/mail.xml:1420(programlisting)
19035
#, no-wrap
19036
msgid ""
19037
"\n"
19038
"$final_spam_destiny = D_DISCARD;\n"
19039
msgstr ""
19040
19041
#: serverguide/C/mail.xml:1424(para)
19042
msgid ""
19043
"Additionally, you may want to adjust the following options to flag more "
19044
"messages as spam:"
19045
msgstr ""
19046
19047
#: serverguide/C/mail.xml:1428(programlisting)
19048
#, no-wrap
19049
msgid ""
19050
"\n"
19051
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
19052
"level\n"
19053
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
19054
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
19055
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
19056
msgstr ""
19057
19058
#: serverguide/C/mail.xml:1435(para)
19059
msgid ""
19060
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
19061
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
19062
"option. Also, if the server receives mail for multiple domains the "
19063
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
19064
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
19065
msgstr ""
19066
19067
#: serverguide/C/mail.xml:1442(programlisting)
19068
#, no-wrap
19069
msgid ""
19070
"\n"
19071
"$myhostname = 'mail.example.com';\n"
19072
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
19073
msgstr ""
19074
19075
#: serverguide/C/mail.xml:1447(para)
19076
msgid ""
19077
"After configuration <application>Amavisd-new</application> needs to be "
19078
"restarted:"
19079
msgstr ""
19080
19081
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
19082
msgid "sudo /etc/init.d/amavis restart"
19083
msgstr ""
19084
19085
#: serverguide/C/mail.xml:1454(title)
19086
msgid "DKIM Whitelist"
19087
msgstr ""
19088
19089
#: serverguide/C/mail.xml:1456(para)
19090
msgid ""
19091
"<application>Amavisd-new</application> can be configured to automatically "
19092
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
19093
"Keys. There are some pre-configured domains in the "
19094
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
19095
msgstr ""
19096
19097
#: serverguide/C/mail.xml:1462(para)
19098
msgid "There are multiple ways to configure the Whitelist for a domain:"
19099
msgstr ""
19100
19101
#: serverguide/C/mail.xml:1468(para)
19102
msgid ""
19103
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
19104
"address from the \"example.com\" domain."
19105
msgstr ""
19106
19107
#: serverguide/C/mail.xml:1473(para)
19108
msgid ""
19109
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
19110
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
19111
"have a valid signature."
19112
msgstr ""
19113
19114
#: serverguide/C/mail.xml:1479(para)
19115
msgid ""
19116
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
19117
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
19118
"role=\"italic\">example.com</emphasis> the parent domain."
19119
msgstr ""
19120
19121
#: serverguide/C/mail.xml:1485(para)
19122
msgid ""
19123
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
19124
"that have a valid signature from \"example.com\". This is usually used for "
19125
"discussion groups that sign thier messages."
19126
msgstr ""
19127
19128
#: serverguide/C/mail.xml:1492(para)
19129
msgid ""
19130
"A domain can also have multiple Whitelist configurations. After, editing the "
19131
"file restart <application>amaisd-new</application>:"
19132
msgstr ""
19133
19134
#: serverguide/C/mail.xml:1501(para)
19135
msgid ""
19136
"In this context, once a domain has been added to the Whitelist the message "
19137
"will not receive any anti-virus or spam filtering. This may or may not be "
19138
"the intended behavior you wish for a domain."
19139
msgstr ""
19140
19141
#: serverguide/C/mail.xml:1511(para)
19142
msgid ""
19143
"For <application>Postfix</application> integration, enter the following from "
19144
"a terminal prompt:"
19145
msgstr ""
19146
19147
#: serverguide/C/mail.xml:1515(command)
19148
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
19149
msgstr ""
19150
19151
#: serverguide/C/mail.xml:1517(para)
19152
msgid ""
19153
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
19154
"to the end of the file:"
19155
msgstr ""
19156
19157
#: serverguide/C/mail.xml:1520(programlisting)
19158
#, no-wrap
19159
msgid ""
19160
"\n"
19161
"smtp-amavis unix - - - - 2 smtp\n"
19162
" -o smtp_data_done_timeout=1200\n"
19163
" -o smtp_send_xforward_command=yes\n"
19164
" -o disable_dns_lookups=yes\n"
19165
" -o max_use=20\n"
19166
"\n"
19167
"127.0.0.1:10025 inet n - - - - smtpd\n"
19168
" -o content_filter=\n"
19169
" -o local_recipient_maps=\n"
19170
" -o relay_recipient_maps=\n"
19171
" -o smtpd_restriction_classes=\n"
19172
" -o smtpd_delay_reject=no\n"
19173
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
19174
" -o smtpd_helo_restrictions=\n"
19175
" -o smtpd_sender_restrictions=\n"
19176
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
19177
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
19178
" -o smtpd_end_of_data_restrictions=\n"
19179
" -o mynetworks=127.0.0.0/8\n"
19180
" -o smtpd_error_sleep_time=0\n"
19181
" -o smtpd_soft_error_limit=1001\n"
19182
" -o smtpd_hard_error_limit=1000\n"
19183
" -o smtpd_client_connection_count_limit=0\n"
19184
" -o smtpd_client_connection_rate_limit=0\n"
19185
" -o "
19186
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
19187
msgstr ""
19188
19189
#: serverguide/C/mail.xml:1547(para)
19190
msgid ""
19191
"Also add the following two lines immediately below the "
19192
"<emphasis>\"pickup\"</emphasis> transport service:"
19193
msgstr ""
19194
19195
#: serverguide/C/mail.xml:1550(programlisting)
19196
#, no-wrap
19197
msgid ""
19198
"\n"
19199
" -o content_filter=\n"
19200
" -o receive_override_options=no_header_body_checks\n"
19201
msgstr ""
19202
19203
#: serverguide/C/mail.xml:1554(para)
19204
msgid ""
19205
"This will prevent messages that are generated to report on spam from being "
19206
"classified as spam."
19207
msgstr ""
19208
19209
#: serverguide/C/mail.xml:1557(para)
19210
msgid "Now restart <application>Postfix</application>:"
19211
msgstr ""
19212
19213
#: serverguide/C/mail.xml:1563(para)
19214
msgid "Content filtering with spam and virus detection is now enabled."
19215
msgstr ""
19216
19217
#: serverguide/C/mail.xml:1570(para)
19218
msgid ""
19219
"First, test that the <application>Amavisd-new</application> SMTP is "
19220
"listening:"
19221
msgstr ""
19222
19223
#: serverguide/C/mail.xml:1573(programlisting)
19224
#, no-wrap
19225
msgid ""
19226
"\n"
19227
"telnet localhost 10024\n"
19228
"Trying 127.0.0.1...\n"
19229
"Connected to localhost.\n"
19230
"Escape character is '^]'.\n"
19231
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
19232
"^]\n"
19233
msgstr ""
19234
19235
#: serverguide/C/mail.xml:1581(para)
19236
msgid ""
19237
"In the Header of messages that go through the content filter you should see:"
19238
msgstr ""
19239
19240
#: serverguide/C/mail.xml:1584(programlisting)
19241
#, no-wrap
19242
msgid ""
19243
"\n"
19244
"X-Spam-Level: \n"
19245
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
19246
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
19247
"BAYES_00\n"
19248
"X-Spam-Level: \n"
19249
msgstr ""
19250
19251
#: serverguide/C/mail.xml:1591(para)
19252
msgid ""
19253
"Your output will vary, but the important thing is that there are <emphasis>X-"
19254
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
19255
msgstr ""
19256
19257
#: serverguide/C/mail.xml:1599(para)
19258
msgid ""
19259
"The best way to figure out why something is going wrong is to check the log "
19260
"files."
19261
msgstr ""
19262
19263
#: serverguide/C/mail.xml:1604(para)
19264
msgid ""
19265
"For instructions on <application>Postfix</application> logging see the <xref "
19266
"linkend=\"postfix-troubleshooting\"/> section."
19267
msgstr ""
19268
19269
#: serverguide/C/mail.xml:1610(para)
19270
msgid ""
19271
"<application>Amavisd-new</application> uses "
19272
"<application>Syslog</application> to send messages to "
19273
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
19274
"increased by adding the <emphasis>$log_level</emphasis> option to "
19275
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
19276
"1 to 5."
19277
msgstr ""
19278
19279
#: serverguide/C/mail.xml:1615(programlisting)
19280
#, no-wrap
19281
msgid ""
19282
"\n"
19283
"$log_level = 2;\n"
19284
msgstr ""
19285
19286
#: serverguide/C/mail.xml:1619(para)
19287
msgid ""
19288
"When the <application>Amavisd-new</application> log output is increased "
19289
"<application>Spamassassin</application> log output is also increased."
19290
msgstr ""
19291
19292
#: serverguide/C/mail.xml:1626(para)
19293
msgid ""
19294
"The <application>ClamAV</application> log level can be increased by editing "
19295
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
19296
msgstr ""
19297
19298
#: serverguide/C/mail.xml:1630(programlisting)
19299
#, no-wrap
19300
msgid ""
19301
"\n"
19302
"LogVerbose true\n"
19303
msgstr ""
19304
19305
#: serverguide/C/mail.xml:1633(para)
19306
msgid ""
19307
"By default <application>ClamAV</application> will send log messages to "
19308
"<filename>/var/log/clamav/clamav.log</filename>."
19309
msgstr ""
19310
19311
#: serverguide/C/mail.xml:1639(para)
19312
msgid ""
19313
"After changing an applications log settings remember to restart the service "
19314
"for the new settings to take affect. Also, once the issue you are "
19315
"troubleshooting is resolved it is a good idea to change the log settings "
19316
"back to normal."
19317
msgstr ""
19318
19319
#: serverguide/C/mail.xml:1647(para)
19320
msgid "For more information on filtering mail see the following links:"
19321
msgstr ""
19322
19323
#: serverguide/C/mail.xml:1653(ulink)
19324
msgid "Amavisd-new Documentation"
19325
msgstr ""
19326
19327
#: serverguide/C/mail.xml:1657(para)
19328
msgid ""
19329
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
19330
"Documentation</ulink> and <ulink "
19331
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
19332
msgstr ""
19333
19334
#: serverguide/C/mail.xml:1664(ulink)
19335
msgid "Spamassassin Wiki"
19336
msgstr ""
19337
19338
#: serverguide/C/mail.xml:1669(ulink)
19339
msgid "Pyzor Homepage"
19340
msgstr ""
19341
19342
#: serverguide/C/mail.xml:1674(ulink)
19343
msgid "Razor Homepage"
19344
msgstr ""
19345
19346
#: serverguide/C/mail.xml:1679(ulink)
19347
msgid "DKIM.org"
19348
msgstr ""
19349
19350
#: serverguide/C/mail.xml:1684(ulink)
19351
msgid "Postfix Amavis New"
19352
msgstr ""
19353
19354
#: serverguide/C/mail.xml:1688(para)
19355
msgid ""
19356
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
19357
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
19358
msgstr ""
19359
19360
#: serverguide/C/lamp-applications.xml:13(title)
19361
msgid "LAMP Applications"
19362
msgstr ""
19363
19364
#: serverguide/C/lamp-applications.xml:19(para)
19365
msgid ""
19366
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
19367
"Ubuntu servers. There is a plethora of Open Source applications written "
19368
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
19369
"Content Management Systems, and Management Software such as phpMyAdmin."
19370
msgstr ""
19371
19372
#: serverguide/C/lamp-applications.xml:26(para)
19373
msgid ""
19374
"One advantage of LAMP is the substantial flexibility for different database, "
19375
"web server, and scripting languages. Popular substitutes for MySQL include "
19376
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
19377
"instead of PHP."
19378
msgstr ""
19379
19380
#: serverguide/C/lamp-applications.xml:32(para)
19381
msgid ""
19382
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
19383
"is:"
19384
msgstr ""
19385
19386
#: serverguide/C/lamp-applications.xml:38(para)
19387
msgid "Download an archive containing the application source files."
19388
msgstr ""
19389
19390
#: serverguide/C/lamp-applications.xml:43(para)
19391
msgid ""
19392
"Unpack the archive, usually in a directory accessible to a web server."
19393
msgstr ""
19394
19395
#: serverguide/C/lamp-applications.xml:48(para)
19396
msgid ""
19397
"Depending on where the source was extracted, configure a web browser to "
19398
"serve the files."
19399
msgstr ""
19400
19401
#: serverguide/C/lamp-applications.xml:53(para)
19402
msgid "Configure the application to connect to the database."
19403
msgstr ""
19404
19405
#: serverguide/C/lamp-applications.xml:58(para)
19406
msgid ""
19407
"Run a script, or browse to a page of the application, to install the "
19408
"database needed by the application."
19409
msgstr ""
19410
19411
#: serverguide/C/lamp-applications.xml:63(para)
19412
msgid ""
19413
"Once the steps above, or similar steps, are completed you are ready to begin "
19414
"using the application."
19415
msgstr ""
19416
19417
#: serverguide/C/lamp-applications.xml:69(para)
19418
msgid ""
19419
"A disadvantage of using this approach is that the application files are not "
19420
"placed in the file system in a standard way, which can cause confusion as to "
19421
"where the application is installed. Another larger disadvantage is updating "
19422
"the application. When a new version is released, the same process used to "
19423
"install the application is needed to apply updates."
19424
msgstr ""
19425
19426
#: serverguide/C/lamp-applications.xml:76(para)
19427
msgid ""
19428
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19429
"packaged for Ubuntu, and are available for installation in the same way as "
19430
"non-LAMP applications. Depending on the application some extra configuration "
19431
"and setup steps may be needed, however."
19432
msgstr ""
19433
19434
#: serverguide/C/lamp-applications.xml:82(para)
19435
msgid ""
19436
"This section covers howto install and configure the Wiki applications "
19437
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19438
"and the MySQL management application <application>phpMyAdmin</application>."
19439
msgstr ""
19440
19441
#: serverguide/C/lamp-applications.xml:88(para)
19442
msgid ""
19443
"A Wiki is a website that allows the visitors to easily add, remove and "
19444
"modify available content easily. The ease of interaction and operation makes "
19445
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19446
"also referred to the collaborative software."
19447
msgstr ""
19448
19449
#: serverguide/C/lamp-applications.xml:100(title)
19450
msgid "Moin Moin"
19451
msgstr ""
19452
19453
#: serverguide/C/lamp-applications.xml:102(para)
19454
msgid ""
19455
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19456
"engine, and licensed under the GNU GPL."
19457
msgstr ""
19458
19459
#: serverguide/C/lamp-applications.xml:110(para)
19460
msgid ""
19461
"To install <application>MoinMoin</application>, run the following command in "
19462
"the command prompt:"
19463
msgstr ""
19464
19465
#: serverguide/C/lamp-applications.xml:116(command)
19466
msgid "sudo apt-get install python-moinmoin"
19467
msgstr ""
19468
19469
#: serverguide/C/lamp-applications.xml:119(para)
19470
msgid ""
19471
"You should also install <application>apache2</application> web server. For "
19472
"installing <application>apache2</application> web server, please refer to "
19473
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19474
"linkend=\"httpd\"/> section."
19475
msgstr ""
19476
19477
#: serverguide/C/lamp-applications.xml:130(para)
19478
msgid ""
19479
"For configuring your first Wiki application, please run the following set of "
19480
"commands. Let us assume that you are creating a Wiki named "
19481
"<emphasis>mywiki</emphasis>:"
19482
msgstr ""
19483
19484
#: serverguide/C/lamp-applications.xml:137(command)
19485
msgid "cd /usr/share/moin"
19486
msgstr ""
19487
19488
#: serverguide/C/lamp-applications.xml:138(command)
19489
msgid "sudo mkdir mywiki"
19490
msgstr ""
19491
19492
#: serverguide/C/lamp-applications.xml:139(command)
19493
msgid "sudo cp -R data mywiki"
19494
msgstr ""
19495
19496
#: serverguide/C/lamp-applications.xml:140(command)
19497
msgid "sudo cp -R underlay mywiki"
19498
msgstr ""
19499
19500
#: serverguide/C/lamp-applications.xml:141(command)
19501
msgid "sudo cp server/moin.cgi mywiki"
19502
msgstr ""
19503
19504
#: serverguide/C/lamp-applications.xml:142(command)
19505
msgid "sudo chown -R www-data.www-data mywiki"
19506
msgstr ""
19507
19508
#: serverguide/C/lamp-applications.xml:143(command)
19509
msgid "sudo chmod -R ug+rwX mywiki"
19510
msgstr ""
19511
19512
#: serverguide/C/lamp-applications.xml:144(command)
19513
msgid "sudo chmod -R o-rwx mywiki"
19514
msgstr ""
19515
19516
#: serverguide/C/lamp-applications.xml:147(para)
19517
msgid ""
19518
"Now you should configure <application>MoinMoin</application> to find your "
19519
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19520
"<application>MoinMoin</application>, open "
19521
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19522
msgstr ""
19523
19524
#: serverguide/C/lamp-applications.xml:155(programlisting)
19525
#, no-wrap
19526
msgid "data_dir = '/org/mywiki/data'"
19527
msgstr ""
19528
19529
#: serverguide/C/lamp-applications.xml:157(para)
19530
msgid "to"
19531
msgstr ""
19532
19533
#: serverguide/C/lamp-applications.xml:161(programlisting)
19534
#, no-wrap
19535
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19536
msgstr ""
19537
19538
#: serverguide/C/lamp-applications.xml:163(para)
19539
msgid ""
19540
"Also, below the <emphasis>data_dir</emphasis> option add the "
19541
"<emphasis>data_underlay_dir</emphasis>:"
19542
msgstr ""
19543
19544
#: serverguide/C/lamp-applications.xml:167(programlisting)
19545
#, no-wrap
19546
msgid ""
19547
"\n"
19548
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19549
msgstr ""
19550
19551
#: serverguide/C/lamp-applications.xml:172(para)
19552
msgid ""
19553
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19554
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19555
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19556
"change."
19557
msgstr ""
19558
19559
#: serverguide/C/lamp-applications.xml:181(para)
19560
msgid ""
19561
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19562
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19563
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19564
"<quote>(\"mywiki\", r\".*\")</quote>."
19565
msgstr ""
19566
19567
#: serverguide/C/lamp-applications.xml:189(para)
19568
msgid ""
19569
"Once you have configured <application>MoinMoin</application> to find your "
19570
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19571
"<application>apache2</application> and make it ready for your Wiki "
19572
"application."
19573
msgstr ""
19574
19575
#: serverguide/C/lamp-applications.xml:196(para)
19576
msgid ""
19577
"You should add the following lines in <filename>/etc/apache2/sites-"
19578
"available/default</filename> file inside the <quote><VirtualHost "
19579
"*></quote> tag:"
19580
msgstr ""
19581
19582
#: serverguide/C/lamp-applications.xml:202(programlisting)
19583
#, no-wrap
19584
msgid ""
19585
"\n"
19586
"### moin\n"
19587
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19588
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19589
" <Directory /usr/share/moin/htdocs>\n"
19590
" Order allow,deny\n"
19591
" allow from all\n"
19592
" </Directory>\n"
19593
"### end moin\n"
19594
msgstr ""
19595
19596
#: serverguide/C/lamp-applications.xml:214(para)
19597
msgid ""
19598
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19599
"<emphasis>alias</emphasis> line above, to the "
19600
"<application>moinmoin</application> version installed."
19601
msgstr ""
19602
19603
#: serverguide/C/lamp-applications.xml:220(para)
19604
msgid ""
19605
"Once you configure the <application>apache2</application> web server and "
19606
"make it ready for your Wiki application, you should restart it. You can run "
19607
"the following command to restart the <application>apache2</application> web "
19608
"server:"
19609
msgstr ""
19610
19611
#: serverguide/C/lamp-applications.xml:233(title)
19612
msgid "Verification"
19613
msgstr ""
19614
19615
#: serverguide/C/lamp-applications.xml:235(para)
19616
msgid ""
19617
"You can verify the Wiki application and see if it works by pointing your web "
19618
"browser to the following URL:"
19619
msgstr ""
19620
19621
#: serverguide/C/lamp-applications.xml:239(programlisting)
19622
#, no-wrap
19623
msgid ""
19624
"\n"
19625
"http://localhost/mywiki\n"
19626
msgstr ""
19627
19628
#: serverguide/C/lamp-applications.xml:243(para)
19629
msgid ""
19630
"You can also run the test command by pointing your web browser to the "
19631
"following URL:"
19632
msgstr ""
19633
19634
#: serverguide/C/lamp-applications.xml:248(programlisting)
19635
#, no-wrap
19636
msgid ""
19637
"\n"
19638
"http://localhost/mywiki?action=test\n"
19639
msgstr ""
19640
19641
#: serverguide/C/lamp-applications.xml:252(para)
19642
msgid ""
19643
"For more details, please refer to the <ulink "
19644
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19645
msgstr ""
19646
19647
#: serverguide/C/lamp-applications.xml:263(para)
19648
msgid ""
19649
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19650
"Wiki</ulink>."
19651
msgstr ""
19652
19653
#: serverguide/C/lamp-applications.xml:268(para)
19654
msgid ""
19655
"Also, see the <ulink "
19656
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19657
"MoinMoin</ulink> page."
19658
msgstr ""
19659
19660
#: serverguide/C/lamp-applications.xml:277(title)
19661
msgid "MediaWiki"
19662
msgstr ""
19663
19664
#: serverguide/C/lamp-applications.xml:279(para)
19665
msgid ""
19666
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19667
"either use <application>MySQL</application> or "
19668
"<application>PostgreSQL</application> Database Management System."
19669
msgstr ""
19670
19671
#: serverguide/C/lamp-applications.xml:289(para)
19672
msgid ""
19673
"Before installing <application>MediaWiki</application> you should also "
19674
"install <application>Apache2</application>, the "
19675
"<application>PHP5</application> scripting language and Database a Management "
19676
"System. <application>MySQL</application> or "
19677
"<application>PostgreSQL</application> are the most common, choose one "
19678
"depending on your need. Please refer to those sections in this manual for "
19679
"installation instructions."
19680
msgstr ""
19681
19682
#: serverguide/C/lamp-applications.xml:297(para)
19683
msgid ""
19684
"To install <application>MediaWiki</application>, run the following command "
19685
"in the command prompt:"
19686
msgstr ""
19687
19688
#: serverguide/C/lamp-applications.xml:303(command)
19689
msgid "sudo apt-get install mediawiki php5-gd"
19690
msgstr ""
19691
19692
#: serverguide/C/lamp-applications.xml:306(para)
19693
msgid ""
19694
"For additional <application>MediaWiki</application> functionality see the "
19695
"<application>mediawiki-extensions</application> package."
19696
msgstr ""
19697
19698
#: serverguide/C/lamp-applications.xml:316(para)
19699
msgid ""
19700
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19701
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19702
"directory. You should uncomment the following line in this file to access "
19703
"MediaWiki application."
19704
msgstr ""
19705
19706
#: serverguide/C/lamp-applications.xml:324(screen)
19707
#, no-wrap
19708
msgid ""
19709
"\n"
19710
"# Alias /mediawiki /var/lib/mediawiki\n"
19711
msgstr ""
19712
19713
#: serverguide/C/lamp-applications.xml:328(para)
19714
msgid ""
19715
"After you uncomment the above line, restart Apache server and access "
19716
"MediaWiki using the following url:"
19717
msgstr ""
19718
19719
#: serverguide/C/lamp-applications.xml:333(programlisting)
19720
#, no-wrap
19721
msgid ""
19722
"\n"
19723
"http://localhost/mediawiki/config/index.php\n"
19724
msgstr ""
19725
19726
#: serverguide/C/lamp-applications.xml:338(para)
19727
msgid ""
19728
"Please read the <quote>Checking environment...</quote> section in this page. "
19729
"You should be able to fix many issues by carefully reading this section."
19730
msgstr ""
19731
19732
#: serverguide/C/lamp-applications.xml:345(para)
19733
msgid ""
19734
"Once the configuration is complete, you should copy the "
19735
"<filename>LocalSettings.php</filename> file to "
19736
"<filename>/etc/mediawiki</filename> directory:"
19737
msgstr ""
19738
19739
#: serverguide/C/lamp-applications.xml:352(command)
19740
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19741
msgstr ""
19742
19743
#: serverguide/C/lamp-applications.xml:355(para)
19744
msgid ""
19745
"You may also want to edit "
19746
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19747
msgstr ""
19748
19749
#: serverguide/C/lamp-applications.xml:360(programlisting)
19750
#, no-wrap
19751
msgid ""
19752
"\n"
19753
"ini_set( 'memory_limit', '64M' );\n"
19754
msgstr ""
19755
19756
#: serverguide/C/lamp-applications.xml:367(title)
19757
msgid "Extensions"
19758
msgstr ""
19759
19760
#: serverguide/C/lamp-applications.xml:368(para)
19761
msgid ""
19762
"The extensions add new features and enhancements for the MediaWiki "
19763
"application. The extensions give wiki administrators and end users the "
19764
"ability to customize MediaWiki to their requirements."
19765
msgstr ""
19766
19767
#: serverguide/C/lamp-applications.xml:374(para)
19768
msgid ""
19769
"You can download MediaWiki extensions as an archive file or checkout from "
19770
"the Subversion repository. You should copy it to "
19771
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19772
"also add the following line at the end of file: "
19773
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19774
msgstr ""
19775
19776
#: serverguide/C/lamp-applications.xml:382(programlisting)
19777
#, no-wrap
19778
msgid ""
19779
"\n"
19780
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19781
msgstr ""
19782
19783
#: serverguide/C/lamp-applications.xml:392(para)
19784
msgid ""
19785
"For more details, please refer to the <ulink "
19786
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19787
msgstr ""
19788
19789
#: serverguide/C/lamp-applications.xml:398(para)
19790
msgid ""
19791
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19792
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19793
"new MediaWiki administrators."
19794
msgstr ""
19795
19796
#: serverguide/C/lamp-applications.xml:404(para)
19797
msgid ""
19798
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19799
"Wiki MediaWiki</ulink> page is a good resource."
19800
msgstr ""
19801
19802
#: serverguide/C/lamp-applications.xml:414(title)
19803
msgid "phpMyAdmin"
19804
msgstr ""
19805
19806
#: serverguide/C/lamp-applications.xml:416(para)
19807
msgid ""
19808
"<application>phpMyAdmin</application> is a LAMP application specifically "
19809
"written for administering <application>MySQL</application> servers. Written "
19810
"in <application>PHP</application>, and accessed through a web browser, "
19811
"phpMyAdmin provides a graphical interface for database administration tasks."
19812
msgstr ""
19813
19814
#: serverguide/C/lamp-applications.xml:425(para)
19815
msgid ""
19816
"Before installing <application>phpMyAdmin</application> you will need access "
19817
"to a <application>MySQL</application> database either on the same host as "
19818
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19819
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19820
"enter:"
19821
msgstr ""
19822
19823
#: serverguide/C/lamp-applications.xml:432(command)
19824
msgid "sudo apt-get install phpmyadmin"
19825
msgstr ""
19826
19827
#: serverguide/C/lamp-applications.xml:435(para)
19828
msgid ""
19829
"At the prompt choose which web server to be configured for "
19830
"<application>phpMyAdmin</application>. The rest of this section will use "
19831
"<application>Apache2</application> for the web server."
19832
msgstr ""
19833
19834
#: serverguide/C/lamp-applications.xml:440(para)
19835
msgid ""
19836
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19837
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19838
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19839
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19840
"user if you any setup, and enter the <application>MySQL</application> user's "
19841
"password."
19842
msgstr ""
19843
19844
#: serverguide/C/lamp-applications.xml:447(para)
19845
msgid ""
19846
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19847
"needed, create users, create/destroy databases and tables, etc."
19848
msgstr ""
19849
19850
#: serverguide/C/lamp-applications.xml:455(para)
19851
msgid ""
19852
"The configuration files for <application>phpMyAdmin</application> are "
19853
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19854
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19855
"configuration options that apply globally to "
19856
"<application>phpMyAdmin</application>."
19857
msgstr ""
19858
19859
#: serverguide/C/lamp-applications.xml:461(para)
19860
msgid ""
19861
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19862
"hosted on another server, adjust the following in "
19863
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19864
msgstr ""
19865
19866
#: serverguide/C/lamp-applications.xml:466(programlisting)
19867
#, no-wrap
19868
msgid ""
19869
"\n"
19870
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19871
msgstr ""
19872
19873
#: serverguide/C/lamp-applications.xml:471(para)
19874
msgid ""
19875
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19876
"remote database server name or IP address. Also, be sure that the "
19877
"<application>phpMyAdmin</application> host has permissions to access the "
19878
"remote database."
19879
msgstr ""
19880
19881
#: serverguide/C/lamp-applications.xml:477(para)
19882
msgid ""
19883
"Once configured, log out of <application>phpMyAdmin</application> and back "
19884
"in, and you should be accessing the new server."
19885
msgstr ""
19886
19887
#: serverguide/C/lamp-applications.xml:481(para)
19888
msgid ""
19889
"The <filename>config.header.inc.php</filename> and "
19890
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19891
"header and footer to <application>phpMyAdmin</application>."
19892
msgstr ""
19893
19894
#: serverguide/C/lamp-applications.xml:486(para)
19895
msgid ""
19896
"Another important configuration file is "
19897
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19898
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19899
"configure <application>Apache2</application> to serve the "
19900
"<application>phpMyAdmin</application> site. The file contains directives for "
19901
"loading <application>PHP</application>, directory permissions, etc. For more "
19902
"information on configuring <application>Apache2</application> see <xref "
19903
"linkend=\"httpd\"/>."
19904
msgstr ""
19905
19906
#: serverguide/C/lamp-applications.xml:500(para)
19907
msgid ""
19908
"The <application>phpMyAdmin</application> documentation comes installed with "
19909
"the package and can be accessed from the <emphasis>phpMyAdmin "
19910
"Documentation</emphasis> link (a question mark with a box around it) under "
19911
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19912
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19913
msgstr ""
19914
19915
#: serverguide/C/lamp-applications.xml:507(para)
19916
msgid ""
19917
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19918
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19919
msgstr ""
19920
19921
#: serverguide/C/lamp-applications.xml:512(para)
19922
msgid ""
19923
"A third resource is the <ulink "
19924
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19925
"Wiki</ulink> page."
19926
msgstr ""
19927
19928
#: serverguide/C/introduction.xml:14(para)
19929
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19930
msgstr ""
19931
19932
#: serverguide/C/introduction.xml:15(para)
19933
msgid ""
19934
"Here you can find information on how to install and configure various server "
19935
"applications. It is a step-by-step, task-oriented guide for configuring and "
19936
"customizing your system."
19937
msgstr ""
19938
19939
#: serverguide/C/introduction.xml:19(para)
19940
msgid ""
19941
"This guide assumes you have a basic understanding of your Ubuntu system. "
19942
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19943
"but if you need detailed instructions installing Ubuntu please refer to the "
19944
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19945
"Installation Guide</ulink>."
19946
msgstr ""
19947
19948
#: serverguide/C/introduction.xml:25(para)
19949
msgid ""
19950
"A HTML version of the manual is available online at <ulink "
19951
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19952
"HTML files are also available in the <application>ubuntu-"
19953
"serverguide</application> package. See <xref linkend=\"package-"
19954
"management\"/> for details on installing packages."
19955
msgstr ""
19956
19957
#: serverguide/C/introduction.xml:32(para)
19958
msgid ""
19959
"If you choose to install the <application>ubuntu-serverguide</application> "
19960
"you can view this document from a console by:"
19961
msgstr ""
19962
19963
#: serverguide/C/introduction.xml:36(command)
19964
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19965
msgstr ""
19966
19967
#: serverguide/C/introduction.xml:39(para)
19968
msgid ""
19969
"If you are using a localized version of Ubuntu, replace "
19970
"<emphasis>C</emphasis> with your language localization (e.g. "
19971
"<emphasis>en_GB</emphasis>)."
19972
msgstr ""
19973
19974
#: serverguide/C/introduction.xml:53(title)
19975
msgid "Support"
19976
msgstr ""
19977
19978
#: serverguide/C/introduction.xml:55(para)
19979
msgid ""
19980
"There are a couple of different ways that Ubuntu Server Edition is "
19981
"supported, commercial support and community support. The main commercial "
19982
"support (and development funding) is available from Canonical Ltd. They "
19983
"supply reasonably priced support contracts on a per desktop or per server "
19984
"basis. For more information see the <ulink "
19985
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19986
"page."
19987
msgstr ""
19988
19989
#: serverguide/C/introduction.xml:62(para)
19990
msgid ""
19991
"Community support is also provided by dedicated individuals, and companies, "
19992
"that wish to make Ubuntu the best distribution possible. Support is provided "
19993
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19994
"large amount of information available can be overwhelming, but a good search "
19995
"engine query can usually provide an answer to your questions. See the <ulink "
19996
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19997
"information."
19998
msgstr ""
19999
20000
#: serverguide/C/installation.xml:14(para)
20001
msgid ""
20002
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
20003
"Edition. For more detailed instructions, please refer to the <ulink "
20004
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
20005
"Installation Guide</ulink>."
20006
msgstr ""
20007
20008
#: serverguide/C/installation.xml:19(title)
20009
msgid "Preparing to Install"
20010
msgstr ""
20011
20012
#: serverguide/C/installation.xml:20(para)
20013
msgid ""
20014
"This section explains various aspects to consider before starting the "
20015
"installation."
20016
msgstr ""
20017
20018
#: serverguide/C/installation.xml:24(title)
20019
msgid "System Requirements"
20020
msgstr ""
20021
20022
#: serverguide/C/installation.xml:25(para)
20023
msgid ""
20024
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
20025
"x86 and AMD64. The table below lists recommended hardware specifications. "
20026
"Depending on your needs, you might manage with less than this. However, most "
20027
"users risk being frustrated if they ignore these suggestions."
20028
msgstr ""
20029
20030
#: serverguide/C/installation.xml:27(title)
20031
msgid "Recommended Minimum Requirements"
20032
msgstr ""
20033
20034
#: serverguide/C/installation.xml:35(para)
20035
msgid "Install Type"
20036
msgstr ""
20037
20038
#: serverguide/C/installation.xml:36(para)
20039
msgid "RAM"
20040
msgstr ""
20041
20042
#: serverguide/C/installation.xml:37(para)
20043
msgid "Hard Drive Space"
20044
msgstr ""
20045
20046
#: serverguide/C/installation.xml:40(para)
20047
msgid "Base System"
20048
msgstr ""
20049
20050
#: serverguide/C/installation.xml:41(para)
20051
msgid "All Tasks Installed"
20052
msgstr ""
20053
20054
#: serverguide/C/installation.xml:46(para)
20055
msgid "Server"
20056
msgstr ""
20057
20058
#: serverguide/C/installation.xml:47(para)
20059
msgid "128 megabytes"
20060
msgstr ""
20061
20062
#: serverguide/C/installation.xml:48(para)
20063
msgid "500 megabytes"
20064
msgstr ""
20065
20066
#: serverguide/C/installation.xml:49(para)
20067
msgid "1 gigabyte"
20068
msgstr ""
20069
20070
#: serverguide/C/installation.xml:54(para)
20071
msgid ""
20072
"The Server Edition provides a common base for all sorts of server "
20073
"applications. It is a minimalist design providing a platform for the desired "
20074
"services, such as file/print services, web hosting, email hosting, etc."
20075
msgstr ""
20076
20077
#: serverguide/C/installation.xml:60(para)
20078
msgid ""
20079
"The requirements for UEC are slightly different for Front End requirements "
20080
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
20081
"requirements see <xref linkend=\"uec-node-requirements\"/>."
20082
msgstr ""
20083
20084
#: serverguide/C/installation.xml:68(title)
20085
msgid "Server and Desktop Differences"
20086
msgstr ""
20087
20088
#: serverguide/C/installation.xml:69(para)
20089
msgid ""
20090
"There are a few differences between the <emphasis>Ubuntu Server "
20091
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
20092
"should be noted that both editions use the same "
20093
"<application>apt</application> repositories. Making it just as easy to "
20094
"install a <emphasis role=\"italic\">server</emphasis> application on the "
20095
"Desktop Edition as it is on the Server Edition."
20096
msgstr ""
20097
20098
#: serverguide/C/installation.xml:75(para)
20099
msgid ""
20100
"The differences between the two editions are the lack of an X window "
20101
"environment in the Server Edition, the installation process, and different "
20102
"Kernel options."
20103
msgstr ""
20104
20105
#: serverguide/C/installation.xml:82(title)
20106
msgid "Kernel Differences:"
20107
msgstr ""
20108
20109
#: serverguide/C/installation.xml:85(para)
20110
msgid ""
20111
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
20112
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
20113
"Edition."
20114
msgstr ""
20115
20116
#: serverguide/C/installation.xml:91(para)
20117
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
20118
msgstr ""
20119
20120
#: serverguide/C/installation.xml:96(para)
20121
msgid ""
20122
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
20123
"Desktop Edition."
20124
msgstr ""
20125
20126
#: serverguide/C/installation.xml:102(para)
20127
msgid ""
20128
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
20129
"limited by memory addressing space."
20130
msgstr ""
20131
20132
#: serverguide/C/installation.xml:107(para)
20133
msgid ""
20134
"To see all kernel configuration options you can look through "
20135
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
20136
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
20137
"great resource on the options available."
20138
msgstr ""
20139
20140
#: serverguide/C/installation.xml:116(title)
20141
msgid "Backing Up"
20142
msgstr ""
20143
20144
#: serverguide/C/installation.xml:119(para)
20145
msgid ""
20146
"Before installing <application>Ubuntu Server Edition</application> you "
20147
"should make sure all data on the system is backed up. See <xref "
20148
"linkend=\"backups\"/> for backup options."
20149
msgstr ""
20150
20151
#: serverguide/C/installation.xml:123(para)
20152
msgid ""
20153
"If this is not the first time an operating system has been installed on your "
20154
"computer, it is likely you will need to re-partition your disk to make room "
20155
"for Ubuntu."
20156
msgstr ""
20157
20158
#: serverguide/C/installation.xml:127(para)
20159
msgid ""
20160
"Any time you partition your disk, you should be prepared to lose everything "
20161
"on the disk should you make a mistake or something goes wrong during "
20162
"partitioning. The programs used in installation are quite reliable, most "
20163
"have seen years of use, but they also perform destructive actions."
20164
msgstr ""
20165
20166
#: serverguide/C/installation.xml:139(title)
20167
msgid "Installing from CD"
20168
msgstr ""
20169
20170
#: serverguide/C/installation.xml:140(para)
20171
msgid ""
20172
"The basic steps to install Ubuntu Server Edition from CD are the same for "
20173
"installing any operating system from CD. Unlike the <emphasis>Desktop "
20174
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
20175
"a graphical installation program. Instead the Server Edition uses a console "
20176
"menu based process."
20177
msgstr ""
20178
20179
#: serverguide/C/installation.xml:147(para)
20180
msgid ""
20181
"First, download and burn the appropriate ISO file from the <ulink "
20182
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
20183
msgstr ""
20184
20185
#: serverguide/C/installation.xml:153(para)
20186
msgid "Boot the system from the CD-ROM drive."
20187
msgstr ""
20188
20189
#: serverguide/C/installation.xml:158(para)
20190
msgid ""
20191
"At the boot prompt you will be asked to select the language. Afterwards the "
20192
"installation process begins by asking for your keyboard layout."
20193
msgstr ""
20194
20195
#: serverguide/C/installation.xml:164(para)
20196
msgid ""
20197
"From the main boot menu there are some additional options to install Ubuntu "
20198
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
20199
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
20200
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
20201
"will cover the basic Ubuntu Server install."
20202
msgstr ""
20203
20204
#: serverguide/C/installation.xml:172(para)
20205
msgid ""
20206
"The installer then discovers your hardware configuration, and configures the "
20207
"network settings using DHCP. If you do not wish to use DHCP at the next "
20208
"screen choose \"Go Back\", and you have the option to \"Configure the "
20209
"network manually\"."
20210
msgstr ""
20211
20212
#: serverguide/C/installation.xml:179(para)
20213
msgid "Next, the installer asks for the system's hostname and Time Zone."
20214
msgstr ""
20215
20216
#: serverguide/C/installation.xml:184(para)
20217
msgid ""
20218
"You can then choose from several options to configure the hard drive layout. "
20219
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
20220
msgstr ""
20221
20222
#: serverguide/C/installation.xml:190(para)
20223
msgid "The Ubuntu base system is then installed."
20224
msgstr ""
20225
20226
#: serverguide/C/installation.xml:195(para)
20227
msgid ""
20228
"A new user is setup, this user will have <emphasis>root</emphasis> access "
20229
"through the <application>sudo</application> utility."
20230
msgstr ""
20231
20232
#: serverguide/C/installation.xml:201(para)
20233
msgid ""
20234
"After the user is setup, you will be asked to encrypt your <filename "
20235
"role=\"directory\">home</filename> directory."
20236
msgstr ""
20237
20238
#: serverguide/C/installation.xml:207(para)
20239
msgid ""
20240
"The next step in the installation process is to decide how you want to "
20241
"update the system. There are three options:"
20242
msgstr ""
20243
20244
#: serverguide/C/installation.xml:213(para)
20245
msgid ""
20246
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
20247
"log into the machine and manually install updates."
20248
msgstr ""
20249
20250
#: serverguide/C/installation.xml:219(para)
20251
msgid ""
20252
"<emphasis>Install security updates Automatically</emphasis>: will install "
20253
"the <application>unattended-upgrades</application> package, which will "
20254
"install security updates without the intervention of an administrator. For "
20255
"more details see <xref linkend=\"automatic-updates\"/>."
20256
msgstr ""
20257
20258
#: serverguide/C/installation.xml:226(para)
20259
msgid ""
20260
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
20261
"service provided by Canonical to help manage your Ubuntu machines. See the "
20262
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
20263
"site for details."
20264
msgstr ""
20265
20266
#: serverguide/C/installation.xml:235(para)
20267
msgid ""
20268
"You now have the option to install, or not install, several package tasks. "
20269
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
20270
"to launch <application>aptitude</application> to choose specific packages to "
20271
"install. For more information see <xref linkend=\"aptitude\"/>."
20272
msgstr ""
20273
20274
#: serverguide/C/installation.xml:243(para)
20275
msgid "Finally, the last step before rebooting is to set the clock to UTC."
20276
msgstr ""
20277
20278
#: serverguide/C/installation.xml:249(para)
20279
msgid ""
20280
"If at any point during installation you are not satisfied by the default "
20281
"setting, use the \"Go Back\" function at any prompt to be brought to a "
20282
"detailed installation menu that will allow you to modify the default "
20283
"settings."
20284
msgstr ""
20285
20286
#: serverguide/C/installation.xml:254(para)
20287
msgid ""
20288
"At some point during the installation process you may want to read the help "
20289
"screen provided by the installation system. To do this, press F1."
20290
msgstr ""
20291
20292
#: serverguide/C/installation.xml:259(para)
20293
msgid ""
20294
"Once again, for detailed instructions see the <ulink "
20295
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
20296
"Installation Guide</ulink>."
20297
msgstr ""
20298
20299
#: serverguide/C/installation.xml:265(title)
20300
msgid "Package Tasks"
20301
msgstr ""
20302
20303
#: serverguide/C/installation.xml:266(para)
20304
msgid ""
20305
"During the Server Edition installation you have the option of installing "
20306
"additional packages from the CD. The packages are grouped by the type of "
20307
"service they provide."
20308
msgstr ""
20309
20310
#: serverguide/C/installation.xml:272(para)
20311
msgid "Cloud computing: Walrus storage service"
20312
msgstr ""
20313
20314
#: serverguide/C/installation.xml:277(para)
20315
msgid "Cloud computing: all-in-one cluster"
20316
msgstr ""
20317
20318
#: serverguide/C/installation.xml:282(para)
20319
msgid "Cloud computing: Cluster controller"
20320
msgstr ""
20321
20322
#: serverguide/C/installation.xml:287(para)
20323
msgid "Cloud computing: Node controller"
20324
msgstr ""
20325
20326
#: serverguide/C/installation.xml:292(para)
20327
msgid "Cloud computing: Storage controller"
20328
msgstr ""
20329
20330
#: serverguide/C/installation.xml:297(para)
20331
msgid "Cloud computing: top-level cloud controller"
20332
msgstr ""
20333
20334
#: serverguide/C/installation.xml:302(para)
20335
msgid "DNS server: Selects the BIND DNS server and its documentation."
20336
msgstr ""
20337
20338
#: serverguide/C/installation.xml:307(para)
20339
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
20340
msgstr ""
20341
20342
#: serverguide/C/installation.xml:312(para)
20343
msgid ""
20344
"Mail server: This task selects a variety of package useful for a general "
20345
"purpose mail server system."
20346
msgstr ""
20347
20348
#: serverguide/C/installation.xml:317(para)
20349
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
20350
msgstr ""
20351
20352
#: serverguide/C/installation.xml:322(para)
20353
msgid ""
20354
"PostgreSQL database: This task selects client and server packages for the "
20355
"PostgreSQL database."
20356
msgstr ""
20357
20358
#: serverguide/C/installation.xml:327(para)
20359
msgid "Print server: This task sets up your system to be a print server."
20360
msgstr ""
20361
20362
#: serverguide/C/installation.xml:332(para)
20363
msgid ""
20364
"Samba File server: This task sets up your system to be a Samba file server, "
20365
"which is especially suitable in networks with both Windows and Linux systems."
20366
msgstr ""
20367
20368
#: serverguide/C/installation.xml:338(para)
20369
msgid ""
20370
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
20371
"etc."
20372
msgstr ""
20373
20374
#: serverguide/C/installation.xml:343(para)
20375
msgid ""
20376
"Virtual machine host: Includes packages needed to run KVM virtual machines."
20377
msgstr ""
20378
20379
#: serverguide/C/installation.xml:348(para)
20380
msgid ""
20381
"Manually select packages: Executes <application>apptitude</application> "
20382
"allowing you to individually select packages."
20383
msgstr ""
20384
20385
#: serverguide/C/installation.xml:353(para)
20386
msgid ""
20387
"Installing the package groups is accomplished using the "
20388
"<application>tasksel</application> utility. One of the important difference "
20389
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
20390
"installed, a package is also configured to reasonable defaults, eventually "
20391
"prompting you for additional required information. Likewise, when installing "
20392
"a task, the packages are not only installed, but also configured to provided "
20393
"a fully integrated service."
20394
msgstr ""
20395
20396
#: serverguide/C/installation.xml:360(para)
20397
msgid ""
20398
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
20399
"<xref linkend=\"uec\"/>."
20400
msgstr ""
20401
20402
#: serverguide/C/installation.xml:363(para)
20403
msgid ""
20404
"Once the installation process has finished you can view a list of available "
20405
"tasks by entering the following from a terminal prompt:"
20406
msgstr ""
20407
20408
#: serverguide/C/installation.xml:368(command)
20409
msgid "tasksel --list-tasks"
20410
msgstr ""
20411
20412
#: serverguide/C/installation.xml:371(para)
20413
msgid ""
20414
"The output will list tasks from other Ubuntu based distributions such as "
20415
"Kubuntu and Edubuntu. Note that you can also invoke the "
20416
"<command>tasksel</command> command by itself, which will bring up a menu of "
20417
"the different tasks available."
20418
msgstr ""
20419
20420
#: serverguide/C/installation.xml:377(para)
20421
msgid ""
20422
"You can view a list of which packages are installed with each task using the "
20423
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20424
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20425
"following:"
20426
msgstr ""
20427
20428
#: serverguide/C/installation.xml:382(command)
20429
msgid "tasksel --task-packages dns-server"
20430
msgstr ""
20431
20432
#: serverguide/C/installation.xml:384(para)
20433
msgid "The output of the command should list:"
20434
msgstr ""
20435
20436
#: serverguide/C/installation.xml:387(programlisting)
20437
#, no-wrap
20438
msgid ""
20439
"\n"
20440
"bind9-doc \n"
20441
"bind9utils \n"
20442
"bind9\n"
20443
msgstr ""
20444
20445
#: serverguide/C/installation.xml:392(para)
20446
msgid ""
20447
"Also, if you did not install one of the tasks during the installation "
20448
"process, but for example you decide to make your new LAMP server a DNS "
20449
"server as well. Simply insert the installation CD and from a terminal:"
20450
msgstr ""
20451
20452
#: serverguide/C/installation.xml:397(command)
20453
msgid "sudo tasksel install dns-server"
20454
msgstr ""
20455
20456
#: serverguide/C/installation.xml:402(title)
20457
msgid "Upgrading"
20458
msgstr ""
20459
20460
#: serverguide/C/installation.xml:403(para)
20461
msgid ""
20462
"There are several ways to upgrade from one Ubuntu release to another. This "
20463
"section gives an overview of the recommended upgrade method."
20464
msgstr ""
20465
20466
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20467
msgid "do-release-upgrade"
20468
msgstr ""
20469
20470
#: serverguide/C/installation.xml:408(para)
20471
msgid ""
20472
"The recommended way to upgrade a Server Edition installation is to use the "
20473
"<application>do-release-upgrade</application> utility. Part of the "
20474
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20475
"graphical dependencies and is installed by default."
20476
msgstr ""
20477
20478
#: serverguide/C/installation.xml:413(para)
20479
msgid ""
20480
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20481
"upgrade</command>. However, using <application>do-release-"
20482
"upgrade</application> is recommended because it has the ability to handle "
20483
"system configuration changes sometimes needed between releases."
20484
msgstr ""
20485
20486
#: serverguide/C/installation.xml:418(para)
20487
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20488
msgstr ""
20489
20490
#: serverguide/C/installation.xml:424(para)
20491
msgid ""
20492
"It is also possible to use <application>do-release-upgrade</application> to "
20493
"upgrade to a development version of Ubuntu. To accomplish this use the "
20494
"<emphasis>-d</emphasis> switch:"
20495
msgstr ""
20496
20497
#: serverguide/C/installation.xml:429(command)
20498
msgid "do-release-upgrade -d"
20499
msgstr ""
20500
20501
#: serverguide/C/installation.xml:432(para)
20502
msgid ""
20503
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20504
"for production environments."
20505
msgstr ""
20506
20507
#: serverguide/C/installation.xml:439(title)
20508
msgid "Advanced Installation"
20509
msgstr ""
20510
20511
#: serverguide/C/installation.xml:442(title)
20512
msgid "Software RAID"
20513
msgstr ""
20514
20515
#: serverguide/C/installation.xml:444(para)
20516
msgid ""
20517
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20518
"the probability of catastrophic data loss in case of drive failure. RAID is "
20519
"implemented in either software (where the operating system knows about both "
20520
"drives and actively maintains both of them) or hardware (where a special "
20521
"controller makes the OS think there's only one drive and maintains the "
20522
"drives 'invisibly')."
20523
msgstr ""
20524
20525
#: serverguide/C/installation.xml:451(para)
20526
msgid ""
20527
"The RAID software included with current versions of Linux (and Ubuntu) is "
20528
"based on the <application>'mdadm'</application> driver and works very well, "
20529
"better even than many so-called 'hardware' RAID controllers. This section "
20530
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20531
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20532
"another for <emphasis>swap</emphasis>."
20533
msgstr ""
20534
20535
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20536
msgid ""
20537
"Follow the installation steps until you get to the <emphasis>Partition "
20538
"disks</emphasis> step, then:"
20539
msgstr ""
20540
20541
#: serverguide/C/installation.xml:468(para)
20542
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20543
msgstr ""
20544
20545
#: serverguide/C/installation.xml:475(para)
20546
msgid ""
20547
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20548
"partition table on this device?\"</emphasis>."
20549
msgstr ""
20550
20551
#: serverguide/C/installation.xml:479(para)
20552
msgid ""
20553
"Repeat this step for each drive you wish to be part of the RAID array."
20554
msgstr ""
20555
20556
#: serverguide/C/installation.xml:486(para)
20557
msgid ""
20558
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20559
"select <emphasis>\"Create a new partition\"</emphasis>."
20560
msgstr ""
20561
20562
#: serverguide/C/installation.xml:493(para)
20563
msgid ""
20564
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20565
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20566
"size is twice that of RAM. Enter the partition size, then choose "
20567
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20568
msgstr ""
20569
20570
#: serverguide/C/installation.xml:502(para)
20571
msgid ""
20572
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20573
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20574
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20575
"<emphasis>\"Done setting up partition\"</emphasis>."
20576
msgstr ""
20577
20578
#: serverguide/C/installation.xml:511(para)
20579
msgid ""
20580
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20581
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20582
"partition\"</emphasis>."
20583
msgstr ""
20584
20585
#: serverguide/C/installation.xml:519(para)
20586
msgid ""
20587
"Use the rest of the free space on the drive and choose "
20588
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20589
msgstr ""
20590
20591
#: serverguide/C/installation.xml:526(para)
20592
msgid ""
20593
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20594
"at the top, changing it to <emphasis>\"physical volume for "
20595
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20596
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20597
"<emphasis>\"Done setting up partition\"</emphasis>."
20598
msgstr ""
20599
20600
#: serverguide/C/installation.xml:536(para)
20601
msgid "Repeat steps three through eight for the other disk and partitions."
20602
msgstr ""
20603
20604
#: serverguide/C/installation.xml:545(title)
20605
msgid "RAID Configuration"
20606
msgstr ""
20607
20608
#: serverguide/C/installation.xml:547(para)
20609
msgid "With the partitions setup the arrays are ready to be configured:"
20610
msgstr ""
20611
20612
#: serverguide/C/installation.xml:554(para)
20613
msgid ""
20614
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20615
"Software RAID\"</emphasis> at the top."
20616
msgstr ""
20617
20618
#: serverguide/C/installation.xml:561(para)
20619
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20620
msgstr ""
20621
20622
#: serverguide/C/installation.xml:568(para)
20623
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20624
msgstr ""
20625
20626
#: serverguide/C/installation.xml:575(para)
20627
msgid ""
20628
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20629
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20630
msgstr ""
20631
20632
#: serverguide/C/installation.xml:581(para)
20633
msgid ""
20634
"In order to use <emphasis>RAID5</emphasis> you need at least "
20635
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20636
"<emphasis>two</emphasis> drives are required."
20637
msgstr ""
20638
20639
#: serverguide/C/installation.xml:590(para)
20640
msgid ""
20641
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20642
"of hard drives you have, for the array. Then select "
20643
"<emphasis>\"Continue\"</emphasis>."
20644
msgstr ""
20645
20646
#: serverguide/C/installation.xml:598(para)
20647
msgid ""
20648
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20649
"default, then choose <emphasis>\"Continue\"</emphasis>."
20650
msgstr ""
20651
20652
#: serverguide/C/installation.xml:605(para)
20653
msgid ""
20654
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20655
"etc. The numbers will usually match and the different letters correspond to "
20656
"different hard drives."
20657
msgstr ""
20658
20659
#: serverguide/C/installation.xml:610(para)
20660
msgid ""
20661
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20662
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20663
"go to the next step."
20664
msgstr ""
20665
20666
#: serverguide/C/installation.xml:618(para)
20667
msgid ""
20668
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20669
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20670
"and <emphasis>sdb2</emphasis>."
20671
msgstr ""
20672
20673
#: serverguide/C/installation.xml:626(para)
20674
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20675
msgstr ""
20676
20677
#: serverguide/C/installation.xml:636(title)
20678
msgid "Formatting"
20679
msgstr ""
20680
20681
#: serverguide/C/installation.xml:638(para)
20682
msgid ""
20683
"There should now be a list of hard drives and RAID devices. The next step is "
20684
"to format and set the mount point for the RAID devices. Treat the RAID "
20685
"device as a local hard drive, format and mount accordingly."
20686
msgstr ""
20687
20688
#: serverguide/C/installation.xml:646(para)
20689
msgid ""
20690
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20691
"#0\"</emphasis> partition."
20692
msgstr ""
20693
20694
#: serverguide/C/installation.xml:653(para)
20695
msgid ""
20696
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20697
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20698
msgstr ""
20699
20700
#: serverguide/C/installation.xml:661(para)
20701
msgid ""
20702
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20703
"#1\"</emphasis> partition."
20704
msgstr ""
20705
20706
#: serverguide/C/installation.xml:668(para)
20707
msgid ""
20708
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20709
"journaling file system\"</emphasis>."
20710
msgstr ""
20711
20712
#: serverguide/C/installation.xml:675(para)
20713
msgid ""
20714
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20715
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20716
"options as appropriate, then select <emphasis>\"Done setting up "
20717
"partition\"</emphasis>."
20718
msgstr ""
20719
20720
#: serverguide/C/installation.xml:683(para)
20721
msgid ""
20722
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20723
"disk\"</emphasis>."
20724
msgstr ""
20725
20726
#: serverguide/C/installation.xml:690(para)
20727
msgid ""
20728
"If you choose to place the root partition on a RAID array, the installer "
20729
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20730
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20731
msgstr ""
20732
20733
#: serverguide/C/installation.xml:695(para)
20734
msgid "The installation process will then continue normally."
20735
msgstr ""
20736
20737
#: serverguide/C/installation.xml:701(title)
20738
msgid "Degraded RAID"
20739
msgstr ""
20740
20741
#: serverguide/C/installation.xml:703(para)
20742
msgid ""
20743
"At some point in the life of the computer a disk failure event may occur. "
20744
"When this happens, using Software RAID, the operating system will place the "
20745
"array into what is known as a <emphasis>degraded</emphasis> state."
20746
msgstr ""
20747
20748
#: serverguide/C/installation.xml:708(para)
20749
msgid ""
20750
"If the array has become degraded, due to the chance of data corruption, by "
20751
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20752
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20753
"second prompt giving you the option to go ahead and boot the system, or "
20754
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20755
"the desired behavior, especially if the machine is in a remote location. "
20756
"Booting to a degraded array can be configured several ways:"
20757
msgstr ""
20758
20759
#: serverguide/C/installation.xml:719(para)
20760
msgid ""
20761
"The <application>dpkg-reconfigure</application> utility can be used to "
20762
"configure the default behavior, and during the process you will be queried "
20763
"about additional settings related to the array. Such as monitoring, email "
20764
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20765
"following:"
20766
msgstr ""
20767
20768
#: serverguide/C/installation.xml:726(command)
20769
msgid "sudo dpkg-reconfigure mdadm"
20770
msgstr ""
20771
20772
#: serverguide/C/installation.xml:732(para)
20773
msgid ""
20774
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20775
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20776
"The file has the advantage of being able to pre-configure the system's "
20777
"behavior, and can also be manually edited:"
20778
msgstr ""
20779
20780
#: serverguide/C/installation.xml:738(programlisting)
20781
#, no-wrap
20782
msgid ""
20783
"\n"
20784
"BOOT_DEGRADED=true\n"
20785
msgstr ""
20786
20787
#: serverguide/C/installation.xml:743(para)
20788
msgid "The configuration file can be overridden by using a Kernel argument."
20789
msgstr ""
20790
20791
#: serverguide/C/installation.xml:751(para)
20792
msgid ""
20793
"Using a Kernel argument will allow the system to boot to a degraded array as "
20794
"well:"
20795
msgstr ""
20796
20797
#: serverguide/C/installation.xml:757(para)
20798
msgid ""
20799
"When the server is booting press <keycap>Shift</keycap> to open the "
20800
"<application>Grub</application> menu."
20801
msgstr ""
20802
20803
#: serverguide/C/installation.xml:762(para)
20804
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20805
msgstr ""
20806
20807
#: serverguide/C/installation.xml:767(para)
20808
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20809
msgstr ""
20810
20811
#: serverguide/C/installation.xml:772(para)
20812
msgid ""
20813
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20814
"end of the line."
20815
msgstr ""
20816
20817
#: serverguide/C/installation.xml:777(para)
20818
msgid ""
20819
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20820
"the system."
20821
msgstr ""
20822
20823
#: serverguide/C/installation.xml:786(para)
20824
msgid ""
20825
"Once the system has booted you can either repair the array see <xref "
20826
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20827
"another machine due to major hardware failure."
20828
msgstr ""
20829
20830
#: serverguide/C/installation.xml:793(title)
20831
msgid "RAID Maintenance"
20832
msgstr ""
20833
20834
#: serverguide/C/installation.xml:795(para)
20835
msgid ""
20836
"The <application>mdadm</application> utility can be used to view the status "
20837
"of an array, add disks to an array, remove disks, etc:"
20838
msgstr ""
20839
20840
#: serverguide/C/installation.xml:802(para)
20841
msgid "To view the status of an array, from a terminal prompt enter:"
20842
msgstr ""
20843
20844
#: serverguide/C/installation.xml:806(command)
20845
msgid "sudo mdadm -D /dev/md0"
20846
msgstr ""
20847
20848
#: serverguide/C/installation.xml:809(para)
20849
msgid ""
20850
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20851
"display <emphasis>detailed</emphasis> information about the "
20852
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20853
"with the appropriate RAID device."
20854
msgstr ""
20855
20856
#: serverguide/C/installation.xml:815(para)
20857
msgid "To view the status of a disk in an array:"
20858
msgstr ""
20859
20860
#: serverguide/C/installation.xml:819(command)
20861
msgid "sudo mdadm -E /dev/sda1"
20862
msgstr ""
20863
20864
#: serverguide/C/installation.xml:821(para)
20865
msgid ""
20866
"The output if very similar to the <command>mdadm -D</command> command, "
20867
"adjust <filename>/dev/sda1</filename> for each disk."
20868
msgstr ""
20869
20870
#: serverguide/C/installation.xml:826(para)
20871
msgid "If a disk fails and needs to be removed from an array enter:"
20872
msgstr ""
20873
20874
#: serverguide/C/installation.xml:830(command)
20875
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20876
msgstr ""
20877
20878
#: serverguide/C/installation.xml:832(para)
20879
msgid ""
20880
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20881
"the appropriate RAID device and disk."
20882
msgstr ""
20883
20884
#: serverguide/C/installation.xml:837(para)
20885
msgid "Similarly, to add a new disk:"
20886
msgstr ""
20887
20888
#: serverguide/C/installation.xml:841(command)
20889
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20890
msgstr ""
20891
20892
#: serverguide/C/installation.xml:846(para)
20893
msgid ""
20894
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20895
"though there is nothing physically wrong with the drive. It is usually "
20896
"worthwhile to remove the drive from the array then re-add it. This will "
20897
"cause the drive to re-sync with the array. If the drive will not sync with "
20898
"the array, it is a good indication of hardware failure."
20899
msgstr ""
20900
20901
#: serverguide/C/installation.xml:852(para)
20902
msgid ""
20903
"The <filename>/proc/mdstat</filename> file also contains useful information "
20904
"about the system's RAID devices:"
20905
msgstr ""
20906
20907
#: serverguide/C/installation.xml:857(command)
20908
msgid "cat /proc/mdstat"
20909
msgstr ""
20910
20911
#: serverguide/C/installation.xml:858(computeroutput)
20912
#, no-wrap
20913
msgid ""
20914
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20915
"[raid10] \n"
20916
"md0 : active raid1 sda1[0] sdb1[1]\n"
20917
" 10016384 blocks [2/2] [UU]\n"
20918
" \n"
20919
"unused devices: <none>"
20920
msgstr ""
20921
20922
#: serverguide/C/installation.xml:865(para)
20923
msgid ""
20924
"The following command is great for watching the status of a syncing drive:"
20925
msgstr ""
20926
20927
#: serverguide/C/installation.xml:870(command)
20928
msgid "watch -n1 cat /proc/mdstat"
20929
msgstr ""
20930
20931
#: serverguide/C/installation.xml:873(para)
20932
msgid ""
20933
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20934
"<application>watch</application> command."
20935
msgstr ""
20936
20937
#: serverguide/C/installation.xml:877(para)
20938
msgid ""
20939
"If you do need to replace a faulty drive, after the drive has been replaced "
20940
"and synced, <application>grub</application> will need to be installed. To "
20941
"install <application>grub</application> on the new drive, enter the "
20942
"following:"
20943
msgstr ""
20944
20945
#: serverguide/C/installation.xml:883(command)
20946
msgid "sudo grub-install /dev/md0"
20947
msgstr ""
20948
20949
#: serverguide/C/installation.xml:886(para)
20950
msgid ""
20951
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20952
msgstr ""
20953
20954
#: serverguide/C/installation.xml:894(para)
20955
msgid ""
20956
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20957
"can be configured. Please see the following links for more information:"
20958
msgstr ""
20959
20960
#: serverguide/C/installation.xml:901(para)
20961
msgid ""
20962
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20963
"Wiki Articles on RAID</ulink>."
20964
msgstr ""
20965
20966
#: serverguide/C/installation.xml:907(ulink)
20967
msgid "Software RAID HOWTO"
20968
msgstr ""
20969
20970
#: serverguide/C/installation.xml:912(ulink)
20971
msgid "Managing RAID on Linux"
20972
msgstr ""
20973
20974
#: serverguide/C/installation.xml:919(title)
20975
msgid "Logical Volume Manager (LVM)"
20976
msgstr ""
20977
20978
#: serverguide/C/installation.xml:921(para)
20979
msgid ""
20980
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20981
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20982
"hard disks. LVM volumes can be created on both software RAID partitions and "
20983
"standard partitions residing on a single disk. Volumes can also be extended, "
20984
"giving greater flexibility to systems as requirements change."
20985
msgstr ""
20986
20987
#: serverguide/C/installation.xml:930(para)
20988
msgid ""
20989
"A side effect of LVM's power and flexibility is a greater degree of "
20990
"complication. Before diving into the LVM installation process, it is best to "
20991
"get familiar with some terms."
20992
msgstr ""
20993
20994
#: serverguide/C/installation.xml:937(para)
20995
msgid ""
20996
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20997
"Volumes (LV)."
20998
msgstr ""
20999
21000
#: serverguide/C/installation.xml:942(para)
21001
msgid ""
21002
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
21003
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
21004
"which resides the actual EXT3, XFS, JFS, etc filesystem."
21005
msgstr ""
21006
21007
#: serverguide/C/installation.xml:948(para)
21008
msgid ""
21009
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
21010
"RAID partition. The Volume Group can be extended by adding more PVs."
21011
msgstr ""
21012
21013
#: serverguide/C/installation.xml:959(para)
21014
msgid ""
21015
"As an example this section covers installing Ubuntu Server Edition with "
21016
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
21017
"the initial install only one Physical Volume (PV) will be part of the Volume "
21018
"Group (VG). Another PV will be added after install to demonstrate how a VG "
21019
"can be extended."
21020
msgstr ""
21021
21022
#: serverguide/C/installation.xml:965(para)
21023
msgid ""
21024
"There are several installation options for LVM, <emphasis>\"Guided - use the "
21025
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
21026
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
21027
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
21028
"partitions and configure LVM. At this time the only way to configure a "
21029
"system with both LVM and standard partitions, during installation, is to use "
21030
"the Manual approach."
21031
msgstr ""
21032
21033
#: serverguide/C/installation.xml:982(para)
21034
msgid ""
21035
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
21036
"<emphasis>\"Manual\"</emphasis>."
21037
msgstr ""
21038
21039
#: serverguide/C/installation.xml:989(para)
21040
msgid ""
21041
"Select the hard disk and on the next screen choose \"yes\" to "
21042
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
21043
msgstr ""
21044
21045
#: serverguide/C/installation.xml:996(para)
21046
msgid ""
21047
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
21048
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
21049
msgstr ""
21050
21051
#: serverguide/C/installation.xml:1004(para)
21052
msgid ""
21053
"For the LVM <emphasis>/srv</emphasis>, create a new "
21054
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
21055
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
21056
"<emphasis>\"Done setting up the partition\"</emphasis>."
21057
msgstr ""
21058
21059
#: serverguide/C/installation.xml:1012(para)
21060
msgid ""
21061
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
21062
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
21063
"disk."
21064
msgstr ""
21065
21066
#: serverguide/C/installation.xml:1020(para)
21067
msgid ""
21068
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
21069
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
21070
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
21071
"After entering a name, select the partition configured for LVM, and choose "
21072
"<emphasis>\"Continue\"</emphasis>."
21073
msgstr ""
21074
21075
#: serverguide/C/installation.xml:1029(para)
21076
msgid ""
21077
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
21078
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
21079
"volume group, and enter a name for the new LV, for example "
21080
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
21081
"a size, which may be the full partition because it can always be extended "
21082
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
21083
"main <emphasis>\"Partition Disks\"</emphasis> screen."
21084
msgstr ""
21085
21086
#: serverguide/C/installation.xml:1039(para)
21087
msgid ""
21088
"Now add a filesystem to the new LVM. Select the partition under "
21089
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
21090
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
21091
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
21092
"select <emphasis>\"Done setting up the partition\"</emphasis>."
21093
msgstr ""
21094
21095
#: serverguide/C/installation.xml:1048(para)
21096
msgid ""
21097
"Finally, select <emphasis>\"Finish partitioning and write changes to "
21098
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
21099
"the installation."
21100
msgstr ""
21101
21102
#: serverguide/C/installation.xml:1056(para)
21103
msgid "There are some useful utilities to view information about LVM:"
21104
msgstr ""
21105
21106
#: serverguide/C/installation.xml:1061(para)
21107
msgid ""
21108
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
21109
msgstr ""
21110
21111
#: serverguide/C/installation.xml:1062(para)
21112
msgid ""
21113
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
21114
msgstr ""
21115
21116
#: serverguide/C/installation.xml:1063(para)
21117
msgid ""
21118
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
21119
"Physical Volumes."
21120
msgstr ""
21121
21122
#: serverguide/C/installation.xml:1068(title)
21123
msgid "Extending Volume Groups"
21124
msgstr ""
21125
21126
#: serverguide/C/installation.xml:1070(para)
21127
msgid ""
21128
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
21129
"section covers adding a second hard disk, creating a Physical Volume (PV), "
21130
"adding it to the volume group (VG), extending the logical volume <filename "
21131
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
21132
"example assumes a second hard disk has been added to the system. This hard "
21133
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
21134
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
21135
"before issuing the commands below. You could lose some data if you issue "
21136
"those commands on a non-empty disk. In our example we will use the entire "
21137
"disk as a physical volume (you could choose to create partitions and use "
21138
"them as different physical volumes)"
21139
msgstr ""
21140
21141
#: serverguide/C/installation.xml:1082(para)
21142
msgid "First, create the physical volume, in a terminal execute:"
21143
msgstr ""
21144
21145
#: serverguide/C/installation.xml:1087(command)
21146
msgid "sudo pvcreate /dev/sdb"
21147
msgstr ""
21148
21149
#: serverguide/C/installation.xml:1093(para)
21150
msgid "Now extend the Volume Group (VG):"
21151
msgstr ""
21152
21153
#: serverguide/C/installation.xml:1098(command)
21154
msgid "sudo vgextend vg01 /dev/sdb"
21155
msgstr ""
21156
21157
#: serverguide/C/installation.xml:1104(para)
21158
msgid ""
21159
"Use <application>vgdisplay</application> to find out the free physical "
21160
"extents - Free PE / size (the size you can allocate). We will assume a free "
21161
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
21162
"whole free space available. Use your own PE and/or free space."
21163
msgstr ""
21164
21165
#: serverguide/C/installation.xml:1110(para)
21166
msgid ""
21167
"The Logical Volume (LV) can now be extended by different methods, we will "
21168
"only see how to use the PE to extend the LV:"
21169
msgstr ""
21170
21171
#: serverguide/C/installation.xml:1115(command)
21172
msgid "sudo lvextend /dev/vg01/srv -l +511"
21173
msgstr ""
21174
21175
#: serverguide/C/installation.xml:1118(para)
21176
msgid ""
21177
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
21178
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
21179
"Gig, Tera, etc bytes."
21180
msgstr ""
21181
21182
#: serverguide/C/installation.xml:1126(para)
21183
msgid ""
21184
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
21185
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
21186
"pratice to unmount it anyway and check the filesystem, so that you don't "
21187
"mess up the day you want to reduce a logical volume (in that case unmounting "
21188
"first is compulsory)."
21189
msgstr ""
21190
21191
#: serverguide/C/installation.xml:1132(para)
21192
msgid ""
21193
"The following commands are for an <emphasis>EXT3</emphasis> or "
21194
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
21195
"there may be other utilities available."
21196
msgstr ""
21197
21198
#: serverguide/C/installation.xml:1139(command)
21199
msgid "sudo e2fsck -f /dev/vg01/srv"
21200
msgstr ""
21201
21202
#: serverguide/C/installation.xml:1142(para)
21203
msgid ""
21204
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
21205
"forces checking even if the system seems clean."
21206
msgstr ""
21207
21208
#: serverguide/C/installation.xml:1149(para)
21209
msgid "Finally, resize the filesystem:"
21210
msgstr ""
21211
21212
#: serverguide/C/installation.xml:1154(command)
21213
msgid "sudo resize2fs /dev/vg01/srv"
21214
msgstr ""
21215
21216
#: serverguide/C/installation.xml:1160(para)
21217
msgid "Now mount the partition and check its size."
21218
msgstr ""
21219
21220
#: serverguide/C/installation.xml:1165(command)
21221
msgid "mount /dev/vg01/srv /srv && df -h /srv"
21222
msgstr ""
21223
21224
#: serverguide/C/installation.xml:1177(para)
21225
msgid ""
21226
"See the <ulink "
21227
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
21228
"Articles</ulink>."
21229
msgstr ""
21230
21231
#: serverguide/C/installation.xml:1182(para)
21232
msgid ""
21233
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
21234
"HOWTO</ulink> for more information."
21235
msgstr ""
21236
21237
#: serverguide/C/installation.xml:1187(para)
21238
msgid ""
21239
"Another good article is <ulink "
21240
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
21241
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
21242
"linuxdevcenter.com site."
21243
msgstr ""
21244
21245
#: serverguide/C/installation.xml:1194(para)
21246
msgid ""
21247
"For more information on <application>fdisk</application> see the <ulink "
21248
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
21249
"man page</ulink>."
21250
msgstr ""
21251
21252
#: serverguide/C/file-server.xml:13(title)
21253
msgid "File Servers"
21254
msgstr ""
21255
21256
#: serverguide/C/file-server.xml:15(para)
21257
msgid ""
21258
"If you have more than one computer on a single network. At some point you "
21259
"will probably need to share files between them. In this section we cover "
21260
"installing and configuring FTP, NFS, and CUPS."
21261
msgstr ""
21262
21263
#: serverguide/C/file-server.xml:22(title)
21264
msgid "FTP Server"
21265
msgstr ""
21266
21267
#: serverguide/C/file-server.xml:24(para)
21268
msgid ""
21269
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
21270
"files between computers. FTP works on a client/server model. The server "
21271
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
21272
"listens for FTP requests from remote clients. When a request is received, it "
21273
"manages the login and sets up the connection. For the duration of the "
21274
"session it executes any of commands sent by the FTP client."
21275
msgstr ""
21276
21277
#: serverguide/C/file-server.xml:33(para)
21278
msgid "Access to an FTP server can be managed in two ways:"
21279
msgstr ""
21280
21281
#: serverguide/C/file-server.xml:37(para)
21282
msgid "Anonymous"
21283
msgstr ""
21284
21285
#: serverguide/C/file-server.xml:40(para)
21286
msgid "Authenticated"
21287
msgstr ""
21288
21289
#: serverguide/C/file-server.xml:43(para)
21290
msgid ""
21291
"In the Anonymous mode, remote clients can access the FTP server by using the "
21292
"default user account called \"anonymous\" or \"ftp\" and sending an email "
21293
"address as the password. In the Authenticated mode a user must have an "
21294
"account and a password. User access to the FTP server directories and files "
21295
"is dependent on the permissions defined for the account used at login. As a "
21296
"general rule, the FTP daemon will hide the root directory of the FTP server "
21297
"and change it to the FTP Home directory. This hides the rest of the file "
21298
"system from remote sessions."
21299
msgstr ""
21300
21301
#: serverguide/C/file-server.xml:55(title)
21302
msgid "vsftpd - FTP Server Installation"
21303
msgstr ""
21304
21305
#: serverguide/C/file-server.xml:57(para)
21306
msgid ""
21307
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
21308
"and maintain. To install <application>vsftpd</application> you can run the "
21309
"following command:"
21310
msgstr ""
21311
21312
#: serverguide/C/file-server.xml:65(command)
21313
msgid "sudo apt-get install vsftpd"
21314
msgstr ""
21315
21316
#: serverguide/C/file-server.xml:71(title)
21317
msgid "Anonymous FTP Configuration"
21318
msgstr ""
21319
21320
#: serverguide/C/file-server.xml:73(para)
21321
msgid ""
21322
"By default <application>vsftpd</application> is configured to only allow "
21323
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
21324
"created with a home directory of <filename>/home/ftp</filename>. This is the "
21325
"default FTP directory."
21326
msgstr ""
21327
21328
#: serverguide/C/file-server.xml:80(para)
21329
msgid ""
21330
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
21331
"example, simply create a directory in another location and change the "
21332
"<emphasis>ftp</emphasis> user's home directory:"
21333
msgstr ""
21334
21335
#: serverguide/C/file-server.xml:87(command)
21336
msgid "sudo mkdir /srv/ftp"
21337
msgstr ""
21338
21339
#: serverguide/C/file-server.xml:88(command)
21340
msgid "sudo usermod -d /srv/ftp ftp"
21341
msgstr ""
21342
21343
#: serverguide/C/file-server.xml:91(para)
21344
msgid "After making the change restart <application>vsftpd</application>:"
21345
msgstr ""
21346
21347
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
21348
msgid "sudo /etc/init.d/vsftpd restart"
21349
msgstr ""
21350
21351
#: serverguide/C/file-server.xml:99(para)
21352
msgid ""
21353
"Finally, copy any files and directories you would like to make available "
21354
"through anonymous FTP to <filename>/srv/ftp</filename>."
21355
msgstr ""
21356
21357
#: serverguide/C/file-server.xml:106(title)
21358
msgid "User Authenticated FTP Configuration"
21359
msgstr ""
21360
21361
#: serverguide/C/file-server.xml:108(para)
21362
msgid ""
21363
"To configure <application>vsftpd</application> to authenticate system users "
21364
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
21365
msgstr ""
21366
21367
#: serverguide/C/file-server.xml:114(programlisting)
21368
#, no-wrap
21369
msgid ""
21370
"\n"
21371
"local_enable=YES\n"
21372
"write_enable=YES\n"
21373
msgstr ""
21374
21375
#: serverguide/C/file-server.xml:119(para)
21376
msgid "Now restart <application>vsftpd</application>:"
21377
msgstr ""
21378
21379
#: serverguide/C/file-server.xml:127(para)
21380
msgid ""
21381
"Now when system users login to FTP they will start in their "
21382
"<emphasis>home</emphasis> directories where they can download, upload, "
21383
"create directories, etc."
21384
msgstr ""
21385
21386
#: serverguide/C/file-server.xml:133(para)
21387
msgid ""
21388
"Similarly, by default, the anonymous users are not allowed to upload files "
21389
"to FTP server. To change this setting, you should uncomment the following "
21390
"line, and restart <application>vsftpd</application>:"
21391
msgstr ""
21392
21393
#: serverguide/C/file-server.xml:140(programlisting)
21394
#, no-wrap
21395
msgid ""
21396
"\n"
21397
"anon_upload_enable=YES\n"
21398
msgstr ""
21399
21400
#: serverguide/C/file-server.xml:145(para)
21401
msgid ""
21402
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
21403
"not enable anonymous upload on servers accessed directly from the Internet."
21404
msgstr ""
21405
21406
#: serverguide/C/file-server.xml:151(para)
21407
msgid ""
21408
"The configuration file consists of many configuration parameters. The "
21409
"information about each parameter is available in the configuration file. "
21410
"Alternatively, you can refer to the man page, <command>man 5 "
21411
"vsftpd.conf</command> for details of each parameter."
21412
msgstr ""
21413
21414
#: serverguide/C/file-server.xml:162(title)
21415
msgid "Securing FTP"
21416
msgstr ""
21417
21418
#: serverguide/C/file-server.xml:164(para)
21419
msgid ""
21420
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21421
"<application>vsftpd</application> more secure. For example users can be "
21422
"limited to their home directories by uncommenting:"
21423
msgstr ""
21424
21425
#: serverguide/C/file-server.xml:170(programlisting)
21426
#, no-wrap
21427
msgid ""
21428
"\n"
21429
"chroot_local_user=YES\n"
21430
msgstr ""
21431
21432
#: serverguide/C/file-server.xml:174(para)
21433
msgid ""
21434
"You can also limit a specific list of users to just their home directories:"
21435
msgstr ""
21436
21437
#: serverguide/C/file-server.xml:178(programlisting)
21438
#, no-wrap
21439
msgid ""
21440
"\n"
21441
"chroot_list_enable=YES\n"
21442
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21443
msgstr ""
21444
21445
#: serverguide/C/file-server.xml:183(para)
21446
msgid ""
21447
"After uncommenting the above options, create a "
21448
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21449
"per line. Then restart <application>vsftpd</application>:"
21450
msgstr ""
21451
21452
#: serverguide/C/file-server.xml:192(para)
21453
msgid ""
21454
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21455
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21456
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21457
"add them to the list."
21458
msgstr ""
21459
21460
#: serverguide/C/file-server.xml:199(para)
21461
msgid ""
21462
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21463
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21464
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21465
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21466
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21467
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21468
"with a shell may not be ideal for some environments, such as a shared web "
21469
"host."
21470
msgstr ""
21471
21472
#: serverguide/C/file-server.xml:208(para)
21473
msgid ""
21474
"To configure <emphasis>FTPS</emphasis>, edit "
21475
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21476
msgstr ""
21477
21478
#: serverguide/C/file-server.xml:212(programlisting)
21479
#, no-wrap
21480
msgid ""
21481
"\n"
21482
"ssl_enable=Yes\n"
21483
msgstr ""
21484
21485
#: serverguide/C/file-server.xml:216(para)
21486
msgid "Also, notice the certificate and key related options:"
21487
msgstr ""
21488
21489
#: serverguide/C/file-server.xml:220(programlisting)
21490
#, no-wrap
21491
msgid ""
21492
"\n"
21493
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21494
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21495
msgstr ""
21496
21497
#: serverguide/C/file-server.xml:225(para)
21498
msgid ""
21499
"By default these options are set the certificate and key provided by the "
21500
"<application>ssl-cert</application> package. In a production environment "
21501
"these should be replaced with a certificate and key generated for the "
21502
"specific host. For more information on certificates see <xref "
21503
"linkend=\"certificates-and-security\"/>."
21504
msgstr ""
21505
21506
#: serverguide/C/file-server.xml:231(para)
21507
msgid ""
21508
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21509
"be forced to use <emphasis>FTPS</emphasis>:"
21510
msgstr ""
21511
21512
#: serverguide/C/file-server.xml:240(para)
21513
msgid ""
21514
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21515
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21516
"adding the <emphasis>nologin</emphasis> shell:"
21517
msgstr ""
21518
21519
#: serverguide/C/file-server.xml:245(programlisting)
21520
#, no-wrap
21521
msgid ""
21522
"\n"
21523
"# /etc/shells: valid login shells\n"
21524
"/bin/csh\n"
21525
"/bin/sh\n"
21526
"/usr/bin/es\n"
21527
"/usr/bin/ksh\n"
21528
"/bin/ksh\n"
21529
"/usr/bin/rc\n"
21530
"/usr/bin/tcsh\n"
21531
"/bin/tcsh\n"
21532
"/usr/bin/esh\n"
21533
"/bin/dash\n"
21534
"/bin/bash\n"
21535
"/bin/rbash\n"
21536
"/usr/bin/screen\n"
21537
"/usr/sbin/nologin\n"
21538
msgstr ""
21539
21540
#: serverguide/C/file-server.xml:263(para)
21541
msgid ""
21542
"This is necessary because, by default <application>vsftpd</application> uses "
21543
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21544
"configuration file contains:"
21545
msgstr ""
21546
21547
#: serverguide/C/file-server.xml:268(programlisting)
21548
#, no-wrap
21549
msgid ""
21550
"\n"
21551
"auth required pam_shells.so\n"
21552
msgstr ""
21553
21554
#: serverguide/C/file-server.xml:272(para)
21555
msgid ""
21556
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21557
"in the <filename>/etc/shells</filename> file."
21558
msgstr ""
21559
21560
#: serverguide/C/file-server.xml:277(para)
21561
msgid ""
21562
"Most popular FTP clients can be configured connect using FTPS. The "
21563
"<application>lftp</application> command line FTP client has the ability to "
21564
"use FTPS as well."
21565
msgstr ""
21566
21567
#: serverguide/C/file-server.xml:288(para)
21568
msgid ""
21569
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21570
"website</ulink> for more information."
21571
msgstr ""
21572
21573
#: serverguide/C/file-server.xml:293(para)
21574
msgid ""
21575
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21576
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21577
"vsftpd.conf man page</ulink>."
21578
msgstr ""
21579
21580
#: serverguide/C/file-server.xml:299(para)
21581
msgid ""
21582
"The CodeGurus article <ulink "
21583
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21584
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21585
"contrasting FTPS and SFTP."
21586
msgstr ""
21587
21588
#: serverguide/C/file-server.xml:305(para)
21589
msgid ""
21590
"Also, for more information see the <ulink "
21591
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21592
"page."
21593
msgstr ""
21594
21595
#: serverguide/C/file-server.xml:315(title)
21596
msgid "Network File System (NFS)"
21597
msgstr ""
21598
21599
#: serverguide/C/file-server.xml:316(para)
21600
msgid ""
21601
"NFS allows a system to share directories and files with others over a "
21602
"network. By using NFS, users and programs can access files on remote systems "
21603
"almost as if they were local files."
21604
msgstr ""
21605
21606
#: serverguide/C/file-server.xml:322(para)
21607
msgid "Some of the most notable benefits that NFS can provide are:"
21608
msgstr ""
21609
21610
#: serverguide/C/file-server.xml:328(para)
21611
msgid ""
21612
"Local workstations use less disk space because commonly used data can be "
21613
"stored on a single machine and still remain accessible to others over the "
21614
"network."
21615
msgstr ""
21616
21617
#: serverguide/C/file-server.xml:333(para)
21618
msgid ""
21619
"There is no need for users to have separate home directories on every "
21620
"network machine. Home directories could be set up on the NFS server and made "
21621
"available throughout the network."
21622
msgstr ""
21623
21624
#: serverguide/C/file-server.xml:339(para)
21625
msgid ""
21626
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21627
"be used by other machines on the network. This may reduce the number of "
21628
"removable media drives throughout the network."
21629
msgstr ""
21630
21631
#: serverguide/C/file-server.xml:349(para)
21632
msgid ""
21633
"At a terminal prompt enter the following command to install the NFS Server:"
21634
msgstr ""
21635
21636
#: serverguide/C/file-server.xml:355(command)
21637
msgid "sudo apt-get install nfs-kernel-server"
21638
msgstr ""
21639
21640
#: serverguide/C/file-server.xml:361(para)
21641
msgid ""
21642
"You can configure the directories to be exported by adding them to the "
21643
"<filename>/etc/exports</filename> file. For example:"
21644
msgstr ""
21645
21646
#: serverguide/C/file-server.xml:366(screen)
21647
#, no-wrap
21648
msgid ""
21649
"\n"
21650
"/ubuntu *(ro,sync,no_root_squash)\n"
21651
"/home *(rw,sync,no_root_squash)\n"
21652
msgstr ""
21653
21654
#: serverguide/C/file-server.xml:372(para)
21655
msgid ""
21656
"You can replace * with one of the hostname formats. Make the hostname "
21657
"declaration as specific as possible so unwanted systems cannot access the "
21658
"NFS mount."
21659
msgstr ""
21660
21661
#: serverguide/C/file-server.xml:378(para)
21662
msgid ""
21663
"To start the NFS server, you can run the following command at a terminal "
21664
"prompt:"
21665
msgstr ""
21666
21667
#: serverguide/C/file-server.xml:383(command)
21668
msgid "sudo /etc/init.d/nfs-kernel-server start"
21669
msgstr ""
21670
21671
#: serverguide/C/file-server.xml:388(title)
21672
msgid "NFS Client Configuration"
21673
msgstr ""
21674
21675
#: serverguide/C/file-server.xml:389(para)
21676
msgid ""
21677
"Use the <application>mount</application> command to mount a shared NFS "
21678
"directory from another machine, by typing a command line similar to the "
21679
"following at a terminal prompt:"
21680
msgstr ""
21681
21682
#: serverguide/C/file-server.xml:395(command)
21683
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21684
msgstr ""
21685
21686
#: serverguide/C/file-server.xml:399(para)
21687
msgid ""
21688
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21689
"There should be no files or subdirectories in the "
21690
"<filename>/local/ubuntu</filename> directory."
21691
msgstr ""
21692
21693
#: serverguide/C/file-server.xml:406(para)
21694
msgid ""
21695
"An alternate way to mount an NFS share from another machine is to add a line "
21696
"to the <filename>/etc/fstab</filename> file. The line must state the "
21697
"hostname of the NFS server, the directory on the server being exported, and "
21698
"the directory on the local machine where the NFS share is to be mounted."
21699
msgstr ""
21700
21701
#: serverguide/C/file-server.xml:414(para)
21702
msgid ""
21703
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21704
"as follows:"
21705
msgstr ""
21706
21707
#: serverguide/C/file-server.xml:420(programlisting)
21708
#, no-wrap
21709
msgid ""
21710
"\n"
21711
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21712
"rsize=8192,wsize=8192,timeo=14,intr\n"
21713
msgstr ""
21714
21715
#: serverguide/C/file-server.xml:424(para)
21716
msgid ""
21717
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21718
"common</application> package is installed on your client. To install "
21719
"<application>nfs-common</application> enter the following command at the "
21720
"terminal prompt: <screen>\n"
21721
"<command>sudo apt-get install nfs-common</command>\n"
21722
"</screen>"
21723
msgstr ""
21724
21725
#: serverguide/C/file-server.xml:437(ulink)
21726
msgid "Linux NFS faq"
21727
msgstr ""
21728
21729
#: serverguide/C/file-server.xml:439(ulink)
21730
msgid "Ubuntu Wiki NFS Howto"
21731
msgstr ""
21732
21733
#: serverguide/C/file-server.xml:445(title)
21734
msgid "CUPS - Print Server"
21735
msgstr ""
21736
21737
#: serverguide/C/file-server.xml:446(para)
21738
msgid ""
21739
"The primary mechanism for Ubuntu printing and print services is the "
21740
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21741
"printing system is a freely available, portable printing layer which has "
21742
"become the new standard for printing in most Linux distributions."
21743
msgstr ""
21744
21745
#: serverguide/C/file-server.xml:453(para)
21746
msgid ""
21747
"CUPS manages print jobs and queues and provides network printing using the "
21748
"standard Internet Printing Protocol (IPP), while offering support for a very "
21749
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21750
"also supports PostScript Printer Description (PPD) and auto-detection of "
21751
"network printers, and features a simple web-based configuration and "
21752
"administration tool."
21753
msgstr ""
21754
21755
#: serverguide/C/file-server.xml:463(para)
21756
msgid ""
21757
"To install CUPS on your Ubuntu computer, simply use "
21758
"<application>sudo</application> with the <application>apt-get</application> "
21759
"command and give the packages to install as the first parameter. A complete "
21760
"CUPS install has many package dependencies, but they may all be specified on "
21761
"the same command line. Enter the following at a terminal prompt to install "
21762
"CUPS:"
21763
msgstr ""
21764
21765
#: serverguide/C/file-server.xml:468(command)
21766
msgid "sudo apt-get install cups"
21767
msgstr ""
21768
21769
#: serverguide/C/file-server.xml:471(para)
21770
msgid ""
21771
"Upon authenticating with your user password, the packages should be "
21772
"downloaded and installed without error. Upon the conclusion of installation, "
21773
"the CUPS server will be started automatically."
21774
msgstr ""
21775
21776
#: serverguide/C/file-server.xml:476(para)
21777
msgid ""
21778
"For troubleshooting purposes, you can access CUPS server errors via the "
21779
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21780
"error log does not show enough information to troubleshoot any problems you "
21781
"encounter, the verbosity of the CUPS log can be increased by changing the "
21782
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21783
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21784
"everything, from the default of \"info\". If you make this change, remember "
21785
"to change it back once you've solved your problem, to prevent the log file "
21786
"from becoming overly large."
21787
msgstr ""
21788
21789
#: serverguide/C/file-server.xml:489(para)
21790
msgid ""
21791
"The Common UNIX Printing System server's behavior is configured through the "
21792
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21793
"The CUPS configuration file follows the same syntax as the primary "
21794
"configuration file for the Apache HTTP server, so users familiar with "
21795
"editing Apache's configuration file should feel at ease when editing the "
21796
"CUPS configuration file. Some examples of settings you may wish to change "
21797
"initially will be presented here."
21798
msgstr ""
21799
21800
#: serverguide/C/file-server.xml:499(para)
21801
msgid ""
21802
"Prior to editing the configuration file, you should make a copy of the "
21803
"original file and protect it from writing, so you will have the original "
21804
"settings as a reference, and to reuse as necessary."
21805
msgstr ""
21806
21807
#: serverguide/C/file-server.xml:503(para)
21808
msgid ""
21809
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21810
"writing with the following commands, issued at a terminal prompt:"
21811
msgstr ""
21812
21813
#: serverguide/C/file-server.xml:509(command)
21814
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21815
msgstr ""
21816
21817
#: serverguide/C/file-server.xml:510(command)
21818
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21819
msgstr ""
21820
21821
#: serverguide/C/file-server.xml:515(para)
21822
msgid ""
21823
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21824
"address of the designated administrator of the CUPS server, simply edit the "
21825
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21826
"preferred text editor, and add or modify the <emphasis "
21827
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21828
"you are the Administrator for the CUPS server, and your e-mail address is "
21829
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21830
"as such:"
21831
msgstr ""
21832
21833
#: serverguide/C/file-server.xml:526(screen)
21834
#, no-wrap
21835
msgid ""
21836
"\n"
21837
"ServerAdmin bjoy@somebigco.com\n"
21838
msgstr ""
21839
21840
#: serverguide/C/file-server.xml:532(para)
21841
msgid ""
21842
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21843
"server installation listens only on the loopback interface at IP address "
21844
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21845
"listen on an actual network adapter's IP address, you must specify either a "
21846
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21847
"addition of a Listen directive. For example, if your CUPS server resides on "
21848
"a local network at the IP address <emphasis "
21849
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21850
"accessible to the other systems on this subnetwork, you would edit the "
21851
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21852
"such:"
21853
msgstr ""
21854
21855
#: serverguide/C/file-server.xml:546(screen)
21856
#, no-wrap
21857
msgid ""
21858
"\n"
21859
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21860
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21861
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21862
"(IPP)\n"
21863
msgstr ""
21864
21865
#: serverguide/C/file-server.xml:552(para)
21866
msgid ""
21867
"In the example above, you may comment out or remove the reference to the "
21868
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21869
"</application> to listen on that interface, but would rather have it only "
21870
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21871
"listening for all network interfaces for which a certain hostname is bound, "
21872
"including the Loopback, you could create a Listen entry for the hostname "
21873
"<emphasis>socrates</emphasis> as such:"
21874
msgstr ""
21875
21876
#: serverguide/C/file-server.xml:562(screen)
21877
#, no-wrap
21878
msgid ""
21879
"\n"
21880
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21881
msgstr ""
21882
21883
#: serverguide/C/file-server.xml:566(para)
21884
msgid ""
21885
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21886
"instead, as in:"
21887
msgstr ""
21888
21889
#: serverguide/C/file-server.xml:568(screen)
21890
#, no-wrap
21891
msgid ""
21892
"\n"
21893
"Port 631 # Listen on port 631 on all interfaces\n"
21894
msgstr ""
21895
21896
#: serverguide/C/file-server.xml:575(para)
21897
msgid ""
21898
"For more examples of configuration directives in the CUPS server "
21899
"configuration file, view the associated system manual page by entering the "
21900
"following command at a terminal prompt:"
21901
msgstr ""
21902
21903
#: serverguide/C/file-server.xml:582(command)
21904
msgid "man cupsd.conf"
21905
msgstr ""
21906
21907
#: serverguide/C/file-server.xml:586(para)
21908
msgid ""
21909
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21910
"configuration file, you'll need to restart the CUPS server by typing the "
21911
"following command at a terminal prompt:"
21912
msgstr ""
21913
21914
#: serverguide/C/file-server.xml:592(command)
21915
msgid "sudo /etc/init.d/cups restart"
21916
msgstr ""
21917
21918
#: serverguide/C/file-server.xml:598(title)
21919
msgid "Web Interface"
21920
msgstr ""
21921
21922
#: serverguide/C/file-server.xml:600(para)
21923
msgid ""
21924
"CUPS can be configured and monitored using a web interface, which by default "
21925
"is available at <ulink "
21926
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21927
"web interface can be used to perform all printer management tasks."
21928
msgstr ""
21929
21930
#: serverguide/C/file-server.xml:604(para)
21931
msgid ""
21932
"In order to perform administrative tasks via the web interface, you must "
21933
"either have the root account enabled on your server, or authenticate as a "
21934
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21935
"reasons, CUPS won't authenticate a user that doesn't have a password."
21936
msgstr ""
21937
21938
#: serverguide/C/file-server.xml:607(para)
21939
msgid ""
21940
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21941
"at the terminal prompt: <screen>\n"
21942
"<command>sudo usermod -aG lpadmin username</command>\n"
21943
"</screen>"
21944
msgstr ""
21945
21946
#: serverguide/C/file-server.xml:613(para)
21947
msgid ""
21948
"Further documentation is available in the <emphasis "
21949
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21950
msgstr ""
21951
21952
#: serverguide/C/file-server.xml:621(ulink)
21953
msgid "CUPS Website"
21954
msgstr ""
21955
21956
#: serverguide/C/file-server.xml:624(ulink)
21957
msgid "Ubuntu Wiki CUPS page"
21958
msgstr ""
21959
21960
#: serverguide/C/dns.xml:13(title)
21961
msgid "Domain Name Service (DNS)"
21962
msgstr ""
21963
21964
#: serverguide/C/dns.xml:14(para)
21965
msgid ""
21966
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21967
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21968
"alleviates the need to remember IP addresses. Computers that run DNS are "
21969
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21970
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21971
"common program used for maintaining a name server on Linux."
21972
msgstr ""
21973
21974
#: serverguide/C/dns.xml:24(para)
21975
msgid ""
21976
"At a terminal prompt, enter the following command to install "
21977
"<application>dns</application>:"
21978
msgstr ""
21979
21980
#: serverguide/C/dns.xml:28(command)
21981
msgid "sudo apt-get install bind9"
21982
msgstr ""
21983
21984
#: serverguide/C/dns.xml:30(para)
21985
msgid ""
21986
"A very useful package for testing and troubleshooting DNS issues is the "
21987
"dnsutils package. To install <application>dnsutils</application> enter the "
21988
"following:"
21989
msgstr ""
21990
21991
#: serverguide/C/dns.xml:35(command)
21992
msgid "sudo apt-get install dnsutils"
21993
msgstr ""
21994
21995
#: serverguide/C/dns.xml:40(para)
21996
msgid ""
21997
"There a many ways to configure <application>BIND9</application>. Some of the "
21998
"most common configurations are a caching nameserver, primary master, and a "
21999
"as a secondary master."
22000
msgstr ""
22001
22002
#: serverguide/C/dns.xml:46(para)
22003
msgid ""
22004
"When configured as a caching nameserver BIND9 will find the answer to name "
22005
"queries and remember the answer when the domain is queried again."
22006
msgstr ""
22007
22008
#: serverguide/C/dns.xml:52(para)
22009
msgid ""
22010
"As a primary master server BIND9 reads the data for a zone from a file on "
22011
"it's host and is authoritative for that zone."
22012
msgstr ""
22013
22014
#: serverguide/C/dns.xml:57(para)
22015
msgid ""
22016
"In a secondary master configuration BIND9 gets the zone data from another "
22017
"nameserver authoritative for the zone."
22018
msgstr ""
22019
22020
#: serverguide/C/dns.xml:65(para)
22021
msgid ""
22022
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
22023
"directory. The primary configuration file is "
22024
"<filename>/etc/bind/named.conf</filename>."
22025
msgstr ""
22026
22027
#: serverguide/C/dns.xml:72(para)
22028
msgid ""
22029
"The <emphasis>include</emphasis> line specifies the filename which contains "
22030
"the DNS options. The <emphasis>directory</emphasis> line in the "
22031
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
22032
"look for files. All files BIND uses will be relative to this directory."
22033
msgstr ""
22034
22035
#: serverguide/C/dns.xml:80(para)
22036
msgid ""
22037
"The file named <filename>/etc/bind/db.root</filename> describes the root "
22038
"nameservers in the world. The servers change over time, so the "
22039
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
22040
"This is usually done as updates to the <application>bind9</application> "
22041
"package. The <emphasis>zone</emphasis> section defines a master server, and "
22042
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
22043
msgstr ""
22044
22045
#: serverguide/C/dns.xml:90(para)
22046
msgid ""
22047
"It is possible to configure the same server to be a caching name server, "
22048
"primary master, and secondary master. A server can be the Start of Authority "
22049
"(SOA) for one zone, while providing secondary service for another zone. All "
22050
"the while providing caching services for hosts on the local LAN."
22051
msgstr ""
22052
22053
#: serverguide/C/dns.xml:98(title)
22054
msgid "Caching Nameserver"
22055
msgstr ""
22056
22057
#: serverguide/C/dns.xml:99(para)
22058
msgid ""
22059
"The default configuration is setup to act as a caching server. All that is "
22060
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
22061
"uncomment and edit the following in "
22062
"<filename>/etc/bind/named.conf.options</filename>:"
22063
msgstr ""
22064
22065
#: serverguide/C/dns.xml:103(programlisting)
22066
#, no-wrap
22067
msgid ""
22068
"\n"
22069
"forwarders {\n"
22070
" 1.2.3.4;\n"
22071
" 5.6.7.8;\n"
22072
" };\n"
22073
msgstr ""
22074
22075
#: serverguide/C/dns.xml:110(para)
22076
msgid ""
22077
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
22078
"the IP Adresses of actual nameservers."
22079
msgstr ""
22080
22081
#: serverguide/C/dns.xml:114(para)
22082
msgid ""
22083
"Now restart the DNS server, to enable the new configuration. From a terminal "
22084
"prompt:"
22085
msgstr ""
22086
22087
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
22088
msgid "sudo /etc/init.d/bind9 restart"
22089
msgstr ""
22090
22091
#: serverguide/C/dns.xml:120(para)
22092
msgid ""
22093
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
22094
"DNS server."
22095
msgstr ""
22096
22097
#: serverguide/C/dns.xml:125(title)
22098
msgid "Primary Master"
22099
msgstr ""
22100
22101
#: serverguide/C/dns.xml:126(para)
22102
msgid ""
22103
"In this section <application>BIND9</application> will be configured as the "
22104
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
22105
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
22106
"(Fully Qualified Domain Name)."
22107
msgstr ""
22108
22109
#: serverguide/C/dns.xml:132(title)
22110
msgid "Forward Zone File"
22111
msgstr ""
22112
22113
#: serverguide/C/dns.xml:133(para)
22114
msgid ""
22115
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
22116
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
22117
msgstr ""
22118
22119
#: serverguide/C/dns.xml:137(programlisting)
22120
#, no-wrap
22121
msgid ""
22122
"\n"
22123
"zone \"example.com\" {\n"
22124
"\ttype master;\n"
22125
" file \"/etc/bind/db.example.com\";\n"
22126
"};\n"
22127
msgstr ""
22128
22129
#: serverguide/C/dns.xml:143(para)
22130
msgid ""
22131
"Now use an existing zone file as a template to create the "
22132
"<filename>/etc/bind/db.example.com</filename> file:"
22133
msgstr ""
22134
22135
#: serverguide/C/dns.xml:147(command)
22136
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
22137
msgstr ""
22138
22139
#: serverguide/C/dns.xml:149(para)
22140
msgid ""
22141
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
22142
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
22143
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
22144
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
22145
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
22146
"leaving the \".\" at the end."
22147
msgstr ""
22148
22149
#: serverguide/C/dns.xml:155(para)
22150
msgid ""
22151
"Also, create an <emphasis>A record</emphasis> for <emphasis "
22152
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
22153
msgstr ""
22154
22155
#: serverguide/C/dns.xml:159(programlisting)
22156
#, no-wrap
22157
msgid ""
22158
"\n"
22159
";\n"
22160
"; BIND data file for local loopback interface\n"
22161
";\n"
22162
"$TTL 604800\n"
22163
"@ IN SOA ns.example.com. root.example.com. (\n"
22164
" 2 ; Serial\n"
22165
" 604800 ; Refresh\n"
22166
" 86400 ; Retry\n"
22167
" 2419200 ; Expire\n"
22168
" 604800 ) ; Negative Cache TTL\n"
22169
";\n"
22170
"@ IN NS ns.example.com.\n"
22171
"@ IN A 127.0.0.1\n"
22172
"@ IN AAAA ::1\n"
22173
"ns IN A 192.168.1.10\n"
22174
msgstr ""
22175
22176
#: serverguide/C/dns.xml:176(para)
22177
msgid ""
22178
"You must increment the <emphasis>Serial Number</emphasis> every time you "
22179
"make changes to the zone file. If you make multiple changes before "
22180
"restarting BIND9, simply increment the Serial once."
22181
msgstr ""
22182
22183
#: serverguide/C/dns.xml:180(para)
22184
msgid ""
22185
"Now, you can add DNS records to the bottom of the zone file. See <xref "
22186
"linkend=\"dns-record-types\"/> for details."
22187
msgstr ""
22188
22189
#: serverguide/C/dns.xml:184(para)
22190
msgid ""
22191
"Many admins like to use the last date edited as the serial of a zone, such "
22192
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
22193
"<emphasis>ss</emphasis> is the Serial Number)"
22194
msgstr ""
22195
22196
#: serverguide/C/dns.xml:189(para)
22197
msgid ""
22198
"Once you have made a change to the zone file "
22199
"<application>BIND9</application> will need to be restarted for the changes "
22200
"to take effect:"
22201
msgstr ""
22202
22203
#: serverguide/C/dns.xml:198(title)
22204
msgid "Reverse Zone File"
22205
msgstr ""
22206
22207
#: serverguide/C/dns.xml:199(para)
22208
msgid ""
22209
"Now that the zone is setup and resolving names to IP Adresses a "
22210
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
22211
"DNS to resolve an address to a name."
22212
msgstr ""
22213
22214
#: serverguide/C/dns.xml:203(para)
22215
msgid "Edit /etc/bind/named.conf.local and add the following:"
22216
msgstr ""
22217
22218
#: serverguide/C/dns.xml:206(programlisting)
22219
#, no-wrap
22220
msgid ""
22221
"\n"
22222
"zone \"1.168.192.in-addr.arpa\" {\n"
22223
" type master;\n"
22224
" notify no;\n"
22225
" file \"/etc/bind/db.192\";\n"
22226
"};\n"
22227
msgstr ""
22228
22229
#: serverguide/C/dns.xml:214(para)
22230
msgid ""
22231
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
22232
"whatever network you are using. Also, name the zone file "
22233
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
22234
"first octet of your network."
22235
msgstr ""
22236
22237
#: serverguide/C/dns.xml:219(para)
22238
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
22239
msgstr ""
22240
22241
#: serverguide/C/dns.xml:223(command)
22242
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
22243
msgstr ""
22244
22245
#: serverguide/C/dns.xml:225(para)
22246
msgid ""
22247
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
22248
"same options as <filename>/etc/bind/db.example.com</filename>:"
22249
msgstr ""
22250
22251
#: serverguide/C/dns.xml:229(programlisting)
22252
#, no-wrap
22253
msgid ""
22254
"\n"
22255
";\n"
22256
"; BIND reverse data file for local loopback interface\n"
22257
";\n"
22258
"$TTL 604800\n"
22259
"@ IN SOA ns.example.com. root.example.com. (\n"
22260
" 2 ; Serial\n"
22261
" 604800 ; Refresh\n"
22262
" 86400 ; Retry\n"
22263
" 2419200 ; Expire\n"
22264
" 604800 ) ; Negative Cache TTL\n"
22265
";\n"
22266
"@ IN NS ns.\n"
22267
"10 IN PTR ns.example.com.\n"
22268
msgstr ""
22269
22270
#: serverguide/C/dns.xml:244(para)
22271
msgid ""
22272
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
22273
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
22274
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
22275
"create a <emphasis>PTR record</emphasis> in "
22276
"<filename>/etc/bind/db.192</filename>."
22277
msgstr ""
22278
22279
#: serverguide/C/dns.xml:249(para)
22280
msgid ""
22281
"After creating the reverse zone file restart "
22282
"<application>BIND9</application>:"
22283
msgstr ""
22284
22285
#: serverguide/C/dns.xml:258(title)
22286
msgid "Secondary Master"
22287
msgstr ""
22288
22289
#: serverguide/C/dns.xml:259(para)
22290
msgid ""
22291
"Once a <emphasis>Primary Master</emphasis> has been configured a "
22292
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
22293
"availability of the domain should the Primary become unavailable."
22294
msgstr ""
22295
22296
#: serverguide/C/dns.xml:263(para)
22297
msgid ""
22298
"First, on the Primary Master server, the zone transfer needs to be allowed. "
22299
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
22300
"and Reverse zone definitions in "
22301
"<filename>/etc/bind/named.conf.local</filename>:"
22302
msgstr ""
22303
22304
#: serverguide/C/dns.xml:267(programlisting)
22305
#, no-wrap
22306
msgid ""
22307
"\n"
22308
"zone \"example.com\" {\n"
22309
" type master;\n"
22310
"\tfile \"/etc/bind/db.example.com\";\n"
22311
" allow-transfer { 192.168.1.11; };\n"
22312
"};\n"
22313
"\n"
22314
"zone \"1.168.192.in-addr.arpa\" {\n"
22315
" type master;\n"
22316
" notify no;\n"
22317
" file \"/etc/bind/db.192\";\n"
22318
"\tallow-transfer { 192.168.1.11; };\n"
22319
"};\n"
22320
msgstr ""
22321
22322
#: serverguide/C/dns.xml:282(para)
22323
msgid ""
22324
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
22325
"Secondary nameserver."
22326
msgstr ""
22327
22328
#: serverguide/C/dns.xml:286(para)
22329
msgid ""
22330
"Next, on the Secondary Master, install the <application>bind9</application> "
22331
"package the same way as on the Primary. Then edit the "
22332
"<filename>/etc/bind/named.conf.local</filename> and add the following "
22333
"declarations for the Forward and Reverse zones:"
22334
msgstr ""
22335
22336
#: serverguide/C/dns.xml:290(programlisting)
22337
#, no-wrap
22338
msgid ""
22339
"\n"
22340
"zone \"example.com\" {\n"
22341
"\ttype slave;\n"
22342
" file \"/var/cache/bind/db.example.com\";\n"
22343
" masters { 192.168.1.10; };\n"
22344
"}; \n"
22345
" \n"
22346
"zone \"1.168.192.in-addr.arpa\" {\n"
22347
"\ttype slave;\n"
22348
" file \"/var/cache/bind/db.192\";\n"
22349
" masters { 192.168.1.10; };\n"
22350
"};\n"
22351
msgstr ""
22352
22353
#: serverguide/C/dns.xml:304(para)
22354
msgid ""
22355
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
22356
"Primary nameserver."
22357
msgstr ""
22358
22359
#: serverguide/C/dns.xml:308(para)
22360
msgid "Restart <application>BIND9</application> on the Secondary Master:"
22361
msgstr ""
22362
22363
#: serverguide/C/dns.xml:314(para)
22364
msgid ""
22365
"In <filename>/var/log/syslog</filename> you should see something similar to:"
22366
msgstr ""
22367
22368
#: serverguide/C/dns.xml:317(programlisting)
22369
#, no-wrap
22370
msgid ""
22371
"\n"
22372
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
22373
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
22374
msgstr ""
22375
22376
#: serverguide/C/dns.xml:322(para)
22377
msgid ""
22378
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
22379
"on the Primary is larger than the one on the Secondary."
22380
msgstr ""
22381
22382
#: serverguide/C/dns.xml:328(para)
22383
msgid ""
22384
"The default directory for non-authoritative zone files is "
22385
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
22386
"<application>AppArmor</application> to allow the "
22387
"<application>named</application> daemon to write to. For more information on "
22388
"AppArmor see <xref linkend=\"apparmor\"/>."
22389
msgstr ""
22390
22391
#: serverguide/C/dns.xml:339(para)
22392
msgid ""
22393
"This section covers ways to help determine the cause when problems happen "
22394
"with DNS and <application>BIND9</application>."
22395
msgstr ""
22396
22397
#: serverguide/C/dns.xml:345(title)
22398
msgid "resolv.conf"
22399
msgstr ""
22400
22401
#: serverguide/C/dns.xml:346(para)
22402
msgid ""
22403
"The first step in testing <application>BIND9</application> is to add the "
22404
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
22405
"be configured as well as another host to double check things. Simply edit "
22406
"<filename>/etc/resolv.conf</filename> and add the following:"
22407
msgstr ""
22408
22409
#: serverguide/C/dns.xml:351(programlisting)
22410
#, no-wrap
22411
msgid ""
22412
"\n"
22413
"nameserver\t192.168.1.10\n"
22414
"nameserver\t192.168.1.11\n"
22415
msgstr ""
22416
22417
#: serverguide/C/dns.xml:356(para)
22418
msgid ""
22419
"You should also add the IP Address of the Secondary nameserver in case the "
22420
"Primary becomes unavailable."
22421
msgstr ""
22422
22423
#: serverguide/C/dns.xml:362(title)
22424
msgid "dig"
22425
msgstr ""
22426
22427
#: serverguide/C/dns.xml:363(para)
22428
msgid ""
22429
"If you installed the <application>dnsutils</application> package you can "
22430
"test your setup using the DNS lookup utility <application>dig</application>:"
22431
msgstr ""
22432
22433
#: serverguide/C/dns.xml:369(para)
22434
msgid ""
22435
"After installing <application>BIND9</application> use "
22436
"<application>dig</application> against the loopback interface to make sure "
22437
"it is listening on port 53. From a terminal prompt:"
22438
msgstr ""
22439
22440
#: serverguide/C/dns.xml:374(command)
22441
msgid "dig -x 127.0.0.1"
22442
msgstr ""
22443
22444
#: serverguide/C/dns.xml:376(para)
22445
msgid "You should see lines similar to the following in the command output:"
22446
msgstr ""
22447
22448
#: serverguide/C/dns.xml:379(programlisting)
22449
#, no-wrap
22450
msgid ""
22451
"\n"
22452
";; Query time: 1 msec\n"
22453
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22454
msgstr ""
22455
22456
#: serverguide/C/dns.xml:385(para)
22457
msgid ""
22458
"If you have configured <application>BIND9</application> as a "
22459
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22460
"the query time:"
22461
msgstr ""
22462
22463
#: serverguide/C/dns.xml:390(command)
22464
msgid "dig ubuntu.com"
22465
msgstr ""
22466
22467
#: serverguide/C/dns.xml:392(para)
22468
msgid "Note the query time toward the end of the command output:"
22469
msgstr ""
22470
22471
#: serverguide/C/dns.xml:395(programlisting)
22472
#, no-wrap
22473
msgid ""
22474
"\n"
22475
";; Query time: 49 msec\n"
22476
msgstr ""
22477
22478
#: serverguide/C/dns.xml:398(para)
22479
msgid "After a second dig there should be improvement:"
22480
msgstr ""
22481
22482
#: serverguide/C/dns.xml:401(programlisting)
22483
#, no-wrap
22484
msgid ""
22485
"\n"
22486
";; Query time: 1 msec\n"
22487
msgstr ""
22488
22489
#: serverguide/C/dns.xml:408(title)
22490
msgid "ping"
22491
msgstr ""
22492
22493
#: serverguide/C/dns.xml:410(para)
22494
msgid ""
22495
"Now to demonstrate how applications make use of DNS to resolve a host name "
22496
"use the <application>ping</application> utility to send an ICMP echo "
22497
"request. From a terminal prompt enter:"
22498
msgstr ""
22499
22500
#: serverguide/C/dns.xml:416(command)
22501
msgid "ping example.com"
22502
msgstr ""
22503
22504
#: serverguide/C/dns.xml:418(para)
22505
msgid ""
22506
"This tests if the nameserver can resolve the name "
22507
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22508
"should resemble:"
22509
msgstr ""
22510
22511
#: serverguide/C/dns.xml:422(programlisting)
22512
#, no-wrap
22513
msgid ""
22514
"\n"
22515
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22516
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22517
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22518
msgstr ""
22519
22520
#: serverguide/C/dns.xml:429(title)
22521
msgid "named-checkzone"
22522
msgstr ""
22523
22524
#: serverguide/C/dns.xml:430(para)
22525
msgid ""
22526
"A great way to test your zone files is by using the <application>named-"
22527
"checkzone</application> utility installed with the "
22528
"<application>bind9</application> package. This utility allows you to make "
22529
"sure the configuration is correct before restarting "
22530
"<application>BIND9</application> and making the changes live."
22531
msgstr ""
22532
22533
#: serverguide/C/dns.xml:437(para)
22534
msgid ""
22535
"To test our example Forward zone file enter the following from a command "
22536
"prompt:"
22537
msgstr ""
22538
22539
#: serverguide/C/dns.xml:441(command)
22540
msgid "named-checkzone example.com /etc/bind/db.example.com"
22541
msgstr ""
22542
22543
#: serverguide/C/dns.xml:443(para)
22544
msgid ""
22545
"If everything is configured correctly you should see output similar to:"
22546
msgstr ""
22547
22548
#: serverguide/C/dns.xml:446(programlisting)
22549
#, no-wrap
22550
msgid ""
22551
"\n"
22552
"zone example.com/IN: loaded serial 6\n"
22553
"OK\n"
22554
msgstr ""
22555
22556
#: serverguide/C/dns.xml:452(para)
22557
msgid "Similarly, to test the Reverse zone file enter the following:"
22558
msgstr ""
22559
22560
#: serverguide/C/dns.xml:456(command)
22561
msgid "named-checkzone example.com /etc/bind/db.192"
22562
msgstr ""
22563
22564
#: serverguide/C/dns.xml:458(para)
22565
msgid "The output should be similar to:"
22566
msgstr ""
22567
22568
#: serverguide/C/dns.xml:461(programlisting)
22569
#, no-wrap
22570
msgid ""
22571
"\n"
22572
"zone example.com/IN: loaded serial 3\n"
22573
"OK\n"
22574
msgstr ""
22575
22576
#: serverguide/C/dns.xml:468(para)
22577
msgid ""
22578
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22579
"different."
22580
msgstr ""
22581
22582
#: serverguide/C/dns.xml:475(title)
22583
msgid "Logging"
22584
msgstr ""
22585
22586
#: serverguide/C/dns.xml:476(para)
22587
msgid ""
22588
"<application>BIND9</application> has a wide variety of logging configuration "
22589
"options available. There are two main options. The "
22590
"<emphasis>channel</emphasis> option configures where logs go, and the "
22591
"<emphasis>category</emphasis> option determines what information to log."
22592
msgstr ""
22593
22594
#: serverguide/C/dns.xml:480(para)
22595
msgid "If no logging option is configured the default option is:"
22596
msgstr ""
22597
22598
#: serverguide/C/dns.xml:483(programlisting)
22599
#, no-wrap
22600
msgid ""
22601
"\n"
22602
"logging {\n"
22603
" category default { default_syslog; default_debug; };\n"
22604
" category unmatched { null; };\n"
22605
"};\n"
22606
msgstr ""
22607
22608
#: serverguide/C/dns.xml:489(para)
22609
msgid ""
22610
"This section covers configuring <application>BIND9</application> to send "
22611
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22612
"file."
22613
msgstr ""
22614
22615
#: serverguide/C/dns.xml:494(para)
22616
msgid ""
22617
"First, we need to configure a channel to specify which file to send the "
22618
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22619
"the following:"
22620
msgstr ""
22621
22622
#: serverguide/C/dns.xml:498(programlisting)
22623
#, no-wrap
22624
msgid ""
22625
"\n"
22626
"logging {\n"
22627
" channel query.log { \n"
22628
" file \"/var/log/query.log\";\n"
22629
" severity debug 3; \n"
22630
" }; \n"
22631
"};\n"
22632
msgstr ""
22633
22634
#: serverguide/C/dns.xml:508(para)
22635
msgid "Next, configure a category to send all DNS queries to the query file:"
22636
msgstr ""
22637
22638
#: serverguide/C/dns.xml:511(programlisting)
22639
#, no-wrap
22640
msgid ""
22641
"\n"
22642
"logging {\n"
22643
" channel query.log { \n"
22644
" file \"/var/log/query.log\"; \n"
22645
" severity debug 3; \n"
22646
" }; \n"
22647
" <emphasis>category queries { query.log; };</emphasis> \n"
22648
"};\n"
22649
msgstr ""
22650
22651
#: serverguide/C/dns.xml:523(para)
22652
msgid ""
22653
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22654
"level isn't specified level 1 is the default."
22655
msgstr ""
22656
22657
#: serverguide/C/dns.xml:529(para)
22658
msgid ""
22659
"Since the <emphasis>named daemon</emphasis> runs as the "
22660
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22661
"file must be created and the ownership changed:"
22662
msgstr ""
22663
22664
#: serverguide/C/dns.xml:534(command)
22665
msgid "sudo touch /var/log/query.log"
22666
msgstr ""
22667
22668
#: serverguide/C/dns.xml:535(command)
22669
msgid "sudo chown bind /var/log/query.log"
22670
msgstr ""
22671
22672
#: serverguide/C/dns.xml:539(para)
22673
msgid ""
22674
"Before <application>named</application> daemon can write to the new log file "
22675
"the <application>AppArmor</application> profile must be updated. First, edit "
22676
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22677
msgstr ""
22678
22679
#: serverguide/C/dns.xml:543(programlisting)
22680
#, no-wrap
22681
msgid ""
22682
"\n"
22683
"/var/log/query.log w,\n"
22684
msgstr ""
22685
22686
#: serverguide/C/dns.xml:546(para)
22687
msgid "Next, reload the profile:"
22688
msgstr ""
22689
22690
#: serverguide/C/dns.xml:550(command)
22691
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22692
msgstr ""
22693
22694
#: serverguide/C/dns.xml:552(para)
22695
msgid ""
22696
"For more information on <application>AppArmor</application> see <xref "
22697
"linkend=\"apparmor\"/>"
22698
msgstr ""
22699
22700
#: serverguide/C/dns.xml:557(para)
22701
msgid ""
22702
"Now restart <application>BIND9</application> for the changes to take effect:"
22703
msgstr ""
22704
22705
#: serverguide/C/dns.xml:565(para)
22706
msgid ""
22707
"You should see the file <filename>/var/log/query.log</filename> fill with "
22708
"query information. This is a simple example of the "
22709
"<application>BIND9</application> logging options. For coverage of advanced "
22710
"options see <xref linkend=\"dns-more-info\"/>."
22711
msgstr ""
22712
22713
#: serverguide/C/dns.xml:574(title)
22714
msgid "Common Record Types"
22715
msgstr ""
22716
22717
#: serverguide/C/dns.xml:575(para)
22718
msgid "This section covers some of the most common DNS record types."
22719
msgstr ""
22720
22721
#: serverguide/C/dns.xml:580(para)
22722
msgid ""
22723
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22724
msgstr ""
22725
22726
#: serverguide/C/dns.xml:583(programlisting)
22727
#, no-wrap
22728
msgid ""
22729
"\n"
22730
"www IN A 192.168.1.12\n"
22731
msgstr ""
22732
22733
#: serverguide/C/dns.xml:588(para)
22734
msgid ""
22735
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22736
"record. You cannot create a CNAME record pointing to another CNAME record."
22737
msgstr ""
22738
22739
#: serverguide/C/dns.xml:591(programlisting)
22740
#, no-wrap
22741
msgid ""
22742
"\n"
22743
"web IN CNAME www\n"
22744
msgstr ""
22745
22746
#: serverguide/C/dns.xml:596(para)
22747
msgid ""
22748
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22749
"to. Must point to an A record, not a CNAME."
22750
msgstr ""
22751
22752
#: serverguide/C/dns.xml:599(programlisting)
22753
#, no-wrap
22754
msgid ""
22755
"\n"
22756
" IN MX 1 mail.example.com.\n"
22757
"mail IN A 192.168.1.13\n"
22758
msgstr ""
22759
22760
#: serverguide/C/dns.xml:605(para)
22761
msgid ""
22762
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22763
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22764
"Secondary servers are defined."
22765
msgstr ""
22766
22767
#: serverguide/C/dns.xml:609(programlisting)
22768
#, no-wrap
22769
msgid ""
22770
"\n"
22771
" IN NS ns.example.com.\n"
22772
"\tIN NS ns2.example.com.\n"
22773
"ns IN A 192.168.1.10\n"
22774
"ns2\tIN A\t 192.168.1.11\n"
22775
msgstr ""
22776
22777
#: serverguide/C/dns.xml:622(para)
22778
msgid ""
22779
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22780
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22781
msgstr ""
22782
22783
#: serverguide/C/dns.xml:627(para)
22784
msgid ""
22785
"For in depth coverage of <emphasis>DNS</emphasis> and "
22786
"<application>BIND9</application> see <ulink "
22787
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22788
msgstr ""
22789
22790
#: serverguide/C/dns.xml:632(para)
22791
msgid ""
22792
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22793
"BIND</ulink> is a popular book now in it's fifth edition."
22794
msgstr ""
22795
22796
#: serverguide/C/dns.xml:637(para)
22797
msgid ""
22798
"A great place to ask for <application>BIND9</application> assistance, and "
22799
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22800
"server</emphasis> IRC channel on <ulink "
22801
"url=\"http://freenode.net\">freenode</ulink>."
22802
msgstr ""
22803
22804
#: serverguide/C/dns.xml:643(para)
22805
msgid ""
22806
"Also, see the <ulink "
22807
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22808
"HOWTO</ulink> in the Ubuntu Wiki."
22809
msgstr ""
22810
22811
#: serverguide/C/databases.xml:13(title)
22812
msgid "Databases"
22813
msgstr ""
22814
22815
#: serverguide/C/databases.xml:14(para)
22816
msgid "Ubuntu provides two popular database servers. They are:"
22817
msgstr ""
22818
22819
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22820
msgid "PostgreSQL"
22821
msgstr ""
22822
22823
#: serverguide/C/databases.xml:25(para)
22824
msgid ""
22825
"They are available in the main repository. This section explains how to "
22826
"install and configure these database servers."
22827
msgstr ""
22828
22829
#: serverguide/C/databases.xml:32(para)
22830
msgid ""
22831
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22832
"It is intended for mission-critical, heavy-load production systems as well "
22833
"as for embedding into mass-deployed software."
22834
msgstr ""
22835
22836
#: serverguide/C/databases.xml:41(para)
22837
msgid "To install MySQL, run the following command from a terminal prompt:"
22838
msgstr ""
22839
22840
#: serverguide/C/databases.xml:46(command)
22841
msgid "sudo apt-get install mysql-server"
22842
msgstr ""
22843
22844
#: serverguide/C/databases.xml:48(para)
22845
msgid ""
22846
"During the installation process you will be prompted to enter a password for "
22847
"the <application>MySQL</application> root user."
22848
msgstr ""
22849
22850
#: serverguide/C/databases.xml:53(para)
22851
msgid ""
22852
"Once the installation is complete, the MySQL server should be started "
22853
"automatically. You can run the following command from a terminal prompt to "
22854
"check whether the MySQL server is running:"
22855
msgstr ""
22856
22857
#: serverguide/C/databases.xml:61(command)
22858
msgid "sudo netstat -tap | grep mysql"
22859
msgstr ""
22860
22861
#: serverguide/C/databases.xml:70(programlisting)
22862
#, no-wrap
22863
msgid ""
22864
"\n"
22865
"tcp 0 0 localhost:mysql *:* LISTEN "
22866
" 2556/mysqld\n"
22867
msgstr ""
22868
22869
#: serverguide/C/databases.xml:74(para)
22870
msgid ""
22871
"If the server is not running correctly, you can type the following command "
22872
"to start it:"
22873
msgstr ""
22874
22875
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22876
msgid "sudo /etc/init.d/mysql restart"
22877
msgstr ""
22878
22879
#: serverguide/C/databases.xml:85(para)
22880
msgid ""
22881
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22882
"the basic settings -- log file, port number, etc. For example, to configure "
22883
"<application>MySQL</application> to listen for connections from network "
22884
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22885
"server's IP address:"
22886
msgstr ""
22887
22888
#: serverguide/C/databases.xml:91(programlisting)
22889
#, no-wrap
22890
msgid ""
22891
"\n"
22892
"bind-address = 192.168.0.5\n"
22893
msgstr ""
22894
22895
#: serverguide/C/databases.xml:95(para)
22896
msgid "Replace 192.168.0.5 with the appropriate address."
22897
msgstr ""
22898
22899
#: serverguide/C/databases.xml:99(para)
22900
msgid ""
22901
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22902
"<application>mysql</application> daemon will need to be restarted:"
22903
msgstr ""
22904
22905
#: serverguide/C/databases.xml:107(para)
22906
msgid ""
22907
"If you would like to change the "
22908
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22909
"terminal enter:"
22910
msgstr ""
22911
22912
#: serverguide/C/databases.xml:113(command)
22913
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22914
msgstr ""
22915
22916
#: serverguide/C/databases.xml:116(para)
22917
msgid ""
22918
"The <application>mysql</application> daemon will be stopped, and you will be "
22919
"prompted to enter a new password."
22920
msgstr ""
22921
22922
#: serverguide/C/databases.xml:125(para)
22923
msgid ""
22924
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22925
"more information."
22926
msgstr ""
22927
22928
#: serverguide/C/databases.xml:130(para)
22929
msgid ""
22930
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22931
"<application>mysql-doc-5.0</application> package. To install the package "
22932
"enter the following in a terminal:"
22933
msgstr ""
22934
22935
#: serverguide/C/databases.xml:135(command)
22936
msgid "sudo apt-get install mysql-doc-5.0"
22937
msgstr ""
22938
22939
#: serverguide/C/databases.xml:137(para)
22940
msgid ""
22941
"The documentation is in HTML format, to view them enter "
22942
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22943
"chapter/index.html</command> in your browser's address bar."
22944
msgstr ""
22945
22946
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22947
msgid ""
22948
"For general SQL information see <ulink "
22949
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22950
"Special Edition</ulink> by Rafe Colburn."
22951
msgstr ""
22952
22953
#: serverguide/C/databases.xml:149(para)
22954
msgid ""
22955
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22956
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22957
msgstr ""
22958
22959
#: serverguide/C/databases.xml:158(para)
22960
msgid ""
22961
"PostgreSQL is an object-relational database system that has the features of "
22962
"traditional commercial database systems with enhancements to be found in "
22963
"next-generation DBMS systems."
22964
msgstr ""
22965
22966
#: serverguide/C/databases.xml:165(para)
22967
msgid ""
22968
"To install PostgreSQL, run the following command in the command prompt:"
22969
msgstr ""
22970
22971
#: serverguide/C/databases.xml:172(command)
22972
msgid "sudo apt-get install postgresql"
22973
msgstr ""
22974
22975
#: serverguide/C/databases.xml:176(para)
22976
msgid ""
22977
"Once the installation is complete, you should configure the PostgreSQL "
22978
"server based on your needs, although the default configuration is viable."
22979
msgstr ""
22980
22981
#: serverguide/C/databases.xml:184(para)
22982
msgid ""
22983
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22984
"client authentication methods. By default, IDENT authentication method is "
22985
"used for <application>postgres</application> and local users. Please refer "
22986
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22987
"PostgreSQL Administrator's Guide</ulink>."
22988
msgstr ""
22989
22990
#: serverguide/C/databases.xml:191(para)
22991
msgid ""
22992
"The following discussion assumes that you wish to enable TCP/IP connections "
22993
"and use the MD5 method for client authentication. PostgreSQL configuration "
22994
"files are stored in the "
22995
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22996
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22997
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22998
msgstr ""
22999
23000
#: serverguide/C/databases.xml:201(para)
23001
msgid ""
23002
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
23003
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
23004
msgstr ""
23005
23006
#: serverguide/C/databases.xml:208(para)
23007
msgid ""
23008
"To enable TCP/IP connections, edit the file "
23009
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
23010
msgstr ""
23011
23012
#: serverguide/C/databases.xml:210(para)
23013
msgid ""
23014
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
23015
"change it to:"
23016
msgstr ""
23017
23018
#: serverguide/C/databases.xml:213(programlisting)
23019
#, no-wrap
23020
msgid ""
23021
"\n"
23022
"listen_addresses = 'localhost'\n"
23023
msgstr ""
23024
23025
#: serverguide/C/databases.xml:217(para)
23026
msgid ""
23027
"To allow other computers to connect to your "
23028
"<application>PostgreSQL</application> server replace 'localhost' with the "
23029
"<emphasis>IP Address</emphasis> of your server."
23030
msgstr ""
23031
23032
#: serverguide/C/databases.xml:222(para)
23033
msgid ""
23034
"You may also edit all other parameters, if you know what you are doing! For "
23035
"details, refer to the configuration file or to the PostgreSQL documentation."
23036
msgstr ""
23037
23038
#: serverguide/C/databases.xml:227(para)
23039
msgid ""
23040
"Now that we can connect to our <application>PostgreSQL</application> server, "
23041
"the next step is to set a password for the <emphasis>postgres</emphasis> "
23042
"user. Run the following command at a terminal prompt to connect to the "
23043
"default PostgreSQL template database:"
23044
msgstr ""
23045
23046
#: serverguide/C/databases.xml:234(command)
23047
msgid "sudo -u postgres psql template1"
23048
msgstr ""
23049
23050
#: serverguide/C/databases.xml:236(para)
23051
msgid ""
23052
"The above command connects to PostgreSQL database "
23053
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
23054
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
23055
"run the following SQL command at the <application>psql</application> prompt "
23056
"to configure the password for the user <emphasis "
23057
"role=\"italics\">postgres</emphasis>."
23058
msgstr ""
23059
23060
#: serverguide/C/databases.xml:244(command)
23061
msgid "ALTER USER postgres with encrypted password 'your_password';"
23062
msgstr ""
23063
23064
#: serverguide/C/databases.xml:246(para)
23065
msgid ""
23066
"After configuring the password, edit the file "
23067
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
23068
"<emphasis>MD5</emphasis> authentication with the "
23069
"<emphasis>postgres</emphasis> user:"
23070
msgstr ""
23071
23072
#: serverguide/C/databases.xml:252(programlisting)
23073
#, no-wrap
23074
msgid ""
23075
"\n"
23076
"local all postgres md5\n"
23077
msgstr ""
23078
23079
#: serverguide/C/databases.xml:256(para)
23080
msgid ""
23081
"Finally, you should restart the <application>PostgreSQL</application> "
23082
"service to initialize the new configuration. From a terminal prompt enter "
23083
"the following to restart <application>PostgreSQL</application>:"
23084
msgstr ""
23085
23086
#: serverguide/C/databases.xml:262(command)
23087
msgid "sudo /etc/init.d/postgresql-8.4 restart"
23088
msgstr ""
23089
23090
#: serverguide/C/databases.xml:265(para)
23091
msgid ""
23092
"The above configuration is not complete by any means. Please refer <ulink "
23093
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
23094
"Administrator's Guide</ulink> to configure more parameters."
23095
msgstr ""
23096
23097
#: serverguide/C/databases.xml:276(para)
23098
msgid ""
23099
"As mentioned above the <ulink "
23100
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
23101
"Guide</ulink> is an excellent resource. The guide is also available in the "
23102
"<application>postgresql-doc-8.4</application> package. Execute the following "
23103
"in a terminal to install the package:"
23104
msgstr ""
23105
23106
#: serverguide/C/databases.xml:282(command)
23107
msgid "sudo apt-get install postgresql-doc-8.4"
23108
msgstr ""
23109
23110
#: serverguide/C/databases.xml:284(para)
23111
msgid ""
23112
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
23113
"8.4/html/index.html</command> into the address bar of your browser."
23114
msgstr ""
23115
23116
#: serverguide/C/databases.xml:296(para)
23117
msgid ""
23118
"Also, see the <ulink "
23119
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
23120
"Wiki</ulink> page for more information."
23121
msgstr ""
23122
23123
#: serverguide/C/clustering.xml:13(title)
23124
msgid "Clustering"
23125
msgstr ""
23126
23127
#: serverguide/C/clustering.xml:16(title)
23128
msgid "DRBD"
23129
msgstr ""
23130
23131
#: serverguide/C/clustering.xml:18(para)
23132
msgid ""
23133
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
23134
"multiple hosts. The replication is transparent to other applications on the "
23135
"host systems. Any block device hard disks, partitions, RAID devices, logical "
23136
"volumes, etc can be mirrored."
23137
msgstr ""
23138
23139
#: serverguide/C/clustering.xml:24(para)
23140
msgid ""
23141
"To get started using <application>drbd</application>, first install the "
23142
"necessary packages. From a terminal enter:"
23143
msgstr ""
23144
23145
#: serverguide/C/clustering.xml:29(command)
23146
msgid "sudo apt-get install drbd8-utils"
23147
msgstr ""
23148
23149
#: serverguide/C/clustering.xml:33(para)
23150
msgid ""
23151
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
23152
"virtual machine you will need to manually compile the "
23153
"<application>drbd</application> module. It may be easier to install the "
23154
"<application>linux-server</application> package inside the virtual machine."
23155
msgstr ""
23156
23157
#: serverguide/C/clustering.xml:40(para)
23158
msgid ""
23159
"This section covers setting up a <application>drbd</application> to "
23160
"replicate a separate <filename>/srv</filename> partition, with an "
23161
"<application>ext3</application> filesystem between two hosts. The partition "
23162
"size is not particularly relevant, but both partitions need to be the same "
23163
"size."
23164
msgstr ""
23165
23166
#: serverguide/C/clustering.xml:49(para)
23167
msgid ""
23168
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
23169
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
23170
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
23171
"See <xref linkend=\"dns\"/> for details."
23172
msgstr ""
23173
23174
#: serverguide/C/clustering.xml:57(para)
23175
msgid ""
23176
"To configure <application>drbd</application>, on the first host edit "
23177
"<filename>/etc/drbd.conf</filename>:"
23178
msgstr ""
23179
23180
#: serverguide/C/clustering.xml:61(programlisting)
23181
#, no-wrap
23182
msgid ""
23183
"\n"
23184
"global { usage-count no; }\n"
23185
"common { syncer { rate 100M; } }\n"
23186
"resource r0 {\n"
23187
" protocol C;\n"
23188
" startup {\n"
23189
" wfc-timeout 15;\n"
23190
" degr-wfc-timeout 60;\n"
23191
" }\n"
23192
" net {\n"
23193
" cram-hmac-alg sha1;\n"
23194
" shared-secret \"secret\";\n"
23195
" }\n"
23196
" on drbd01 {\n"
23197
" device /dev/drbd0;\n"
23198
" disk /dev/sdb1;\n"
23199
" address 192.168.0.1:7788;\n"
23200
" meta-disk internal;\n"
23201
" }\n"
23202
" on drbd02 {\n"
23203
" device /dev/drbd0;\n"
23204
" disk /dev/sdb1;\n"
23205
" address 192.168.0.2:7788;\n"
23206
" meta-disk internal;\n"
23207
" }\n"
23208
"} \n"
23209
msgstr ""
23210
23211
#: serverguide/C/clustering.xml:90(para)
23212
msgid ""
23213
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
23214
"this example their default values are fine."
23215
msgstr ""
23216
23217
#: serverguide/C/clustering.xml:98(para)
23218
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
23219
msgstr ""
23220
23221
#: serverguide/C/clustering.xml:103(command)
23222
msgid "scp /etc/drbd.conf drbd02:~"
23223
msgstr ""
23224
23225
#: serverguide/C/clustering.xml:109(para)
23226
msgid ""
23227
"And, on <emphasis>drbd02</emphasis> move the file to "
23228
"<filename>/etc</filename>:"
23229
msgstr ""
23230
23231
#: serverguide/C/clustering.xml:114(command)
23232
msgid "sudo mv drbd.conf /etc/"
23233
msgstr ""
23234
23235
#: serverguide/C/clustering.xml:120(para)
23236
msgid ""
23237
"Next, on both hosts, start the <application>drbd</application> daemon:"
23238
msgstr ""
23239
23240
#: serverguide/C/clustering.xml:125(command)
23241
msgid "sudo /etc/init.d/drbd start"
23242
msgstr ""
23243
23244
#: serverguide/C/clustering.xml:131(para)
23245
msgid ""
23246
"Now using the <application>drbdadm</application> utility initialize the meta "
23247
"data storage. On each server execute:"
23248
msgstr ""
23249
23250
#: serverguide/C/clustering.xml:137(command)
23251
msgid "sudo drbdadm create-md r0"
23252
msgstr ""
23253
23254
#: serverguide/C/clustering.xml:143(para)
23255
msgid ""
23256
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
23257
"primary, enter the following:"
23258
msgstr ""
23259
23260
#: serverguide/C/clustering.xml:148(command)
23261
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
23262
msgstr ""
23263
23264
#: serverguide/C/clustering.xml:154(para)
23265
msgid ""
23266
"After executing the above command, the data will start syncing with the "
23267
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
23268
"the following:"
23269
msgstr ""
23270
23271
#: serverguide/C/clustering.xml:160(command)
23272
msgid "watch -n1 cat /proc/drbd"
23273
msgstr ""
23274
23275
#: serverguide/C/clustering.xml:163(para)
23276
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
23277
msgstr ""
23278
23279
#: serverguide/C/clustering.xml:170(para)
23280
msgid ""
23281
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
23282
msgstr ""
23283
23284
#: serverguide/C/clustering.xml:175(command)
23285
msgid "sudo mkfs.ext3 /dev/drbd0"
23286
msgstr ""
23287
23288
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
23289
msgid "sudo mount /dev/drbd0 /srv"
23290
msgstr ""
23291
23292
#: serverguide/C/clustering.xml:186(para)
23293
msgid ""
23294
"To test that the data is actually syncing between the hosts copy some files "
23295
"on the <emphasis>drbd01</emphasis>, the primary, to "
23296
"<filename>/srv</filename>:"
23297
msgstr ""
23298
23299
#: serverguide/C/clustering.xml:195(para)
23300
msgid "Next, unmount <filename>/srv</filename>:"
23301
msgstr ""
23302
23303
#: serverguide/C/clustering.xml:203(para)
23304
msgid ""
23305
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
23306
"<emphasis>secondary</emphasis> role:"
23307
msgstr ""
23308
23309
#: serverguide/C/clustering.xml:208(command)
23310
msgid "sudo drbdadm secondary r0"
23311
msgstr ""
23312
23313
#: serverguide/C/clustering.xml:211(para)
23314
msgid ""
23315
"Now on the <emphasis>secondary</emphasis> server "
23316
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
23317
msgstr ""
23318
23319
#: serverguide/C/clustering.xml:216(command)
23320
msgid "sudo drbdadm primary r0"
23321
msgstr ""
23322
23323
#: serverguide/C/clustering.xml:219(para)
23324
msgid "Lastly, mount the partition:"
23325
msgstr ""
23326
23327
#: serverguide/C/clustering.xml:227(para)
23328
msgid ""
23329
"Using <emphasis>ls</emphasis> you should see "
23330
"<filename>/srv/default</filename> copied from the former "
23331
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
23332
msgstr ""
23333
23334
#: serverguide/C/clustering.xml:238(para)
23335
msgid ""
23336
"For more information on <application>DRBD</application> see the <ulink "
23337
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
23338
msgstr ""
23339
23340
#: serverguide/C/clustering.xml:243(para)
23341
msgid ""
23342
"The <ulink "
23343
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
23344
"bd.conf man page</ulink> contains details on the options not covered in this "
23345
"guide."
23346
msgstr ""
23347
23348
#: serverguide/C/clustering.xml:249(para)
23349
msgid ""
23350
"Also, see the <ulink "
23351
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
23352
"adm man page</ulink>."
23353
msgstr ""
23354
23355
#: serverguide/C/clustering.xml:254(para)
23356
msgid ""
23357
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
23358
"Wiki</ulink> page also has more information."
23359
msgstr ""
23360
23361
#: serverguide/C/chat.xml:13(title)
23362
msgid "Chat Applications"
23363
msgstr ""
23364
23365
#: serverguide/C/chat.xml:19(para)
23366
msgid ""
23367
"In this section, we will discuss how to install and configure a IRC server, "
23368
"<application>ircd-irc2</application>. We will also discuss how to install "
23369
"and configure Jabber, an instance messaging server."
23370
msgstr ""
23371
23372
#: serverguide/C/chat.xml:28(title)
23373
msgid "IRC Server"
23374
msgstr ""
23375
23376
#: serverguide/C/chat.xml:30(para)
23377
msgid ""
23378
"The Ubuntu repository has many Internet Relay Chat servers. This section "
23379
"explains how to install and configure the original IRC server "
23380
"<application>ircd-irc2</application>."
23381
msgstr ""
23382
23383
#: serverguide/C/chat.xml:39(para)
23384
msgid ""
23385
"To install <application>ircd-irc2</application>, run the following command "
23386
"in the command prompt:"
23387
msgstr ""
23388
23389
#: serverguide/C/chat.xml:45(command)
23390
msgid "sudo apt-get install ircd-irc2"
23391
msgstr ""
23392
23393
#: serverguide/C/chat.xml:48(para)
23394
msgid ""
23395
"The configuration files are stored in <filename>/etc/ircd</filename> "
23396
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
23397
"irc2</filename> directory."
23398
msgstr ""
23399
23400
#: serverguide/C/chat.xml:59(para)
23401
msgid ""
23402
"The IRC settings can be done in the configuration file "
23403
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
23404
"this file by editing the following line:"
23405
msgstr ""
23406
23407
#: serverguide/C/chat.xml:64(programlisting)
23408
#, no-wrap
23409
msgid ""
23410
"\n"
23411
"M:irc.localhost::Debian ircd default configuration::000A\n"
23412
msgstr ""
23413
23414
#: serverguide/C/chat.xml:68(para)
23415
msgid ""
23416
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23417
"you set irc.livecipher.com as IRC host name, please make sure "
23418
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23419
"name should not be same as the host name."
23420
msgstr ""
23421
23422
#: serverguide/C/chat.xml:75(para)
23423
msgid ""
23424
"The IRC admin details can be configured by editting the following line:"
23425
msgstr ""
23426
23427
#: serverguide/C/chat.xml:80(programlisting)
23428
#, no-wrap
23429
msgid ""
23430
"\n"
23431
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23432
"Server::IRCnet:\n"
23433
msgstr ""
23434
23435
#: serverguide/C/chat.xml:84(para)
23436
msgid ""
23437
"You should add specific lines to configure the list of IRC ports to listen "
23438
"on, to configure Operator credentials, to configure client authentication, "
23439
"etc. For details, please refer to the example configuration file "
23440
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23441
msgstr ""
23442
23443
#: serverguide/C/chat.xml:92(para)
23444
msgid ""
23445
"The IRC banner to be displayed in the IRC client, when the user connects to "
23446
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23447
msgstr ""
23448
23449
#: serverguide/C/chat.xml:97(para)
23450
msgid ""
23451
"After making necessary changes to the configuration file, you can restart "
23452
"the IRC server using following command:"
23453
msgstr ""
23454
23455
#: serverguide/C/chat.xml:101(programlisting)
23456
#, no-wrap
23457
msgid ""
23458
"\n"
23459
"sudo /etc/init.d/ircd-irc2 restart\n"
23460
msgstr ""
23461
23462
#: serverguide/C/chat.xml:109(para)
23463
msgid ""
23464
"You may also be interested to take a look at other IRC servers available in "
23465
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23466
"<application>ircd-hybrid</application>."
23467
msgstr ""
23468
23469
#: serverguide/C/chat.xml:117(para)
23470
msgid ""
23471
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23472
"FAQ</ulink> for more details about the IRC Server."
23473
msgstr ""
23474
23475
#: serverguide/C/chat.xml:124(para)
23476
msgid ""
23477
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23478
"IRCD</ulink> page has more information."
23479
msgstr ""
23480
23481
#: serverguide/C/chat.xml:132(title)
23482
msgid "Jabber Instant Messaging Server"
23483
msgstr ""
23484
23485
#: serverguide/C/chat.xml:134(para)
23486
msgid ""
23487
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23488
"XMPP, an open standard for instant messaging, and used by many popular "
23489
"applications. This section covers setting up a <emphasis>Jabberd "
23490
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23491
"to providing messaging services to users over the Internet."
23492
msgstr ""
23493
23494
#: serverguide/C/chat.xml:143(para)
23495
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23496
msgstr ""
23497
23498
#: serverguide/C/chat.xml:148(command)
23499
msgid "sudo apt-get install jabberd2"
23500
msgstr ""
23501
23502
#: serverguide/C/chat.xml:155(para)
23503
msgid ""
23504
"A couple of XML configuration files will be used to configure "
23505
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23506
"authentication. This is a very simple form of authentication. However, "
23507
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23508
"Postgresql, etc for for user authentication."
23509
msgstr ""
23510
23511
#: serverguide/C/chat.xml:162(para)
23512
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23513
msgstr ""
23514
23515
#: serverguide/C/chat.xml:166(programlisting)
23516
#, no-wrap
23517
msgid ""
23518
"\n"
23519
" <id>jabber.example.com</id>\n"
23520
msgstr ""
23521
23522
#: serverguide/C/chat.xml:171(para)
23523
msgid ""
23524
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23525
"id, of your server."
23526
msgstr ""
23527
23528
#: serverguide/C/chat.xml:176(para)
23529
msgid "Now in the <storage> section change the <driver> to:"
23530
msgstr ""
23531
23532
#: serverguide/C/chat.xml:180(programlisting)
23533
#, no-wrap
23534
msgid ""
23535
"\n"
23536
" <driver>db</driver>\n"
23537
msgstr ""
23538
23539
#: serverguide/C/chat.xml:184(para)
23540
msgid ""
23541
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23542
"<emphasis><local></emphasis> section change:"
23543
msgstr ""
23544
23545
#: serverguide/C/chat.xml:188(programlisting)
23546
#, no-wrap
23547
msgid ""
23548
"\n"
23549
" <id>jabber.example.com</id>\n"
23550
msgstr ""
23551
23552
#: serverguide/C/chat.xml:192(para)
23553
msgid ""
23554
"And in the <authreg> section adjust the <module> section to:"
23555
msgstr ""
23556
23557
#: serverguide/C/chat.xml:196(programlisting)
23558
#, no-wrap
23559
msgid ""
23560
"\n"
23561
" <module>db</module>\n"
23562
msgstr ""
23563
23564
#: serverguide/C/chat.xml:200(para)
23565
msgid ""
23566
"Finally, restart <application>jabberd2</application> to enable the new "
23567
"settings:"
23568
msgstr ""
23569
23570
#: serverguide/C/chat.xml:205(command)
23571
msgid "sudo /etc/init.d/jabberd2 restart"
23572
msgstr ""
23573
23574
#: serverguide/C/chat.xml:208(para)
23575
msgid ""
23576
"You should now be able to connect to the server using a Jabber client like "
23577
"<application>Pidgin</application> for example."
23578
msgstr ""
23579
23580
#: serverguide/C/chat.xml:213(para)
23581
msgid ""
23582
"The advantage of using Berkeley DB for user data is that after being "
23583
"configured no additional maintenance is required. If you need more control "
23584
"over user accounts and credentials another authentication method is "
23585
"recommended."
23586
msgstr ""
23587
23588
#: serverguide/C/chat.xml:225(para)
23589
msgid ""
23590
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23591
"Site</ulink> contains more details on configuring "
23592
"<application>Jabberd2</application>."
23593
msgstr ""
23594
23595
#: serverguide/C/chat.xml:231(para)
23596
msgid ""
23597
"For more authentication options see the <ulink "
23598
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23599
"Guide</ulink>."
23600
msgstr ""
23601
23602
#: serverguide/C/chat.xml:236(para)
23603
msgid ""
23604
"Also, the <ulink "
23605
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23606
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23607
msgstr ""
23608
23609
#: serverguide/C/backups.xml:13(title)
23610
msgid "Backups"
23611
msgstr ""
23612
23613
#: serverguide/C/backups.xml:14(para)
23614
msgid ""
23615
"There are many ways to backup an Ubuntu installation. The most important "
23616
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23617
"consisting of what to backup, where to back it up to, and how to restore it."
23618
msgstr ""
23619
23620
#: serverguide/C/backups.xml:18(para)
23621
msgid ""
23622
"The following sections discuss various ways of accomplishing these tasks."
23623
msgstr ""
23624
23625
#: serverguide/C/backups.xml:22(title)
23626
msgid "Shell Scripts"
23627
msgstr ""
23628
23629
#: serverguide/C/backups.xml:23(para)
23630
msgid ""
23631
"One of the simplest ways to backup a system is using a <emphasis>shell "
23632
"script</emphasis>. For example, a script can be used to configure which "
23633
"directories to backup, and use those directories as arguments to the "
23634
"<application>tar</application> utility creating an archive file. The archive "
23635
"file can then be moved or copied to another location. The archive can also "
23636
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23637
msgstr ""
23638
23639
#: serverguide/C/backups.xml:29(para)
23640
msgid ""
23641
"The <application>tar</application> utility creates one archive file out of "
23642
"many files or directories. <application>tar</application> can also filter "
23643
"the files through compression utilities reducing the size of the archive "
23644
"file."
23645
msgstr ""
23646
23647
#: serverguide/C/backups.xml:35(title)
23648
msgid "Simple Shell Script"
23649
msgstr ""
23650
23651
#: serverguide/C/backups.xml:36(para)
23652
msgid ""
23653
"The following shell script uses <application>tar</application> to create an "
23654
"archive file on a remotely mounted NFS file system. The archive filename is "
23655
"determined using additional command line utilities."
23656
msgstr ""
23657
23658
#: serverguide/C/backups.xml:40(programlisting)
23659
#, no-wrap
23660
msgid ""
23661
"\n"
23662
"#!/bin/sh\n"
23663
"####################################\n"
23664
"#\n"
23665
"# Backup to NFS mount script.\n"
23666
"#\n"
23667
"####################################\n"
23668
"\n"
23669
"# What to backup. \n"
23670
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23671
"\n"
23672
"# Where to backup to.\n"
23673
"dest=\"/mnt/backup\"\n"
23674
"\n"
23675
"# Create archive filename.\n"
23676
"day=$(date +%A)\n"
23677
"hostname=$(hostname -s)\n"
23678
"archive_file=\"$hostname-$day.tgz\"\n"
23679
"\n"
23680
"# Print start status message.\n"
23681
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23682
"date\n"
23683
"echo\n"
23684
"\n"
23685
"# Backup the files using tar.\n"
23686
"tar czf $dest/$archive_file $backup_files\n"
23687
"\n"
23688
"# Print end status message.\n"
23689
"echo\n"
23690
"echo \"Backup finished\"\n"
23691
"date\n"
23692
"\n"
23693
"# Long listing of files in $dest to check file sizes.\n"
23694
"ls -lh $dest\n"
23695
msgstr ""
23696
23697
#: serverguide/C/backups.xml:77(para)
23698
msgid ""
23699
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23700
"would like to backup. The list should be customized to fit your needs."
23701
msgstr ""
23702
23703
#: serverguide/C/backups.xml:83(para)
23704
msgid ""
23705
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23706
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23707
"day of the week, giving a backup history of seven days. There are other ways "
23708
"to accomplish this including other ways using the "
23709
"<application>date</application> utility."
23710
msgstr ""
23711
23712
#: serverguide/C/backups.xml:90(para)
23713
msgid ""
23714
"<emphasis>$hostname:</emphasis> variable containing the "
23715
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23716
"archive filename gives you the option of placing daily archive files from "
23717
"multiple systems in the same directory."
23718
msgstr ""
23719
23720
#: serverguide/C/backups.xml:97(para)
23721
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23722
msgstr ""
23723
23724
#: serverguide/C/backups.xml:102(para)
23725
msgid ""
23726
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23727
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23728
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23729
"details using <emphasis>NFS</emphasis>."
23730
msgstr ""
23731
23732
#: serverguide/C/backups.xml:109(para)
23733
msgid ""
23734
"<emphasis>status messages:</emphasis> optional messages printed to the "
23735
"console using the <application>echo</application> utility."
23736
msgstr ""
23737
23738
#: serverguide/C/backups.xml:115(para)
23739
msgid ""
23740
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23741
"<application>tar</application> command used to create the archive file."
23742
msgstr ""
23743
23744
#: serverguide/C/backups.xml:121(para)
23745
msgid "<emphasis>c:</emphasis> creates an archive."
23746
msgstr ""
23747
23748
#: serverguide/C/backups.xml:126(para)
23749
msgid ""
23750
"<emphasis>z:</emphasis> filter the archive through the "
23751
"<application>gzip</application> utility compressing the archive."
23752
msgstr ""
23753
23754
#: serverguide/C/backups.xml:131(para)
23755
msgid ""
23756
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23757
"<application>tar</application> output will be sent to STDOUT."
23758
msgstr ""
23759
23760
#: serverguide/C/backups.xml:138(para)
23761
msgid ""
23762
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23763
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23764
"of the destination directory. This is useful for a quick file size check of "
23765
"the archive file. This check should not replace testing the archive file."
23766
msgstr ""
23767
23768
#: serverguide/C/backups.xml:145(para)
23769
msgid ""
23770
"This is a simple example of a backup shell script. There are large amount of "
23771
"options that can be included in a backup script. See <xref linkend=\"backup-"
23772
"shellscript-references\"/> for links to resources providing more in depth "
23773
"shell scripting information."
23774
msgstr ""
23775
23776
#: serverguide/C/backups.xml:152(title)
23777
msgid "Executing the Script"
23778
msgstr ""
23779
23780
#: serverguide/C/backups.xml:154(title)
23781
msgid "Executing from a Terminal"
23782
msgstr ""
23783
23784
#: serverguide/C/backups.xml:155(para)
23785
msgid ""
23786
"The simplest way of executing the above backup script is to copy and paste "
23787
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23788
"from a terminal prompt:"
23789
msgstr ""
23790
23791
#: serverguide/C/backups.xml:160(command)
23792
msgid "sudo bash backup.sh"
23793
msgstr ""
23794
23795
#: serverguide/C/backups.xml:162(para)
23796
msgid ""
23797
"This is a great way to test the script to make sure everything works as "
23798
"expected."
23799
msgstr ""
23800
23801
#: serverguide/C/backups.xml:167(title)
23802
msgid "Executing with cron"
23803
msgstr ""
23804
23805
#: serverguide/C/backups.xml:168(para)
23806
msgid ""
23807
"The <application>cron</application> utility can be used to automate the "
23808
"script execution. The <application>cron</application> daemon allows the "
23809
"execution of scripts, or commands, at a specified time and date."
23810
msgstr ""
23811
23812
#: serverguide/C/backups.xml:172(para)
23813
msgid ""
23814
"<application>cron</application> is configured through entries in a "
23815
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23816
"separated into fields:"
23817
msgstr ""
23818
23819
#: serverguide/C/backups.xml:176(programlisting)
23820
#, no-wrap
23821
msgid ""
23822
"\n"
23823
"# m h dom mon dow command\n"
23824
msgstr ""
23825
23826
#: serverguide/C/backups.xml:181(para)
23827
msgid ""
23828
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23829
msgstr ""
23830
23831
#: serverguide/C/backups.xml:186(para)
23832
msgid ""
23833
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23834
msgstr ""
23835
23836
#: serverguide/C/backups.xml:191(para)
23837
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23838
msgstr ""
23839
23840
#: serverguide/C/backups.xml:196(para)
23841
msgid ""
23842
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23843
msgstr ""
23844
23845
#: serverguide/C/backups.xml:201(para)
23846
msgid ""
23847
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23848
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23849
"valid."
23850
msgstr ""
23851
23852
#: serverguide/C/backups.xml:206(para)
23853
msgid "<emphasis>command:</emphasis> the command to execute."
23854
msgstr ""
23855
23856
#: serverguide/C/backups.xml:211(para)
23857
msgid ""
23858
"To add or change entries in a <filename>crontab</filename> file the "
23859
"<application>crontab -e</application> command should be used. Also, the "
23860
"contents of a <filename>crontab</filename> file can be viewed using the "
23861
"<application>crontab -l</application> command."
23862
msgstr ""
23863
23864
#: serverguide/C/backups.xml:215(para)
23865
msgid ""
23866
"To execute the <application>backup.sh</application> script listed above "
23867
"using <application>cron</application>. Enter the following from a terminal "
23868
"prompt:"
23869
msgstr ""
23870
23871
#: serverguide/C/backups.xml:220(command)
23872
msgid "sudo crontab -e"
23873
msgstr ""
23874
23875
#: serverguide/C/backups.xml:223(para)
23876
msgid ""
23877
"Using <application>sudo</application> with the <application>crontab -"
23878
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23879
"This is necessary if you are backing up directories only the root user has "
23880
"access to."
23881
msgstr ""
23882
23883
#: serverguide/C/backups.xml:228(para)
23884
msgid "Add the following entry to the <filename>crontab</filename> file:"
23885
msgstr ""
23886
23887
#: serverguide/C/backups.xml:231(programlisting)
23888
#, no-wrap
23889
msgid ""
23890
"\n"
23891
"# m h dom mon dow command\n"
23892
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23893
msgstr ""
23894
23895
#: serverguide/C/backups.xml:235(para)
23896
msgid ""
23897
"The <application>backup.sh</application> script will now be executed every "
23898
"day at 12:00 am."
23899
msgstr ""
23900
23901
#: serverguide/C/backups.xml:239(para)
23902
msgid ""
23903
"The <application>backup.sh</application> script will need to be copied to "
23904
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23905
"to execute properly. The script can reside anywhere on the file system "
23906
"simply change the script path appropriately."
23907
msgstr ""
23908
23909
#: serverguide/C/backups.xml:244(para)
23910
msgid ""
23911
"For more in depth <application>crontab</application> options see <xref "
23912
"linkend=\"backup-shellscript-references\"/>."
23913
msgstr ""
23914
23915
#: serverguide/C/backups.xml:250(title)
23916
msgid "Restoring from the Archive"
23917
msgstr ""
23918
23919
#: serverguide/C/backups.xml:251(para)
23920
msgid ""
23921
"Once an archive has been created it is important to test the archive. The "
23922
"archive can be tested by listing the files it contains, but the best test is "
23923
"to <emphasis>restore</emphasis> a file from the archive."
23924
msgstr ""
23925
23926
#: serverguide/C/backups.xml:257(para)
23927
msgid "To see a listing of the archive contents. From a terminal prompt:"
23928
msgstr ""
23929
23930
#: serverguide/C/backups.xml:261(command)
23931
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23932
msgstr "tar -tzvf /mnt/backup/host-Monday.tgz"
23933
23934
#: serverguide/C/backups.xml:265(para)
23935
msgid "To restore a file from the archive to a different directory enter:"
23936
msgstr ""
23937
23938
#: serverguide/C/backups.xml:269(command)
23939
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23940
msgstr "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23941
23942
#: serverguide/C/backups.xml:271(para)
23943
msgid ""
23944
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23945
"redirects the extracted files to the specified directory. The above example "
23946
"will extract the <filename>/etc/hosts</filename> file to "
23947
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23948
"recreates the directory structure that it contains."
23949
msgstr ""
23950
23951
#: serverguide/C/backups.xml:276(para)
23952
msgid ""
23953
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23954
"the file to restore."
23955
msgstr ""
23956
23957
#: serverguide/C/backups.xml:281(para)
23958
msgid "To restore all files in the archive enter the following:"
23959
msgstr ""
23960
23961
#: serverguide/C/backups.xml:285(command)
23962
msgid "cd /"
23963
msgstr "cd /"
23964
23965
#: serverguide/C/backups.xml:286(command)
23966
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23967
msgstr "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23968
23969
#: serverguide/C/backups.xml:291(para)
23970
msgid "This will overwrite the files currently on the file system."
23971
msgstr ""
23972
23973
#: serverguide/C/backups.xml:300(para)
23974
msgid ""
23975
"For more information on shell scripting see the <ulink "
23976
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23977
msgstr ""
23978
23979
#: serverguide/C/backups.xml:305(para)
23980
msgid ""
23981
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23982
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23983
"great resource for shell scripting."
23984
msgstr ""
23985
23986
#: serverguide/C/backups.xml:311(para)
23987
msgid ""
23988
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23989
"Wiki Page</ulink> contains details on advanced "
23990
"<application>cron</application> options."
23991
msgstr ""
23992
23993
#: serverguide/C/backups.xml:318(para)
23994
msgid ""
23995
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23996
"tar Manual</ulink> for more <application>tar</application> options."
23997
msgstr ""
23998
23999
#: serverguide/C/backups.xml:324(para)
24000
msgid ""
24001
"The Wikipedia <ulink "
24002
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
24003
"Scheme</ulink> article contains information on other backup rotation schemes."
24004
msgstr ""
24005
24006
#: serverguide/C/backups.xml:330(para)
24007
msgid ""
24008
"The shell script uses <application>tar</application> to create the archive, "
24009
"but there many other command line utilities that can be used. For example:"
24010
msgstr ""
24011
24012
#: serverguide/C/backups.xml:336(para)
24013
msgid ""
24014
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
24015
"files to and from archives."
24016
msgstr ""
24017
24018
#: serverguide/C/backups.xml:341(para)
24019
msgid ""
24020
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
24021
"the <application>coreutils</application> package. A low level utility that "
24022
"can copy data from one format to another"
24023
msgstr ""
24024
24025
#: serverguide/C/backups.xml:347(para)
24026
msgid ""
24027
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
24028
"snap shot utility used to create copies of an entire file system."
24029
msgstr ""
24030
24031
#: serverguide/C/backups.xml:358(title)
24032
msgid "Archive Rotation"
24033
msgstr ""
24034
24035
#: serverguide/C/backups.xml:359(para)
24036
msgid ""
24037
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
24038
"allows for seven different archives. For a server whose data doesn't change "
24039
"often this may be enough. If the server has a large amount of data a more "
24040
"robust rotation scheme should be used."
24041
msgstr ""
24042
24043
#: serverguide/C/backups.xml:365(title)
24044
msgid "Rotating NFS Archives"
24045
msgstr ""
24046
24047
#: serverguide/C/backups.xml:366(para)
24048
msgid ""
24049
"In this section the shell script will be slightly modified to implement a "
24050
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
24051
msgstr ""
24052
24053
#: serverguide/C/backups.xml:372(para)
24054
msgid ""
24055
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
24056
"Friday."
24057
msgstr ""
24058
24059
#: serverguide/C/backups.xml:377(para)
24060
msgid ""
24061
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
24062
"weekly backups a month."
24063
msgstr ""
24064
24065
#: serverguide/C/backups.xml:382(para)
24066
msgid ""
24067
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
24068
"rotating two monthly backups based on if the month is odd or even."
24069
msgstr ""
24070
24071
#: serverguide/C/backups.xml:388(para)
24072
msgid "Here is the new script:"
24073
msgstr ""
24074
24075
#: serverguide/C/backups.xml:391(programlisting)
24076
#, no-wrap
24077
msgid ""
24078
"\n"
24079
"#!/bin/bash\n"
24080
"####################################\n"
24081
"#\n"
24082
"# Backup to NFS mount script with\n"
24083
"# grandfather-father-son rotation.\n"
24084
"#\n"
24085
"####################################\n"
24086
"\n"
24087
"# What to backup. \n"
24088
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
24089
"\n"
24090
"# Where to backup to.\n"
24091
"dest=\"/mnt/backup\"\n"
24092
"\n"
24093
"# Setup variables for the archive filename.\n"
24094
"day=$(date +%A)\n"
24095
"hostname=$(hostname -s)\n"
24096
"\n"
24097
"# Find which week of the month 1-4 it is.\n"
24098
"day_num=$(date +%d)\n"
24099
"if (( $day_num <= 7 )); then\n"
24100
" week_file=\"$hostname-week1.tgz\"\n"
24101
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
24102
" week_file=\"$hostname-week2.tgz\"\n"
24103
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
24104
" week_file=\"$hostname-week3.tgz\"\n"
24105
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
24106
" week_file=\"$hostname-week4.tgz\"\n"
24107
"fi\n"
24108
"\n"
24109
"# Find if the Month is odd or even.\n"
24110
"month_num=$(date +%m)\n"
24111
"month=$(expr $month_num % 2)\n"
24112
"if [ $month -eq 0 ]; then\n"
24113
" month_file=\"$hostname-month2.tgz\"\n"
24114
"else\n"
24115
" month_file=\"$hostname-month1.tgz\"\n"
24116
"fi\n"
24117
"\n"
24118
"# Create archive filename.\n"
24119
"if [ $day_num == 1 ]; then\n"
24120
"\tarchive_file=$month_file\n"
24121
"elif [ $day != \"Saturday\" ]; then\n"
24122
" archive_file=\"$hostname-$day.tgz\"\n"
24123
"else \n"
24124
"\tarchive_file=$week_file\n"
24125
"fi\n"
24126
"\n"
24127
"# Print start status message.\n"
24128
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
24129
"date\n"
24130
"echo\n"
24131
"\n"
24132
"# Backup the files using tar.\n"
24133
"tar czf $dest/$archive_file $backup_files\n"
24134
"\n"
24135
"# Print end status message.\n"
24136
"echo\n"
24137
"echo \"Backup finished\"\n"
24138
"date\n"
24139
"\n"
24140
"# Long listing of files in $dest to check file sizes.\n"
24141
"ls -lh $dest/\n"
24142
msgstr ""
24143
24144
#: serverguide/C/backups.xml:456(para)
24145
msgid ""
24146
"The script can be executed using the same methods as in <xref "
24147
"linkend=\"backup-executing-shellscript\"/>."
24148
msgstr ""
24149
24150
#: serverguide/C/backups.xml:459(para)
24151
msgid ""
24152
"It is good practice to take backup media off site in case of a disaster. In "
24153
"the shell script example the backup media is another server providing an NFS "
24154
"share. In all likelihood taking the NFS server to another location would not "
24155
"be practical. Depending upon connection speeds it may be an option to copy "
24156
"the archive file over a WAN link to a server in another location."
24157
msgstr ""
24158
24159
#: serverguide/C/backups.xml:465(para)
24160
msgid ""
24161
"Another option is to copy the archive file to an external hard drive which "
24162
"can then be taken off site. Since the price of external hard drives continue "
24163
"to decrease it may be cost affective to use two drives for each archive "
24164
"level. This would allow you to have one external drive attached to the "
24165
"backup server and one in another location."
24166
msgstr ""
24167
24168
#: serverguide/C/backups.xml:472(title)
24169
msgid "Tape Drives"
24170
msgstr ""
24171
24172
#: serverguide/C/backups.xml:473(para)
24173
msgid ""
24174
"A tape drive attached to the server can be used instead of a NFS share. "
24175
"Using a tape drive simplifies archive rotation, and taking the media off "
24176
"site as well."
24177
msgstr ""
24178
24179
#: serverguide/C/backups.xml:477(para)
24180
msgid ""
24181
"When using a tape drive the filename portions of the script aren't needed "
24182
"because the date is sent directly to the tape device. Some commands to "
24183
"manipulate the tape are needed. This is accomplished using "
24184
"<application>mt</application>, a magnetic tape control utility part of the "
24185
"<application>cpio</application> package."
24186
msgstr ""
24187
24188
#: serverguide/C/backups.xml:482(para)
24189
msgid "Here is the shell script modified to use a tape drive:"
24190
msgstr ""
24191
24192
#: serverguide/C/backups.xml:485(programlisting)
24193
#, no-wrap
24194
msgid ""
24195
"\n"
24196
"#!/bin/bash\n"
24197
"####################################\n"
24198
"#\n"
24199
"# Backup to tape drive script.\n"
24200
"#\n"
24201
"####################################\n"
24202
"\n"
24203
"# What to backup. \n"
24204
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
24205
"\n"
24206
"# Where to backup to.\n"
24207
"dest=\"/dev/st0\"\n"
24208
"\n"
24209
"# Print start status message.\n"
24210
"echo \"Backing up $backup_files to $dest\"\n"
24211
"date\n"
24212
"echo\n"
24213
"\n"
24214
"# Make sure the tape is rewound.\n"
24215
"mt -f $dest rewind\n"
24216
"\n"
24217
"# Backup the files using tar.\n"
24218
"tar czf $dest $backup_files\n"
24219
"\n"
24220
"# Rewind and eject the tape.\n"
24221
"mt -f $dest rewoffl\n"
24222
"\n"
24223
"# Print end status message.\n"
24224
"echo\n"
24225
"echo \"Backup finished\"\n"
24226
"date\n"
24227
msgstr ""
24228
"\n"
24229
"#!/bin/bash\n"
24230
"####################################\n"
24231
"#\n"
24232
"# Backup to tape drive script.\n"
24233
"#\n"
24234
"####################################\n"
24235
"\n"
24236
"# What to backup. \n"
24237
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
24238
"\n"
24239
"# Where to backup to.\n"
24240
"dest=\"/dev/st0\"\n"
24241
"\n"
24242
"# Print start status message.\n"
24243
"echo \"Backing up $backup_files to $dest\"\n"
24244
"date\n"
24245
"echo\n"
24246
"\n"
24247
"# Make sure the tape is rewound.\n"
24248
"mt -f $dest rewind\n"
24249
"\n"
24250
"# Backup the files using tar.\n"
24251
"tar czf $dest $backup_files\n"
24252
"\n"
24253
"# Rewind and eject the tape.\n"
24254
"mt -f $dest rewoffl\n"
24255
"\n"
24256
"# Print end status message.\n"
24257
"echo\n"
24258
"echo \"Backup finished\"\n"
24259
"date\n"
24260
24261
#: serverguide/C/backups.xml:519(para)
24262
msgid ""
24263
"The default device name for a SCSI tape drive is "
24264
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
24265
"system."
24266
msgstr ""
24267
24268
#: serverguide/C/backups.xml:524(para)
24269
msgid ""
24270
"Restoring from a tape drive is basically the same as restoring from a file. "
24271
"Simply rewind the tape and use the device path instead of a file path. For "
24272
"example to restore the <filename>/etc/hosts</filename> file to "
24273
"<filename>/tmp/etc/hosts</filename>:"
24274
msgstr ""
24275
24276
#: serverguide/C/backups.xml:529(command)
24277
msgid "mt -f /dev/st0 rewind"
24278
msgstr "mt -f /dev/st0 rewind"
24279
24280
#: serverguide/C/backups.xml:530(command)
24281
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
24282
msgstr "tar -xzf /dev/st0 -C /tmp/etc/hosts"
24283
24284
#: serverguide/C/backups.xml:535(title)
24285
msgid "Bacula"
24286
msgstr "Bacula"
24287
24288
#: serverguide/C/backups.xml:536(para)
24289
msgid ""
24290
"<application>Bacula</application> is a backup program enabling you to "
24291
"backup, restore, and verify data across your network. There are Bacula "
24292
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
24293
"wide solution."
24294
msgstr ""
24295
24296
#: serverguide/C/backups.xml:542(para)
24297
msgid ""
24298
"<application>Bacula</application> is made up of several components and "
24299
"services used to manage which files to backup and where to back them up to:"
24300
msgstr ""
24301
24302
#: serverguide/C/backups.xml:548(para)
24303
msgid ""
24304
"<application>Bacula Director:</application> a service that controls all "
24305
"backup, restore, verify, and archive operations."
24306
msgstr ""
24307
24308
#: serverguide/C/backups.xml:553(para)
24309
msgid ""
24310
"<application>Bacula Console:</application> an application allowing "
24311
"communication with the Director. There are three versions of the Console:"
24312
msgstr ""
24313
24314
#: serverguide/C/backups.xml:558(para)
24315
msgid "Text based command line version."
24316
msgstr ""
24317
24318
#: serverguide/C/backups.xml:559(para)
24319
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
24320
msgstr ""
24321
24322
#: serverguide/C/backups.xml:560(para)
24323
msgid "wxWidgets GUI interface."
24324
msgstr ""
24325
24326
#: serverguide/C/backups.xml:564(para)
24327
msgid ""
24328
"<application>Bacula File:</application> also known as the "
24329
"<application>Bacula Client</application> program. This application is "
24330
"installed on machines to be backed up, and is responsible for the data "
24331
"requested by the Director."
24332
msgstr ""
24333
24334
#: serverguide/C/backups.xml:570(para)
24335
msgid ""
24336
"<application>Bacula Storage:</application> the programs that perform the "
24337
"storage and recovery of data to the physical media."
24338
msgstr ""
24339
24340
#: serverguide/C/backups.xml:575(para)
24341
msgid ""
24342
"<application>Bacula Catalog:</application> is responsible for maintaining "
24343
"the file indexes and volume databases for all files backed up, enabling "
24344
"quick location and restoration of archived files. The Catalog supports three "
24345
"different databases MySQL, PostgreSQL, and SQLite."
24346
msgstr ""
24347
24348
#: serverguide/C/backups.xml:581(para)
24349
msgid ""
24350
"<application>Bacula Monitor:</application> allows the monitoring of the "
24351
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
24352
"available as a GTK+ GUI application."
24353
msgstr ""
24354
24355
#: serverguide/C/backups.xml:587(para)
24356
msgid ""
24357
"These services and applications can be run on multiple servers and clients, "
24358
"or they can be installed on one machine if backing up a single disk or "
24359
"volume."
24360
msgstr ""
24361
24362
#: serverguide/C/backups.xml:594(para)
24363
msgid ""
24364
"There are multiple packages containing the different "
24365
"<application>Bacula</application> components. To install Bacula, from a "
24366
"terminal prompt enter:"
24367
msgstr ""
24368
24369
#: serverguide/C/backups.xml:599(command)
24370
msgid "sudo apt-get install bacula"
24371
msgstr ""
24372
24373
#: serverguide/C/backups.xml:601(para)
24374
msgid ""
24375
"By default installing the <application>bacula</application> package will use "
24376
"a <application>MySQL</application> database for the Catalog. If you want to "
24377
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
24378
"director-sqlite3</application> or <application>bacula-director-"
24379
"pgsql</application> respectively."
24380
msgstr ""
24381
24382
#: serverguide/C/backups.xml:607(para)
24383
msgid ""
24384
"During the install process you will be asked to supply credentials for the "
24385
"database <emphasis>administrator</emphasis> and the "
24386
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
24387
"database administrator will need to have the appropriate rights to create a "
24388
"database, see <xref linkend=\"mysql\"/> for more information."
24389
msgstr ""
24390
24391
#: serverguide/C/backups.xml:617(para)
24392
msgid ""
24393
"<application>Bacula</application> configuration files are formatted based on "
24394
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
24395
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
24396
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
24397
"directory."
24398
msgstr ""
24399
24400
#: serverguide/C/backups.xml:622(para)
24401
msgid ""
24402
"The various <application>Bacula</application> components must authorize "
24403
"themselves to each other. This is accomplished using the "
24404
"<emphasis>password</emphasis> directive. For example, the "
24405
"<emphasis>Storage</emphasis> resource password in the "
24406
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
24407
"<emphasis>Director</emphasis> resource password in "
24408
"<filename>/etc/bacula/bacula-sd.conf</filename>."
24409
msgstr ""
24410
24411
#: serverguide/C/backups.xml:628(para)
24412
msgid ""
24413
"By default the backup job named <emphasis>Client1</emphasis> is configured "
24414
"to archive the <application>Bacula</application> Catalog. If you plan on "
24415
"using the server to backup more than one client you should change the name "
24416
"of this job to something more descriptive. To change the name edit "
24417
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
24418
msgstr ""
24419
24420
#: serverguide/C/backups.xml:633(programlisting)
24421
#, no-wrap
24422
msgid ""
24423
"\n"
24424
"#\n"
24425
"# Define the main nightly save backup job\n"
24426
"# By default, this job will back up to disk in \n"
24427
"Job {\n"
24428
" Name = \"BackupServer\"\n"
24429
" JobDefs = \"DefaultJob\"\n"
24430
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
24431
"}\n"
24432
msgstr ""
24433
"\n"
24434
"#\n"
24435
"# Define the main nightly save backup job\n"
24436
"# By default, this job will back up to disk in \n"
24437
"Job {\n"
24438
" Name = \"BackupServer\"\n"
24439
" JobDefs = \"DefaultJob\"\n"
24440
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
24441
"}\n"
24442
24443
#: serverguide/C/backups.xml:644(para)
24444
msgid ""
24445
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
24446
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
24447
"your appropriate hostname, or other descriptive name."
24448
msgstr ""
24449
24450
#: serverguide/C/backups.xml:649(para)
24451
msgid ""
24452
"The <emphasis>Console</emphasis> can be used to query the "
24453
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
24454
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24455
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24456
"the following from a terminal:"
24457
msgstr ""
24458
24459
#: serverguide/C/backups.xml:655(command)
24460
msgid "sudo adduser $username bacula"
24461
msgstr "sudo adduser $username bacula"
24462
24463
#: serverguide/C/backups.xml:658(para)
24464
msgid ""
24465
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24466
"you are adding the current user to the group you should log out and back in "
24467
"for the new permissions to take effect."
24468
msgstr ""
24469
24470
#: serverguide/C/backups.xml:665(title)
24471
msgid "Localhost Backup"
24472
msgstr "Copia de seguridá de Localhost"
24473
24474
#: serverguide/C/backups.xml:666(para)
24475
msgid ""
24476
"This section describes how to backup specified directories on a single host "
24477
"to a local tape drive."
24478
msgstr ""
24479
24480
#: serverguide/C/backups.xml:671(para)
24481
msgid ""
24482
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24483
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24484
msgstr ""
24485
24486
#: serverguide/C/backups.xml:674(programlisting)
24487
#, no-wrap
24488
msgid ""
24489
"\n"
24490
"Device {\n"
24491
" Name = \"Tape Drive\"\n"
24492
" Device Type = tape\n"
24493
" Media Type = DDS-4\n"
24494
" Archive Device = /dev/st0\n"
24495
" Hardware end of medium = No;\n"
24496
" AutomaticMount = yes; # when device opened, read it\n"
24497
" AlwaysOpen = Yes;\n"
24498
" RemovableMedia = yes;\n"
24499
" RandomAccess = no;\n"
24500
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24501
"}\n"
24502
msgstr ""
24503
24504
#: serverguide/C/backups.xml:688(para)
24505
msgid ""
24506
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24507
"Type and Archive Device to match your hardware."
24508
msgstr ""
24509
24510
#: serverguide/C/backups.xml:691(para)
24511
msgid "You could also uncomment one of the other examples in the file."
24512
msgstr ""
24513
24514
#: serverguide/C/backups.xml:696(para)
24515
msgid ""
24516
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24517
"<application>Storage</application> daemon will need to be restarted:"
24518
msgstr ""
24519
24520
#: serverguide/C/backups.xml:701(command)
24521
msgid "sudo /etc/init.d/bacula-sd restart"
24522
msgstr ""
24523
24524
#: serverguide/C/backups.xml:705(para)
24525
msgid ""
24526
"Now add a <emphasis>Storage</emphasis> resource in "
24527
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24528
msgstr ""
24529
24530
#: serverguide/C/backups.xml:708(programlisting)
24531
#, no-wrap
24532
msgid ""
24533
"\n"
24534
"# Definition of \"Tape Drive\" storage device\n"
24535
"Storage {\n"
24536
" Name = TapeDrive\n"
24537
" # Do not use \"localhost\" here \n"
24538
" Address = backupserver # N.B. Use a fully qualified name "
24539
"here\n"
24540
" SDPort = 9103\n"
24541
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24542
" Device = \"Tape Drive\"\n"
24543
" Media Type = tape\n"
24544
"}\n"
24545
msgstr ""
24546
24547
#: serverguide/C/backups.xml:720(para)
24548
msgid ""
24549
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24550
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24551
"to the actual host name."
24552
msgstr ""
24553
24554
#: serverguide/C/backups.xml:724(para)
24555
msgid ""
24556
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24557
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24558
msgstr ""
24559
24560
#: serverguide/C/backups.xml:730(para)
24561
msgid ""
24562
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24563
"directories to backup, by adding:"
24564
msgstr ""
24565
24566
#: serverguide/C/backups.xml:733(programlisting)
24567
#, no-wrap
24568
msgid ""
24569
"\n"
24570
"# LocalhostBacup FileSet.\n"
24571
"FileSet {\n"
24572
" Name = \"LocalhostFiles\"\n"
24573
" Include {\n"
24574
" Options {\n"
24575
" signature = MD5\n"
24576
" compression=GZIP\n"
24577
" }\n"
24578
" File = /etc\n"
24579
" File = /home\n"
24580
" }\n"
24581
"}\n"
24582
msgstr ""
24583
24584
#: serverguide/C/backups.xml:747(para)
24585
msgid ""
24586
"This <emphasis>FileSet</emphasis> will backup the <filename "
24587
"role=\"directory\">/etc</filename> and <filename "
24588
"role=\"directory\">/home</filename> directories. The "
24589
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24590
"create a MD5 signature for each file backed up, and to compress the files "
24591
"using GZIP."
24592
msgstr ""
24593
24594
#: serverguide/C/backups.xml:754(para)
24595
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24596
msgstr ""
24597
24598
#: serverguide/C/backups.xml:757(programlisting)
24599
#, no-wrap
24600
msgid ""
24601
"\n"
24602
"# LocalhostBackup Schedule -- Daily.\n"
24603
"Schedule {\n"
24604
" Name = \"LocalhostDaily\"\n"
24605
" Run = Full daily at 00:01\n"
24606
"}\n"
24607
msgstr ""
24608
"\n"
24609
"# LocalhostBackup Schedule -- Daily.\n"
24610
"Schedule {\n"
24611
" Name = \"LocalhostDaily\"\n"
24612
" Run = Full daily at 00:01\n"
24613
"}\n"
24614
24615
#: serverguide/C/backups.xml:764(para)
24616
msgid ""
24617
"The job will run every day at 00:01 or 12:01 am. There are many other "
24618
"scheduling options available."
24619
msgstr ""
24620
24621
#: serverguide/C/backups.xml:769(para)
24622
msgid "Finally create the <emphasis>Job</emphasis>:"
24623
msgstr ""
24624
24625
#: serverguide/C/backups.xml:772(programlisting)
24626
#, no-wrap
24627
msgid ""
24628
"\n"
24629
"# Localhost backup.\n"
24630
"Job {\n"
24631
" Name = \"LocalhostBackup\"\n"
24632
" JobDefs = \"DefaultJob\"\n"
24633
" Enabled = yes\n"
24634
" Level = Full\n"
24635
" FileSet = \"LocalhostFiles\"\n"
24636
" Schedule = \"LocalhostDaily\"\n"
24637
" Storage = TapeDrive\n"
24638
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24639
"} \n"
24640
msgstr ""
24641
"\n"
24642
"# Localhost backup.\n"
24643
"Job {\n"
24644
" Name = \"LocalhostBackup\"\n"
24645
" JobDefs = \"DefaultJob\"\n"
24646
" Enabled = yes\n"
24647
" Level = Full\n"
24648
" FileSet = \"LocalhostFiles\"\n"
24649
" Schedule = \"LocalhostDaily\"\n"
24650
" Storage = TapeDrive\n"
24651
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24652
"} \n"
24653
24654
#: serverguide/C/backups.xml:785(para)
24655
msgid ""
24656
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24657
"drive."
24658
msgstr ""
24659
24660
#: serverguide/C/backups.xml:790(para)
24661
msgid ""
24662
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24663
"current tape does not have a label <application>Bacula</application> will "
24664
"send an email letting you know. To label a tape using the "
24665
"<application>Console</application> enter the following from a terminal:"
24666
msgstr ""
24667
24668
#: serverguide/C/backups.xml:796(command)
24669
msgid "bconsole"
24670
msgstr "bconsole"
24671
24672
#: serverguide/C/backups.xml:800(para)
24673
msgid "At the Bacula Console prompt enter:"
24674
msgstr "Na consola de Bascual escribi:"
24675
24676
#: serverguide/C/backups.xml:804(command)
24677
msgid "label"
24678
msgstr "etiqueta"
24679
24680
#: serverguide/C/backups.xml:808(para)
24681
msgid ""
24682
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24683
msgstr ""
24684
24685
#: serverguide/C/backups.xml:818(userinput)
24686
#, no-wrap
24687
msgid "2"
24688
msgstr ""
24689
24690
#: serverguide/C/backups.xml:812(computeroutput)
24691
#, no-wrap
24692
msgid ""
24693
"\n"
24694
"Automatically selected Catalog: MyCatalog\n"
24695
"Using Catalog \"MyCatalog\"\n"
24696
"The defined Storage resources are:\n"
24697
" 1: File\n"
24698
" 2: TapeDrive\n"
24699
"Select Storage resource (1-2):<placeholder-1/>\n"
24700
msgstr ""
24701
24702
#: serverguide/C/backups.xml:823(para)
24703
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24704
msgstr ""
24705
24706
#: serverguide/C/backups.xml:828(userinput)
24707
#, no-wrap
24708
msgid "Sunday"
24709
msgstr ""
24710
24711
#: serverguide/C/backups.xml:827(computeroutput)
24712
#, no-wrap
24713
msgid ""
24714
"\n"
24715
"Enter new Volume name: <placeholder-1/>\n"
24716
"Defined Pools:\n"
24717
" 1: Default\n"
24718
" 2: Scratch"
24719
msgstr ""
24720
24721
#: serverguide/C/backups.xml:833(para)
24722
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24723
msgstr ""
24724
24725
#: serverguide/C/backups.xml:838(para)
24726
msgid "Now, select the <emphasis>Pool</emphasis>:"
24727
msgstr ""
24728
24729
#: serverguide/C/backups.xml:843(userinput)
24730
#, no-wrap
24731
msgid "1"
24732
msgstr ""
24733
24734
#: serverguide/C/backups.xml:842(computeroutput)
24735
#, no-wrap
24736
msgid ""
24737
"\n"
24738
"Select the Pool (1-2): <placeholder-1/>\n"
24739
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24740
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24741
msgstr ""
24742
24743
#: serverguide/C/backups.xml:850(para)
24744
msgid ""
24745
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24746
"backup the localhost to an attached tape drive."
24747
msgstr ""
24748
24749
#: serverguide/C/backups.xml:858(para)
24750
msgid ""
24751
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24752
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24753
"Manual</ulink>"
24754
msgstr ""
24755
24756
#: serverguide/C/backups.xml:864(para)
24757
msgid ""
24758
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24759
"the latest Bacula news and developments."
24760
msgstr ""
24761
24762
#: serverguide/C/backups.xml:869(para)
24763
msgid ""
24764
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24765
"Ubuntu Wiki</ulink> page."
24766
msgstr ""
24767
24768
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24769
#: serverguide/C/backups.xml:0(None)
24770
msgid "translator-credits"
24771
msgstr ""
24772
"Launchpad Contributions:\n"
24773
" Vity https://launchpad.net/~vity\n"
24774
" Xandru Martino https://launchpad.net/~xandru-martino\n"
24775
" Xuacu https://launchpad.net/~xuacusk8"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1