« back to all changes in this revision
Viewing changes to serverguide/po/bs.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/bs.po
1
# Bosnian translation for ubuntu-docs
2
# Copyright (c) 2007 Rosetta Contributors and Canonical Ltd 2007
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2007.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2009-10-20 03:48+0000\n"
12
"Last-Translator: Launchpad Translations Administrators "
13
"<rosetta@launchpad.net>\n"
14
"Language-Team: Bosnian <bs@li.org>\n"
15
"MIME-Version: 1.0\n"
16
"Content-Type: text/plain; charset=UTF-8\n"
17
"Content-Transfer-Encoding: 8bit\n"
18
"X-Launchpad-Export-Date: 2010-04-17 14:52+0000\n"
19
"X-Generator: Launchpad (build Unknown)\n"
20
21
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
22
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
23
msgstr ""
24
25
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
26
msgid "Ubuntu Server Guide"
27
msgstr ""
28
29
#: serverguide/C/serverguide-C.omf:9(date)
30
msgid "2007-09-30"
31
msgstr ""
32
33
#: serverguide/C/windows-networking.xml:13(title)
34
msgid "Windows Networking"
35
msgstr ""
36
37
#: serverguide/C/windows-networking.xml:15(para)
38
msgid ""
39
"Computer networks are often comprised of diverse systems, and while "
40
"operating a network made up entirely of Ubuntu desktop and server computers "
41
"would certainly be fun, some network environments must consist of both "
42
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
43
"class=\"registered\">Windows</trademark> systems working together in "
44
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
45
"principles and tools used in configuring your Ubuntu Server for sharing "
46
"network resources with Windows computers."
47
msgstr ""
48
49
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
50
msgid "Introduction"
51
msgstr ""
52
53
#: serverguide/C/windows-networking.xml:27(para)
54
msgid ""
55
"Successfully networking your Ubuntu system with Windows clients involves "
56
"providing and integrating with services common to Windows environments. Such "
57
"services assist the sharing of data and information about the computers and "
58
"users involved in the network, and may be classified under three major "
59
"categories of functionality:"
60
msgstr ""
61
62
#: serverguide/C/windows-networking.xml:35(para)
63
msgid ""
64
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
65
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
66
"folders, volumes, and the sharing of printers throughout the network."
67
msgstr ""
68
69
#: serverguide/C/windows-networking.xml:41(para)
70
msgid ""
71
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
72
"information about the computers and users of the network with such "
73
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
74
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
75
msgstr ""
76
77
#: serverguide/C/windows-networking.xml:48(para)
78
msgid ""
79
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
80
"the identity of a computer or user of the network and determining the "
81
"information the computer or user is authorized to access using such "
82
"principles and technologies as file permissions, group policies, and the "
83
"Kerberos authentication service."
84
msgstr ""
85
86
#: serverguide/C/windows-networking.xml:56(para)
87
msgid ""
88
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
89
"clients and share network resources among them. One of the principal pieces "
90
"of software your Ubuntu system includes for Windows networking is the Samba "
91
"suite of SMB server applications and tools."
92
msgstr ""
93
94
#: serverguide/C/windows-networking.xml:62(para)
95
msgid ""
96
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
97
"of the common Samba use cases, and how to install and configure the "
98
"necessary packages. Additional detailed documentation and information on "
99
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
100
"website</ulink>."
101
msgstr ""
102
103
#: serverguide/C/windows-networking.xml:70(title)
104
msgid "Samba File Server"
105
msgstr ""
106
107
#: serverguide/C/windows-networking.xml:72(para)
108
msgid ""
109
"One of the most common ways to network Ubuntu and Windows computers is to "
110
"configure Samba as a File Server. This section covers setting up a "
111
"<application>Samba</application> server to share files with Windows clients."
112
msgstr ""
113
114
#: serverguide/C/windows-networking.xml:77(para)
115
msgid ""
116
"The server will be configured to share files with any client on the network "
117
"without prompting for a password. If your environment requires stricter "
118
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
119
msgstr ""
120
121
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
122
msgid "Installation"
123
msgstr ""
124
125
#: serverguide/C/windows-networking.xml:85(para)
126
msgid ""
127
"The first step is to install the <application>samba</application> package. "
128
"From a terminal prompt enter:"
129
msgstr ""
130
131
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
132
msgid "sudo apt-get install samba"
133
msgstr ""
134
135
#: serverguide/C/windows-networking.xml:93(para)
136
msgid ""
137
"That's all there is to it; you are now ready to configure Samba to share "
138
"files."
139
msgstr ""
140
141
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
142
msgid "Configuration"
143
msgstr ""
144
145
#: serverguide/C/windows-networking.xml:101(para)
146
msgid ""
147
"The main Samba configuration file is located in "
148
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
149
"a significant amount of comments in order to document various configuration "
150
"directives."
151
msgstr ""
152
153
#: serverguide/C/windows-networking.xml:106(para)
154
msgid ""
155
"Not all the available options are included in the default configuration "
156
"file. See the <filename>smb.conf</filename><application>man</application> "
157
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
158
"Collection/\">Samba HOWTO Collection</ulink> for more details."
159
msgstr ""
160
161
#: serverguide/C/windows-networking.xml:116(para)
162
msgid ""
163
"First, edit the following key/value pairs in the "
164
"<emphasis>[global]</emphasis> section of "
165
"<filename>/etc/samba/smb.conf</filename>:"
166
msgstr ""
167
168
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
169
#, no-wrap
170
msgid ""
171
"\n"
172
" workgroup = EXAMPLE\n"
173
" ...\n"
174
" security = user\n"
175
msgstr ""
176
177
#: serverguide/C/windows-networking.xml:127(para)
178
msgid ""
179
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
180
"section, and is commented by default. Also, change "
181
"<emphasis>EXAMPLE</emphasis> to better match your environment."
182
msgstr ""
183
184
#: serverguide/C/windows-networking.xml:135(para)
185
msgid ""
186
"Create a new section at the bottom of the file, or uncomment one of the "
187
"examples, for the directory to be shared:"
188
msgstr ""
189
190
#: serverguide/C/windows-networking.xml:139(programlisting)
191
#, no-wrap
192
msgid ""
193
"\n"
194
"[share]\n"
195
" comment = Ubuntu File Server Share\n"
196
" path = /srv/samba/share\n"
197
" browsable = yes\n"
198
" guest ok = yes\n"
199
" read only = no\n"
200
" create mask = 0755\n"
201
msgstr ""
202
203
#: serverguide/C/windows-networking.xml:151(para)
204
msgid ""
205
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
206
"fit your needs."
207
msgstr ""
208
209
#: serverguide/C/windows-networking.xml:156(para)
210
msgid "<emphasis>path:</emphasis> the path to the directory to share."
211
msgstr ""
212
213
#: serverguide/C/windows-networking.xml:159(para)
214
msgid ""
215
"This example uses <filename>/srv/samba/sharename</filename> because, "
216
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
217
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
218
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
219
"specific data should be served. Technically Samba shares can be placed "
220
"anywhere on the filesystem as long as the permissions are correct, but "
221
"adhering to standards is recommended."
222
msgstr ""
223
224
#: serverguide/C/windows-networking.xml:168(para)
225
msgid ""
226
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
227
"directory using <application>Windows Explorer</application>."
228
msgstr ""
229
230
#: serverguide/C/windows-networking.xml:174(para)
231
msgid ""
232
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
233
"without supplying a password."
234
msgstr ""
235
236
#: serverguide/C/windows-networking.xml:179(para)
237
msgid ""
238
"<emphasis>read only:</emphasis> determines if the share is read only or if "
239
"write privileges are granted. Write privileges are allowed only when the "
240
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
241
"is <emphasis>yes</emphasis>, then access to the share is read only."
242
msgstr ""
243
244
#: serverguide/C/windows-networking.xml:184(para)
245
msgid ""
246
"<emphasis>create mask:</emphasis> determines the permissions new files will "
247
"have when created."
248
msgstr ""
249
250
#: serverguide/C/windows-networking.xml:193(para)
251
msgid ""
252
"Now that <application>Samba</application> is configured, the directory needs "
253
"to be created and the permissions changed. From a terminal enter:"
254
msgstr ""
255
256
#: serverguide/C/windows-networking.xml:199(command)
257
msgid "sudo mkdir -p /srv/samba/share"
258
msgstr ""
259
260
#: serverguide/C/windows-networking.xml:200(command)
261
msgid "sudo chown nobody.nogroup /srv/samba/share/"
262
msgstr ""
263
264
#: serverguide/C/windows-networking.xml:204(para)
265
msgid ""
266
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
267
"directory tree if it doesn't exist. Change the share name to fit your "
268
"environment."
269
msgstr ""
270
271
#: serverguide/C/windows-networking.xml:213(para)
272
msgid ""
273
"Finally, restart the <application>samba</application> services to enable the "
274
"new configuration:"
275
msgstr ""
276
277
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
278
msgid "sudo /etc/init.d/samba restart"
279
msgstr ""
280
281
#: serverguide/C/windows-networking.xml:225(para)
282
msgid ""
283
"Once again, the above configuration gives all access to any client on the "
284
"local network. For a more secure configuration see <xref linkend=\"samba-"
285
"fileprint-security\"/>."
286
msgstr ""
287
288
#: serverguide/C/windows-networking.xml:231(para)
289
msgid ""
290
"From a Windows client you should now be able to browse to the Ubuntu file "
291
"server and see the shared directory. To check that everything is working try "
292
"creating a directory from Windows."
293
msgstr ""
294
295
#: serverguide/C/windows-networking.xml:236(para)
296
msgid ""
297
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
298
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
299
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
300
"share actually exists and the permissions are correct."
301
msgstr ""
302
303
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
304
msgid "Resources"
305
msgstr ""
306
307
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
308
msgid ""
309
"For in depth Samba configurations see the <ulink "
310
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
311
"Collection</ulink>"
312
msgstr ""
313
314
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
315
msgid ""
316
"The guide is also available in <ulink "
317
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
318
"format</ulink>."
319
msgstr ""
320
321
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
322
msgid ""
323
"O'Reilly's <ulink "
324
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
325
"another good reference."
326
msgstr ""
327
328
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
329
msgid ""
330
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
331
"</ulink> page."
332
msgstr ""
333
334
#: serverguide/C/windows-networking.xml:274(title)
335
msgid "Samba Print Server"
336
msgstr ""
337
338
#: serverguide/C/windows-networking.xml:276(para)
339
msgid ""
340
"Another common use of Samba is to configure it to share printers installed, "
341
"either locally or over the network, on an Ubuntu server. Similar to <xref "
342
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
343
"any client on the local network to use the installed printers without "
344
"prompting for a username and password."
345
msgstr ""
346
347
#: serverguide/C/windows-networking.xml:282(para)
348
msgid ""
349
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
350
"security\"/>."
351
msgstr ""
352
353
#: serverguide/C/windows-networking.xml:289(para)
354
msgid ""
355
"Before installing and configuring Samba it is best to already have a working "
356
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
357
"for details."
358
msgstr ""
359
360
#: serverguide/C/windows-networking.xml:294(para)
361
msgid ""
362
"To install the <application>samba</application> package, from a terminal "
363
"enter:"
364
msgstr ""
365
366
#: serverguide/C/windows-networking.xml:305(para)
367
msgid ""
368
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
369
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
370
"network, and change <emphasis>security</emphasis> to <emphasis "
371
"role=\"italic\">share</emphasis>:"
372
msgstr ""
373
374
#: serverguide/C/windows-networking.xml:317(para)
375
msgid ""
376
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
377
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
378
msgstr ""
379
380
#: serverguide/C/windows-networking.xml:321(programlisting)
381
#, no-wrap
382
msgid ""
383
"\n"
384
" browsable = yes\n"
385
" guest ok = yes\n"
386
msgstr ""
387
388
#: serverguide/C/windows-networking.xml:326(para)
389
msgid "After editing <filename>smb.conf</filename> restart Samba:"
390
msgstr ""
391
392
#: serverguide/C/windows-networking.xml:334(para)
393
msgid ""
394
"The default Samba configuration will automatically share any printers "
395
"installed. Simply install the printer locally on your Windows clients."
396
msgstr ""
397
398
#: serverguide/C/windows-networking.xml:363(para)
399
msgid ""
400
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
401
"more information on configuring CUPS."
402
msgstr ""
403
404
#: serverguide/C/windows-networking.xml:377(title)
405
msgid "Securing a Samba File and Print Server"
406
msgstr ""
407
408
#: serverguide/C/windows-networking.xml:380(title)
409
msgid "Samba Security Modes"
410
msgstr ""
411
412
#: serverguide/C/windows-networking.xml:382(para)
413
msgid ""
414
"There are two security levels available to the Common Internet Filesystem "
415
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
416
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
417
"allows more flexibility, providing four ways of implementing user-level "
418
"security and one way to implement share-level:"
419
msgstr ""
420
421
#: serverguide/C/windows-networking.xml:391(para)
422
msgid ""
423
"<emphasis>security = user:</emphasis> requires clients to supply a username "
424
"and password to connect to shares. Samba user accounts are separate from "
425
"system accounts, but the <application>libpam-smbpass</application> package "
426
"will sync system users and passwords with the Samba user database."
427
msgstr ""
428
429
#: serverguide/C/windows-networking.xml:398(para)
430
msgid ""
431
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
432
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
433
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
434
"linkend=\"samba-dc\"/> for further information."
435
msgstr ""
436
437
#: serverguide/C/windows-networking.xml:405(para)
438
msgid ""
439
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
440
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
441
"integration\"/> for details."
442
msgstr ""
443
444
#: serverguide/C/windows-networking.xml:411(para)
445
msgid ""
446
"<emphasis>security = server:</emphasis> this mode is left over from before "
447
"Samba could become a member server, and due to some security issues should "
448
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
449
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
450
"of the Samba guide for more details."
451
msgstr ""
452
453
#: serverguide/C/windows-networking.xml:419(para)
454
msgid ""
455
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
456
"without supplying a username and password."
457
msgstr ""
458
459
#: serverguide/C/windows-networking.xml:426(para)
460
msgid ""
461
"The security mode you choose will depend on your environment and what you "
462
"need the Samba server to accomplish."
463
msgstr ""
464
465
#: serverguide/C/windows-networking.xml:432(title)
466
msgid "Security = User"
467
msgstr ""
468
469
#: serverguide/C/windows-networking.xml:434(para)
470
msgid ""
471
"This section will reconfigure the Samba file and print server, from <xref "
472
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
473
"require authentication."
474
msgstr ""
475
476
#: serverguide/C/windows-networking.xml:439(para)
477
msgid ""
478
"First, install the <application>libpam-smbpass</application> package which "
479
"will sync the system users to the Samba user database:"
480
msgstr ""
481
482
#: serverguide/C/windows-networking.xml:445(command)
483
msgid "sudo apt-get install libpam-smbpass"
484
msgstr ""
485
486
#: serverguide/C/windows-networking.xml:449(para)
487
msgid ""
488
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
489
"<application>libpam-smbpass</application> is already installed."
490
msgstr ""
491
492
#: serverguide/C/windows-networking.xml:455(para)
493
msgid ""
494
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
495
"<emphasis>[share]</emphasis> section change:"
496
msgstr ""
497
498
#: serverguide/C/windows-networking.xml:459(programlisting)
499
#, no-wrap
500
msgid ""
501
"\n"
502
" guest ok = no\n"
503
msgstr ""
504
505
#: serverguide/C/windows-networking.xml:463(para)
506
msgid "Finally, restart Samba for the new settings to take effect:"
507
msgstr ""
508
509
#: serverguide/C/windows-networking.xml:471(para)
510
msgid ""
511
"Now when connecting to the shared directories or printers you should be "
512
"prompted for a username and password."
513
msgstr ""
514
515
#: serverguide/C/windows-networking.xml:476(para)
516
msgid ""
517
"If you choose to map a network drive to the share you can check the "
518
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
519
"enter the username and password once, at least until the password changes."
520
msgstr ""
521
522
#: serverguide/C/windows-networking.xml:484(title)
523
msgid "Share Security"
524
msgstr ""
525
526
#: serverguide/C/windows-networking.xml:486(para)
527
msgid ""
528
"There are several options available to increase the security for each "
529
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
530
"this section will cover some common options."
531
msgstr ""
532
533
#: serverguide/C/windows-networking.xml:492(title)
534
msgid "Groups"
535
msgstr ""
536
537
#: serverguide/C/windows-networking.xml:494(para)
538
msgid ""
539
"Groups define a collection of computers or users which have a common level "
540
"of access to particular network resources and offer a level of granularity "
541
"in controlling access to such resources. For example, if a group <emphasis "
542
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
543
"role=\"italic\">freda</emphasis>, <emphasis "
544
"role=\"italic\">danika</emphasis>, and <emphasis "
545
"role=\"italic\">rob</emphasis> and a second group <emphasis "
546
"role=\"italic\">support</emphasis> is defined and consists of users "
547
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
548
"role=\"italic\">jeremy</emphasis>, and <emphasis "
549
"role=\"italic\">vincent</emphasis> then certain network resources configured "
550
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
551
"subsequently enable access by freda, danika, and rob, but not jeremy or "
552
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
553
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
554
"role=\"italic\">support</emphasis> groups, she will be able to access "
555
"resources configured for access by both groups, whereas all other users will "
556
"have only access to resources explicitly allowing the group they are part of."
557
msgstr ""
558
559
#: serverguide/C/windows-networking.xml:508(para)
560
msgid ""
561
"By default Samba looks for the local system groups defined in "
562
"<filename>/etc/group</filename> to determine which users belong to which "
563
"groups. For more information on adding and removing users from groups see "
564
"<xref linkend=\"adding-deleting-users\"/>."
565
msgstr ""
566
567
#: serverguide/C/windows-networking.xml:514(para)
568
msgid ""
569
"When defining groups in the Samba configuration file, "
570
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
571
"preface the group name with an \"@\" symbol. For example, if you wished to "
572
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
573
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
574
"do so by entering the group name as <emphasis "
575
"role=\"bold\">@sysadmin</emphasis>."
576
msgstr ""
577
578
#: serverguide/C/windows-networking.xml:523(title)
579
msgid "File Permissions"
580
msgstr ""
581
582
#: serverguide/C/windows-networking.xml:525(para)
583
msgid ""
584
"File Permissions define the explicit rights a computer or user has to a "
585
"particular directory, file, or set of files. Such permissions may be defined "
586
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
587
"the explicit permissions of a defined file share."
588
msgstr ""
589
590
#: serverguide/C/windows-networking.xml:531(para)
591
msgid ""
592
"For example, if you have defined a Samba share called "
593
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
594
"only</emphasis> permissions to the group of users known as <emphasis "
595
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
596
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
597
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
598
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
599
"under the <emphasis>[share]</emphasis> entry:"
600
msgstr ""
601
602
#: serverguide/C/windows-networking.xml:540(programlisting)
603
#, no-wrap
604
msgid ""
605
"\n"
606
" read list = @qa\n"
607
" write list = @sysadmin, vincent\n"
608
msgstr ""
609
610
#: serverguide/C/windows-networking.xml:545(para)
611
msgid ""
612
"Another possible Samba permission is to declare "
613
"<emphasis>administrative</emphasis> permissions to a particular shared "
614
"resource. Users having administrative permissions may read, write, or modify "
615
"any information contained in the resource the user has been given explicit "
616
"administrative permissions to."
617
msgstr ""
618
619
#: serverguide/C/windows-networking.xml:551(para)
620
msgid ""
621
"For example, if you wanted to give the user <emphasis "
622
"role=\"italic\">melissa</emphasis> administrative permissions to the "
623
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
624
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
625
"under the <emphasis>[share]</emphasis> entry:"
626
msgstr ""
627
628
#: serverguide/C/windows-networking.xml:558(programlisting)
629
#, no-wrap
630
msgid ""
631
"\n"
632
" admin users = melissa\n"
633
msgstr ""
634
635
#: serverguide/C/windows-networking.xml:562(para)
636
msgid ""
637
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
638
"the changes to take effect:"
639
msgstr ""
640
641
#: serverguide/C/windows-networking.xml:571(para)
642
msgid ""
643
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
644
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
645
"<emphasis role=\"italic\">security = share</emphasis>"
646
msgstr ""
647
648
#: serverguide/C/windows-networking.xml:577(para)
649
msgid ""
650
"Now that Samba has been configured to limit which groups have access to the "
651
"shared directory, the filesystem permissions need to be updated."
652
msgstr ""
653
654
#: serverguide/C/windows-networking.xml:582(para)
655
msgid ""
656
"Traditional Linux file permissions do not map well to Windows NT Access "
657
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
658
"providing more fine grained control. For example, to enable ACLs on "
659
"<filename>/srv</filename> an EXT3 filesystem, edit "
660
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
661
msgstr ""
662
663
#: serverguide/C/windows-networking.xml:589(programlisting)
664
#, no-wrap
665
msgid ""
666
"\n"
667
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
668
"0 1\n"
669
msgstr ""
670
671
#: serverguide/C/windows-networking.xml:593(para)
672
msgid "Then remount the partition:"
673
msgstr ""
674
675
#: serverguide/C/windows-networking.xml:598(command)
676
msgid "sudo mount -v -o remount /srv"
677
msgstr ""
678
679
#: serverguide/C/windows-networking.xml:602(para)
680
msgid ""
681
"The above example assumes <filename>/srv</filename> on a separate partition. "
682
"If <filename>/srv</filename>, or wherever you have configured your share "
683
"path, is part of the <filename>/</filename> partition a reboot may be "
684
"required."
685
msgstr ""
686
687
#: serverguide/C/windows-networking.xml:609(para)
688
msgid ""
689
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
690
"group will be given read, write, and execute permissions to "
691
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
692
"will be given read and execute permissions, and the files will be owned by "
693
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
694
msgstr ""
695
696
#: serverguide/C/windows-networking.xml:617(command)
697
msgid "sudo chown -R melissa /srv/samba/share/"
698
msgstr ""
699
700
#: serverguide/C/windows-networking.xml:618(command)
701
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
702
msgstr ""
703
704
#: serverguide/C/windows-networking.xml:619(command)
705
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
706
msgstr ""
707
708
#: serverguide/C/windows-networking.xml:623(para)
709
msgid ""
710
"The <application>setfacl</application> command above gives "
711
"<emphasis>execute</emphasis> permissions to all files in the "
712
"<filename>/srv/samba/share</filename> directory, which you may or may not "
713
"want."
714
msgstr ""
715
716
#: serverguide/C/windows-networking.xml:629(para)
717
msgid ""
718
"Now from a Windows client you should notice the new file permissions are "
719
"implemented. See the <application>acl</application> and "
720
"<application>setfacl</application> man pages for more information on POSIX "
721
"ACLs."
722
msgstr ""
723
724
#: serverguide/C/windows-networking.xml:637(title)
725
msgid "Samba AppArmor Profile"
726
msgstr ""
727
728
#: serverguide/C/windows-networking.xml:639(para)
729
msgid ""
730
"Ubuntu comes with the <application>AppArmor</application> security module, "
731
"which provides mandatory access controls. The default AppArmor profile for "
732
"Samba will need to be adapted to your configuration. For more details on "
733
"using AppArmor see <xref linkend=\"apparmor\"/>."
734
msgstr ""
735
736
#: serverguide/C/windows-networking.xml:645(para)
737
msgid ""
738
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
739
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
740
"of the <application>apparmor-profiles</application> packages. To install the "
741
"package, from a terminal prompt enter:"
742
msgstr ""
743
744
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
745
msgid "sudo apt-get install apparmor-profiles"
746
msgstr ""
747
748
#: serverguide/C/windows-networking.xml:656(para)
749
msgid "This package contains profiles for several other binaries."
750
msgstr ""
751
752
#: serverguide/C/windows-networking.xml:661(para)
753
msgid ""
754
"By default the profiles for <application>smbd</application> and "
755
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
756
"allowing Samba to work without modifying the profile, and only logging "
757
"errors. To place the <application>smbd</application> profile into "
758
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
759
"profile will need to be modified to reflect any directories that are shared."
760
msgstr ""
761
762
#: serverguide/C/windows-networking.xml:668(para)
763
msgid ""
764
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
765
"for <emphasis>[share]</emphasis> from the file server example:"
766
msgstr ""
767
768
#: serverguide/C/windows-networking.xml:673(programlisting)
769
#, no-wrap
770
msgid ""
771
"\n"
772
" /srv/samba/share/ r,\n"
773
" /srv/samba/share/** rwkix,\n"
774
msgstr ""
775
776
#: serverguide/C/windows-networking.xml:678(para)
777
msgid ""
778
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
779
msgstr ""
780
781
#: serverguide/C/windows-networking.xml:683(command)
782
msgid "sudo aa-enforce /usr/sbin/smbd"
783
msgstr ""
784
785
#: serverguide/C/windows-networking.xml:684(command)
786
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
787
msgstr ""
788
789
#: serverguide/C/windows-networking.xml:687(para)
790
msgid ""
791
"You should now be able to read, write, and execute files in the shared "
792
"directory as normal, and the <application>smbd</application> binary will "
793
"have access to only the configured files and directories. Be sure to add "
794
"entries for each directory you configure Samba to share. Also, any errors "
795
"will be logged to <filename>/var/log/syslog</filename>."
796
msgstr ""
797
798
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
799
msgid ""
800
"O'Reilly's <ulink "
801
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
802
"also a good reference."
803
msgstr ""
804
805
#: serverguide/C/windows-networking.xml:718(para)
806
msgid ""
807
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
808
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
809
"security."
810
msgstr ""
811
812
#: serverguide/C/windows-networking.xml:724(para)
813
msgid ""
814
"For more information on Samba and ACLs see the <ulink "
815
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
816
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
817
msgstr ""
818
819
#: serverguide/C/windows-networking.xml:740(title)
820
msgid "Samba as a Domain Controller"
821
msgstr ""
822
823
#: serverguide/C/windows-networking.xml:742(para)
824
msgid ""
825
"Although it cannot act as an Active Directory Primary Domain Controller "
826
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
827
"domain controller. A major advantage of this configuration is the ability to "
828
"centralize user and machine credentials. Samba can also use multiple "
829
"backends to store the user information."
830
msgstr ""
831
832
#: serverguide/C/windows-networking.xml:749(title)
833
msgid "Primary Domain Controller"
834
msgstr ""
835
836
#: serverguide/C/windows-networking.xml:751(para)
837
msgid ""
838
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
839
"using the default smbpasswd backend."
840
msgstr ""
841
842
#: serverguide/C/windows-networking.xml:758(para)
843
msgid ""
844
"First, install Samba, and <application>libpam-smbpass</application> to sync "
845
"the user accounts, by entering the following in a terminal prompt:"
846
msgstr ""
847
848
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
849
msgid "sudo apt-get install samba libpam-smbpass"
850
msgstr ""
851
852
#: serverguide/C/windows-networking.xml:770(para)
853
msgid ""
854
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
855
"The <emphasis>security</emphasis> mode should be set to <emphasis "
856
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
857
"should relate to your organization:"
858
msgstr ""
859
860
#: serverguide/C/windows-networking.xml:785(para)
861
msgid ""
862
"In the commented <quote>Domains</quote> section add or uncomment the "
863
"following:"
864
msgstr ""
865
866
#: serverguide/C/windows-networking.xml:789(programlisting)
867
#, no-wrap
868
msgid ""
869
"\n"
870
" domain logons = yes\n"
871
" logon path = \\\\%N\\%U\\profile\n"
872
" logon drive = H:\n"
873
" logon home = \\\\%N\\%U\n"
874
" logon script = logon.cmd\n"
875
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
876
"/var/lib/samba -s /bin/false %u\n"
877
msgstr ""
878
879
#: serverguide/C/windows-networking.xml:800(para)
880
msgid ""
881
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
882
"Samba to act as a domain controller."
883
msgstr ""
884
885
#: serverguide/C/windows-networking.xml:805(para)
886
msgid ""
887
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
888
"their home directory. It is also possible to configure a "
889
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
890
"directory."
891
msgstr ""
892
893
#: serverguide/C/windows-networking.xml:811(para)
894
msgid ""
895
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
896
msgstr ""
897
898
#: serverguide/C/windows-networking.xml:816(para)
899
msgid ""
900
"<emphasis>logon home:</emphasis> specifies the home directory location."
901
msgstr ""
902
903
#: serverguide/C/windows-networking.xml:821(para)
904
msgid ""
905
"<emphasis>logon script:</emphasis> determines the script to be run locally "
906
"once a user has logged in. The script needs to be placed in the "
907
"<emphasis>[netlogon]</emphasis> share."
908
msgstr ""
909
910
#: serverguide/C/windows-networking.xml:827(para)
911
msgid ""
912
"<emphasis>add machine script:</emphasis> a script that will automatically "
913
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
914
"workstation to join the domain."
915
msgstr ""
916
917
#: serverguide/C/windows-networking.xml:831(para)
918
msgid ""
919
"In this example the <emphasis>machines</emphasis> group will need to be "
920
"created using the <application>addgroup</application> utility see <xref "
921
"linkend=\"adding-deleting-users\"/> for details."
922
msgstr ""
923
924
#: serverguide/C/windows-networking.xml:839(para)
925
msgid ""
926
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
927
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
928
"commented."
929
msgstr ""
930
931
#: serverguide/C/windows-networking.xml:848(para)
932
msgid ""
933
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
934
"role=\"italic\">logon home</emphasis> to be mapped:"
935
msgstr ""
936
937
#: serverguide/C/windows-networking.xml:853(programlisting)
938
#, no-wrap
939
msgid ""
940
"\n"
941
"[homes]\n"
942
" comment = Home Directories\n"
943
" browseable = no\n"
944
" read only = no\n"
945
" create mask = 0700\n"
946
" directory mask = 0700\n"
947
" valid users = %S\n"
948
msgstr ""
949
950
#: serverguide/C/windows-networking.xml:866(para)
951
msgid ""
952
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
953
"share needs to be configured. To enable the share, uncomment:"
954
msgstr ""
955
956
#: serverguide/C/windows-networking.xml:871(programlisting)
957
#, no-wrap
958
msgid ""
959
"\n"
960
"[netlogon]\n"
961
" comment = Network Logon Service\n"
962
" path = /srv/samba/netlogon\n"
963
" guest ok = yes\n"
964
" read only = yes\n"
965
" share modes = no\n"
966
msgstr ""
967
968
#: serverguide/C/windows-networking.xml:881(para)
969
msgid ""
970
"The original <emphasis>netlogon</emphasis> share path is "
971
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
972
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
973
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
974
"location for site-specific data provided by the system."
975
msgstr ""
976
977
#: serverguide/C/windows-networking.xml:892(para)
978
msgid ""
979
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
980
"and an empty (for now) <filename>logon.cmd</filename> script file:"
981
msgstr ""
982
983
#: serverguide/C/windows-networking.xml:898(command)
984
msgid "sudo mkdir -p /srv/samba/netlogon"
985
msgstr ""
986
987
#: serverguide/C/windows-networking.xml:899(command)
988
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
989
msgstr ""
990
991
#: serverguide/C/windows-networking.xml:902(para)
992
msgid ""
993
"You can enter any normal Windows logon script commands in "
994
"<filename>logon.cmd</filename> to customize the client's environment."
995
msgstr ""
996
997
#: serverguide/C/windows-networking.xml:910(para)
998
msgid ""
999
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1000
"workstation to the domain, a system group needs to be mapped to the Windows "
1001
"<emphasis>Domain Admins</emphasis> group. Using the "
1002
"<application>net</application> utility, from a terminal enter:"
1003
msgstr ""
1004
1005
#: serverguide/C/windows-networking.xml:917(command)
1006
msgid ""
1007
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1008
"type=d"
1009
msgstr ""
1010
1011
#: serverguide/C/windows-networking.xml:921(para)
1012
msgid ""
1013
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1014
"prefer. Also, the user used to join the domain needs to be a member of the "
1015
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1016
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1017
"allows <application>sudo</application> use."
1018
msgstr ""
1019
1020
#: serverguide/C/windows-networking.xml:932(para)
1021
msgid "Finally, restart Samba to enable the new domain controller:"
1022
msgstr ""
1023
1024
#: serverguide/C/windows-networking.xml:943(para)
1025
msgid ""
1026
"You should now be able to join Windows clients to the Domain in the same "
1027
"manner as joining them to an NT4 domain running on a Windows server."
1028
msgstr ""
1029
1030
#: serverguide/C/windows-networking.xml:953(title)
1031
msgid "Backup Domain Controller"
1032
msgstr ""
1033
1034
#: serverguide/C/windows-networking.xml:955(para)
1035
msgid ""
1036
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1037
"Backup Domain Controller (BDC) as well. This will allow clients to "
1038
"authenticate in case the PDC becomes unavailable."
1039
msgstr ""
1040
1041
#: serverguide/C/windows-networking.xml:960(para)
1042
msgid ""
1043
"When configuring Samba as a BDC you need a way to sync account information "
1044
"with the PDC. There are multiple ways of accomplishing this "
1045
"<application>scp</application>, <application>rsync</application>, or by "
1046
"using <application>LDAP</application> as the <emphasis>passdb "
1047
"backend</emphasis>."
1048
msgstr ""
1049
1050
#: serverguide/C/windows-networking.xml:966(para)
1051
msgid ""
1052
"Using LDAP is the most robust way to sync account information, because both "
1053
"domain controllers can use the same information in real time. However, "
1054
"setting up a LDAP server may be overly complicated for a small number of "
1055
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1056
msgstr ""
1057
1058
#: serverguide/C/windows-networking.xml:975(para)
1059
msgid ""
1060
"First, install <application>samba</application> and <application>libpam-"
1061
"smbpass</application>. From a terminal enter:"
1062
msgstr ""
1063
1064
#: serverguide/C/windows-networking.xml:986(para)
1065
msgid ""
1066
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1067
"following in the <emphasis>[global]</emphasis>:"
1068
msgstr ""
1069
1070
#: serverguide/C/windows-networking.xml:999(para)
1071
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1072
msgstr ""
1073
1074
#: serverguide/C/windows-networking.xml:1003(programlisting)
1075
#, no-wrap
1076
msgid ""
1077
"\n"
1078
" domain logons = yes\n"
1079
" domain master = no\n"
1080
msgstr ""
1081
1082
#: serverguide/C/windows-networking.xml:1011(para)
1083
msgid ""
1084
"Make sure a user has rights to read the files in "
1085
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1086
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1087
"files, enter:"
1088
msgstr ""
1089
1090
#: serverguide/C/windows-networking.xml:1017(command)
1091
msgid "sudo chgrp -R admin /var/lib/samba"
1092
msgstr ""
1093
1094
#: serverguide/C/windows-networking.xml:1023(para)
1095
msgid ""
1096
"Next, sync the user accounts, using <application>scp</application> to copy "
1097
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1098
msgstr ""
1099
1100
#: serverguide/C/windows-networking.xml:1029(command)
1101
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1102
msgstr ""
1103
1104
#: serverguide/C/windows-networking.xml:1033(para)
1105
msgid ""
1106
"Replace <emphasis>username</emphasis> with a valid username and "
1107
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1108
msgstr ""
1109
1110
#: serverguide/C/windows-networking.xml:1042(para)
1111
msgid "Finally, restart <application>samba</application>:"
1112
msgstr ""
1113
1114
#: serverguide/C/windows-networking.xml:1053(para)
1115
msgid ""
1116
"You can test that your Backup Domain controller is working by stopping the "
1117
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1118
"the domain."
1119
msgstr ""
1120
1121
#: serverguide/C/windows-networking.xml:1058(para)
1122
msgid ""
1123
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1124
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1125
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1126
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1127
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1128
msgstr ""
1129
1130
#: serverguide/C/windows-networking.xml:1088(para)
1131
msgid ""
1132
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1133
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1134
"up a Primary Domain Controller."
1135
msgstr ""
1136
1137
#: serverguide/C/windows-networking.xml:1094(para)
1138
msgid ""
1139
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1140
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1141
"explains setting up a Backup Domain Controller."
1142
msgstr ""
1143
1144
#: serverguide/C/windows-networking.xml:1109(title)
1145
msgid "Samba Active Directory Integration"
1146
msgstr ""
1147
1148
#: serverguide/C/windows-networking.xml:1112(title)
1149
msgid "Accessing a Samba Share"
1150
msgstr ""
1151
1152
#: serverguide/C/windows-networking.xml:1114(para)
1153
msgid ""
1154
"Another, use for Samba is to integrate into an existing Windows network. "
1155
"Once part of an Active Directory domain, Samba can provide file and print "
1156
"services to AD users."
1157
msgstr ""
1158
1159
#: serverguide/C/windows-networking.xml:1119(para)
1160
msgid ""
1161
"The simplest way to join an AD domain is to use <application>Likewise-"
1162
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1163
"open\"/>."
1164
msgstr ""
1165
1166
#: serverguide/C/windows-networking.xml:1124(para)
1167
msgid ""
1168
"Once part of the domain, enter the following command in the terminal prompt:"
1169
msgstr ""
1170
1171
#: serverguide/C/windows-networking.xml:1129(command)
1172
msgid "sudo apt-get install samba smbfs smbclient"
1173
msgstr ""
1174
1175
#: serverguide/C/windows-networking.xml:1132(para)
1176
msgid ""
1177
"Since the <application>likewise-open</application> and "
1178
"<application>samba</application> packages use separate "
1179
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1180
"<filename role=\"directory\">/var/lib/samba</filename>:"
1181
msgstr ""
1182
1183
#: serverguide/C/windows-networking.xml:1138(command)
1184
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1185
msgstr ""
1186
1187
#: serverguide/C/windows-networking.xml:1139(command)
1188
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1189
msgstr ""
1190
1191
#: serverguide/C/windows-networking.xml:1142(para)
1192
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1193
msgstr ""
1194
1195
#: serverguide/C/windows-networking.xml:1146(programlisting)
1196
#, no-wrap
1197
msgid ""
1198
"\n"
1199
" workgroup = EXAMPLE\n"
1200
" ...\n"
1201
" security = ads\n"
1202
" realm = EXAMPLE.COM\n"
1203
" ...\n"
1204
" idmap backend = lwopen\n"
1205
" idmap uid = 50-9999999999\n"
1206
" idmap gid = 50-9999999999\n"
1207
msgstr ""
1208
1209
#: serverguide/C/windows-networking.xml:1157(para)
1210
msgid ""
1211
"Restart <application>samba</application> for the new settings to take effect:"
1212
msgstr ""
1213
1214
#: serverguide/C/windows-networking.xml:1165(para)
1215
msgid ""
1216
"You should now be able to access any <application>Samba</application> shares "
1217
"from a Windows client. However, be sure to give the appropriate AD users or "
1218
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1219
"security\"/> for more details."
1220
msgstr ""
1221
1222
#: serverguide/C/windows-networking.xml:1173(title)
1223
msgid "Accessing a Windows Share"
1224
msgstr ""
1225
1226
#: serverguide/C/windows-networking.xml:1175(para)
1227
msgid ""
1228
"Now that the Samba server is part of the Active Directory domain you can "
1229
"access any Windows server shares:"
1230
msgstr ""
1231
1232
#: serverguide/C/windows-networking.xml:1182(para)
1233
msgid ""
1234
"To mount a Windows file share enter the following in a terminal prompt:"
1235
msgstr ""
1236
1237
#: serverguide/C/windows-networking.xml:1186(command)
1238
msgid "mount.cifs //fs01.example.com/share mount_point"
1239
msgstr ""
1240
1241
#: serverguide/C/windows-networking.xml:1189(para)
1242
msgid ""
1243
"It is also possible to access shares on computers not part of an AD domain, "
1244
"but a username and password will need to be provided."
1245
msgstr ""
1246
1247
#: serverguide/C/windows-networking.xml:1197(para)
1248
msgid ""
1249
"To mount the share during boot place an entry in "
1250
"<filename>/etc/fstab</filename>, for example:"
1251
msgstr ""
1252
1253
#: serverguide/C/windows-networking.xml:1201(programlisting)
1254
#, no-wrap
1255
msgid ""
1256
"\n"
1257
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1258
"0 0\n"
1259
msgstr ""
1260
1261
#: serverguide/C/windows-networking.xml:1208(para)
1262
msgid ""
1263
"Another way to copy files from a Windows server is to use the "
1264
"<application>smbclient</application> utility. To list the files in a Windows "
1265
"share:"
1266
msgstr ""
1267
1268
#: serverguide/C/windows-networking.xml:1214(command)
1269
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1270
msgstr ""
1271
1272
#: serverguide/C/windows-networking.xml:1220(para)
1273
msgid "To copy a file from the share, enter:"
1274
msgstr ""
1275
1276
#: serverguide/C/windows-networking.xml:1225(command)
1277
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1278
msgstr ""
1279
1280
#: serverguide/C/windows-networking.xml:1228(para)
1281
msgid ""
1282
"This will copy the <filename>file.txt</filename> into the current directory."
1283
msgstr ""
1284
1285
#: serverguide/C/windows-networking.xml:1235(para)
1286
msgid "And to copy a file to the share:"
1287
msgstr ""
1288
1289
#: serverguide/C/windows-networking.xml:1240(command)
1290
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1291
msgstr ""
1292
1293
#: serverguide/C/windows-networking.xml:1243(para)
1294
msgid ""
1295
"This will copy the <filename>/etc/hosts</filename> to "
1296
"<filename>//fs01.example.com/share/hosts</filename>."
1297
msgstr ""
1298
1299
#: serverguide/C/windows-networking.xml:1250(para)
1300
msgid ""
1301
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1302
"<application>smbclient</application> command all at once. This is useful for "
1303
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1304
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1305
"and directory commands, simply execute:"
1306
msgstr ""
1307
1308
#: serverguide/C/windows-networking.xml:1257(command)
1309
msgid "smbclient //fs01.example.com/share -k"
1310
msgstr ""
1311
1312
#: serverguide/C/windows-networking.xml:1264(para)
1313
msgid ""
1314
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1315
"<emphasis>//192.168.0.5/share</emphasis>, "
1316
"<emphasis>username=steve,password=secret</emphasis>, and "
1317
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1318
"file name, and an actual username and password with rights to the share."
1319
msgstr ""
1320
1321
#: serverguide/C/windows-networking.xml:1275(para)
1322
msgid ""
1323
"For more <application>smbclient</application> options see the man page: "
1324
"<command>man smbclient</command>, also available <ulink "
1325
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1326
"line</ulink>."
1327
msgstr ""
1328
1329
#: serverguide/C/windows-networking.xml:1280(para)
1330
msgid ""
1331
"The <application>mount.cifs</application><ulink "
1332
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1333
"an page</ulink> is also useful for more detailed information."
1334
msgstr ""
1335
1336
#: serverguide/C/windows-networking.xml:1293(title)
1337
msgid "Likewise Open"
1338
msgstr ""
1339
1340
#: serverguide/C/windows-networking.xml:1295(para)
1341
msgid ""
1342
"<application>Likewise Open</application> simplifies the necessary "
1343
"configuration needed to authenticate a Linux machine to an Active Directory "
1344
"domain. Based on <application>winbind</application>, the "
1345
"<application>likewise-open</application> package takes the pain out of "
1346
"integrating Ubuntu authentication into an existing Windows network."
1347
msgstr ""
1348
1349
#: serverguide/C/windows-networking.xml:1304(para)
1350
msgid ""
1351
"There are two ways to use Likewise Open, <application>likewise-"
1352
"open</application> the command line utility and <application>likewise-open-"
1353
"gui</application>. This section focuses on the command line utility."
1354
msgstr ""
1355
1356
#: serverguide/C/windows-networking.xml:1309(para)
1357
msgid ""
1358
"To install the <application>likewise-open</application> package, open a "
1359
"terminal prompt and enter:"
1360
msgstr ""
1361
1362
#: serverguide/C/windows-networking.xml:1314(command)
1363
msgid "sudo apt-get install likewise-open"
1364
msgstr ""
1365
1366
#: serverguide/C/windows-networking.xml:1319(title)
1367
msgid "Joining a Domain"
1368
msgstr ""
1369
1370
#: serverguide/C/windows-networking.xml:1321(para)
1371
msgid ""
1372
"The main executable file of the <application>likewise-open</application> "
1373
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1374
"join your computer to the domain. Before you join a domain you will need to "
1375
"make sure you have:"
1376
msgstr ""
1377
1378
#: serverguide/C/windows-networking.xml:1329(para)
1379
msgid ""
1380
"Access to an Active Directory user with appropriate rights to join the "
1381
"domain."
1382
msgstr ""
1383
1384
#: serverguide/C/windows-networking.xml:1334(para)
1385
msgid ""
1386
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1387
"you want to join. If your AD domain does not match a valid domain such as "
1388
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1389
"the form of <emphasis>domainname.local</emphasis>."
1390
msgstr ""
1391
1392
#: serverguide/C/windows-networking.xml:1341(para)
1393
msgid ""
1394
"DNS for the domain setup properly. In a production AD environment this "
1395
"should be the case. Proper Microsoft DNS is needed so that client "
1396
"workstations can determine the Active Directory domain is available."
1397
msgstr ""
1398
1399
#: serverguide/C/windows-networking.xml:1345(para)
1400
msgid ""
1401
"If you don't have a Windows DNS server on your network, see <xref "
1402
"linkend=\"likewise-open-ms-dns\"/> for details."
1403
msgstr ""
1404
1405
#: serverguide/C/windows-networking.xml:1352(para)
1406
msgid "To join a domain, from a terminal prompt enter:"
1407
msgstr ""
1408
1409
#: serverguide/C/windows-networking.xml:1357(command)
1410
msgid "sudo domainjoin-cli join example.com Administrator"
1411
msgstr ""
1412
1413
#: serverguide/C/windows-networking.xml:1361(para)
1414
msgid ""
1415
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1416
"<emphasis>Administrator</emphasis> with the appropriate user name."
1417
msgstr ""
1418
1419
#: serverguide/C/windows-networking.xml:1367(para)
1420
msgid ""
1421
"You will then be prompted for the user's password. If all goes well a "
1422
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1423
msgstr ""
1424
1425
#: serverguide/C/windows-networking.xml:1373(para)
1426
msgid ""
1427
"After joining the domain, it is necessary to reboot before attempting to "
1428
"authenticate against the domain."
1429
msgstr ""
1430
1431
#: serverguide/C/windows-networking.xml:1379(para)
1432
msgid ""
1433
"After successfully joining an Ubuntu machine to an Active Directory domain "
1434
"you can authenticate using any valid AD user. To login you will need to "
1435
"enter the user name as 'domain\\username'. For example to ssh to a server "
1436
"joined to the domain enter:"
1437
msgstr ""
1438
1439
#: serverguide/C/windows-networking.xml:1386(command)
1440
msgid "ssh 'example\\steve'@hostname"
1441
msgstr ""
1442
1443
#: serverguide/C/windows-networking.xml:1390(para)
1444
msgid ""
1445
"If configuring a Desktop the user name will need to be prefixed with "
1446
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1447
msgstr ""
1448
1449
#: serverguide/C/windows-networking.xml:1396(para)
1450
msgid ""
1451
"To make likewise-open use a default domain, you can add the following "
1452
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1453
msgstr ""
1454
1455
#: serverguide/C/windows-networking.xml:1400(programlisting)
1456
#, no-wrap
1457
msgid ""
1458
"\n"
1459
"winbind use default domain = yes\n"
1460
msgstr ""
1461
1462
#: serverguide/C/windows-networking.xml:1404(para)
1463
msgid "Then restart the <application>likewise-open</application> daemons:"
1464
msgstr ""
1465
1466
#: serverguide/C/windows-networking.xml:1409(command)
1467
msgid "sudo /etc/init.d/likewise-open restart"
1468
msgstr ""
1469
1470
#: serverguide/C/windows-networking.xml:1413(para)
1471
msgid ""
1472
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1473
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1474
"using only their username."
1475
msgstr ""
1476
1477
#: serverguide/C/windows-networking.xml:1419(para)
1478
msgid ""
1479
"The <application>domainjoin-cli</application> utility can also be used to "
1480
"leave the domain. From a terminal:"
1481
msgstr ""
1482
1483
#: serverguide/C/windows-networking.xml:1424(command)
1484
msgid "sudo domainjoin-cli leave"
1485
msgstr ""
1486
1487
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1488
msgid "Other Utilities"
1489
msgstr ""
1490
1491
#: serverguide/C/windows-networking.xml:1431(para)
1492
msgid ""
1493
"The <application>likewise-open</application> package comes with a few other "
1494
"utilities that may be useful for gathering information about the Active "
1495
"Directory environment. These utilities are used to join the machine to the "
1496
"domain, and are the same as those available in the <application>samba-"
1497
"common</application> and <application>winbind</application> packages:"
1498
msgstr ""
1499
1500
#: serverguide/C/windows-networking.xml:1440(para)
1501
msgid ""
1502
"<application>lwinet</application>: Returns information about the network and "
1503
"the domain."
1504
msgstr ""
1505
1506
#: serverguide/C/windows-networking.xml:1445(para)
1507
msgid ""
1508
"<application>lwimsg</application>: Allows interaction with the "
1509
"<application>likewise-winbindd</application> daemon."
1510
msgstr ""
1511
1512
#: serverguide/C/windows-networking.xml:1450(para)
1513
msgid ""
1514
"<application>lwiinfo</application>: Displays information about various parts "
1515
"of the Domain."
1516
msgstr ""
1517
1518
#: serverguide/C/windows-networking.xml:1456(para)
1519
msgid "Please refer to each utility's man page specific for details."
1520
msgstr ""
1521
1522
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1523
msgid "Troubleshooting"
1524
msgstr ""
1525
1526
#: serverguide/C/windows-networking.xml:1466(para)
1527
msgid ""
1528
"If the client has trouble joining the domain, double check that the "
1529
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1530
"example:"
1531
msgstr ""
1532
1533
#: serverguide/C/windows-networking.xml:1471(programlisting)
1534
#, no-wrap
1535
msgid ""
1536
"\n"
1537
"nameserver 192.168.0.1\n"
1538
msgstr ""
1539
1540
#: serverguide/C/windows-networking.xml:1476(para)
1541
msgid ""
1542
"For more information when joining a domain, use the <emphasis>--loglevel "
1543
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1544
"<application>domainjoin-cli</application> utility:"
1545
msgstr ""
1546
1547
#: serverguide/C/windows-networking.xml:1482(command)
1548
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1549
msgstr ""
1550
1551
#: serverguide/C/windows-networking.xml:1486(para)
1552
msgid ""
1553
"If an Active Directory user has trouble logging in, check the "
1554
"<filename>/var/log/auth.log</filename> for details."
1555
msgstr ""
1556
1557
#: serverguide/C/windows-networking.xml:1491(para)
1558
msgid ""
1559
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1560
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1561
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1562
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1563
"<emphasis>hosts</emphasis> option. For example:"
1564
msgstr ""
1565
1566
#: serverguide/C/windows-networking.xml:1497(programlisting)
1567
#, no-wrap
1568
msgid ""
1569
"\n"
1570
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1571
msgstr ""
1572
1573
#: serverguide/C/windows-networking.xml:1501(para)
1574
msgid "Change the above to:"
1575
msgstr ""
1576
1577
#: serverguide/C/windows-networking.xml:1505(programlisting)
1578
#, no-wrap
1579
msgid ""
1580
"\n"
1581
"hosts: files dns [NOTFOUND=return]\n"
1582
msgstr ""
1583
1584
#: serverguide/C/windows-networking.xml:1509(para)
1585
msgid "Then restart networking by entering:"
1586
msgstr ""
1587
1588
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1589
msgid "sudo /etc/init.d/networking restart"
1590
msgstr ""
1591
1592
#: serverguide/C/windows-networking.xml:1517(para)
1593
msgid "You should now be able to join the Active Directory domain."
1594
msgstr ""
1595
1596
#: serverguide/C/windows-networking.xml:1525(title)
1597
msgid "Microsoft DNS"
1598
msgstr ""
1599
1600
#: serverguide/C/windows-networking.xml:1527(para)
1601
msgid ""
1602
"The following are instructions for installing DNS on an Active Directory "
1603
"domain controller running Windows Server 2003, but the instructions should "
1604
"be similar for other versions:"
1605
msgstr ""
1606
1607
#: serverguide/C/windows-networking.xml:1536(para)
1608
msgid ""
1609
"Click "
1610
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1611
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1612
"This will open the <application>Server Role Mangement</application> utility."
1613
msgstr ""
1614
1615
#: serverguide/C/windows-networking.xml:1544(para)
1616
msgid "Click <guilabel>Add or remove a role</guilabel>"
1617
msgstr ""
1618
1619
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1620
msgid "Click Next"
1621
msgstr ""
1622
1623
#: serverguide/C/windows-networking.xml:1546(para)
1624
msgid "Select \"DNS Server\""
1625
msgstr ""
1626
1627
#: serverguide/C/windows-networking.xml:1548(para)
1628
msgid "Click Next again to proceed"
1629
msgstr ""
1630
1631
#: serverguide/C/windows-networking.xml:1549(para)
1632
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1633
msgstr ""
1634
1635
#: serverguide/C/windows-networking.xml:1551(para)
1636
msgid ""
1637
"Make sure \"This server maintains the zone\" is selected and click Next."
1638
msgstr ""
1639
1640
#: serverguide/C/windows-networking.xml:1552(para)
1641
msgid "Enter your domain name and click Next"
1642
msgstr ""
1643
1644
#: serverguide/C/windows-networking.xml:1553(para)
1645
msgid "Click Next to \"Allow only secure dynamic updates\""
1646
msgstr ""
1647
1648
#: serverguide/C/windows-networking.xml:1555(para)
1649
msgid ""
1650
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1651
"should not forward queries\" and click Next."
1652
msgstr ""
1653
1654
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1655
msgid "Click Finish"
1656
msgstr ""
1657
1658
#: serverguide/C/windows-networking.xml:1562(para)
1659
msgid ""
1660
"DNS is now installed and can be further configured using the "
1661
"<application>Microsoft Management Console</application> DNS snap-in."
1662
msgstr ""
1663
1664
#: serverguide/C/windows-networking.xml:1570(para)
1665
msgid "Click Start"
1666
msgstr ""
1667
1668
#: serverguide/C/windows-networking.xml:1571(para)
1669
msgid "Control Panel"
1670
msgstr ""
1671
1672
#: serverguide/C/windows-networking.xml:1572(para)
1673
msgid "Network Connections"
1674
msgstr ""
1675
1676
#: serverguide/C/windows-networking.xml:1573(para)
1677
msgid "Right Click \"Local Area Connection\""
1678
msgstr ""
1679
1680
#: serverguide/C/windows-networking.xml:1574(para)
1681
msgid "Click Properties"
1682
msgstr ""
1683
1684
#: serverguide/C/windows-networking.xml:1575(para)
1685
msgid "Double click \"Internet Protocol (TCP/IP)\""
1686
msgstr ""
1687
1688
#: serverguide/C/windows-networking.xml:1576(para)
1689
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1690
msgstr ""
1691
1692
#: serverguide/C/windows-networking.xml:1577(para)
1693
msgid "Click Ok"
1694
msgstr ""
1695
1696
#: serverguide/C/windows-networking.xml:1578(para)
1697
msgid "Click Ok again to save the settings"
1698
msgstr ""
1699
1700
#: serverguide/C/windows-networking.xml:1567(para)
1701
msgid ""
1702
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1703
msgstr ""
1704
1705
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1706
msgid "References"
1707
msgstr ""
1708
1709
#: serverguide/C/windows-networking.xml:1587(para)
1710
msgid ""
1711
"Please refer to the <ulink "
1712
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1713
"further information."
1714
msgstr ""
1715
1716
#: serverguide/C/windows-networking.xml:1591(para)
1717
msgid ""
1718
"For more <application>domainjoin-cli</application> options see the man page: "
1719
"<command>man domainjoin-cli</command>."
1720
msgstr ""
1721
1722
#: serverguide/C/windows-networking.xml:1595(para)
1723
msgid ""
1724
"Also, see the <ulink "
1725
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1726
"LikewiseOpen</ulink> page."
1727
msgstr ""
1728
1729
#: serverguide/C/web-servers.xml:13(title)
1730
msgid "Web Servers"
1731
msgstr ""
1732
1733
#: serverguide/C/web-servers.xml:14(para)
1734
msgid ""
1735
"A Web server is a software responsible for accepting HTTP requests from "
1736
"clients, which are known as Web browsers, and serving them HTTP responses "
1737
"along with optional data contents, which usually are Web pages such as HTML "
1738
"documents and linked objects (images, etc.)."
1739
msgstr ""
1740
1741
#: serverguide/C/web-servers.xml:19(title)
1742
msgid "HTTPD - Apache2 Web Server"
1743
msgstr ""
1744
1745
#: serverguide/C/web-servers.xml:20(para)
1746
msgid ""
1747
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1748
"are used to serve Web Pages requested by client computers. Clients typically "
1749
"request and view Web Pages using Web Browser applications such as "
1750
"<application>Firefox</application>, <application>Opera</application>, or "
1751
"<application>Mozilla</application>."
1752
msgstr ""
1753
1754
#: serverguide/C/web-servers.xml:24(para)
1755
msgid ""
1756
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1757
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1758
"resource. For example, to view the home page of the <ulink "
1759
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1760
"the FQDN. To request specific information about <ulink "
1761
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1762
"enter the FQDN followed by a path."
1763
msgstr ""
1764
1765
#: serverguide/C/web-servers.xml:29(para)
1766
msgid ""
1767
"The most common protocol used to transfer Web pages is the Hyper Text "
1768
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1769
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1770
"protocol for uploading and downloading files, are also supported."
1771
msgstr ""
1772
1773
#: serverguide/C/web-servers.xml:33(para)
1774
msgid ""
1775
"Apache Web Servers are often used in combination with the "
1776
"<application>MySQL</application> database engine, the HyperText Preprocessor "
1777
"(<application>PHP</application>) scripting language, and other popular "
1778
"scripting languages such as <application>Python</application> and "
1779
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
1780
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
1781
"for the development and deployment of Web-based applications."
1782
msgstr ""
1783
1784
#: serverguide/C/web-servers.xml:42(para)
1785
msgid ""
1786
"The <application>Apache2</application> web server is available in Ubuntu "
1787
"Linux. To install Apache2:"
1788
msgstr ""
1789
1790
#: serverguide/C/web-servers.xml:48(para)
1791
msgid "At a terminal prompt enter the following command:"
1792
msgstr ""
1793
1794
#: serverguide/C/web-servers.xml:53(command)
1795
msgid "sudo apt-get install apache2"
1796
msgstr ""
1797
1798
#: serverguide/C/web-servers.xml:63(para)
1799
msgid ""
1800
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
1801
"text configuration files. These <emphasis>directives</emphasis> are "
1802
"separated between the following files and directories:"
1803
msgstr ""
1804
1805
#: serverguide/C/web-servers.xml:71(para)
1806
msgid ""
1807
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
1808
"Contains settings that are <emphasis>global</emphasis> to Apache2."
1809
msgstr ""
1810
1811
#: serverguide/C/web-servers.xml:77(para)
1812
msgid ""
1813
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
1814
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
1815
"serve content may add files, or symlinks, to this directory."
1816
msgstr ""
1817
1818
#: serverguide/C/web-servers.xml:83(para)
1819
msgid ""
1820
"<emphasis>envvars:</emphasis> file where Apache2 "
1821
"<emphasis>environment</emphasis> variables are set."
1822
msgstr ""
1823
1824
#: serverguide/C/web-servers.xml:88(para)
1825
msgid ""
1826
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
1827
"file, named after the <application>httpd</application> daemon. The file can "
1828
"be used for <emphasis>user specific</emphasis> configuration options that "
1829
"globally effect Apache2."
1830
msgstr ""
1831
1832
#: serverguide/C/web-servers.xml:95(para)
1833
msgid ""
1834
"<emphasis>mods-available:</emphasis> this directory contains configuration "
1835
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
1836
"modules will have specific configuration files, however."
1837
msgstr ""
1838
1839
#: serverguide/C/web-servers.xml:101(para)
1840
msgid ""
1841
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
1842
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
1843
"configuration file is symlinked it will be enabled the next time "
1844
"<application>apache2</application> is restarted."
1845
msgstr ""
1846
1847
#: serverguide/C/web-servers.xml:108(para)
1848
msgid ""
1849
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
1850
"TCP ports Apache2 is listening on."
1851
msgstr ""
1852
1853
#: serverguide/C/web-servers.xml:113(para)
1854
msgid ""
1855
"<emphasis>sites-available:</emphasis> this directory has configuration files "
1856
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
1857
"to be configured for multiple sites that have separate configurations."
1858
msgstr ""
1859
1860
#: serverguide/C/web-servers.xml:119(para)
1861
msgid ""
1862
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
1863
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
1864
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
1865
"a configuration file in sites-available is symlinked, the site configured by "
1866
"it will be active once Apache2 is restarted."
1867
msgstr ""
1868
1869
#: serverguide/C/web-servers.xml:127(para)
1870
msgid ""
1871
"In addition, other configuration files may be added using the "
1872
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
1873
"many configuration files. Any directive may be placed in any of these "
1874
"configuration files. Changes to the main configuration files are only "
1875
"recognized by Apache2 when it is started or restarted."
1876
msgstr ""
1877
1878
#: serverguide/C/web-servers.xml:136(para)
1879
msgid ""
1880
"The server also reads a file containing mime document types; the filename is "
1881
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
1882
"<filename>/etc/mime.types</filename> by default."
1883
msgstr ""
1884
1885
#: serverguide/C/web-servers.xml:141(title)
1886
msgid "Basic Settings"
1887
msgstr ""
1888
1889
#: serverguide/C/web-servers.xml:142(para)
1890
msgid ""
1891
"This section explains Apache2 server essential configuration parameters. "
1892
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
1893
"Documentation</ulink> for more details."
1894
msgstr ""
1895
1896
#: serverguide/C/web-servers.xml:150(para)
1897
msgid ""
1898
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
1899
"it is configured with a single default virtual host (using the "
1900
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
1901
"if you have a single site, or used as a template for additional virtual "
1902
"hosts if you have multiple sites. If left alone, the default virtual host "
1903
"will serve as your default site, or the site users will see if the URL they "
1904
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
1905
"your custom sites. To modify the default virtual host, edit the file "
1906
"<filename>/etc/apache2/sites-available/default</filename>."
1907
msgstr ""
1908
1909
#: serverguide/C/web-servers.xml:163(para)
1910
msgid ""
1911
"The directives set for a virtual host only apply to that particular virtual "
1912
"host. If a directive is set server-wide and not defined within the virtual "
1913
"host settings, the default setting is used. For example, you can define a "
1914
"Webmaster email address and not define individual email addresses for each "
1915
"virtual host."
1916
msgstr ""
1917
1918
#: serverguide/C/web-servers.xml:171(para)
1919
msgid ""
1920
"If you wish to configure a new virtual host or site, copy that file into the "
1921
"same directory with a name you choose. For example:"
1922
msgstr ""
1923
1924
#: serverguide/C/web-servers.xml:177(command)
1925
msgid ""
1926
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
1927
"available/mynewsite"
1928
msgstr ""
1929
1930
#: serverguide/C/web-servers.xml:180(para)
1931
msgid ""
1932
"Edit the new file to configure the new site using some of the directives "
1933
"described below."
1934
msgstr ""
1935
1936
#: serverguide/C/web-servers.xml:187(para)
1937
msgid ""
1938
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
1939
"to be advertised for the server's administrator. The default value is "
1940
"webmaster@localhost. This should be changed to an email address that is "
1941
"delivered to you (if you are the server's administrator). If your website "
1942
"has a problem, Apache2 will display an error message containing this email "
1943
"address to report the problem to. Find this directive in your site's "
1944
"configuration file in /etc/apache2/sites-available."
1945
msgstr ""
1946
1947
#: serverguide/C/web-servers.xml:198(para)
1948
msgid ""
1949
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
1950
"the IP address, Apache2 should listen on. If the IP address is not "
1951
"specified, Apache2 will listen on all IP addresses assigned to the machine "
1952
"it runs on. The default value for the Listen directive is 80. Change this to "
1953
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
1954
"that it will not be available to the Internet, to (for example) 81 to change "
1955
"the port that it listens on, or leave it as is for normal operation. This "
1956
"directive can be found and changed in its own file, "
1957
"<filename>/etc/apache2/ports.conf</filename>"
1958
msgstr ""
1959
1960
#: serverguide/C/web-servers.xml:211(para)
1961
msgid ""
1962
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
1963
"FQDN your site should answer to. The default virtual host has no ServerName "
1964
"directive specified, so it will respond to all requests that do not match a "
1965
"ServerName directive in another virtual host. If you have just acquired the "
1966
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
1967
"value of the ServerName directive in your virtual host configuration file "
1968
"should be ubunturocks.com. Add this directive to the new virtual host file "
1969
"you created earlier (<filename>/etc/apache2/sites-"
1970
"available/mynewsite</filename>)."
1971
msgstr ""
1972
1973
#: serverguide/C/web-servers.xml:223(para)
1974
msgid ""
1975
"You may also want your site to respond to www.ubunturocks.com, since many "
1976
"users will assume the www prefix is appropriate. Use the "
1977
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
1978
"wildcards in the ServerAlias directive."
1979
msgstr ""
1980
1981
#: serverguide/C/web-servers.xml:230(para)
1982
msgid ""
1983
"For example, the following configuration will cause your site to respond to "
1984
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
1985
msgstr ""
1986
1987
#: serverguide/C/web-servers.xml:236(programlisting)
1988
#, no-wrap
1989
msgid ""
1990
"\n"
1991
"ServerAlias *.ubunturocks.com\n"
1992
msgstr ""
1993
1994
#: serverguide/C/web-servers.xml:242(para)
1995
msgid ""
1996
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
1997
"should look for the files that make up the site. The default value is "
1998
"/var/www. No site is configured there, but if you uncomment the "
1999
"<emphasis>RedirectMatch</emphasis> directive in "
2000
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2001
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2002
"this value in your site's virtual host file, and remember to create that "
2003
"directory if necessary!"
2004
msgstr ""
2005
2006
#: serverguide/C/web-servers.xml:254(para)
2007
msgid ""
2008
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2009
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2010
"enabled point to \"available\" sites."
2011
msgstr ""
2012
2013
#: serverguide/C/web-servers.xml:260(para)
2014
msgid ""
2015
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2016
"<application>a2ensite</application> utility and restart Apache2:"
2017
msgstr ""
2018
2019
#: serverguide/C/web-servers.xml:266(command)
2020
msgid "sudo a2ensite mynewsite"
2021
msgstr ""
2022
2023
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2024
msgid "sudo /etc/init.d/apache2 restart"
2025
msgstr ""
2026
2027
#: serverguide/C/web-servers.xml:271(para)
2028
msgid ""
2029
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2030
"name for the VirtualHost. One method is to name the file after the "
2031
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2032
msgstr ""
2033
2034
#: serverguide/C/web-servers.xml:278(para)
2035
msgid ""
2036
"Similarly, use the <application>a2dissite</application> utility to disable "
2037
"sites. This is can be useful when troubleshooting configuration problems "
2038
"with multiple VirtualHosts:"
2039
msgstr ""
2040
2041
#: serverguide/C/web-servers.xml:284(command)
2042
msgid "sudo a2dissite mynewsite"
2043
msgstr ""
2044
2045
#: serverguide/C/web-servers.xml:290(title)
2046
msgid "Default Settings"
2047
msgstr ""
2048
2049
#: serverguide/C/web-servers.xml:292(para)
2050
msgid ""
2051
"This section explains configuration of the Apache2 server default settings. "
2052
"For example, if you add a virtual host, the settings you configure for the "
2053
"virtual host take precedence for that virtual host. For a directive not "
2054
"defined within the virtual host settings, the default value is used."
2055
msgstr ""
2056
2057
#: serverguide/C/web-servers.xml:304(para)
2058
msgid ""
2059
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2060
"server when a user requests an index of a directory by specifying a forward "
2061
"slash (/) at the end of the directory name."
2062
msgstr ""
2063
2064
#: serverguide/C/web-servers.xml:311(para)
2065
msgid ""
2066
"For example, when a user requests the page "
2067
"http://www.example.com/this_directory/, he or she will get either the "
2068
"DirectoryIndex page if it exists, a server-generated directory list if it "
2069
"does not and the Indexes option is specified, or a Permission Denied page if "
2070
"neither is true. The server will try to find one of the files listed in the "
2071
"DirectoryIndex directive and will return the first one it finds. If it does "
2072
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2073
"set for that directory, the server will generate and return a list, in HTML "
2074
"format, of the subdirectories and files in the directory. The default value, "
2075
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2076
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2077
"Apache2 finds a file in a requested directory matching any of these names, "
2078
"the first will be displayed."
2079
msgstr ""
2080
2081
#: serverguide/C/web-servers.xml:332(para)
2082
msgid ""
2083
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2084
"file for Apache2 to use for specific error events. For example, if a user "
2085
"requests a resource that does not exist, a 404 error will occur, and per "
2086
"Apache2's default configuration, the file "
2087
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2088
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2089
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2090
"redirects requests to the /error directory to "
2091
"<filename>/usr/share/apache2/error/</filename>."
2092
msgstr ""
2093
2094
#: serverguide/C/web-servers.xml:344(para)
2095
msgid ""
2096
"To see a list of the default ErrorDocument directives, use this command:"
2097
msgstr ""
2098
2099
#: serverguide/C/web-servers.xml:350(command)
2100
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2101
msgstr ""
2102
2103
#: serverguide/C/web-servers.xml:355(para)
2104
msgid ""
2105
"By default, the server writes the transfer log to the file "
2106
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2107
"per-site basis in your virtual host configuration files with the "
2108
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2109
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2110
"specify the file to which errors are logged, via the "
2111
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2112
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2113
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2114
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2115
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2116
"/etc/apache2/apache2.conf</filename> for the default value)."
2117
msgstr ""
2118
2119
#: serverguide/C/web-servers.xml:370(para)
2120
msgid ""
2121
"Some options are specified on a per-directory basis rather than per-server. "
2122
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2123
"is enclosed in XML-like tags, like so:"
2124
msgstr ""
2125
2126
#: serverguide/C/web-servers.xml:376(programlisting)
2127
#, no-wrap
2128
msgid ""
2129
"\n"
2130
"<Directory /var/www/mynewsite>\n"
2131
"...\n"
2132
"</Directory>\n"
2133
msgstr ""
2134
2135
#: serverguide/C/web-servers.xml:382(para)
2136
msgid ""
2137
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2138
"one or more of the following values (among others), separated by spaces:"
2139
msgstr ""
2140
2141
#: serverguide/C/web-servers.xml:394(para)
2142
msgid ""
2143
"Most files should not be executed as CGI scripts. This would be very "
2144
"dangerous. CGI scripts should kept in a directory separate from and outside "
2145
"your DocumentRoot, and only this directory should have the ExecCGI option "
2146
"set. This is the default, and the default location for CGI scripts is "
2147
"<filename>/usr/lib/cgi-bin</filename>."
2148
msgstr ""
2149
2150
#: serverguide/C/web-servers.xml:389(para)
2151
msgid ""
2152
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2153
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2154
msgstr ""
2155
2156
#: serverguide/C/web-servers.xml:405(para)
2157
msgid ""
2158
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2159
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2160
"other files. This is not a common option. See <ulink "
2161
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2162
"HOWTO</ulink> for more information."
2163
msgstr ""
2164
2165
#: serverguide/C/web-servers.xml:414(para)
2166
msgid ""
2167
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2168
"includes, but disable the <emphasis>#exec</emphasis> and "
2169
"<emphasis>#include</emphasis> commands in CGI scripts."
2170
msgstr ""
2171
2172
#: serverguide/C/web-servers.xml:426(para)
2173
msgid ""
2174
"For security reasons, this should usually not be set, and certainly should "
2175
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2176
"per-directory basis only if you are certain you want users to see the entire "
2177
"contents of the directory."
2178
msgstr ""
2179
2180
#: serverguide/C/web-servers.xml:421(para)
2181
msgid ""
2182
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2183
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2184
"index.html) exists in the requested directory. <placeholder-1/>"
2185
msgstr ""
2186
2187
#: serverguide/C/web-servers.xml:436(para)
2188
msgid ""
2189
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2190
"multiviews; this option is disabled by default for security reasons. See the "
2191
"<ulink "
2192
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2193
"Apache2 documentation on this option</ulink>."
2194
msgstr ""
2195
2196
#: serverguide/C/web-servers.xml:444(para)
2197
msgid ""
2198
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2199
"symbolic links if the target file or directory has the same owner as the "
2200
"link."
2201
msgstr ""
2202
2203
#: serverguide/C/web-servers.xml:456(title)
2204
msgid "httpd Settings"
2205
msgstr ""
2206
2207
#: serverguide/C/web-servers.xml:458(para)
2208
msgid ""
2209
"This section explains some basic <application>httpd</application> daemon "
2210
"configuration settings."
2211
msgstr ""
2212
2213
#: serverguide/C/web-servers.xml:462(para)
2214
msgid ""
2215
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2216
"the path to the lockfile used when the server is compiled with either "
2217
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2218
"stored on the local disk. It should be left to the default value unless the "
2219
"logs directory is located on an NFS share. If this is the case, the default "
2220
"value should be changed to a location on the local disk and to a directory "
2221
"that is readable only by root."
2222
msgstr ""
2223
2224
#: serverguide/C/web-servers.xml:471(para)
2225
msgid ""
2226
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2227
"file in which the server records its process ID (pid). This file should only "
2228
"be readable by root. In most cases, it should be left to the default value."
2229
msgstr ""
2230
2231
#: serverguide/C/web-servers.xml:477(para)
2232
msgid ""
2233
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2234
"used by the server to answer requests. This setting determines the server's "
2235
"access. Any files inaccessible to this user will also be inaccessible to "
2236
"your website's visitors. The default value for User is www-data."
2237
msgstr ""
2238
2239
#: serverguide/C/web-servers.xml:484(para)
2240
msgid ""
2241
"Unless you know exactly what you are doing, do not set the User directive to "
2242
"root. Using root as the User will create large security holes for your Web "
2243
"server."
2244
msgstr ""
2245
2246
#: serverguide/C/web-servers.xml:490(para)
2247
msgid ""
2248
"The Group directive is similar to the User directive. Group sets the group "
2249
"under which the server will answer requests. The default group is also www-"
2250
"data."
2251
msgstr ""
2252
2253
#: serverguide/C/web-servers.xml:496(title)
2254
msgid "Apache2 Modules"
2255
msgstr ""
2256
2257
#: serverguide/C/web-servers.xml:498(para)
2258
msgid ""
2259
"Apache2 is a modular server. This implies that only the most basic "
2260
"functionality is included in the core server. Extended features are "
2261
"available through modules which can be loaded into Apache2. By default, a "
2262
"base set of modules is included in the server at compile-time. If the server "
2263
"is compiled to use dynamically loaded modules, then modules can be compiled "
2264
"separately, and added at any time using the LoadModule directive. Otherwise, "
2265
"Apache2 must be recompiled to add or remove modules."
2266
msgstr ""
2267
2268
#: serverguide/C/web-servers.xml:510(para)
2269
msgid ""
2270
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2271
"Configuration directives may be conditionally included on the presence of a "
2272
"particular module by enclosing them in an "
2273
"<emphasis><IfModule></emphasis> block."
2274
msgstr ""
2275
2276
#: serverguide/C/web-servers.xml:517(para)
2277
msgid ""
2278
"You can install additional Apache2 modules and use them with your Web "
2279
"server. For example, run the following command from a terminal prompt to "
2280
"install the <emphasis>MySQL Authentication</emphasis> module:"
2281
msgstr ""
2282
2283
#: serverguide/C/web-servers.xml:524(command)
2284
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2285
msgstr ""
2286
2287
#: serverguide/C/web-servers.xml:527(para)
2288
msgid ""
2289
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2290
"additional modules."
2291
msgstr ""
2292
2293
#: serverguide/C/web-servers.xml:531(para)
2294
msgid ""
2295
"Use the <application>a2enmod</application> utility to enable a module:"
2296
msgstr ""
2297
2298
#: serverguide/C/web-servers.xml:537(command)
2299
msgid "sudo a2enmod auth_mysql"
2300
msgstr ""
2301
2302
#: serverguide/C/web-servers.xml:541(para)
2303
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2304
msgstr ""
2305
2306
#: serverguide/C/web-servers.xml:546(command)
2307
msgid "sudo a2dismod auth_mysql"
2308
msgstr ""
2309
2310
#: serverguide/C/web-servers.xml:553(title)
2311
msgid "HTTPS Configuration"
2312
msgstr ""
2313
2314
#: serverguide/C/web-servers.xml:555(para)
2315
msgid ""
2316
"The <application>mod_ssl</application> module adds an important feature to "
2317
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2318
"browser is communicating using SSL, the https:// prefix is used at the "
2319
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2320
"bar."
2321
msgstr ""
2322
2323
#: serverguide/C/web-servers.xml:564(para)
2324
msgid ""
2325
"The <application>mod_ssl</application> module is available in "
2326
"<application>apache2-common</application> package. Execute the following "
2327
"command from a terminal prompt to enable the "
2328
"<application>mod_ssl</application> module:"
2329
msgstr ""
2330
2331
#: serverguide/C/web-servers.xml:571(command)
2332
msgid "sudo a2enmod ssl"
2333
msgstr ""
2334
2335
#: serverguide/C/web-servers.xml:574(para)
2336
msgid ""
2337
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2338
"available/default-ssl</filename>. In order for "
2339
"<application>Apache2</application> to provide HTTPS, a "
2340
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2341
"needed. The default HTTPS configuration will use a certificate and key "
2342
"generated by the <application>ssl-cert</application> package. They are good "
2343
"for testing, but the auto-generated certificate and key should be replaced "
2344
"by a certificate specific to the site or server. For information on "
2345
"generating a key and obtaining a certificate see <xref "
2346
"linkend=\"certificates-and-security\"/>"
2347
msgstr ""
2348
2349
#: serverguide/C/web-servers.xml:584(para)
2350
msgid ""
2351
"To configure <application>Apache2</application> for HTTPS, enter the "
2352
"following:"
2353
msgstr ""
2354
2355
#: serverguide/C/web-servers.xml:589(command)
2356
msgid "sudo a2ensite default-ssl"
2357
msgstr ""
2358
2359
#: serverguide/C/web-servers.xml:593(para)
2360
msgid ""
2361
"The directories <filename>/etc/ssl/certs</filename> and "
2362
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2363
"install the certificate and key in another directory make sure to change "
2364
"<emphasis>SSLCertificateFile</emphasis> and "
2365
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2366
msgstr ""
2367
2368
#: serverguide/C/web-servers.xml:600(para)
2369
msgid ""
2370
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2371
"settings:"
2372
msgstr ""
2373
2374
#: serverguide/C/web-servers.xml:611(para)
2375
msgid ""
2376
"Depending on how you obtained your certificate you may need to enter a "
2377
"passphrase when <application>Apache2</application> starts."
2378
msgstr ""
2379
2380
#: serverguide/C/web-servers.xml:617(para)
2381
msgid ""
2382
"You can access the secure server pages by typing https://your_hostname/url/ "
2383
"in your browser address bar."
2384
msgstr ""
2385
2386
#: serverguide/C/web-servers.xml:628(para)
2387
msgid ""
2388
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2389
"Documentation</ulink> contains in depth information on Apache2 configuration "
2390
"directives. Also, see the <application>apache2-doc</application> package for "
2391
"the official Apache2 docs."
2392
msgstr ""
2393
2394
#: serverguide/C/web-servers.xml:635(para)
2395
msgid ""
2396
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2397
"Documentation</ulink> site for more SSL related information."
2398
msgstr ""
2399
2400
#: serverguide/C/web-servers.xml:641(para)
2401
msgid ""
2402
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2403
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2404
"configurations."
2405
msgstr ""
2406
2407
#: serverguide/C/web-servers.xml:647(para)
2408
msgid ""
2409
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2410
"server</emphasis> IRC channel on <ulink "
2411
"url=\"http://freenode.net/\">freenode.net</ulink>."
2412
msgstr ""
2413
2414
#: serverguide/C/web-servers.xml:653(para)
2415
msgid ""
2416
"Usually integrated with PHP and MySQL the <ulink "
2417
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2418
"Ubuntu Wiki </ulink> page is a good resource."
2419
msgstr ""
2420
2421
#: serverguide/C/web-servers.xml:664(title)
2422
msgid "PHP5 - Scripting Language"
2423
msgstr ""
2424
2425
#: serverguide/C/web-servers.xml:665(para)
2426
msgid ""
2427
"PHP is a general-purpose scripting language suited for Web development. The "
2428
"PHP script can be embedded into HTML. This section explains how to install "
2429
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2430
msgstr ""
2431
2432
#: serverguide/C/web-servers.xml:669(para)
2433
msgid ""
2434
"This section assumes you have installed and configured Apache2 Web Server "
2435
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2436
"sections in this document to install and configure Apache2 and MySQL "
2437
"respectively."
2438
msgstr ""
2439
2440
#: serverguide/C/web-servers.xml:676(para)
2441
msgid "The PHP5 is available in Ubuntu Linux."
2442
msgstr ""
2443
2444
#: serverguide/C/web-servers.xml:678(para)
2445
msgid ""
2446
"To install PHP5 you can enter the following command in the terminal prompt: "
2447
"<screen>\n"
2448
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2449
"</screen>"
2450
msgstr ""
2451
2452
#: serverguide/C/web-servers.xml:687(para)
2453
msgid ""
2454
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2455
"line you should install <application>php5-cli</application> package. To "
2456
"install <application>php5-cli</application> you can enter the following "
2457
"command in the terminal prompt: <screen>\n"
2458
"<command>sudo apt-get install php5-cli</command>\n"
2459
"</screen>"
2460
msgstr ""
2461
2462
#: serverguide/C/web-servers.xml:696(para)
2463
msgid ""
2464
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2465
"accomplish this, you should install <application>php5-cgi</application> "
2466
"package. You can run the following command in a terminal prompt to install "
2467
"<application>php5-cgi</application> package: <screen>\n"
2468
"<command>sudo apt-get install php5-cgi</command>\n"
2469
"</screen>"
2470
msgstr ""
2471
2472
#: serverguide/C/web-servers.xml:706(para)
2473
msgid ""
2474
"To use <application>MySQL</application> with PHP5 you should install "
2475
"<application>php5-mysql</application> package. To install <application>php5-"
2476
"mysql</application> you can enter the following command in the terminal "
2477
"prompt: <screen>\n"
2478
"<command>sudo apt-get install php5-mysql</command>\n"
2479
"</screen>"
2480
msgstr ""
2481
2482
#: serverguide/C/web-servers.xml:714(para)
2483
msgid ""
2484
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2485
"install <application>php5-pgsql</application> package. To install "
2486
"<application>php5-pgsql</application> you can enter the following command in "
2487
"the terminal prompt: <screen>\n"
2488
"<command>sudo apt-get install php5-pgsql</command>\n"
2489
"</screen>"
2490
msgstr ""
2491
2492
#: serverguide/C/web-servers.xml:727(para)
2493
msgid ""
2494
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2495
"you have installed <application>php5-cli</application> package, you can run "
2496
"PHP5 scripts from your command prompt."
2497
msgstr ""
2498
2499
#: serverguide/C/web-servers.xml:734(para)
2500
msgid ""
2501
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2502
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2503
"when you install the module. Please verify if the files "
2504
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2505
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2506
"not exists, you can enable the module using <command>a2enmod</command> "
2507
"command."
2508
msgstr ""
2509
2510
#: serverguide/C/web-servers.xml:745(para)
2511
msgid ""
2512
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2513
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2514
"following command at a terminal prompt to restart your web server: "
2515
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2516
msgstr ""
2517
2518
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2519
msgid "Testing"
2520
msgstr ""
2521
2522
#: serverguide/C/web-servers.xml:754(para)
2523
msgid ""
2524
"To verify your installation, you can run following PHP5 phpinfo script:"
2525
msgstr ""
2526
2527
#: serverguide/C/web-servers.xml:757(programlisting)
2528
#, no-wrap
2529
msgid ""
2530
"\n"
2531
"<?php\n"
2532
" phpinfo();\n"
2533
"?>\n"
2534
msgstr ""
2535
2536
#: serverguide/C/web-servers.xml:762(para)
2537
msgid ""
2538
"You can save the content in a file <filename>phpinfo.php</filename> and "
2539
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2540
"server. When point your browser to "
2541
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2542
"various PHP5 configuration parameters."
2543
msgstr ""
2544
2545
#: serverguide/C/web-servers.xml:776(para)
2546
msgid ""
2547
"For more in depth information see <ulink "
2548
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2549
msgstr ""
2550
2551
#: serverguide/C/web-servers.xml:781(para)
2552
msgid ""
2553
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2554
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2555
"5</ulink> and the <ulink "
2556
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2557
msgstr ""
2558
2559
#: serverguide/C/web-servers.xml:788(para)
2560
msgid ""
2561
"Also, see the <ulink "
2562
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2563
"Ubuntu Wiki</ulink> page for more information."
2564
msgstr ""
2565
2566
#: serverguide/C/web-servers.xml:799(title)
2567
msgid "Squid - Proxy Server"
2568
msgstr ""
2569
2570
#: serverguide/C/web-servers.xml:800(para)
2571
msgid ""
2572
"Squid is a full-featured web proxy cache server application which provides "
2573
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2574
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2575
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2576
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2577
"caching. Squid also supports a wide variety of caching protocols, such as "
2578
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2579
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2580
"Protocol. (WCCP)"
2581
msgstr ""
2582
2583
#: serverguide/C/web-servers.xml:808(para)
2584
msgid ""
2585
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2586
"and caching server needs, and scales from the branch office to enterprise "
2587
"level networks while providing extensive, granular access control mechanisms "
2588
"and monitoring of critical parameters via the Simple Network Management "
2589
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2590
"Squid proxy, or caching servers, ensure your system is configured with a "
2591
"large amount of physical memory, as Squid maintains an in-memory cache for "
2592
"increased performance."
2593
msgstr ""
2594
2595
#: serverguide/C/web-servers.xml:817(para)
2596
msgid ""
2597
"At a terminal prompt, enter the following command to install the Squid "
2598
"server:"
2599
msgstr ""
2600
2601
#: serverguide/C/web-servers.xml:822(command)
2602
msgid "sudo apt-get install squid"
2603
msgstr ""
2604
2605
#: serverguide/C/web-servers.xml:828(para)
2606
msgid ""
2607
"Squid is configured by editing the directives contained within the "
2608
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2609
"examples illustrate some of the directives which may be modified to affect "
2610
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2611
"see the References section."
2612
msgstr ""
2613
2614
#: serverguide/C/web-servers.xml:834(para)
2615
msgid ""
2616
"Prior to editing the configuration file, you should make a copy of the "
2617
"original file and protect it from writing so you will have the original "
2618
"settings as a reference, and to re-use as necessary."
2619
msgstr ""
2620
2621
#: serverguide/C/web-servers.xml:837(para)
2622
msgid ""
2623
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2624
"writing with the following commands entered at a terminal prompt:"
2625
msgstr ""
2626
2627
#: serverguide/C/web-servers.xml:842(command)
2628
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2629
msgstr ""
2630
2631
#: serverguide/C/web-servers.xml:843(command)
2632
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2633
msgstr ""
2634
2635
#: serverguide/C/web-servers.xml:849(para)
2636
msgid ""
2637
"To set your Squid server to listen on TCP port 8888 instead of the default "
2638
"TCP port 3128, change the http_port directive as such:"
2639
msgstr ""
2640
2641
#: serverguide/C/web-servers.xml:853(programlisting)
2642
#, no-wrap
2643
msgid ""
2644
"\n"
2645
"http_port 8888\n"
2646
msgstr ""
2647
2648
#: serverguide/C/web-servers.xml:858(para)
2649
msgid ""
2650
"Change the visible_hostname directive in order to give the Squid server a "
2651
"specific hostname. This hostname does not necessarily need to be the "
2652
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2653
msgstr ""
2654
2655
#: serverguide/C/web-servers.xml:862(programlisting)
2656
#, no-wrap
2657
msgid ""
2658
"\n"
2659
"visible_hostname weezie\n"
2660
msgstr ""
2661
2662
#: serverguide/C/web-servers.xml:867(para)
2663
msgid ""
2664
"Using Squid's access control, you may configure use of Internet services "
2665
"proxied by Squid to be available only users with certain Internet Protocol "
2666
"(IP) addresses. For example, we will illustrate access by users of the "
2667
"192.168.42.0/24 subnetwork only:"
2668
msgstr ""
2669
2670
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2671
msgid ""
2672
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2673
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2674
msgstr ""
2675
2676
#: serverguide/C/web-servers.xml:875(programlisting)
2677
#, no-wrap
2678
msgid ""
2679
"\n"
2680
"acl fortytwo_network src 192.168.42.0/24\n"
2681
msgstr ""
2682
2683
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2684
msgid ""
2685
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2686
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2687
msgstr ""
2688
2689
#: serverguide/C/web-servers.xml:882(programlisting)
2690
#, no-wrap
2691
msgid ""
2692
"\n"
2693
"http_access allow fortytwo_network\n"
2694
msgstr ""
2695
2696
#: serverguide/C/web-servers.xml:887(para)
2697
msgid ""
2698
"Using the excellent access control features of Squid, you may configure use "
2699
"of Internet services proxied by Squid to be available only during normal "
2700
"business hours. For example, we'll illustrate access by employees of a "
2701
"business which is operating between 9:00AM and 5:00PM, Monday through "
2702
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2703
msgstr ""
2704
2705
#: serverguide/C/web-servers.xml:895(programlisting)
2706
#, no-wrap
2707
msgid ""
2708
"\n"
2709
"acl biz_network src 10.1.42.0/24\n"
2710
"acl biz_hours time M T W T F 9:00-17:00\n"
2711
msgstr ""
2712
2713
#: serverguide/C/web-servers.xml:903(programlisting)
2714
#, no-wrap
2715
msgid ""
2716
"\n"
2717
"http_access allow biz_network biz_hours\n"
2718
msgstr ""
2719
2720
#: serverguide/C/web-servers.xml:910(para)
2721
msgid ""
2722
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2723
"save the file and restart the <application>squid</application> server "
2724
"application to effect the changes using the following command entered at a "
2725
"terminal prompt:"
2726
msgstr ""
2727
2728
#: serverguide/C/web-servers.xml:917(command)
2729
msgid "sudo /etc/init.d/squid restart"
2730
msgstr ""
2731
2732
#: serverguide/C/web-servers.xml:924(ulink)
2733
msgid "Squid Website"
2734
msgstr ""
2735
2736
#: serverguide/C/web-servers.xml:926(para)
2737
msgid ""
2738
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2739
"Squid</ulink> page."
2740
msgstr ""
2741
2742
#: serverguide/C/web-servers.xml:933(title)
2743
msgid "Ruby on Rails"
2744
msgstr ""
2745
2746
#: serverguide/C/web-servers.xml:934(para)
2747
msgid ""
2748
"Ruby on Rails is an open source web framework for developing database backed "
2749
"web applications. It is optimized for sustainable productivity of the "
2750
"programmer since it lets the programmer to write code by favouring "
2751
"convention over configuration."
2752
msgstr ""
2753
2754
#: serverguide/C/web-servers.xml:941(para)
2755
msgid ""
2756
"Before installing <application>Rails</application> you should install "
2757
"<application>Apache</application> and <application>MySQL</application>. To "
2758
"install the <application>Apache</application> package, please refer to <xref "
2759
"linkend=\"httpd\"/>. For instructions on installing "
2760
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
2761
msgstr ""
2762
2763
#: serverguide/C/web-servers.xml:949(para)
2764
msgid ""
2765
"Once you have <application>Apache</application> and "
2766
"<application>MySQL</application> packages installed, you are ready to "
2767
"install <application>Ruby on Rails</application> package."
2768
msgstr ""
2769
2770
#: serverguide/C/web-servers.xml:956(para)
2771
msgid ""
2772
"To install the <application>Ruby</application> base packages and "
2773
"<application>Ruby on Rails</application>, you can enter the following "
2774
"command in the terminal prompt:"
2775
msgstr ""
2776
2777
#: serverguide/C/web-servers.xml:962(command)
2778
msgid "sudo apt-get install rails"
2779
msgstr ""
2780
2781
#: serverguide/C/web-servers.xml:968(para)
2782
msgid ""
2783
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
2784
"configuration file to setup your domains."
2785
msgstr ""
2786
2787
#: serverguide/C/web-servers.xml:972(para)
2788
msgid ""
2789
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
2790
msgstr ""
2791
2792
#: serverguide/C/web-servers.xml:976(programlisting)
2793
#, no-wrap
2794
msgid ""
2795
"\n"
2796
"DocumentRoot /path/to/rails/application/public\n"
2797
msgstr ""
2798
2799
#: serverguide/C/web-servers.xml:979(para)
2800
msgid ""
2801
"Next, change the <Directory \"/path/to/rails/application/public\"> "
2802
"directive:"
2803
msgstr ""
2804
2805
#: serverguide/C/web-servers.xml:983(programlisting)
2806
#, no-wrap
2807
msgid ""
2808
"\n"
2809
"<Directory \"/path/to/rails/application/public\">\n"
2810
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
2811
" AllowOverride All\n"
2812
" Order allow,deny\n"
2813
" allow from all\n"
2814
" AddHandler cgi-script .cgi\n"
2815
"</Directory>\n"
2816
msgstr ""
2817
2818
#: serverguide/C/web-servers.xml:993(para)
2819
msgid ""
2820
"You should also enable the <application>mod_rewrite</application> module for "
2821
"Apache. To enable <application>mod_rewrite</application> module, please "
2822
"enter the following command in a terminal prompt:"
2823
msgstr ""
2824
2825
#: serverguide/C/web-servers.xml:999(command)
2826
msgid "sudo a2enmod rewrite"
2827
msgstr ""
2828
2829
#: serverguide/C/web-servers.xml:1002(para)
2830
msgid ""
2831
"Finally you will need to change the ownership of the "
2832
"<filename>/path/to/rails/application/public</filename> and "
2833
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
2834
"used to run the <application>Apache</application> process:"
2835
msgstr ""
2836
2837
#: serverguide/C/web-servers.xml:1008(command)
2838
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
2839
msgstr ""
2840
2841
#: serverguide/C/web-servers.xml:1009(command)
2842
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
2843
msgstr ""
2844
2845
#: serverguide/C/web-servers.xml:1012(para)
2846
msgid ""
2847
"That's it! Now you have your Server ready for your <application>Ruby on "
2848
"Rails</application> applications."
2849
msgstr ""
2850
2851
#: serverguide/C/web-servers.xml:1021(para)
2852
msgid ""
2853
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
2854
"for more information."
2855
msgstr ""
2856
2857
#: serverguide/C/web-servers.xml:1026(para)
2858
msgid ""
2859
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
2860
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
2861
"resource."
2862
msgstr ""
2863
2864
#: serverguide/C/web-servers.xml:1032(para)
2865
msgid ""
2866
"Another place for more information is the <ulink "
2867
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
2868
"Wiki</ulink> page."
2869
msgstr ""
2870
2871
#: serverguide/C/web-servers.xml:1043(title)
2872
msgid "Apache Tomcat"
2873
msgstr ""
2874
2875
#: serverguide/C/web-servers.xml:1044(para)
2876
msgid ""
2877
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
2878
"JSP (Java Server Pages) web applications."
2879
msgstr ""
2880
2881
#: serverguide/C/web-servers.xml:1046(para)
2882
msgid ""
2883
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
2884
"different ways of running Tomcat. You can install them as a classic unique "
2885
"system-wide instance, that will be started at boot time and will run as the "
2886
"tomcat6 unpriviledged user. But you can also deploy private instances that "
2887
"will run with your own user rights, and that you should start and stop by "
2888
"yourself. This second way is particularly useful in a development server "
2889
"context where multiple users need to test on their own private Tomcat "
2890
"instances."
2891
msgstr ""
2892
2893
#: serverguide/C/web-servers.xml:1056(title)
2894
msgid "System-wide installation"
2895
msgstr ""
2896
2897
#: serverguide/C/web-servers.xml:1057(para)
2898
msgid ""
2899
"To install the <application>Tomcat</application> server, you can enter the "
2900
"following command in the terminal prompt:"
2901
msgstr ""
2902
2903
#: serverguide/C/web-servers.xml:1060(command)
2904
msgid "sudo apt-get install tomcat6"
2905
msgstr ""
2906
2907
#: serverguide/C/web-servers.xml:1062(para)
2908
msgid ""
2909
"This will install a Tomcat server with just a default ROOT webapp that "
2910
"displays a minimal \"It works\" page by default."
2911
msgstr ""
2912
2913
#: serverguide/C/web-servers.xml:1068(para)
2914
msgid ""
2915
"Tomcat configuration files can be found in "
2916
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
2917
"will be described here, please see <ulink "
2918
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
2919
"documentation</ulink> for more."
2920
msgstr ""
2921
2922
#: serverguide/C/web-servers.xml:1074(title)
2923
msgid "Changing default ports"
2924
msgstr ""
2925
2926
#: serverguide/C/web-servers.xml:1075(para)
2927
msgid ""
2928
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
2929
"connector on port 8009. You might want to change those default ports to "
2930
"avoid conflict with another server on the system. This is done by changing "
2931
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
2932
msgstr ""
2933
2934
#: serverguide/C/web-servers.xml:1080(programlisting)
2935
#, no-wrap
2936
msgid ""
2937
"\n"
2938
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
2939
" connectionTimeout=\"20000\" \n"
2940
" redirectPort=\"8443\" />\n"
2941
"...\n"
2942
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
2943
"/>\n"
2944
msgstr ""
2945
2946
#: serverguide/C/web-servers.xml:1089(title)
2947
msgid "Changing JVM used"
2948
msgstr ""
2949
2950
#: serverguide/C/web-servers.xml:1090(para)
2951
msgid ""
2952
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
2953
"then try some other JVMs. If you have various JVMs installed, you can set "
2954
"which should be used by setting JAVA_HOME in "
2955
"<filename>/etc/default/tomcat6</filename>:"
2956
msgstr ""
2957
2958
#: serverguide/C/web-servers.xml:1094(programlisting)
2959
#, no-wrap
2960
msgid ""
2961
"\n"
2962
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
2963
msgstr ""
2964
2965
#: serverguide/C/web-servers.xml:1099(title)
2966
msgid "Declaring users and roles"
2967
msgstr ""
2968
2969
#: serverguide/C/web-servers.xml:1100(para)
2970
msgid ""
2971
"Usernames, passwords and roles (groups) can be defined centrally in a "
2972
"Servlet container. In Tomcat 6.0 this is done in the "
2973
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
2974
msgstr ""
2975
2976
#: serverguide/C/web-servers.xml:1103(programlisting)
2977
#, no-wrap
2978
msgid ""
2979
"\n"
2980
"<role rolename=\"admin\"/>\n"
2981
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
2982
msgstr ""
2983
2984
#: serverguide/C/web-servers.xml:1111(title)
2985
msgid "Using Tomcat standard webapps"
2986
msgstr ""
2987
2988
#: serverguide/C/web-servers.xml:1112(para)
2989
msgid ""
2990
"Tomcat is shipped with webapps that you can install for documentation, "
2991
"administration or demo purposes."
2992
msgstr ""
2993
2994
#: serverguide/C/web-servers.xml:1115(title)
2995
msgid "Tomcat documentation"
2996
msgstr ""
2997
2998
#: serverguide/C/web-servers.xml:1116(para)
2999
msgid ""
3000
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3001
"documentation, packaged as a webapp that you can access by default at "
3002
"http://yourserver:8080/docs. You can install it by entering the following "
3003
"command in the terminal prompt:"
3004
msgstr ""
3005
3006
#: serverguide/C/web-servers.xml:1121(command)
3007
msgid "sudo apt-get install tomcat6-docs"
3008
msgstr ""
3009
3010
#: serverguide/C/web-servers.xml:1125(title)
3011
msgid "Tomcat administration webapps"
3012
msgstr ""
3013
3014
#: serverguide/C/web-servers.xml:1126(para)
3015
msgid ""
3016
"The <application>tomcat6-admin</application> package contains two webapps "
3017
"that can be used to administer the Tomcat server using a web interface. You "
3018
"can install them by entering the following command in the terminal prompt:"
3019
msgstr ""
3020
3021
#: serverguide/C/web-servers.xml:1131(command)
3022
msgid "sudo apt-get install tomcat6-admin"
3023
msgstr ""
3024
3025
#: serverguide/C/web-servers.xml:1133(para)
3026
msgid ""
3027
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3028
"access by default at http://yourserver:8080/manager/html. It is primarily "
3029
"used to get server status and restart webapps."
3030
msgstr ""
3031
3032
#: serverguide/C/web-servers.xml:1136(para)
3033
msgid ""
3034
"Access to the <emphasis>manager</emphasis> application is protected by "
3035
"default: you need to define a user with the role \"manager\" in "
3036
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3037
msgstr ""
3038
3039
#: serverguide/C/web-servers.xml:1140(para)
3040
msgid ""
3041
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3042
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3043
"used to create virtual hosts dynamically."
3044
msgstr ""
3045
3046
#: serverguide/C/web-servers.xml:1144(para)
3047
msgid ""
3048
"Access to the <emphasis>host-manager</emphasis> application is also "
3049
"protected by default: you need to define a user with the role \"admin\" in "
3050
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3051
msgstr ""
3052
3053
#: serverguide/C/web-servers.xml:1149(para)
3054
msgid ""
3055
"For security reasons, the tomcat6 user cannot write to the "
3056
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3057
"these admin webapps (application deployment, virtual host creation) need "
3058
"write access to that directory. If you want to use these features execute "
3059
"the following, to give users in the tomcat6 group the necessary rights:"
3060
msgstr ""
3061
3062
#: serverguide/C/web-servers.xml:1156(command)
3063
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3064
msgstr ""
3065
3066
#: serverguide/C/web-servers.xml:1157(command)
3067
msgid "sudo chmod -R g+w /etc/tomcat6"
3068
msgstr ""
3069
3070
#: serverguide/C/web-servers.xml:1162(title)
3071
msgid "Tomcat examples webapps"
3072
msgstr ""
3073
3074
#: serverguide/C/web-servers.xml:1163(para)
3075
msgid ""
3076
"The <application>tomcat6-examples</application> package contains two webapps "
3077
"that can be used to test or demonstrate Servlets and JSP features, which you "
3078
"can access them by default at http://yourserver:8080/examples. You can "
3079
"install them by entering the following command in the terminal prompt:"
3080
msgstr ""
3081
3082
#: serverguide/C/web-servers.xml:1169(command)
3083
msgid "sudo apt-get install tomcat6-examples"
3084
msgstr ""
3085
3086
#: serverguide/C/web-servers.xml:1175(title)
3087
msgid "Using private instances"
3088
msgstr ""
3089
3090
#: serverguide/C/web-servers.xml:1176(para)
3091
msgid ""
3092
"Tomcat is heavily used in development and testing scenarios where using a "
3093
"single system-wide instance doesn't meet the requirements of multiple users "
3094
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3095
"help deploy your own user-oriented instances, allowing every user on a "
3096
"system to run (without root rights) separate private instances while still "
3097
"using the system-installed libraries."
3098
msgstr ""
3099
3100
#: serverguide/C/web-servers.xml:1183(para)
3101
msgid ""
3102
"It is possible to run the system-wide instance and the private instances in "
3103
"parallel, as long as they do not use the same TCP ports."
3104
msgstr ""
3105
3106
#: serverguide/C/web-servers.xml:1187(title)
3107
msgid "Installing private instance support"
3108
msgstr ""
3109
3110
#: serverguide/C/web-servers.xml:1188(para)
3111
msgid ""
3112
"You can install everything necessary to run private instances by entering "
3113
"the following command in the terminal prompt:"
3114
msgstr ""
3115
3116
#: serverguide/C/web-servers.xml:1191(command)
3117
msgid "sudo apt-get install tomcat6-user"
3118
msgstr ""
3119
3120
#: serverguide/C/web-servers.xml:1195(title)
3121
msgid "Creating a private instance"
3122
msgstr ""
3123
3124
#: serverguide/C/web-servers.xml:1196(para)
3125
msgid ""
3126
"You can create a private instance directory by entering the following "
3127
"command in the terminal prompt:"
3128
msgstr ""
3129
3130
#: serverguide/C/web-servers.xml:1199(command)
3131
msgid "tomcat6-instance-create my-instance"
3132
msgstr ""
3133
3134
#: serverguide/C/web-servers.xml:1201(para)
3135
msgid ""
3136
"This will create a new <filename>my-instance</filename> directory with all "
3137
"the necessary subdirectories and scripts. You can for example install your "
3138
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3139
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3140
"are deployed by default."
3141
msgstr ""
3142
3143
#: serverguide/C/web-servers.xml:1209(title)
3144
msgid "Configuring your private instance"
3145
msgstr ""
3146
3147
#: serverguide/C/web-servers.xml:1210(para)
3148
msgid ""
3149
"You will find the classic Tomcat configuration files for your private "
3150
"instance in the <filename>conf/</filename> subdirectory. You should for "
3151
"example certainly edit the <filename>conf/server.xml</filename> file to "
3152
"change the default ports used by your private Tomcat instance to avoid "
3153
"conflict with other instances that might be running."
3154
msgstr ""
3155
3156
#: serverguide/C/web-servers.xml:1218(title)
3157
msgid "Starting/stopping your private instance"
3158
msgstr ""
3159
3160
#: serverguide/C/web-servers.xml:1219(para)
3161
msgid ""
3162
"You can start your private instance by entering the following command in the "
3163
"terminal prompt (supposing your instance is located in the <filename>my-"
3164
"instance</filename> directory):"
3165
msgstr ""
3166
3167
#: serverguide/C/web-servers.xml:1223(command)
3168
msgid "my-instance/bin/startup.sh"
3169
msgstr ""
3170
3171
#: serverguide/C/web-servers.xml:1225(para)
3172
msgid ""
3173
"You should check the <filename>logs/</filename> subdirectory for any error. "
3174
"If you have a <emphasis>java.net.BindException: Address already in "
3175
"use<null>:8080</emphasis> error, it means that the port you're using "
3176
"is already taken and that you should change it."
3177
msgstr ""
3178
3179
#: serverguide/C/web-servers.xml:1230(para)
3180
msgid ""
3181
"You can stop your instance by entering the following command in the terminal "
3182
"prompt (supposing your instance is located in the <filename>my-"
3183
"instance</filename> directory):"
3184
msgstr ""
3185
3186
#: serverguide/C/web-servers.xml:1234(command)
3187
msgid "my-instance/bin/shutdown.sh"
3188
msgstr ""
3189
3190
#: serverguide/C/web-servers.xml:1243(para)
3191
msgid ""
3192
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3193
"website for more information."
3194
msgstr ""
3195
3196
#: serverguide/C/web-servers.xml:1248(para)
3197
msgid ""
3198
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3199
"Definitive Guide</ulink> is a good resource for building web applications "
3200
"with Tomcat."
3201
msgstr ""
3202
3203
#: serverguide/C/web-servers.xml:1254(para)
3204
msgid ""
3205
"For additional books see the <ulink "
3206
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3207
"page."
3208
msgstr ""
3209
3210
#: serverguide/C/web-servers.xml:1259(para)
3211
msgid ""
3212
"Also, see the<ulink "
3213
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3214
"Tomcat</ulink> page."
3215
msgstr ""
3216
3217
#: serverguide/C/vpn.xml:13(title)
3218
msgid "VPN"
3219
msgstr ""
3220
3221
#: serverguide/C/vpn.xml:15(para)
3222
msgid ""
3223
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3224
"network connection between two or more networks. There are several ways to "
3225
"create a VPN using software as well as dedicated hardware appliances. This "
3226
"chapter will cover installing and configuring "
3227
"<application>OpenVPN</application> to create a VPN between two servers."
3228
msgstr ""
3229
3230
#: serverguide/C/vpn.xml:23(title)
3231
msgid "OpenVPN"
3232
msgstr ""
3233
3234
#: serverguide/C/vpn.xml:25(para)
3235
msgid ""
3236
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3237
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3238
"clients through a bridge interface on the VPN server. This guide will assume "
3239
"that one VPN node, the server in this case, has a bridge interface "
3240
"configured. For more information on setting up a bridge see <xref "
3241
"linkend=\"bridging\"/>."
3242
msgstr ""
3243
3244
#: serverguide/C/vpn.xml:35(para)
3245
msgid "To install <application>openvpn</application> in a terminal enter:"
3246
msgstr ""
3247
3248
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3249
msgid "sudo apt-get install openvpn"
3250
msgstr ""
3251
3252
#: serverguide/C/vpn.xml:45(title)
3253
msgid "Server Certificates"
3254
msgstr ""
3255
3256
#: serverguide/C/vpn.xml:47(para)
3257
msgid ""
3258
"Now that the <application>openvpn</application> package is installed, the "
3259
"certificates for the VPN server need to be created."
3260
msgstr ""
3261
3262
#: serverguide/C/vpn.xml:52(para)
3263
msgid ""
3264
"First, copy the <filename>easy-rsa</filename> directory to "
3265
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3266
"scripts will not be lost when the package is updated. You will also need to "
3267
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3268
"the current user permission to create files. From a terminal enter:"
3269
msgstr ""
3270
3271
#: serverguide/C/vpn.xml:59(command)
3272
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3273
msgstr ""
3274
3275
#: serverguide/C/vpn.xml:60(command)
3276
msgid ""
3277
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3278
"rsa/"
3279
msgstr ""
3280
3281
#: serverguide/C/vpn.xml:61(command)
3282
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3283
msgstr ""
3284
3285
#: serverguide/C/vpn.xml:64(para)
3286
msgid ""
3287
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3288
"following to your environment:"
3289
msgstr ""
3290
3291
#: serverguide/C/vpn.xml:68(programlisting)
3292
#, no-wrap
3293
msgid ""
3294
"\n"
3295
"export KEY_COUNTRY=\"US\"\n"
3296
"export KEY_PROVINCE=\"NC\"\n"
3297
"export KEY_CITY=\"Winston-Salem\"\n"
3298
"export KEY_ORG=\"Example Company\"\n"
3299
"export KEY_EMAIL=\"steve@example.com\"\n"
3300
msgstr ""
3301
3302
#: serverguide/C/vpn.xml:76(para)
3303
msgid "Enter the following to create the server certificates:"
3304
msgstr ""
3305
3306
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3307
msgid "cd /etc/openvpn/easy-rsa/"
3308
msgstr ""
3309
3310
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3311
msgid "source vars"
3312
msgstr ""
3313
3314
#: serverguide/C/vpn.xml:83(command)
3315
msgid "./clean-all"
3316
msgstr ""
3317
3318
#: serverguide/C/vpn.xml:84(command)
3319
msgid "./build-dh"
3320
msgstr ""
3321
3322
#: serverguide/C/vpn.xml:85(command)
3323
msgid "./pkitool --initca"
3324
msgstr ""
3325
3326
#: serverguide/C/vpn.xml:86(command)
3327
msgid "./pkitool --server server"
3328
msgstr ""
3329
3330
#: serverguide/C/vpn.xml:87(command)
3331
msgid "cd keys"
3332
msgstr ""
3333
3334
#: serverguide/C/vpn.xml:88(command)
3335
msgid "openvpn --genkey --secret ta.key"
3336
msgstr ""
3337
3338
#: serverguide/C/vpn.xml:89(command)
3339
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3340
msgstr ""
3341
3342
#: serverguide/C/vpn.xml:94(title)
3343
msgid "Client Certificates"
3344
msgstr ""
3345
3346
#: serverguide/C/vpn.xml:96(para)
3347
msgid ""
3348
"The VPN client will also need a certificate to authenticate itself to the "
3349
"server. To create the certificate, enter the following in a terminal:"
3350
msgstr ""
3351
3352
#: serverguide/C/vpn.xml:104(command)
3353
msgid "./pkitool hostname"
3354
msgstr ""
3355
3356
#: serverguide/C/vpn.xml:108(para)
3357
msgid ""
3358
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3359
"machine connecting to the VPN."
3360
msgstr ""
3361
3362
#: serverguide/C/vpn.xml:113(para)
3363
msgid "Copy the following files to the client:"
3364
msgstr ""
3365
3366
#: serverguide/C/vpn.xml:118(para)
3367
msgid "/etc/openvpn/ca.crt"
3368
msgstr ""
3369
3370
#: serverguide/C/vpn.xml:119(para)
3371
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3372
msgstr ""
3373
3374
#: serverguide/C/vpn.xml:120(para)
3375
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3376
msgstr ""
3377
3378
#: serverguide/C/vpn.xml:121(para)
3379
msgid "/etc/openvpn/ta.key"
3380
msgstr ""
3381
3382
#: serverguide/C/vpn.xml:125(para)
3383
msgid ""
3384
"Remember to adjust the above file names for your client machine's "
3385
"<emphasis>hostname</emphasis>."
3386
msgstr ""
3387
3388
#: serverguide/C/vpn.xml:130(para)
3389
msgid ""
3390
"It is best to use a secure method to copy the certificate and key files. The "
3391
"<application>scp</application> utility is a good choice, but copying the "
3392
"files to removable media then to the client, also works well."
3393
msgstr ""
3394
3395
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3396
msgid "Server Configuration"
3397
msgstr ""
3398
3399
#: serverguide/C/vpn.xml:143(para)
3400
msgid ""
3401
"Now configure the <application>openvpn</application> server by creating "
3402
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3403
"terminal enter:"
3404
msgstr ""
3405
3406
#: serverguide/C/vpn.xml:149(command)
3407
msgid ""
3408
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3409
"/etc/openvpn/"
3410
msgstr ""
3411
3412
#: serverguide/C/vpn.xml:150(command)
3413
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3414
msgstr ""
3415
3416
#: serverguide/C/vpn.xml:153(para)
3417
msgid ""
3418
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3419
"options to:"
3420
msgstr ""
3421
3422
#: serverguide/C/vpn.xml:157(programlisting)
3423
#, no-wrap
3424
msgid ""
3425
"\n"
3426
"local 172.18.100.101\n"
3427
"dev tap0\n"
3428
"up \"/etc/openvpn/up.sh br0\"\n"
3429
"down \"/etc/openvpn/down.sh br0\"\n"
3430
";server 10.8.0.0 255.255.255.0\n"
3431
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3432
"push \"route 172.18.100.1 255.255.255.0\"\n"
3433
"push \"dhcp-option DNS 172.18.100.20\"\n"
3434
"push \"dhcp-option DOMAIN example.com\"\n"
3435
"tls-auth ta.key 0 # This file is secret\n"
3436
"user nobody\n"
3437
"group nogroup\n"
3438
msgstr ""
3439
3440
#: serverguide/C/vpn.xml:174(para)
3441
msgid ""
3442
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3443
msgstr ""
3444
3445
#: serverguide/C/vpn.xml:179(para)
3446
msgid ""
3447
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3448
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3449
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3450
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3451
"to clients."
3452
msgstr ""
3453
3454
#: serverguide/C/vpn.xml:186(para)
3455
msgid ""
3456
"<emphasis>push</emphasis>: are directives to add networking options for "
3457
"clients."
3458
msgstr ""
3459
3460
#: serverguide/C/vpn.xml:191(para)
3461
msgid ""
3462
"<emphasis>user and group</emphasis>: configure which user and group the "
3463
"<application>openvpn</application> daemon executes as."
3464
msgstr ""
3465
3466
#: serverguide/C/vpn.xml:198(para)
3467
msgid ""
3468
"Replace all IP addresses and domain names above with those of your network."
3469
msgstr ""
3470
3471
#: serverguide/C/vpn.xml:203(para)
3472
msgid ""
3473
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3474
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3475
msgstr ""
3476
3477
#: serverguide/C/vpn.xml:207(programlisting)
3478
#, no-wrap
3479
msgid ""
3480
"\n"
3481
"#!/bin/sh\n"
3482
"\n"
3483
"BR=$1\n"
3484
"DEV=$2\n"
3485
"MTU=$3\n"
3486
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3487
"/usr/sbin/brctl addif $BR $DEV\n"
3488
msgstr ""
3489
3490
#: serverguide/C/vpn.xml:217(para)
3491
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3492
msgstr ""
3493
3494
#: serverguide/C/vpn.xml:221(programlisting)
3495
#, no-wrap
3496
msgid ""
3497
"\n"
3498
"#!/bin/sh\n"
3499
"\n"
3500
"BR=$1\n"
3501
"DEV=$2\n"
3502
"\n"
3503
"/usr/sbin/brctl delif $BR $DEV\n"
3504
"/sbin/ifconfig $DEV down\n"
3505
msgstr ""
3506
3507
#: serverguide/C/vpn.xml:231(para)
3508
msgid "Then make them executable:"
3509
msgstr ""
3510
3511
#: serverguide/C/vpn.xml:236(command)
3512
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3513
msgstr ""
3514
3515
#: serverguide/C/vpn.xml:237(command)
3516
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3517
msgstr ""
3518
3519
#: serverguide/C/vpn.xml:240(para)
3520
msgid ""
3521
"After configuring the server, restart <application>openvpn</application> by "
3522
"entering:"
3523
msgstr ""
3524
3525
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3526
msgid "sudo /etc/init.d/openvpn restart"
3527
msgstr ""
3528
3529
#: serverguide/C/vpn.xml:250(title)
3530
msgid "Client Configuration"
3531
msgstr ""
3532
3533
#: serverguide/C/vpn.xml:252(para)
3534
msgid "First, install <application>openvpn</application> on the client:"
3535
msgstr ""
3536
3537
#: serverguide/C/vpn.xml:260(para)
3538
msgid ""
3539
"Then with the server configured and the client certificates copied to the "
3540
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3541
"file by copying the example. In a terminal on the client machine enter:"
3542
msgstr ""
3543
3544
#: serverguide/C/vpn.xml:266(command)
3545
msgid ""
3546
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3547
"/etc/openvpn"
3548
msgstr ""
3549
3550
#: serverguide/C/vpn.xml:269(para)
3551
msgid ""
3552
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3553
"following options:"
3554
msgstr ""
3555
3556
#: serverguide/C/vpn.xml:273(programlisting)
3557
#, no-wrap
3558
msgid ""
3559
"\n"
3560
"dev tap\n"
3561
"remote vpn.example.com 1194\n"
3562
"cert hostname.crt\n"
3563
"key hostname.key\n"
3564
"tls-auth ta.key 1\n"
3565
msgstr ""
3566
3567
#: serverguide/C/vpn.xml:282(para)
3568
msgid ""
3569
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3570
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3571
"key filenames."
3572
msgstr ""
3573
3574
#: serverguide/C/vpn.xml:288(para)
3575
msgid "Finally, restart <application>openvpn</application>:"
3576
msgstr ""
3577
3578
#: serverguide/C/vpn.xml:296(para)
3579
msgid "You should now be able to connect to the remote LAN through the VPN."
3580
msgstr ""
3581
3582
#: serverguide/C/vpn.xml:307(para)
3583
msgid ""
3584
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3585
"additional information."
3586
msgstr ""
3587
3588
#: serverguide/C/vpn.xml:312(para)
3589
msgid ""
3590
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3591
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3592
msgstr ""
3593
3594
#: serverguide/C/vpn.xml:318(para)
3595
msgid ""
3596
"Another source of further information is the <ulink "
3597
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3598
"OpenVPN</ulink> page."
3599
msgstr ""
3600
3601
#: serverguide/C/virtualization.xml:13(title)
3602
msgid "Virtualization"
3603
msgstr ""
3604
3605
#: serverguide/C/virtualization.xml:14(para)
3606
msgid ""
3607
"Virtualization is being adopted in many different environments and "
3608
"situations. If you are a developer, virtualization can provide you with a "
3609
"contained environment where you can safely do almost any sort of development "
3610
"safe from messing up your main working environment. If you are a systems "
3611
"administrator, you can use virtualization to more easily separate your "
3612
"services and move them around based on demand."
3613
msgstr ""
3614
3615
#: serverguide/C/virtualization.xml:20(para)
3616
msgid ""
3617
"The default virtualization technology supported in Ubuntu is "
3618
"<application>KVM</application>, a technology that takes advantage of "
3619
"virtualization extensions built into Intel and AMD hardware. For hardware "
3620
"without virtualization extensions <application>Xen</application> and "
3621
"<application>Qemu</application> are popular solutions."
3622
msgstr ""
3623
3624
#: serverguide/C/virtualization.xml:27(title)
3625
msgid "libvirt"
3626
msgstr ""
3627
3628
#: serverguide/C/virtualization.xml:28(para)
3629
msgid ""
3630
"The <application>libvirt</application> library is used to interface with "
3631
"different virtualization technologies. Before getting started with "
3632
"<application>libvirt</application> it is best to make sure your hardware "
3633
"supports the necessary virtualization extensions for "
3634
"<application>KVM</application>. Enter the following from a terminal prompt:"
3635
msgstr ""
3636
3637
#: serverguide/C/virtualization.xml:35(command)
3638
msgid "kvm-ok"
3639
msgstr ""
3640
3641
#: serverguide/C/virtualization.xml:37(para)
3642
msgid ""
3643
"A message will be printed informing you if your CPU "
3644
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3645
"virtualization."
3646
msgstr ""
3647
3648
#: serverguide/C/virtualization.xml:41(para)
3649
msgid ""
3650
"On most computer whose processor supports virtualization, it is necessary to "
3651
"activate an option in the BIOS to enable it."
3652
msgstr ""
3653
3654
#: serverguide/C/virtualization.xml:47(title)
3655
msgid "Virtual Networking"
3656
msgstr ""
3657
3658
#: serverguide/C/virtualization.xml:49(para)
3659
msgid ""
3660
"There are a few different ways to allow a virtual machine access to the "
3661
"external network. The default virtual network configuration is "
3662
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3663
"traffic is NATed through the host interface to the outside network."
3664
msgstr ""
3665
3666
#: serverguide/C/virtualization.xml:54(para)
3667
msgid ""
3668
"To enable external hosts to directly access services on virtual machines a "
3669
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3670
"interfaces to connect to the outside network through the physical interface, "
3671
"making them appear as normal hosts to the rest of the network. For "
3672
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3673
msgstr ""
3674
3675
#: serverguide/C/virtualization.xml:63(para)
3676
msgid "To install the necessary packages, from a terminal prompt enter:"
3677
msgstr ""
3678
3679
#: serverguide/C/virtualization.xml:67(command)
3680
msgid "sudo apt-get install kvm libvirt-bin"
3681
msgstr ""
3682
3683
#: serverguide/C/virtualization.xml:69(para)
3684
msgid ""
3685
"After installing <application>libvirt-bin</application>, the user used to "
3686
"manage virtual machines will need to be added to the "
3687
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3688
"the advanced networking options."
3689
msgstr ""
3690
3691
#: serverguide/C/virtualization.xml:73(para)
3692
msgid "In a terminal enter:"
3693
msgstr ""
3694
3695
#: serverguide/C/virtualization.xml:77(command)
3696
msgid "sudo adduser $USER libvirtd"
3697
msgstr ""
3698
3699
#: serverguide/C/virtualization.xml:80(para)
3700
msgid ""
3701
"If the user chosen is the current user, you will need to log out and back in "
3702
"for the new group membership to take effect."
3703
msgstr ""
3704
3705
#: serverguide/C/virtualization.xml:84(para)
3706
msgid ""
3707
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3708
"Installing a virtual machine follows the same process as installing the "
3709
"operating system directly on the hardware. You either need a way to automate "
3710
"the installation, or a keyboard and monitor will need to be attached to the "
3711
"physical machine."
3712
msgstr ""
3713
3714
#: serverguide/C/virtualization.xml:89(para)
3715
msgid ""
3716
"In the case of virtual machines a Graphical User Interface (GUI) is "
3717
"analogous to using a physical keyboard and mouse. Instead of installing a "
3718
"GUI the <application>virt-viewer</application> application can be used to "
3719
"connect to a virtual machine's console using <application>VNC</application>. "
3720
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3721
msgstr ""
3722
3723
#: serverguide/C/virtualization.xml:94(para)
3724
msgid ""
3725
"There are several ways to automate the Ubuntu installation process, for "
3726
"example using preseeds, kickstart, etc. Refer to the <ulink "
3727
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3728
"Installation Guide</ulink> for details."
3729
msgstr ""
3730
3731
#: serverguide/C/virtualization.xml:98(para)
3732
msgid ""
3733
"Yet another way to install an Ubuntu virtual machine is to use "
3734
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
3735
"builder</application> allows you to setup advanced partitions, execute "
3736
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
3737
"vmbuilder\"/>"
3738
msgstr ""
3739
3740
#: serverguide/C/virtualization.xml:104(title)
3741
msgid "virt-install"
3742
msgstr ""
3743
3744
#: serverguide/C/virtualization.xml:105(para)
3745
msgid ""
3746
"<application>virt-install</application> is part of the <application>python-"
3747
"virtinst</application> package. To install it, from a terminal prompt enter:"
3748
msgstr ""
3749
3750
#: serverguide/C/virtualization.xml:109(command)
3751
msgid "sudo apt-get install python-virtinst"
3752
msgstr ""
3753
3754
#: serverguide/C/virtualization.xml:111(para)
3755
msgid ""
3756
"There are several options available when using <application>virt-"
3757
"install</application>. For example:"
3758
msgstr ""
3759
3760
#: serverguide/C/virtualization.xml:115(command)
3761
msgid ""
3762
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
3763
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
3764
msgstr ""
3765
3766
#: serverguide/C/virtualization.xml:122(para)
3767
msgid ""
3768
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
3769
"be <emphasis>web_devel</emphasis> in this example."
3770
msgstr ""
3771
3772
#: serverguide/C/virtualization.xml:127(para)
3773
msgid ""
3774
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
3775
"machine will use."
3776
msgstr ""
3777
3778
#: serverguide/C/virtualization.xml:132(para)
3779
msgid ""
3780
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
3781
"disk which can be a file, partition, or logical volume. In this example a "
3782
"file named <filename>web_devel.img</filename>."
3783
msgstr ""
3784
3785
#: serverguide/C/virtualization.xml:138(para)
3786
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
3787
msgstr ""
3788
3789
#: serverguide/C/virtualization.xml:143(para)
3790
msgid ""
3791
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
3792
"file can be either an ISO file or the path to the host's CDROM device."
3793
msgstr ""
3794
3795
#: serverguide/C/virtualization.xml:149(para)
3796
msgid ""
3797
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
3798
"technologies."
3799
msgstr ""
3800
3801
#: serverguide/C/virtualization.xml:154(para)
3802
msgid ""
3803
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
3804
msgstr ""
3805
3806
#: serverguide/C/virtualization.xml:159(para)
3807
msgid ""
3808
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
3809
"virtual machine's console."
3810
msgstr ""
3811
3812
#: serverguide/C/virtualization.xml:164(para)
3813
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
3814
msgstr ""
3815
3816
#: serverguide/C/virtualization.xml:169(para)
3817
msgid ""
3818
"After launching <application>virt-install</application> you can connect to "
3819
"the virtual machine's console either locally using a GUI or with the "
3820
"<application>virt-viewer</application> utility."
3821
msgstr ""
3822
3823
#: serverguide/C/virtualization.xml:175(title)
3824
msgid "virt-clone"
3825
msgstr ""
3826
3827
#: serverguide/C/virtualization.xml:176(para)
3828
msgid ""
3829
"The <application>virt-clone</application> application can be used to copy "
3830
"one virtual machine to another. For example:"
3831
msgstr ""
3832
3833
#: serverguide/C/virtualization.xml:180(command)
3834
msgid ""
3835
"sudo virt-clone -o web_devel -n database_devel -f "
3836
"/path/to/database_devel.img --connect=qemu:///system"
3837
msgstr ""
3838
3839
#: serverguide/C/virtualization.xml:184(para)
3840
msgid "<emphasis>-o:</emphasis> original virtual machine."
3841
msgstr ""
3842
3843
#: serverguide/C/virtualization.xml:189(para)
3844
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
3845
msgstr ""
3846
3847
#: serverguide/C/virtualization.xml:194(para)
3848
msgid ""
3849
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
3850
"be used by the new virtual machine."
3851
msgstr ""
3852
3853
#: serverguide/C/virtualization.xml:199(para)
3854
msgid ""
3855
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
3856
msgstr ""
3857
3858
#: serverguide/C/virtualization.xml:204(para)
3859
msgid ""
3860
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
3861
"help troubleshoot problems with <application>virt-clone</application>."
3862
msgstr ""
3863
3864
#: serverguide/C/virtualization.xml:209(para)
3865
msgid ""
3866
"Replace <emphasis>web_devel</emphasis> and "
3867
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
3868
msgstr ""
3869
3870
#: serverguide/C/virtualization.xml:215(title)
3871
msgid "Virtual Machine Management"
3872
msgstr ""
3873
3874
#: serverguide/C/virtualization.xml:217(title)
3875
msgid "virsh"
3876
msgstr ""
3877
3878
#: serverguide/C/virtualization.xml:218(para)
3879
msgid ""
3880
"There are several utilities available to manage virtual machines and "
3881
"<application>libvirt</application>. The <application>virsh</application> "
3882
"utility can be used from the command line. Some examples:"
3883
msgstr ""
3884
3885
#: serverguide/C/virtualization.xml:224(para)
3886
msgid "To list running virtual machines:"
3887
msgstr ""
3888
3889
#: serverguide/C/virtualization.xml:228(command)
3890
msgid "virsh -c qemu:///system list"
3891
msgstr ""
3892
3893
#: serverguide/C/virtualization.xml:232(para)
3894
msgid "To start a virtual machine:"
3895
msgstr ""
3896
3897
#: serverguide/C/virtualization.xml:236(command)
3898
msgid "virsh -c qemu:///system start web_devel"
3899
msgstr ""
3900
3901
#: serverguide/C/virtualization.xml:240(para)
3902
msgid "Similarly, to start a virtual machine at boot:"
3903
msgstr ""
3904
3905
#: serverguide/C/virtualization.xml:244(command)
3906
msgid "virsh -c qemu:///system autostart web_devel"
3907
msgstr ""
3908
3909
#: serverguide/C/virtualization.xml:248(para)
3910
msgid "Reboot a virtual machine with:"
3911
msgstr ""
3912
3913
#: serverguide/C/virtualization.xml:252(command)
3914
msgid "virsh -c qemu:///system reboot web_devel"
3915
msgstr ""
3916
3917
#: serverguide/C/virtualization.xml:256(para)
3918
msgid ""
3919
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
3920
"order to be restored later. The following will save the virtual machine "
3921
"state into a file named according to the date:"
3922
msgstr ""
3923
3924
#: serverguide/C/virtualization.xml:261(command)
3925
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
3926
msgstr ""
3927
3928
#: serverguide/C/virtualization.xml:263(para)
3929
msgid "Once saved the virtual machine will no longer be running."
3930
msgstr ""
3931
3932
#: serverguide/C/virtualization.xml:268(para)
3933
msgid "A saved virtual machine can be restored using:"
3934
msgstr ""
3935
3936
#: serverguide/C/virtualization.xml:272(command)
3937
msgid "virsh -c qemu:///system restore web_devel-022708.state"
3938
msgstr ""
3939
3940
#: serverguide/C/virtualization.xml:276(para)
3941
msgid "To shutdown a virtual machine do:"
3942
msgstr ""
3943
3944
#: serverguide/C/virtualization.xml:280(command)
3945
msgid "virsh -c qemu:///system shutdown web_devel"
3946
msgstr ""
3947
3948
#: serverguide/C/virtualization.xml:284(para)
3949
msgid "A CDROM device can be mounted in a virtual machine by entering:"
3950
msgstr ""
3951
3952
#: serverguide/C/virtualization.xml:288(command)
3953
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
3954
msgstr ""
3955
3956
#: serverguide/C/virtualization.xml:293(para)
3957
msgid ""
3958
"In the above examples replace <emphasis>web_devel</emphasis> with the "
3959
"appropriate virtual machine name, and <filename>web_devel-"
3960
"022708.state</filename> with a descriptive file name."
3961
msgstr ""
3962
3963
#: serverguide/C/virtualization.xml:300(title)
3964
msgid "Virtual Machine Manager"
3965
msgstr ""
3966
3967
#: serverguide/C/virtualization.xml:301(para)
3968
msgid ""
3969
"The <application>virt-manager</application> package contains a graphical "
3970
"utility to manage local and remote virtual machines. To install virt-manager "
3971
"enter:"
3972
msgstr ""
3973
3974
#: serverguide/C/virtualization.xml:306(command)
3975
msgid "sudo apt-get install virt-manager"
3976
msgstr ""
3977
3978
#: serverguide/C/virtualization.xml:308(para)
3979
msgid ""
3980
"Since <application>virt-manager</application> requires a Graphical User "
3981
"Interface (GUI) environment it is recommended to be installed on a "
3982
"workstation or test machine instead of a production server. To connect to "
3983
"the local <application>libvirt</application> service enter:"
3984
msgstr ""
3985
3986
#: serverguide/C/virtualization.xml:314(command)
3987
msgid "virt-manager -c qemu:///system"
3988
msgstr ""
3989
3990
#: serverguide/C/virtualization.xml:316(para)
3991
msgid ""
3992
"You can connect to the <application>libvirt</application> service running on "
3993
"another host by entering the following in a terminal prompt:"
3994
msgstr ""
3995
3996
#: serverguide/C/virtualization.xml:320(command)
3997
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
3998
msgstr ""
3999
4000
#: serverguide/C/virtualization.xml:323(para)
4001
msgid ""
4002
"The above example assumes that <application>SSH</application> connectivity "
4003
"between the management system and virtnode1.mydomain.com has already been "
4004
"configured, and uses SSH keys for authentication. SSH "
4005
"<emphasis>keys</emphasis> are needed because "
4006
"<application>libvirt</application> sends the password prompt to another "
4007
"process. For details on configuring <application>SSH</application> see <xref "
4008
"linkend=\"openssh-server\"/>"
4009
msgstr ""
4010
4011
#: serverguide/C/virtualization.xml:333(title)
4012
msgid "Virtual Machine Viewer"
4013
msgstr ""
4014
4015
#: serverguide/C/virtualization.xml:334(para)
4016
msgid ""
4017
"The <application>virt-viewer</application> application allows you to connect "
4018
"to a virtual machine's console. <application>virt-viewer</application> does "
4019
"require a Graphical User Interface (GUI) to interface with the virtual "
4020
"machine."
4021
msgstr ""
4022
4023
#: serverguide/C/virtualization.xml:338(para)
4024
msgid ""
4025
"To install <application>virt-viewer</application> from a terminal enter:"
4026
msgstr ""
4027
4028
#: serverguide/C/virtualization.xml:342(command)
4029
msgid "sudo apt-get install virt-viewer"
4030
msgstr ""
4031
4032
#: serverguide/C/virtualization.xml:344(para)
4033
msgid ""
4034
"Once a virtual machine is installed and running you can connect to the "
4035
"virtual machine's console by using:"
4036
msgstr ""
4037
4038
#: serverguide/C/virtualization.xml:348(command)
4039
msgid "virt-viewer -c qemu:///system web_devel"
4040
msgstr ""
4041
4042
#: serverguide/C/virtualization.xml:350(para)
4043
msgid ""
4044
"Similar to <application>virt-manager</application>, <application>virt-"
4045
"viewer</application> can connect to a remote host using "
4046
"<emphasis>SSH</emphasis> with key authentication, as well:"
4047
msgstr ""
4048
4049
#: serverguide/C/virtualization.xml:355(command)
4050
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4051
msgstr ""
4052
4053
#: serverguide/C/virtualization.xml:357(para)
4054
msgid ""
4055
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4056
"appropriate virtual machine name."
4057
msgstr ""
4058
4059
#: serverguide/C/virtualization.xml:360(para)
4060
msgid ""
4061
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4062
"can also setup <application>SSH</application> access to the virtual machine. "
4063
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4064
"more details."
4065
msgstr ""
4066
4067
#: serverguide/C/virtualization.xml:369(para)
4068
msgid ""
4069
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4070
"for more details."
4071
msgstr ""
4072
4073
#: serverguide/C/virtualization.xml:374(para)
4074
msgid ""
4075
"For more information on <application>libvirt</application> see the <ulink "
4076
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4077
msgstr ""
4078
4079
#: serverguide/C/virtualization.xml:379(para)
4080
msgid ""
4081
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4082
"Manager</ulink> site has more information on <application>virt-"
4083
"manager</application> development."
4084
msgstr ""
4085
4086
#: serverguide/C/virtualization.xml:385(para)
4087
msgid ""
4088
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4089
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4090
"technology in Ubuntu."
4091
msgstr ""
4092
4093
#: serverguide/C/virtualization.xml:391(para)
4094
msgid ""
4095
"Another good resource is the <ulink "
4096
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4097
msgstr ""
4098
4099
#: serverguide/C/virtualization.xml:399(title)
4100
msgid "JeOS and vmbuilder"
4101
msgstr ""
4102
4103
#: serverguide/C/virtualization.xml:405(title)
4104
msgid "What is JeOS"
4105
msgstr ""
4106
4107
#: serverguide/C/virtualization.xml:407(para)
4108
msgid ""
4109
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4110
"variant of the Ubuntu Server operating system, configured specifically for "
4111
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4112
"only as an option either:"
4113
msgstr ""
4114
4115
#: serverguide/C/virtualization.xml:414(para)
4116
msgid ""
4117
"While installing from the Server Edition ISO (pressing "
4118
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4119
"installation\", which is the package selection equivalent to JeOS)."
4120
msgstr ""
4121
4122
#: serverguide/C/virtualization.xml:420(para)
4123
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4124
msgstr ""
4125
4126
#: serverguide/C/virtualization.xml:426(para)
4127
msgid ""
4128
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4129
"kernel that only contains the base elements needed to run within a "
4130
"virtualized environment."
4131
msgstr ""
4132
4133
#: serverguide/C/virtualization.xml:431(para)
4134
msgid ""
4135
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4136
"in the latest virtualization products from VMware. This combination of "
4137
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4138
"delivers a highly efficient use of server resources in large virtual "
4139
"deployments."
4140
msgstr ""
4141
4142
#: serverguide/C/virtualization.xml:437(para)
4143
msgid ""
4144
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4145
"can configure their supporting OS exactly as they require. They have the "
4146
"peace of mind that updates, whether for security or enhancement reasons, "
4147
"will be limited to the bare minimum of what is required in their specific "
4148
"environment. In turn, users deploying virtual appliances built on top of "
4149
"JeOS will have to go through fewer updates and therefore less maintenance "
4150
"than they would have had to with a standard full installation of a server."
4151
msgstr ""
4152
4153
#: serverguide/C/virtualization.xml:446(title)
4154
msgid "What is vmbuilder"
4155
msgstr ""
4156
4157
#: serverguide/C/virtualization.xml:448(para)
4158
msgid ""
4159
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4160
"will fetch the various package and build a virtual machine tailored for your "
4161
"needs in about a minute. vmbuilder is a script that automates the process of "
4162
"creating a ready to use Linux based VM. The currently supported hypervisors "
4163
"are KVM and Xen."
4164
msgstr ""
4165
4166
#: serverguide/C/virtualization.xml:454(para)
4167
msgid ""
4168
"You can pass command line options to add extra packages, remove packages, "
4169
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4170
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4171
"a local mirror, you can bootstrap a VM in less than a minute."
4172
msgstr ""
4173
4174
#: serverguide/C/virtualization.xml:460(para)
4175
msgid ""
4176
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4177
"vm-builder</application> started with little emphasis as a hack to help "
4178
"developers test their new code in a virtual machine without having to "
4179
"restart from scratch each time. As a few Ubuntu administrators started to "
4180
"notice this script, a few of them went on improving it and adapting it for "
4181
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4182
"virtualization specialist, not the golf player) decided to rewrite it from "
4183
"scratch for Intrepid as a python script with a few new design goals:"
4184
msgstr ""
4185
4186
#: serverguide/C/virtualization.xml:470(para)
4187
msgid "Develop it so that it can be reused by other distributions."
4188
msgstr ""
4189
4190
#: serverguide/C/virtualization.xml:475(para)
4191
msgid ""
4192
"Use a plugin mechanisms for all virtualization interactions so that others "
4193
"can easily add logic for other virtualization environments."
4194
msgstr ""
4195
4196
#: serverguide/C/virtualization.xml:480(para)
4197
msgid ""
4198
"Provide an easy to maintain web interface as an option to the command line "
4199
"interface."
4200
msgstr ""
4201
4202
#: serverguide/C/virtualization.xml:486(para)
4203
msgid "But the general principles and commands remain the same."
4204
msgstr ""
4205
4206
#: serverguide/C/virtualization.xml:493(title)
4207
msgid "Initial Setup"
4208
msgstr ""
4209
4210
#: serverguide/C/virtualization.xml:495(para)
4211
msgid ""
4212
"It is assumed that you have installed and configured "
4213
"<application>libvirt</application> and <application>KVM</application> "
4214
"locally on the machine you are using. For details on how to perform this, "
4215
"please refer to:"
4216
msgstr ""
4217
4218
#: serverguide/C/virtualization.xml:507(para)
4219
msgid ""
4220
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4221
"page."
4222
msgstr ""
4223
4224
#: serverguide/C/virtualization.xml:513(para)
4225
msgid ""
4226
"We also assume that you know how to use a text based text editor such as "
4227
"nano or vi. If you have not used any of them before, you can get an overview "
4228
"of the various text editors available by reading the <ulink "
4229
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4230
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4231
"principle should remain on other virtualization technologies."
4232
msgstr ""
4233
4234
#: serverguide/C/virtualization.xml:521(title)
4235
msgid "Install vmbuilder"
4236
msgstr ""
4237
4238
#: serverguide/C/virtualization.xml:523(para)
4239
msgid ""
4240
"The name of the package that we need to install is <application>python-vm-"
4241
"builder</application>. In a terminal prompt enter:"
4242
msgstr ""
4243
4244
#: serverguide/C/virtualization.xml:528(command)
4245
msgid "sudo apt-get install python-vm-builder"
4246
msgstr ""
4247
4248
#: serverguide/C/virtualization.xml:532(para)
4249
msgid ""
4250
"If you are running Hardy, you can still perform most of this using the older "
4251
"version of the package named <application>ubuntu-vm-builder</application>, "
4252
"there are only a few changes to the syntax of the tool."
4253
msgstr ""
4254
4255
#: serverguide/C/virtualization.xml:541(title)
4256
msgid "Defining Your Virtual Machine"
4257
msgstr ""
4258
4259
#: serverguide/C/virtualization.xml:543(para)
4260
msgid ""
4261
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4262
"are a few thing to consider:"
4263
msgstr ""
4264
4265
#: serverguide/C/virtualization.xml:549(para)
4266
msgid ""
4267
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4268
"will know how to extend disk size to fit their need, so either plan for a "
4269
"large virtual disk to allow for your appliance to grow, or explain fairly "
4270
"well in your documentation how to allocate more space. It might actually be "
4271
"a good idea to store data on some separate external storage."
4272
msgstr ""
4273
4274
#: serverguide/C/virtualization.xml:556(para)
4275
msgid ""
4276
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4277
"whatever you think is a safe minimum for your appliance."
4278
msgstr ""
4279
4280
#: serverguide/C/virtualization.xml:562(para)
4281
msgid ""
4282
"The <application>vmbuilder</application> command has 2 main parameters: the "
4283
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4284
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4285
"and can be found using the following command:"
4286
msgstr ""
4287
4288
#: serverguide/C/virtualization.xml:568(command)
4289
msgid "vmbuilder --help"
4290
msgstr ""
4291
4292
#: serverguide/C/virtualization.xml:572(title)
4293
msgid "Base Parameters"
4294
msgstr ""
4295
4296
#: serverguide/C/virtualization.xml:574(para)
4297
msgid ""
4298
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4299
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4300
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4301
msgstr ""
4302
4303
#: serverguide/C/virtualization.xml:580(command)
4304
msgid ""
4305
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4306
"libvirt qemu:///system"
4307
msgstr ""
4308
4309
#: serverguide/C/virtualization.xml:583(para)
4310
msgid ""
4311
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4312
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4313
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4314
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4315
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4316
"libvirt</emphasis> tells to inform the local virtualization environment to "
4317
"add the resulting VM to the list of available machines."
4318
msgstr ""
4319
4320
#: serverguide/C/virtualization.xml:591(para)
4321
msgid "Notes:"
4322
msgstr ""
4323
4324
#: serverguide/C/virtualization.xml:597(para)
4325
msgid ""
4326
"Because of the nature of operations performed by vmbuilder, it needs to have "
4327
"root privilege, hence the use of sudo."
4328
msgstr ""
4329
4330
#: serverguide/C/virtualization.xml:602(para)
4331
msgid ""
4332
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4333
"a 64 bit machine (--arch amd64)."
4334
msgstr ""
4335
4336
#: serverguide/C/virtualization.xml:607(para)
4337
msgid ""
4338
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4339
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4340
"use <emphasis>--flavour</emphasis> server instead."
4341
msgstr ""
4342
4343
#: serverguide/C/virtualization.xml:615(title)
4344
msgid "JeOS Installation Parameters"
4345
msgstr ""
4346
4347
#: serverguide/C/virtualization.xml:618(title)
4348
msgid "JeOS Networking"
4349
msgstr ""
4350
4351
#: serverguide/C/virtualization.xml:621(title)
4352
msgid "Assigning a fixed IP address"
4353
msgstr ""
4354
4355
#: serverguide/C/virtualization.xml:623(para)
4356
msgid ""
4357
"As a virtual appliance that may be deployed on various very different "
4358
"networks, it is very difficult to know what the actual network will look "
4359
"like. In order to simplify configuration, it is a good idea to take an "
4360
"approach similar to what network hardware vendors usually do, namely "
4361
"assigning an initial fixed IP address to the appliance in a private class "
4362
"network that you will provide in your documentation. An address in the range "
4363
"192.168.0.0/255 is usually a good choice."
4364
msgstr ""
4365
4366
#: serverguide/C/virtualization.xml:630(para)
4367
msgid "To do this we'll use the following parameters:"
4368
msgstr ""
4369
4370
#: serverguide/C/virtualization.xml:636(para)
4371
msgid ""
4372
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4373
"dhcp if not specified)"
4374
msgstr ""
4375
4376
#: serverguide/C/virtualization.xml:641(para)
4377
msgid ""
4378
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4379
"255.255.255.0)"
4380
msgstr ""
4381
4382
#: serverguide/C/virtualization.xml:646(para)
4383
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4384
msgstr ""
4385
4386
#: serverguide/C/virtualization.xml:651(para)
4387
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4388
msgstr ""
4389
4390
#: serverguide/C/virtualization.xml:656(para)
4391
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4392
msgstr ""
4393
4394
#: serverguide/C/virtualization.xml:661(para)
4395
msgid ""
4396
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4397
msgstr ""
4398
4399
#: serverguide/C/virtualization.xml:667(para)
4400
msgid ""
4401
"We assume for now that default values are good enough, so the resulting "
4402
"invocation becomes:"
4403
msgstr ""
4404
4405
#: serverguide/C/virtualization.xml:672(command)
4406
msgid ""
4407
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4408
"libvirt qemu:///system --ip 192.168.0.100"
4409
msgstr ""
4410
4411
#: serverguide/C/virtualization.xml:677(title)
4412
msgid "Modifying the libvirt Template to use Bridging"
4413
msgstr ""
4414
4415
#: serverguide/C/virtualization.xml:679(para)
4416
msgid ""
4417
"Because our appliance will be likely to need to be accessed by remote hosts, "
4418
"we need to configure libvirt so that the appliance uses bridge networking. "
4419
"To do this we use vmbuilder template mechanism to modify the default one."
4420
msgstr ""
4421
4422
#: serverguide/C/virtualization.xml:684(para)
4423
msgid ""
4424
"In our working directory we create the template hierarchy and copy the "
4425
"default template:"
4426
msgstr ""
4427
4428
#: serverguide/C/virtualization.xml:689(command)
4429
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4430
msgstr ""
4431
4432
#: serverguide/C/virtualization.xml:690(command)
4433
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4434
msgstr ""
4435
4436
#: serverguide/C/virtualization.xml:693(para)
4437
msgid ""
4438
"We can then edit "
4439
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4440
"change:"
4441
msgstr ""
4442
4443
#: serverguide/C/virtualization.xml:697(programlisting)
4444
#, no-wrap
4445
msgid ""
4446
"\n"
4447
" <interface type='network'>\n"
4448
" <source network='default'/>\n"
4449
" </interface>\n"
4450
msgstr ""
4451
4452
#: serverguide/C/virtualization.xml:703(para)
4453
msgid "To:"
4454
msgstr ""
4455
4456
#: serverguide/C/virtualization.xml:707(programlisting)
4457
#, no-wrap
4458
msgid ""
4459
"\n"
4460
" <interface type='bridge'>\n"
4461
" <source bridge='br0'/>\n"
4462
" </interface>\n"
4463
msgstr ""
4464
4465
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4466
msgid "Partitioning"
4467
msgstr ""
4468
4469
#: serverguide/C/virtualization.xml:719(para)
4470
msgid ""
4471
"Partitioning of the virtual appliance will have to take into consideration "
4472
"what you are planning to do with is. Because most appliances want to have a "
4473
"separate storage for data, having a separate <filename>/var</filename> would "
4474
"make sense."
4475
msgstr ""
4476
4477
#: serverguide/C/virtualization.xml:724(para)
4478
msgid ""
4479
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4480
msgstr ""
4481
4482
#: serverguide/C/virtualization.xml:728(programlisting)
4483
#, no-wrap
4484
msgid ""
4485
"\n"
4486
"--part PATH\n"
4487
" Allows you to specify a partition table in a partition file, located at "
4488
"PATH. Each line of the partition file should specify\n"
4489
" (root first):\n"
4490
" mountpoint size\n"
4491
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4492
"disk starts on a\n"
4493
" line with ’---’. ie :\n"
4494
" root 1000\n"
4495
" /opt 1000\n"
4496
" swap 256\n"
4497
" ---\n"
4498
" /var 2000\n"
4499
" /log 1500\n"
4500
msgstr ""
4501
4502
#: serverguide/C/virtualization.xml:743(para)
4503
msgid ""
4504
"In our case we will define a text file name "
4505
"<filename>vmbuilder.partition</filename> which will contain the following:"
4506
msgstr ""
4507
4508
#: serverguide/C/virtualization.xml:747(programlisting)
4509
#, no-wrap
4510
msgid ""
4511
"\n"
4512
"root 8000\n"
4513
"swap 4000\n"
4514
"---\n"
4515
"/var 20000\n"
4516
msgstr ""
4517
4518
#: serverguide/C/virtualization.xml:755(para)
4519
msgid ""
4520
"Note that as we are using virtual disk images, the actual sizes that we put "
4521
"here are maximum sizes for these volumes."
4522
msgstr ""
4523
4524
#: serverguide/C/virtualization.xml:760(para)
4525
msgid "Our command line now looks like:"
4526
msgstr ""
4527
4528
#: serverguide/C/virtualization.xml:765(command)
4529
msgid ""
4530
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4531
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4532
msgstr ""
4533
4534
#: serverguide/C/virtualization.xml:770(para)
4535
msgid ""
4536
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4537
"next line."
4538
msgstr ""
4539
4540
#: serverguide/C/virtualization.xml:777(title)
4541
msgid "User and Password"
4542
msgstr ""
4543
4544
#: serverguide/C/virtualization.xml:779(para)
4545
msgid ""
4546
"Again setting up a virtual appliance, you will need to provide a default "
4547
"user and password that is generic so that you can include it in your "
4548
"documentation. We will see later on in this tutorial how we will provide "
4549
"some security by defining a script that will be run the first time a user "
4550
"actually logs in the appliance, that will, among other things, ask him to "
4551
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4552
"as my user name, and <emphasis>'default'</emphasis> as the password."
4553
msgstr ""
4554
4555
#: serverguide/C/virtualization.xml:787(para)
4556
msgid "To do this we use the following optional parameters:"
4557
msgstr ""
4558
4559
#: serverguide/C/virtualization.xml:793(para)
4560
msgid ""
4561
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4562
"Default: ubuntu."
4563
msgstr ""
4564
4565
#: serverguide/C/virtualization.xml:798(para)
4566
msgid ""
4567
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4568
"added. Default: Ubuntu."
4569
msgstr ""
4570
4571
#: serverguide/C/virtualization.xml:803(para)
4572
msgid ""
4573
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4574
"Default: ubuntu."
4575
msgstr ""
4576
4577
#: serverguide/C/virtualization.xml:809(para)
4578
msgid "Our resulting command line becomes:"
4579
msgstr ""
4580
4581
#: serverguide/C/virtualization.xml:814(command)
4582
msgid ""
4583
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4584
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4585
"user user --name user --pass default"
4586
msgstr ""
4587
4588
#: serverguide/C/virtualization.xml:822(title)
4589
msgid "Installing Required Packages"
4590
msgstr ""
4591
4592
#: serverguide/C/virtualization.xml:824(para)
4593
msgid ""
4594
"In this example we will be installing a package "
4595
"<application>(Limesurvey)</application> that accesses a "
4596
"<application>MySQL</application> database and has a web interface. We will "
4597
"therefore require our OS to provide us with:"
4598
msgstr ""
4599
4600
#: serverguide/C/virtualization.xml:831(para)
4601
msgid "Apache"
4602
msgstr ""
4603
4604
#: serverguide/C/virtualization.xml:832(para)
4605
msgid "PHP"
4606
msgstr ""
4607
4608
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4609
msgid "MySQL"
4610
msgstr ""
4611
4612
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4613
msgid "OpenSSH Server"
4614
msgstr ""
4615
4616
#: serverguide/C/virtualization.xml:835(para)
4617
msgid "Limesurvey (as an example application that we have packaged)"
4618
msgstr ""
4619
4620
#: serverguide/C/virtualization.xml:838(para)
4621
msgid ""
4622
"This is done using vmbuilder by specifying the --addpkg option multiple "
4623
"times:"
4624
msgstr ""
4625
4626
#: serverguide/C/virtualization.xml:842(programlisting)
4627
#, no-wrap
4628
msgid ""
4629
"\n"
4630
"--addpkg PKG\n"
4631
" Install PKG into the guest (can be specfied multiple times)\n"
4632
msgstr ""
4633
4634
#: serverguide/C/virtualization.xml:847(para)
4635
msgid ""
4636
"However, due to the way vmbuilder operates, packages that have to ask "
4637
"questions to the user during the post install phase are not supported and "
4638
"should instead be installed while interactivity can occur. This is the case "
4639
"of Limesurvey, which we will have to install later, once the user logs in."
4640
msgstr ""
4641
4642
#: serverguide/C/virtualization.xml:853(para)
4643
msgid ""
4644
"Other packages that ask simple debconf question, such as <application>mysql-"
4645
"server</application> asking to set a password, the package can be installed "
4646
"immediately, but we will have to reconfigure it the first time the user logs "
4647
"in."
4648
msgstr ""
4649
4650
#: serverguide/C/virtualization.xml:859(para)
4651
msgid ""
4652
"If some packages that we need to install are not in main, we need to enable "
4653
"the additional repositories using --comp and --ppa:"
4654
msgstr ""
4655
4656
#: serverguide/C/virtualization.xml:863(programlisting)
4657
#, no-wrap
4658
msgid ""
4659
"\n"
4660
"--components COMP1,COMP2,...,COMPN\n"
4661
" A comma separated list of distro components to include (e.g. "
4662
"main,universe). This defaults\n"
4663
" to \"main\"\n"
4664
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4665
msgstr ""
4666
4667
#: serverguide/C/virtualization.xml:870(para)
4668
msgid ""
4669
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4670
"PPA (personal package archive) address so that it is added to the VM "
4671
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4672
"to the command line:"
4673
msgstr ""
4674
4675
#: serverguide/C/virtualization.xml:876(command)
4676
msgid ""
4677
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4678
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4679
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4680
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4681
"server --ppa nijaba"
4682
msgstr ""
4683
4684
#: serverguide/C/virtualization.xml:883(title)
4685
msgid "OpenSSH"
4686
msgstr ""
4687
4688
#: serverguide/C/virtualization.xml:885(para)
4689
msgid ""
4690
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4691
"it will allow our admins to access the appliance remotely. However, pushing "
4692
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4693
"security risk as all these server will share the same secret key, making it "
4694
"very easy for hackers to target our appliance with all the tools they need "
4695
"to crack it open in a breeze. As for the user password, we will instead rely "
4696
"on a script that will install OpenSSH the first time a user logs in so that "
4697
"the key generated will be different for each appliance. For this we'll use a "
4698
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4699
"interaction."
4700
msgstr ""
4701
4702
#: serverguide/C/virtualization.xml:897(title)
4703
msgid "Speed Considerations"
4704
msgstr ""
4705
4706
#: serverguide/C/virtualization.xml:900(title)
4707
msgid "Package Caching"
4708
msgstr ""
4709
4710
#: serverguide/C/virtualization.xml:902(para)
4711
msgid ""
4712
"When vmbuilder creates builds your system, it has to go fetch each one of "
4713
"the packages that composes it over the network to one of the official "
4714
"repositories, which, depending on your internet connection speed and the "
4715
"load of the mirror, can have a big impact on the actual build time. In order "
4716
"to reduce this, it is recommended to either have a local repository (which "
4717
"can be created using <application>apt-mirror</application>) or using a "
4718
"caching proxy such as <application>apt-proxy</application>. The later option "
4719
"being much simpler to implement and requiring less disk space, it is the one "
4720
"we will pick in this tutorial. To install it, simply type:"
4721
msgstr ""
4722
4723
#: serverguide/C/virtualization.xml:912(command)
4724
msgid "sudo apt-get install apt-proxy"
4725
msgstr ""
4726
4727
#: serverguide/C/virtualization.xml:915(para)
4728
msgid ""
4729
"Once this is complete, your (empty) proxy is ready for use on "
4730
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
4731
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
4732
"option:"
4733
msgstr ""
4734
4735
#: serverguide/C/virtualization.xml:920(programlisting)
4736
#, no-wrap
4737
msgid ""
4738
"\n"
4739
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
4740
" is http://archive.ubuntu.com/ubuntu for official\n"
4741
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
4742
" otherwise\n"
4743
msgstr ""
4744
4745
#: serverguide/C/virtualization.xml:927(para)
4746
msgid "So we add to the command line:"
4747
msgstr ""
4748
4749
#: serverguide/C/virtualization.xml:932(command)
4750
msgid "--mirror http://mirroraddress:9999/ubuntu"
4751
msgstr ""
4752
4753
#: serverguide/C/virtualization.xml:936(para)
4754
msgid ""
4755
"The mirror address specified here will also be used in the "
4756
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
4757
"is useful to specify here an address that can be resolved by the guest or to "
4758
"plan on reseting this address later on, such as in a <emphasis>--"
4759
"firstboot</emphasis> script."
4760
msgstr ""
4761
4762
#: serverguide/C/virtualization.xml:945(title)
4763
msgid "Install a Local Mirror"
4764
msgstr ""
4765
4766
#: serverguide/C/virtualization.xml:947(para)
4767
msgid ""
4768
"If we are in a larger environment, it may make sense to setup a local mirror "
4769
"of the Ubuntu repositories. The package apt-mirror provides you with a "
4770
"script that will handle the mirroring for you. You should plan on having "
4771
"about 20 gigabyte of free space per supported release and architecture."
4772
msgstr ""
4773
4774
#: serverguide/C/virtualization.xml:953(para)
4775
msgid ""
4776
"By default, <application>apt-mirror</application> uses the configuration "
4777
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
4778
"replicate only the architecture of the local machine. If you would like to "
4779
"support other architectures on your mirror, simply duplicate the lines "
4780
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
4781
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
4782
"archives as well, you will have:"
4783
msgstr ""
4784
4785
#: serverguide/C/virtualization.xml:960(programlisting)
4786
#, no-wrap
4787
msgid ""
4788
"\n"
4789
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4790
"multiverse \n"
4791
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4792
"multiverse\n"
4793
"\n"
4794
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
4795
"multiverse \n"
4796
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
4797
"universe multiverse \n"
4798
"\n"
4799
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
4800
"universe multiverse \n"
4801
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
4802
"universe multiverse \n"
4803
"\n"
4804
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
4805
"universe multiverse \n"
4806
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
4807
"universe multiverse \n"
4808
"\n"
4809
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4810
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4811
"installer \n"
4812
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4813
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4814
"installer \n"
4815
msgstr ""
4816
4817
#: serverguide/C/virtualization.xml:977(para)
4818
msgid ""
4819
"Notice that the source packages are not mirrored as they are seldom used "
4820
"compared to the binaries and they do take a lot more space, but they can be "
4821
"easily added to the list."
4822
msgstr ""
4823
4824
#: serverguide/C/virtualization.xml:982(para)
4825
msgid ""
4826
"Once the mirror has finished replicating (and this can be quite long), you "
4827
"need to configure Apache so that your mirror files (in "
4828
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
4829
"default), are published by your Apache server. For more information on "
4830
"Apache see <xref linkend=\"httpd\"/>."
4831
msgstr ""
4832
4833
#: serverguide/C/virtualization.xml:991(title)
4834
msgid "Installing in a RAM Disk"
4835
msgstr ""
4836
4837
#: serverguide/C/virtualization.xml:993(para)
4838
msgid ""
4839
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
4840
"faster than writing to disk. If you have some free memory, letting vmbuilder "
4841
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
4842
"-tmpfs</emphasis> will help you do just that:"
4843
msgstr ""
4844
4845
#: serverguide/C/virtualization.xml:999(programlisting)
4846
#, no-wrap
4847
msgid ""
4848
"\n"
4849
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
4850
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
4851
msgstr ""
4852
4853
#: serverguide/C/virtualization.xml:1004(para)
4854
msgid ""
4855
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
4856
"have 1G of free ram."
4857
msgstr ""
4858
4859
#: serverguide/C/virtualization.xml:1011(title)
4860
msgid "Package the Application"
4861
msgstr ""
4862
4863
#: serverguide/C/virtualization.xml:1013(para)
4864
msgid "Two option are available to us:"
4865
msgstr ""
4866
4867
#: serverguide/C/virtualization.xml:1019(para)
4868
msgid ""
4869
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
4870
"package. Since this is outside of the scope of this tutorial, we will not "
4871
"perform this here and invite the reader to read the documentation on how to "
4872
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
4873
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
4874
"repository for your package so that updates can be conveniently pulled from "
4875
"it. See the <ulink url=\"http://www.debian-"
4876
"administration.org/articles/286\">Debian Administration</ulink> article for "
4877
"a tutorial on this."
4878
msgstr ""
4879
4880
#: serverguide/C/virtualization.xml:1028(para)
4881
msgid ""
4882
"Manually install the application under <filename>/opt</filename> as "
4883
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
4884
"guidelines</ulink>."
4885
msgstr ""
4886
4887
#: serverguide/C/virtualization.xml:1035(para)
4888
msgid ""
4889
"In our case we'll use <application>Limesurvey</application> as example web "
4890
"application for which we wish to provide a virtual appliance. As noted "
4891
"before, we've made a version of the package available in a PPA (Personal "
4892
"Package Archive)."
4893
msgstr ""
4894
4895
#: serverguide/C/virtualization.xml:1042(title)
4896
msgid "Finishing Install"
4897
msgstr ""
4898
4899
#: serverguide/C/virtualization.xml:1045(title)
4900
msgid "First Boot"
4901
msgstr ""
4902
4903
#: serverguide/C/virtualization.xml:1047(para)
4904
msgid ""
4905
"As we mentioned earlier, the first time the machine boots we'll need to "
4906
"install <application>openssh-server</application> so that the key generated "
4907
"for it is unique for each machine. To do this, we'll write a script called "
4908
"<filename>boot.sh</filename> as follows:"
4909
msgstr ""
4910
4911
#: serverguide/C/virtualization.xml:1053(programlisting)
4912
#, no-wrap
4913
msgid ""
4914
"\n"
4915
"# This script will run the first time the virtual machine boots\n"
4916
"# It is ran as root.\n"
4917
"\n"
4918
"apt-get update\n"
4919
"apt-get install -qqy --force-yes openssh-server\n"
4920
msgstr ""
4921
4922
#: serverguide/C/virtualization.xml:1061(para)
4923
msgid ""
4924
"And we add the <command>--firstboot boot.sh</command> option to our command "
4925
"line."
4926
msgstr ""
4927
4928
#: serverguide/C/virtualization.xml:1067(title)
4929
msgid "First Login"
4930
msgstr ""
4931
4932
#: serverguide/C/virtualization.xml:1069(para)
4933
msgid ""
4934
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
4935
"set them up the first time a user logs in using a script named login.sh. "
4936
"We'll also use this script to let the user specify:"
4937
msgstr ""
4938
4939
#: serverguide/C/virtualization.xml:1075(para)
4940
msgid "His own password"
4941
msgstr ""
4942
4943
#: serverguide/C/virtualization.xml:1076(para)
4944
msgid "Define the keyboard and other locale info he wants to use"
4945
msgstr ""
4946
4947
#: serverguide/C/virtualization.xml:1079(para)
4948
msgid "So we'll define <filename>login.sh</filename> as follows:"
4949
msgstr ""
4950
4951
#: serverguide/C/virtualization.xml:1083(programlisting)
4952
#, no-wrap
4953
msgid ""
4954
"\n"
4955
"# This script is ran the first time a user logs in\n"
4956
"\n"
4957
"echo \"Your appliance is about to be finished to be set up.\"\n"
4958
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
4959
"echo \"starting by changing your user password.\"\n"
4960
"\n"
4961
"passwd\n"
4962
"\n"
4963
"#give the opportunity to change the keyboard\n"
4964
"sudo dpkg-reconfigure console-setup\n"
4965
"\n"
4966
"#configure the mysql server root password\n"
4967
"sudo dpkg-reconfigure mysql-server-5.0\n"
4968
"\n"
4969
"#install limesurvey\n"
4970
"sudo apt-get install -qqy --force-yes limesurvey\n"
4971
"\n"
4972
"echo \"Your appliance is now configured. To use it point your\"\n"
4973
"echo \"browser to http://serverip/limesurvey/admin\"\n"
4974
msgstr ""
4975
4976
#: serverguide/C/virtualization.xml:1105(para)
4977
msgid ""
4978
"And we add the <command>--firstlogin login.sh</command> option to our "
4979
"command line."
4980
msgstr ""
4981
4982
#: serverguide/C/virtualization.xml:1112(title)
4983
msgid "Useful Additions"
4984
msgstr ""
4985
4986
#: serverguide/C/virtualization.xml:1115(title)
4987
msgid "Configuring Automatic Updates"
4988
msgstr ""
4989
4990
#: serverguide/C/virtualization.xml:1117(para)
4991
msgid ""
4992
"To have your system be configured to update itself on a regular basis, we "
4993
"will just install <application>unattended-upgrades</application>, so we add "
4994
"the following option to our command line:"
4995
msgstr ""
4996
4997
#: serverguide/C/virtualization.xml:1123(command)
4998
msgid "--addpkg unattended-upgrades"
4999
msgstr ""
5000
5001
#: serverguide/C/virtualization.xml:1126(para)
5002
msgid ""
5003
"As we have put our application package in a PPA, the process will update not "
5004
"only the system, but also the application each time we update the version in "
5005
"the PPA."
5006
msgstr ""
5007
5008
#: serverguide/C/virtualization.xml:1133(title)
5009
msgid "ACPI Event Handling"
5010
msgstr ""
5011
5012
#: serverguide/C/virtualization.xml:1135(para)
5013
msgid ""
5014
"For your virtual machine to be able to handle restart and shutdown events it "
5015
"is being sent, it is a good idea to install the acpid package as well. To do "
5016
"this we just add the following option:"
5017
msgstr ""
5018
5019
#: serverguide/C/virtualization.xml:1141(command)
5020
msgid "--addpkg acpid"
5021
msgstr ""
5022
5023
#: serverguide/C/virtualization.xml:1147(title)
5024
msgid "Final Command"
5025
msgstr ""
5026
5027
#: serverguide/C/virtualization.xml:1149(para)
5028
msgid "Here is the command with all the options discussed above:"
5029
msgstr ""
5030
5031
#: serverguide/C/virtualization.xml:1154(command)
5032
msgid ""
5033
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5034
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5035
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5036
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5037
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5038
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5039
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5040
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5041
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5042
"firstlogin login.sh es"
5043
msgstr ""
5044
5045
#: serverguide/C/virtualization.xml:1169(para)
5046
msgid ""
5047
"If you are interested in learning more, have questions or suggestions, "
5048
"please contact the Ubuntu Server Team at:"
5049
msgstr ""
5050
5051
#: serverguide/C/virtualization.xml:1174(para)
5052
msgid "IRC: #ubuntu-server on freenode"
5053
msgstr ""
5054
5055
#: serverguide/C/virtualization.xml:1179(para)
5056
msgid ""
5057
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5058
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5059
msgstr ""
5060
5061
#: serverguide/C/virtualization.xml:1184(para)
5062
msgid ""
5063
"Also, see the <ulink "
5064
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5065
"Wiki</ulink> page."
5066
msgstr ""
5067
5068
#: serverguide/C/virtualization.xml:1192(title)
5069
msgid "UEC"
5070
msgstr ""
5071
5072
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5073
msgid "Overview"
5074
msgstr ""
5075
5076
#: serverguide/C/virtualization.xml:1197(para)
5077
msgid ""
5078
"This tutorial covers <application>UEC</application> installation from the "
5079
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5080
"with a single system serving as the <emphasis>\"all-in-one "
5081
"controller\"</emphasis>, and one or more nodes attached."
5082
msgstr ""
5083
5084
#: serverguide/C/virtualization.xml:1202(para)
5085
msgid ""
5086
"From this Tutorial you will learn how to install, configure, register and "
5087
"perform several operations on a basic <application>UEC</application> setup "
5088
"that results in a cloud with a one controller <emphasis>\"front-"
5089
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5090
"instances. You will also use examples to help get you started using your own "
5091
"private compute cloud."
5092
msgstr ""
5093
5094
#: serverguide/C/virtualization.xml:1210(title)
5095
msgid "Prerequisites"
5096
msgstr ""
5097
5098
#: serverguide/C/virtualization.xml:1212(para)
5099
msgid ""
5100
"To deploy a minimal cloud infrastructure, you’ll need at least "
5101
"<emphasis>two</emphasis> dedicated systems:"
5102
msgstr ""
5103
5104
#: serverguide/C/virtualization.xml:1218(para)
5105
msgid "A front end."
5106
msgstr ""
5107
5108
#: serverguide/C/virtualization.xml:1223(para)
5109
msgid "One or more node(s)."
5110
msgstr ""
5111
5112
#: serverguide/C/virtualization.xml:1229(para)
5113
msgid ""
5114
"The following are recommendations, rather than fixed requirements. However, "
5115
"our experience in developing this documentation indicated the following "
5116
"suggestions."
5117
msgstr ""
5118
5119
#: serverguide/C/virtualization.xml:1234(title)
5120
msgid "Front End Requirements"
5121
msgstr ""
5122
5123
#: serverguide/C/virtualization.xml:1236(para)
5124
msgid "Use the following table for a system that will run one or more of:"
5125
msgstr ""
5126
5127
#: serverguide/C/virtualization.xml:1241(para)
5128
msgid "Cloud Controller (CLC)"
5129
msgstr ""
5130
5131
#: serverguide/C/virtualization.xml:1242(para)
5132
msgid "Cluster Controller (CC)"
5133
msgstr ""
5134
5135
#: serverguide/C/virtualization.xml:1243(para)
5136
msgid "Walrus (the S3-like storage service)"
5137
msgstr ""
5138
5139
#: serverguide/C/virtualization.xml:1244(para)
5140
msgid "Storage Controller (SC)"
5141
msgstr ""
5142
5143
#: serverguide/C/virtualization.xml:1248(title)
5144
msgid "UEC Front End Requirements"
5145
msgstr ""
5146
5147
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5148
msgid "Hardware"
5149
msgstr ""
5150
5151
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5152
msgid "Minimum"
5153
msgstr ""
5154
5155
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5156
msgid "Suggested"
5157
msgstr ""
5158
5159
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5160
msgid "Notes"
5161
msgstr ""
5162
5163
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5164
msgid "CPU"
5165
msgstr ""
5166
5167
#: serverguide/C/virtualization.xml:1265(para)
5168
msgid "1 GHz"
5169
msgstr ""
5170
5171
#: serverguide/C/virtualization.xml:1266(para)
5172
msgid "2 x 2 GHz"
5173
msgstr ""
5174
5175
#: serverguide/C/virtualization.xml:1267(para)
5176
msgid ""
5177
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5178
"a dual core processor."
5179
msgstr ""
5180
5181
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5182
msgid "Memory"
5183
msgstr ""
5184
5185
#: serverguide/C/virtualization.xml:1271(para)
5186
msgid "512 MB"
5187
msgstr ""
5188
5189
#: serverguide/C/virtualization.xml:1272(para)
5190
msgid "2 GB"
5191
msgstr ""
5192
5193
#: serverguide/C/virtualization.xml:1273(para)
5194
msgid "The Java web front end benefits from lots of available memory."
5195
msgstr ""
5196
5197
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5198
msgid "Disk"
5199
msgstr ""
5200
5201
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5202
msgid "5400 RPM IDE"
5203
msgstr ""
5204
5205
#: serverguide/C/virtualization.xml:1278(para)
5206
msgid "7200 RPM SATA"
5207
msgstr ""
5208
5209
#: serverguide/C/virtualization.xml:1279(para)
5210
msgid ""
5211
"Slower disks will work, but will yield much longer instance startup times."
5212
msgstr ""
5213
5214
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5215
msgid "Disk Space"
5216
msgstr ""
5217
5218
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5219
msgid "40 GB"
5220
msgstr ""
5221
5222
#: serverguide/C/virtualization.xml:1284(para)
5223
msgid "200 GB"
5224
msgstr ""
5225
5226
#: serverguide/C/virtualization.xml:1285(para)
5227
msgid ""
5228
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5229
"does not like to run out of disk space."
5230
msgstr ""
5231
5232
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5233
msgid "Networking"
5234
msgstr ""
5235
5236
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5237
msgid "100 Mbps"
5238
msgstr ""
5239
5240
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5241
msgid "1000 Mbps"
5242
msgstr ""
5243
5244
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5245
msgid ""
5246
"Machine images are hundreds of MB, and need to be copied over the network to "
5247
"nodes."
5248
msgstr ""
5249
5250
#: serverguide/C/virtualization.xml:1299(title)
5251
msgid "Node Requirements"
5252
msgstr ""
5253
5254
#: serverguide/C/virtualization.xml:1301(para)
5255
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5256
msgstr ""
5257
5258
#: serverguide/C/virtualization.xml:1306(para)
5259
msgid "the Node Controller (NC)"
5260
msgstr ""
5261
5262
#: serverguide/C/virtualization.xml:1310(title)
5263
msgid "UEC Node Requirements"
5264
msgstr ""
5265
5266
#: serverguide/C/virtualization.xml:1327(para)
5267
msgid "VT Extensions"
5268
msgstr ""
5269
5270
#: serverguide/C/virtualization.xml:1328(para)
5271
msgid "VT, 64-bit, Multicore"
5272
msgstr ""
5273
5274
#: serverguide/C/virtualization.xml:1329(para)
5275
msgid ""
5276
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5277
"only run 1 VM per CPU core on a Node."
5278
msgstr ""
5279
5280
#: serverguide/C/virtualization.xml:1333(para)
5281
msgid "1 GB"
5282
msgstr ""
5283
5284
#: serverguide/C/virtualization.xml:1334(para)
5285
msgid "4 GB"
5286
msgstr ""
5287
5288
#: serverguide/C/virtualization.xml:1335(para)
5289
msgid "Additional memory means more, and larger guests."
5290
msgstr ""
5291
5292
#: serverguide/C/virtualization.xml:1340(para)
5293
msgid "7200 RPM SATA or SCSI"
5294
msgstr ""
5295
5296
#: serverguide/C/virtualization.xml:1341(para)
5297
msgid ""
5298
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5299
"bottleneck."
5300
msgstr ""
5301
5302
#: serverguide/C/virtualization.xml:1346(para)
5303
msgid "100 GB"
5304
msgstr ""
5305
5306
#: serverguide/C/virtualization.xml:1347(para)
5307
msgid ""
5308
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5309
"space."
5310
msgstr ""
5311
5312
#: serverguide/C/virtualization.xml:1363(title)
5313
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5314
msgstr ""
5315
5316
#: serverguide/C/virtualization.xml:1367(para)
5317
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5318
msgstr ""
5319
5320
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5321
msgid ""
5322
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5323
msgstr ""
5324
5325
#: serverguide/C/virtualization.xml:1377(para)
5326
msgid ""
5327
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5328
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5329
msgstr ""
5330
5331
#: serverguide/C/virtualization.xml:1383(para)
5332
msgid ""
5333
"It will ask two other cloud-specific questions during the course of the "
5334
"install:"
5335
msgstr ""
5336
5337
#: serverguide/C/virtualization.xml:1388(para)
5338
msgid "Name of your cluster."
5339
msgstr ""
5340
5341
#: serverguide/C/virtualization.xml:1391(para)
5342
msgid "e.g. <emphasis>cluster1</emphasis>."
5343
msgstr ""
5344
5345
#: serverguide/C/virtualization.xml:1394(para)
5346
msgid ""
5347
"A range of public IP addresses on the LAN that the cloud can allocate to "
5348
"instances."
5349
msgstr ""
5350
5351
#: serverguide/C/virtualization.xml:1397(para)
5352
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5353
msgstr ""
5354
5355
#: serverguide/C/virtualization.xml:1405(title)
5356
msgid "Installing the Node Controller(s)"
5357
msgstr ""
5358
5359
#: serverguide/C/virtualization.xml:1407(para)
5360
msgid ""
5361
"The node controller install is even simpler. Just make sure that you are "
5362
"connected to the network on which the cloud/cluster controller is already "
5363
"running."
5364
msgstr ""
5365
5366
#: serverguide/C/virtualization.xml:1413(para)
5367
msgid "Boot from the same ISO on the node(s)."
5368
msgstr ""
5369
5370
#: serverguide/C/virtualization.xml:1423(para)
5371
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5372
msgstr ""
5373
5374
#: serverguide/C/virtualization.xml:1428(para)
5375
msgid ""
5376
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5377
"install for you."
5378
msgstr ""
5379
5380
#: serverguide/C/virtualization.xml:1433(para)
5381
msgid "Confirm the partitioning scheme."
5382
msgstr ""
5383
5384
#: serverguide/C/virtualization.xml:1438(para)
5385
msgid ""
5386
"The rest of the installation should proceed uninterrupted; complete the "
5387
"installation and reboot the node."
5388
msgstr ""
5389
5390
#: serverguide/C/virtualization.xml:1446(title)
5391
msgid "Register the Node(s)"
5392
msgstr ""
5393
5394
#: serverguide/C/virtualization.xml:1448(para)
5395
msgid ""
5396
"Nodes are the physical systems within <application>UEC</application> that "
5397
"actually run the virtual machine instances of the cloud."
5398
msgstr ""
5399
5400
#: serverguide/C/virtualization.xml:1452(para)
5401
msgid ""
5402
"Once one or more Ubuntu Server node(s) are installed and running the "
5403
"<application>eucalyptus-nc</application> service, log onto the "
5404
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5405
msgstr ""
5406
5407
#: serverguide/C/virtualization.xml:1458(command)
5408
msgid "sudo euca_conf --no-rsync --discover-nodes"
5409
msgstr ""
5410
5411
#: serverguide/C/virtualization.xml:1461(para)
5412
msgid ""
5413
"This will discover the systems on the network running the "
5414
"<application>eucalyptus-nc</application> service, and the administrator can "
5415
"confirm the registration of each node by its IP address."
5416
msgstr ""
5417
5418
#: serverguide/C/virtualization.xml:1467(para)
5419
msgid ""
5420
"If you get prompted for passwords, or receive errors from scp, you may need "
5421
"to revisit the key synchronization instructions at <ulink "
5422
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5423
"lation</ulink>."
5424
msgstr ""
5425
5426
#: serverguide/C/virtualization.xml:1475(title)
5427
msgid "Obtain Credentials"
5428
msgstr ""
5429
5430
#: serverguide/C/virtualization.xml:1477(para)
5431
msgid ""
5432
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5433
"users of the cloud will need to retrieve their credentials. This can be done "
5434
"either through a web browser, or at the command line."
5435
msgstr ""
5436
5437
#: serverguide/C/virtualization.xml:1483(title)
5438
msgid "From a Web Browser"
5439
msgstr ""
5440
5441
#: serverguide/C/virtualization.xml:1487(para)
5442
msgid ""
5443
"From your web browser (either remotely or on your Ubuntu server) access the "
5444
"following URL:"
5445
msgstr ""
5446
5447
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5448
#, no-wrap
5449
msgid ""
5450
"\n"
5451
"https://<cloud-controller-ip-address>:8443/\n"
5452
msgstr ""
5453
5454
#: serverguide/C/virtualization.xml:1495(para)
5455
msgid ""
5456
"You must use a secure connection, so make sure you use \"https\" not "
5457
"\"http\" in your URL. You will get a security certificate warning. You will "
5458
"have to add an exception to view the page. If you do not accept it you will "
5459
"not be able to view the Eucalyptus configuration page."
5460
msgstr ""
5461
5462
#: serverguide/C/virtualization.xml:1503(para)
5463
msgid ""
5464
"Use username <emphasis>'admin'</emphasis> and password "
5465
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5466
"to change your password)."
5467
msgstr ""
5468
5469
#: serverguide/C/virtualization.xml:1509(para)
5470
msgid ""
5471
"Then follow the on-screen instructions to update the admin password and "
5472
"email address."
5473
msgstr ""
5474
5475
#: serverguide/C/virtualization.xml:1514(para)
5476
msgid ""
5477
"Once the first time configuration process is completed, click the "
5478
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5479
"the screen."
5480
msgstr ""
5481
5482
#: serverguide/C/virtualization.xml:1520(para)
5483
msgid ""
5484
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5485
"certificates."
5486
msgstr ""
5487
5488
#: serverguide/C/virtualization.xml:1525(para)
5489
msgid "Save them to <filename>~/.euca</filename>."
5490
msgstr ""
5491
5492
#: serverguide/C/virtualization.xml:1530(para)
5493
msgid ""
5494
"Unzip the downloaded zip file into a safe location "
5495
"(<filename>~/.euca</filename>)."
5496
msgstr ""
5497
5498
#: serverguide/C/virtualization.xml:1534(command)
5499
msgid "unzip -d ~/.euca mycreds.zip"
5500
msgstr ""
5501
5502
#: serverguide/C/virtualization.xml:1541(title)
5503
msgid "From a Command Line"
5504
msgstr ""
5505
5506
#: serverguide/C/virtualization.xml:1545(para)
5507
msgid ""
5508
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5509
"Controller</emphasis>, you can run:"
5510
msgstr ""
5511
5512
#: serverguide/C/virtualization.xml:1549(command)
5513
msgid "mkdir -p ~/.euca"
5514
msgstr ""
5515
5516
#: serverguide/C/virtualization.xml:1550(command)
5517
msgid "chmod 700 ~/.euca"
5518
msgstr ""
5519
5520
#: serverguide/C/virtualization.xml:1551(command)
5521
msgid "cd ~/.euca"
5522
msgstr ""
5523
5524
#: serverguide/C/virtualization.xml:1552(command)
5525
msgid "sudo euca_conf --get-credentials mycreds.zip"
5526
msgstr ""
5527
5528
#: serverguide/C/virtualization.xml:1553(command)
5529
msgid "unzip mycreds.zip"
5530
msgstr ""
5531
5532
#: serverguide/C/virtualization.xml:1554(command)
5533
msgid "cd -"
5534
msgstr ""
5535
5536
#: serverguide/C/virtualization.xml:1561(title)
5537
msgid "Extracting and Using Your Credentials"
5538
msgstr ""
5539
5540
#: serverguide/C/virtualization.xml:1563(para)
5541
msgid ""
5542
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5543
"certificates."
5544
msgstr ""
5545
5546
#: serverguide/C/virtualization.xml:1569(para)
5547
msgid ""
5548
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5549
"Eucalyptus environment:"
5550
msgstr ""
5551
5552
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5553
msgid ". ~/.euca/eucarc"
5554
msgstr ""
5555
5556
#: serverguide/C/virtualization.xml:1577(para)
5557
msgid ""
5558
"You may additionally wish to add this command to your "
5559
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5560
"set up automatically when you log in. Eucalyptus treats this set of "
5561
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5562
"the holder global privileges across the cloud. As such, they should be "
5563
"protected in the same way that other elevated-priority access is protected "
5564
"(e.g. should not be made visible to the general user population)."
5565
msgstr ""
5566
5567
#: serverguide/C/virtualization.xml:1584(command)
5568
msgid ""
5569
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5570
msgstr ""
5571
5572
#: serverguide/C/virtualization.xml:1588(para)
5573
msgid "Install the required cloud user tools:"
5574
msgstr ""
5575
5576
#: serverguide/C/virtualization.xml:1592(command)
5577
msgid "sudo apt-get install euca2ools"
5578
msgstr ""
5579
5580
#: serverguide/C/virtualization.xml:1596(para)
5581
msgid ""
5582
"To validate that everything is working correctly, get the local cluster "
5583
"availability details:"
5584
msgstr ""
5585
5586
#: serverguide/C/virtualization.xml:1601(command)
5587
msgid "euca-describe-availability-zones verbose"
5588
msgstr ""
5589
5590
#: serverguide/C/virtualization.xml:1602(computeroutput)
5591
#, no-wrap
5592
msgid ""
5593
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5594
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5595
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5596
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5597
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5598
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5599
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5600
msgstr ""
5601
5602
#: serverguide/C/virtualization.xml:1612(para)
5603
msgid "Your output from the above command will vary."
5604
msgstr ""
5605
5606
#: serverguide/C/virtualization.xml:1622(title)
5607
msgid "Running an Image"
5608
msgstr ""
5609
5610
#: serverguide/C/virtualization.xml:1624(para)
5611
msgid "There are multiple ways to instantiate an image in UEC:"
5612
msgstr ""
5613
5614
#: serverguide/C/virtualization.xml:1629(para)
5615
msgid "Use the command line."
5616
msgstr ""
5617
5618
#: serverguide/C/virtualization.xml:1630(para)
5619
msgid ""
5620
"Use one of the UEC compatible management tools such as "
5621
"<emphasis>Landscape</emphasis>."
5622
msgstr ""
5623
5624
#: serverguide/C/virtualization.xml:1632(para)
5625
msgid ""
5626
"Use the <ulink "
5627
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5628
"extension to Firefox."
5629
msgstr ""
5630
5631
#: serverguide/C/virtualization.xml:1638(para)
5632
msgid "Here we will describe the process from the command line:"
5633
msgstr ""
5634
5635
#: serverguide/C/virtualization.xml:1644(para)
5636
msgid ""
5637
"Before running an instance of your image, you should first create a "
5638
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5639
"instance as root, once it boots. The key is stored, so you will only have to "
5640
"do this once."
5641
msgstr ""
5642
5643
#: serverguide/C/virtualization.xml:1648(para)
5644
msgid "Run the following command:"
5645
msgstr ""
5646
5647
#: serverguide/C/virtualization.xml:1651(programlisting)
5648
#, no-wrap
5649
msgid ""
5650
"\n"
5651
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5652
" touch ~/.euca/mykey.priv\n"
5653
" chmod 0600 ~/.euca/mykey.priv\n"
5654
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5655
"fi\n"
5656
msgstr ""
5657
5658
#: serverguide/C/virtualization.xml:1659(para)
5659
msgid ""
5660
"You can call your key whatever you like (in this example, the key is called "
5661
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5662
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5663
"a list of created keys stored in the system."
5664
msgstr ""
5665
5666
#: serverguide/C/virtualization.xml:1666(para)
5667
msgid "You must also allow access to port 22 in your instances:"
5668
msgstr ""
5669
5670
#: serverguide/C/virtualization.xml:1670(command)
5671
msgid "euca-describe-groups"
5672
msgstr ""
5673
5674
#: serverguide/C/virtualization.xml:1671(command)
5675
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5676
msgstr ""
5677
5678
#: serverguide/C/virtualization.xml:1675(para)
5679
msgid "Next, you can create instances of your registered image:"
5680
msgstr ""
5681
5682
#: serverguide/C/virtualization.xml:1679(command)
5683
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5684
msgstr ""
5685
5686
#: serverguide/C/virtualization.xml:1682(para)
5687
msgid ""
5688
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5689
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5690
"on the <emphasis>Store</emphasis> page to see the sample command."
5691
msgstr ""
5692
5693
#: serverguide/C/virtualization.xml:1689(para)
5694
msgid ""
5695
"The first time you run an instance, the system will be setting up caches for "
5696
"the image from which it will be created. This can often take some time the "
5697
"first time an instance is run given that VM images are usually quite large."
5698
msgstr ""
5699
5700
#: serverguide/C/virtualization.xml:1693(para)
5701
msgid "To monitor the state of your instance, run:"
5702
msgstr ""
5703
5704
#: serverguide/C/virtualization.xml:1697(command)
5705
msgid "watch -n5 euca-describe-instances"
5706
msgstr ""
5707
5708
#: serverguide/C/virtualization.xml:1699(para)
5709
msgid ""
5710
"In the output, you should see information about the instance, including its "
5711
"state. While first-time caching is being performed, the instance's state "
5712
"will be <emphasis>'pending'</emphasis>."
5713
msgstr ""
5714
5715
#: serverguide/C/virtualization.xml:1705(para)
5716
msgid ""
5717
"When the instance is fully started, the above state will become "
5718
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5719
"instance in the output, then connect to it:"
5720
msgstr ""
5721
5722
#: serverguide/C/virtualization.xml:1710(command)
5723
msgid ""
5724
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5725
"'{print $4}')"
5726
msgstr ""
5727
5728
#: serverguide/C/virtualization.xml:1711(command)
5729
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
5730
msgstr ""
5731
5732
#: serverguide/C/virtualization.xml:1715(para)
5733
msgid ""
5734
"And when you are done with this instance, exit your SSH connection, then "
5735
"terminate your instance:"
5736
msgstr ""
5737
5738
#: serverguide/C/virtualization.xml:1719(command)
5739
msgid ""
5740
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
5741
"awk '{print $2}')"
5742
msgstr ""
5743
5744
#: serverguide/C/virtualization.xml:1720(command)
5745
msgid "euca-terminate-instances $INSTANCEID"
5746
msgstr ""
5747
5748
#: serverguide/C/virtualization.xml:1727(title)
5749
msgid "Install an Image from the Store"
5750
msgstr ""
5751
5752
#: serverguide/C/virtualization.xml:1729(para)
5753
msgid ""
5754
"The following is by far the simplest way to install an image. However, "
5755
"advanced users may be interested in learning how to <ulink "
5756
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
5757
"own image</ulink>."
5758
msgstr ""
5759
5760
#: serverguide/C/virtualization.xml:1734(para)
5761
msgid ""
5762
"The simplest way to add an image to <application>UEC</application> is to "
5763
"install it from the Image Store on the UEC web interface."
5764
msgstr ""
5765
5766
#: serverguide/C/virtualization.xml:1740(para)
5767
msgid ""
5768
"Access the web interface at the following URL (Make sure you specify https):"
5769
msgstr ""
5770
5771
#: serverguide/C/virtualization.xml:1748(para)
5772
msgid ""
5773
"Enter your login and password (if requested, as you may still be logged in "
5774
"from earlier)."
5775
msgstr ""
5776
5777
#: serverguide/C/virtualization.xml:1753(para)
5778
msgid "Click on the <emphasis>Store</emphasis> tab."
5779
msgstr ""
5780
5781
#: serverguide/C/virtualization.xml:1758(para)
5782
msgid "Browse available images."
5783
msgstr ""
5784
5785
#: serverguide/C/virtualization.xml:1763(para)
5786
msgid "Click on <emphasis>install</emphasis> for the image you want."
5787
msgstr ""
5788
5789
#: serverguide/C/virtualization.xml:1769(para)
5790
msgid ""
5791
"Once the image has been downloaded and installed, you can click on "
5792
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
5793
"button to view the command to execute to instantiate (start) this image. The "
5794
"image will also appear on the list given on the <emphasis>Image</emphasis> "
5795
"tab."
5796
msgstr ""
5797
5798
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
5799
msgid "More Information"
5800
msgstr ""
5801
5802
#: serverguide/C/virtualization.xml:1779(para)
5803
msgid ""
5804
"How to use the <ulink "
5805
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
5806
"Controller</ulink>"
5807
msgstr ""
5808
5809
#: serverguide/C/virtualization.xml:1783(para)
5810
msgid "Controlling eucalyptus services:"
5811
msgstr ""
5812
5813
#: serverguide/C/virtualization.xml:1788(para)
5814
msgid ""
5815
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
5816
msgstr ""
5817
5818
#: serverguide/C/virtualization.xml:1789(para)
5819
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
5820
msgstr ""
5821
5822
#: serverguide/C/virtualization.xml:1792(para)
5823
msgid "Locations of some important files:"
5824
msgstr ""
5825
5826
#: serverguide/C/virtualization.xml:1799(emphasis)
5827
msgid "Log files:"
5828
msgstr ""
5829
5830
#: serverguide/C/virtualization.xml:1802(para)
5831
msgid "/var/log/eucalyptus"
5832
msgstr ""
5833
5834
#: serverguide/C/virtualization.xml:1807(emphasis)
5835
msgid "Configuration files:"
5836
msgstr ""
5837
5838
#: serverguide/C/virtualization.xml:1810(para)
5839
msgid "/etc/eucalyptus"
5840
msgstr ""
5841
5842
#: serverguide/C/virtualization.xml:1815(emphasis)
5843
msgid "Database:"
5844
msgstr ""
5845
5846
#: serverguide/C/virtualization.xml:1818(para)
5847
msgid "/var/lib/eucalyptus/db"
5848
msgstr ""
5849
5850
#: serverguide/C/virtualization.xml:1823(emphasis)
5851
msgid "Keys:"
5852
msgstr ""
5853
5854
#: serverguide/C/virtualization.xml:1826(para)
5855
msgid "/var/lib/eucalyptus"
5856
msgstr ""
5857
5858
#: serverguide/C/virtualization.xml:1827(para)
5859
msgid "/var/lib/eucalyptus/.ssh"
5860
msgstr ""
5861
5862
#: serverguide/C/virtualization.xml:1833(para)
5863
msgid ""
5864
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
5865
"running the client tools."
5866
msgstr ""
5867
5868
#: serverguide/C/virtualization.xml:1844(para)
5869
msgid ""
5870
"For information on loading instances see the <ulink "
5871
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
5872
"page."
5873
msgstr ""
5874
5875
#: serverguide/C/virtualization.xml:1849(para)
5876
msgid ""
5877
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
5878
"documentation, downloads)</ulink>."
5879
msgstr ""
5880
5881
#: serverguide/C/virtualization.xml:1854(para)
5882
msgid ""
5883
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
5884
"(bugs, code)</ulink>."
5885
msgstr ""
5886
5887
#: serverguide/C/virtualization.xml:1859(para)
5888
msgid ""
5889
"<ulink "
5890
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
5891
"ptus Troubleshooting (1.5)</ulink>."
5892
msgstr ""
5893
5894
#: serverguide/C/virtualization.xml:1864(para)
5895
msgid ""
5896
"<ulink url=\"http://support.rightscale.com/2._References/02-"
5897
"Cloud_Infrastructures/Eucalyptus/03-"
5898
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
5899
"RightScale</ulink>."
5900
msgstr ""
5901
5902
#: serverguide/C/virtualization.xml:1870(para)
5903
msgid ""
5904
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
5905
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
5906
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
5907
msgstr ""
5908
5909
#: serverguide/C/virtualization.xml:1879(title)
5910
msgid "Glossary"
5911
msgstr ""
5912
5913
#: serverguide/C/virtualization.xml:1881(para)
5914
msgid ""
5915
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
5916
"unfamiliar to some readers. This page is intended to provide a glossary of "
5917
"such terms and acronyms."
5918
msgstr ""
5919
5920
#: serverguide/C/virtualization.xml:1888(para)
5921
msgid ""
5922
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
5923
"computing resources through virtual machines, provisioned and recollected "
5924
"dynamically."
5925
msgstr ""
5926
5927
#: serverguide/C/virtualization.xml:1894(para)
5928
msgid ""
5929
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
5930
"provides the web UI (an https server on port 8443), and implements the "
5931
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
5932
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
5933
"cloud</application> package."
5934
msgstr ""
5935
5936
#: serverguide/C/virtualization.xml:1901(para)
5937
msgid ""
5938
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
5939
"Cluster Controller. There can be more than one Cluster in an installation of "
5940
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
5941
"floor2, floor2)."
5942
msgstr ""
5943
5944
#: serverguide/C/virtualization.xml:1907(para)
5945
msgid ""
5946
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
5947
"manages collections of node resources. This service is provided by the "
5948
"Ubuntu <application>eucalyptus-cc</application> package."
5949
msgstr ""
5950
5951
#: serverguide/C/virtualization.xml:1913(para)
5952
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
5953
msgstr ""
5954
5955
#: serverguide/C/virtualization.xml:1918(para)
5956
msgid ""
5957
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
5958
"pay-by-the-gigabyte public cloud computing offering."
5959
msgstr ""
5960
5961
#: serverguide/C/virtualization.xml:1923(para)
5962
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
5963
msgstr ""
5964
5965
#: serverguide/C/virtualization.xml:1928(para)
5966
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
5967
msgstr ""
5968
5969
#: serverguide/C/virtualization.xml:1933(para)
5970
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
5971
msgstr ""
5972
5973
#: serverguide/C/virtualization.xml:1938(para)
5974
msgid ""
5975
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
5976
"Linking Your Programs To Useful Systems. An open source project originally "
5977
"from the University of California at Santa Barbara, now supported by "
5978
"Eucalyptus Systems, a Canonical Partner."
5979
msgstr ""
5980
5981
#: serverguide/C/virtualization.xml:1945(para)
5982
msgid ""
5983
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
5984
"the high level Eucalyptus components (cloud, walrus, storage controller, "
5985
"cluster controller)."
5986
msgstr ""
5987
5988
#: serverguide/C/virtualization.xml:1951(para)
5989
msgid ""
5990
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
5991
"running virtual machines, running a node controller. Within Ubuntu, this "
5992
"generally means that the CPU has VT extensions, and can run the KVM "
5993
"hypervisor."
5994
msgstr ""
5995
5996
#: serverguide/C/virtualization.xml:1957(para)
5997
msgid ""
5998
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
5999
"on nodes which host the virtual machines that comprise the cloud. This "
6000
"service is provided by the Ubuntu package <application>eucalyptus-"
6001
"nc</application>."
6002
msgstr ""
6003
6004
#: serverguide/C/virtualization.xml:1963(para)
6005
msgid ""
6006
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6007
"gigabyte persistent storage solution for EC2."
6008
msgstr ""
6009
6010
#: serverguide/C/virtualization.xml:1968(para)
6011
msgid ""
6012
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6013
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6014
"installation can have its own Storage Controller. This component is provided "
6015
"by the <application>eucalyptus-sc</application> package."
6016
msgstr ""
6017
6018
#: serverguide/C/virtualization.xml:1975(para)
6019
msgid ""
6020
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6021
"solution, based on Eucalyptus."
6022
msgstr ""
6023
6024
#: serverguide/C/virtualization.xml:1980(para)
6025
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6026
msgstr ""
6027
6028
#: serverguide/C/virtualization.xml:1985(para)
6029
msgid ""
6030
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6031
"some modern CPUs, allowing for accelerated virtual machine hosting."
6032
msgstr ""
6033
6034
#: serverguide/C/virtualization.xml:1990(para)
6035
msgid ""
6036
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6037
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6038
"put/get abstractions."
6039
msgstr ""
6040
6041
#: serverguide/C/virtualization.xml:2000(title)
6042
msgid "OpenNebula"
6043
msgstr ""
6044
6045
#: serverguide/C/virtualization.xml:2002(para)
6046
msgid ""
6047
"<application>OpenNebula</application> allows virtual machines to be placed "
6048
"and re-placed dynamically on a pool of physical resources. This allows a "
6049
"virtual machine to be hosted from any location available."
6050
msgstr ""
6051
6052
#: serverguide/C/virtualization.xml:2007(para)
6053
msgid ""
6054
"This section will detail configuring an OpenNebula cluster using three "
6055
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6056
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6057
"also need a bridge configured to allow the virtual machines access to the "
6058
"local network. For details see <xref linkend=\"bridging\"/>."
6059
msgstr ""
6060
6061
#: serverguide/C/virtualization.xml:2016(para)
6062
msgid "First, from a terminal on the Front-End enter:"
6063
msgstr ""
6064
6065
#: serverguide/C/virtualization.xml:2021(command)
6066
msgid "sudo apt-get install opennebula"
6067
msgstr ""
6068
6069
#: serverguide/C/virtualization.xml:2024(para)
6070
msgid "On each Compute Node install:"
6071
msgstr ""
6072
6073
#: serverguide/C/virtualization.xml:2029(command)
6074
msgid "sudo apt-get install opennebula-node"
6075
msgstr ""
6076
6077
#: serverguide/C/virtualization.xml:2032(para)
6078
msgid ""
6079
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6080
"to have a password. On each machine execute:"
6081
msgstr ""
6082
6083
#: serverguide/C/virtualization.xml:2037(command)
6084
msgid "sudo passwd oneadmin"
6085
msgstr ""
6086
6087
#: serverguide/C/virtualization.xml:2040(para)
6088
msgid ""
6089
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6090
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6091
msgstr ""
6092
6093
#: serverguide/C/virtualization.xml:2045(command)
6094
msgid ""
6095
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6096
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6097
msgstr ""
6098
6099
#: serverguide/C/virtualization.xml:2046(command)
6100
msgid ""
6101
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6102
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6103
msgstr ""
6104
6105
#: serverguide/C/virtualization.xml:2047(command)
6106
msgid ""
6107
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6108
"/var/lib/one/.ssh/authorized_keys\""
6109
msgstr ""
6110
6111
#: serverguide/C/virtualization.xml:2050(para)
6112
msgid ""
6113
"The SSH key for the Compute Nodes needs to be added to the "
6114
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6115
"accomplish this <application>ssh</application> to each Compute Node as a "
6116
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6117
"session, and execute the following to copy the SSH key from "
6118
"<filename>~/.ssh/known_hosts</filename> to "
6119
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6120
msgstr ""
6121
6122
#: serverguide/C/virtualization.xml:2057(command)
6123
msgid ""
6124
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6125
"/etc/ssh/ssh_known_hosts\""
6126
msgstr ""
6127
6128
#: serverguide/C/virtualization.xml:2058(command)
6129
msgid ""
6130
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6131
"/etc/ssh/ssh_known_hosts\""
6132
msgstr ""
6133
6134
#: serverguide/C/virtualization.xml:2062(para)
6135
msgid ""
6136
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6137
"appropriate host names."
6138
msgstr ""
6139
6140
#: serverguide/C/virtualization.xml:2067(para)
6141
msgid ""
6142
"This allows the <emphasis>oneadmin</emphasis> to use "
6143
"<application>scp</application>, without a password or manual intervention, "
6144
"to deploy an image to the Compute Nodes."
6145
msgstr ""
6146
6147
#: serverguide/C/virtualization.xml:2072(para)
6148
msgid ""
6149
"On the Front-End create a directory to store the VM images, giving the "
6150
"<emphasis>oneadmin</emphasis> user access to the directory:"
6151
msgstr ""
6152
6153
#: serverguide/C/virtualization.xml:2077(command)
6154
msgid "sudo mkdir /var/lib/one/images"
6155
msgstr ""
6156
6157
#: serverguide/C/virtualization.xml:2078(command)
6158
msgid "sudo chown oneadmin /var/lib/one/images/"
6159
msgstr ""
6160
6161
#: serverguide/C/virtualization.xml:2081(para)
6162
msgid ""
6163
"Finally, copy a virtual machine disk file into "
6164
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6165
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6166
"and-vmbuilder\"/> for details."
6167
msgstr ""
6168
6169
#: serverguide/C/virtualization.xml:2090(para)
6170
msgid ""
6171
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6172
"and virtual machines added to the cluster."
6173
msgstr ""
6174
6175
#: serverguide/C/virtualization.xml:2094(para)
6176
msgid "From a terminal prompt enter:"
6177
msgstr ""
6178
6179
#: serverguide/C/virtualization.xml:2099(command)
6180
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6181
msgstr ""
6182
6183
#: serverguide/C/virtualization.xml:2100(command)
6184
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6185
msgstr ""
6186
6187
#: serverguide/C/virtualization.xml:2103(para)
6188
msgid ""
6189
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6190
"<filename>vnet01.template</filename>:"
6191
msgstr ""
6192
6193
#: serverguide/C/virtualization.xml:2107(programlisting)
6194
#, no-wrap
6195
msgid ""
6196
"\n"
6197
"NAME = \"LAN\"\n"
6198
"TYPE = RANGED\n"
6199
"BRIDGE = br0\n"
6200
"NETWORK_SIZE = C\n"
6201
"NETWORK_ADDRESS = 192.168.0.0\n"
6202
msgstr ""
6203
6204
#: serverguide/C/virtualization.xml:2116(para)
6205
msgid ""
6206
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6207
msgstr ""
6208
6209
#: serverguide/C/virtualization.xml:2121(para)
6210
msgid ""
6211
"Using the <application>onevnet</application> utility, add the virtual "
6212
"network to OpenNebula:"
6213
msgstr ""
6214
6215
#: serverguide/C/virtualization.xml:2126(command)
6216
msgid "onevnet create vnet01.template"
6217
msgstr ""
6218
6219
#: serverguide/C/virtualization.xml:2129(para)
6220
msgid ""
6221
"Now create a <emphasis>VM Template</emphasis> file named "
6222
"<filename>vm01.template</filename>:"
6223
msgstr ""
6224
6225
#: serverguide/C/virtualization.xml:2133(programlisting)
6226
#, no-wrap
6227
msgid ""
6228
"\n"
6229
"NAME = vm01\n"
6230
"CPU = 0.5\n"
6231
"MEMORY = 512\n"
6232
"\n"
6233
"OS = [ BOOT = hd ]\n"
6234
"\n"
6235
"DISK = [\n"
6236
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6237
" target = \"hda\",\n"
6238
" readonly = \"no\" ]\n"
6239
"\n"
6240
"NIC = [ NETWORK=\"LAN\" ]\n"
6241
"\n"
6242
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6243
msgstr ""
6244
6245
#: serverguide/C/virtualization.xml:2150(para)
6246
msgid "Start the virtual machine using <application>onevm</application>:"
6247
msgstr ""
6248
6249
#: serverguide/C/virtualization.xml:2155(command)
6250
msgid "onevm submit vm01.template"
6251
msgstr ""
6252
6253
#: serverguide/C/virtualization.xml:2158(para)
6254
msgid ""
6255
"Use the <application>onevm list</application> option to view information "
6256
"about virtual machines. Also, the <application>onevm show vm01</application> "
6257
"option will display more details about a specific virtual machine."
6258
msgstr ""
6259
6260
#: serverguide/C/virtualization.xml:2169(para)
6261
msgid ""
6262
"See the <ulink "
6263
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6264
"> for more information."
6265
msgstr ""
6266
6267
#: serverguide/C/virtualization.xml:2174(para)
6268
msgid ""
6269
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6270
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6271
"url=\"http://freenode.net\">Freenode</ulink>."
6272
msgstr ""
6273
6274
#: serverguide/C/virtualization.xml:2180(para)
6275
msgid ""
6276
"Also, the <ulink "
6277
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6278
"Wiki</ulink> page has more details."
6279
msgstr ""
6280
6281
#: serverguide/C/vcs.xml:13(title)
6282
msgid "Version Control System"
6283
msgstr ""
6284
6285
#: serverguide/C/vcs.xml:14(para)
6286
msgid ""
6287
"Version control is the art of managing changes to information. It has long "
6288
"been a critical tool for programmers, who typically spend their time making "
6289
"small changes to software and then undoing those changes the next day. But "
6290
"the usefulness of version control software extends far beyond the bounds of "
6291
"the software development world. Anywhere you can find people using computers "
6292
"to manage information that changes often, there is room for version control."
6293
msgstr ""
6294
6295
#: serverguide/C/vcs.xml:17(title)
6296
msgid "Bazaar"
6297
msgstr ""
6298
6299
#: serverguide/C/vcs.xml:18(para)
6300
msgid ""
6301
"Bazaar is a new version control system sponsored by Canonical, the "
6302
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6303
"support a central repository model, Bazaar also supports "
6304
"<emphasis>distributed version control</emphasis>, giving people the ability "
6305
"to collaborate more efficiently. In particular, Bazaar is designed to "
6306
"maximize the level of community participation in open source projects."
6307
msgstr ""
6308
6309
#: serverguide/C/vcs.xml:29(para)
6310
msgid ""
6311
"At a terminal prompt, enter the following command to install "
6312
"<application>bzr</application>: <screen>\n"
6313
"<command>sudo apt-get install bzr</command>\n"
6314
"</screen>"
6315
msgstr ""
6316
6317
#: serverguide/C/vcs.xml:40(para)
6318
msgid ""
6319
"To introduce yourself to <application>bzr</application>, use the "
6320
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6321
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6322
"</screen>"
6323
msgstr ""
6324
6325
#: serverguide/C/vcs.xml:49(title)
6326
msgid "Learning Bazaar"
6327
msgstr ""
6328
6329
#: serverguide/C/vcs.xml:50(para)
6330
msgid ""
6331
"Bazaar comes with bundled documentation installed into "
6332
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6333
"is a good place to start. The <application>bzr</application> command also "
6334
"comes with built-in help: <screen>\n"
6335
"<command>$ bzr help</command>\n"
6336
"</screen>"
6337
msgstr ""
6338
6339
#: serverguide/C/vcs.xml:60(para)
6340
msgid ""
6341
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6342
"<command>$ bzr help foo</command>\n"
6343
"</screen>"
6344
msgstr ""
6345
6346
#: serverguide/C/vcs.xml:68(title)
6347
msgid "Launchpad Integration"
6348
msgstr ""
6349
6350
#: serverguide/C/vcs.xml:69(para)
6351
msgid ""
6352
"While highly useful as a stand-alone system, Bazaar has good, optional "
6353
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6354
"the collaborative development system used by Canonical and the broader open "
6355
"source community to manage and extend Ubuntu itself. For information on how "
6356
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6357
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6358
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6359
msgstr ""
6360
6361
#: serverguide/C/vcs.xml:81(title)
6362
msgid "Subversion"
6363
msgstr ""
6364
6365
#: serverguide/C/vcs.xml:82(para)
6366
msgid ""
6367
"Subversion is an open source version control system. Using Subversion, you "
6368
"can record the history of source files and documents. It manages files and "
6369
"directories over time. A tree of files is placed into a central repository. "
6370
"The repository is much like an ordinary file server, except that it "
6371
"remembers every change ever made to files and directories."
6372
msgstr ""
6373
6374
#: serverguide/C/vcs.xml:87(para)
6375
msgid ""
6376
"To access Subversion repository using the HTTP protocol, you must install "
6377
"and configure a web server. Apache2 is proven to work with Subversion. "
6378
"Please refer to the HTTP subsection in the Apache2 section to install and "
6379
"configure Apache2. To access the Subversion repository using the HTTPS "
6380
"protocol, you must install and configure a digital certificate in your "
6381
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6382
"section to install and configure the digital certificate."
6383
msgstr ""
6384
6385
#: serverguide/C/vcs.xml:96(para)
6386
msgid ""
6387
"To install Subversion, run the following command from a terminal prompt:"
6388
msgstr ""
6389
6390
#: serverguide/C/vcs.xml:101(command)
6391
msgid "sudo apt-get install subversion libapache2-svn"
6392
msgstr ""
6393
6394
#: serverguide/C/vcs.xml:108(para)
6395
msgid ""
6396
"This step assumes you have installed above mentioned packages on your "
6397
"system. This section explains how to create a Subversion repository and "
6398
"access the project."
6399
msgstr ""
6400
6401
#: serverguide/C/vcs.xml:111(title)
6402
msgid "Create Subversion Repository"
6403
msgstr ""
6404
6405
#: serverguide/C/vcs.xml:112(para)
6406
msgid ""
6407
"The Subversion repository can be created using the following command from a "
6408
"terminal prompt:"
6409
msgstr ""
6410
6411
#: serverguide/C/vcs.xml:116(command)
6412
msgid "svnadmin create /path/to/repos/project"
6413
msgstr ""
6414
6415
#: serverguide/C/vcs.xml:121(title)
6416
msgid "Importing Files"
6417
msgstr ""
6418
6419
#: serverguide/C/vcs.xml:122(para)
6420
msgid ""
6421
"Once you create the repository you can <emphasis>import</emphasis> files "
6422
"into the repository. To import a directory, enter the following from a "
6423
"terminal prompt: <screen>\n"
6424
"<command>svn import /path/to/import/directory "
6425
"file:///path/to/repos/project</command>\n"
6426
"</screen>"
6427
msgstr ""
6428
6429
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6430
msgid "Access Methods"
6431
msgstr ""
6432
6433
#: serverguide/C/vcs.xml:135(para)
6434
msgid ""
6435
"Subversion repositories can be accessed (checked out) through many different "
6436
"methods --on local disk, or through various network protocols. A repository "
6437
"location, however, is always a URL. The table describes how different URL "
6438
"schemes map to the available access methods."
6439
msgstr ""
6440
6441
#: serverguide/C/vcs.xml:146(para)
6442
msgid "Schema"
6443
msgstr ""
6444
6445
#: serverguide/C/vcs.xml:147(para)
6446
msgid "Access Method"
6447
msgstr ""
6448
6449
#: serverguide/C/vcs.xml:152(para)
6450
msgid "file://"
6451
msgstr ""
6452
6453
#: serverguide/C/vcs.xml:153(para)
6454
msgid "direct repository access (on local disk)"
6455
msgstr ""
6456
6457
#: serverguide/C/vcs.xml:156(para)
6458
msgid "http://"
6459
msgstr ""
6460
6461
#: serverguide/C/vcs.xml:157(para)
6462
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6463
msgstr ""
6464
6465
#: serverguide/C/vcs.xml:160(para)
6466
msgid "https://"
6467
msgstr ""
6468
6469
#: serverguide/C/vcs.xml:161(para)
6470
msgid "Same as http://, but with SSL encryption"
6471
msgstr ""
6472
6473
#: serverguide/C/vcs.xml:164(para)
6474
msgid "svn://"
6475
msgstr ""
6476
6477
#: serverguide/C/vcs.xml:165(para)
6478
msgid "Access via custom protocol to an svnserve server"
6479
msgstr ""
6480
6481
#: serverguide/C/vcs.xml:168(para)
6482
msgid "svn+ssh://"
6483
msgstr ""
6484
6485
#: serverguide/C/vcs.xml:169(para)
6486
msgid "Same as svn://, but through an SSH tunnel"
6487
msgstr ""
6488
6489
#: serverguide/C/vcs.xml:175(para)
6490
msgid ""
6491
"In this section, we will see how to configure Subversion for all these "
6492
"access methods. Here, we cover the basics. For more advanced usage details, "
6493
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6494
msgstr ""
6495
6496
#: serverguide/C/vcs.xml:182(title)
6497
msgid "Direct repository access (file://)"
6498
msgstr ""
6499
6500
#: serverguide/C/vcs.xml:183(para)
6501
msgid ""
6502
"This is the simplest of all access methods. It does not require any "
6503
"Subversion server process to be running. This access method is used to "
6504
"access Subversion from the same machine. The syntax of the command, entered "
6505
"at a terminal prompt, is as follows:"
6506
msgstr ""
6507
6508
#: serverguide/C/vcs.xml:190(command)
6509
msgid "svn co file:///path/to/repos/project"
6510
msgstr ""
6511
6512
#: serverguide/C/vcs.xml:193(para)
6513
msgid "or"
6514
msgstr ""
6515
6516
#: serverguide/C/vcs.xml:196(command)
6517
msgid "svn co file://localhost/path/to/repos/project"
6518
msgstr ""
6519
6520
#: serverguide/C/vcs.xml:200(para)
6521
msgid ""
6522
"If you do not specify the hostname, there are three forward slashes (///) -- "
6523
"two for the protocol (file, in this case) plus the leading slash in the "
6524
"path. If you specify the hostname, you must use two forward slashes (//)."
6525
msgstr ""
6526
6527
#: serverguide/C/vcs.xml:202(para)
6528
msgid ""
6529
"The repository permissions depend on filesystem permissions. If the user has "
6530
"read/write permission, he can checkout from and commit to the repository."
6531
msgstr ""
6532
6533
#: serverguide/C/vcs.xml:205(title)
6534
msgid "Access via WebDAV protocol (http://)"
6535
msgstr ""
6536
6537
#: serverguide/C/vcs.xml:206(para)
6538
msgid ""
6539
"To access the Subversion repository via WebDAV protocol, you must configure "
6540
"your Apache 2 web server. Add the following snippet between the "
6541
"<emphasis><VirtualHost></emphasis> and "
6542
"<emphasis></VirtualHost></emphasis> elements in "
6543
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6544
"VirtualHost file:"
6545
msgstr ""
6546
6547
#: serverguide/C/vcs.xml:212(programlisting)
6548
#, no-wrap
6549
msgid ""
6550
"\n"
6551
" <Location /svn>\n"
6552
" DAV svn\n"
6553
" SVNPath /home/svn\n"
6554
" AuthType Basic\n"
6555
" AuthName \"Your repository name\"\n"
6556
" AuthUserFile /etc/subversion/passwd\n"
6557
" Require valid-user\n"
6558
" </Location> \n"
6559
msgstr ""
6560
6561
#: serverguide/C/vcs.xml:223(para)
6562
msgid ""
6563
"The above configuration snippet assumes that Subversion repositories are "
6564
"created under <filename>/home/svn/</filename> directory using "
6565
"<command>svnadmin</command> command. They can be accessible using "
6566
"<command>http://hostname/svn/repos_name</command> url."
6567
msgstr ""
6568
6569
#: serverguide/C/vcs.xml:229(para)
6570
msgid ""
6571
"To import or commit files to your Subversion repository over HTTP, the "
6572
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6573
"HTTP user is <command>www-data</command>. To change the ownership of the "
6574
"repository files enter the following command from terminal prompt:"
6575
msgstr ""
6576
6577
#: serverguide/C/vcs.xml:238(command)
6578
msgid "sudo chown -R www-data:www-data /path/to/repos"
6579
msgstr ""
6580
6581
#: serverguide/C/vcs.xml:241(para)
6582
msgid ""
6583
"By changing the ownership of repository as <command>www-data</command> you "
6584
"will not be able to import or commit files into the repository by running "
6585
"<command>svn import file:///</command> command as any user other than "
6586
"<command>www-data</command>."
6587
msgstr ""
6588
6589
#: serverguide/C/vcs.xml:250(para)
6590
msgid ""
6591
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6592
"that will contain user authentication details. To create a file issue the "
6593
"following command at a command prompt (which will create the file and add "
6594
"the first user):"
6595
msgstr ""
6596
6597
#: serverguide/C/vcs.xml:256(command)
6598
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6599
msgstr ""
6600
6601
#: serverguide/C/vcs.xml:259(para)
6602
msgid ""
6603
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6604
"option replaces the old file. Instead use this form:"
6605
msgstr ""
6606
6607
#: serverguide/C/vcs.xml:264(command)
6608
msgid "sudo htpasswd /etc/subversion/password user_name"
6609
msgstr ""
6610
6611
#: serverguide/C/vcs.xml:268(para)
6612
msgid ""
6613
"This command will prompt you to enter the password. Once you enter the "
6614
"password, the user is added. Now, to access the repository you can run the "
6615
"following command:"
6616
msgstr ""
6617
6618
#: serverguide/C/vcs.xml:269(command)
6619
msgid "svn co http://servername/svn"
6620
msgstr ""
6621
6622
#: serverguide/C/vcs.xml:271(para)
6623
msgid ""
6624
"The password is transmitted as plain text. If you are worried about password "
6625
"snooping, you are advised to use SSL encryption. For details, please refer "
6626
"next section."
6627
msgstr ""
6628
6629
#: serverguide/C/vcs.xml:277(title)
6630
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6631
msgstr ""
6632
6633
#: serverguide/C/vcs.xml:278(para)
6634
msgid ""
6635
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6636
"(https://) is similar to http:// except that you must install and configure "
6637
"the digital certificate in your Apache2 web server. To use SSL with "
6638
"Subversion add the above Apache2 configuration to "
6639
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6640
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6641
"configuration\"/>."
6642
msgstr ""
6643
6644
#: serverguide/C/vcs.xml:287(para)
6645
msgid ""
6646
"You can install a digital certificate issued by a signing authority. "
6647
"Alternatively, you can install your own self-signed certificate."
6648
msgstr ""
6649
6650
#: serverguide/C/vcs.xml:292(para)
6651
msgid ""
6652
"This step assumes you have installed and configured a digital certificate in "
6653
"your Apache 2 web server. Now, to access the Subversion repository, please "
6654
"refer to the above section! The access methods are exactly the same, except "
6655
"the protocol. You must use https:// to access the Subversion repository."
6656
msgstr ""
6657
6658
#: serverguide/C/vcs.xml:302(title)
6659
msgid "Access via custom protocol (svn://)"
6660
msgstr ""
6661
6662
#: serverguide/C/vcs.xml:303(para)
6663
msgid ""
6664
"Once the Subversion repository is created, you can configure the access "
6665
"control. You can edit the <filename> "
6666
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6667
"access control. For example, to set up authentication, you can uncomment the "
6668
"following lines in the configuration file:"
6669
msgstr ""
6670
6671
#: serverguide/C/vcs.xml:310(programlisting)
6672
#, no-wrap
6673
msgid ""
6674
"# [general]\n"
6675
"# password-db = passwd"
6676
msgstr ""
6677
6678
#: serverguide/C/vcs.xml:313(para)
6679
msgid ""
6680
"After uncommenting the above lines, you can maintain the user list in the "
6681
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6682
"directory and add the new user. The syntax is as follows:"
6683
msgstr ""
6684
6685
#: serverguide/C/vcs.xml:319(programlisting)
6686
#, no-wrap
6687
msgid "username = password"
6688
msgstr ""
6689
6690
#: serverguide/C/vcs.xml:320(para)
6691
msgid "For more details, please refer to the file."
6692
msgstr ""
6693
6694
#: serverguide/C/vcs.xml:324(para)
6695
msgid ""
6696
"Now, to access Subversion via the svn:// custom protocol, either from the "
6697
"same machine or a different machine, you can run svnserver using svnserve "
6698
"command. The syntax is as follows:"
6699
msgstr ""
6700
6701
#: serverguide/C/vcs.xml:329(programlisting)
6702
#, no-wrap
6703
msgid ""
6704
"$ svnserve -d --foreground -r /path/to/repos\n"
6705
"# -d -- daemon mode\n"
6706
"# --foreground -- run in foreground (useful for debugging)\n"
6707
"# -r -- root of directory to serve\n"
6708
"\n"
6709
"For more usage details, please refer to:\n"
6710
"$ svnserve --help"
6711
msgstr ""
6712
6713
#: serverguide/C/vcs.xml:337(para)
6714
msgid ""
6715
"Once you run this command, Subversion starts listening on default port "
6716
"(3690). To access the project repository, you must run the following command "
6717
"from a terminal prompt:"
6718
msgstr ""
6719
6720
#: serverguide/C/vcs.xml:340(command)
6721
msgid "svn co svn://hostname/project project --username user_name"
6722
msgstr ""
6723
6724
#: serverguide/C/vcs.xml:343(para)
6725
msgid ""
6726
"Based on server configuration, it prompts for password. Once you are "
6727
"authenticated, it checks out the code from Subversion repository. To "
6728
"synchronize the project repository with the local copy, you can run the "
6729
"<command>update</command> sub-command. The syntax of the command, entered at "
6730
"a terminal prompt, is as follows:"
6731
msgstr ""
6732
6733
#: serverguide/C/vcs.xml:351(command)
6734
msgid "cd project_dir ; svn update"
6735
msgstr ""
6736
6737
#: serverguide/C/vcs.xml:354(para)
6738
msgid ""
6739
"For more details about using each Subversion sub-command, you can refer to "
6740
"the manual. For example, to learn more about the co (checkout) command, "
6741
"please run the following command from a terminal prompt:"
6742
msgstr ""
6743
6744
#: serverguide/C/vcs.xml:358(command)
6745
msgid "svn co help"
6746
msgstr ""
6747
6748
#: serverguide/C/vcs.xml:362(title)
6749
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
6750
msgstr ""
6751
6752
#: serverguide/C/vcs.xml:363(para)
6753
msgid ""
6754
"The configuration and server process is same as in the svn:// method. For "
6755
"details, please refer to the above section. This step assumes you have "
6756
"followed the above step and started the Subversion server using "
6757
"<application>svnserve</application> command."
6758
msgstr ""
6759
6760
#: serverguide/C/vcs.xml:369(para)
6761
msgid ""
6762
"It is also assumed that the ssh server is running on that machine and that "
6763
"it is allowing incoming connections. To confirm, please try to login to that "
6764
"machine using ssh. If you can login, everything is perfect. If you cannot "
6765
"login, please address it before continuing further."
6766
msgstr ""
6767
6768
#: serverguide/C/vcs.xml:375(para)
6769
msgid ""
6770
"The svn+ssh:// protocol is used to access the Subversion repository using "
6771
"SSL encryption. The data transfer is encrypted using this method. To access "
6772
"the project repository (for example with a checkout), you must use the "
6773
"following command syntax:"
6774
msgstr ""
6775
6776
#: serverguide/C/vcs.xml:382(command)
6777
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
6778
msgstr ""
6779
6780
#: serverguide/C/vcs.xml:386(para)
6781
msgid ""
6782
"You must use the full path (/path/to/repos/project) to access the Subversion "
6783
"repository using this access method."
6784
msgstr ""
6785
6786
#: serverguide/C/vcs.xml:389(para)
6787
msgid ""
6788
"Based on server configuration, it prompts for password. You must enter the "
6789
"password you use to login via ssh. Once you are authenticated, it checks out "
6790
"the code from the Subversion repository."
6791
msgstr ""
6792
6793
#: serverguide/C/vcs.xml:399(title)
6794
msgid "CVS Server"
6795
msgstr ""
6796
6797
#: serverguide/C/vcs.xml:400(para)
6798
msgid ""
6799
"CVS is a version control system. You can use it to record the history of "
6800
"source files."
6801
msgstr ""
6802
6803
#: serverguide/C/vcs.xml:406(para)
6804
msgid ""
6805
"To install <application>CVS</application>, run the following command from a "
6806
"terminal prompt: <screen>\n"
6807
"<command>sudo apt-get install cvs</command>\n"
6808
"</screen> After you install <application>cvs</application>, you should "
6809
"install <application>xinetd</application> to start/stop the cvs server. At "
6810
"the prompt, enter the following command to install "
6811
"<application>xinetd</application>: <screen>\n"
6812
"<command>sudo apt-get install xinetd</command>\n"
6813
"</screen>"
6814
msgstr ""
6815
6816
#: serverguide/C/vcs.xml:439(programlisting)
6817
#, no-wrap
6818
msgid ""
6819
"\n"
6820
"service cvspserver\n"
6821
"{\n"
6822
" port = 2401\n"
6823
" socket_type = stream\n"
6824
" protocol = tcp\n"
6825
" user = root\n"
6826
" wait = no\n"
6827
" type = UNLISTED\n"
6828
" server = /usr/bin/cvs\n"
6829
" server_args = -f --allow-root /var/lib/cvs pserver\n"
6830
" disable = no\n"
6831
"}\n"
6832
msgstr ""
6833
6834
#: serverguide/C/vcs.xml:455(para)
6835
msgid ""
6836
"Be sure to edit the repository if you have changed the default repository "
6837
"(<application>/var/lib/cvs</application>) directory."
6838
msgstr ""
6839
6840
#: serverguide/C/vcs.xml:424(para)
6841
msgid ""
6842
"Once you install cvs, the repository will be automatically initialized. By "
6843
"default, the repository resides under the "
6844
"<application>/var/lib/cvs</application> directory. You can change this path "
6845
"by running following command: <screen>\n"
6846
"<command>cvs -d /your/new/cvs/repo init</command>\n"
6847
"</screen> Once the initial repository is set up, you can configure "
6848
"<application>xinetd</application> to start the CVS server. You can copy the "
6849
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
6850
"<placeholder-1/><placeholder-2/> Once you have configured "
6851
"<application>xinetd</application> you can start the cvs server by running "
6852
"following command: <screen>\n"
6853
"<command>sudo /etc/init.d/xinetd restart</command>\n"
6854
"</screen>"
6855
msgstr ""
6856
6857
#: serverguide/C/vcs.xml:468(para)
6858
msgid ""
6859
"You can confirm that the CVS server is running by issuing the following "
6860
"command:"
6861
msgstr ""
6862
6863
#: serverguide/C/vcs.xml:475(command)
6864
msgid "sudo netstat -tap | grep cvs"
6865
msgstr ""
6866
6867
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
6868
msgid ""
6869
"When you run this command, you should see the following line or something "
6870
"similar:"
6871
msgstr ""
6872
6873
#: serverguide/C/vcs.xml:484(programlisting)
6874
#, no-wrap
6875
msgid ""
6876
"\n"
6877
"tcp 0 0 *:cvspserver *:* LISTEN \n"
6878
msgstr ""
6879
6880
#: serverguide/C/vcs.xml:488(para)
6881
msgid ""
6882
"From here you can continue to add users, add new projects, and manage the "
6883
"CVS server."
6884
msgstr ""
6885
6886
#: serverguide/C/vcs.xml:493(para)
6887
msgid ""
6888
"CVS allows the user to add users independently of the underlying OS "
6889
"installation. Probably the easiest way is to use the Linux Users for CVS, "
6890
"although it has potential security issues. Please refer to the CVS manual "
6891
"for details."
6892
msgstr ""
6893
6894
#: serverguide/C/vcs.xml:503(title)
6895
msgid "Add Projects"
6896
msgstr ""
6897
6898
#: serverguide/C/vcs.xml:515(para)
6899
msgid ""
6900
"You can use the CVSROOT environment variable to store the CVS root "
6901
"directory. Once you export the CVSROOT environment variable, you can avoid "
6902
"using -d option in the above cvs command."
6903
msgstr ""
6904
6905
#: serverguide/C/vcs.xml:527(para)
6906
msgid ""
6907
"When you add a new project, the CVS user you use must have write access to "
6908
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
6909
"the <application>src</application> group has write access to the CVS "
6910
"repository. So, you can add the user to this group, and he can then add and "
6911
"manage projects in the CVS repository."
6912
msgstr ""
6913
6914
#: serverguide/C/vcs.xml:504(para)
6915
msgid ""
6916
"This section explains how to add new project to the CVS repository. Create "
6917
"the directory and add necessary document and source files to the directory. "
6918
"Now, run the following command to add this project to CVS repository: "
6919
"<screen>\n"
6920
"<command>cd your/project</command>\n"
6921
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
6922
"\"Importing my project to CVS repository\" . new_project start</command>\n"
6923
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
6924
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
6925
"purpose in this context, but since CVS requires them, they must be present. "
6926
"<placeholder-2/>"
6927
msgstr ""
6928
6929
#: serverguide/C/vcs.xml:540(ulink)
6930
msgid "Bazaar Home Page"
6931
msgstr ""
6932
6933
#: serverguide/C/vcs.xml:541(ulink)
6934
msgid "Launchpad"
6935
msgstr ""
6936
6937
#: serverguide/C/vcs.xml:542(ulink)
6938
msgid "Subversion Home Page"
6939
msgstr ""
6940
6941
#: serverguide/C/vcs.xml:543(ulink)
6942
msgid "Subversion Book"
6943
msgstr ""
6944
6945
#: serverguide/C/vcs.xml:545(ulink)
6946
msgid "CVS Manual"
6947
msgstr ""
6948
6949
#: serverguide/C/vcs.xml:546(ulink)
6950
msgid "Easy Bazaar Ubuntu Wiki page"
6951
msgstr ""
6952
6953
#: serverguide/C/vcs.xml:547(ulink)
6954
msgid "Ubuntu Wiki Subversion page"
6955
msgstr ""
6956
6957
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
6958
msgid "Credits and License"
6959
msgstr ""
6960
6961
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
6962
msgid ""
6963
"This document is maintained by the Ubuntu documentation team "
6964
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
6965
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
6966
msgstr ""
6967
6968
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
6969
msgid ""
6970
"This document is made available under the Creative Commons ShareAlike 2.5 "
6971
"License (CC-BY-SA)."
6972
msgstr ""
6973
6974
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
6975
msgid ""
6976
"You are free to modify, extend, and improve the Ubuntu documentation source "
6977
"code under the terms of this license. All derivative works must be released "
6978
"under this license."
6979
msgstr ""
6980
6981
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
6982
msgid ""
6983
"This documentation is distributed in the hope that it will be useful, but "
6984
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
6985
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
6986
msgstr ""
6987
6988
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
6989
msgid ""
6990
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
6991
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
6992
msgstr ""
6993
6994
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
6995
msgid "2008"
6996
msgstr ""
6997
6998
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
6999
msgid "Ubuntu Documentation Project"
7000
msgstr ""
7001
7002
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7003
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7004
msgstr ""
7005
7006
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7007
msgid "The Ubuntu Documentation Project"
7008
msgstr ""
7009
7010
#: serverguide/C/serverguide.xml:17(para)
7011
msgid ""
7012
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7013
"information on how to install and configure various server applications on "
7014
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7015
"guide for configuring and customizing your system."
7016
msgstr ""
7017
7018
#: serverguide/C/security.xml:13(title)
7019
msgid "Security"
7020
msgstr ""
7021
7022
#: serverguide/C/security.xml:14(para)
7023
msgid ""
7024
"Security should always be considered when installing, deploying, and using "
7025
"any type of computer system. Although a fresh installation of Ubuntu is "
7026
"relatively safe for immediate use on the Internet, it is important to have a "
7027
"balanced understanding of your systems security posture based on how it will "
7028
"be used after deployment."
7029
msgstr ""
7030
7031
#: serverguide/C/security.xml:17(para)
7032
msgid ""
7033
"This chapter provides an overview of security related topics as they pertain "
7034
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7035
"to protect your server and network from any number of potential security "
7036
"threats."
7037
msgstr ""
7038
7039
#: serverguide/C/security.xml:21(title)
7040
msgid "User Management"
7041
msgstr ""
7042
7043
#: serverguide/C/security.xml:22(para)
7044
msgid ""
7045
"User management is a critical part of maintaining a secure system. "
7046
"Ineffective user and privilege management often lead many systems into being "
7047
"compromised. Therefore, it is important that you understand how you can "
7048
"protect your server through simple and effective user account management "
7049
"techniques."
7050
msgstr ""
7051
7052
#: serverguide/C/security.xml:26(title)
7053
msgid "Where is root?"
7054
msgstr ""
7055
7056
#: serverguide/C/security.xml:27(para)
7057
msgid ""
7058
"Ubuntu developers made a conscientious decision to disable the "
7059
"administrative root account by default in all Ubuntu installations. This "
7060
"does not mean that the root account has been deleted or that it may not be "
7061
"accessed. It merely has been given a password which matches no possible "
7062
"encrypted value, therefore may not log in directly by itself."
7063
msgstr ""
7064
7065
#: serverguide/C/security.xml:30(para)
7066
msgid ""
7067
"Instead, users are encouraged to make use of a tool by the name of "
7068
"<application>sudo</application> to carry out system administrative duties. "
7069
"<application>Sudo</application> allows an authorized user to temporarily "
7070
"elevate their privileges using their own password instead of having to know "
7071
"the password belonging to the root account. This simple yet effective "
7072
"methodology provides accountability for all user actions, and gives the "
7073
"administrator granular control over which actions a user can perform with "
7074
"said privileges."
7075
msgstr ""
7076
7077
#: serverguide/C/security.xml:35(para)
7078
msgid ""
7079
"If for some reason you wish to enable the root account, simply give it a "
7080
"password:"
7081
msgstr ""
7082
7083
#: serverguide/C/security.xml:39(command)
7084
msgid "sudo passwd"
7085
msgstr ""
7086
7087
#: serverguide/C/security.xml:41(para)
7088
msgid ""
7089
"Sudo will prompt you for your password, and then ask you to supply a new "
7090
"password for root as shown below:"
7091
msgstr ""
7092
7093
#: serverguide/C/security.xml:44(userinput)
7094
#, no-wrap
7095
msgid "(enter your own password)"
7096
msgstr ""
7097
7098
#: serverguide/C/security.xml:45(userinput)
7099
#, no-wrap
7100
msgid "(enter a new password for root)"
7101
msgstr ""
7102
7103
#: serverguide/C/security.xml:46(userinput)
7104
#, no-wrap
7105
msgid "(repeat new password for root)"
7106
msgstr ""
7107
7108
#: serverguide/C/security.xml:44(computeroutput)
7109
#, no-wrap
7110
msgid ""
7111
"[sudo] password for username: <placeholder-1/>\n"
7112
"Enter new UNIX password: <placeholder-2/>\n"
7113
"Retype new UNIX password: <placeholder-3/>\n"
7114
"passwd: password updated successfully"
7115
msgstr ""
7116
7117
#: serverguide/C/security.xml:51(para)
7118
msgid "To disable the root account, use the following passwd syntax:"
7119
msgstr ""
7120
7121
#: serverguide/C/security.xml:55(command)
7122
msgid "sudo passwd -l root"
7123
msgstr ""
7124
7125
#: serverguide/C/security.xml:59(para)
7126
msgid ""
7127
"You should read more on <application>Sudo</application> by checking out it's "
7128
"man page:"
7129
msgstr ""
7130
7131
#: serverguide/C/security.xml:63(command)
7132
msgid "man sudo"
7133
msgstr ""
7134
7135
#: serverguide/C/security.xml:67(para)
7136
msgid ""
7137
"By default, the initial user created by the Ubuntu installer is a member of "
7138
"the group \"admin\" which is added to the file "
7139
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7140
"give any other account full root access through "
7141
"<application>sudo</application>, simply add them to the admin group."
7142
msgstr ""
7143
7144
#: serverguide/C/security.xml:73(title)
7145
msgid "Adding and Deleting Users"
7146
msgstr ""
7147
7148
#: serverguide/C/security.xml:74(para)
7149
msgid ""
7150
"The process for managing local users and groups is straight forward and "
7151
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7152
"other Debian based distributions, encourage the use of the \"adduser\" "
7153
"package for account management."
7154
msgstr ""
7155
7156
#: serverguide/C/security.xml:79(para)
7157
msgid ""
7158
"To add a user account, use the following syntax, and follow the prompts to "
7159
"give the account a password and identifiable characteristics such as a full "
7160
"name, phone number, etc."
7161
msgstr ""
7162
7163
#: serverguide/C/security.xml:83(command)
7164
msgid "sudo adduser username"
7165
msgstr ""
7166
7167
#: serverguide/C/security.xml:87(para)
7168
msgid ""
7169
"To delete a user account and its primary group, use the following syntax:"
7170
msgstr ""
7171
7172
#: serverguide/C/security.xml:91(command)
7173
msgid "sudo deluser username"
7174
msgstr ""
7175
7176
#: serverguide/C/security.xml:93(para)
7177
msgid ""
7178
"Deleting an account does not remove their respective home folder. It is up "
7179
"to you whether or not you wish to delete the folder manually or keep it "
7180
"according to your desired retention policies."
7181
msgstr ""
7182
7183
#: serverguide/C/security.xml:96(para)
7184
msgid ""
7185
"Remember, any user added later on with the same UID/GID as the previous "
7186
"owner will now have access to this folder if you have not taken the "
7187
"necessary precautions."
7188
msgstr ""
7189
7190
#: serverguide/C/security.xml:99(para)
7191
msgid ""
7192
"You may want to change these UID/GID values to something more appropriate, "
7193
"such as the root account, and perhaps even relocate the folder to avoid "
7194
"future conflicts:"
7195
msgstr ""
7196
7197
#: serverguide/C/security.xml:103(command)
7198
msgid "sudo chown -R root:root /home/username/"
7199
msgstr ""
7200
7201
#: serverguide/C/security.xml:104(command)
7202
msgid "sudo mkdir /home/archived_users/"
7203
msgstr ""
7204
7205
#: serverguide/C/security.xml:105(command)
7206
msgid "sudo mv /home/username /home/archived_users/"
7207
msgstr ""
7208
7209
#: serverguide/C/security.xml:109(para)
7210
msgid ""
7211
"To temporarily lock or unlock a user account, use the following syntax, "
7212
"respectively:"
7213
msgstr ""
7214
7215
#: serverguide/C/security.xml:113(command)
7216
msgid "sudo passwd -l username"
7217
msgstr ""
7218
7219
#: serverguide/C/security.xml:114(command)
7220
msgid "sudo passwd -u username"
7221
msgstr ""
7222
7223
#: serverguide/C/security.xml:118(para)
7224
msgid ""
7225
"To add or delete a personalized group, use the following syntax, "
7226
"respectively:"
7227
msgstr ""
7228
7229
#: serverguide/C/security.xml:122(command)
7230
msgid "sudo addgroup groupname"
7231
msgstr ""
7232
7233
#: serverguide/C/security.xml:123(command)
7234
msgid "sudo delgroup groupname"
7235
msgstr ""
7236
7237
#: serverguide/C/security.xml:127(para)
7238
msgid "To add a user to a group, use the following syntax:"
7239
msgstr ""
7240
7241
#: serverguide/C/security.xml:131(command)
7242
msgid "sudo adduser username groupname"
7243
msgstr ""
7244
7245
#: serverguide/C/security.xml:138(title)
7246
msgid "User Profile Security"
7247
msgstr ""
7248
7249
#: serverguide/C/security.xml:139(para)
7250
msgid ""
7251
"When a new user is created, the adduser utility creates a brand new home "
7252
"directory named <filename class=\"directory\">/home/username</filename>, "
7253
"respectively. The default profile is modeled after the contents found in the "
7254
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7255
"includes all profile basics."
7256
msgstr ""
7257
7258
#: serverguide/C/security.xml:142(para)
7259
msgid ""
7260
"If your server will be home to multiple users, you should pay close "
7261
"attention to the user home directory permissions to ensure confidentiality. "
7262
"By default, user home directories in Ubuntu are created with world "
7263
"read/execute permissions. This means that all users can browse and access "
7264
"the contents of other users home directories. This may not be suitable for "
7265
"your environment."
7266
msgstr ""
7267
7268
#: serverguide/C/security.xml:147(para)
7269
msgid ""
7270
"To verify your current users home directory permissions, use the following "
7271
"syntax:"
7272
msgstr ""
7273
7274
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7275
msgid "ls -ld /home/username"
7276
msgstr ""
7277
7278
#: serverguide/C/security.xml:153(para)
7279
msgid ""
7280
"The following output shows that the directory <filename "
7281
"class=\"directory\">/home/username</filename> has world readable permissions:"
7282
msgstr ""
7283
7284
#: serverguide/C/security.xml:156(computeroutput)
7285
#, no-wrap
7286
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7287
msgstr ""
7288
7289
#: serverguide/C/security.xml:160(para)
7290
msgid ""
7291
"You can remove the world readable permissions using the following syntax:"
7292
msgstr ""
7293
7294
#: serverguide/C/security.xml:164(command)
7295
msgid "sudo chmod 0750 /home/username"
7296
msgstr ""
7297
7298
#: serverguide/C/security.xml:167(para)
7299
msgid ""
7300
"Some people tend to use the recursive option (-R) indiscriminately which "
7301
"modifies all child folders and files, but this is not necessary, and may "
7302
"yield other undesirable results. The parent directory alone is sufficient "
7303
"for preventing unauthorized access to anything below the parent."
7304
msgstr ""
7305
7306
#: serverguide/C/security.xml:171(para)
7307
msgid ""
7308
"A much more efficient approach to the matter would be to modify the "
7309
"<application>adduser</application> global default permissions when creating "
7310
"user home folders. Simply edit the file "
7311
"<filename>/etc/adduser.conf</filename> and modify the "
7312
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7313
"new home directories will receive the correct permissions."
7314
msgstr ""
7315
7316
#: serverguide/C/security.xml:174(programlisting)
7317
#, no-wrap
7318
msgid ""
7319
"\n"
7320
"DIR_MODE=0750\n"
7321
msgstr ""
7322
7323
#: serverguide/C/security.xml:179(para)
7324
msgid ""
7325
"After correcting the directory permissions using any of the previously "
7326
"mentioned techniques, verify the results using the following syntax:"
7327
msgstr ""
7328
7329
#: serverguide/C/security.xml:185(para)
7330
msgid ""
7331
"The results below show that world readable permissions have been removed:"
7332
msgstr ""
7333
7334
#: serverguide/C/security.xml:188(computeroutput)
7335
#, no-wrap
7336
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7337
msgstr ""
7338
7339
#: serverguide/C/security.xml:195(title)
7340
msgid "Password Policy"
7341
msgstr ""
7342
7343
#: serverguide/C/security.xml:196(para)
7344
msgid ""
7345
"A strong password policy is one of the most important aspects of your "
7346
"security posture. Many successful security breaches involve simple brute "
7347
"force and dictionary attacks against weak passwords. If you intend to offer "
7348
"any form of remote access involving your local password system, make sure "
7349
"you adequately address minimum password complexity requirements, maximum "
7350
"password lifetimes, and frequent audits of your authentication systems."
7351
msgstr ""
7352
7353
#: serverguide/C/security.xml:200(title)
7354
msgid "Minimum Password Length"
7355
msgstr ""
7356
7357
#: serverguide/C/security.xml:201(para)
7358
msgid ""
7359
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7360
"well as some basic entropy checks. These values are controlled in the file "
7361
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7362
msgstr ""
7363
7364
#: serverguide/C/security.xml:204(programlisting)
7365
#, no-wrap
7366
msgid ""
7367
"\n"
7368
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7369
msgstr ""
7370
7371
#: serverguide/C/security.xml:207(para)
7372
msgid ""
7373
"If you would like to adjust the minimum length to 6 characters, change the "
7374
"appropriate variable to min=6. The modification is outlined below."
7375
msgstr ""
7376
7377
#: serverguide/C/security.xml:210(programlisting)
7378
#, no-wrap
7379
msgid ""
7380
"\n"
7381
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7382
msgstr ""
7383
7384
#: serverguide/C/security.xml:214(para)
7385
msgid ""
7386
"The <varname>max=8</varname> variable does not represent the maximum length "
7387
"of a password. It only means that complexity requirements will not be "
7388
"checked on passwords over 8 characters. You may want to look at the "
7389
"<application>libpam-cracklib</application> package for additional password "
7390
"entropy assistance."
7391
msgstr ""
7392
7393
#: serverguide/C/security.xml:220(title)
7394
msgid "Password Expiration"
7395
msgstr ""
7396
7397
#: serverguide/C/security.xml:221(para)
7398
msgid ""
7399
"When creating user accounts, you should make it a policy to have a minimum "
7400
"and maximum password age forcing users to change their passwords when they "
7401
"expire."
7402
msgstr ""
7403
7404
#: serverguide/C/security.xml:226(para)
7405
msgid ""
7406
"To easily view the current status of a user account, use the following "
7407
"syntax:"
7408
msgstr ""
7409
7410
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7411
msgid "sudo chage -l username"
7412
msgstr ""
7413
7414
#: serverguide/C/security.xml:232(para)
7415
msgid ""
7416
"The output below shows interesting facts about the user account, namely that "
7417
"there are no policies applied:"
7418
msgstr ""
7419
7420
#: serverguide/C/security.xml:235(computeroutput)
7421
#, no-wrap
7422
msgid ""
7423
"Last password change : Jan 20, 2008\n"
7424
"Password expires : never\n"
7425
"Password inactive : never\n"
7426
"Account expires : never\n"
7427
"Minimum number of days between password change : 0\n"
7428
"Maximum number of days between password change : 99999\n"
7429
"Number of days of warning before password expires : 7"
7430
msgstr ""
7431
7432
#: serverguide/C/security.xml:245(para)
7433
msgid ""
7434
"To set any of these values, simply use the following syntax, and follow the "
7435
"interactive prompts:"
7436
msgstr ""
7437
7438
#: serverguide/C/security.xml:249(command)
7439
msgid "sudo chage username"
7440
msgstr ""
7441
7442
#: serverguide/C/security.xml:251(para)
7443
msgid ""
7444
"The following is also an example of how you can manually change the explicit "
7445
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7446
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7447
"password expiration, and a warning time period (-W) of 14 days before "
7448
"password expiration."
7449
msgstr ""
7450
7451
#: serverguide/C/security.xml:255(command)
7452
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7453
msgstr ""
7454
7455
#: serverguide/C/security.xml:259(para)
7456
msgid "To verify changes, use the same syntax as mentioned previously:"
7457
msgstr ""
7458
7459
#: serverguide/C/security.xml:265(para)
7460
msgid ""
7461
"The output below shows the new policies that have been established for the "
7462
"account:"
7463
msgstr ""
7464
7465
#: serverguide/C/security.xml:268(computeroutput)
7466
#, no-wrap
7467
msgid ""
7468
"Last password change : Jan 20, 2008\n"
7469
"Password expires : Apr 19, 2008\n"
7470
"Password inactive : May 19, 2008\n"
7471
"Account expires : Jan 31, 2008\n"
7472
"Minimum number of days between password change : 5\n"
7473
"Maximum number of days between password change : 90\n"
7474
"Number of days of warning before password expires : 14"
7475
msgstr ""
7476
7477
#: serverguide/C/security.xml:284(title)
7478
msgid "Other Security Considerations"
7479
msgstr ""
7480
7481
#: serverguide/C/security.xml:285(para)
7482
msgid ""
7483
"Many applications use alternate authentication mechanisms that can be easily "
7484
"overlooked by even experienced system administrators. Therefore, it is "
7485
"important to understand and control how users authenticate and gain access "
7486
"to services and applications on your server."
7487
msgstr ""
7488
7489
#: serverguide/C/security.xml:290(title)
7490
msgid "SSH Access by Disabled Users"
7491
msgstr ""
7492
7493
#: serverguide/C/security.xml:291(para)
7494
msgid ""
7495
"Simply disabling/locking a user account will not prevent a user from logging "
7496
"into your server remotely if they have previously set up RSA public key "
7497
"authentication. They will still be able to gain shell access to the server, "
7498
"without the need for any password. Remember to check the users home "
7499
"directory for files that will allow for this type of authenticated SSH "
7500
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7501
msgstr ""
7502
7503
#: serverguide/C/security.xml:294(para)
7504
msgid ""
7505
"Remove or rename the directory <filename "
7506
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7507
"further SSH authentication capabilities."
7508
msgstr ""
7509
7510
#: serverguide/C/security.xml:297(para)
7511
msgid ""
7512
"Be sure to check for any established SSH connections by the disabled user, "
7513
"as it is possible they may have existing inbound or outbound connections. "
7514
"Kill any that are found."
7515
msgstr ""
7516
7517
#: serverguide/C/security.xml:300(para)
7518
msgid ""
7519
"Restrict SSH access to only user accounts that should have it. For example, "
7520
"you may create a group called \"sshlogin\" and add the group name as the "
7521
"value associated with the <varname>AllowGroups</varname> variable located in "
7522
"the file <filename>/etc/ssh/sshd_config</filename>."
7523
msgstr ""
7524
7525
#: serverguide/C/security.xml:303(programlisting)
7526
#, no-wrap
7527
msgid ""
7528
"\n"
7529
"AllowGroups sshlogin\n"
7530
msgstr ""
7531
7532
#: serverguide/C/security.xml:306(para)
7533
msgid ""
7534
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7535
"SSH service."
7536
msgstr ""
7537
7538
#: serverguide/C/security.xml:310(command)
7539
msgid "sudo adduser username sshlogin"
7540
msgstr ""
7541
7542
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7543
msgid "sudo /etc/init.d/ssh restart"
7544
msgstr ""
7545
7546
#: serverguide/C/security.xml:315(title)
7547
msgid "External User Database Authentication"
7548
msgstr ""
7549
7550
#: serverguide/C/security.xml:316(para)
7551
msgid ""
7552
"Most enterprise networks require centralized authentication and access "
7553
"controls for all system resources. If you have configured your server to "
7554
"authenticate users against external databases, be sure to disable the user "
7555
"accounts both externally and locally, this way you ensure that local "
7556
"fallback authentication is not possible."
7557
msgstr ""
7558
7559
#: serverguide/C/security.xml:325(title)
7560
msgid "Console Security"
7561
msgstr ""
7562
7563
#: serverguide/C/security.xml:326(para)
7564
msgid ""
7565
"As with any other security barrier you put in place to protect your server, "
7566
"it is pretty tough to defend against untold damage caused by someone with "
7567
"physical access to your environment, for example, theft of hard drives, "
7568
"power or service disruption and so on. Therefore, console security should be "
7569
"addressed merely as one component of your overall physical security "
7570
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7571
"very least slow down a determined one, so it is still advisable to perform "
7572
"basic precautions with regard to console security."
7573
msgstr ""
7574
7575
#: serverguide/C/security.xml:329(para)
7576
msgid ""
7577
"The following instructions will help defend your server against issues that "
7578
"could otherwise yield very serious consequences."
7579
msgstr ""
7580
7581
#: serverguide/C/security.xml:334(title)
7582
msgid "Disable Ctrl+Alt+Delete"
7583
msgstr ""
7584
7585
#: serverguide/C/security.xml:335(para)
7586
msgid ""
7587
"First and foremost, anyone that has physical access to the keyboard can "
7588
"simply use the "
7589
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7590
"eycombo> key combination to reboot the server without having to log on. "
7591
"Sure, someone could simply unplug the power source, but you should still "
7592
"prevent the use of this key combination on a production server. This forces "
7593
"an attacker to take more drastic measures to reboot the server, and will "
7594
"prevent accidental reboots at the same time."
7595
msgstr ""
7596
7597
#: serverguide/C/security.xml:340(para)
7598
msgid ""
7599
"To disable the reboot action taken by pressing the "
7600
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7601
"eycombo> key combination, comment out the following line in the file "
7602
"<filename>/etc/init/control-alt-delete.conf</filename>."
7603
msgstr ""
7604
7605
#: serverguide/C/security.xml:343(programlisting)
7606
#, no-wrap
7607
msgid ""
7608
"\n"
7609
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7610
msgstr ""
7611
7612
#: serverguide/C/security.xml:352(title)
7613
msgid "Firewall"
7614
msgstr ""
7615
7616
#: serverguide/C/security.xml:355(para)
7617
msgid ""
7618
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7619
"which is used to manipulate or decide the fate of network traffic headed "
7620
"into or through your server. All modern Linux firewall solutions use this "
7621
"system for packet filtering."
7622
msgstr ""
7623
7624
#: serverguide/C/security.xml:360(para)
7625
msgid ""
7626
"The kernel's packet filtering system would be of little use to "
7627
"administrators without a userspace interface to manage it. This is the "
7628
"purpose of iptables. When a packet reaches your server, it will be handed "
7629
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7630
"based on the rules supplied to it from userspace via iptables. Thus, "
7631
"iptables is all you need to manage your firewall if you're familiar with it, "
7632
"but many frontends are available to simplify the task."
7633
msgstr ""
7634
7635
#: serverguide/C/security.xml:370(title)
7636
msgid "ufw - Uncomplicated Firewall"
7637
msgstr ""
7638
7639
#: serverguide/C/security.xml:371(para)
7640
msgid ""
7641
"The default firewall configuration tool for Ubuntu is "
7642
"<application>ufw</application>. Developed to ease iptables firewall "
7643
"configuration, <application>ufw</application> provides a user friendly way "
7644
"to create an IPv4 or IPv6 host-based firewall."
7645
msgstr ""
7646
7647
#: serverguide/C/security.xml:375(para)
7648
msgid ""
7649
"<application>ufw</application> by default is initially disabled. From the "
7650
"<application>ufw</application> man page:"
7651
msgstr ""
7652
7653
#: serverguide/C/security.xml:379(quote)
7654
msgid ""
7655
"ufw is not intended to provide complete firewall functionality via its "
7656
"command interface, but instead provides an easy way to add or remove simple "
7657
"rules. It is currently mainly used for host-based firewalls."
7658
msgstr ""
7659
7660
#: serverguide/C/security.xml:383(para)
7661
msgid ""
7662
"The following are some examples of how to use <application>ufw</application>:"
7663
msgstr ""
7664
7665
#: serverguide/C/security.xml:388(para)
7666
msgid ""
7667
"First, <application>ufw</application> needs to be enabled. From a terminal "
7668
"prompt enter:"
7669
msgstr ""
7670
7671
#: serverguide/C/security.xml:392(command)
7672
msgid "sudo ufw enable"
7673
msgstr ""
7674
7675
#: serverguide/C/security.xml:396(para)
7676
msgid "To open a port (ssh in this example):"
7677
msgstr ""
7678
7679
#: serverguide/C/security.xml:400(command)
7680
msgid "sudo ufw allow 22"
7681
msgstr ""
7682
7683
#: serverguide/C/security.xml:404(para)
7684
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7685
msgstr ""
7686
7687
#: serverguide/C/security.xml:408(command)
7688
msgid "sudo ufw insert 1 allow 80"
7689
msgstr ""
7690
7691
#: serverguide/C/security.xml:412(para)
7692
msgid "Similarly, to close an opened port:"
7693
msgstr ""
7694
7695
#: serverguide/C/security.xml:416(command)
7696
msgid "sudo ufw deny 22"
7697
msgstr ""
7698
7699
#: serverguide/C/security.xml:420(para)
7700
msgid "To remove a rule, use delete followed by the rule:"
7701
msgstr ""
7702
7703
#: serverguide/C/security.xml:424(command)
7704
msgid "sudo ufw delete deny 22"
7705
msgstr ""
7706
7707
#: serverguide/C/security.xml:428(para)
7708
msgid ""
7709
"It is also possible to allow access from specific hosts or networks to a "
7710
"port. The following example allows ssh access from host 192.168.0.2 to any "
7711
"ip address on this host:"
7712
msgstr ""
7713
7714
#: serverguide/C/security.xml:433(command)
7715
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7716
msgstr ""
7717
7718
#: serverguide/C/security.xml:435(para)
7719
msgid ""
7720
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7721
"subnet."
7722
msgstr ""
7723
7724
#: serverguide/C/security.xml:441(para)
7725
msgid ""
7726
"Adding the <emphasis>--dry-run</emphasis> option to a "
7727
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
7728
"apply them. For example, the following is what would be applied if opening "
7729
"the HTTP port:"
7730
msgstr ""
7731
7732
#: serverguide/C/security.xml:447(command)
7733
msgid "sudo ufw --dry-run allow http"
7734
msgstr ""
7735
7736
#: serverguide/C/security.xml:451(computeroutput)
7737
#, no-wrap
7738
msgid ""
7739
"*filter\n"
7740
":ufw-user-input - [0:0]\n"
7741
":ufw-user-output - [0:0]\n"
7742
":ufw-user-forward - [0:0]\n"
7743
":ufw-user-limit - [0:0]\n"
7744
":ufw-user-limit-accept - [0:0]\n"
7745
"### RULES ###\n"
7746
"\n"
7747
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
7748
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
7749
"\n"
7750
"### END RULES ###\n"
7751
"-A ufw-user-input -j RETURN\n"
7752
"-A ufw-user-output -j RETURN\n"
7753
"-A ufw-user-forward -j RETURN\n"
7754
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
7755
"LIMIT]: \"\n"
7756
"-A ufw-user-limit -j REJECT\n"
7757
"-A ufw-user-limit-accept -j ACCEPT\n"
7758
"COMMIT\n"
7759
"Rules updated"
7760
msgstr ""
7761
7762
#: serverguide/C/security.xml:475(para)
7763
msgid "<application>ufw</application> can be disabled by:"
7764
msgstr ""
7765
7766
#: serverguide/C/security.xml:479(command)
7767
msgid "sudo ufw disable"
7768
msgstr ""
7769
7770
#: serverguide/C/security.xml:483(para)
7771
msgid "To see the firewall status, enter:"
7772
msgstr ""
7773
7774
#: serverguide/C/security.xml:487(command)
7775
msgid "sudo ufw status"
7776
msgstr ""
7777
7778
#: serverguide/C/security.xml:491(para)
7779
msgid "And for more verbose status information use:"
7780
msgstr ""
7781
7782
#: serverguide/C/security.xml:495(command)
7783
msgid "sudo ufw status verbose"
7784
msgstr ""
7785
7786
#: serverguide/C/security.xml:499(para)
7787
msgid "To view the <emphasis>numbered</emphasis> format:"
7788
msgstr ""
7789
7790
#: serverguide/C/security.xml:503(command)
7791
msgid "sudo ufw status numbered"
7792
msgstr ""
7793
7794
#: serverguide/C/security.xml:508(para)
7795
msgid ""
7796
"If the port you want to open or close is defined in "
7797
"<filename>/etc/services</filename>, you can use the port name instead of the "
7798
"number. In the above examples, replace <emphasis>22</emphasis> with "
7799
"<emphasis>ssh</emphasis>."
7800
msgstr ""
7801
7802
#: serverguide/C/security.xml:514(para)
7803
msgid ""
7804
"This is a quick introduction to using <application>ufw</application>. Please "
7805
"refer to the <application>ufw</application> man page for more information."
7806
msgstr ""
7807
7808
#: serverguide/C/security.xml:520(title)
7809
msgid "ufw Application Integration"
7810
msgstr ""
7811
7812
#: serverguide/C/security.xml:522(para)
7813
msgid ""
7814
"Applications that open ports can include an <application>ufw</application> "
7815
"profile, which details the ports needed for the application to function "
7816
"properly. The profiles are kept in <filename "
7817
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
7818
"the default ports have been changed."
7819
msgstr ""
7820
7821
#: serverguide/C/security.xml:531(para)
7822
msgid ""
7823
"To view which applications have installed a profile, enter the following in "
7824
"a terminal:"
7825
msgstr ""
7826
7827
#: serverguide/C/security.xml:536(command)
7828
msgid "sudo ufw app list"
7829
msgstr ""
7830
7831
#: serverguide/C/security.xml:542(para)
7832
msgid ""
7833
"Similar to allowing traffic to a port, using an application profile is "
7834
"accomplished by entering:"
7835
msgstr ""
7836
7837
#: serverguide/C/security.xml:547(command)
7838
msgid "sudo ufw allow Samba"
7839
msgstr ""
7840
7841
#: serverguide/C/security.xml:553(para)
7842
msgid "An extended syntax is available as well:"
7843
msgstr ""
7844
7845
#: serverguide/C/security.xml:558(command)
7846
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
7847
msgstr ""
7848
7849
#: serverguide/C/security.xml:561(para)
7850
msgid ""
7851
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
7852
"with the application profile you are using and the IP range for your network."
7853
msgstr ""
7854
7855
#: serverguide/C/security.xml:567(para)
7856
msgid ""
7857
"There is no need to specify the <emphasis>protocol</emphasis> for the "
7858
"application, because that information is detailed in the profile. Also, note "
7859
"that the <emphasis>app</emphasis> name replaces the "
7860
"<emphasis>port</emphasis> number."
7861
msgstr ""
7862
7863
#: serverguide/C/security.xml:576(para)
7864
msgid ""
7865
"To view details about which ports, protocols, etc are defined for an "
7866
"application, enter:"
7867
msgstr ""
7868
7869
#: serverguide/C/security.xml:581(command)
7870
msgid "sudo ufw app info Samba"
7871
msgstr ""
7872
7873
#: serverguide/C/security.xml:587(para)
7874
msgid ""
7875
"Not all applications that require opening a network port come with "
7876
"<application>ufw</application> profiles, but if you have profiled an "
7877
"application and want the file to be included with the package, please file a "
7878
"bug against the package in <ulink "
7879
"url=\"https://launchpad.net/\">Launchpad</ulink>."
7880
msgstr ""
7881
7882
#: serverguide/C/security.xml:596(title)
7883
msgid "IP Masquerading"
7884
msgstr ""
7885
7886
#: serverguide/C/security.xml:597(para)
7887
msgid ""
7888
"The purpose of IP Masquerading is to allow machines with private, non-"
7889
"routable IP addresses on your network to access the Internet through the "
7890
"machine doing the masquerading. Traffic from your private network destined "
7891
"for the Internet must be manipulated for replies to be routable back to the "
7892
"machine that made the request. To do this, the kernel must modify the "
7893
"<emphasis>source</emphasis> IP address of each packet so that replies will "
7894
"be routed back to it, rather than to the private IP address that made the "
7895
"request, which is impossible over the Internet. Linux uses "
7896
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
7897
"connections belong to which machines and reroute each return packet "
7898
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
7899
"having originated from your Ubuntu gateway machine. This process is referred "
7900
"to in Microsoft documentation as Internet Connection Sharing."
7901
msgstr ""
7902
7903
#: serverguide/C/security.xml:613(title)
7904
msgid "ufw Masquerading"
7905
msgstr ""
7906
7907
#: serverguide/C/security.xml:614(para)
7908
msgid ""
7909
"IP Masquerading can be achieved using custom <application>ufw</application> "
7910
"rules. This is possible because the current back-end for "
7911
"<application>ufw</application> is <application>iptables-"
7912
"restore</application> with the rules files located in "
7913
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
7914
"legacy iptables rules used without <application>ufw</application>, and rules "
7915
"that are more network gateway or bridge related."
7916
msgstr ""
7917
7918
#: serverguide/C/security.xml:620(para)
7919
msgid ""
7920
"The rules are split into two different files, rules that should be executed "
7921
"before <application>ufw</application> command line rules, and rules that are "
7922
"executed after <application>ufw</application> command line rules."
7923
msgstr ""
7924
7925
#: serverguide/C/security.xml:626(para)
7926
msgid ""
7927
"First, packet forwarding needs to be enabled in "
7928
"<application>ufw</application>. Two configuration files will need to be "
7929
"adjusted, in <filename>/etc/default/ufw</filename> change the "
7930
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
7931
msgstr ""
7932
7933
#: serverguide/C/security.xml:630(programlisting)
7934
#, no-wrap
7935
msgid ""
7936
"\n"
7937
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
7938
msgstr ""
7939
7940
#: serverguide/C/security.xml:633(para)
7941
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
7942
msgstr ""
7943
7944
#: serverguide/C/security.xml:636(programlisting)
7945
#, no-wrap
7946
msgid ""
7947
"\n"
7948
"net/ipv4/ip_forward=1\n"
7949
msgstr ""
7950
7951
#: serverguide/C/security.xml:639(para)
7952
msgid "Similarly, for IPv6 forwarding uncomment:"
7953
msgstr ""
7954
7955
#: serverguide/C/security.xml:642(programlisting)
7956
#, no-wrap
7957
msgid ""
7958
"\n"
7959
"net/ipv6/conf/default/forwarding=1\n"
7960
msgstr ""
7961
7962
#: serverguide/C/security.xml:647(para)
7963
msgid ""
7964
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
7965
"file. The default rules only configure the <emphasis>filter</emphasis> "
7966
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
7967
"need to be configured. Add the following to the top of the file just after "
7968
"the header comments:"
7969
msgstr ""
7970
7971
#: serverguide/C/security.xml:652(programlisting)
7972
#, no-wrap
7973
msgid ""
7974
"\n"
7975
"# nat Table rules\n"
7976
"*nat\n"
7977
":POSTROUTING ACCEPT [0:0]\n"
7978
"\n"
7979
"# Forward traffic from eth1 through eth0.\n"
7980
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
7981
"\n"
7982
"# don't delete the 'COMMIT' line or these nat table rules won't be "
7983
"processed\n"
7984
"COMMIT\n"
7985
msgstr ""
7986
7987
#: serverguide/C/security.xml:663(para)
7988
msgid ""
7989
"The comments are not strictly necessary, but it is considered good practice "
7990
"to document your configuration. Also, when modifying any of the "
7991
"<emphasis>rules</emphasis> files in <filename "
7992
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
7993
"line for each table modified:"
7994
msgstr ""
7995
7996
#: serverguide/C/security.xml:669(programlisting)
7997
#, no-wrap
7998
msgid ""
7999
"\n"
8000
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8001
"COMMIT\n"
8002
msgstr ""
8003
8004
#: serverguide/C/security.xml:674(para)
8005
msgid ""
8006
"For each <emphasis>Table</emphasis> a corresponding "
8007
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8008
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8009
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8010
"<emphasis>mangle</emphasis> tables."
8011
msgstr ""
8012
8013
#: serverguide/C/security.xml:681(para)
8014
msgid ""
8015
"In the above example replace <emphasis>eth0</emphasis>, "
8016
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8017
"appropriate interfaces and IP range for your network."
8018
msgstr ""
8019
8020
#: serverguide/C/security.xml:689(para)
8021
msgid ""
8022
"Finally, disable and re-enable <application>ufw</application> to apply the "
8023
"changes:"
8024
msgstr ""
8025
8026
#: serverguide/C/security.xml:693(command)
8027
msgid "sudo ufw disable && sudo ufw enable"
8028
msgstr ""
8029
8030
#: serverguide/C/security.xml:697(para)
8031
msgid ""
8032
"IP Masquerading should now be enabled. You can also add any additional "
8033
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8034
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8035
"forward</emphasis> chain."
8036
msgstr ""
8037
8038
#: serverguide/C/security.xml:704(title)
8039
msgid "iptables Masquerading"
8040
msgstr ""
8041
8042
#: serverguide/C/security.xml:705(para)
8043
msgid ""
8044
"<application>iptables</application> can also be used to enable masquerading."
8045
msgstr ""
8046
8047
#: serverguide/C/security.xml:710(para)
8048
msgid ""
8049
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8050
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8051
"uncomment the following line"
8052
msgstr ""
8053
8054
#: serverguide/C/security.xml:714(programlisting)
8055
#, no-wrap
8056
msgid ""
8057
"\n"
8058
"net.ipv4.ip_forward=1\n"
8059
msgstr ""
8060
8061
#: serverguide/C/security.xml:717(para)
8062
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8063
msgstr ""
8064
8065
#: serverguide/C/security.xml:720(programlisting)
8066
#, no-wrap
8067
msgid ""
8068
"\n"
8069
"net.ipv6.conf.default.forwarding=1\n"
8070
msgstr ""
8071
8072
#: serverguide/C/security.xml:725(para)
8073
msgid ""
8074
"Next, execute the <application>sysctl</application> command to enable the "
8075
"new settings in the configuration file:"
8076
msgstr ""
8077
8078
#: serverguide/C/security.xml:729(command)
8079
msgid "sudo sysctl -p"
8080
msgstr ""
8081
8082
#: serverguide/C/security.xml:733(para)
8083
msgid ""
8084
"IP Masquerading can now be accomplished with a single iptables rule, which "
8085
"may differ slightly based on your network configuration:"
8086
msgstr ""
8087
8088
#: serverguide/C/security.xml:736(screen)
8089
#, no-wrap
8090
msgid ""
8091
"\n"
8092
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8093
msgstr ""
8094
8095
#: serverguide/C/security.xml:739(para)
8096
msgid ""
8097
"The above command assumes that your private address space is 192.168.0.0/16 "
8098
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8099
"follows:"
8100
msgstr ""
8101
8102
#: serverguide/C/security.xml:744(para)
8103
msgid "-t nat -- the rule is to go into the nat table"
8104
msgstr ""
8105
8106
#: serverguide/C/security.xml:745(para)
8107
msgid ""
8108
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8109
msgstr ""
8110
8111
#: serverguide/C/security.xml:746(para)
8112
msgid ""
8113
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8114
"specified address space"
8115
msgstr ""
8116
8117
#: serverguide/C/security.xml:747(para)
8118
msgid ""
8119
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8120
"specified network device"
8121
msgstr ""
8122
8123
#: serverguide/C/security.xml:749(para)
8124
msgid ""
8125
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8126
"MASQUERADE target to be manipulated as described above"
8127
msgstr ""
8128
8129
#: serverguide/C/security.xml:757(para)
8130
msgid ""
8131
"Also, each chain in the filter table (the default table, and where most or "
8132
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8133
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8134
"you may have set the policies to DROP or REJECT, in which case your "
8135
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8136
"above rule to work:"
8137
msgstr ""
8138
8139
#: serverguide/C/security.xml:764(screen)
8140
#, no-wrap
8141
msgid ""
8142
"\n"
8143
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8144
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8145
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8146
msgstr ""
8147
8148
#: serverguide/C/security.xml:768(para)
8149
msgid ""
8150
"The above commands will allow all connections from your local network to the "
8151
"Internet and all traffic related to those connections to return to the "
8152
"machine that initiated them."
8153
msgstr ""
8154
8155
#: serverguide/C/security.xml:775(para)
8156
msgid ""
8157
"If you want masquerading to be enabled on reboot, which you probably do, "
8158
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8159
"example add the first command with no filtering:"
8160
msgstr ""
8161
8162
#: serverguide/C/security.xml:779(screen)
8163
#, no-wrap
8164
msgid ""
8165
"\n"
8166
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8167
msgstr ""
8168
8169
#: serverguide/C/security.xml:787(title)
8170
msgid "Logs"
8171
msgstr ""
8172
8173
#: serverguide/C/security.xml:788(para)
8174
msgid ""
8175
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8176
"firewall rules, and noticing unusual activity on your network. You must "
8177
"include logging rules in your firewall for them to be generated, though, and "
8178
"logging rules must come before any applicable terminating rule (a rule with "
8179
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8180
"REJECT)."
8181
msgstr ""
8182
8183
#: serverguide/C/security.xml:795(para)
8184
msgid ""
8185
"If you are using <application>ufw</application>, you can turn on logging by "
8186
"entering the following in a terminal:"
8187
msgstr ""
8188
8189
#: serverguide/C/security.xml:799(command)
8190
msgid "sudo ufw logging on"
8191
msgstr ""
8192
8193
#: serverguide/C/security.xml:801(para)
8194
msgid ""
8195
"To turn logging off in <application>ufw</application>, simply replace "
8196
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8197
"role=\"italic\">off</emphasis> in the above command."
8198
msgstr ""
8199
8200
#: serverguide/C/security.xml:804(para)
8201
msgid ""
8202
"If using <application>iptables</application> instead of "
8203
"<application>ufw</application>, enter:"
8204
msgstr ""
8205
8206
#: serverguide/C/security.xml:807(screen)
8207
#, no-wrap
8208
msgid ""
8209
"\n"
8210
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8211
"prefix \"NEW_HTTP_CONN: \"\n"
8212
msgstr ""
8213
8214
#: serverguide/C/security.xml:810(para)
8215
msgid ""
8216
"A request on port 80 from the local machine, then, would generate a log in "
8217
"dmesg that looks like this:"
8218
msgstr ""
8219
8220
#: serverguide/C/security.xml:815(programlisting)
8221
#, no-wrap
8222
msgid ""
8223
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8224
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8225
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8226
"WINDOW=32767 RES=0x00 SYN URGP=0"
8227
msgstr ""
8228
8229
#: serverguide/C/security.xml:817(para)
8230
msgid ""
8231
"The above log will also appear in <filename>/var/log/messages</filename>, "
8232
"<filename>/var/log/syslog</filename>, and "
8233
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8234
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8235
"and configuring <application>ulogd</application> and using the ULOG target "
8236
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8237
"server that listens for logging instructions from the kernel specifically "
8238
"for firewalls, and can log to any file you like, or even to a "
8239
"<application>PostgreSQL</application> or <application>MySQL</application> "
8240
"database. Making sense of your firewall logs can be simplified by using a "
8241
"log analyzing tool such as <application>fwanalog</application>, "
8242
"<application> fwlogwatch</application>, or <application>lire</application>."
8243
msgstr ""
8244
8245
#: serverguide/C/security.xml:832(title)
8246
msgid "Other Tools"
8247
msgstr ""
8248
8249
#: serverguide/C/security.xml:833(para)
8250
msgid ""
8251
"There are many tools available to help you construct a complete firewall "
8252
"without intimate knowledge of iptables. For the GUI-inclined:"
8253
msgstr ""
8254
8255
#: serverguide/C/security.xml:839(para)
8256
msgid ""
8257
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8258
"popular and easy to use."
8259
msgstr ""
8260
8261
#: serverguide/C/security.xml:844(para)
8262
msgid ""
8263
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8264
"and will look familiar to an administrator who has used a commercial "
8265
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8266
msgstr ""
8267
8268
#: serverguide/C/security.xml:850(para)
8269
msgid ""
8270
"If you prefer a command-line tool with plain-text configuration files:"
8271
msgstr ""
8272
8273
#: serverguide/C/security.xml:855(para)
8274
msgid ""
8275
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8276
"powerful solution to help you configure an advanced firewall for any network."
8277
msgstr ""
8278
8279
#: serverguide/C/security.xml:861(para)
8280
msgid ""
8281
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8282
"a working firewall \"out of the box\" with zero configuration, and will "
8283
"allow you to easily set up a more advanced firewall by editing simple, well-"
8284
"documented configuration files."
8285
msgstr ""
8286
8287
#: serverguide/C/security.xml:868(para)
8288
msgid ""
8289
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8290
"designed to be a desktop firewall application. It is made up of a server "
8291
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8292
"like many popular interactive firewall applications for Windows."
8293
msgstr ""
8294
8295
#: serverguide/C/security.xml:880(para)
8296
msgid ""
8297
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8298
"Firewall</ulink> wiki page contains information on the development of "
8299
"<application>ufw</application>."
8300
msgstr ""
8301
8302
#: serverguide/C/security.xml:886(para)
8303
msgid ""
8304
"Also, the <application>ufw</application> manual page contains some very "
8305
"useful information: <command>man ufw</command>."
8306
msgstr ""
8307
8308
#: serverguide/C/security.xml:891(para)
8309
msgid ""
8310
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8311
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8312
"on using <application>iptables</application>."
8313
msgstr ""
8314
8315
#: serverguide/C/security.xml:897(para)
8316
msgid ""
8317
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8318
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8319
msgstr ""
8320
8321
#: serverguide/C/security.xml:903(para)
8322
msgid ""
8323
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8324
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8325
msgstr ""
8326
8327
#: serverguide/C/security.xml:911(title)
8328
msgid "AppArmor"
8329
msgstr ""
8330
8331
#: serverguide/C/security.xml:912(para)
8332
msgid ""
8333
"<application>AppArmor</application> is a Linux Security Module "
8334
"implementation of name-based mandatory access controls. AppArmor confines "
8335
"individual programs to a set of listed files and posix 1003.1e draft "
8336
"capabilities."
8337
msgstr ""
8338
8339
#: serverguide/C/security.xml:916(para)
8340
msgid ""
8341
"<application>AppArmor</application> is installed and loaded by default. It "
8342
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8343
"and permissions the application requires. Some packages will install their "
8344
"own profiles, and additional profiles can be found in the "
8345
"<application>apparmor-profiles</application> package."
8346
msgstr ""
8347
8348
#: serverguide/C/security.xml:921(para)
8349
msgid ""
8350
"To install the <application>apparmor-profiles</application> package from a "
8351
"terminal prompt:"
8352
msgstr ""
8353
8354
#: serverguide/C/security.xml:927(para)
8355
msgid "AppArmor profiles have two modes of execution:"
8356
msgstr ""
8357
8358
#: serverguide/C/security.xml:932(para)
8359
msgid ""
8360
"Complaining/Learning: profile violations are permitted and logged. Useful "
8361
"for testing and developing new profiles."
8362
msgstr ""
8363
8364
#: serverguide/C/security.xml:937(para)
8365
msgid ""
8366
"Enforced/Confined: enforces profile policy as well as logging the violation."
8367
msgstr ""
8368
8369
#: serverguide/C/security.xml:943(title)
8370
msgid "Using AppArmor"
8371
msgstr ""
8372
8373
#: serverguide/C/security.xml:944(para)
8374
msgid ""
8375
"The <application>apparmor-utils</application> package contains command line "
8376
"utilities that you can use to change the <application>AppArmor</application> "
8377
"execution mode, find the status of a profile, create new profiles, etc."
8378
msgstr ""
8379
8380
#: serverguide/C/security.xml:950(para)
8381
msgid ""
8382
"<application>apparmor_status</application> is used to view the current "
8383
"status of AppArmor profiles."
8384
msgstr ""
8385
8386
#: serverguide/C/security.xml:954(command)
8387
msgid "sudo apparmor_status"
8388
msgstr ""
8389
8390
#: serverguide/C/security.xml:958(para)
8391
msgid ""
8392
"<application>aa-complain</application> places a profile into "
8393
"<emphasis>complain</emphasis> mode."
8394
msgstr ""
8395
8396
#: serverguide/C/security.xml:962(command)
8397
msgid "sudo aa-complain /path/to/bin"
8398
msgstr ""
8399
8400
#: serverguide/C/security.xml:966(para)
8401
msgid ""
8402
"<application>aa-enforce</application> places a profile into "
8403
"<emphasis>enforce</emphasis> mode."
8404
msgstr ""
8405
8406
#: serverguide/C/security.xml:970(command)
8407
msgid "sudo aa-enforce /path/to/bin"
8408
msgstr ""
8409
8410
#: serverguide/C/security.xml:974(para)
8411
msgid ""
8412
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8413
"profiles are located. It can be used to manipulate the "
8414
"<emphasis>mode</emphasis> of all profiles."
8415
msgstr ""
8416
8417
#: serverguide/C/security.xml:978(para)
8418
msgid "Enter the following to place all profiles into complain mode:"
8419
msgstr ""
8420
8421
#: serverguide/C/security.xml:982(command)
8422
msgid "sudo aa-complain /etc/apparmor.d/*"
8423
msgstr ""
8424
8425
#: serverguide/C/security.xml:984(para)
8426
msgid "To place all profiles in enforce mode:"
8427
msgstr ""
8428
8429
#: serverguide/C/security.xml:988(command)
8430
msgid "sudo aa-enforce /etc/apparmor.d/*"
8431
msgstr ""
8432
8433
#: serverguide/C/security.xml:992(para)
8434
msgid ""
8435
"<application>apparmor_parser</application> is used to load a profile into "
8436
"the kernel. It can also be used to reload a currently loaded profile using "
8437
"the <emphasis>-r</emphasis> option. To load a profile:"
8438
msgstr ""
8439
8440
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8441
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8442
msgstr ""
8443
8444
#: serverguide/C/security.xml:999(para)
8445
msgid "To reload a profile:"
8446
msgstr ""
8447
8448
#: serverguide/C/security.xml:1003(command)
8449
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8450
msgstr ""
8451
8452
#: serverguide/C/security.xml:1007(para)
8453
msgid ""
8454
"<filename>/etc/init.d/apparmor</filename> can be used to "
8455
"<emphasis>reload</emphasis> all profiles:"
8456
msgstr ""
8457
8458
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8459
msgid "sudo /etc/init.d/apparmor reload"
8460
msgstr ""
8461
8462
#: serverguide/C/security.xml:1015(para)
8463
msgid ""
8464
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8465
"with the <application>apparmor_parser -R</application> option to "
8466
"<emphasis>disable</emphasis> a profile."
8467
msgstr ""
8468
8469
#: serverguide/C/security.xml:1020(command)
8470
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8471
msgstr ""
8472
8473
#: serverguide/C/security.xml:1021(command)
8474
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8475
msgstr ""
8476
8477
#: serverguide/C/security.xml:1023(para)
8478
msgid ""
8479
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8480
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8481
"load the profile using the <emphasis>-a</emphasis> option."
8482
msgstr ""
8483
8484
#: serverguide/C/security.xml:1028(command)
8485
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8486
msgstr ""
8487
8488
#: serverguide/C/security.xml:1033(para)
8489
msgid ""
8490
"<application>AppArmor</application> can be disabled, and the kernel module "
8491
"unloaded by entering the following:"
8492
msgstr ""
8493
8494
#: serverguide/C/security.xml:1037(command)
8495
msgid "sudo /etc/init.d/apparmor stop"
8496
msgstr ""
8497
8498
#: serverguide/C/security.xml:1038(command)
8499
msgid "sudo update-rc.d -f apparmor remove"
8500
msgstr ""
8501
8502
#: serverguide/C/security.xml:1042(para)
8503
msgid "To re-enable <application>AppArmor</application> enter:"
8504
msgstr ""
8505
8506
#: serverguide/C/security.xml:1046(command)
8507
msgid "sudo /etc/init.d/apparmor start"
8508
msgstr ""
8509
8510
#: serverguide/C/security.xml:1047(command)
8511
msgid "sudo update-rc.d apparmor defaults"
8512
msgstr ""
8513
8514
#: serverguide/C/security.xml:1052(para)
8515
msgid ""
8516
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8517
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8518
"the actual executable file path. For example for the "
8519
"<application>ping</application> command use <filename>/bin/ping</filename>"
8520
msgstr ""
8521
8522
#: serverguide/C/security.xml:1060(title)
8523
msgid "Profiles"
8524
msgstr ""
8525
8526
#: serverguide/C/security.xml:1061(para)
8527
msgid ""
8528
"<application>AppArmor</application> profiles are simple text files located "
8529
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8530
"path to the executable they profile replacing the \"/\" with \".\". For "
8531
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8532
"profile for the <filename>/bin/ping</filename> command."
8533
msgstr ""
8534
8535
#: serverguide/C/security.xml:1067(para)
8536
msgid "There are two main type of rules used in profiles:"
8537
msgstr ""
8538
8539
#: serverguide/C/security.xml:1072(para)
8540
msgid ""
8541
"<emphasis>Path entries:</emphasis> which detail which files an application "
8542
"can access in the file system."
8543
msgstr ""
8544
8545
#: serverguide/C/security.xml:1077(para)
8546
msgid ""
8547
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8548
"confined process is allowed to use."
8549
msgstr ""
8550
8551
#: serverguide/C/security.xml:1082(para)
8552
msgid ""
8553
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8554
msgstr ""
8555
8556
#: serverguide/C/security.xml:1085(programlisting)
8557
#, no-wrap
8558
msgid ""
8559
"\n"
8560
"#include <tunables/global>\n"
8561
"/bin/ping flags=(complain) {\n"
8562
" #include <abstractions/base>\n"
8563
" #include <abstractions/consoles>\n"
8564
" #include <abstractions/nameservice>\n"
8565
"\n"
8566
" capability net_raw,\n"
8567
" capability setuid,\n"
8568
" network inet raw,\n"
8569
" \n"
8570
" /bin/ping mixr,\n"
8571
" /etc/modules.conf r,\n"
8572
"}\n"
8573
msgstr ""
8574
8575
#: serverguide/C/security.xml:1102(para)
8576
msgid ""
8577
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8578
"from other files. This allows statements pertaining to multiple applications "
8579
"to be placed in a common file."
8580
msgstr ""
8581
8582
#: serverguide/C/security.xml:1108(para)
8583
msgid ""
8584
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8585
"program, also setting the mode to <emphasis>complain</emphasis>."
8586
msgstr ""
8587
8588
#: serverguide/C/security.xml:1114(para)
8589
msgid ""
8590
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8591
"the CAP_NET_RAW Posix.1e capability."
8592
msgstr ""
8593
8594
#: serverguide/C/security.xml:1119(para)
8595
msgid ""
8596
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8597
"execute access to the file."
8598
msgstr ""
8599
8600
#: serverguide/C/security.xml:1125(para)
8601
msgid ""
8602
"After editing a profile file the profile must be reloaded. See <xref "
8603
"linkend=\"apparmor-usage\"/> for details."
8604
msgstr ""
8605
8606
#: serverguide/C/security.xml:1130(title)
8607
msgid "Creating a Profile"
8608
msgstr ""
8609
8610
#: serverguide/C/security.xml:1133(para)
8611
msgid ""
8612
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8613
"application should be exercised. The test plan should be divided into small "
8614
"test cases. Each test case should have a small description and list the "
8615
"steps to follow."
8616
msgstr ""
8617
8618
#: serverguide/C/security.xml:1137(para)
8619
msgid "Some standard test cases are:"
8620
msgstr ""
8621
8622
#: serverguide/C/security.xml:1142(para)
8623
msgid "Starting the program."
8624
msgstr ""
8625
8626
#: serverguide/C/security.xml:1147(para)
8627
msgid "Stopping the program."
8628
msgstr ""
8629
8630
#: serverguide/C/security.xml:1152(para)
8631
msgid "Reloading the program."
8632
msgstr ""
8633
8634
#: serverguide/C/security.xml:1157(para)
8635
msgid "Testing all the commands supported by the init script."
8636
msgstr ""
8637
8638
#: serverguide/C/security.xml:1164(para)
8639
msgid ""
8640
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8641
"genprof</application> to generate a new profile. From a terminal:"
8642
msgstr ""
8643
8644
#: serverguide/C/security.xml:1169(command)
8645
msgid "sudo aa-genprof executable"
8646
msgstr ""
8647
8648
#: serverguide/C/security.xml:1171(para)
8649
msgid "For example:"
8650
msgstr ""
8651
8652
#: serverguide/C/security.xml:1175(command)
8653
msgid "sudo aa-genprof slapd"
8654
msgstr ""
8655
8656
#: serverguide/C/security.xml:1179(para)
8657
msgid ""
8658
"To get your new profile included in the <application>apparmor-"
8659
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8660
"against the <ulink "
8661
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8662
"/ulink> package:"
8663
msgstr ""
8664
8665
#: serverguide/C/security.xml:1186(para)
8666
msgid "Include your test plan and test cases."
8667
msgstr ""
8668
8669
#: serverguide/C/security.xml:1191(para)
8670
msgid "Attach your new profile to the bug."
8671
msgstr ""
8672
8673
#: serverguide/C/security.xml:1200(title)
8674
msgid "Updating Profiles"
8675
msgstr ""
8676
8677
#: serverguide/C/security.xml:1201(para)
8678
msgid ""
8679
"When the program is misbehaving, audit messages are sent to the log files. "
8680
"The program <application>aa-logprof</application> can be used to scan log "
8681
"files for <application>AppArmor</application> audit messages, review them "
8682
"and update the profiles. From a terminal:"
8683
msgstr ""
8684
8685
#: serverguide/C/security.xml:1206(command)
8686
msgid "sudo aa-logprof"
8687
msgstr ""
8688
8689
#: serverguide/C/security.xml:1214(para)
8690
msgid ""
8691
"See the <ulink "
8692
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8693
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8694
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8695
"configuration options."
8696
msgstr ""
8697
8698
#: serverguide/C/security.xml:1221(para)
8699
msgid ""
8700
"For details using AppArmor with other Ubuntu releases see the <ulink "
8701
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8702
"Wiki</ulink> page."
8703
msgstr ""
8704
8705
#: serverguide/C/security.xml:1229(para)
8706
msgid ""
8707
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8708
"page is another introduction to AppArmor."
8709
msgstr ""
8710
8711
#: serverguide/C/security.xml:1236(para)
8712
msgid ""
8713
"A great place to ask for <application>AppArmor</application> assistance, and "
8714
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8715
"server</emphasis> IRC channel on <ulink "
8716
"url=\"http://freenode.net\">freenode</ulink>."
8717
msgstr ""
8718
8719
#: serverguide/C/security.xml:1246(title)
8720
msgid "Certificates"
8721
msgstr ""
8722
8723
#: serverguide/C/security.xml:1247(para)
8724
msgid ""
8725
"One of the most common forms of cryptography today is <emphasis>public-"
8726
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8727
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
8728
"system works by <emphasis>encrypting</emphasis> information using the public "
8729
"key. The information can then only be <emphasis>decrypted</emphasis> using "
8730
"the private key."
8731
msgstr ""
8732
8733
#: serverguide/C/security.xml:1253(para)
8734
msgid ""
8735
"A common use for public-key cryptography is encrypting application traffic "
8736
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
8737
"connection. For example, configuring Apache to provide "
8738
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
8739
"encrypt traffic using a protocol that does not itself provide encryption."
8740
msgstr ""
8741
8742
#: serverguide/C/security.xml:1258(para)
8743
msgid ""
8744
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
8745
"<emphasis>public key</emphasis> and other information about a server and the "
8746
"organization who is responsible for it. Certificates can be digitally signed "
8747
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
8748
"third party that has confirmed that the information contained in the "
8749
"certificate is accurate."
8750
msgstr ""
8751
8752
#: serverguide/C/security.xml:1265(title)
8753
msgid "Types of Certificates"
8754
msgstr ""
8755
8756
#: serverguide/C/security.xml:1266(para)
8757
msgid ""
8758
"To set up a secure server using public-key cryptography, in most cases, you "
8759
"send your certificate request (including your public key), proof of your "
8760
"company's identity, and payment to a CA. The CA verifies the certificate "
8761
"request and your identity, and then sends back a certificate for your secure "
8762
"server. Alternatively, you can create your own <emphasis>self-"
8763
"signed</emphasis> certificate."
8764
msgstr ""
8765
8766
#: serverguide/C/security.xml:1276(para)
8767
msgid ""
8768
"Note, that self-signed certificates should not be used in most production "
8769
"environments."
8770
msgstr ""
8771
8772
#: serverguide/C/security.xml:1280(para)
8773
msgid ""
8774
"Continuing the HTTPS example, a CA-signed certificate provides two important "
8775
"capabilities that a self-signed certificate does not:"
8776
msgstr ""
8777
8778
#: serverguide/C/security.xml:1287(para)
8779
msgid ""
8780
"Browsers (usually) automatically recognize the certificate and allow a "
8781
"secure connection to be made without prompting the user."
8782
msgstr ""
8783
8784
#: serverguide/C/security.xml:1294(para)
8785
msgid ""
8786
"When a CA issues a signed certificate, it is guaranteeing the identity of "
8787
"the organization that is providing the web pages to the browser."
8788
msgstr ""
8789
8790
#: serverguide/C/security.xml:1302(para)
8791
msgid ""
8792
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
8793
"certificates they automatically accept. If a browser encounters a "
8794
"certificate whose authorizing CA is not in the list, the browser asks the "
8795
"user to either accept or decline the connection. Also, other applications "
8796
"may generate an error message when using a self-singed certificate."
8797
msgstr ""
8798
8799
#: serverguide/C/security.xml:1310(para)
8800
msgid ""
8801
"The process of getting a certificate from a CA is fairly easy. A quick "
8802
"overview is as follows:"
8803
msgstr ""
8804
8805
#: serverguide/C/security.xml:1317(para)
8806
msgid "Create a private and public encryption key pair."
8807
msgstr ""
8808
8809
#: serverguide/C/security.xml:1320(para)
8810
msgid ""
8811
"Create a certificate request based on the public key. The certificate "
8812
"request contains information about your server and the company hosting it."
8813
msgstr ""
8814
8815
#: serverguide/C/security.xml:1325(para)
8816
msgid ""
8817
"Send the certificate request, along with documents proving your identity, to "
8818
"a CA. We cannot tell you which certificate authority to choose. Your "
8819
"decision may be based on your past experiences, or on the experiences of "
8820
"your friends or colleagues, or purely on monetary factors."
8821
msgstr ""
8822
8823
#: serverguide/C/security.xml:1331(para)
8824
msgid ""
8825
"Once you have decided upon a CA, you need to follow the instructions they "
8826
"provide on how to obtain a certificate from them."
8827
msgstr ""
8828
8829
#: serverguide/C/security.xml:1336(para)
8830
msgid ""
8831
"When the CA is satisfied that you are indeed who you claim to be, they send "
8832
"you a digital certificate."
8833
msgstr ""
8834
8835
#: serverguide/C/security.xml:1340(para)
8836
msgid ""
8837
"Install this certificate on your secure server, and configure the "
8838
"appropriate applications to use the certificate."
8839
msgstr ""
8840
8841
#: serverguide/C/security.xml:1349(title)
8842
msgid "Generating a Certificate Signing Request (CSR)"
8843
msgstr ""
8844
8845
#: serverguide/C/security.xml:1351(para)
8846
msgid ""
8847
"Whether you are getting a certificate from a CA or generating your own self-"
8848
"signed certificate, the first step is to generate a key."
8849
msgstr ""
8850
8851
#: serverguide/C/security.xml:1356(para)
8852
msgid ""
8853
"If the certificate will be used by service daemons, such as Apache, Postfix, "
8854
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
8855
"passphrase allows the services to start without manual intervention, usually "
8856
"the preferred way to start a daemon."
8857
msgstr ""
8858
8859
#: serverguide/C/security.xml:1362(para)
8860
msgid ""
8861
"This section will cover generating a key with a passphrase, and one without. "
8862
"The non-passphrase key will then be used to generate a certificate that can "
8863
"be used with various service daemons."
8864
msgstr ""
8865
8866
#: serverguide/C/security.xml:1368(para)
8867
msgid ""
8868
"Running your secure service without a passphrase is convenient because you "
8869
"will not need to enter the passphrase every time you start your secure "
8870
"service. But it is insecure and a compromise of the key means a compromise "
8871
"of the server as well."
8872
msgstr ""
8873
8874
#: serverguide/C/security.xml:1375(para)
8875
msgid ""
8876
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
8877
"Request (CSR) run the following command from a terminal prompt:"
8878
msgstr ""
8879
8880
#: serverguide/C/security.xml:1381(command)
8881
msgid "openssl genrsa -des3 -out server.key 1024"
8882
msgstr ""
8883
8884
#: serverguide/C/security.xml:1384(programlisting)
8885
#, no-wrap
8886
msgid ""
8887
"\n"
8888
"Generating RSA private key, 1024 bit long modulus\n"
8889
".....................++++++\n"
8890
".................++++++\n"
8891
"unable to write 'random state'\n"
8892
"e is 65537 (0x10001)\n"
8893
"Enter pass phrase for server.key:\n"
8894
msgstr ""
8895
8896
#: serverguide/C/security.xml:1393(para)
8897
msgid ""
8898
"You can now enter your passphrase. For best security, it should at least "
8899
"contain eight characters. The minimum length when specifying -des3 is four "
8900
"characters. It should include numbers and/or punctuation and not be a word "
8901
"in a dictionary. Also remember that your passphrase is case-sensitive."
8902
msgstr ""
8903
8904
#: serverguide/C/security.xml:1401(para)
8905
msgid ""
8906
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
8907
"server key is generated and stored in the <filename>server.key</filename> "
8908
"file."
8909
msgstr ""
8910
8911
#: serverguide/C/security.xml:1407(para)
8912
msgid ""
8913
"Now create the insecure key, the one without a passphrase, and shuffle the "
8914
"key names:"
8915
msgstr ""
8916
8917
#: serverguide/C/security.xml:1413(command)
8918
msgid "openssl rsa -in server.key -out server.key.insecure"
8919
msgstr ""
8920
8921
#: serverguide/C/security.xml:1414(command)
8922
msgid "mv server.key server.key.secure"
8923
msgstr ""
8924
8925
#: serverguide/C/security.xml:1415(command)
8926
msgid "mv server.key.insecure server.key"
8927
msgstr ""
8928
8929
#: serverguide/C/security.xml:1418(para)
8930
msgid ""
8931
"The insecure key is now named <filename>server.key</filename>, and you can "
8932
"use this file to generate the CSR without passphrase."
8933
msgstr ""
8934
8935
#: serverguide/C/security.xml:1423(para)
8936
msgid "To create the CSR, run the following command at a terminal prompt:"
8937
msgstr ""
8938
8939
#: serverguide/C/security.xml:1428(command)
8940
msgid "openssl req -new -key server.key -out server.csr"
8941
msgstr ""
8942
8943
#: serverguide/C/security.xml:1431(para)
8944
msgid ""
8945
"It will prompt you enter the passphrase. If you enter the correct "
8946
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
8947
"etc. Once you enter all these details, your CSR will be created and it will "
8948
"be stored in the <filename>server.csr</filename> file."
8949
msgstr ""
8950
8951
#: serverguide/C/security.xml:1439(para)
8952
msgid ""
8953
"You can now submit this CSR file to a CA for processing. The CA will use "
8954
"this CSR file and issue the certificate. On the other hand, you can create "
8955
"self-signed certificate using this CSR."
8956
msgstr ""
8957
8958
#: serverguide/C/security.xml:1447(title)
8959
msgid "Creating a Self-Signed Certificate"
8960
msgstr ""
8961
8962
#: serverguide/C/security.xml:1448(para)
8963
msgid ""
8964
"To create the self-signed certificate, run the following command at a "
8965
"terminal prompt:"
8966
msgstr ""
8967
8968
#: serverguide/C/security.xml:1453(command)
8969
msgid ""
8970
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
8971
"server.crt"
8972
msgstr ""
8973
8974
#: serverguide/C/security.xml:1456(para)
8975
msgid ""
8976
"The above command will prompt you to enter the passphrase. Once you enter "
8977
"the correct passphrase, your certificate will be created and it will be "
8978
"stored in the <filename>server.crt</filename> file."
8979
msgstr ""
8980
8981
#: serverguide/C/security.xml:1461(para)
8982
msgid ""
8983
"If your secure server is to be used in a production environment, you "
8984
"probably need a CA-signed certificate. It is not recommended to use self-"
8985
"signed certificate."
8986
msgstr ""
8987
8988
#: serverguide/C/security.xml:1469(title)
8989
msgid "Installing the Certificate"
8990
msgstr ""
8991
8992
#: serverguide/C/security.xml:1471(para)
8993
msgid ""
8994
"You can install the key file <filename>server.key</filename> and certificate "
8995
"file <filename>server.crt</filename>, or the certificate file issued by your "
8996
"CA, by running following commands at a terminal prompt:"
8997
msgstr ""
8998
8999
#: serverguide/C/security.xml:1477(command)
9000
msgid "sudo cp server.crt /etc/ssl/certs"
9001
msgstr ""
9002
9003
#: serverguide/C/security.xml:1478(command)
9004
msgid "sudo cp server.key /etc/ssl/private"
9005
msgstr ""
9006
9007
#: serverguide/C/security.xml:1480(para)
9008
msgid ""
9009
"Now simply configure any applications, with the ability to use public-key "
9010
"cryptography, to use the <emphasis>certificate</emphasis> and "
9011
"<emphasis>key</emphasis> files. For example, "
9012
"<application>Apache</application> can provide HTTPS, "
9013
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9014
msgstr ""
9015
9016
#: serverguide/C/security.xml:1487(title)
9017
msgid "Certification Authority"
9018
msgstr ""
9019
9020
#: serverguide/C/security.xml:1489(para)
9021
msgid ""
9022
"If the services on your network require more than a few self-signed "
9023
"certificates it may be worth the additional effort to setup your own "
9024
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9025
"certificates signed by your own CA, allows the various services using the "
9026
"certificates to easily trust other services using certificates issued from "
9027
"the same CA."
9028
msgstr ""
9029
9030
#: serverguide/C/security.xml:1499(para)
9031
msgid ""
9032
"First, create the directories to hold the CA certificate and related files:"
9033
msgstr ""
9034
9035
#: serverguide/C/security.xml:1504(command)
9036
msgid "sudo mkdir /etc/ssl/CA"
9037
msgstr ""
9038
9039
#: serverguide/C/security.xml:1505(command)
9040
msgid "sudo mkdir /etc/ssl/newcerts"
9041
msgstr ""
9042
9043
#: serverguide/C/security.xml:1511(para)
9044
msgid ""
9045
"The CA needs a few additional files to operate, one to keep track of the "
9046
"last serial number used by the CA, each certificate must have a unique "
9047
"serial number, and another file to record which certificates have been "
9048
"issued:"
9049
msgstr ""
9050
9051
#: serverguide/C/security.xml:1518(command)
9052
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9053
msgstr ""
9054
9055
#: serverguide/C/security.xml:1519(command)
9056
msgid "sudo touch /etc/ssl/CA/index.txt"
9057
msgstr ""
9058
9059
#: serverguide/C/security.xml:1525(para)
9060
msgid ""
9061
"The third file is a CA configuration file. Though not strictly necessary, it "
9062
"is very convenient when issuing multiple certificates. Edit "
9063
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9064
"]</emphasis> change:"
9065
msgstr ""
9066
9067
#: serverguide/C/security.xml:1531(programlisting)
9068
#, no-wrap
9069
msgid ""
9070
"\n"
9071
"dir = /etc/ssl/ # Where everything is kept\n"
9072
"database = $dir/CA/index.txt # database index file.\n"
9073
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9074
"serial = $dir/CA/serial # The current serial number\n"
9075
"private_key = $dir/private/cakey.pem# The private key\n"
9076
msgstr ""
9077
9078
#: serverguide/C/security.xml:1542(para)
9079
msgid "Next, create the self-singed root certificate:"
9080
msgstr ""
9081
9082
#: serverguide/C/security.xml:1547(command)
9083
msgid ""
9084
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9085
"days 3650"
9086
msgstr ""
9087
9088
#: serverguide/C/security.xml:1550(para)
9089
msgid "You will then be asked to enter the details about the certificate."
9090
msgstr ""
9091
9092
#: serverguide/C/security.xml:1557(para)
9093
msgid "Now install the root certificate and key:"
9094
msgstr ""
9095
9096
#: serverguide/C/security.xml:1562(command)
9097
msgid "sudo mv cakey.pem /etc/ssl/private/"
9098
msgstr ""
9099
9100
#: serverguide/C/security.xml:1563(command)
9101
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9102
msgstr ""
9103
9104
#: serverguide/C/security.xml:1569(para)
9105
msgid ""
9106
"You are now ready to start signing certificates. The first item needed is a "
9107
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9108
"for details. Once you have a CSR, enter the following to generate a "
9109
"certificate signed by the CA:"
9110
msgstr ""
9111
9112
#: serverguide/C/security.xml:1576(command)
9113
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9114
msgstr ""
9115
9116
#: serverguide/C/security.xml:1579(para)
9117
msgid ""
9118
"After entering the password for the CA key, you will be prompted to sign the "
9119
"certificate, and again to commit the new certificate. You should then see a "
9120
"somewhat large amount of output related to the certificate creation."
9121
msgstr ""
9122
9123
#: serverguide/C/security.xml:1588(para)
9124
msgid ""
9125
"There should now be a new file, "
9126
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9127
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9128
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9129
"file named after the hostname of the server where the certificate will be "
9130
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9131
"descriptive name."
9132
msgstr ""
9133
9134
#: serverguide/C/security.xml:1596(para)
9135
msgid ""
9136
"Subsequent certificates will be named <filename>02.pem</filename>, "
9137
"<filename>03.pem</filename>, etc."
9138
msgstr ""
9139
9140
#: serverguide/C/security.xml:1601(para)
9141
msgid ""
9142
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9143
"name."
9144
msgstr ""
9145
9146
#: serverguide/C/security.xml:1609(para)
9147
msgid ""
9148
"Finally, copy the new certificate to the host that needs it, and configure "
9149
"the appropriate applications to use it. The default location to install "
9150
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9151
"enables multiple services to use the same certificate without overly "
9152
"complicated file permissions."
9153
msgstr ""
9154
9155
#: serverguide/C/security.xml:1615(para)
9156
msgid ""
9157
"For applications that can be configured to use a CA certificate, you should "
9158
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9159
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9160
"server."
9161
msgstr ""
9162
9163
#: serverguide/C/security.xml:1629(para)
9164
msgid ""
9165
"For more detailed instructions on using cryptography see the <ulink "
9166
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9167
"Certificates HOWTO</ulink> by tlpd.org"
9168
msgstr ""
9169
9170
#: serverguide/C/security.xml:1635(para)
9171
msgid ""
9172
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9173
"of Certificate Authorities."
9174
msgstr ""
9175
9176
#: serverguide/C/security.xml:1640(para)
9177
msgid ""
9178
"The Wikipedia <ulink "
9179
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9180
"information regarding HTTPS."
9181
msgstr ""
9182
9183
#: serverguide/C/security.xml:1645(para)
9184
msgid ""
9185
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9186
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9187
msgstr ""
9188
9189
#: serverguide/C/security.xml:1650(para)
9190
msgid ""
9191
"Also, O'Reilly's <ulink "
9192
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9193
"OpenSSL</ulink> is a good in depth reference."
9194
msgstr ""
9195
9196
#: serverguide/C/security.xml:1659(title)
9197
msgid "eCryptfs"
9198
msgstr ""
9199
9200
#: serverguide/C/security.xml:1661(para)
9201
msgid ""
9202
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9203
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9204
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9205
"filesystem, partition type, etc."
9206
msgstr ""
9207
9208
#: serverguide/C/security.xml:1667(para)
9209
msgid ""
9210
"During installation there is an option to encrypt the <filename "
9211
"role=\"directory\">/home</filename> partition. This will automatically "
9212
"configure everything needed to encrypt and mount the partition."
9213
msgstr ""
9214
9215
#: serverguide/C/security.xml:1672(para)
9216
msgid ""
9217
"As an example, this section will cover configuring <filename "
9218
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9219
msgstr ""
9220
9221
#: serverguide/C/security.xml:1677(title)
9222
msgid "Using eCryptfs"
9223
msgstr ""
9224
9225
#: serverguide/C/security.xml:1679(para)
9226
msgid "First, install the necessary packages. From a terminal prompt enter:"
9227
msgstr ""
9228
9229
#: serverguide/C/security.xml:1684(command)
9230
msgid "sudo apt-get install ecryptfs-utils"
9231
msgstr ""
9232
9233
#: serverguide/C/security.xml:1687(para)
9234
msgid "Now mount the partition to be encrypted:"
9235
msgstr ""
9236
9237
#: serverguide/C/security.xml:1692(command)
9238
msgid "sudo mount -t ecryptfs /srv /srv"
9239
msgstr ""
9240
9241
#: serverguide/C/security.xml:1695(para)
9242
msgid ""
9243
"You will then be prompted for some details on how "
9244
"<application>ecryptfs</application> should encrypt the data."
9245
msgstr ""
9246
9247
#: serverguide/C/security.xml:1699(para)
9248
msgid ""
9249
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9250
"copy the <filename>/etc/default</filename> folder to "
9251
"<filename>/srv</filename>:"
9252
msgstr ""
9253
9254
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9255
msgid "sudo cp -r /etc/default /srv"
9256
msgstr ""
9257
9258
#: serverguide/C/security.xml:1708(para)
9259
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9260
msgstr ""
9261
9262
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9263
msgid "sudo umount /srv"
9264
msgstr ""
9265
9266
#: serverguide/C/security.xml:1714(command)
9267
msgid "cat /srv/default/cron"
9268
msgstr ""
9269
9270
#: serverguide/C/security.xml:1717(para)
9271
msgid ""
9272
"Remounting <filename>/srv</filename> using "
9273
"<application>ecryptfs</application> will make the data viewable once again."
9274
msgstr ""
9275
9276
#: serverguide/C/security.xml:1723(title)
9277
msgid "Automatically Mounting Encrypted Partitions"
9278
msgstr ""
9279
9280
#: serverguide/C/security.xml:1725(para)
9281
msgid ""
9282
"There are a couple of ways to automatically mount an "
9283
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9284
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9285
"mount options, along with a passphrase file residing on a USB key."
9286
msgstr ""
9287
9288
#: serverguide/C/security.xml:1731(para)
9289
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9290
msgstr ""
9291
9292
#: serverguide/C/security.xml:1735(programlisting)
9293
#, no-wrap
9294
msgid ""
9295
"\n"
9296
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9297
"ecryptfs_sig=5826dd62cf81c615\n"
9298
"ecryptfs_cipher=aes\n"
9299
"ecryptfs_key_bytes=16\n"
9300
"ecryptfs_passthrough=n\n"
9301
"ecryptfs_enable_filename_crypto=n\n"
9302
msgstr ""
9303
9304
#: serverguide/C/security.xml:1745(para)
9305
msgid ""
9306
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9307
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9308
msgstr ""
9309
9310
#: serverguide/C/security.xml:1750(para)
9311
msgid ""
9312
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9313
"file:"
9314
msgstr ""
9315
9316
#: serverguide/C/security.xml:1754(programlisting)
9317
#, no-wrap
9318
msgid ""
9319
"\n"
9320
"passphrase_passwd=[secrets]\n"
9321
msgstr ""
9322
9323
#: serverguide/C/security.xml:1758(para)
9324
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9325
msgstr ""
9326
9327
#: serverguide/C/security.xml:1762(programlisting)
9328
#, no-wrap
9329
msgid ""
9330
"\n"
9331
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9332
"/srv /srv ecryptfs defaults 0 0\n"
9333
msgstr ""
9334
9335
#: serverguide/C/security.xml:1767(para)
9336
msgid "Make sure the USB drive is mounted before the encrypted partition."
9337
msgstr ""
9338
9339
#: serverguide/C/security.xml:1771(para)
9340
msgid ""
9341
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9342
"ecryptfs."
9343
msgstr ""
9344
9345
#: serverguide/C/security.xml:1779(para)
9346
msgid ""
9347
"The <application>ecryptfs-utils</application> package includes several other "
9348
"useful utilities:"
9349
msgstr ""
9350
9351
#: serverguide/C/security.xml:1785(para)
9352
msgid ""
9353
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9354
"<filename>~/Private</filename> directory to contain encrypted information. "
9355
"This utility can be run by unprivileged users to keep data private from "
9356
"other users on the system."
9357
msgstr ""
9358
9359
#: serverguide/C/security.xml:1792(para)
9360
msgid ""
9361
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9362
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9363
"directory."
9364
msgstr ""
9365
9366
#: serverguide/C/security.xml:1798(para)
9367
msgid ""
9368
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9369
"kernel keyring."
9370
msgstr ""
9371
9372
#: serverguide/C/security.xml:1803(para)
9373
msgid ""
9374
"<emphasis>ecryptfs-manager:</emphasis> manages "
9375
"<application>eCryptfs</application> objects such as keys."
9376
msgstr ""
9377
9378
#: serverguide/C/security.xml:1808(para)
9379
msgid ""
9380
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9381
"<application>ecryptfs</application> meta information for a file."
9382
msgstr ""
9383
9384
#: serverguide/C/security.xml:1821(para)
9385
msgid ""
9386
"For more information on eCryptfs see the <ulink "
9387
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9388
msgstr ""
9389
9390
#: serverguide/C/security.xml:1826(para)
9391
msgid ""
9392
"There is also a <ulink "
9393
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9394
"article covering eCryptfs."
9395
msgstr ""
9396
9397
#: serverguide/C/security.xml:1831(para)
9398
msgid ""
9399
"Also, for more <application>ecryptfs</application> options see the <ulink "
9400
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9401
"yptfs man page</ulink>."
9402
msgstr ""
9403
9404
#: serverguide/C/security.xml:1837(para)
9405
msgid ""
9406
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9407
"Ubuntu Wiki</ulink> page also has more details."
9408
msgstr ""
9409
9410
#: serverguide/C/reporting-bugs.xml:13(title)
9411
msgid "Appendix"
9412
msgstr ""
9413
9414
#: serverguide/C/reporting-bugs.xml:16(title)
9415
msgid "Reporting Bugs in Ubuntu Server Edition"
9416
msgstr ""
9417
9418
#: serverguide/C/reporting-bugs.xml:18(para)
9419
msgid ""
9420
"While the Ubuntu Project attempts to release software with as few bugs as "
9421
"possible, they do occur. You can help fix these bugs by reporting ones that "
9422
"you find to the project. The Ubuntu Project uses <ulink "
9423
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9424
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9425
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9426
"account</ulink>."
9427
msgstr ""
9428
9429
#: serverguide/C/reporting-bugs.xml:30(title)
9430
msgid "Reporting Bugs With ubuntu-bug"
9431
msgstr ""
9432
9433
#: serverguide/C/reporting-bugs.xml:32(para)
9434
msgid ""
9435
"The preferred way to report a bug is with the <application>ubuntu-"
9436
"bug</application> command. The ubuntu-bug tool gathers information about the "
9437
"system useful to developers in diagnosing the reported problem that will "
9438
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9439
"need to be filed against a specific software package, thus the name of the "
9440
"package that the bug occurs in needs to be given to ubuntu-bug:"
9441
msgstr ""
9442
9443
#: serverguide/C/reporting-bugs.xml:43(command)
9444
msgid "ubuntu-bug PACKAGENAME"
9445
msgstr ""
9446
9447
#: serverguide/C/reporting-bugs.xml:46(para)
9448
msgid ""
9449
"For example, to file a bug against the openssh-server package, you would do:"
9450
msgstr ""
9451
9452
#: serverguide/C/reporting-bugs.xml:51(command)
9453
msgid "ubuntu-bug openssh-server"
9454
msgstr ""
9455
9456
#: serverguide/C/reporting-bugs.xml:54(para)
9457
msgid ""
9458
"You can specify either a binary package or the source package for ubuntu-"
9459
"bug. Again using openssh-server as an example, you could also generate the "
9460
"report against the source package for openssh-server, openssh:"
9461
msgstr ""
9462
9463
#: serverguide/C/reporting-bugs.xml:62(command)
9464
msgid "ubuntu-bug openssh"
9465
msgstr ""
9466
9467
#: serverguide/C/reporting-bugs.xml:66(para)
9468
msgid ""
9469
"See <xref linkend=\"package-management\"/> for more information about "
9470
"packages in Ubuntu."
9471
msgstr ""
9472
9473
#: serverguide/C/reporting-bugs.xml:72(para)
9474
msgid ""
9475
"The ubuntu-bug command will gather information about the system in question, "
9476
"possibly including information specific to the specified package, and then "
9477
"ask you what you would like to do with collected information:"
9478
msgstr ""
9479
9480
#: serverguide/C/reporting-bugs.xml:80(command)
9481
msgid "ubuntu-bug postgresql"
9482
msgstr ""
9483
9484
#: serverguide/C/reporting-bugs.xml:79(screen)
9485
#, no-wrap
9486
msgid ""
9487
"\n"
9488
"<placeholder-1/>\n"
9489
"\n"
9490
"*** Collecting problem information\n"
9491
"\n"
9492
"The collected information can be sent to the developers to improve the\n"
9493
"application. This might take a few minutes.\n"
9494
"..........\n"
9495
"\n"
9496
"*** Send problem report to the developers?\n"
9497
"\n"
9498
"After the problem report has been sent, please fill out the form in the\n"
9499
"automatically opened web browser.\n"
9500
"\n"
9501
"What would you like to do? Your options are:\n"
9502
" S: Send report (1.7 KiB)\n"
9503
" V: View report\n"
9504
" K: Keep report file for sending later or copying to somewhere else\n"
9505
" C: Cancel\n"
9506
"Please choose (S/V/K/C):\n"
9507
msgstr ""
9508
9509
#: serverguide/C/reporting-bugs.xml:101(para)
9510
msgid "The options available are:"
9511
msgstr ""
9512
9513
#: serverguide/C/reporting-bugs.xml:108(para)
9514
msgid ""
9515
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9516
"the collected information to Launchpad as part of the the process of filing "
9517
"a bug report. You will be given the opportunity to describe the situation "
9518
"that led up to the occurrance of the bug."
9519
msgstr ""
9520
9521
#: serverguide/C/reporting-bugs.xml:115(screen)
9522
#, no-wrap
9523
msgid ""
9524
"\n"
9525
"*** Uploading problem information\n"
9526
"\n"
9527
"The collected information is being sent to the bug tracking system.\n"
9528
"This might take a few minutes.\n"
9529
"91%\n"
9530
"\n"
9531
"*** To continue, you must visit the following URL:\n"
9532
"\n"
9533
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9534
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9535
"\n"
9536
"You can launch a browser now, or copy this URL into a browser on another\n"
9537
"computer.\n"
9538
"\n"
9539
"Choices:\n"
9540
" 1: Launch a browser now\n"
9541
" C: Cancel\n"
9542
"Please choose (1/C):\n"
9543
msgstr ""
9544
9545
#: serverguide/C/reporting-bugs.xml:135(para)
9546
msgid ""
9547
"If you choose to start a browser, by default the text based web browser "
9548
"<application>w3m</application> will be used to finish filing the bug report. "
9549
"Alternately, you can copy the given URL to a currently running web browser."
9550
msgstr ""
9551
9552
#: serverguide/C/reporting-bugs.xml:144(para)
9553
msgid ""
9554
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9555
"the collected information to be displayed to the terminal for review."
9556
msgstr ""
9557
9558
#: serverguide/C/reporting-bugs.xml:150(screen)
9559
#, no-wrap
9560
msgid ""
9561
"\n"
9562
"Package: postgresql 8.4.2-2\n"
9563
"PackageArchitecture: all\n"
9564
"Tags: lucid\n"
9565
"ProblemType: Bug\n"
9566
"ProcEnviron:\n"
9567
" LANG=en_US.UTF-8\n"
9568
" SHELL=/bin/bash\n"
9569
"Uname: Linux 2.6.32-16-server x86_64\n"
9570
"Dependencies:\n"
9571
" adduser 3.112ubuntu1\n"
9572
" base-files 5.0.0ubuntu10\n"
9573
" base-passwd 3.5.22\n"
9574
" coreutils 7.4-2ubuntu2\n"
9575
"...\n"
9576
msgstr ""
9577
9578
#: serverguide/C/reporting-bugs.xml:167(para)
9579
msgid ""
9580
"After viewing the report, you will be brought back to the same menu asking "
9581
"what you would like to do with the report."
9582
msgstr ""
9583
9584
#: serverguide/C/reporting-bugs.xml:174(para)
9585
msgid ""
9586
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9587
"File causes the gathered information to be written to a file. This file can "
9588
"then be used to later file a bug report or transferred to a different Ubuntu "
9589
"system for reporting. To submit the report file, simply give it as an "
9590
"argument to the ubuntu-bug command:"
9591
msgstr ""
9592
9593
#: serverguide/C/reporting-bugs.xml:189(userinput)
9594
#, no-wrap
9595
msgid "k"
9596
msgstr ""
9597
9598
#: serverguide/C/reporting-bugs.xml:192(command)
9599
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9600
msgstr ""
9601
9602
#: serverguide/C/reporting-bugs.xml:183(screen)
9603
#, no-wrap
9604
msgid ""
9605
"\n"
9606
"What would you like to do? Your options are:\n"
9607
" S: Send report (1.7 KiB)\n"
9608
" V: View report\n"
9609
" K: Keep report file for sending later or copying to somewhere else\n"
9610
" C: Cancel\n"
9611
"Please choose (S/V/K/C): <placeholder-1/>\n"
9612
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9613
"\n"
9614
"<placeholder-2/>\n"
9615
"\n"
9616
"*** Send problem report to the developers?\n"
9617
"...\n"
9618
msgstr ""
9619
9620
#: serverguide/C/reporting-bugs.xml:200(para)
9621
msgid ""
9622
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9623
"collected information to be discarded."
9624
msgstr ""
9625
9626
#: serverguide/C/reporting-bugs.xml:210(title)
9627
msgid "Reporting Application Crashes"
9628
msgstr ""
9629
9630
#: serverguide/C/reporting-bugs.xml:212(para)
9631
msgid ""
9632
"The software package that provides the ubuntu-bug utility, "
9633
"<application>apport</application>, can be configured to trigger when "
9634
"applications crash. This is disabled by default, as capturing a crash can be "
9635
"resource intensive depending on how much memory the application that crashed "
9636
"was using as apport captures and processes the core dump."
9637
msgstr ""
9638
9639
#: serverguide/C/reporting-bugs.xml:221(para)
9640
msgid ""
9641
"Configuring apport to capture information about crashing applications "
9642
"requires a couple of steps. First, <application>gdb</application> needs to "
9643
"be installed; it is not installed by default in Ubuntu Server Edition."
9644
msgstr ""
9645
9646
#: serverguide/C/reporting-bugs.xml:229(command)
9647
msgid "sudo apt-get install gdb"
9648
msgstr ""
9649
9650
#: serverguide/C/reporting-bugs.xml:232(para)
9651
msgid ""
9652
"See <xref linkend=\"package-management\"/> for more information about "
9653
"managing packages in Ubuntu."
9654
msgstr ""
9655
9656
#: serverguide/C/reporting-bugs.xml:237(para)
9657
msgid ""
9658
"Once you have ensured that gdb is installed, open the file "
9659
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9660
"<emphasis>enabled</emphasis> setting to be <emphasis "
9661
"role=\"bold\">1</emphasis> like so:"
9662
msgstr ""
9663
9664
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9665
#, no-wrap
9666
msgid ""
9667
"\n"
9668
"# set this to 0 to disable apport, or to 1 to enable it\n"
9669
"# you can temporarily override this with\n"
9670
"# sudo service apport start force_start=1\n"
9671
"enabled=<userinput>1</userinput>\n"
9672
"\n"
9673
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9674
"maxsize=209715200\n"
9675
msgstr ""
9676
9677
#: serverguide/C/reporting-bugs.xml:254(para)
9678
msgid ""
9679
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9680
"start the apport service:"
9681
msgstr ""
9682
9683
#: serverguide/C/reporting-bugs.xml:261(command)
9684
msgid "sudo start apport"
9685
msgstr ""
9686
9687
#: serverguide/C/reporting-bugs.xml:264(para)
9688
msgid ""
9689
"After an application crashes, use the <application>apport-cli</application> "
9690
"command to search for the existing saved crash report information:"
9691
msgstr ""
9692
9693
#: serverguide/C/reporting-bugs.xml:271(command)
9694
msgid "apport-cli"
9695
msgstr ""
9696
9697
#: serverguide/C/reporting-bugs.xml:270(screen)
9698
#, no-wrap
9699
msgid ""
9700
"\n"
9701
"<placeholder-1/>\n"
9702
"\n"
9703
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
9704
"\n"
9705
"If you were not doing anything confidential (entering passwords or other\n"
9706
"private information), you can help to improve the application by\n"
9707
"reporting\n"
9708
"the problem.\n"
9709
"\n"
9710
"What would you like to do? Your options are:\n"
9711
" R: Report Problem...\n"
9712
" I: Cancel and ignore future crashes of this program version\n"
9713
" C: Cancel\n"
9714
"Please choose (R/I/C):\n"
9715
msgstr ""
9716
9717
#: serverguide/C/reporting-bugs.xml:287(para)
9718
msgid ""
9719
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
9720
"steps as when using ubuntu-bug. One important difference is that a crash "
9721
"report will be marked as private when filed on Launchpad, meaning that it "
9722
"will be visible to only a limited set of bug triagers. These triagers will "
9723
"review the gathered data for private information before making the bug "
9724
"report publicly visible."
9725
msgstr ""
9726
9727
#: serverguide/C/reporting-bugs.xml:307(para)
9728
msgid ""
9729
"See the <ulink "
9730
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
9731
"Bugs</ulink> Ubuntu wiki page."
9732
msgstr ""
9733
9734
#: serverguide/C/reporting-bugs.xml:313(para)
9735
msgid ""
9736
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
9737
"has some useful information. Though some of it pertains to using a GUI."
9738
msgstr ""
9739
9740
#: serverguide/C/remote-administration.xml:13(title)
9741
msgid "Remote Administration"
9742
msgstr ""
9743
9744
#: serverguide/C/remote-administration.xml:14(para)
9745
msgid ""
9746
"There are many ways to remotely administer a Linux server. This chapter will "
9747
"cover one of the most popular <application>SSH</application> as well as "
9748
"<application>eBox</application>, a web based administration framework."
9749
msgstr ""
9750
9751
#: serverguide/C/remote-administration.xml:23(para)
9752
msgid ""
9753
"This section of the Ubuntu Server Guide introduces a powerful collection of "
9754
"tools for the remote control of networked computers and transfer of data "
9755
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
9756
"also learn about some of the configuration settings possible with the "
9757
"OpenSSH server application and how to change them on your Ubuntu system."
9758
msgstr ""
9759
9760
#: serverguide/C/remote-administration.xml:30(para)
9761
msgid ""
9762
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
9763
"family of tools for remotely controlling a computer or transferring files "
9764
"between computers. Traditional tools used to accomplish these functions, "
9765
"such as <application>telnet</application> or <application>rcp</application>, "
9766
"are insecure and transmit the user's password in cleartext when used. "
9767
"OpenSSH provides a server daemon and client tools to facilitate secure, "
9768
"encrypted remote control and file transfer operations, effectively replacing "
9769
"the legacy tools."
9770
msgstr ""
9771
9772
#: serverguide/C/remote-administration.xml:39(para)
9773
msgid ""
9774
"The OpenSSH server component, <application>sshd</application>, listens "
9775
"continuously for client connections from any of the client tools. When a "
9776
"connection request occurs, <application>sshd</application> sets up the "
9777
"correct connection depending on the type of client tool connecting. For "
9778
"example, if the remote computer is connecting with the "
9779
"<application>ssh</application> client application, the OpenSSH server sets "
9780
"up a remote control session after authentication. If a remote user connects "
9781
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
9782
"daemon initiates a secure copy of files between the server and client after "
9783
"authentication. OpenSSH can use many authentication methods, including plain "
9784
"password, public key, and <application>Kerberos</application> tickets."
9785
msgstr ""
9786
9787
#: serverguide/C/remote-administration.xml:53(para)
9788
msgid ""
9789
"Installation of the OpenSSH client and server applications is simple. To "
9790
"install the OpenSSH client applications on your Ubuntu system, use this "
9791
"command at a terminal prompt:"
9792
msgstr ""
9793
9794
#: serverguide/C/remote-administration.xml:59(command)
9795
msgid "sudo apt-get install openssh-client"
9796
msgstr ""
9797
9798
#: serverguide/C/remote-administration.xml:61(para)
9799
msgid ""
9800
"To install the OpenSSH server application, and related support files, use "
9801
"this command at a terminal prompt:"
9802
msgstr ""
9803
9804
#: serverguide/C/remote-administration.xml:66(command)
9805
msgid "sudo apt-get install openssh-server"
9806
msgstr ""
9807
9808
#: serverguide/C/remote-administration.xml:68(para)
9809
msgid ""
9810
"The <application>openssh-server</application> package can also be selected "
9811
"to install during the Server Edition installation process."
9812
msgstr ""
9813
9814
#: serverguide/C/remote-administration.xml:75(para)
9815
msgid ""
9816
"You may configure the default behavior of the OpenSSH server application, "
9817
"<application>sshd</application>, by editing the file "
9818
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
9819
"configuration directives used in this file, you may view the appropriate "
9820
"manual page with the following command, issued at a terminal prompt:"
9821
msgstr ""
9822
9823
#: serverguide/C/remote-administration.xml:83(command)
9824
msgid "man sshd_config"
9825
msgstr ""
9826
9827
#: serverguide/C/remote-administration.xml:85(para)
9828
msgid ""
9829
"There are many directives in the <application>sshd</application> "
9830
"configuration file controlling such things as communication settings and "
9831
"authentication modes. The following are examples of configuration directives "
9832
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
9833
"file."
9834
msgstr ""
9835
9836
#: serverguide/C/remote-administration.xml:92(para)
9837
msgid ""
9838
"Prior to editing the configuration file, you should make a copy of the "
9839
"original file and protect it from writing so you will have the original "
9840
"settings as a reference and to reuse as necessary."
9841
msgstr ""
9842
9843
#: serverguide/C/remote-administration.xml:96(para)
9844
msgid ""
9845
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
9846
"writing with the following commands, issued at a terminal prompt:"
9847
msgstr ""
9848
9849
#: serverguide/C/remote-administration.xml:101(command)
9850
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
9851
msgstr ""
9852
9853
#: serverguide/C/remote-administration.xml:102(command)
9854
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
9855
msgstr ""
9856
9857
#: serverguide/C/remote-administration.xml:104(para)
9858
msgid ""
9859
"The following are examples of configuration directives you may change:"
9860
msgstr ""
9861
9862
#: serverguide/C/remote-administration.xml:109(para)
9863
msgid ""
9864
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
9865
"port 22, change the Port directive as such:"
9866
msgstr ""
9867
9868
#: serverguide/C/remote-administration.xml:113(para)
9869
msgid "Port 2222"
9870
msgstr ""
9871
9872
#: serverguide/C/remote-administration.xml:118(para)
9873
msgid ""
9874
"To have <application>sshd</application> allow public key-based login "
9875
"credentials, simply add or modify the line:"
9876
msgstr ""
9877
9878
#: serverguide/C/remote-administration.xml:122(para)
9879
msgid "PubkeyAuthentication yes"
9880
msgstr ""
9881
9882
#: serverguide/C/remote-administration.xml:125(para)
9883
msgid ""
9884
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
9885
"present, ensure the line is not commented out."
9886
msgstr ""
9887
9888
#: serverguide/C/remote-administration.xml:131(para)
9889
msgid ""
9890
"To make your OpenSSH server display the contents of the "
9891
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
9892
"or modify the line:"
9893
msgstr ""
9894
9895
#: serverguide/C/remote-administration.xml:136(para)
9896
msgid "Banner /etc/issue.net"
9897
msgstr ""
9898
9899
#: serverguide/C/remote-administration.xml:139(para)
9900
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
9901
msgstr ""
9902
9903
#: serverguide/C/remote-administration.xml:144(para)
9904
msgid ""
9905
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
9906
"save the file, and restart the <application>sshd</application> server "
9907
"application to effect the changes using the following command at a terminal "
9908
"prompt:"
9909
msgstr ""
9910
9911
#: serverguide/C/remote-administration.xml:153(para)
9912
msgid ""
9913
"Many other configuration directives for <application>sshd</application> are "
9914
"available for changing the server application's behavior to fit your needs. "
9915
"Be advised, however, if your only method of access to a server is "
9916
"<application>ssh</application>, and you make a mistake in configuring "
9917
"<application>sshd</application> via the "
9918
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
9919
"out of the server upon restarting it, or that the "
9920
"<application>sshd</application> server refuses to start due to an incorrect "
9921
"configuration directive, so be extra careful when editing this file on a "
9922
"remote server."
9923
msgstr ""
9924
9925
#: serverguide/C/remote-administration.xml:168(title)
9926
msgid "SSH Keys"
9927
msgstr ""
9928
9929
#: serverguide/C/remote-administration.xml:169(para)
9930
msgid ""
9931
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
9932
"the need of a password. SSH key authentication uses two keys a "
9933
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
9934
msgstr ""
9935
9936
#: serverguide/C/remote-administration.xml:173(para)
9937
msgid "To generate the keys, from a terminal prompt enter:"
9938
msgstr ""
9939
9940
#: serverguide/C/remote-administration.xml:177(command)
9941
msgid "ssh-keygen -t dsa"
9942
msgstr ""
9943
9944
#: serverguide/C/remote-administration.xml:179(para)
9945
msgid ""
9946
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
9947
"identity of the user. During the process you will be prompted for a "
9948
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
9949
"key."
9950
msgstr ""
9951
9952
#: serverguide/C/remote-administration.xml:183(para)
9953
msgid ""
9954
"By default the <emphasis>public</emphasis> key is saved in the file "
9955
"<filename>~/.ssh/id_dsa.pub</filename>, while "
9956
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
9957
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
9958
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
9959
msgstr ""
9960
9961
#: serverguide/C/remote-administration.xml:189(command)
9962
msgid "ssh-copy-id username@remotehost"
9963
msgstr ""
9964
9965
#: serverguide/C/remote-administration.xml:191(para)
9966
msgid ""
9967
"Finally, double check the permissions on the "
9968
"<filename>authorized_keys</filename> file, only the authenticated user "
9969
"should have read and write permissions. If the permissions are not correct "
9970
"change them by:"
9971
msgstr ""
9972
9973
#: serverguide/C/remote-administration.xml:196(command)
9974
msgid "chmod 600 .ssh/authorized_keys"
9975
msgstr ""
9976
9977
#: serverguide/C/remote-administration.xml:198(para)
9978
msgid ""
9979
"You should now be able to SSH to the host without being prompted for a "
9980
"password."
9981
msgstr ""
9982
9983
#: serverguide/C/remote-administration.xml:207(para)
9984
msgid ""
9985
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
9986
"page."
9987
msgstr ""
9988
9989
#: serverguide/C/remote-administration.xml:213(ulink)
9990
msgid "OpenSSH Website"
9991
msgstr ""
9992
9993
#: serverguide/C/remote-administration.xml:218(ulink)
9994
msgid "Advanced OpenSSH Wiki Page"
9995
msgstr ""
9996
9997
#: serverguide/C/remote-administration.xml:226(title)
9998
msgid "eBox"
9999
msgstr ""
10000
10001
#: serverguide/C/remote-administration.xml:227(para)
10002
msgid ""
10003
"<application>eBox</application> is a web framework used to manage server "
10004
"application configuration. The modular design of eBox allows you to pick and "
10005
"choose which services you want to configure using eBox."
10006
msgstr ""
10007
10008
#: serverguide/C/remote-administration.xml:234(para)
10009
msgid ""
10010
"The different <application>eBox</application> modules are split into "
10011
"different packages, allowing you to only install those necessary. One way to "
10012
"view the available packages is to enter the following from a terminal:"
10013
msgstr ""
10014
10015
#: serverguide/C/remote-administration.xml:240(command)
10016
msgid "apt-cache rdepends ebox | uniq"
10017
msgstr ""
10018
10019
#: serverguide/C/remote-administration.xml:242(para)
10020
msgid ""
10021
"To install the <application>ebox</application> package, which contains the "
10022
"default modules, enter the following:"
10023
msgstr ""
10024
10025
#: serverguide/C/remote-administration.xml:247(command)
10026
msgid "sudo apt-get install ebox"
10027
msgstr ""
10028
10029
#: serverguide/C/remote-administration.xml:250(para)
10030
msgid ""
10031
"During the installation you will be asked to supply a password for the ebox "
10032
"user. After installing eBox the web interface can be accessed from: "
10033
"<emphasis>https://yourserver/ebox</emphasis>."
10034
msgstr ""
10035
10036
#: serverguide/C/remote-administration.xml:259(para)
10037
msgid ""
10038
"An important thing to remember when using <application>eBox</application> is "
10039
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10040
"button that implements the new configuration. After clicking the Change "
10041
"button most, but not all, modules will then need to be "
10042
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10043
"<quote>Save changes</quote> link in the top right hand corner."
10044
msgstr ""
10045
10046
#: serverguide/C/remote-administration.xml:267(para)
10047
msgid ""
10048
"Once you make a change that requires a Save, the link will change from green "
10049
"to red."
10050
msgstr ""
10051
10052
#: serverguide/C/remote-administration.xml:273(title)
10053
msgid "eBox Modules"
10054
msgstr ""
10055
10056
#: serverguide/C/remote-administration.xml:274(para)
10057
msgid ""
10058
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10059
"new module is installed it will not be automatically enabled."
10060
msgstr ""
10061
10062
#: serverguide/C/remote-administration.xml:278(para)
10063
msgid ""
10064
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10065
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10066
"which modules you would like to enable and click the <quote>Save</quote> "
10067
"link."
10068
msgstr ""
10069
10070
#: serverguide/C/remote-administration.xml:284(title)
10071
msgid "Default Modules"
10072
msgstr ""
10073
10074
#: serverguide/C/remote-administration.xml:285(para)
10075
msgid ""
10076
"This section provides a quick summary of the default "
10077
"<application>eBox</application> modules."
10078
msgstr ""
10079
10080
#: serverguide/C/remote-administration.xml:291(para)
10081
msgid ""
10082
"<emphasis>System:</emphasis> contains options allowing configuration of "
10083
"general eBox items."
10084
msgstr ""
10085
10086
#: serverguide/C/remote-administration.xml:297(para)
10087
msgid ""
10088
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10089
"and contains a change password form."
10090
msgstr ""
10091
10092
#: serverguide/C/remote-administration.xml:303(para)
10093
msgid ""
10094
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10095
"about disk usage."
10096
msgstr ""
10097
10098
#: serverguide/C/remote-administration.xml:309(para)
10099
msgid ""
10100
"<emphasis>Backup:</emphasis> is used to backup "
10101
"<application>eBox</application> configuration information, and the "
10102
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10103
"information not included in the <emphasis>Configuration</emphasis> option "
10104
"such as log files."
10105
msgstr ""
10106
10107
#: serverguide/C/remote-administration.xml:317(para)
10108
msgid ""
10109
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10110
msgstr ""
10111
10112
#: serverguide/C/remote-administration.xml:322(para)
10113
msgid ""
10114
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10115
"when reporting bugs to the eBox developers."
10116
msgstr ""
10117
10118
#: serverguide/C/remote-administration.xml:330(para)
10119
msgid ""
10120
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10121
"queried depending on the purge time configured."
10122
msgstr ""
10123
10124
#: serverguide/C/remote-administration.xml:336(para)
10125
msgid ""
10126
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10127
"through rss, jabber, and log file."
10128
msgstr ""
10129
10130
#: serverguide/C/remote-administration.xml:343(emphasis)
10131
msgid "Available Events:"
10132
msgstr ""
10133
10134
#: serverguide/C/remote-administration.xml:347(para)
10135
msgid ""
10136
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10137
"drops below a configured percentage, 10% by default."
10138
msgstr ""
10139
10140
#: serverguide/C/remote-administration.xml:353(para)
10141
msgid ""
10142
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10143
"has logged something."
10144
msgstr ""
10145
10146
#: serverguide/C/remote-administration.xml:359(para)
10147
msgid ""
10148
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10149
"any issues arise."
10150
msgstr ""
10151
10152
#: serverguide/C/remote-administration.xml:365(para)
10153
msgid ""
10154
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10155
"times in a short time period."
10156
msgstr ""
10157
10158
#: serverguide/C/remote-administration.xml:371(para)
10159
msgid ""
10160
"<emphasis>State:</emphasis> alerts on the state of "
10161
"<application>eBox</application>, either up or down."
10162
msgstr ""
10163
10164
#: serverguide/C/remote-administration.xml:380(emphasis)
10165
msgid "Dispatchers:"
10166
msgstr ""
10167
10168
#: serverguide/C/remote-administration.xml:384(para)
10169
msgid ""
10170
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10171
"<application>eBox</application> log file "
10172
"<filename>/var/log/ebox/ebox.log</filename>."
10173
msgstr ""
10174
10175
#: serverguide/C/remote-administration.xml:391(para)
10176
msgid ""
10177
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10178
"configure it by clicking on the <quote>Configure</quote> icon."
10179
msgstr ""
10180
10181
#: serverguide/C/remote-administration.xml:397(para)
10182
msgid ""
10183
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10184
"subscribe to the link in order to view event alerts."
10185
msgstr ""
10186
10187
#: serverguide/C/remote-administration.xml:410(title)
10188
msgid "Additional Modules"
10189
msgstr ""
10190
10191
#: serverguide/C/remote-administration.xml:411(para)
10192
msgid ""
10193
"Here is a quick description of other available "
10194
"<application>eBox</application> modules:"
10195
msgstr ""
10196
10197
#: serverguide/C/remote-administration.xml:416(para)
10198
msgid ""
10199
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10200
"options through eBox."
10201
msgstr ""
10202
10203
#: serverguide/C/remote-administration.xml:422(para)
10204
msgid ""
10205
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10206
msgstr ""
10207
10208
#: serverguide/C/remote-administration.xml:427(para)
10209
msgid ""
10210
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10211
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10212
msgstr ""
10213
10214
#: serverguide/C/remote-administration.xml:433(para)
10215
msgid ""
10216
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10217
"server."
10218
msgstr ""
10219
10220
#: serverguide/C/remote-administration.xml:438(para)
10221
msgid ""
10222
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10223
"server configuration options."
10224
msgstr ""
10225
10226
#: serverguide/C/remote-administration.xml:444(para)
10227
msgid ""
10228
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10229
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10230
"group of IPs."
10231
msgstr ""
10232
10233
#: serverguide/C/remote-administration.xml:451(para)
10234
msgid ""
10235
"<emphasis>Services:</emphasis> displays configuration information for "
10236
"services that are available to the network."
10237
msgstr ""
10238
10239
#: serverguide/C/remote-administration.xml:457(para)
10240
msgid ""
10241
"<emphasis>Squid:</emphasis> configuration options for the "
10242
"<application>Squid</application> proxy server."
10243
msgstr ""
10244
10245
#: serverguide/C/remote-administration.xml:463(para)
10246
msgid ""
10247
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10248
msgstr ""
10249
10250
#: serverguide/C/remote-administration.xml:468(para)
10251
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10252
msgstr ""
10253
10254
#: serverguide/C/remote-administration.xml:473(para)
10255
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10256
msgstr ""
10257
10258
#: serverguide/C/remote-administration.xml:478(para)
10259
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10260
msgstr ""
10261
10262
#: serverguide/C/remote-administration.xml:483(para)
10263
msgid ""
10264
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10265
"Network application."
10266
msgstr ""
10267
10268
#: serverguide/C/remote-administration.xml:494(para)
10269
msgid ""
10270
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10271
"Wiki</ulink> page has more details."
10272
msgstr ""
10273
10274
#: serverguide/C/remote-administration.xml:499(para)
10275
msgid ""
10276
"For more information also see the <ulink url=\"http://ebox-"
10277
"platform.com/\">eBox Home Page</ulink>."
10278
msgstr ""
10279
10280
#: serverguide/C/package-management.xml:13(title)
10281
msgid "Package Management"
10282
msgstr ""
10283
10284
#: serverguide/C/package-management.xml:14(para)
10285
msgid ""
10286
"Ubuntu features a comprehensive package management system for the "
10287
"installation, upgrade, configuration, and removal of software. In addition "
10288
"to providing access to an organized base of over 24,000 software packages "
10289
"for your Ubuntu computer, the package management facilities also feature "
10290
"dependency resolution capabilities and software update checking."
10291
msgstr ""
10292
10293
#: serverguide/C/package-management.xml:16(para)
10294
msgid ""
10295
"Several tools are available for interacting with Ubuntu's package management "
10296
"system, from simple command-line utilities which may be easily automated by "
10297
"system administrators, to a simple graphical interface which is easy to use "
10298
"by those new to Ubuntu."
10299
msgstr ""
10300
10301
#: serverguide/C/package-management.xml:21(para)
10302
msgid ""
10303
"Ubuntu's package management system is derived from the same system used by "
10304
"the Debian GNU/Linux distribution. The package files contain all of the "
10305
"necessary files, meta-data, and instructions to implement a particular "
10306
"functionality or software application on your Ubuntu computer."
10307
msgstr ""
10308
10309
#: serverguide/C/package-management.xml:24(para)
10310
msgid ""
10311
"Debian package files typically have the extension '.deb', and typically "
10312
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10313
"collections of packages found on various media, such as CD-ROM discs, or "
10314
"online. Packages are normally of the pre-compiled binary format; thus "
10315
"installation is quick and requires no compiling of software."
10316
msgstr ""
10317
10318
#: serverguide/C/package-management.xml:27(para)
10319
msgid ""
10320
"Many complex packages use the concept of <emphasis "
10321
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10322
"packages required by the principal package in order to function properly. "
10323
"For example, the speech synthesis package "
10324
"<application>Festival</application> depends upon the package "
10325
"<application>libasound2</application>, which is a package supplying the "
10326
"<application>ALSA</application> sound library needed for audio playback. In "
10327
"order for <application>Festival</application> to function, it and all of its "
10328
"dependencies must be installed. The software management tools in Ubuntu will "
10329
"do this automatically."
10330
msgstr ""
10331
10332
#: serverguide/C/package-management.xml:32(title)
10333
msgid "dpkg"
10334
msgstr ""
10335
10336
#: serverguide/C/package-management.xml:34(para)
10337
msgid ""
10338
"<application>dpkg</application> is a package manager for "
10339
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10340
"packages, but unlike other package management system's it can not "
10341
"automatically download and install packages and their dependencies. This "
10342
"section covers using <application>dpkg</application> to manage locally "
10343
"installed packages:"
10344
msgstr ""
10345
10346
#: serverguide/C/package-management.xml:43(para)
10347
msgid ""
10348
"To list all packages installed on the system, from a terminal prompt enter:"
10349
msgstr ""
10350
10351
#: serverguide/C/package-management.xml:48(command)
10352
msgid "dpkg -l"
10353
msgstr ""
10354
10355
#: serverguide/C/package-management.xml:54(para)
10356
msgid ""
10357
"Depending on the amount of packages on your system, this can generate a "
10358
"large amount of output. Pipe the output through "
10359
"<application>grep</application> to see if a specific package is installed:"
10360
msgstr ""
10361
10362
#: serverguide/C/package-management.xml:60(command)
10363
msgid "dpkg -l | grep apache2"
10364
msgstr ""
10365
10366
#: serverguide/C/package-management.xml:63(para)
10367
msgid ""
10368
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10369
"package name, or other regular expression."
10370
msgstr ""
10371
10372
#: serverguide/C/package-management.xml:70(para)
10373
msgid ""
10374
"To list the files installed by a package, in this case the "
10375
"<application>ufw</application> package, enter:"
10376
msgstr ""
10377
10378
#: serverguide/C/package-management.xml:75(command)
10379
msgid "dpkg -L ufw"
10380
msgstr ""
10381
10382
#: serverguide/C/package-management.xml:81(para)
10383
msgid ""
10384
"If you are not sure which package installed a file, <application>dpkg -"
10385
"S</application> may be able to tell you. For example:"
10386
msgstr ""
10387
10388
#: serverguide/C/package-management.xml:87(command)
10389
msgid "dpkg -S /etc/host.conf"
10390
msgstr ""
10391
10392
#: serverguide/C/package-management.xml:88(computeroutput)
10393
#, no-wrap
10394
msgid "base-files: /etc/host.conf"
10395
msgstr ""
10396
10397
#: serverguide/C/package-management.xml:91(para)
10398
msgid ""
10399
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10400
"<application>base-files</application> package."
10401
msgstr ""
10402
10403
#: serverguide/C/package-management.xml:96(para)
10404
msgid ""
10405
"Many files are automatically generated during the package install process, "
10406
"and even though they are on the filesystem <command>dpkg -S</command> may "
10407
"not know which package they belong to."
10408
msgstr ""
10409
10410
#: serverguide/C/package-management.xml:105(para)
10411
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10412
msgstr ""
10413
10414
#: serverguide/C/package-management.xml:110(command)
10415
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10416
msgstr ""
10417
10418
#: serverguide/C/package-management.xml:113(para)
10419
msgid ""
10420
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10421
"the local .deb file."
10422
msgstr ""
10423
10424
#: serverguide/C/package-management.xml:120(para)
10425
msgid "Uninstalling a package can be accomplished by:"
10426
msgstr ""
10427
10428
#: serverguide/C/package-management.xml:125(command)
10429
msgid "sudo dpkg -r zip"
10430
msgstr ""
10431
10432
#: serverguide/C/package-management.xml:129(para)
10433
msgid ""
10434
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10435
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10436
"manager that handles dependencies, to ensure that the system is in a "
10437
"consistent state. For example using <command>dpkg -r</command> you can "
10438
"remove the <application>zip</application> package, but any packages that "
10439
"depend on it will still be installed and may no longer function correctly."
10440
msgstr ""
10441
10442
#: serverguide/C/package-management.xml:140(para)
10443
msgid ""
10444
"For more <application>dpkg</application> options see the man page: "
10445
"<command>man dpkg</command>."
10446
msgstr ""
10447
10448
#: serverguide/C/package-management.xml:146(title)
10449
msgid "Apt-Get"
10450
msgstr ""
10451
10452
#: serverguide/C/package-management.xml:147(para)
10453
msgid ""
10454
"The <application>apt-get</application> command is a powerful command-line "
10455
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10456
"(APT) performing such functions as installation of new software packages, "
10457
"upgrade of existing software packages, updating of the package list index, "
10458
"and even upgrading the entire Ubuntu system."
10459
msgstr ""
10460
10461
#: serverguide/C/package-management.xml:150(para)
10462
msgid ""
10463
"Being a simple command-line tool, <application>apt-get</application> has "
10464
"numerous advantages over other package management tools available in Ubuntu "
10465
"for server administrators. Some of these advantages include ease of use over "
10466
"simple terminal connections (SSH) and the ability to be used in system "
10467
"administration scripts, which can in turn be automated by the "
10468
"<application>cron</application> scheduling utility."
10469
msgstr ""
10470
10471
#: serverguide/C/package-management.xml:157(para)
10472
msgid ""
10473
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10474
"packages using the <application>apt-get</application> tool is quite simple. "
10475
"For example, to install the network scanner <emphasis "
10476
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10477
"<command>sudo apt-get install nmap</command>\n"
10478
"</screen>"
10479
msgstr ""
10480
10481
#: serverguide/C/package-management.xml:165(para)
10482
msgid ""
10483
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10484
"packages is also a straightforward and simple process. To remove the nmap "
10485
"package installed in the previous example, type the following: <screen>\n"
10486
"<command>sudo apt-get remove nmap</command>\n"
10487
"</screen>"
10488
msgstr ""
10489
10490
#: serverguide/C/package-management.xml:172(para)
10491
msgid ""
10492
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10493
"multiple packages to be installed or removed, separated by spaces."
10494
msgstr ""
10495
10496
#: serverguide/C/package-management.xml:175(para)
10497
msgid ""
10498
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10499
"remove</command> will remove the package configuration files as well. This "
10500
"may or may not be the desired effect so use with caution."
10501
msgstr ""
10502
10503
#: serverguide/C/package-management.xml:181(para)
10504
msgid ""
10505
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10506
"index is essentially a database of available packages from the repositories "
10507
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10508
"the local package index with the latest changes made in repositories, type "
10509
"the following: <screen>\n"
10510
"<command>sudo apt-get update</command>\n"
10511
"</screen>"
10512
msgstr ""
10513
10514
#: serverguide/C/package-management.xml:189(para)
10515
msgid ""
10516
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10517
"versions of packages currently installed on your computer may become "
10518
"available from the package repositories (for example security updates). To "
10519
"upgrade your system, first update your package index as outlined above, and "
10520
"then type: <screen>\n"
10521
"<command>sudo apt-get upgrade</command>\n"
10522
"</screen>"
10523
msgstr ""
10524
10525
#: serverguide/C/package-management.xml:195(para)
10526
msgid ""
10527
"For information on upgrading to a new Ubuntu release see <xref "
10528
"linkend=\"installing-upgrading\"/>."
10529
msgstr ""
10530
10531
#: serverguide/C/package-management.xml:153(para)
10532
msgid ""
10533
"Some examples of popular uses for the <application>apt-get</application> "
10534
"utility: <placeholder-1/>"
10535
msgstr ""
10536
10537
#: serverguide/C/package-management.xml:201(para)
10538
msgid ""
10539
"Actions of the <application>apt-get</application> command, such as "
10540
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10541
"log file."
10542
msgstr ""
10543
10544
#: serverguide/C/package-management.xml:204(para)
10545
msgid ""
10546
"For further information about the use of <application>APT</application>, "
10547
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10548
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10549
"help</screen>"
10550
msgstr ""
10551
10552
#: serverguide/C/package-management.xml:208(title)
10553
msgid "Aptitude"
10554
msgstr ""
10555
10556
#: serverguide/C/package-management.xml:209(para)
10557
msgid ""
10558
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10559
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10560
"the common package management functions, such as installation, removal, and "
10561
"upgrade, are performed in <application>Aptitude</application> with single-"
10562
"key commands, which are typically lowercase letters."
10563
msgstr ""
10564
10565
#: serverguide/C/package-management.xml:212(para)
10566
msgid ""
10567
"<application>Aptitude</application> is best suited for use in a non-"
10568
"graphical terminal environment to ensure proper functioning of the command "
10569
"keys. You may start <application>Aptitude</application> as a normal user "
10570
"with the following command at a terminal prompt: <screen>\n"
10571
"<command>sudo aptitude</command>\n"
10572
"</screen>"
10573
msgstr ""
10574
10575
#: serverguide/C/package-management.xml:219(para)
10576
msgid ""
10577
"When <application>Aptitude</application> starts, you will see a menu bar at "
10578
"the top of the screen and two panes below the menu bar. The top pane "
10579
"contains package categories, such as <emphasis role=\"italics\">New "
10580
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10581
"Packages</emphasis>. The bottom pane contains information related to the "
10582
"packages and package categories."
10583
msgstr ""
10584
10585
#: serverguide/C/package-management.xml:222(para)
10586
msgid ""
10587
"Using <application>Aptitude</application> for package management is "
10588
"relatively straightforward, and the user interface makes common tasks simple "
10589
"to perform. The following are examples of common package management "
10590
"functions as performed in <application>Aptitude</application>:"
10591
msgstr ""
10592
10593
#: serverguide/C/package-management.xml:226(para)
10594
msgid ""
10595
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10596
"locate the package via the Not Installed Packages package category, for "
10597
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10598
"key, and highlight the package you wish to install. After highlighting the "
10599
"package you wish to install, press the <keycap>+</keycap> key, and the "
10600
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10601
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10602
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10603
"again, and you will be prompted to become root to complete the installation. "
10604
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10605
"your user password to become root. Finally, press <keycap>g</keycap> once "
10606
"more and you'll be prompted to download the package. Press "
10607
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10608
"prompt, and downloading and installation of the package will commence."
10609
msgstr ""
10610
10611
#: serverguide/C/package-management.xml:230(para)
10612
msgid ""
10613
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10614
"locate the package via the Installed Packages package category, for example, "
10615
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10616
"highlight the package you wish to remove. After highlighting the package you "
10617
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10618
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10619
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10620
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10621
"prompted to become root to complete the installation. Press "
10622
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10623
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10624
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10625
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10626
"the package will commence."
10627
msgstr ""
10628
10629
#: serverguide/C/package-management.xml:234(para)
10630
msgid ""
10631
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10632
"package index, simply press the <keycap>u</keycap> key and you will be "
10633
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10634
"which will result in a Password: prompt. Enter your user password to become "
10635
"root. Updating of the package index will commence. Press "
10636
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10637
"presented to complete the process."
10638
msgstr ""
10639
10640
#: serverguide/C/package-management.xml:238(para)
10641
msgid ""
10642
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10643
"perform the update of the package index as detailed above, and then press "
10644
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10645
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10646
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10647
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10648
"result in a Password: prompt. Enter your user password to become root. "
10649
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10650
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10651
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10652
"will commence."
10653
msgstr ""
10654
10655
#: serverguide/C/package-management.xml:245(para)
10656
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10657
msgstr ""
10658
10659
#: serverguide/C/package-management.xml:250(para)
10660
msgid ""
10661
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10662
"configuration remains on system"
10663
msgstr ""
10664
10665
#: serverguide/C/package-management.xml:254(para)
10666
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10667
msgstr ""
10668
10669
#: serverguide/C/package-management.xml:258(para)
10670
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10671
msgstr ""
10672
10673
#: serverguide/C/package-management.xml:262(para)
10674
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10675
msgstr ""
10676
10677
#: serverguide/C/package-management.xml:266(para)
10678
msgid ""
10679
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10680
"configured"
10681
msgstr ""
10682
10683
#: serverguide/C/package-management.xml:270(para)
10684
msgid ""
10685
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10686
"and requires fix"
10687
msgstr ""
10688
10689
#: serverguide/C/package-management.xml:274(para)
10690
msgid ""
10691
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10692
"requires fix"
10693
msgstr ""
10694
10695
#: serverguide/C/package-management.xml:242(para)
10696
msgid ""
10697
"The first column of information displayed in the package list in the top "
10698
"pane, when actually viewing packages lists the current state of the package, "
10699
"and uses the following key to describe the state of the package: "
10700
"<placeholder-1/>"
10701
msgstr ""
10702
10703
#: serverguide/C/package-management.xml:280(para)
10704
msgid ""
10705
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
10706
"wish to exit. Many other functions are available from the Aptitude menu by "
10707
"pressing the <keycap>F10</keycap> key."
10708
msgstr ""
10709
10710
#: serverguide/C/package-management.xml:285(title)
10711
msgid "Automatic Updates"
10712
msgstr ""
10713
10714
#: serverguide/C/package-management.xml:287(para)
10715
msgid ""
10716
"The <application>unattended-upgrades</application> package can be used to "
10717
"automatically install updated packages, and can be configured to update all "
10718
"packages or just install security updates. First, install the package by "
10719
"entering the following in a terminal:"
10720
msgstr ""
10721
10722
#: serverguide/C/package-management.xml:293(command)
10723
msgid "sudo apt-get install unattended-upgrades"
10724
msgstr ""
10725
10726
#: serverguide/C/package-management.xml:296(para)
10727
msgid ""
10728
"To configure <application>unattended-upgrades</application>, edit "
10729
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
10730
"the following to fit your needs:"
10731
msgstr ""
10732
10733
#: serverguide/C/package-management.xml:301(programlisting)
10734
#, no-wrap
10735
msgid ""
10736
"\n"
10737
"Unattended-Upgrade::Allowed-Origins {\n"
10738
" \"Ubuntu lucid-security\";\n"
10739
"// \"Ubuntu lucid-updates\";\n"
10740
"};\n"
10741
msgstr ""
10742
10743
#: serverguide/C/package-management.xml:308(para)
10744
msgid ""
10745
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
10746
"will not be automatically updated. To blacklist a package, add it to the "
10747
"list:"
10748
msgstr ""
10749
10750
#: serverguide/C/package-management.xml:313(programlisting)
10751
#, no-wrap
10752
msgid ""
10753
"\n"
10754
"Unattended-Upgrade::Package-Blacklist {\n"
10755
"// \"vim\";\n"
10756
"// \"libc6\";\n"
10757
"// \"libc6-dev\";\n"
10758
"// \"libc6-i686\";\n"
10759
"};\n"
10760
msgstr ""
10761
10762
#: serverguide/C/package-management.xml:323(para)
10763
msgid ""
10764
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
10765
"whatever follows \"//\" will not be evaluated."
10766
msgstr ""
10767
10768
#: serverguide/C/package-management.xml:328(para)
10769
msgid ""
10770
"To enable automatic updates, edit "
10771
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
10772
"<application>apt</application> configuration options:"
10773
msgstr ""
10774
10775
#: serverguide/C/package-management.xml:332(programlisting)
10776
#, no-wrap
10777
msgid ""
10778
"\n"
10779
"APT::Periodic::Update-Package-Lists \"1\";\n"
10780
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
10781
"APT::Periodic::AutocleanInterval \"7\";\n"
10782
"APT::Periodic::Unattended-Upgrade \"1\";\n"
10783
msgstr ""
10784
10785
#: serverguide/C/package-management.xml:339(para)
10786
msgid ""
10787
"The above configuration updates the package list, downloads, and installs "
10788
"available upgrades every day. The local download archive is cleaned every "
10789
"week."
10790
msgstr ""
10791
10792
#: serverguide/C/package-management.xml:345(para)
10793
msgid ""
10794
"You can read more about <application>apt</application> Periodic "
10795
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
10796
"header."
10797
msgstr ""
10798
10799
#: serverguide/C/package-management.xml:350(para)
10800
msgid ""
10801
"The results of <application>unattended-upgrades</application> will be logged "
10802
"to <filename>/var/log/unattended-upgrades</filename>."
10803
msgstr ""
10804
10805
#: serverguide/C/package-management.xml:355(title)
10806
msgid "Notifications"
10807
msgstr ""
10808
10809
#: serverguide/C/package-management.xml:357(para)
10810
msgid ""
10811
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
10812
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
10813
"<application>unattended-upgrades</application> to email an administrator "
10814
"detailing any packages that need upgrading or have problems."
10815
msgstr ""
10816
10817
#: serverguide/C/package-management.xml:362(para)
10818
msgid ""
10819
"Another useful package is <application>apticron</application>. "
10820
"<application>apticron</application> will configure a "
10821
"<application>cron</application> job to email an administrator information "
10822
"about any packages on the system that have updates available, as well as a "
10823
"summary of changes in each package."
10824
msgstr ""
10825
10826
#: serverguide/C/package-management.xml:368(para)
10827
msgid ""
10828
"To install the <application>apticron</application> package, in a terminal "
10829
"enter:"
10830
msgstr ""
10831
10832
#: serverguide/C/package-management.xml:373(command)
10833
msgid "sudo apt-get install apticron"
10834
msgstr ""
10835
10836
#: serverguide/C/package-management.xml:376(para)
10837
msgid ""
10838
"Once the package is installed edit "
10839
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
10840
"and other options:"
10841
msgstr ""
10842
10843
#: serverguide/C/package-management.xml:380(programlisting)
10844
#, no-wrap
10845
msgid ""
10846
"\n"
10847
"EMAIL=\"root@example.com\"\n"
10848
msgstr ""
10849
10850
#: serverguide/C/package-management.xml:389(para)
10851
msgid ""
10852
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
10853
"system repositories is stored in the /etc/apt/sources.list configuration "
10854
"file. An example of this file is referenced here, along with information on "
10855
"adding or removing repository references from the file."
10856
msgstr ""
10857
10858
#: serverguide/C/package-management.xml:395(para)
10859
msgid ""
10860
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
10861
"typical <filename>/etc/apt/sources.list</filename> file."
10862
msgstr ""
10863
10864
#: serverguide/C/package-management.xml:399(para)
10865
msgid ""
10866
"You may edit the file to enable repositories or disable them. For example, "
10867
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
10868
"operations occur, simply comment out the appropriate line for the CD-ROM, "
10869
"which appears at the top of the file:"
10870
msgstr ""
10871
10872
#: serverguide/C/package-management.xml:404(screen)
10873
#, no-wrap
10874
msgid ""
10875
"\n"
10876
"# no more prompting for CD-ROM please\n"
10877
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
10878
"main restricted\n"
10879
msgstr ""
10880
10881
#: serverguide/C/package-management.xml:410(title)
10882
msgid "Extra Repositories"
10883
msgstr ""
10884
10885
#: serverguide/C/package-management.xml:411(para)
10886
msgid ""
10887
"In addition to the officially supported package repositories available for "
10888
"Ubuntu, there exist additional community-maintained repositories which add "
10889
"thousands more potential packages for installation. Two of the most popular "
10890
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
10891
"repositories. These repositories are not officially supported by Ubuntu, but "
10892
"because they are maintained by the community they generally provide packages "
10893
"which are safe for use with your Ubuntu computer."
10894
msgstr ""
10895
10896
#: serverguide/C/package-management.xml:414(para)
10897
msgid ""
10898
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
10899
"licensing issues that prevent them from being distributed with a free "
10900
"operating system, and they may be illegal in your locality."
10901
msgstr ""
10902
10903
#: serverguide/C/package-management.xml:416(para)
10904
msgid ""
10905
"Be advised that neither the <emphasis>Universe</emphasis> or "
10906
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
10907
"packages. In particular, there may not be security updates for these "
10908
"packages."
10909
msgstr ""
10910
10911
#: serverguide/C/package-management.xml:420(para)
10912
msgid ""
10913
"Many other package sources are available, sometimes even offering only one "
10914
"package, as in the case of package sources provided by the developer of a "
10915
"single application. You should always be very careful and cautious when "
10916
"using non-standard package sources, however. Research the source and "
10917
"packages carefully before performing any installation, as some package "
10918
"sources and their packages could render your system unstable or non-"
10919
"functional in some respects."
10920
msgstr ""
10921
10922
#: serverguide/C/package-management.xml:423(para)
10923
msgid ""
10924
"By default, the <emphasis>Universe</emphasis> and "
10925
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
10926
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
10927
"comment the following lines:"
10928
msgstr ""
10929
10930
#: serverguide/C/package-management.xml:430(programlisting)
10931
#, no-wrap
10932
msgid ""
10933
"\n"
10934
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10935
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10936
"\n"
10937
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10938
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10939
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10940
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10941
"\n"
10942
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10943
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10944
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10945
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10946
"\n"
10947
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
10948
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
10949
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10950
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10951
msgstr ""
10952
10953
#: serverguide/C/package-management.xml:456(para)
10954
msgid ""
10955
"Most of the material covered in this chapter is available in "
10956
"<application>man</application> pages, many of which are available online."
10957
msgstr ""
10958
10959
#: serverguide/C/package-management.xml:463(para)
10960
msgid ""
10961
"The <ulink "
10962
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
10963
"re</ulink> Ubuntu wiki page has more information."
10964
msgstr ""
10965
10966
#: serverguide/C/package-management.xml:468(para)
10967
msgid ""
10968
"For more <application>dpkg</application> details see the <ulink "
10969
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
10970
"man page</ulink>."
10971
msgstr ""
10972
10973
#: serverguide/C/package-management.xml:474(para)
10974
msgid ""
10975
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
10976
"HOWTO</ulink> and <ulink "
10977
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
10978
"get man page</ulink> contain useful information regarding <application>apt-"
10979
"get</application> usage."
10980
msgstr ""
10981
10982
#: serverguide/C/package-management.xml:481(para)
10983
msgid ""
10984
"See the <ulink "
10985
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
10986
"de man page</ulink> for more <application>aptitude</application> options."
10987
msgstr ""
10988
10989
#: serverguide/C/package-management.xml:487(para)
10990
msgid ""
10991
"The <ulink "
10992
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
10993
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
10994
"adding repositories."
10995
msgstr ""
10996
10997
#: serverguide/C/other-apps.xml:13(title)
10998
msgid "Other Useful Applications"
10999
msgstr ""
11000
11001
#: serverguide/C/other-apps.xml:15(para)
11002
msgid ""
11003
"There are many very useful applications developed by the Ubuntu Server Team, "
11004
"and others that are well integrated with Ubuntu Server Edition, that might "
11005
"not be well known. This chapter will showcase some useful applications that "
11006
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11007
"easier."
11008
msgstr ""
11009
11010
#: serverguide/C/other-apps.xml:23(title)
11011
msgid "pam_motd"
11012
msgstr ""
11013
11014
#: serverguide/C/other-apps.xml:25(para)
11015
msgid ""
11016
"When logging into an Ubuntu server you may have noticed the informative "
11017
"Message Of The Day (MOTD). This information is obtained and displayed using "
11018
"a couple of packages:"
11019
msgstr ""
11020
11021
#: serverguide/C/other-apps.xml:32(para)
11022
msgid ""
11023
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11024
"<application>landscape-client</application>, which can be used to manage "
11025
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11026
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11027
"utility which is used to gather the information displayed in the MOTD."
11028
msgstr ""
11029
11030
#: serverguide/C/other-apps.xml:40(para)
11031
msgid ""
11032
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11033
"the MOTD via <application>pam_motd</application> module."
11034
msgstr ""
11035
11036
#: serverguide/C/other-apps.xml:46(para)
11037
msgid ""
11038
"<application>pam_motd</application> executes the scripts in "
11039
"<filename>/etc/update-motd.d</filename> in order based on the number "
11040
"prepended to the script. The output of the scripts is written to "
11041
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11042
"concatenated with <filename>/etc/motd.tail</filename>."
11043
msgstr ""
11044
11045
#: serverguide/C/other-apps.xml:52(para)
11046
msgid ""
11047
"You can add your own dynamic information to the MOTD. For example, to add "
11048
"local weather information:"
11049
msgstr ""
11050
11051
#: serverguide/C/other-apps.xml:58(para)
11052
msgid "First, install the <application>weather-util</application> package:"
11053
msgstr ""
11054
11055
#: serverguide/C/other-apps.xml:63(command)
11056
msgid "sudo apt-get install weather-util"
11057
msgstr ""
11058
11059
#: serverguide/C/other-apps.xml:68(para)
11060
msgid ""
11061
"The <application>weather</application> utility uses METAR data from the "
11062
"National Oceanic and Atmospheric Administration and forecasts from the "
11063
"National Weather Service. In order to find local information you will need "
11064
"the 4-character ICAO location indicator. This can be determined by browsing "
11065
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11066
"Weather Service</ulink> site."
11067
msgstr ""
11068
11069
#: serverguide/C/other-apps.xml:75(para)
11070
msgid ""
11071
"Although the National Weather Service is a United States government agency "
11072
"there are weather stations available world wide. However, local weather "
11073
"information for all locations outside the U.S. may not be available."
11074
msgstr ""
11075
11076
#: serverguide/C/other-apps.xml:81(para)
11077
msgid ""
11078
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11079
"script to use <application>weather</application> with your local ICAO "
11080
"indicator:"
11081
msgstr ""
11082
11083
#: serverguide/C/other-apps.xml:86(programlisting)
11084
#, no-wrap
11085
msgid ""
11086
"\n"
11087
"#!/bin/sh\n"
11088
"#\n"
11089
"#\n"
11090
"# Prints the local weather information for the MOTD.\n"
11091
"#\n"
11092
"#\n"
11093
"\n"
11094
"# Replace KINT with your local weather station.\n"
11095
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11096
"\n"
11097
"echo\n"
11098
"weather -i KINT\n"
11099
"echo\n"
11100
"\n"
11101
msgstr ""
11102
11103
#: serverguide/C/other-apps.xml:104(para)
11104
msgid "Make the script executable:"
11105
msgstr ""
11106
11107
#: serverguide/C/other-apps.xml:109(command)
11108
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11109
msgstr ""
11110
11111
#: serverguide/C/other-apps.xml:113(para)
11112
msgid ""
11113
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11114
"weather</filename>:"
11115
msgstr ""
11116
11117
#: serverguide/C/other-apps.xml:118(command)
11118
msgid ""
11119
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11120
msgstr ""
11121
11122
#: serverguide/C/other-apps.xml:122(para)
11123
msgid "Finally, exit the server and re-login to view the new MOTD."
11124
msgstr ""
11125
11126
#: serverguide/C/other-apps.xml:128(para)
11127
msgid ""
11128
"You should now be greeted with some useful information, and some information "
11129
"about the local weather that may not be quite so useful. Hopefully the "
11130
"<application>local-weather</application> example demonstrates the "
11131
"flexibility of <application>pam_motd</application>."
11132
msgstr ""
11133
11134
#: serverguide/C/other-apps.xml:136(title)
11135
msgid "etckeeper"
11136
msgstr ""
11137
11138
#: serverguide/C/other-apps.xml:138(para)
11139
msgid ""
11140
"<application>etckeeper</application> allows the contents of <filename "
11141
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11142
"System (VCS) repository. It hooks into <application>apt</application> to "
11143
"automatically commit changes to <filename>/etc</filename> when packages are "
11144
"installed or upgraded. Placing <filename>/etc</filename> under version "
11145
"control is considered an industry best practice, and the goal of "
11146
"<application>etckeeper</application> is to make this process as painless as "
11147
"possible."
11148
msgstr ""
11149
11150
#: serverguide/C/other-apps.xml:146(para)
11151
msgid ""
11152
"Install <application>etckeeper</application> by entering the following in a "
11153
"terminal:"
11154
msgstr ""
11155
11156
#: serverguide/C/other-apps.xml:151(command)
11157
msgid "sudo apt-get install etckeeper"
11158
msgstr ""
11159
11160
#: serverguide/C/other-apps.xml:154(para)
11161
msgid ""
11162
"The main configuration file, "
11163
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11164
"main option is which VCS to use. By default "
11165
"<application>etckeeper</application> is configured to use "
11166
"<application>bzr</application> for version control. The repository is "
11167
"automatically initialized (and committed for the first time) during package "
11168
"installation. It is possible to undo this by entering the following command:"
11169
msgstr ""
11170
11171
#: serverguide/C/other-apps.xml:164(command)
11172
msgid "sudo etckeeper uninit"
11173
msgstr ""
11174
11175
#: serverguide/C/other-apps.xml:167(para)
11176
msgid ""
11177
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11178
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11179
"It will also automatically commit changes before and after package "
11180
"installation. For a more precise tracking of changes, it is recommended to "
11181
"commit your changes manually, together with a commit message, using:"
11182
msgstr ""
11183
11184
#: serverguide/C/other-apps.xml:176(command)
11185
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11186
msgstr ""
11187
11188
#: serverguide/C/other-apps.xml:179(para)
11189
msgid ""
11190
"Using the VCS commands you can view log information about files in "
11191
"<filename>/etc</filename>:"
11192
msgstr ""
11193
11194
#: serverguide/C/other-apps.xml:184(command)
11195
msgid "sudo bzr log /etc/passwd"
11196
msgstr ""
11197
11198
#: serverguide/C/other-apps.xml:187(para)
11199
msgid ""
11200
"To demonstrate the integration with the package management system, install "
11201
"<application>postfix</application>:"
11202
msgstr ""
11203
11204
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11205
msgid "sudo apt-get install postfix"
11206
msgstr ""
11207
11208
#: serverguide/C/other-apps.xml:195(para)
11209
msgid ""
11210
"When the installation is finished, all the "
11211
"<application>postfix</application> configuration files should be committed "
11212
"to the repository:"
11213
msgstr ""
11214
11215
#: serverguide/C/other-apps.xml:201(computeroutput)
11216
#, no-wrap
11217
msgid ""
11218
"Committing to: /etc/\n"
11219
"added aliases.db\n"
11220
"modified group\n"
11221
"modified group-\n"
11222
"modified gshadow\n"
11223
"modified gshadow-\n"
11224
"modified passwd\n"
11225
"modified passwd-\n"
11226
"added postfix\n"
11227
"added resolvconf\n"
11228
"added rsyslog.d\n"
11229
"modified shadow\n"
11230
"modified shadow-\n"
11231
"added init.d/postfix\n"
11232
"added network/if-down.d/postfix\n"
11233
"added network/if-up.d/postfix\n"
11234
"added postfix/dynamicmaps.cf\n"
11235
"added postfix/main.cf\n"
11236
"added postfix/master.cf\n"
11237
"added postfix/post-install\n"
11238
"added postfix/postfix-files\n"
11239
"added postfix/postfix-script\n"
11240
"added postfix/sasl\n"
11241
"added ppp/ip-down.d\n"
11242
"added ppp/ip-down.d/postfix\n"
11243
"added ppp/ip-up.d/postfix\n"
11244
"added rc0.d/K20postfix\n"
11245
"added rc1.d/K20postfix\n"
11246
"added rc2.d/S20postfix\n"
11247
"added rc3.d/S20postfix\n"
11248
"added rc4.d/S20postfix\n"
11249
"added rc5.d/S20postfix\n"
11250
"added rc6.d/K20postfix\n"
11251
"added resolvconf/update-libc.d\n"
11252
"added resolvconf/update-libc.d/postfix\n"
11253
"added rsyslog.d/postfix.conf\n"
11254
"added ufw/applications.d/postfix\n"
11255
"Committed revision 2."
11256
msgstr ""
11257
11258
#: serverguide/C/other-apps.xml:241(para)
11259
msgid ""
11260
"For an example of how <application>etckeeper</application> tracks manual "
11261
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11262
"<application>bzr</application> you can see which files have been modified:"
11263
msgstr ""
11264
11265
#: serverguide/C/other-apps.xml:247(command)
11266
msgid "sudo bzr status /etc/"
11267
msgstr ""
11268
11269
#: serverguide/C/other-apps.xml:248(computeroutput)
11270
#, no-wrap
11271
msgid ""
11272
"modified:\n"
11273
" hosts"
11274
msgstr ""
11275
11276
#: serverguide/C/other-apps.xml:252(para)
11277
msgid "Now commit the changes:"
11278
msgstr ""
11279
11280
#: serverguide/C/other-apps.xml:257(command)
11281
msgid "sudo etckeeper commit \"new host\""
11282
msgstr ""
11283
11284
#: serverguide/C/other-apps.xml:260(para)
11285
msgid ""
11286
"For more information on <application>bzr</application> see <xref "
11287
"linkend=\"bazaar\"/>."
11288
msgstr ""
11289
11290
#: serverguide/C/other-apps.xml:266(title)
11291
msgid "Byobu"
11292
msgstr ""
11293
11294
#: serverguide/C/other-apps.xml:268(para)
11295
msgid ""
11296
"One of the most useful applications for any system administrator is "
11297
"<application>screen</application>. It allows the execution of multiple "
11298
"shells in one terminal. To make some of the advanced "
11299
"<application>screen</application> features more user friendly, and provide "
11300
"some useful information about the system, the "
11301
"<application>byobu</application> package was created."
11302
msgstr ""
11303
11304
#: serverguide/C/other-apps.xml:275(para)
11305
msgid ""
11306
"When executing <application>byobu</application> pressing the "
11307
"<emphasis>F9</emphasis> key will bring up the "
11308
"<application>Configuration</application> menu. This menu will allow you to:"
11309
msgstr ""
11310
11311
#: serverguide/C/other-apps.xml:281(para)
11312
msgid "View the Help menu"
11313
msgstr ""
11314
11315
#: serverguide/C/other-apps.xml:282(para)
11316
msgid "Change Byobu's background color"
11317
msgstr ""
11318
11319
#: serverguide/C/other-apps.xml:283(para)
11320
msgid "Change Byobu's foreground color"
11321
msgstr ""
11322
11323
#: serverguide/C/other-apps.xml:284(para)
11324
msgid "Toggle status notifications"
11325
msgstr ""
11326
11327
#: serverguide/C/other-apps.xml:285(para)
11328
msgid "Change the key binding set"
11329
msgstr ""
11330
11331
#: serverguide/C/other-apps.xml:286(para)
11332
msgid "Change the escape sequence"
11333
msgstr ""
11334
11335
#: serverguide/C/other-apps.xml:287(para)
11336
msgid "Create new windows"
11337
msgstr ""
11338
11339
#: serverguide/C/other-apps.xml:288(para)
11340
msgid "Manage the default windows"
11341
msgstr ""
11342
11343
#: serverguide/C/other-apps.xml:289(para)
11344
msgid "Byobu currently does not launch at login (toggle on)"
11345
msgstr ""
11346
11347
#: serverguide/C/other-apps.xml:292(para)
11348
msgid ""
11349
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11350
"sequence, new window, change window, etc. There are two key binding sets to "
11351
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11352
"keys</emphasis>. If you wish to use the original key bindings choose the "
11353
"<emphasis>none</emphasis> set."
11354
msgstr ""
11355
11356
#: serverguide/C/other-apps.xml:298(para)
11357
msgid ""
11358
"<application>byobu</application> provides a menu which displays the Ubuntu "
11359
"release, processor information, memory information, and the time and date. "
11360
"The effect is similar to a desktop menu."
11361
msgstr ""
11362
11363
#: serverguide/C/other-apps.xml:303(para)
11364
msgid ""
11365
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11366
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11367
"executed any time a terminal is opened. Changes made to "
11368
"<application>byobu</application> are on a per user basis, and will not "
11369
"affect other users on the system."
11370
msgstr ""
11371
11372
#: serverguide/C/other-apps.xml:309(para)
11373
msgid ""
11374
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11375
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11376
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11377
"commands. Here is a quick list of movement commands:"
11378
msgstr ""
11379
11380
#: serverguide/C/other-apps.xml:316(para)
11381
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11382
msgstr ""
11383
11384
#: serverguide/C/other-apps.xml:317(para)
11385
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11386
msgstr ""
11387
11388
#: serverguide/C/other-apps.xml:318(para)
11389
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11390
msgstr ""
11391
11392
#: serverguide/C/other-apps.xml:319(para)
11393
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11394
msgstr ""
11395
11396
#: serverguide/C/other-apps.xml:320(para)
11397
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11398
msgstr ""
11399
11400
#: serverguide/C/other-apps.xml:321(para)
11401
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11402
msgstr ""
11403
11404
#: serverguide/C/other-apps.xml:322(para)
11405
msgid ""
11406
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11407
"the buffer)"
11408
msgstr ""
11409
11410
#: serverguide/C/other-apps.xml:323(para)
11411
msgid "<emphasis>/</emphasis> - Search forward"
11412
msgstr ""
11413
11414
#: serverguide/C/other-apps.xml:324(para)
11415
msgid "<emphasis>?</emphasis> - Search backward"
11416
msgstr ""
11417
11418
#: serverguide/C/other-apps.xml:325(para)
11419
msgid ""
11420
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11421
msgstr ""
11422
11423
#: serverguide/C/other-apps.xml:334(para)
11424
msgid ""
11425
"See the <ulink "
11426
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11427
"update-motd man page</ulink> for more options available to "
11428
"<application>update-motd</application>."
11429
msgstr ""
11430
11431
#: serverguide/C/other-apps.xml:340(para)
11432
msgid ""
11433
"The Debian Package of the Day <ulink "
11434
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11435
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11436
"details about using the <application>weather</application>utility."
11437
msgstr ""
11438
11439
#: serverguide/C/other-apps.xml:347(para)
11440
msgid ""
11441
"See the <ulink "
11442
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11443
"more details on using <application>etckeeper</application>."
11444
msgstr ""
11445
11446
#: serverguide/C/other-apps.xml:353(para)
11447
msgid ""
11448
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11449
"Ubuntu Wiki</ulink> page."
11450
msgstr ""
11451
11452
#: serverguide/C/other-apps.xml:358(para)
11453
msgid ""
11454
"For the latest news and information about <application>bzr</application> see "
11455
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11456
msgstr ""
11457
11458
#: serverguide/C/other-apps.xml:363(para)
11459
msgid ""
11460
"For more information on <application>screen</application> see the <ulink "
11461
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11462
msgstr ""
11463
11464
#: serverguide/C/other-apps.xml:368(para)
11465
msgid ""
11466
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11467
"screen</ulink> page."
11468
msgstr ""
11469
11470
#: serverguide/C/other-apps.xml:373(para)
11471
msgid ""
11472
"Also, see the <application>byobu</application><ulink "
11473
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11474
"information."
11475
msgstr ""
11476
11477
#: serverguide/C/network-config.xml:14(para)
11478
msgid ""
11479
"Networks consist of two or more devices, such as computer systems, printers, "
11480
"and related equipment which are connected by either physical cabling or "
11481
"wireless links for the purpose of sharing and distributing information among "
11482
"the connected devices."
11483
msgstr ""
11484
11485
#: serverguide/C/network-config.xml:20(para)
11486
msgid ""
11487
"This section provides general and specific information pertaining to "
11488
"networking, including an overview of network concepts and detailed "
11489
"discussion of popular network protocols."
11490
msgstr ""
11491
11492
#: serverguide/C/network-config.xml:27(title)
11493
msgid "Network Configuration"
11494
msgstr ""
11495
11496
#: serverguide/C/network-config.xml:28(para)
11497
msgid ""
11498
"Ubuntu ships with a number of graphical utilities to configure your network "
11499
"devices. This document is geared toward server administrators and will focus "
11500
"on managing your network on the command line."
11501
msgstr ""
11502
11503
#: serverguide/C/network-config.xml:35(title)
11504
msgid "Ethernet Interfaces"
11505
msgstr ""
11506
11507
#: serverguide/C/network-config.xml:36(para)
11508
msgid ""
11509
"Ethernet interfaces are identified by the system using the naming convention "
11510
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11511
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11512
"interface is typically identified as <emphasis "
11513
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11514
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11515
"order."
11516
msgstr ""
11517
11518
#: serverguide/C/network-config.xml:46(title)
11519
msgid "Identify Ethernet Interfaces"
11520
msgstr ""
11521
11522
#: serverguide/C/network-config.xml:47(para)
11523
msgid ""
11524
"To quickly identify all available Ethernet interfaces, you can use the "
11525
"<application>ifconfig</application> command as shown below."
11526
msgstr ""
11527
11528
#: serverguide/C/network-config.xml:52(userinput)
11529
#, no-wrap
11530
msgid "ifconfig -a | grep eth"
11531
msgstr ""
11532
11533
#: serverguide/C/network-config.xml:51(screen)
11534
#, no-wrap
11535
msgid ""
11536
"\n"
11537
"<placeholder-1/>\n"
11538
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11539
msgstr ""
11540
11541
#: serverguide/C/network-config.xml:55(para)
11542
msgid ""
11543
"Another application that can help identify all network interfaces available "
11544
"to your system is the <application>lshw</application> command. In the "
11545
"example below, <application>lshw</application> shows a single Ethernet "
11546
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11547
"along with bus information, driver details and all supported capabilities."
11548
msgstr ""
11549
11550
#: serverguide/C/network-config.xml:62(userinput)
11551
#, no-wrap
11552
msgid "sudo lshw -class network"
11553
msgstr ""
11554
11555
#: serverguide/C/network-config.xml:61(screen)
11556
#, no-wrap
11557
msgid ""
11558
"\n"
11559
"<placeholder-1/>\n"
11560
" *-network\n"
11561
" description: Ethernet interface\n"
11562
" product: BCM4401-B0 100Base-TX\n"
11563
" vendor: Broadcom Corporation\n"
11564
" physical id: 0\n"
11565
" bus info: pci@0000:03:00.0\n"
11566
" logical name: eth0\n"
11567
" version: 02\n"
11568
" serial: 00:15:c5:4a:16:5a\n"
11569
" size: 10MB/s\n"
11570
" capacity: 100MB/s\n"
11571
" width: 32 bits\n"
11572
" clock: 33MHz\n"
11573
" capabilities: (snipped for brevity)\n"
11574
" configuration: (snipped for brevity)\n"
11575
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11576
msgstr ""
11577
11578
#: serverguide/C/network-config.xml:83(title)
11579
msgid "Ethernet Interface Logical Names"
11580
msgstr ""
11581
11582
#: serverguide/C/network-config.xml:84(para)
11583
msgid ""
11584
"Interface logical names are configured in the file "
11585
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11586
"like control which interface receives a particular logical name, find the "
11587
"line matching the interfaces physical MAC address and modify the value of "
11588
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11589
"Reboot the system to commit your changes."
11590
msgstr ""
11591
11592
#: serverguide/C/network-config.xml:92(programlisting)
11593
#, no-wrap
11594
msgid ""
11595
"\n"
11596
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11597
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11598
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11599
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11600
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11601
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11602
msgstr ""
11603
11604
#: serverguide/C/network-config.xml:99(title)
11605
msgid "Ethernet Interface Settings"
11606
msgstr ""
11607
11608
#: serverguide/C/network-config.xml:100(para)
11609
msgid ""
11610
"<application>ethtool</application> is a program that displays and changes "
11611
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11612
"and Wake-on-LAN. It is not installed by default, but is available for "
11613
"installation in the repositories."
11614
msgstr ""
11615
11616
#: serverguide/C/network-config.xml:106(userinput)
11617
#, no-wrap
11618
msgid "sudo apt-get install ethtool"
11619
msgstr ""
11620
11621
#: serverguide/C/network-config.xml:108(para)
11622
msgid ""
11623
"The following is an example of how to view supported features and configured "
11624
"settings of an Ethernet interface."
11625
msgstr ""
11626
11627
#: serverguide/C/network-config.xml:113(userinput)
11628
#, no-wrap
11629
msgid "sudo ethtool eth0"
11630
msgstr ""
11631
11632
#: serverguide/C/network-config.xml:112(screen)
11633
#, no-wrap
11634
msgid ""
11635
"\n"
11636
"<placeholder-1/>\n"
11637
"Settings for eth0:\n"
11638
" Supported ports: [ TP ]\n"
11639
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11640
" 100baseT/Half 100baseT/Full \n"
11641
" 1000baseT/Half 1000baseT/Full \n"
11642
" Supports auto-negotiation: Yes\n"
11643
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11644
" 100baseT/Half 100baseT/Full \n"
11645
" 1000baseT/Half 1000baseT/Full \n"
11646
" Advertised auto-negotiation: Yes\n"
11647
" Speed: 1000Mb/s\n"
11648
" Duplex: Full\n"
11649
" Port: Twisted Pair\n"
11650
" PHYAD: 1\n"
11651
" Transceiver: internal\n"
11652
" Auto-negotiation: on\n"
11653
" Supports Wake-on: g\n"
11654
" Wake-on: d\n"
11655
" Current message level: 0x000000ff (255)\n"
11656
" Link detected: yes\n"
11657
msgstr ""
11658
11659
#: serverguide/C/network-config.xml:135(para)
11660
msgid ""
11661
"Changes made with the <application>ethtool</application> command are "
11662
"temporary and will be lost after a reboot. If you would like to retain "
11663
"settings, simply add the desired <application>ethtool</application> command "
11664
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11665
"configuration file <filename>/etc/network/interfaces</filename>."
11666
msgstr ""
11667
11668
#: serverguide/C/network-config.xml:141(para)
11669
msgid ""
11670
"The following is an example of how the interface identified as <emphasis "
11671
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11672
"speed of 1000Mb/s running in full duplex mode."
11673
msgstr ""
11674
11675
#: serverguide/C/network-config.xml:145(programlisting)
11676
#, no-wrap
11677
msgid ""
11678
"\n"
11679
"auto eth0\n"
11680
"iface eth0 inet static\n"
11681
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11682
msgstr ""
11683
11684
#: serverguide/C/network-config.xml:151(para)
11685
msgid ""
11686
"Although the example above shows the interface configured to use the "
11687
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11688
"other methods as well, such as DHCP. The example is meant to demonstrate "
11689
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11690
"statement in relation to the rest of the interface configuration."
11691
msgstr ""
11692
11693
#: serverguide/C/network-config.xml:163(title)
11694
msgid "IP Addressing"
11695
msgstr ""
11696
11697
#: serverguide/C/network-config.xml:164(para)
11698
msgid ""
11699
"The following section describes the process of configuring your systems IP "
11700
"address and default gateway needed for communicating on a local area network "
11701
"and the Internet."
11702
msgstr ""
11703
11704
#: serverguide/C/network-config.xml:171(title)
11705
msgid "Temporary IP Address Assignment"
11706
msgstr ""
11707
11708
#: serverguide/C/network-config.xml:172(para)
11709
msgid ""
11710
"For temporary network configurations, you can use standard commands such as "
11711
"<application>ip</application>, <application>ifconfig</application> and "
11712
"<application>route</application>, which are also found on most other "
11713
"GNU/Linux operating systems. These commands allow you to configure settings "
11714
"which take effect immediately, however they are not persistent and will be "
11715
"lost after a reboot."
11716
msgstr ""
11717
11718
#: serverguide/C/network-config.xml:180(para)
11719
msgid ""
11720
"To temporarily configure an IP address, you can use the "
11721
"<application>ifconfig</application> command in the following manner. Just "
11722
"modify the IP address and subnet mask to match your network requirements."
11723
msgstr ""
11724
11725
#: serverguide/C/network-config.xml:186(userinput)
11726
#, no-wrap
11727
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
11728
msgstr ""
11729
11730
#: serverguide/C/network-config.xml:188(para)
11731
msgid ""
11732
"To verify the IP address configuration of <application>eth0</application>, "
11733
"you can use the <application>ifconfig</application> command in the following "
11734
"manner."
11735
msgstr ""
11736
11737
#: serverguide/C/network-config.xml:193(userinput)
11738
#, no-wrap
11739
msgid "ifconfig eth0"
11740
msgstr ""
11741
11742
#: serverguide/C/network-config.xml:192(screen)
11743
#, no-wrap
11744
msgid ""
11745
"\n"
11746
"<placeholder-1/>\n"
11747
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
11748
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
11749
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
11750
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
11751
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
11752
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
11753
" collisions:0 txqueuelen:1000 \n"
11754
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
11755
" Interrupt:16 \n"
11756
msgstr ""
11757
11758
#: serverguide/C/network-config.xml:204(para)
11759
msgid ""
11760
"To configure a default gateway, you can use the "
11761
"<application>route</application> command in the following manner. Modify the "
11762
"default gateway address to match your network requirements."
11763
msgstr ""
11764
11765
#: serverguide/C/network-config.xml:210(userinput)
11766
#, no-wrap
11767
msgid "sudo route add default gw 10.0.0.1 eth0"
11768
msgstr ""
11769
11770
#: serverguide/C/network-config.xml:212(para)
11771
msgid ""
11772
"To verify your default gateway configuration, you can use the "
11773
"<application>route</application> command in the following manner."
11774
msgstr ""
11775
11776
#: serverguide/C/network-config.xml:217(userinput)
11777
#, no-wrap
11778
msgid "route -n"
11779
msgstr ""
11780
11781
#: serverguide/C/network-config.xml:216(screen)
11782
#, no-wrap
11783
msgid ""
11784
"\n"
11785
"<placeholder-1/>\n"
11786
"Kernel IP routing table\n"
11787
"Destination Gateway Genmask Flags Metric Ref Use "
11788
"Iface\n"
11789
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
11790
"eth0\n"
11791
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
11792
"eth0\n"
11793
msgstr ""
11794
11795
#: serverguide/C/network-config.xml:223(para)
11796
msgid ""
11797
"If you require DNS for your temporary network configuration, you can add DNS "
11798
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
11799
"example below shows how to enter two DNS servers to "
11800
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
11801
"appropriate for your network. A more lengthy description of DNS client "
11802
"configuration is in a following section."
11803
msgstr ""
11804
11805
#: serverguide/C/network-config.xml:230(programlisting)
11806
#, no-wrap
11807
msgid ""
11808
"\n"
11809
"nameserver 8.8.8.8\n"
11810
"nameserver 8.8.4.4\n"
11811
msgstr ""
11812
11813
#: serverguide/C/network-config.xml:234(para)
11814
msgid ""
11815
"If you no longer need this configuration and wish to purge all IP "
11816
"configuration from an interface, you can use the "
11817
"<application>ip</application> command with the flush option as shown below."
11818
msgstr ""
11819
11820
#: serverguide/C/network-config.xml:240(userinput)
11821
#, no-wrap
11822
msgid "ip addr flush eth0"
11823
msgstr ""
11824
11825
#: serverguide/C/network-config.xml:243(para)
11826
msgid ""
11827
"Flushing the IP configuration using the <application>ip</application> "
11828
"command does not clear the contents of "
11829
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
11830
"entries manually."
11831
msgstr ""
11832
11833
#: serverguide/C/network-config.xml:251(title)
11834
msgid "Dynamic IP Address Assignment (DHCP Client)"
11835
msgstr ""
11836
11837
#: serverguide/C/network-config.xml:252(para)
11838
msgid ""
11839
"To configure your server to use DHCP for dynamic address assignment, add the "
11840
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
11841
"statement for the appropriate interface in the file "
11842
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11843
"are configuring your first Ethernet interface identified as <emphasis "
11844
"role=\"italic\">eth0</emphasis>."
11845
msgstr ""
11846
11847
#: serverguide/C/network-config.xml:259(programlisting)
11848
#, no-wrap
11849
msgid ""
11850
"\n"
11851
"auto eth0\n"
11852
"iface eth0 inet dhcp\n"
11853
msgstr ""
11854
11855
#: serverguide/C/network-config.xml:263(para)
11856
msgid ""
11857
"By adding an interface configuration as shown above, you can manually enable "
11858
"the interface through the <application>ifup</application> command which "
11859
"initiates the DHCP process via <application>dhclient</application>."
11860
msgstr ""
11861
11862
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
11863
#, no-wrap
11864
msgid "sudo ifup eth0"
11865
msgstr ""
11866
11867
#: serverguide/C/network-config.xml:271(para)
11868
msgid ""
11869
"To manually disable the interface, you can use the "
11870
"<application>ifdown</application> command, which in turn will initiate the "
11871
"DHCP release process and shut down the interface."
11872
msgstr ""
11873
11874
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
11875
#, no-wrap
11876
msgid "sudo ifdown eth0"
11877
msgstr ""
11878
11879
#: serverguide/C/network-config.xml:282(title)
11880
msgid "Static IP Address Assignment"
11881
msgstr ""
11882
11883
#: serverguide/C/network-config.xml:283(para)
11884
msgid ""
11885
"To configure your system to use a static IP address assignment, add the "
11886
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
11887
"family statement for the appropriate interface in the file "
11888
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11889
"are configuring your first Ethernet interface identified as <emphasis "
11890
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
11891
"role=\"italic\">address</emphasis>, <emphasis "
11892
"role=\"italic\">netmask</emphasis>, and <emphasis "
11893
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
11894
"network."
11895
msgstr ""
11896
11897
#: serverguide/C/network-config.xml:292(programlisting)
11898
#, no-wrap
11899
msgid ""
11900
"\n"
11901
"auto eth0\n"
11902
"iface eth0 inet static\n"
11903
"address 10.0.0.100\n"
11904
"netmask 255.255.255.0\n"
11905
"gateway 10.0.0.1\n"
11906
msgstr ""
11907
11908
#: serverguide/C/network-config.xml:299(para)
11909
msgid ""
11910
"By adding an interface configuration as shown above, you can manually enable "
11911
"the interface through the <application>ifup</application> command."
11912
msgstr ""
11913
11914
#: serverguide/C/network-config.xml:306(para)
11915
msgid ""
11916
"To manually disable the interface, you can use the "
11917
"<application>ifdown</application> command."
11918
msgstr ""
11919
11920
#: serverguide/C/network-config.xml:316(title)
11921
msgid "Loopback Interface"
11922
msgstr ""
11923
11924
#: serverguide/C/network-config.xml:317(para)
11925
msgid ""
11926
"The loopback interface is identified by the system as <emphasis "
11927
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
11928
"can be viewed using the ifconfig command."
11929
msgstr ""
11930
11931
#: serverguide/C/network-config.xml:322(userinput)
11932
#, no-wrap
11933
msgid "ifconfig lo"
11934
msgstr ""
11935
11936
#: serverguide/C/network-config.xml:321(screen)
11937
#, no-wrap
11938
msgid ""
11939
"\n"
11940
"<placeholder-1/>\n"
11941
"lo Link encap:Local Loopback \n"
11942
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
11943
" inet6 addr: ::1/128 Scope:Host\n"
11944
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
11945
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
11946
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
11947
" collisions:0 txqueuelen:0 \n"
11948
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
11949
msgstr ""
11950
11951
#: serverguide/C/network-config.xml:332(para)
11952
msgid ""
11953
"By default, there should be two lines in "
11954
"<filename>/etc/network/interfaces</filename> responsible for automatically "
11955
"configuring your loopback interface. It is recommended that you keep the "
11956
"default settings unless you have a specific purpose for changing them. An "
11957
"example of the two default lines are shown below."
11958
msgstr ""
11959
11960
#: serverguide/C/network-config.xml:338(programlisting)
11961
#, no-wrap
11962
msgid ""
11963
"\n"
11964
"auto lo\n"
11965
"iface lo inet loopback\n"
11966
msgstr ""
11967
11968
#: serverguide/C/network-config.xml:347(title)
11969
msgid "Name Resolution"
11970
msgstr ""
11971
11972
#: serverguide/C/network-config.xml:348(para)
11973
msgid ""
11974
"Name resolution as it relates to IP networking is the process of mapping IP "
11975
"addresses to hostnames, making it easier to identify resources on a network. "
11976
"The following section will explain how to properly configure your system for "
11977
"name resolution using DNS and static hostname records."
11978
msgstr ""
11979
11980
#: serverguide/C/network-config.xml:356(title)
11981
msgid "DNS Client Configuration"
11982
msgstr ""
11983
11984
#: serverguide/C/network-config.xml:357(para)
11985
msgid ""
11986
"To configure your system to use DNS for name resolution, add the IP "
11987
"addresses of the DNS servers that are appropriate for your network in the "
11988
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
11989
"suffix search-lists to match your network domain names."
11990
msgstr ""
11991
11992
#: serverguide/C/network-config.xml:362(para)
11993
msgid ""
11994
"Below is an example of a typical configuration of "
11995
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
11996
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
11997
msgstr ""
11998
11999
#: serverguide/C/network-config.xml:367(programlisting)
12000
#, no-wrap
12001
msgid ""
12002
"\n"
12003
"search example.com\n"
12004
"nameserver 8.8.8.8\n"
12005
"nameserver 8.8.4.4\n"
12006
msgstr ""
12007
12008
#: serverguide/C/network-config.xml:372(para)
12009
msgid ""
12010
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12011
"multiple domain names so that DNS queries will be appended in the order in "
12012
"which they are entered. For example, your network may have multiple sub-"
12013
"domains to search; a parent domain of <emphasis "
12014
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12015
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12016
"role=\"italic\">dev.example.com</emphasis>."
12017
msgstr ""
12018
12019
#: serverguide/C/network-config.xml:380(para)
12020
msgid ""
12021
"If you have multiple domains you wish to search, your configuration might "
12022
"look like the following."
12023
msgstr ""
12024
12025
#: serverguide/C/network-config.xml:383(programlisting)
12026
#, no-wrap
12027
msgid ""
12028
"\n"
12029
"search example.com sales.example.com dev.example.com\n"
12030
"nameserver 8.8.8.8\n"
12031
"nameserver 8.8.4.4\n"
12032
msgstr ""
12033
12034
#: serverguide/C/network-config.xml:388(para)
12035
msgid ""
12036
"If you try to ping a host with the name of <emphasis "
12037
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12038
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12039
msgstr ""
12040
12041
#: serverguide/C/network-config.xml:394(para)
12042
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12043
msgstr ""
12044
12045
#: serverguide/C/network-config.xml:399(para)
12046
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12047
msgstr ""
12048
12049
#: serverguide/C/network-config.xml:404(para)
12050
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12051
msgstr ""
12052
12053
#: serverguide/C/network-config.xml:409(para)
12054
msgid ""
12055
"If no matches are found, the DNS server will provide a result of <emphasis "
12056
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12057
msgstr ""
12058
12059
#: serverguide/C/network-config.xml:416(title)
12060
msgid "Static Hostnames"
12061
msgstr ""
12062
12063
#: serverguide/C/network-config.xml:417(para)
12064
msgid ""
12065
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12066
"file <filename>/etc/hosts</filename>. Entries in the "
12067
"<filename>hosts</filename> file will have precedence over DNS by default. "
12068
"This means that if your system tries to resolve a hostname and it matches an "
12069
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12070
"some configurations, especially when Internet access is not required, "
12071
"servers that communicate with a limited number of resources can be "
12072
"conveniently set to use static hostnames instead of DNS."
12073
msgstr ""
12074
12075
#: serverguide/C/network-config.xml:424(para)
12076
msgid ""
12077
"The following is an example of a <filename>hosts</filename> file where a "
12078
"number of local servers have been identified by simple hostnames, aliases "
12079
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12080
msgstr ""
12081
12082
#: serverguide/C/network-config.xml:428(programlisting)
12083
#, no-wrap
12084
msgid ""
12085
"\n"
12086
"127.0.0.1\tlocalhost\n"
12087
"127.0.1.1\tubuntu-server\n"
12088
"10.0.0.11\tserver1 vpn server1.example.com\n"
12089
"10.0.0.12\tserver2 mail server2.example.com\n"
12090
"10.0.0.13\tserver3 www server3.example.com\n"
12091
"10.0.0.14\tserver4 file server4.example.com\n"
12092
msgstr ""
12093
12094
#: serverguide/C/network-config.xml:437(para)
12095
msgid ""
12096
"In the above example, notice that each of the servers have been given "
12097
"aliases in addition to their proper names and FQDN's. <emphasis "
12098
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12099
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12100
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12101
"role=\"italic\">server3</emphasis> as <emphasis "
12102
"role=\"italic\">www</emphasis>, and <emphasis "
12103
"role=\"italic\">server4</emphasis> as <emphasis "
12104
"role=\"italic\">file</emphasis>."
12105
msgstr ""
12106
12107
#: serverguide/C/network-config.xml:449(title)
12108
msgid "Name Service Switch Configuration"
12109
msgstr ""
12110
12111
#: serverguide/C/network-config.xml:450(para)
12112
msgid ""
12113
"The order in which your system selects a method of resolving hostnames to IP "
12114
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12115
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12116
"section, typically static hostnames defined in the systems "
12117
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12118
"from DNS. The following is an example of the line responsible for this order "
12119
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12120
msgstr ""
12121
12122
#: serverguide/C/network-config.xml:458(programlisting)
12123
#, no-wrap
12124
msgid ""
12125
"\n"
12126
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12127
msgstr ""
12128
12129
#: serverguide/C/network-config.xml:464(para)
12130
msgid ""
12131
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12132
"hostnames located in <filename>/etc/hosts</filename>."
12133
msgstr ""
12134
12135
#: serverguide/C/network-config.xml:470(para)
12136
msgid ""
12137
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12138
"name using Multicast DNS."
12139
msgstr ""
12140
12141
#: serverguide/C/network-config.xml:475(para)
12142
msgid ""
12143
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12144
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12145
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12146
"authoritative and that the system should not try to continue hunting for an "
12147
"answer."
12148
msgstr ""
12149
12150
#: serverguide/C/network-config.xml:483(para)
12151
msgid ""
12152
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12153
msgstr ""
12154
12155
#: serverguide/C/network-config.xml:488(para)
12156
msgid ""
12157
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12158
msgstr ""
12159
12160
#: serverguide/C/network-config.xml:494(para)
12161
msgid ""
12162
"To modify the order of the above mentioned name resolution methods, you can "
12163
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12164
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12165
"versus Multicast DNS, you can change the string in "
12166
"<filename>/etc/nsswitch.conf</filename> as shown below."
12167
msgstr ""
12168
12169
#: serverguide/C/network-config.xml:501(programlisting)
12170
#, no-wrap
12171
msgid ""
12172
"\n"
12173
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12174
msgstr ""
12175
12176
#: serverguide/C/network-config.xml:508(title)
12177
msgid "Bridging"
12178
msgstr ""
12179
12180
#: serverguide/C/network-config.xml:510(para)
12181
msgid ""
12182
"Bridging multiple interfaces is a more advanced configuration, but is very "
12183
"useful in multiple scenarios. One scenario is setting up a bridge with "
12184
"multiple network interfaces, then using a firewall to filter traffic between "
12185
"two network segments. Another scenario is using bridge on a system with one "
12186
"interface to allow virtual machines direct access to the outside network. "
12187
"The following example covers the latter scenario."
12188
msgstr ""
12189
12190
#: serverguide/C/network-config.xml:517(para)
12191
msgid ""
12192
"Before configuring a bridge you will need to install the <application>bridge-"
12193
"utils</application> package. To install the package, in a terminal enter:"
12194
msgstr ""
12195
12196
#: serverguide/C/network-config.xml:523(command)
12197
msgid "sudo apt-get install bridge-utils"
12198
msgstr ""
12199
12200
#: serverguide/C/network-config.xml:526(para)
12201
msgid ""
12202
"Next, configure the bridge by editing "
12203
"<filename>/etc/network/interfaces</filename>:"
12204
msgstr ""
12205
12206
#: serverguide/C/network-config.xml:530(programlisting)
12207
#, no-wrap
12208
msgid ""
12209
"\n"
12210
"auto lo\n"
12211
"iface lo inet loopback\n"
12212
"\n"
12213
"auto br0\n"
12214
"iface br0 inet static\n"
12215
" address 192.168.0.10\n"
12216
" network 192.168.0.0\n"
12217
" netmask 255.255.255.0\n"
12218
" broadcast 192.168.0.255\n"
12219
" gateway 192.168.0.1\n"
12220
" bridge_ports eth0\n"
12221
" bridge_fd 9\n"
12222
" bridge_hello 2\n"
12223
" bridge_maxage 12\n"
12224
" bridge_stp off\n"
12225
msgstr ""
12226
12227
#: serverguide/C/network-config.xml:549(para)
12228
msgid "Enter the appropriate values for your physical interface and network."
12229
msgstr ""
12230
12231
#: serverguide/C/network-config.xml:554(para)
12232
msgid "Now restart networking to enable the bridge interface:"
12233
msgstr ""
12234
12235
#: serverguide/C/network-config.xml:561(para)
12236
msgid ""
12237
"The new bridge interface should now be up and running. The "
12238
"<application>brctl</application> provides useful information about the state "
12239
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12240
"<command>man brctl</command> for more information."
12241
msgstr ""
12242
12243
#: serverguide/C/network-config.xml:577(para)
12244
msgid ""
12245
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12246
"Network page</ulink> has links to articles covering more advanced network "
12247
"configuration."
12248
msgstr ""
12249
12250
#: serverguide/C/network-config.xml:583(para)
12251
msgid ""
12252
"The <ulink "
12253
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12254
"nterfaces man page</ulink> has details on more options for "
12255
"<filename>/etc/network/interfaces</filename>."
12256
msgstr ""
12257
12258
#: serverguide/C/network-config.xml:589(para)
12259
msgid ""
12260
"The <ulink "
12261
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12262
"lient man page</ulink> has details on more options for configuring DHCP "
12263
"client settings."
12264
msgstr ""
12265
12266
#: serverguide/C/network-config.xml:595(para)
12267
msgid ""
12268
"For more information on DNS client configuration see the <ulink "
12269
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12270
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12271
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12272
"Administrator's Guide</ulink> is a good source of resolver and name service "
12273
"configuration information."
12274
msgstr ""
12275
12276
#: serverguide/C/network-config.xml:603(para)
12277
msgid ""
12278
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12279
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12280
"man page</ulink> and the Linux Foundation's <ulink "
12281
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12282
msgstr ""
12283
12284
#: serverguide/C/network-config.xml:614(title)
12285
msgid "TCP/IP"
12286
msgstr ""
12287
12288
#: serverguide/C/network-config.xml:615(para)
12289
msgid ""
12290
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12291
"standard set of protocols developed in the late 1970s by the Defense "
12292
"Advanced Research Projects Agency (DARPA) as a means of communication "
12293
"between different types of computers and computer networks. TCP/IP is the "
12294
"driving force of the Internet, and thus it is the most popular set of "
12295
"network protocols on Earth."
12296
msgstr ""
12297
12298
#: serverguide/C/network-config.xml:623(title)
12299
msgid "TCP/IP Introduction"
12300
msgstr ""
12301
12302
#: serverguide/C/network-config.xml:624(para)
12303
msgid ""
12304
"The two protocol components of TCP/IP deal with different aspects of "
12305
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12306
"TCP/IP is a connectionless protocol which deals only with network packet "
12307
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12308
"basic unit of networking information. The IP Datagram consists of a header "
12309
"followed by a message. The <emphasis> Transmission Control "
12310
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12311
"establish connections which may be used to exchange data streams. TCP also "
12312
"guarantees that the data between connections is delivered and that it "
12313
"arrives at one network host in the same order as sent from another network "
12314
"host."
12315
msgstr ""
12316
12317
#: serverguide/C/network-config.xml:637(title)
12318
msgid "TCP/IP Configuration"
12319
msgstr ""
12320
12321
#: serverguide/C/network-config.xml:638(para)
12322
msgid ""
12323
"The TCP/IP protocol configuration consists of several elements which must be "
12324
"set by editing the appropriate configuration files, or deploying solutions "
12325
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12326
"can be configured to provide the proper TCP/IP configuration settings to "
12327
"network clients automatically. These configuration values must be set "
12328
"correctly in order to facilitate the proper network operation of your Ubuntu "
12329
"system."
12330
msgstr ""
12331
12332
#: serverguide/C/network-config.xml:650(para)
12333
msgid ""
12334
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12335
"identifying string expressed as four decimal numbers ranging from zero (0) "
12336
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12337
"four numbers representing eight (8) bits of the address for a total length "
12338
"of thirty-two (32) bits for the whole address. This format is called "
12339
"<emphasis>dotted quad notation</emphasis>."
12340
msgstr ""
12341
12342
#: serverguide/C/network-config.xml:660(para)
12343
msgid ""
12344
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12345
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12346
"separate the portions of an IP address significant to the network from the "
12347
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12348
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12349
"three bytes of the IP address and allows the last byte of the IP address to "
12350
"remain available for specifying hosts on the subnetwork."
12351
msgstr ""
12352
12353
#: serverguide/C/network-config.xml:671(para)
12354
msgid ""
12355
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12356
"represents the bytes comprising the network portion of an IP address. For "
12357
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12358
"network address, where twelve (12) represents the first byte of the IP "
12359
"address, (the network part) and zeroes (0) in all of the remaining three "
12360
"bytes to represent the potential host values. A network host using the "
12361
"private IP address 192.168.1.100 would in turn use a Network Address of "
12362
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12363
"network and a zero (0) for all the possible hosts on the network."
12364
msgstr ""
12365
12366
#: serverguide/C/network-config.xml:684(para)
12367
msgid ""
12368
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12369
"is an IP address which allows network data to be sent simultaneously to all "
12370
"hosts on a given subnetwork rather than specifying a particular host. The "
12371
"standard general broadcast address for IP networks is 255.255.255.255, but "
12372
"this broadcast address cannot be used to send a broadcast message to every "
12373
"host on the Internet because routers block it. A more appropriate broadcast "
12374
"address is set to match a specific subnetwork. For example, on the private "
12375
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12376
"Broadcast messages are typically produced by network protocols such as the "
12377
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12378
msgstr ""
12379
12380
#: serverguide/C/network-config.xml:697(para)
12381
msgid ""
12382
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12383
"IP address through which a particular network, or host on a network, may be "
12384
"reached. If one network host wishes to communicate with another network "
12385
"host, and that host is not located on the same network, then a "
12386
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12387
"Address will be that of a router on the same network, which will in turn "
12388
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12389
"value of the Gateway Address setting must be correct, or your system will "
12390
"not be able to reach any hosts beyond those on the same network."
12391
msgstr ""
12392
12393
#: serverguide/C/network-config.xml:708(para)
12394
msgid ""
12395
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12396
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12397
"resolve network hostnames into IP addresses. There are three levels of "
12398
"Nameserver Addresses, which may be specified in order of precedence: The "
12399
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12400
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12401
"your system to be able to resolve network hostnames into their corresponding "
12402
"IP addresses, you must specify valid Nameserver Addresses which you are "
12403
"authorized to use in your system's TCP/IP configuration. In many cases these "
12404
"addresses can and will be provided by your network service provider, but "
12405
"many free and publicly accessible nameservers are available for use, such as "
12406
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12407
msgstr ""
12408
12409
#: serverguide/C/network-config.xml:722(para)
12410
msgid ""
12411
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12412
"Address are typically specified via the appropriate directives in the file "
12413
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12414
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12415
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12416
"system manual page for <filename>interfaces</filename> or "
12417
"<filename>resolv.conf</filename> respectively, with the following commands "
12418
"typed at a terminal prompt:"
12419
msgstr ""
12420
12421
#: serverguide/C/network-config.xml:729(para)
12422
msgid ""
12423
"Access the system manual page for <filename>interfaces</filename> with the "
12424
"following command:"
12425
msgstr ""
12426
12427
#: serverguide/C/network-config.xml:734(command)
12428
msgid "man interfaces"
12429
msgstr ""
12430
12431
#: serverguide/C/network-config.xml:737(para)
12432
msgid ""
12433
"Access the system manual page for <filename>resolv.conf</filename> with the "
12434
"following command:"
12435
msgstr ""
12436
12437
#: serverguide/C/network-config.xml:741(command)
12438
msgid "man resolv.conf"
12439
msgstr ""
12440
12441
#: serverguide/C/network-config.xml:646(para)
12442
msgid ""
12443
"The common configuration elements of TCP/IP and their purposes are as "
12444
"follows: <placeholder-1/>"
12445
msgstr ""
12446
12447
#: serverguide/C/network-config.xml:748(title)
12448
msgid "IP Routing"
12449
msgstr ""
12450
12451
#: serverguide/C/network-config.xml:749(para)
12452
msgid ""
12453
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12454
"network along which network data may be sent. Routing uses a set of "
12455
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12456
"packets from their source to the destination, often via many intermediary "
12457
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12458
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12459
"<emphasis>Dynamic Routing.</emphasis>"
12460
msgstr ""
12461
12462
#: serverguide/C/network-config.xml:758(para)
12463
msgid ""
12464
"Static routing involves manually adding IP routes to the system's routing "
12465
"table, and this is usually done by manipulating the routing table with the "
12466
"<application>route</application> command. Static routing enjoys many "
12467
"advantages over dynamic routing, such as simplicity of implementation on "
12468
"smaller networks, predictability (the routing table is always computed in "
12469
"advance, and thus the route is precisely the same each time it is used), and "
12470
"low overhead on other routers and network links due to the lack of a dynamic "
12471
"routing protocol. However, static routing does present some disadvantages as "
12472
"well. For example, static routing is limited to small networks and does not "
12473
"scale well. Static routing also fails completely to adapt to network outages "
12474
"and failures along the route due to the fixed nature of the route."
12475
msgstr ""
12476
12477
#: serverguide/C/network-config.xml:768(para)
12478
msgid ""
12479
"Dynamic routing depends on large networks with multiple possible IP routes "
12480
"from a source to a destination and makes use of special routing protocols, "
12481
"such as the Router Information Protocol (RIP), which handle the automatic "
12482
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12483
"routing has several advantages over static routing, such as superior "
12484
"scalability and the ability to adapt to failures and outages along network "
12485
"routes. Additionally, there is less manual configuration of the routing "
12486
"tables, since routers learn from one another about their existence and "
12487
"available routes. This trait also eliminates the possibility of introducing "
12488
"mistakes in the routing tables via human error. Dynamic routing is not "
12489
"perfect, however, and presents disadvantages such as heightened complexity "
12490
"and additional network overhead from router communications, which does not "
12491
"immediately benefit the end users, but still consumes network bandwidth."
12492
msgstr ""
12493
12494
#: serverguide/C/network-config.xml:782(title)
12495
msgid "TCP and UDP"
12496
msgstr ""
12497
12498
#: serverguide/C/network-config.xml:783(para)
12499
msgid ""
12500
"TCP is a connection-based protocol, offering error correction and guaranteed "
12501
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12502
"Flow control determines when the flow of a data stream needs to be stopped, "
12503
"and previously sent data packets should to be re-sent due to problems such "
12504
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12505
"accurate delivery of the data. TCP is typically used in the exchange of "
12506
"important information such as database transactions."
12507
msgstr ""
12508
12509
#: serverguide/C/network-config.xml:791(para)
12510
msgid ""
12511
"The User Datagram Protocol (UDP), on the other hand, is a "
12512
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12513
"transmission of important data because it lacks flow control or any other "
12514
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12515
"applications as audio and video streaming, where it is considerably faster "
12516
"than TCP due to the lack of error correction and flow control, and where the "
12517
"loss of a few packets is not generally catastrophic."
12518
msgstr ""
12519
12520
#: serverguide/C/network-config.xml:801(title)
12521
msgid "ICMP"
12522
msgstr ""
12523
12524
#: serverguide/C/network-config.xml:802(para)
12525
msgid ""
12526
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12527
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12528
"supports network packets containing control, error, and informational "
12529
"messages. ICMP is used by such network applications as the "
12530
"<application>ping</application> utility, which can determine the "
12531
"availability of a network host or device. Examples of some error messages "
12532
"returned by ICMP which are useful to both network hosts and devices such as "
12533
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12534
"<emphasis>Time Exceeded</emphasis>."
12535
msgstr ""
12536
12537
#: serverguide/C/network-config.xml:812(title)
12538
msgid "Daemons"
12539
msgstr ""
12540
12541
#: serverguide/C/network-config.xml:813(para)
12542
msgid ""
12543
"Daemons are special system applications which typically execute continuously "
12544
"in the background and await requests for the functions they provide from "
12545
"other applications. Many daemons are network-centric; that is, a large "
12546
"number of daemons executing in the background on an Ubuntu system may "
12547
"provide network-related functionality. Some examples of such network daemons "
12548
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12549
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12550
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12551
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12552
"Daemon</emphasis> (imapd), which provides E-Mail services."
12553
msgstr ""
12554
12555
#: serverguide/C/network-config.xml:828(para)
12556
msgid ""
12557
"There are man pages for <ulink "
12558
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12559
"nk> and <ulink "
12560
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12561
"that contain more useful information."
12562
msgstr ""
12563
12564
#: serverguide/C/network-config.xml:834(para)
12565
msgid ""
12566
"Also, see the <ulink "
12567
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12568
"and Technical Overview</ulink> IBM Redbook."
12569
msgstr ""
12570
12571
#: serverguide/C/network-config.xml:840(para)
12572
msgid ""
12573
"Another resource is O'Reilly's <ulink "
12574
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12575
"Administration</ulink>."
12576
msgstr ""
12577
12578
#: serverguide/C/network-config.xml:849(title)
12579
msgid "Dynamic Host Configuration Protocol (DHCP)"
12580
msgstr ""
12581
12582
#: serverguide/C/network-config.xml:850(para)
12583
msgid ""
12584
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12585
"enables host computers to be automatically assigned settings from a server "
12586
"as opposed to manually configuring each network host. Computers configured "
12587
"to be DHCP clients have no control over the settings they receive from the "
12588
"DHCP server, and the configuration is transparent to the computer's user."
12589
msgstr ""
12590
12591
#: serverguide/C/network-config.xml:857(para)
12592
msgid ""
12593
"The most common settings provided by a DHCP server to DHCP clients include:"
12594
msgstr ""
12595
12596
#: serverguide/C/network-config.xml:862(para)
12597
msgid "IP-Address and Netmask"
12598
msgstr ""
12599
12600
#: serverguide/C/network-config.xml:865(para)
12601
msgid "DNS"
12602
msgstr ""
12603
12604
#: serverguide/C/network-config.xml:868(para)
12605
msgid "WINS"
12606
msgstr ""
12607
12608
#: serverguide/C/network-config.xml:871(para)
12609
msgid ""
12610
"However, a DHCP server can also supply configuration properties such as:"
12611
msgstr ""
12612
12613
#: serverguide/C/network-config.xml:876(para)
12614
msgid "Host Name"
12615
msgstr ""
12616
12617
#: serverguide/C/network-config.xml:879(para)
12618
msgid "Domain Name"
12619
msgstr ""
12620
12621
#: serverguide/C/network-config.xml:882(para)
12622
msgid "Default Gateway"
12623
msgstr ""
12624
12625
#: serverguide/C/network-config.xml:885(para)
12626
msgid "Time Server"
12627
msgstr ""
12628
12629
#: serverguide/C/network-config.xml:888(para)
12630
msgid "Print Server"
12631
msgstr ""
12632
12633
#: serverguide/C/network-config.xml:891(para)
12634
msgid ""
12635
"The advantage of using DHCP is that changes to the network, for example a "
12636
"change in the address of the DNS server, need only be changed at the DHCP "
12637
"server, and all network hosts will be reconfigured the next time their DHCP "
12638
"clients poll the DHCP server. As an added advantage, it is also easier to "
12639
"integrate new computers into the network, as there is no need to check for "
12640
"the availability of an IP address. Conflicts in IP address allocation are "
12641
"also reduced."
12642
msgstr ""
12643
12644
#: serverguide/C/network-config.xml:899(para)
12645
msgid "A DHCP server can provide configuration settings using two methods:"
12646
msgstr ""
12647
12648
#: serverguide/C/network-config.xml:904(term)
12649
msgid "MAC Address"
12650
msgstr ""
12651
12652
#: serverguide/C/network-config.xml:906(para)
12653
msgid ""
12654
"This method entails using DHCP to identify the unique hardware address of "
12655
"each network card connected to the network and then continually supplying a "
12656
"constant configuration each time the DHCP client makes a request to the DHCP "
12657
"server using that network device."
12658
msgstr ""
12659
12660
#: serverguide/C/network-config.xml:915(term)
12661
msgid "Address Pool"
12662
msgstr ""
12663
12664
#: serverguide/C/network-config.xml:917(para)
12665
msgid ""
12666
"This method entails defining a pool (sometimes also called a range or scope) "
12667
"of IP addresses from which DHCP clients are supplied their configuration "
12668
"properties dynamically and on a \"first come, first served\" basis. When a "
12669
"DHCP client is no longer on the network for a specified period, the "
12670
"configuration is expired and released back to the address pool for use by "
12671
"other DHCP Clients."
12672
msgstr ""
12673
12674
#: serverguide/C/network-config.xml:928(para)
12675
msgid ""
12676
"Ubuntu is shipped with both DHCP server and client. The server is "
12677
"<application>dhcpd</application> (dynamic host configuration protocol "
12678
"daemon). The client provided with Ubuntu is "
12679
"<application>dhclient</application> and should be installed on all computers "
12680
"required to be automatically configured. Both programs are easy to install "
12681
"and configure and will be automatically started at system boot."
12682
msgstr ""
12683
12684
#: serverguide/C/network-config.xml:938(para)
12685
msgid ""
12686
"At a terminal prompt, enter the following command to install "
12687
"<application>dhcpd</application>:"
12688
msgstr ""
12689
12690
#: serverguide/C/network-config.xml:943(command)
12691
msgid "sudo apt-get install dhcp3-server"
12692
msgstr ""
12693
12694
#: serverguide/C/network-config.xml:945(para)
12695
msgid ""
12696
"You will probably need to change the default configuration by editing "
12697
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12698
msgstr ""
12699
12700
#: serverguide/C/network-config.xml:949(para)
12701
msgid ""
12702
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
12703
"dhcpd should listen to. By default it listens to eth0."
12704
msgstr ""
12705
12706
#: serverguide/C/network-config.xml:953(para)
12707
msgid ""
12708
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
12709
"messages."
12710
msgstr ""
12711
12712
#: serverguide/C/network-config.xml:960(para)
12713
msgid ""
12714
"The error message the installation ends with might be a little confusing, "
12715
"but the following steps will help you configure the service:"
12716
msgstr ""
12717
12718
#: serverguide/C/network-config.xml:964(para)
12719
msgid ""
12720
"Most commonly, what you want to do is assign an IP address randomly. This "
12721
"can be done with settings as follows:"
12722
msgstr ""
12723
12724
#: serverguide/C/network-config.xml:968(programlisting)
12725
#, no-wrap
12726
msgid ""
12727
"\n"
12728
"# Sample /etc/dhcpd.conf\n"
12729
"# (add your comments here) \n"
12730
"default-lease-time 600;\n"
12731
"max-lease-time 7200;\n"
12732
"option subnet-mask 255.255.255.0;\n"
12733
"option broadcast-address 192.168.1.255;\n"
12734
"option routers 192.168.1.254;\n"
12735
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
12736
"option domain-name \"mydomain.example\";\n"
12737
"\n"
12738
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
12739
"range 192.168.1.10 192.168.1.100;\n"
12740
"range 192.168.1.150 192.168.1.200;\n"
12741
"} \n"
12742
msgstr ""
12743
12744
#: serverguide/C/network-config.xml:984(para)
12745
msgid ""
12746
"This will result in the DHCP server giving a client an IP address from the "
12747
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
12748
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
12749
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
12750
"server will also \"advise\" the client that it should use 255.255.255.0 as "
12751
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
12752
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
12753
msgstr ""
12754
12755
#: serverguide/C/network-config.xml:993(para)
12756
msgid ""
12757
"If you need to specify a WINS server for your Windows clients, you will need "
12758
"to include the netbios-name-servers option, e.g."
12759
msgstr ""
12760
12761
#: serverguide/C/network-config.xml:997(programlisting)
12762
#, no-wrap
12763
msgid ""
12764
"\n"
12765
"option netbios-name-servers 192.168.1.1; \n"
12766
msgstr ""
12767
12768
#: serverguide/C/network-config.xml:1000(para)
12769
msgid ""
12770
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
12771
"be found <ulink "
12772
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
12773
msgstr ""
12774
12775
#: serverguide/C/network-config.xml:1010(para)
12776
msgid ""
12777
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
12778
"server Ubuntu Wiki</ulink> page has more information."
12779
msgstr ""
12780
12781
#: serverguide/C/network-config.xml:1015(para)
12782
msgid ""
12783
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
12784
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
12785
"hcpd.conf man page</ulink>."
12786
msgstr ""
12787
12788
#: serverguide/C/network-config.xml:1021(para)
12789
msgid ""
12790
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
12791
"FAQ</ulink>"
12792
msgstr ""
12793
12794
#: serverguide/C/network-config.xml:1031(title)
12795
msgid "Time Synchronisation with NTP"
12796
msgstr ""
12797
12798
#: serverguide/C/network-config.xml:1032(para)
12799
msgid ""
12800
"This page describes methods for keeping your computer's time accurate. This "
12801
"is useful for servers, but is not necessary (or desirable) for desktop "
12802
"machines."
12803
msgstr ""
12804
12805
#: serverguide/C/network-config.xml:1035(para)
12806
msgid ""
12807
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
12808
"client requests the current time from a server, and uses it to set its own "
12809
"clock."
12810
msgstr ""
12811
12812
#: serverguide/C/network-config.xml:1038(para)
12813
msgid ""
12814
"Behind this simple description, there is a lot of complexity - there are "
12815
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
12816
"clocks (often via GPS), and tier two and three servers spreading the load of "
12817
"actually handling requests across the Internet. Also the client software is "
12818
"a lot more complex than you might think - it has to factor out communication "
12819
"delays, and adjust the time in a way that does not upset all the other "
12820
"processes that run on the server. But luckily all that complexity is hidden "
12821
"from you!"
12822
msgstr ""
12823
12824
#: serverguide/C/network-config.xml:1041(para)
12825
msgid ""
12826
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
12827
msgstr ""
12828
12829
#: serverguide/C/network-config.xml:1046(title)
12830
msgid "ntpdate"
12831
msgstr ""
12832
12833
#: serverguide/C/network-config.xml:1047(para)
12834
msgid ""
12835
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
12836
"set up your time according to Ubuntu's NTP server. However, a server's clock "
12837
"is likely to drift considerably between reboots, so it makes sense to "
12838
"correct the time occasionally. The easiest way to do this is to get cron to "
12839
"run ntpdate every day. With your favorite editor, as root, create a file "
12840
"<code>/etc/cron.daily/ntpdate</code> containing:"
12841
msgstr ""
12842
12843
#: serverguide/C/network-config.xml:1052(screen)
12844
#, no-wrap
12845
msgid "ntpdate ntp.ubuntu.com\n"
12846
msgstr ""
12847
12848
#: serverguide/C/network-config.xml:1054(para)
12849
msgid ""
12850
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
12851
msgstr ""
12852
12853
#: serverguide/C/network-config.xml:1057(screen)
12854
#, no-wrap
12855
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
12856
msgstr ""
12857
12858
#: serverguide/C/network-config.xml:1061(title)
12859
msgid "ntpd"
12860
msgstr ""
12861
12862
#: serverguide/C/network-config.xml:1062(para)
12863
msgid ""
12864
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
12865
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
12866
"calculates the drift of your system clock and continuously adjusts it, so "
12867
"there are no large corrections that could lead to inconsistent logs for "
12868
"instance. The cost is a little processing power and memory, but for a modern "
12869
"server this is negligible."
12870
msgstr ""
12871
12872
#: serverguide/C/network-config.xml:1065(para)
12873
msgid "To set up ntpd:"
12874
msgstr ""
12875
12876
#: serverguide/C/network-config.xml:1066(screen)
12877
#, no-wrap
12878
msgid "sudo apt-get install ntp\n"
12879
msgstr ""
12880
12881
#: serverguide/C/network-config.xml:1071(title)
12882
msgid "Changing Time Servers"
12883
msgstr ""
12884
12885
#: serverguide/C/network-config.xml:1072(para)
12886
msgid ""
12887
"In both cases above, your system will use Ubuntu's NTP server at "
12888
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
12889
"use several servers to increase accuracy and resilience, and you may want to "
12890
"use time servers that are geographically closer to you. to do this for "
12891
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
12892
msgstr ""
12893
12894
#: serverguide/C/network-config.xml:1079(screen)
12895
#, no-wrap
12896
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
12897
msgstr ""
12898
12899
#: serverguide/C/network-config.xml:1081(para)
12900
msgid ""
12901
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
12902
"lines:"
12903
msgstr ""
12904
12905
#: serverguide/C/network-config.xml:1086(screen)
12906
#, no-wrap
12907
msgid ""
12908
"server ntp.ubuntu.com\n"
12909
"server pool.ntp.org\n"
12910
msgstr ""
12911
12912
#: serverguide/C/network-config.xml:1089(para)
12913
msgid ""
12914
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
12915
"really good idea which uses round-robin DNS to return an NTP server from a "
12916
"pool, spreading the load between several different servers. Even better, "
12917
"they have pools for different regions - for instance, if you are in New "
12918
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
12919
"<code>pool.ntp.org</code> . Look at <ulink "
12920
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
12921
"details."
12922
msgstr ""
12923
12924
#: serverguide/C/network-config.xml:1100(para)
12925
msgid ""
12926
"You can also Google for NTP servers in your region, and add these to your "
12927
"configuration. To test that a server works, just type <code>sudo ntpdate "
12928
"ntp.server.name</code> and see what happens."
12929
msgstr ""
12930
12931
#: serverguide/C/network-config.xml:1111(para)
12932
msgid ""
12933
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
12934
"Time</ulink> wiki page for more information."
12935
msgstr ""
12936
12937
#: serverguide/C/network-config.xml:1117(ulink)
12938
msgid "NTP Support"
12939
msgstr ""
12940
12941
#: serverguide/C/network-config.xml:1122(ulink)
12942
msgid "The NTP FAQ and HOWTO"
12943
msgstr ""
12944
12945
#: serverguide/C/network-auth.xml:13(title)
12946
msgid "Network Authentication"
12947
msgstr ""
12948
12949
#: serverguide/C/network-auth.xml:15(para)
12950
msgid "This section explains various Network Authentication protocols."
12951
msgstr ""
12952
12953
#: serverguide/C/network-auth.xml:19(title)
12954
msgid "OpenLDAP Server"
12955
msgstr ""
12956
12957
#: serverguide/C/network-auth.xml:20(para)
12958
msgid ""
12959
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
12960
"simplified version of the X.500 protocol. The directory setup in this "
12961
"section will be used for authentication. Nevertheless, LDAP can be used in "
12962
"numerous ways: authentication, shared directory (for mail clients), address "
12963
"book, etc."
12964
msgstr ""
12965
12966
#: serverguide/C/network-auth.xml:28(para)
12967
msgid ""
12968
"To describe LDAP quickly, all information is stored in a tree structure. "
12969
"With <application>OpenLDAP</application> you have freedom to determine the "
12970
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
12971
"We will begin with a basic tree containing two nodes below the root:"
12972
msgstr ""
12973
12974
#: serverguide/C/network-auth.xml:37(para)
12975
msgid "\"People\" node where your users will be stored"
12976
msgstr ""
12977
12978
#: serverguide/C/network-auth.xml:40(para)
12979
msgid "\"Groups\" node where your groups will be stored"
12980
msgstr ""
12981
12982
#: serverguide/C/network-auth.xml:44(para)
12983
msgid ""
12984
"Before beginning, you should determine what the root of your LDAP directory "
12985
"will be. By default, your tree will be determined by your Fully Qualified "
12986
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
12987
"example), your root node will be dc=example,dc=com."
12988
msgstr ""
12989
12990
#: serverguide/C/network-auth.xml:54(para)
12991
msgid ""
12992
"First, install the <application>OpenLDAP</application> server daemon "
12993
"<application>slapd</application> and <application>ldap-utils</application>, "
12994
"a package containing LDAP management utilities:"
12995
msgstr ""
12996
12997
#: serverguide/C/network-auth.xml:60(command)
12998
msgid "sudo apt-get install slapd ldap-utils"
12999
msgstr ""
13000
13001
#: serverguide/C/network-auth.xml:63(para)
13002
msgid ""
13003
"By default <application>slapd</application> is configured with minimal "
13004
"options needed to run the <application>slapd</application> daemon."
13005
msgstr ""
13006
13007
#: serverguide/C/network-auth.xml:68(para)
13008
msgid ""
13009
"The configuration example in the following sections will match the domain "
13010
"name of the server. For example, if the machine's Fully Qualified Domain "
13011
"Name (FQDN) is ldap.example.com, the default suffix will be "
13012
"<emphasis>dc=example,dc=com</emphasis>."
13013
msgstr ""
13014
13015
#: serverguide/C/network-auth.xml:76(title)
13016
msgid "Populating LDAP"
13017
msgstr ""
13018
13019
#: serverguide/C/network-auth.xml:78(para)
13020
msgid ""
13021
"<application>OpenLDAP</application> uses a separate directory which contains "
13022
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13023
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13024
"<application>slapd</application> daemon, allowing the modification of schema "
13025
"definitions, indexes, ACLs, etc without stopping the service."
13026
msgstr ""
13027
13028
#: serverguide/C/network-auth.xml:86(para)
13029
msgid ""
13030
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13031
"configuration and will need additional configuration options in order to "
13032
"populate the frontend directory. The frontend will be populated with a "
13033
"\"classical\" scheme that will be compatible with address book applications "
13034
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13035
"various applications, such as web applications, email Mail Transfer Agent "
13036
"(MTA) applications, etc."
13037
msgstr ""
13038
13039
#: serverguide/C/network-auth.xml:95(para)
13040
msgid ""
13041
"For external applications to authenticate using LDAP they will each need to "
13042
"be specifically configured to do so. Refer to the individual application "
13043
"documentation for details."
13044
msgstr ""
13045
13046
#: serverguide/C/network-auth.xml:103(para)
13047
msgid ""
13048
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13049
"examples to match your LDAP configuration."
13050
msgstr ""
13051
13052
#: serverguide/C/network-auth.xml:108(para)
13053
msgid ""
13054
"First, some additional schema files need to be loaded. In a terminal enter:"
13055
msgstr ""
13056
13057
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13058
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13059
msgstr ""
13060
13061
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13062
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13063
msgstr ""
13064
13065
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13066
msgid ""
13067
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13068
msgstr ""
13069
13070
#: serverguide/C/network-auth.xml:118(para)
13071
msgid ""
13072
"Next, copy the following example LDIF file, naming it "
13073
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13074
msgstr ""
13075
13076
#: serverguide/C/network-auth.xml:123(programlisting)
13077
#, no-wrap
13078
msgid ""
13079
"\n"
13080
"# Load dynamic backend modules\n"
13081
"dn: cn=module,cn=config\n"
13082
"objectClass: olcModuleList\n"
13083
"cn: module\n"
13084
"olcModulepath: /usr/lib/ldap\n"
13085
"olcModuleload: back_hdb\n"
13086
"\n"
13087
"# Database settings\n"
13088
"dn: olcDatabase=hdb,cn=config\n"
13089
"objectClass: olcDatabaseConfig\n"
13090
"objectClass: olcHdbConfig\n"
13091
"olcDatabase: {1}hdb\n"
13092
"olcSuffix: dc=example,dc=com\n"
13093
"olcDbDirectory: /var/lib/ldap\n"
13094
"olcRootDN: cn=admin,dc=example,dc=com\n"
13095
"olcRootPW: secret\n"
13096
"olcDbConfig: set_cachesize 0 2097152 0\n"
13097
"olcDbConfig: set_lk_max_objects 1500\n"
13098
"olcDbConfig: set_lk_max_locks 1500\n"
13099
"olcDbConfig: set_lk_max_lockers 1500\n"
13100
"olcDbIndex: objectClass eq\n"
13101
"olcLastMod: TRUE\n"
13102
"olcDbCheckpoint: 512 30\n"
13103
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13104
"by anonymous auth by self write by * none\n"
13105
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13106
"olcAccess: to dn.base=\"\" by * read\n"
13107
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13108
"\n"
13109
msgstr ""
13110
13111
#: serverguide/C/network-auth.xml:155(para)
13112
msgid ""
13113
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13114
msgstr ""
13115
13116
#: serverguide/C/network-auth.xml:160(para)
13117
msgid "Now add the LDIF to the directory:"
13118
msgstr ""
13119
13120
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13121
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13122
msgstr ""
13123
13124
#: serverguide/C/network-auth.xml:168(para)
13125
msgid ""
13126
"The frontend directory is now ready to be populated. Create a "
13127
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13128
msgstr ""
13129
13130
#: serverguide/C/network-auth.xml:173(programlisting)
13131
#, no-wrap
13132
msgid ""
13133
"\n"
13134
"# Create top-level object in domain\n"
13135
"dn: dc=example,dc=com\n"
13136
"objectClass: top\n"
13137
"objectClass: dcObject\n"
13138
"objectclass: organization\n"
13139
"o: Example Organization\n"
13140
"dc: Example\n"
13141
"description: LDAP Example \n"
13142
"\n"
13143
"# Admin user.\n"
13144
"dn: cn=admin,dc=example,dc=com\n"
13145
"objectClass: simpleSecurityObject\n"
13146
"objectClass: organizationalRole\n"
13147
"cn: admin\n"
13148
"description: LDAP administrator\n"
13149
"userPassword: secret\n"
13150
"\n"
13151
"dn: ou=people,dc=example,dc=com\n"
13152
"objectClass: organizationalUnit\n"
13153
"ou: people\n"
13154
"\n"
13155
"dn: ou=groups,dc=example,dc=com\n"
13156
"objectClass: organizationalUnit\n"
13157
"ou: groups\n"
13158
"\n"
13159
"dn: uid=john,ou=people,dc=example,dc=com\n"
13160
"objectClass: inetOrgPerson\n"
13161
"objectClass: posixAccount\n"
13162
"objectClass: shadowAccount\n"
13163
"uid: john\n"
13164
"sn: Doe\n"
13165
"givenName: John\n"
13166
"cn: John Doe\n"
13167
"displayName: John Doe\n"
13168
"uidNumber: 1000\n"
13169
"gidNumber: 10000\n"
13170
"userPassword: password\n"
13171
"gecos: John Doe\n"
13172
"loginShell: /bin/bash\n"
13173
"homeDirectory: /home/john\n"
13174
"shadowExpire: -1\n"
13175
"shadowFlag: 0\n"
13176
"shadowWarning: 7\n"
13177
"shadowMin: 8\n"
13178
"shadowMax: 999999\n"
13179
"shadowLastChange: 10877\n"
13180
"mail: john.doe@example.com\n"
13181
"postalCode: 31000\n"
13182
"l: Toulouse\n"
13183
"o: Example\n"
13184
"mobile: +33 (0)6 xx xx xx xx\n"
13185
"homePhone: +33 (0)5 xx xx xx xx\n"
13186
"title: System Administrator\n"
13187
"postalAddress: \n"
13188
"initials: JD\n"
13189
"\n"
13190
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13191
"objectClass: posixGroup\n"
13192
"cn: example\n"
13193
"gidNumber: 10000\n"
13194
msgstr ""
13195
13196
#: serverguide/C/network-auth.xml:236(para)
13197
msgid ""
13198
"In this example the directory structure, a user, and a group have been "
13199
"setup. In other examples you might see the <emphasis>objectClass: "
13200
"top</emphasis> added in every entry, but that is the default behaviour so "
13201
"you do not have to add it explicitly."
13202
msgstr ""
13203
13204
#: serverguide/C/network-auth.xml:243(para)
13205
msgid "Add the entries to the LDAP directory:"
13206
msgstr ""
13207
13208
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13209
msgid ""
13210
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13211
msgstr ""
13212
13213
#: serverguide/C/network-auth.xml:252(para)
13214
msgid ""
13215
"We can check that the content has been correctly added with the "
13216
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13217
"directory:"
13218
msgstr ""
13219
13220
#: serverguide/C/network-auth.xml:258(command)
13221
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13222
msgstr ""
13223
13224
#: serverguide/C/network-auth.xml:259(computeroutput)
13225
#, no-wrap
13226
msgid ""
13227
"\n"
13228
"dn: uid=john,ou=people,dc=example,dc=com\n"
13229
"cn: John Doe\n"
13230
"sn: Doe\n"
13231
"givenName: John\n"
13232
msgstr ""
13233
13234
#: serverguide/C/network-auth.xml:267(para)
13235
msgid "Just a quick explanation:"
13236
msgstr ""
13237
13238
#: serverguide/C/network-auth.xml:273(para)
13239
msgid ""
13240
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13241
"the default."
13242
msgstr ""
13243
13244
#: serverguide/C/network-auth.xml:279(para)
13245
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13246
msgstr ""
13247
13248
#: serverguide/C/network-auth.xml:287(title)
13249
msgid "Further Configuration"
13250
msgstr ""
13251
13252
#: serverguide/C/network-auth.xml:290(para)
13253
msgid ""
13254
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13255
"utilities in the <application>ldap-utils</application> package. For example:"
13256
msgstr ""
13257
13258
#: serverguide/C/network-auth.xml:298(para)
13259
msgid ""
13260
"Use <application>ldapsearch</application> to view the tree, entering the "
13261
"admin password set during installation or reconfiguration:"
13262
msgstr ""
13263
13264
#: serverguide/C/network-auth.xml:304(command)
13265
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13266
msgstr ""
13267
13268
#: serverguide/C/network-auth.xml:308(computeroutput)
13269
#, no-wrap
13270
msgid ""
13271
"\n"
13272
"SASL/EXTERNAL authentication started\n"
13273
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13274
"SASL SSF: 0\n"
13275
"dn: cn=config\n"
13276
"\n"
13277
"dn: cn=module{0},cn=config\n"
13278
"\n"
13279
"dn: cn=schema,cn=config\n"
13280
"\n"
13281
"dn: cn={0}core,cn=schema,cn=config\n"
13282
"\n"
13283
"dn: cn={1}cosine,cn=schema,cn=config\n"
13284
"\n"
13285
"dn: cn={2}nis,cn=schema,cn=config\n"
13286
"\n"
13287
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13288
"\n"
13289
"dn: olcDatabase={-1}frontend,cn=config\n"
13290
"\n"
13291
"dn: olcDatabase={0}config,cn=config\n"
13292
"\n"
13293
"dn: olcDatabase={1}hdb,cn=config\n"
13294
msgstr ""
13295
13296
#: serverguide/C/network-auth.xml:334(para)
13297
msgid ""
13298
"The output above is the current configuration options for the "
13299
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13300
msgstr ""
13301
13302
#: serverguide/C/network-auth.xml:342(para)
13303
msgid ""
13304
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13305
"another attribute to the index list using "
13306
"<application>ldapmodify</application>:"
13307
msgstr ""
13308
13309
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13310
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13311
msgstr ""
13312
13313
#: serverguide/C/network-auth.xml:356(userinput)
13314
#, no-wrap
13315
msgid ""
13316
"dn: olcDatabase={1}hdb,cn=config\n"
13317
"add: olcDbIndex\n"
13318
"olcDbIndex: uidNumber eq"
13319
msgstr ""
13320
13321
#: serverguide/C/network-auth.xml:352(computeroutput)
13322
#, no-wrap
13323
msgid ""
13324
"\n"
13325
"SASL/EXTERNAL authentication started\n"
13326
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13327
"SASL SSF: 0\n"
13328
"<placeholder-1/>\n"
13329
"\n"
13330
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13331
msgstr ""
13332
13333
#: serverguide/C/network-auth.xml:364(para)
13334
msgid ""
13335
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13336
"exit the utility."
13337
msgstr ""
13338
13339
#: serverguide/C/network-auth.xml:371(para)
13340
msgid ""
13341
"<application>ldapmodify</application> can also read the changes from a file. "
13342
"Copy and paste the following into a file named "
13343
"<filename>uid_index.ldif</filename>:"
13344
msgstr ""
13345
13346
#: serverguide/C/network-auth.xml:376(programlisting)
13347
#, no-wrap
13348
msgid ""
13349
"\n"
13350
"dn: olcDatabase={1}hdb,cn=config\n"
13351
"add: olcDbIndex\n"
13352
"olcDbIndex: uid eq,pres,sub\n"
13353
msgstr ""
13354
13355
#: serverguide/C/network-auth.xml:382(para)
13356
msgid "Then execute <application>ldapmodify</application>:"
13357
msgstr ""
13358
13359
#: serverguide/C/network-auth.xml:387(command)
13360
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13361
msgstr ""
13362
13363
#: serverguide/C/network-auth.xml:391(computeroutput)
13364
#, no-wrap
13365
msgid ""
13366
"\n"
13367
"SASL/EXTERNAL authentication started\n"
13368
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13369
"SASL SSF: 0\n"
13370
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13371
msgstr ""
13372
13373
#: serverguide/C/network-auth.xml:399(para)
13374
msgid "The file method is very useful for large changes."
13375
msgstr ""
13376
13377
#: serverguide/C/network-auth.xml:406(para)
13378
msgid ""
13379
"Adding additional <emphasis>schemas</emphasis> to "
13380
"<application>slapd</application> requires the schema to be converted to LDIF "
13381
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13382
"directory contains some schema files already converted to LDIF format as "
13383
"demonstrated in the previous section. Fortunately, the "
13384
"<application>slapd</application> program can be used to automate the "
13385
"conversion. The following example will add the "
13386
"<emphasis>dyngoup.schema</emphasis>:"
13387
msgstr ""
13388
13389
#: serverguide/C/network-auth.xml:416(para)
13390
msgid ""
13391
"First, create a conversion <filename>schema_convert.conf</filename> file "
13392
"containing the following lines:"
13393
msgstr ""
13394
13395
#: serverguide/C/network-auth.xml:421(programlisting)
13396
#, no-wrap
13397
msgid ""
13398
"\n"
13399
"include /etc/ldap/schema/core.schema\n"
13400
"include /etc/ldap/schema/collective.schema\n"
13401
"include /etc/ldap/schema/corba.schema\n"
13402
"include /etc/ldap/schema/cosine.schema\n"
13403
"include /etc/ldap/schema/duaconf.schema\n"
13404
"include /etc/ldap/schema/dyngroup.schema\n"
13405
"include /etc/ldap/schema/inetorgperson.schema\n"
13406
"include /etc/ldap/schema/java.schema\n"
13407
"include /etc/ldap/schema/misc.schema\n"
13408
"include /etc/ldap/schema/nis.schema\n"
13409
"include /etc/ldap/schema/openldap.schema\n"
13410
"include /etc/ldap/schema/ppolicy.schema\n"
13411
msgstr ""
13412
13413
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13414
msgid "Next, create a temporary directory to hold the output:"
13415
msgstr ""
13416
13417
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13418
msgid "mkdir /tmp/ldif_output"
13419
msgstr ""
13420
13421
#: serverguide/C/network-auth.xml:450(para)
13422
msgid ""
13423
"Now using <application>slapcat</application> convert the schema files to "
13424
"LDIF:"
13425
msgstr ""
13426
13427
#: serverguide/C/network-auth.xml:455(command)
13428
msgid ""
13429
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13430
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13431
msgstr ""
13432
13433
#: serverguide/C/network-auth.xml:458(para)
13434
msgid ""
13435
"Adjust the configuration file name and temporary directory names if yours "
13436
"are different. Also, it may be worthwhile to keep the "
13437
"<filename>ldif_output</filename> directory around in case you want to add "
13438
"additional schemas in the future."
13439
msgstr ""
13440
13441
#: serverguide/C/network-auth.xml:467(para)
13442
msgid ""
13443
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13444
"following attributes:"
13445
msgstr ""
13446
13447
#: serverguide/C/network-auth.xml:471(programlisting)
13448
#, no-wrap
13449
msgid ""
13450
"\n"
13451
"dn: cn=dyngroup,cn=schema,cn=config\n"
13452
"...\n"
13453
"cn: dyngroup\n"
13454
msgstr ""
13455
13456
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13457
msgid "And remove the following lines from the bottom of the file:"
13458
msgstr ""
13459
13460
#: serverguide/C/network-auth.xml:481(programlisting)
13461
#, no-wrap
13462
msgid ""
13463
"\n"
13464
"structuralObjectClass: olcSchemaConfig\n"
13465
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13466
"creatorsName: cn=config\n"
13467
"createTimestamp: 20080826021140Z\n"
13468
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13469
"modifiersName: cn=config\n"
13470
"modifyTimestamp: 20080826021140Z\n"
13471
msgstr ""
13472
13473
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13474
msgid ""
13475
"The attribute values will vary, just be sure the attributes are removed."
13476
msgstr ""
13477
13478
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13479
msgid ""
13480
"Finally, using the <application>ldapadd</application> utility, add the new "
13481
"schema to the directory:"
13482
msgstr ""
13483
13484
#: serverguide/C/network-auth.xml:506(command)
13485
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13486
msgstr ""
13487
13488
#: serverguide/C/network-auth.xml:512(para)
13489
msgid ""
13490
"There should now be a <emphasis>dn: "
13491
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13492
msgstr ""
13493
13494
#: serverguide/C/network-auth.xml:522(title)
13495
msgid "LDAP Replication"
13496
msgstr ""
13497
13498
#: serverguide/C/network-auth.xml:524(para)
13499
msgid ""
13500
"LDAP often quickly becomes a highly critical service to the network. "
13501
"Multiple systems will come to depend on LDAP for authentication, "
13502
"authorization, configuration, etc. It is a good idea to setup a redundant "
13503
"system through replication."
13504
msgstr ""
13505
13506
#: serverguide/C/network-auth.xml:530(para)
13507
msgid ""
13508
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13509
"Syncrepl allows the changes to be synced using a "
13510
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13511
"provider sends directory changes to consumers."
13512
msgstr ""
13513
13514
#: serverguide/C/network-auth.xml:537(title)
13515
msgid "Provider Configuration"
13516
msgstr ""
13517
13518
#: serverguide/C/network-auth.xml:539(para)
13519
msgid ""
13520
"The following is an example of a <emphasis>Single-Master</emphasis> "
13521
"configuration. In this configuration one OpenLDAP server is configured as a "
13522
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13523
msgstr ""
13524
13525
#: serverguide/C/network-auth.xml:547(para)
13526
msgid ""
13527
"First, configure the provider server. Copy the following to a file named "
13528
"<filename>provider_sync.ldif</filename>:"
13529
msgstr ""
13530
13531
#: serverguide/C/network-auth.xml:552(programlisting)
13532
#, no-wrap
13533
msgid ""
13534
"\n"
13535
"# Add indexes to the frontend db.\n"
13536
"dn: olcDatabase={1}hdb,cn=config\n"
13537
"changetype: modify\n"
13538
"add: olcDbIndex\n"
13539
"olcDbIndex: entryCSN eq\n"
13540
"-\n"
13541
"add: olcDbIndex\n"
13542
"olcDbIndex: entryUUID eq\n"
13543
"\n"
13544
"#Load the syncprov and accesslog modules.\n"
13545
"dn: cn=module{0},cn=config\n"
13546
"changetype: modify\n"
13547
"add: olcModuleLoad\n"
13548
"olcModuleLoad: syncprov\n"
13549
"-\n"
13550
"add: olcModuleLoad\n"
13551
"olcModuleLoad: accesslog\n"
13552
"\n"
13553
"# Accesslog database definitions\n"
13554
"dn: olcDatabase={2}hdb,cn=config\n"
13555
"objectClass: olcDatabaseConfig\n"
13556
"objectClass: olcHdbConfig\n"
13557
"olcDatabase: {2}hdb\n"
13558
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13559
"olcSuffix: cn=accesslog\n"
13560
"olcRootDN: cn=admin,dc=example,dc=com\n"
13561
"olcDbIndex: default eq\n"
13562
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13563
"\n"
13564
"# Accesslog db syncprov.\n"
13565
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13566
"changetype: add\n"
13567
"objectClass: olcOverlayConfig\n"
13568
"objectClass: olcSyncProvConfig\n"
13569
"olcOverlay: syncprov\n"
13570
"olcSpNoPresent: TRUE\n"
13571
"olcSpReloadHint: TRUE\n"
13572
"\n"
13573
"# syncrepl Provider for primary db\n"
13574
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13575
"changetype: add\n"
13576
"objectClass: olcOverlayConfig\n"
13577
"objectClass: olcSyncProvConfig\n"
13578
"olcOverlay: syncprov\n"
13579
"olcSpNoPresent: TRUE\n"
13580
"\n"
13581
"# accesslog overlay definitions for primary db\n"
13582
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13583
"objectClass: olcOverlayConfig\n"
13584
"objectClass: olcAccessLogConfig\n"
13585
"olcOverlay: accesslog\n"
13586
"olcAccessLogDB: cn=accesslog\n"
13587
"olcAccessLogOps: writes\n"
13588
"olcAccessLogSuccess: TRUE\n"
13589
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13590
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13591
msgstr ""
13592
13593
#: serverguide/C/network-auth.xml:614(para)
13594
msgid ""
13595
"The <application>AppArmor</application> profile for "
13596
"<application>slapd</application> will need to be adjusted for the accesslog "
13597
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13598
"adding:"
13599
msgstr ""
13600
13601
#: serverguide/C/network-auth.xml:619(programlisting)
13602
#, no-wrap
13603
msgid ""
13604
"\n"
13605
" /var/lib/ldap/accesslog/ r,\n"
13606
" /var/lib/ldap/accesslog/** rwk,\n"
13607
msgstr ""
13608
13609
#: serverguide/C/network-auth.xml:624(para)
13610
msgid ""
13611
"Then create the directory, reload the <application>apparmor</application> "
13612
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13613
msgstr ""
13614
13615
#: serverguide/C/network-auth.xml:630(command)
13616
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13617
msgstr ""
13618
13619
#: serverguide/C/network-auth.xml:631(command)
13620
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13621
msgstr ""
13622
13623
#: serverguide/C/network-auth.xml:636(para)
13624
msgid ""
13625
"Using the <emphasis>-u openldap</emphasis> option with the "
13626
"<application>sudo</application> commands above removes the need to adjust "
13627
"permissions for the new directory later."
13628
msgstr ""
13629
13630
#: serverguide/C/network-auth.xml:645(para)
13631
msgid ""
13632
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13633
"directory:"
13634
msgstr ""
13635
13636
#: serverguide/C/network-auth.xml:649(programlisting)
13637
#, no-wrap
13638
msgid ""
13639
"\n"
13640
"olcRootDN: cn=admin,dc=example,dc=com\n"
13641
msgstr ""
13642
13643
#: serverguide/C/network-auth.xml:657(para)
13644
msgid ""
13645
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13646
msgstr ""
13647
13648
#: serverguide/C/network-auth.xml:662(command)
13649
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13650
msgstr ""
13651
13652
#: serverguide/C/network-auth.xml:669(para)
13653
msgid "Restart <application>slapd</application>:"
13654
msgstr ""
13655
13656
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13657
msgid "sudo /etc/init.d/slapd restart"
13658
msgstr ""
13659
13660
#: serverguide/C/network-auth.xml:680(para)
13661
msgid ""
13662
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13663
"to configure a <emphasis>Consumer</emphasis> server."
13664
msgstr ""
13665
13666
#: serverguide/C/network-auth.xml:687(title)
13667
msgid "Consumer Configuration"
13668
msgstr ""
13669
13670
#: serverguide/C/network-auth.xml:692(para)
13671
msgid ""
13672
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13673
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13674
"configuration steps."
13675
msgstr ""
13676
13677
#: serverguide/C/network-auth.xml:697(para)
13678
msgid "Add the additional schema files:"
13679
msgstr ""
13680
13681
#: serverguide/C/network-auth.xml:707(para)
13682
msgid ""
13683
"Also, create, or copy from the provider server, the "
13684
"<filename>backend.example.com.ldif</filename>"
13685
msgstr ""
13686
13687
#: serverguide/C/network-auth.xml:711(programlisting)
13688
#, no-wrap
13689
msgid ""
13690
"\n"
13691
"# Load dynamic backend modules\n"
13692
"dn: cn=module,cn=config\n"
13693
"objectClass: olcModuleList\n"
13694
"cn: module\n"
13695
"olcModulepath: /usr/lib/ldap\n"
13696
"olcModuleload: back_hdb\n"
13697
"\n"
13698
"# Database settings\n"
13699
"dn: olcDatabase=hdb,cn=config\n"
13700
"objectClass: olcDatabaseConfig\n"
13701
"objectClass: olcHdbConfig\n"
13702
"olcDatabase: {1}hdb\n"
13703
"olcSuffix: dc=example,dc=com\n"
13704
"olcDbDirectory: /var/lib/ldap\n"
13705
"olcRootDN: cn=admin,dc=example,dc=com\n"
13706
"olcRootPW: secret\n"
13707
"olcDbConfig: set_cachesize 0 2097152 0\n"
13708
"olcDbConfig: set_lk_max_objects 1500\n"
13709
"olcDbConfig: set_lk_max_locks 1500\n"
13710
"olcDbConfig: set_lk_max_lockers 1500\n"
13711
"olcDbIndex: objectClass eq\n"
13712
"olcLastMod: TRUE\n"
13713
"olcDbCheckpoint: 512 30\n"
13714
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13715
"by anonymous auth by self write by * none\n"
13716
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13717
"olcAccess: to dn.base=\"\" by * read\n"
13718
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13719
msgstr ""
13720
13721
#: serverguide/C/network-auth.xml:741(para)
13722
msgid "And add the LDIF by entering:"
13723
msgstr ""
13724
13725
#: serverguide/C/network-auth.xml:752(para)
13726
msgid ""
13727
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
13728
"listed above, and add it:"
13729
msgstr ""
13730
13731
#: serverguide/C/network-auth.xml:760(para)
13732
msgid ""
13733
"The two severs should now have the same configuration except for the "
13734
"<emphasis>Syncrepl</emphasis> options."
13735
msgstr ""
13736
13737
#: serverguide/C/network-auth.xml:768(para)
13738
msgid ""
13739
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
13740
msgstr ""
13741
13742
#: serverguide/C/network-auth.xml:772(programlisting)
13743
#, no-wrap
13744
msgid ""
13745
"\n"
13746
"#Load the syncprov module.\n"
13747
"dn: cn=module{0},cn=config\n"
13748
"changetype: modify\n"
13749
"add: olcModuleLoad\n"
13750
"olcModuleLoad: syncprov\n"
13751
"\n"
13752
"# syncrepl specific indices\n"
13753
"dn: olcDatabase={1}hdb,cn=config\n"
13754
"changetype: modify\n"
13755
"add: olcDbIndex\n"
13756
"olcDbIndex: entryUUID eq\n"
13757
"-\n"
13758
"add: olcSyncRepl\n"
13759
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
13760
"binddn=\"cn=admin,dc=example,dc=com\" \n"
13761
" credentials=secret searchbase=\"dc=example,dc=com\" "
13762
"logbase=\"cn=accesslog\" \n"
13763
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
13764
"schemachecking=on \n"
13765
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
13766
"-\n"
13767
"add: olcUpdateRef\n"
13768
"olcUpdateRef: ldap://ldap01.example.com\n"
13769
msgstr ""
13770
13771
#: serverguide/C/network-auth.xml:795(para)
13772
msgid "You will probably want to change the following attributes:"
13773
msgstr ""
13774
13775
#: serverguide/C/network-auth.xml:800(para)
13776
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
13777
msgstr ""
13778
13779
#: serverguide/C/network-auth.xml:801(emphasis)
13780
msgid "binddn"
13781
msgstr ""
13782
13783
#: serverguide/C/network-auth.xml:802(emphasis)
13784
msgid "credentials"
13785
msgstr ""
13786
13787
#: serverguide/C/network-auth.xml:803(emphasis)
13788
msgid "searchbase"
13789
msgstr ""
13790
13791
#: serverguide/C/network-auth.xml:804(emphasis)
13792
msgid "olcUpdateRef:"
13793
msgstr ""
13794
13795
#: serverguide/C/network-auth.xml:810(para)
13796
msgid "Add the LDIF file to the configuration tree:"
13797
msgstr ""
13798
13799
#: serverguide/C/network-auth.xml:815(command)
13800
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
13801
msgstr ""
13802
13803
#: serverguide/C/network-auth.xml:821(para)
13804
msgid ""
13805
"The frontend database should now sync between servers. You can add "
13806
"additional servers using the steps above as the need arises."
13807
msgstr ""
13808
13809
#: serverguide/C/network-auth.xml:831(programlisting)
13810
#, no-wrap
13811
msgid "127.0.0.1\tldap01.example.com ldap01"
13812
msgstr ""
13813
13814
#: serverguide/C/network-auth.xml:827(para)
13815
msgid ""
13816
"The <application>slapd</application> daemon will send log information to "
13817
"<filename>/var/log/syslog</filename> by default. So if all does "
13818
"<emphasis>not</emphasis> go well check there for errors and other "
13819
"troubleshooting information. Also, be sure that each server knows it's Fully "
13820
"Qualified Domain Name (FQDN). This is configured in "
13821
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
13822
msgstr ""
13823
13824
#: serverguide/C/network-auth.xml:839(title)
13825
msgid "Setting up ACL"
13826
msgstr ""
13827
13828
#: serverguide/C/network-auth.xml:841(para)
13829
msgid ""
13830
"Authentication requires access to the password field, that should be not "
13831
"accessible by default. Also, in order for users to change their own "
13832
"password, using <command>passwd</command> or other utilities, "
13833
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
13834
"authenticated."
13835
msgstr ""
13836
13837
#: serverguide/C/network-auth.xml:848(para)
13838
msgid ""
13839
"To view the Access Control List (ACL), use the "
13840
"<application>ldapsearch</application> utility:"
13841
msgstr ""
13842
13843
#: serverguide/C/network-auth.xml:853(command)
13844
msgid ""
13845
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
13846
"olcAccess"
13847
msgstr ""
13848
13849
#: serverguide/C/network-auth.xml:857(computeroutput)
13850
#, no-wrap
13851
msgid ""
13852
"Enter LDAP Password: \n"
13853
"dn: olcDatabase={1}hdb,cn=config\n"
13854
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
13855
"dn=\"cn=admin,dc=exampl\n"
13856
" e,dc=com\" write by anonymous auth by self write by * none\n"
13857
"olcAccess: {1}to dn.base=\"\" by * read\n"
13858
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13859
msgstr ""
13860
13861
#: serverguide/C/network-auth.xml:869(title)
13862
msgid "TLS and SSL"
13863
msgstr ""
13864
13865
#: serverguide/C/network-auth.xml:871(para)
13866
msgid ""
13867
"When authenticating to an OpenLDAP server it is best to do so using an "
13868
"encrypted session. This can be accomplished using Transport Layer Security "
13869
"(TLS) and/or Secure Sockets Layer (SSL)."
13870
msgstr ""
13871
13872
#: serverguide/C/network-auth.xml:876(para)
13873
msgid ""
13874
"The first step in the process is to obtain or create a "
13875
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
13876
"is compiled using the <application>gnutls</application> library, the "
13877
"<application>certtool</application> utility will be used to create "
13878
"certificates."
13879
msgstr ""
13880
13881
#: serverguide/C/network-auth.xml:885(para)
13882
msgid ""
13883
"First, install <application>gnutls-bin</application> by entering the "
13884
"following in a terminal:"
13885
msgstr ""
13886
13887
#: serverguide/C/network-auth.xml:890(command)
13888
msgid "sudo apt-get install gnutls-bin"
13889
msgstr ""
13890
13891
#: serverguide/C/network-auth.xml:896(para)
13892
msgid ""
13893
"Next, create a private key for the <emphasis>Certificate "
13894
"Authority</emphasis> (CA):"
13895
msgstr ""
13896
13897
#: serverguide/C/network-auth.xml:901(command)
13898
msgid ""
13899
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
13900
msgstr ""
13901
13902
#: serverguide/C/network-auth.xml:907(para)
13903
msgid ""
13904
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
13905
"CA certificate containing:"
13906
msgstr ""
13907
13908
#: serverguide/C/network-auth.xml:911(programlisting)
13909
#, no-wrap
13910
msgid ""
13911
"\n"
13912
"cn = Example Company\n"
13913
"ca\n"
13914
"cert_signing_key\n"
13915
msgstr ""
13916
13917
#: serverguide/C/network-auth.xml:920(para)
13918
msgid "Now create the self-signed CA certificate:"
13919
msgstr ""
13920
13921
#: serverguide/C/network-auth.xml:925(command)
13922
msgid ""
13923
"sudo certtool --generate-self-signed --load-privkey "
13924
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
13925
"/etc/ssl/certs/cacert.pem"
13926
msgstr ""
13927
13928
#: serverguide/C/network-auth.xml:932(para)
13929
msgid "Make a private key for the server:"
13930
msgstr ""
13931
13932
#: serverguide/C/network-auth.xml:937(command)
13933
msgid ""
13934
"sudo sh -c \"certtool --generate-privkey > "
13935
"/etc/ssl/private/ldap01_slapd_key.pem\""
13936
msgstr ""
13937
13938
#: serverguide/C/network-auth.xml:941(para)
13939
msgid ""
13940
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
13941
"hostname. Naming the certificate and key for the host and service that will "
13942
"be using them will help keep filenames and paths straight."
13943
msgstr ""
13944
13945
#: serverguide/C/network-auth.xml:950(para)
13946
msgid ""
13947
"To sign the server's certificate with the CA, create the "
13948
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
13949
msgstr ""
13950
13951
#: serverguide/C/network-auth.xml:954(programlisting)
13952
#, no-wrap
13953
msgid ""
13954
"\n"
13955
"organization = Example Company\n"
13956
"cn = ldap01.example.com\n"
13957
"tls_www_server\n"
13958
"encryption_key\n"
13959
"signing_key\n"
13960
msgstr ""
13961
13962
#: serverguide/C/network-auth.xml:965(para)
13963
msgid "Create the server's certificate:"
13964
msgstr ""
13965
13966
#: serverguide/C/network-auth.xml:970(command)
13967
msgid ""
13968
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
13969
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
13970
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
13971
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
13972
msgstr ""
13973
13974
#: serverguide/C/network-auth.xml:978(para)
13975
msgid ""
13976
"Once you have a certificate, key, and CA cert installed, use "
13977
"<application>ldapmodify</application> to add the new configuration options:"
13978
msgstr ""
13979
13980
#: serverguide/C/network-auth.xml:989(userinput)
13981
#, no-wrap
13982
msgid ""
13983
"dn: cn=config\n"
13984
"add: olcTLSCACertificateFile\n"
13985
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
13986
"-\n"
13987
"add: olcTLSCertificateFile\n"
13988
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
13989
"-\n"
13990
"add: olcTLSCertificateKeyFile\n"
13991
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
13992
msgstr ""
13993
13994
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
13995
#, no-wrap
13996
msgid ""
13997
"Enter LDAP Password:\n"
13998
"<placeholder-1/>\n"
13999
"\n"
14000
"modifying entry \"cn=config\"\n"
14001
msgstr ""
14002
14003
#: serverguide/C/network-auth.xml:1004(para)
14004
msgid ""
14005
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14006
"<filename>ldap01_slapd_key.pem</filename>, and "
14007
"<filename>cacert.pem</filename> names if yours are different."
14008
msgstr ""
14009
14010
#: serverguide/C/network-auth.xml:1010(para)
14011
msgid ""
14012
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14013
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14014
msgstr ""
14015
14016
#: serverguide/C/network-auth.xml:1014(programlisting)
14017
#, no-wrap
14018
msgid ""
14019
"\n"
14020
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14021
msgstr ""
14022
14023
#: serverguide/C/network-auth.xml:1018(para)
14024
msgid ""
14025
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14026
msgstr ""
14027
14028
#: serverguide/C/network-auth.xml:1023(command)
14029
msgid "sudo adduser openldap ssl-cert"
14030
msgstr ""
14031
14032
#: serverguide/C/network-auth.xml:1024(command)
14033
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14034
msgstr ""
14035
14036
#: serverguide/C/network-auth.xml:1025(command)
14037
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14038
msgstr ""
14039
14040
#: serverguide/C/network-auth.xml:1029(para)
14041
msgid ""
14042
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14043
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14044
"adjust the commands appropriately."
14045
msgstr ""
14046
14047
#: serverguide/C/network-auth.xml:1035(para)
14048
msgid "Finally, restart <application>slapd</application>:"
14049
msgstr ""
14050
14051
#: serverguide/C/network-auth.xml:1043(para)
14052
msgid ""
14053
"The <application>slapd</application> daemon should now be listening for "
14054
"LDAPS connections and be able to use STARTTLS during authentication."
14055
msgstr ""
14056
14057
#: serverguide/C/network-auth.xml:1049(para)
14058
msgid ""
14059
"If you run into troubles with the server not starting, check the "
14060
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14061
"it is likely there is a configuration problem. Check that the certificate is "
14062
"signed by the authority from in the files configured, and that the ssl-cert "
14063
"group has read permissions on the private key."
14064
msgstr ""
14065
14066
#: serverguide/C/network-auth.xml:1061(title)
14067
msgid "TLS Replication"
14068
msgstr ""
14069
14070
#: serverguide/C/network-auth.xml:1063(para)
14071
msgid ""
14072
"If you have setup <application>Syncrepl</application> between servers, it is "
14073
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14074
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14075
"linkend=\"openldap-server-replication\"/>."
14076
msgstr ""
14077
14078
#: serverguide/C/network-auth.xml:1069(para)
14079
msgid ""
14080
"Assuming you have followed the above instructions and created a CA "
14081
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14082
"server. Follow the following instructions to create a certificate and key "
14083
"for the <emphasis>Consumer</emphasis> server."
14084
msgstr ""
14085
14086
#: serverguide/C/network-auth.xml:1078(para)
14087
msgid "Create a new key for the Consumer server:"
14088
msgstr ""
14089
14090
#: serverguide/C/network-auth.xml:1083(command)
14091
msgid "mkdir ldap02-ssl"
14092
msgstr ""
14093
14094
#: serverguide/C/network-auth.xml:1084(command)
14095
msgid "cd ldap02-ssl"
14096
msgstr ""
14097
14098
#: serverguide/C/network-auth.xml:1085(command)
14099
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14100
msgstr ""
14101
14102
#: serverguide/C/network-auth.xml:1089(para)
14103
msgid ""
14104
"Creating a new directory is not strictly necessary, but it will help keep "
14105
"things organized and make it easier to copy the files to the Consumer server."
14106
msgstr ""
14107
14108
#: serverguide/C/network-auth.xml:1098(para)
14109
msgid ""
14110
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14111
"server, changing the attributes to match your locality and server:"
14112
msgstr ""
14113
14114
#: serverguide/C/network-auth.xml:1103(programlisting)
14115
#, no-wrap
14116
msgid ""
14117
"\n"
14118
"country = US\n"
14119
"state = North Carolina\n"
14120
"locality = Winston-Salem\n"
14121
"organization = Example Company\n"
14122
"cn = ldap02.salem.edu\n"
14123
"tls_www_client\n"
14124
"encryption_key\n"
14125
"signing_key\n"
14126
msgstr ""
14127
14128
#: serverguide/C/network-auth.xml:1117(para)
14129
msgid "Create the certificate:"
14130
msgstr ""
14131
14132
#: serverguide/C/network-auth.xml:1122(command)
14133
msgid ""
14134
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14135
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14136
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14137
"ldap02_slapd_cert.pem"
14138
msgstr ""
14139
14140
#: serverguide/C/network-auth.xml:1130(para)
14141
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14142
msgstr ""
14143
14144
#: serverguide/C/network-auth.xml:1135(command)
14145
msgid "cp /etc/ssl/certs/cacert.pem ."
14146
msgstr ""
14147
14148
#: serverguide/C/network-auth.xml:1141(para)
14149
msgid ""
14150
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14151
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14152
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14153
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14154
"<filename>/etc/ssl/private</filename>."
14155
msgstr ""
14156
14157
#: serverguide/C/network-auth.xml:1150(para)
14158
msgid ""
14159
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14160
"by entering:"
14161
msgstr ""
14162
14163
#: serverguide/C/network-auth.xml:1160(userinput)
14164
#, no-wrap
14165
msgid ""
14166
"dn: cn=config\n"
14167
"add: olcTLSCACertificateFile\n"
14168
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14169
"-\n"
14170
"add: olcTLSCertificateFile\n"
14171
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14172
"-\n"
14173
"add: olcTLSCertificateKeyFile\n"
14174
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14175
msgstr ""
14176
14177
#: serverguide/C/network-auth.xml:1177(para)
14178
msgid ""
14179
"As with the Provider you can now edit "
14180
"<filename>/etc/default/slapd</filename> and add the "
14181
"<emphasis>ldaps:///</emphasis> parameter to the "
14182
"<emphasis>SLAPD_SERVICES</emphasis> option."
14183
msgstr ""
14184
14185
#: serverguide/C/network-auth.xml:1185(para)
14186
msgid ""
14187
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14188
"modify the <emphasis>Consumer</emphasis> server's "
14189
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14190
msgstr ""
14191
14192
#: serverguide/C/network-auth.xml:1198(userinput)
14193
#, no-wrap
14194
msgid ""
14195
"\n"
14196
"dn: olcDatabase={1}hdb,cn=config\n"
14197
"replace: olcSyncrepl\n"
14198
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14199
"binddn=\"cn=ad\n"
14200
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14201
"logbas\n"
14202
" e=\"cn=accesslog\" "
14203
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14204
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14205
"starttls=yes"
14206
msgstr ""
14207
14208
#: serverguide/C/network-auth.xml:1195(computeroutput)
14209
#, no-wrap
14210
msgid ""
14211
"SASL/EXTERNAL authentication started\n"
14212
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14213
"SASL SSF: 0\n"
14214
"<placeholder-1/>\n"
14215
"\n"
14216
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14217
msgstr ""
14218
14219
#: serverguide/C/network-auth.xml:1210(para)
14220
msgid ""
14221
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14222
"(FQDN) in the certificate, you may have to edit "
14223
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14224
msgstr ""
14225
14226
#: serverguide/C/network-auth.xml:1215(programlisting)
14227
#, no-wrap
14228
msgid ""
14229
"\n"
14230
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14231
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14232
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14233
msgstr ""
14234
14235
#: serverguide/C/network-auth.xml:1222(para)
14236
msgid ""
14237
"Finally, restart <application>slapd</application> on each of the servers:"
14238
msgstr ""
14239
14240
#: serverguide/C/network-auth.xml:1235(title)
14241
msgid "LDAP Authentication"
14242
msgstr ""
14243
14244
#: serverguide/C/network-auth.xml:1237(para)
14245
msgid ""
14246
"Once you have a working LDAP server, the <application>auth-client-"
14247
"config</application> and <application>libnss-ldap</application> packages "
14248
"take the pain out of configuring an Ubuntu client to authenticate using "
14249
"LDAP. To install the packages from, a terminal prompt enter:"
14250
msgstr ""
14251
14252
#: serverguide/C/network-auth.xml:1244(command)
14253
msgid "sudo apt-get install libnss-ldap"
14254
msgstr ""
14255
14256
#: serverguide/C/network-auth.xml:1247(para)
14257
msgid ""
14258
"During the install a menu dialog will ask you connection details about your "
14259
"LDAP server."
14260
msgstr ""
14261
14262
#: serverguide/C/network-auth.xml:1251(para)
14263
msgid ""
14264
"If you make a mistake when entering your information you can execute the "
14265
"dialog again using:"
14266
msgstr ""
14267
14268
#: serverguide/C/network-auth.xml:1256(command)
14269
msgid "sudo dpkg-reconfigure ldap-auth-config"
14270
msgstr ""
14271
14272
#: serverguide/C/network-auth.xml:1259(para)
14273
msgid ""
14274
"The results of the dialog can be seen in "
14275
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14276
"covered in the menu edit this file accordingly."
14277
msgstr ""
14278
14279
#: serverguide/C/network-auth.xml:1264(para)
14280
msgid ""
14281
"Now that <application>libnss-ldap</application> is configured enable the "
14282
"<application>auth-client-config</application> LDAP profile by entering:"
14283
msgstr ""
14284
14285
#: serverguide/C/network-auth.xml:1270(command)
14286
msgid "sudo auth-client-config -t nss -p lac_ldap"
14287
msgstr ""
14288
14289
#: serverguide/C/network-auth.xml:1275(para)
14290
msgid ""
14291
"<emphasis>-t:</emphasis> only modifies "
14292
"<filename>/etc/nsswitch.conf</filename>."
14293
msgstr ""
14294
14295
#: serverguide/C/network-auth.xml:1280(para)
14296
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14297
msgstr ""
14298
14299
#: serverguide/C/network-auth.xml:1285(para)
14300
msgid ""
14301
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14302
"config</application> profile that is part of the <application>ldap-auth-"
14303
"config</application> package."
14304
msgstr ""
14305
14306
#: serverguide/C/network-auth.xml:1292(para)
14307
msgid ""
14308
"Using the <application>pam-auth-update</application> utility, configure the "
14309
"system to use LDAP for authentication:"
14310
msgstr ""
14311
14312
#: serverguide/C/network-auth.xml:1297(command)
14313
msgid "sudo pam-auth-update"
14314
msgstr ""
14315
14316
#: serverguide/C/network-auth.xml:1300(para)
14317
msgid ""
14318
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14319
"any other authentication mechanisms you need."
14320
msgstr ""
14321
14322
#: serverguide/C/network-auth.xml:1304(para)
14323
msgid ""
14324
"You should now be able to login using user credentials stored in the LDAP "
14325
"directory."
14326
msgstr ""
14327
14328
#: serverguide/C/network-auth.xml:1309(para)
14329
msgid ""
14330
"If you are going to use LDAP to store Samba users you will need to configure "
14331
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14332
"for details."
14333
msgstr ""
14334
14335
#: serverguide/C/network-auth.xml:1317(title)
14336
msgid "User and Group Management"
14337
msgstr ""
14338
14339
#: serverguide/C/network-auth.xml:1319(para)
14340
msgid ""
14341
"The <application>ldap-utils</application> package comes with multiple "
14342
"utilities to manage the directory, but the long string of options needed, "
14343
"can make them a burden to use. The <application>ldapscripts</application> "
14344
"package contains configurable scripts to easily manage LDAP users and groups."
14345
msgstr ""
14346
14347
#: serverguide/C/network-auth.xml:1325(para)
14348
msgid "To install the package, from a terminal enter:"
14349
msgstr ""
14350
14351
#: serverguide/C/network-auth.xml:1330(command)
14352
msgid "sudo apt-get install ldapscripts"
14353
msgstr ""
14354
14355
#: serverguide/C/network-auth.xml:1333(para)
14356
msgid ""
14357
"Next, edit the config file "
14358
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14359
"changing the following to match your environment:"
14360
msgstr ""
14361
14362
#: serverguide/C/network-auth.xml:1338(programlisting)
14363
#, no-wrap
14364
msgid ""
14365
"\n"
14366
"SERVER=localhost\n"
14367
"BINDDN='cn=admin,dc=example,dc=com'\n"
14368
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14369
"SUFFIX='dc=example,dc=com'\n"
14370
"GSUFFIX='ou=Groups'\n"
14371
"USUFFIX='ou=People'\n"
14372
"MSUFFIX='ou=Computers'\n"
14373
"GIDSTART=10000\n"
14374
"UIDSTART=10000\n"
14375
"MIDSTART=10000\n"
14376
msgstr ""
14377
14378
#: serverguide/C/network-auth.xml:1351(para)
14379
msgid ""
14380
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14381
"authenticated access to the directory:"
14382
msgstr ""
14383
14384
#: serverguide/C/network-auth.xml:1356(command)
14385
msgid ""
14386
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14387
msgstr ""
14388
14389
#: serverguide/C/network-auth.xml:1357(command)
14390
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14391
msgstr ""
14392
14393
#: serverguide/C/network-auth.xml:1361(para)
14394
msgid ""
14395
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14396
"user."
14397
msgstr ""
14398
14399
#: serverguide/C/network-auth.xml:1366(para)
14400
msgid ""
14401
"The <application>ldapscripts</application> are now ready to help manage your "
14402
"directory. The following are some examples of how to use the scripts:"
14403
msgstr ""
14404
14405
#: serverguide/C/network-auth.xml:1373(para)
14406
msgid "Create a new user:"
14407
msgstr ""
14408
14409
#: serverguide/C/network-auth.xml:1377(command)
14410
msgid "sudo ldapadduser george example"
14411
msgstr ""
14412
14413
#: serverguide/C/network-auth.xml:1379(para)
14414
msgid ""
14415
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14416
"and set the user's primary group (gid) to <emphasis "
14417
"role=\"italic\">example</emphasis>"
14418
msgstr ""
14419
14420
#: serverguide/C/network-auth.xml:1385(para)
14421
msgid "Change a user's password:"
14422
msgstr ""
14423
14424
#: serverguide/C/network-auth.xml:1389(command)
14425
msgid "sudo ldapsetpasswd george"
14426
msgstr ""
14427
14428
#: serverguide/C/network-auth.xml:1390(computeroutput)
14429
#, no-wrap
14430
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14431
msgstr ""
14432
14433
#: serverguide/C/network-auth.xml:1391(userinput)
14434
#, no-wrap
14435
msgid "New Password: "
14436
msgstr ""
14437
14438
#: serverguide/C/network-auth.xml:1392(userinput)
14439
#, no-wrap
14440
msgid "New Password (verify): "
14441
msgstr ""
14442
14443
#: serverguide/C/network-auth.xml:1396(para)
14444
msgid "Delete a user:"
14445
msgstr ""
14446
14447
#: serverguide/C/network-auth.xml:1400(command)
14448
msgid "sudo ldapdeleteuser george"
14449
msgstr ""
14450
14451
#: serverguide/C/network-auth.xml:1405(para)
14452
msgid "Add a group:"
14453
msgstr ""
14454
14455
#: serverguide/C/network-auth.xml:1409(command)
14456
msgid "sudo ldapaddgroup qa"
14457
msgstr ""
14458
14459
#: serverguide/C/network-auth.xml:1413(para)
14460
msgid "Delete a group:"
14461
msgstr ""
14462
14463
#: serverguide/C/network-auth.xml:1417(command)
14464
msgid "sudo ldapdeletegroup qa"
14465
msgstr ""
14466
14467
#: serverguide/C/network-auth.xml:1421(para)
14468
msgid "Add a user to a group:"
14469
msgstr ""
14470
14471
#: serverguide/C/network-auth.xml:1425(command)
14472
msgid "sudo ldapaddusertogroup george qa"
14473
msgstr ""
14474
14475
#: serverguide/C/network-auth.xml:1427(para)
14476
msgid ""
14477
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14478
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14479
"role=\"italic\">george</emphasis>."
14480
msgstr ""
14481
14482
#: serverguide/C/network-auth.xml:1433(para)
14483
msgid "Remove a user from a group:"
14484
msgstr ""
14485
14486
#: serverguide/C/network-auth.xml:1437(command)
14487
msgid "sudo ldapdeleteuserfromgroup george qa"
14488
msgstr ""
14489
14490
#: serverguide/C/network-auth.xml:1439(para)
14491
msgid ""
14492
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14493
"<emphasis role=\"italic\">qa</emphasis> group."
14494
msgstr ""
14495
14496
#: serverguide/C/network-auth.xml:1445(para)
14497
msgid ""
14498
"The <application>ldapmodifyuser</application> script allows you to add, "
14499
"remove, or replace a user's attributes. The script uses the same syntax as "
14500
"the <application>ldapmodify</application> utility. For example:"
14501
msgstr ""
14502
14503
#: serverguide/C/network-auth.xml:1450(command)
14504
msgid "sudo ldapmodifyuser george"
14505
msgstr ""
14506
14507
#: serverguide/C/network-auth.xml:1451(computeroutput)
14508
#, no-wrap
14509
msgid ""
14510
"# About to modify the following entry :\n"
14511
"dn: uid=george,ou=People,dc=example,dc=com\n"
14512
"objectClass: account\n"
14513
"objectClass: posixAccount\n"
14514
"cn: george\n"
14515
"uid: george\n"
14516
"uidNumber: 1001\n"
14517
"gidNumber: 1001\n"
14518
"homeDirectory: /home/george\n"
14519
"loginShell: /bin/bash\n"
14520
"gecos: george\n"
14521
"description: User account\n"
14522
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14523
"\n"
14524
"# Enter your modifications here, end with CTRL-D.\n"
14525
"dn: uid=george,ou=People,dc=example,dc=com"
14526
msgstr ""
14527
14528
#: serverguide/C/network-auth.xml:1467(userinput)
14529
#, no-wrap
14530
msgid ""
14531
"replace: gecos\n"
14532
"gecos: George Carlin"
14533
msgstr ""
14534
14535
#: serverguide/C/network-auth.xml:1470(para)
14536
msgid ""
14537
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14538
"Carlin</quote>."
14539
msgstr ""
14540
14541
#: serverguide/C/network-auth.xml:1475(para)
14542
msgid ""
14543
"Another great feature of <application>ldapscripts</application>, is the "
14544
"template system. Templates allow you to customize the attributes of user, "
14545
"group, and machine objectes. For example, to enable the "
14546
"<emphasis>user</emphasis> template edit "
14547
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14548
msgstr ""
14549
14550
#: serverguide/C/network-auth.xml:1482(programlisting)
14551
#, no-wrap
14552
msgid ""
14553
"\n"
14554
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14555
msgstr ""
14556
14557
#: serverguide/C/network-auth.xml:1486(para)
14558
msgid ""
14559
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14560
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14561
"<filename>ldapadduser.template.sample</filename> file to "
14562
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14563
msgstr ""
14564
14565
#: serverguide/C/network-auth.xml:1493(command)
14566
msgid ""
14567
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14568
"/etc/ldapscripts/ldapadduser.template"
14569
msgstr ""
14570
14571
#: serverguide/C/network-auth.xml:1496(para)
14572
msgid ""
14573
"Edit the new template to add the desired attributes. The following will "
14574
"create new user's as with an <emphasis>objectClass</emphasis> of "
14575
"<emphasis>inetOrgPerson</emphasis>:"
14576
msgstr ""
14577
14578
#: serverguide/C/network-auth.xml:1501(programlisting)
14579
#, no-wrap
14580
msgid ""
14581
"\n"
14582
"dn: uid=<user>,<usuffix>,<suffix>\n"
14583
"objectClass: inetOrgPerson\n"
14584
"objectClass: posixAccount\n"
14585
"cn: <user>\n"
14586
"sn: <ask>\n"
14587
"uid: <user>\n"
14588
"uidNumber: <uid>\n"
14589
"gidNumber: <gid>\n"
14590
"homeDirectory: <home>\n"
14591
"loginShell: <shell>\n"
14592
"gecos: <user>\n"
14593
"description: User account\n"
14594
"title: Employee\n"
14595
msgstr ""
14596
14597
#: serverguide/C/network-auth.xml:1517(para)
14598
msgid ""
14599
"Notice the <emphasis><ask></emphasis> option used for the "
14600
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14601
"<application>ldapadduser</application> to prompt you for the attribute value "
14602
"during user creation."
14603
msgstr ""
14604
14605
#: serverguide/C/network-auth.xml:1525(para)
14606
msgid ""
14607
"There are more useful scripts in the package, to see a full list enter: "
14608
"<command>dpkg -L ldapscripts | grep bin</command>"
14609
msgstr ""
14610
14611
#: serverguide/C/network-auth.xml:1534(para)
14612
msgid ""
14613
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14614
"Ubuntu Wiki</ulink> page has more details."
14615
msgstr ""
14616
14617
#: serverguide/C/network-auth.xml:1539(para)
14618
msgid ""
14619
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14620
"Home Page</ulink>"
14621
msgstr ""
14622
14623
#: serverguide/C/network-auth.xml:1544(para)
14624
msgid ""
14625
"Though starting to show it's age, a great source for in depth LDAP "
14626
"information is O'Reilly's <ulink "
14627
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14628
"Administration</ulink>"
14629
msgstr ""
14630
14631
#: serverguide/C/network-auth.xml:1550(para)
14632
msgid ""
14633
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14634
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14635
"newer versions of OpenLDAP."
14636
msgstr ""
14637
14638
#: serverguide/C/network-auth.xml:1556(para)
14639
msgid ""
14640
"For more information on <application>auth-client-config</application> see "
14641
"the man page: <command>man auth-client-config</command>."
14642
msgstr ""
14643
14644
#: serverguide/C/network-auth.xml:1561(para)
14645
msgid ""
14646
"For more details regarding the <application>ldapscripts</application> "
14647
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14648
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14649
msgstr ""
14650
14651
#: serverguide/C/network-auth.xml:1571(title)
14652
msgid "Samba and LDAP"
14653
msgstr ""
14654
14655
#: serverguide/C/network-auth.xml:1573(para)
14656
msgid ""
14657
"This section covers configuring Samba to use LDAP for user, group, and "
14658
"machine account information and authentication. The assumption is, you "
14659
"already have a working OpenLDAP directory installed and the server is "
14660
"configured to use it for authentication. See <xref linkend=\"openldap-"
14661
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14662
"setting up OpenLDAP. For more information on installing and configuring "
14663
"Samba see <xref linkend=\"windows-networking\"/>."
14664
msgstr ""
14665
14666
#: serverguide/C/network-auth.xml:1583(para)
14667
msgid ""
14668
"There are three packages needed when integrating Samba with LDAP. "
14669
"<application>samba</application>, <application>samba-doc</application>, and "
14670
"<application>smbldap-tools</application> packages . To install the packages, "
14671
"from a terminal enter:"
14672
msgstr ""
14673
14674
#: serverguide/C/network-auth.xml:1589(command)
14675
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14676
msgstr ""
14677
14678
#: serverguide/C/network-auth.xml:1592(para)
14679
msgid ""
14680
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14681
"needed, but unless you have another package or custom scripts, a method of "
14682
"managing users, groups, and computer accounts is needed."
14683
msgstr ""
14684
14685
#: serverguide/C/network-auth.xml:1599(title)
14686
msgid "OpenLDAP Configuration"
14687
msgstr ""
14688
14689
#: serverguide/C/network-auth.xml:1601(para)
14690
msgid ""
14691
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14692
"the user objects in the directory will need additional attributes. This "
14693
"section assumes you want Samba to be configured as a Windows NT domain "
14694
"controller, and will add the necessary LDAP objects and attributes."
14695
msgstr ""
14696
14697
#: serverguide/C/network-auth.xml:1609(para)
14698
msgid ""
14699
"The Samba attributes are defined in the <filename>samba.schema</filename> "
14700
"file which is part of the <application>samba-doc</application> package. The "
14701
"schema file needs to be unzipped and copied to "
14702
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
14703
msgstr ""
14704
14705
#: serverguide/C/network-auth.xml:1616(command)
14706
msgid ""
14707
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
14708
"/etc/ldap/schema/"
14709
msgstr ""
14710
14711
#: serverguide/C/network-auth.xml:1617(command)
14712
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
14713
msgstr ""
14714
14715
#: serverguide/C/network-auth.xml:1623(para)
14716
msgid ""
14717
"The <emphasis>samba</emphasis> schema needs to be added to the "
14718
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
14719
"<application>slapd</application> is also detailed in <xref "
14720
"linkend=\"openldap-configuration\"/>."
14721
msgstr ""
14722
14723
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
14724
msgid ""
14725
"First, create a configuration file named "
14726
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
14727
"containing the following lines:"
14728
msgstr ""
14729
14730
#: serverguide/C/network-auth.xml:1636(programlisting)
14731
#, no-wrap
14732
msgid ""
14733
"\n"
14734
"include /etc/ldap/schema/core.schema\n"
14735
"include /etc/ldap/schema/collective.schema\n"
14736
"include /etc/ldap/schema/corba.schema\n"
14737
"include /etc/ldap/schema/cosine.schema\n"
14738
"include /etc/ldap/schema/duaconf.schema\n"
14739
"include /etc/ldap/schema/dyngroup.schema\n"
14740
"include /etc/ldap/schema/inetorgperson.schema\n"
14741
"include /etc/ldap/schema/java.schema\n"
14742
"include /etc/ldap/schema/misc.schema\n"
14743
"include /etc/ldap/schema/nis.schema\n"
14744
"include /etc/ldap/schema/openldap.schema\n"
14745
"include /etc/ldap/schema/ppolicy.schema\n"
14746
"include /etc/ldap/schema/samba.schema\n"
14747
msgstr ""
14748
14749
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
14750
msgid ""
14751
"Now use <application>slapcat</application> to convert the schema files:"
14752
msgstr ""
14753
14754
#: serverguide/C/network-auth.xml:1671(command)
14755
msgid ""
14756
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
14757
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
14758
msgstr ""
14759
14760
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
14761
msgid ""
14762
"Change the above file and path names to match your own if they are different."
14763
msgstr ""
14764
14765
#: serverguide/C/network-auth.xml:1681(para)
14766
msgid ""
14767
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
14768
"the following attributes:"
14769
msgstr ""
14770
14771
#: serverguide/C/network-auth.xml:1685(programlisting)
14772
#, no-wrap
14773
msgid ""
14774
"\n"
14775
"dn: cn=samba,cn=schema,cn=config\n"
14776
"...\n"
14777
"cn: samba\n"
14778
msgstr ""
14779
14780
#: serverguide/C/network-auth.xml:1695(programlisting)
14781
#, no-wrap
14782
msgid ""
14783
"\n"
14784
"structuralObjectClass: olcSchemaConfig\n"
14785
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
14786
"creatorsName: cn=config\n"
14787
"createTimestamp: 20080827045234Z\n"
14788
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
14789
"modifiersName: cn=config\n"
14790
"modifyTimestamp: 20080827045234Z\n"
14791
msgstr ""
14792
14793
#: serverguide/C/network-auth.xml:1720(command)
14794
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
14795
msgstr ""
14796
14797
#: serverguide/C/network-auth.xml:1726(para)
14798
msgid ""
14799
"There should now be a <emphasis>dn: "
14800
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
14801
"sequential schema, entry in the cn=config tree."
14802
msgstr ""
14803
14804
#: serverguide/C/network-auth.xml:1734(para)
14805
msgid ""
14806
"Copy and paste the following into a file named "
14807
"<filename>samba_indexes.ldif</filename>:"
14808
msgstr ""
14809
14810
#: serverguide/C/network-auth.xml:1738(programlisting)
14811
#, no-wrap
14812
msgid ""
14813
"\n"
14814
"dn: olcDatabase={1}hdb,cn=config\n"
14815
"changetype: modify\n"
14816
"add: olcDbIndex\n"
14817
"olcDbIndex: uidNumber eq\n"
14818
"olcDbIndex: gidNumber eq\n"
14819
"olcDbIndex: loginShell eq\n"
14820
"olcDbIndex: uid eq,pres,sub\n"
14821
"olcDbIndex: memberUid eq,pres,sub\n"
14822
"olcDbIndex: uniqueMember eq,pres\n"
14823
"olcDbIndex: sambaSID eq\n"
14824
"olcDbIndex: sambaPrimaryGroupSID eq\n"
14825
"olcDbIndex: sambaGroupType eq\n"
14826
"olcDbIndex: sambaSIDList eq\n"
14827
"olcDbIndex: sambaDomainName eq\n"
14828
"olcDbIndex: default sub\n"
14829
msgstr ""
14830
14831
#: serverguide/C/network-auth.xml:1756(para)
14832
msgid ""
14833
"Using the <application>ldapmodify</application> utility load the new indexes:"
14834
msgstr ""
14835
14836
#: serverguide/C/network-auth.xml:1761(command)
14837
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
14838
msgstr ""
14839
14840
#: serverguide/C/network-auth.xml:1763(para)
14841
msgid ""
14842
"If all went well you should see the new indexes using "
14843
"<application>ldapsearch</application>:"
14844
msgstr ""
14845
14846
#: serverguide/C/network-auth.xml:1768(command)
14847
msgid ""
14848
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
14849
msgstr ""
14850
14851
#: serverguide/C/network-auth.xml:1774(para)
14852
msgid ""
14853
"Next, configure the <application>smbldap-tools</application> package to "
14854
"match your environment. The package comes with a configuration script that "
14855
"will ask questions about the needed options. To run the script enter:"
14856
msgstr ""
14857
14858
#: serverguide/C/network-auth.xml:1780(command)
14859
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
14860
msgstr ""
14861
14862
#: serverguide/C/network-auth.xml:1781(command)
14863
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
14864
msgstr ""
14865
14866
#: serverguide/C/network-auth.xml:1784(para)
14867
msgid ""
14868
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
14869
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
14870
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
14871
"configure script, so if you made any mistakes while executing the script it "
14872
"may be simpler to edit the file appropriately."
14873
msgstr ""
14874
14875
#: serverguide/C/network-auth.xml:1794(para)
14876
msgid ""
14877
"The <application>smbldap-populate</application> script will add the "
14878
"necessary users, groups, and LDAP objects required for Samba. It is a good "
14879
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
14880
"<application>slapcat</application> before executing the command:"
14881
msgstr ""
14882
14883
#: serverguide/C/network-auth.xml:1801(command)
14884
msgid "sudo slapcat -l backup.ldif"
14885
msgstr ""
14886
14887
#: serverguide/C/network-auth.xml:1807(para)
14888
msgid ""
14889
"Once you have a current backup execute <application>smbldap-"
14890
"populate</application> by entering:"
14891
msgstr ""
14892
14893
#: serverguide/C/network-auth.xml:1812(command)
14894
msgid "sudo smbldap-populate"
14895
msgstr ""
14896
14897
#: serverguide/C/network-auth.xml:1816(para)
14898
msgid ""
14899
"You can create an LDIF file containing the new Samba objects by executing "
14900
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
14901
"look over the changes making sure everything is correct."
14902
msgstr ""
14903
14904
#: serverguide/C/network-auth.xml:1824(para)
14905
msgid ""
14906
"Your LDAP directory now has the necessary domain information to authenticate "
14907
"Samba users."
14908
msgstr ""
14909
14910
#: serverguide/C/network-auth.xml:1830(title)
14911
msgid "Samba Configuration"
14912
msgstr ""
14913
14914
#: serverguide/C/network-auth.xml:1832(para)
14915
msgid ""
14916
"There a multiple ways to configure Samba for details on some common "
14917
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
14918
"Samba to use LDAP, edit the main Samba configuration file "
14919
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
14920
"backend</emphasis> option and adding the following:"
14921
msgstr ""
14922
14923
#: serverguide/C/network-auth.xml:1838(programlisting)
14924
#, no-wrap
14925
msgid ""
14926
"\n"
14927
"# passdb backend = tdbsam\n"
14928
"\n"
14929
"# LDAP Settings\n"
14930
" passdb backend = ldapsam:ldap://hostname\n"
14931
" ldap suffix = dc=example,dc=com\n"
14932
" ldap user suffix = ou=People\n"
14933
" ldap group suffix = ou=Groups\n"
14934
" ldap machine suffix = ou=Computers\n"
14935
" ldap idmap suffix = ou=Idmap\n"
14936
" ldap admin dn = cn=admin,dc=example,dc=com\n"
14937
" ldap ssl = start tls\n"
14938
" ldap passwd sync = yes\n"
14939
"...\n"
14940
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
14941
msgstr ""
14942
14943
#: serverguide/C/network-auth.xml:1855(para)
14944
msgid "Restart <application>samba</application> to enable the new settings:"
14945
msgstr ""
14946
14947
#: serverguide/C/network-auth.xml:1863(para)
14948
msgid ""
14949
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
14950
"enter:"
14951
msgstr ""
14952
14953
#: serverguide/C/network-auth.xml:1868(command)
14954
msgid "sudo smbpasswd -w secret"
14955
msgstr ""
14956
14957
#: serverguide/C/network-auth.xml:1872(para)
14958
msgid ""
14959
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
14960
"password."
14961
msgstr ""
14962
14963
#: serverguide/C/network-auth.xml:1877(para)
14964
msgid ""
14965
"If you currently have users in LDAP, and you want them to authenticate using "
14966
"Samba, they will need some Samba attributes defined in the "
14967
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
14968
"users using the <application>smbpasswd</application> utility, replacing "
14969
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
14970
msgstr ""
14971
14972
#: serverguide/C/network-auth.xml:1885(command)
14973
msgid "sudo smbpasswd -a username"
14974
msgstr ""
14975
14976
#: serverguide/C/network-auth.xml:1888(para)
14977
msgid "You will then be asked to enter the user's password."
14978
msgstr ""
14979
14980
#: serverguide/C/network-auth.xml:1892(para)
14981
msgid ""
14982
"To add new user, group, and machine accounts use the utilities from the "
14983
"<application>smbldap-tools</application> package. Here are some examples:"
14984
msgstr ""
14985
14986
#: serverguide/C/network-auth.xml:1899(para)
14987
msgid ""
14988
"To add a new user to LDAP with Samba attributes enter the following, "
14989
"replacing username with an actual username:"
14990
msgstr ""
14991
14992
#: serverguide/C/network-auth.xml:1903(command)
14993
msgid "sudo smbldap-useradd -a -P username"
14994
msgstr ""
14995
14996
#: serverguide/C/network-auth.xml:1905(para)
14997
msgid ""
14998
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
14999
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
15000
"passwd</application> utility after the user is created allowing you to enter "
15001
"a password for the user."
15002
msgstr ""
15003
15004
#: serverguide/C/network-auth.xml:1911(para)
15005
msgid "To remove a user from the directory enter:"
15006
msgstr ""
15007
15008
#: serverguide/C/network-auth.xml:1915(command)
15009
msgid "sudo smbldap-userdel username"
15010
msgstr ""
15011
15012
#: serverguide/C/network-auth.xml:1917(para)
15013
msgid ""
15014
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15015
"r</emphasis> option to remove the user's home directory."
15016
msgstr ""
15017
15018
#: serverguide/C/network-auth.xml:1922(para)
15019
msgid ""
15020
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15021
"groupname with an appropriate group:"
15022
msgstr ""
15023
15024
#: serverguide/C/network-auth.xml:1926(command)
15025
msgid "sudo smbldap-groupadd -a groupname"
15026
msgstr ""
15027
15028
#: serverguide/C/network-auth.xml:1928(para)
15029
msgid ""
15030
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15031
"a</emphasis> adds the Samba attributes."
15032
msgstr ""
15033
15034
#: serverguide/C/network-auth.xml:1933(para)
15035
msgid ""
15036
"To add a user to a group use <application>smbldap-groupmod</application>:"
15037
msgstr ""
15038
15039
#: serverguide/C/network-auth.xml:1937(command)
15040
msgid "sudo smbldap-groupmod -m username groupname"
15041
msgstr ""
15042
15043
#: serverguide/C/network-auth.xml:1939(para)
15044
msgid ""
15045
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15046
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15047
"listing them in <emphasis>comma separated</emphasis> format."
15048
msgstr ""
15049
15050
#: serverguide/C/network-auth.xml:1945(para)
15051
msgid ""
15052
"<application>smbldap-groupmod</application> can also be used to remove a "
15053
"user from a group:"
15054
msgstr ""
15055
15056
#: serverguide/C/network-auth.xml:1949(command)
15057
msgid "sudo smbldap-groupmod -x username groupname"
15058
msgstr ""
15059
15060
#: serverguide/C/network-auth.xml:1953(para)
15061
msgid ""
15062
"Additionally, the <application>smbldap-useradd</application> utility can add "
15063
"Samba machine accounts:"
15064
msgstr ""
15065
15066
#: serverguide/C/network-auth.xml:1957(command)
15067
msgid "sudo smbldap-useradd -t 0 -w username"
15068
msgstr ""
15069
15070
#: serverguide/C/network-auth.xml:1959(para)
15071
msgid ""
15072
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15073
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15074
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15075
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15076
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15077
"<application>smbldap-useradd</application>."
15078
msgstr ""
15079
15080
#: serverguide/C/network-auth.xml:1968(para)
15081
msgid ""
15082
"There are more useful utilities and options in the <application>smbldap-"
15083
"tools</application> package. The man page for each utility provides more "
15084
"details."
15085
msgstr ""
15086
15087
#: serverguide/C/network-auth.xml:1979(para)
15088
msgid ""
15089
"There are multiple places where LDAP and Samba is documented in the <ulink "
15090
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15091
"Collection</ulink>."
15092
msgstr ""
15093
15094
#: serverguide/C/network-auth.xml:1985(para)
15095
msgid ""
15096
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15097
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15098
msgstr ""
15099
15100
#: serverguide/C/network-auth.xml:1991(para)
15101
msgid ""
15102
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15103
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15104
msgstr ""
15105
15106
#: serverguide/C/network-auth.xml:1997(para)
15107
msgid ""
15108
"Again, for more information on <application>smbldap-tools</application> see "
15109
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15110
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15111
msgstr ""
15112
15113
#: serverguide/C/network-auth.xml:2004(para)
15114
msgid ""
15115
"Also, there is a list of <ulink "
15116
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15117
"wiki</ulink> articles with more information."
15118
msgstr ""
15119
15120
#: serverguide/C/network-auth.xml:2013(title)
15121
msgid "Kerberos"
15122
msgstr ""
15123
15124
#: serverguide/C/network-auth.xml:2015(para)
15125
msgid ""
15126
"<application>Kerberos</application> is a network authentication system based "
15127
"on the principal of a trusted third party. The other two parties being the "
15128
"user and the service the user wishes to authenticate to. Not all services "
15129
"and applications can use Kerberos, but for those that can, it brings the "
15130
"network environment one step closer to being Single Sign On (SSO)."
15131
msgstr ""
15132
15133
#: serverguide/C/network-auth.xml:2021(para)
15134
msgid ""
15135
"This section covers installation and configuration of a Kerberos server, and "
15136
"some example client configurations."
15137
msgstr ""
15138
15139
#: serverguide/C/network-auth.xml:2028(para)
15140
msgid ""
15141
"If you are new to Kerberos there are a few terms that are good to understand "
15142
"before setting up a Kerberos server. Most of the terms will relate to things "
15143
"you may be familiar with in other environments:"
15144
msgstr ""
15145
15146
#: serverguide/C/network-auth.xml:2035(para)
15147
msgid ""
15148
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15149
"by servers need to be defined as Kerberos Principals."
15150
msgstr ""
15151
15152
#: serverguide/C/network-auth.xml:2040(para)
15153
msgid ""
15154
"<emphasis>Instances:</emphasis> are used for service principals and special "
15155
"administrative principals."
15156
msgstr ""
15157
15158
#: serverguide/C/network-auth.xml:2045(para)
15159
msgid ""
15160
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15161
"Kerberos installation. Usually the DNS domain converted to uppercase "
15162
"(EXAMPLE.COM)."
15163
msgstr ""
15164
15165
#: serverguide/C/network-auth.xml:2051(para)
15166
msgid ""
15167
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15168
"a database of all principals, the authentication server, and the ticket "
15169
"granting server. For each realm there must be at least one KDC."
15170
msgstr ""
15171
15172
#: serverguide/C/network-auth.xml:2057(para)
15173
msgid ""
15174
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15175
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15176
"password which is known only to the user and the KDC."
15177
msgstr ""
15178
15179
#: serverguide/C/network-auth.xml:2063(para)
15180
msgid ""
15181
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15182
"clients upon request."
15183
msgstr ""
15184
15185
#: serverguide/C/network-auth.xml:2068(para)
15186
msgid ""
15187
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15188
"One principal being a user and the other a service requested by the user. "
15189
"Tickets establish an encryption key used for secure communication during the "
15190
"authenticated session."
15191
msgstr ""
15192
15193
#: serverguide/C/network-auth.xml:2074(para)
15194
msgid ""
15195
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15196
"principal database and contain the encryption key for a service or host."
15197
msgstr ""
15198
15199
#: serverguide/C/network-auth.xml:2081(para)
15200
msgid ""
15201
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15202
"redundancy, which contains a database of Principals. When a user principal "
15203
"logs into a workstation, configured for Kerberos authentication, the KDC "
15204
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15205
"match, the user is authenticated and can then request tickets for Kerberized "
15206
"services from the Ticket Granting Server (TGS). The service tickets allow "
15207
"the user to authenticate to the service without entering another username "
15208
"and password."
15209
msgstr ""
15210
15211
#: serverguide/C/network-auth.xml:2090(title)
15212
msgid "Kerberos Server"
15213
msgstr ""
15214
15215
#: serverguide/C/network-auth.xml:2094(para)
15216
msgid ""
15217
"Before installing the Kerberos server a properly configured DNS server is "
15218
"needed for your domain. Since the Kerberos Realm by convention matches the "
15219
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15220
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15221
msgstr ""
15222
15223
#: serverguide/C/network-auth.xml:2100(para)
15224
msgid ""
15225
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15226
"between a client machine and the server differs by more than five minutes "
15227
"(by default), the workstation will not be able to authenticate. To correct "
15228
"the problem all hosts should have their time synchronized using the "
15229
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15230
"NTP see <xref linkend=\"NTP\"/>."
15231
msgstr ""
15232
15233
#: serverguide/C/network-auth.xml:2107(para)
15234
msgid ""
15235
"The first step in installing a Kerberos Realm is to install the "
15236
"<application>krb5-kdc</application> and <application>krb5-admin-"
15237
"server</application> packages. From a terminal enter:"
15238
msgstr ""
15239
15240
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15241
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15242
msgstr ""
15243
15244
#: serverguide/C/network-auth.xml:2116(para)
15245
msgid ""
15246
"You will be asked at the end of the install to supply a name for the "
15247
"Kerberos and Admin servers, which may or may not be the same server, for the "
15248
"realm."
15249
msgstr ""
15250
15251
#: serverguide/C/network-auth.xml:2121(para)
15252
msgid ""
15253
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15254
"utility:"
15255
msgstr ""
15256
15257
#: serverguide/C/network-auth.xml:2126(command)
15258
msgid "sudo krb5_newrealm"
15259
msgstr ""
15260
15261
#: serverguide/C/network-auth.xml:2133(para)
15262
msgid ""
15263
"The questions asked during installation are used to configure the "
15264
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15265
"Distribution Center (KDC) settings simply edit the file and restart the "
15266
"<application>krb5-kdc</application> daemon."
15267
msgstr ""
15268
15269
#: serverguide/C/network-auth.xml:2141(para)
15270
msgid ""
15271
"Now that the KDC running an admin user is needed. It is recommended to use a "
15272
"different username from your everyday username. Using the "
15273
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15274
msgstr ""
15275
15276
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15277
msgid "sudo kadmin.local"
15278
msgstr ""
15279
15280
#: serverguide/C/network-auth.xml:2148(computeroutput)
15281
#, no-wrap
15282
msgid ""
15283
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15284
"kadmin.local:"
15285
msgstr ""
15286
15287
#: serverguide/C/network-auth.xml:2149(userinput)
15288
#, no-wrap
15289
msgid " addprinc steve/admin"
15290
msgstr ""
15291
15292
#: serverguide/C/network-auth.xml:2150(computeroutput)
15293
#, no-wrap
15294
msgid ""
15295
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15296
"policy\n"
15297
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15298
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15299
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15300
"kadmin.local:"
15301
msgstr ""
15302
15303
#: serverguide/C/network-auth.xml:2154(userinput)
15304
#, no-wrap
15305
msgid " quit"
15306
msgstr ""
15307
15308
#: serverguide/C/network-auth.xml:2157(para)
15309
msgid ""
15310
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15311
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15312
"is an <emphasis>Instance</emphasis>, and <emphasis "
15313
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15314
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15315
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15316
"rights."
15317
msgstr ""
15318
15319
#: serverguide/C/network-auth.xml:2165(para)
15320
msgid ""
15321
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15322
"your Realm and admin username."
15323
msgstr ""
15324
15325
#: serverguide/C/network-auth.xml:2173(para)
15326
msgid ""
15327
"Next, the new admin user needs to have the appropriate Access Control List "
15328
"(ACL) permissions. The permissions are configured in the "
15329
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15330
msgstr ""
15331
15332
#: serverguide/C/network-auth.xml:2178(programlisting)
15333
#, no-wrap
15334
msgid ""
15335
"\n"
15336
"steve/admin@EXAMPLE.COM *\n"
15337
msgstr ""
15338
15339
#: serverguide/C/network-auth.xml:2182(para)
15340
msgid ""
15341
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15342
"any operation on all principals in the realm."
15343
msgstr ""
15344
15345
#: serverguide/C/network-auth.xml:2189(para)
15346
msgid ""
15347
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15348
"to take affect:"
15349
msgstr ""
15350
15351
#: serverguide/C/network-auth.xml:2194(command)
15352
msgid "sudo /etc/init.d/krb5-admin-server restart"
15353
msgstr ""
15354
15355
#: serverguide/C/network-auth.xml:2200(para)
15356
msgid ""
15357
"The new user principal can be tested using the <application>kinit "
15358
"utility</application>:"
15359
msgstr ""
15360
15361
#: serverguide/C/network-auth.xml:2205(command)
15362
msgid "kinit steve/admin"
15363
msgstr ""
15364
15365
#: serverguide/C/network-auth.xml:2206(computeroutput)
15366
#, no-wrap
15367
msgid "steve/admin@EXAMPLE.COM's Password:"
15368
msgstr ""
15369
15370
#: serverguide/C/network-auth.xml:2209(para)
15371
msgid ""
15372
"After entering the password, use the <application>klist</application> "
15373
"utility to view information about the Ticket Granting Ticket (TGT):"
15374
msgstr ""
15375
15376
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15377
msgid "klist"
15378
msgstr ""
15379
15380
#: serverguide/C/network-auth.xml:2216(computeroutput)
15381
#, no-wrap
15382
msgid ""
15383
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15384
" Principal: steve/admin@EXAMPLE.COM\n"
15385
"\n"
15386
" Issued Expires Principal\n"
15387
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15388
msgstr ""
15389
15390
#: serverguide/C/network-auth.xml:2223(para)
15391
msgid ""
15392
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15393
"the KDC. For example:"
15394
msgstr ""
15395
15396
#: serverguide/C/network-auth.xml:2227(programlisting)
15397
#, no-wrap
15398
msgid ""
15399
"\n"
15400
"192.168.0.1 kdc01.example.com kdc01\n"
15401
msgstr ""
15402
15403
#: serverguide/C/network-auth.xml:2231(para)
15404
msgid ""
15405
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15406
msgstr ""
15407
15408
#: serverguide/C/network-auth.xml:2238(para)
15409
msgid ""
15410
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15411
"are needed. Add the following to "
15412
"<filename>/etc/named/db.example.com</filename>:"
15413
msgstr ""
15414
15415
#: serverguide/C/network-auth.xml:2243(programlisting)
15416
#, no-wrap
15417
msgid ""
15418
"\n"
15419
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15420
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15421
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15422
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15423
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15424
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15425
msgstr ""
15426
15427
#: serverguide/C/network-auth.xml:2253(para)
15428
msgid ""
15429
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15430
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15431
"KDC."
15432
msgstr ""
15433
15434
#: serverguide/C/network-auth.xml:2259(para)
15435
msgid ""
15436
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15437
msgstr ""
15438
15439
#: serverguide/C/network-auth.xml:2266(para)
15440
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15441
msgstr ""
15442
15443
#: serverguide/C/network-auth.xml:2273(title)
15444
msgid "Secondary KDC"
15445
msgstr ""
15446
15447
#: serverguide/C/network-auth.xml:2275(para)
15448
msgid ""
15449
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15450
"practice to have a Secondary KDC in case the primary becomes unavailable."
15451
msgstr ""
15452
15453
#: serverguide/C/network-auth.xml:2283(para)
15454
msgid ""
15455
"First, install the packages, and when asked for the Kerberos and Admin "
15456
"server names enter the name of the Primary KDC:"
15457
msgstr ""
15458
15459
#: serverguide/C/network-auth.xml:2294(para)
15460
msgid ""
15461
"Once you have the packages installed, create the Secondary KDC's host "
15462
"principal. From a terminal prompt, enter:"
15463
msgstr ""
15464
15465
#: serverguide/C/network-auth.xml:2299(command)
15466
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15467
msgstr ""
15468
15469
#: serverguide/C/network-auth.xml:2303(para)
15470
msgid ""
15471
"After, issuing any <application>kadmin</application> commands you will be "
15472
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15473
"password."
15474
msgstr ""
15475
15476
#: serverguide/C/network-auth.xml:2312(para)
15477
msgid "Extract the <emphasis>keytab</emphasis> file:"
15478
msgstr ""
15479
15480
#: serverguide/C/network-auth.xml:2317(command)
15481
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15482
msgstr ""
15483
15484
#: serverguide/C/network-auth.xml:2323(para)
15485
msgid ""
15486
"There should now be a <filename>keytab.kdc02</filename> in the current "
15487
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15488
msgstr ""
15489
15490
#: serverguide/C/network-auth.xml:2329(command)
15491
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15492
msgstr ""
15493
15494
#: serverguide/C/network-auth.xml:2333(para)
15495
msgid ""
15496
"If the path to the <filename>keytab.kdc02</filename> file is different "
15497
"adjust accordingly."
15498
msgstr ""
15499
15500
#: serverguide/C/network-auth.xml:2338(para)
15501
msgid ""
15502
"Also, you can list the principals in a Keytab file, which can be useful when "
15503
"troubleshooting, using the <application>klist</application> utility:"
15504
msgstr ""
15505
15506
#: serverguide/C/network-auth.xml:2344(command)
15507
msgid "sudo klist -k /etc/krb5.keytab"
15508
msgstr ""
15509
15510
#: serverguide/C/network-auth.xml:2350(para)
15511
msgid ""
15512
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15513
"that lists all KDCs for the Realm. For example, on both primary and "
15514
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15515
msgstr ""
15516
15517
#: serverguide/C/network-auth.xml:2355(programlisting)
15518
#, no-wrap
15519
msgid ""
15520
"\n"
15521
"host/kdc01.example.com@EXAMPLE.COM\n"
15522
"host/kdc02.example.com@EXAMPLE.COM\n"
15523
msgstr ""
15524
15525
#: serverguide/C/network-auth.xml:2363(para)
15526
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15527
msgstr ""
15528
15529
#: serverguide/C/network-auth.xml:2368(command)
15530
msgid "sudo kdb5_util -s create"
15531
msgstr ""
15532
15533
#: serverguide/C/network-auth.xml:2374(para)
15534
msgid ""
15535
"Now start the <application>kpropd</application> daemon, which listens for "
15536
"connections from the <application>kprop</application> utility. "
15537
"<application>kprop</application> is used to transfer dump files:"
15538
msgstr ""
15539
15540
#: serverguide/C/network-auth.xml:2381(command)
15541
msgid "sudo kpropd -S"
15542
msgstr ""
15543
15544
#: serverguide/C/network-auth.xml:2387(para)
15545
msgid ""
15546
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15547
"of the principal database:"
15548
msgstr ""
15549
15550
#: serverguide/C/network-auth.xml:2392(command)
15551
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15552
msgstr ""
15553
15554
#: serverguide/C/network-auth.xml:2398(para)
15555
msgid ""
15556
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15557
"<filename>/etc/krb5.keytab</filename>:"
15558
msgstr ""
15559
15560
#: serverguide/C/network-auth.xml:2403(command)
15561
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15562
msgstr ""
15563
15564
#: serverguide/C/network-auth.xml:2404(command)
15565
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15566
msgstr ""
15567
15568
#: serverguide/C/network-auth.xml:2408(para)
15569
msgid ""
15570
"Make sure there is a <emphasis>host</emphasis> for "
15571
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15572
msgstr ""
15573
15574
#: serverguide/C/network-auth.xml:2416(para)
15575
msgid ""
15576
"Using the <application>kprop</application> utility push the database to the "
15577
"Secondary KDC:"
15578
msgstr ""
15579
15580
#: serverguide/C/network-auth.xml:2421(command)
15581
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15582
msgstr ""
15583
15584
#: serverguide/C/network-auth.xml:2425(para)
15585
msgid ""
15586
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15587
"worked. If there is an error message check "
15588
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15589
"information."
15590
msgstr ""
15591
15592
#: serverguide/C/network-auth.xml:2431(para)
15593
msgid ""
15594
"You may also want to create a <application>cron</application> job to "
15595
"periodically update the database on the Secondary KDC. For example, the "
15596
"following will push the database every hour:"
15597
msgstr ""
15598
15599
#: serverguide/C/network-auth.xml:2436(programlisting)
15600
#, no-wrap
15601
msgid ""
15602
"\n"
15603
"# m h dom mon dow command\n"
15604
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15605
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15606
msgstr ""
15607
15608
#: serverguide/C/network-auth.xml:2444(para)
15609
msgid ""
15610
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15611
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15612
msgstr ""
15613
15614
#: serverguide/C/network-auth.xml:2450(command)
15615
msgid "sudo kdb5_util stash"
15616
msgstr ""
15617
15618
#: serverguide/C/network-auth.xml:2456(para)
15619
msgid ""
15620
"Finally, start the <application>krb5-kdc</application> daemon on the "
15621
"Secondary KDC:"
15622
msgstr ""
15623
15624
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15625
msgid "sudo /etc/init.d/krb5-kdc start"
15626
msgstr ""
15627
15628
#: serverguide/C/network-auth.xml:2467(para)
15629
msgid ""
15630
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15631
"for the Realm. You can test this by stopping the <application>krb5-"
15632
"kdc</application> daemon on the Primary KDC, then use "
15633
"<application>kinit</application> to request a ticket. If all goes well you "
15634
"should receive a ticket from the Secondary KDC."
15635
msgstr ""
15636
15637
#: serverguide/C/network-auth.xml:2475(title)
15638
msgid "Kerberos Linux Client"
15639
msgstr ""
15640
15641
#: serverguide/C/network-auth.xml:2477(para)
15642
msgid ""
15643
"This section covers configuring a Linux system as a "
15644
"<application>Kerberos</application> client. This will allow access to any "
15645
"kerberized services once a user has successfully logged into the system."
15646
msgstr ""
15647
15648
#: serverguide/C/network-auth.xml:2485(para)
15649
msgid ""
15650
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15651
"user</application> and <application>libpam-krb5</application> packages are "
15652
"needed, along with a few others that are not strictly necessary but make "
15653
"life easier. To install the packages enter the following in a terminal "
15654
"prompt:"
15655
msgstr ""
15656
15657
#: serverguide/C/network-auth.xml:2492(command)
15658
msgid ""
15659
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15660
msgstr ""
15661
15662
#: serverguide/C/network-auth.xml:2495(para)
15663
msgid ""
15664
"The <application>auth-client-config</application> package allows simple "
15665
"configuration of PAM for authentication from multiple sources, and the "
15666
"<application>libpam-ccreds</application> will cache authentication "
15667
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15668
"is unavailable. This package is also useful for laptops that may "
15669
"authenticate using Kerberos while on the corporate network, but will need to "
15670
"be accessed off the network as well."
15671
msgstr ""
15672
15673
#: serverguide/C/network-auth.xml:2506(para)
15674
msgid "To configure the client in a terminal enter:"
15675
msgstr ""
15676
15677
#: serverguide/C/network-auth.xml:2511(command)
15678
msgid "sudo dpkg-reconfigure krb5-config"
15679
msgstr ""
15680
15681
#: serverguide/C/network-auth.xml:2514(para)
15682
msgid ""
15683
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15684
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15685
"records, the menu will prompt you for the hostname of the Key Distribution "
15686
"Center (KDC) and Realm Administration server."
15687
msgstr ""
15688
15689
#: serverguide/C/network-auth.xml:2520(para)
15690
msgid ""
15691
"The <application>dpkg-reconfigure</application> adds entries to the "
15692
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15693
"entries similar to the following:"
15694
msgstr ""
15695
15696
#: serverguide/C/network-auth.xml:2525(programlisting)
15697
#, no-wrap
15698
msgid ""
15699
"\n"
15700
"[libdefaults]\n"
15701
" default_realm = EXAMPLE.COM\n"
15702
"...\n"
15703
"[realms]\n"
15704
" EXAMPLE.COM = } \n"
15705
" kdc = 192.168.0.1 \n"
15706
" admin_server = 192.168.0.1\n"
15707
" }\n"
15708
msgstr ""
15709
15710
#: serverguide/C/network-auth.xml:2536(para)
15711
msgid ""
15712
"You can test the configuration by requesting a ticket using the "
15713
"<application>kinit</application> utility. For example:"
15714
msgstr ""
15715
15716
#: serverguide/C/network-auth.xml:2541(command)
15717
msgid "kinit steve@EXAMPLE.COM"
15718
msgstr ""
15719
15720
#: serverguide/C/network-auth.xml:2542(computeroutput)
15721
#, no-wrap
15722
msgid "Password for steve@EXAMPLE.COM:"
15723
msgstr ""
15724
15725
#: serverguide/C/network-auth.xml:2545(para)
15726
msgid ""
15727
"When a ticket has been granted, the details can be viewed using "
15728
"<application>klist</application>:"
15729
msgstr ""
15730
15731
#: serverguide/C/network-auth.xml:2551(computeroutput)
15732
#, no-wrap
15733
msgid ""
15734
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
15735
"Default principal: steve@EXAMPLE.COM\n"
15736
"\n"
15737
"Valid starting Expires Service principal\n"
15738
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
15739
" renew until 07/25/08 05:18:57\n"
15740
"\n"
15741
"\n"
15742
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
15743
"klist: You have no tickets cached"
15744
msgstr ""
15745
15746
#: serverguide/C/network-auth.xml:2563(para)
15747
msgid ""
15748
"Next, use the <application>auth-client-config</application> to configure the "
15749
"<application>libpam-krb5</application> module to request a ticket during "
15750
"login:"
15751
msgstr ""
15752
15753
#: serverguide/C/network-auth.xml:2569(command)
15754
msgid "sudo auth-client-config -a -p kerberos_example"
15755
msgstr ""
15756
15757
#: serverguide/C/network-auth.xml:2572(para)
15758
msgid ""
15759
"You will should now receive a ticket upon successful login authentication."
15760
msgstr ""
15761
15762
#: serverguide/C/network-auth.xml:2583(para)
15763
msgid ""
15764
"For more information on Kerberos see the <ulink "
15765
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
15766
msgstr ""
15767
15768
#: serverguide/C/network-auth.xml:2588(para)
15769
msgid ""
15770
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
15771
"Kerberos</ulink> page has more details."
15772
msgstr ""
15773
15774
#: serverguide/C/network-auth.xml:2593(para)
15775
msgid ""
15776
"O'Reilly's <ulink "
15777
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
15778
"Guide</ulink> is a great reference when setting up Kerberos."
15779
msgstr ""
15780
15781
#: serverguide/C/network-auth.xml:2599(para)
15782
msgid ""
15783
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
15784
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
15785
"Kerberos questions."
15786
msgstr ""
15787
15788
#: serverguide/C/network-auth.xml:2609(title)
15789
msgid "Kerberos and LDAP"
15790
msgstr ""
15791
15792
#: serverguide/C/network-auth.xml:2611(para)
15793
msgid ""
15794
"Replicating a Kerberos principal database between two servers can be "
15795
"complicated, and adds an additional user database to your network. "
15796
"Fortunately, MIT Kerberos can be configured to use an "
15797
"<application>LDAP</application> directory as a principal database. This "
15798
"section covers configuring a primary and secondary kerberos server to use "
15799
"<application>OpenLDAP</application> for the principal database."
15800
msgstr ""
15801
15802
#: serverguide/C/network-auth.xml:2619(title)
15803
msgid "Configuring OpenLDAP"
15804
msgstr ""
15805
15806
#: serverguide/C/network-auth.xml:2621(para)
15807
msgid ""
15808
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
15809
"<application>OpenLDAP</application> server that has network connectivity to "
15810
"the Primary and Secondary KDCs. The rest of this section assumes that you "
15811
"also have LDAP replication configured between at least two servers. For "
15812
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
15813
msgstr ""
15814
15815
#: serverguide/C/network-auth.xml:2628(para)
15816
msgid ""
15817
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
15818
"that traffic between the KDC and LDAP server is encrypted. See <xref "
15819
"linkend=\"openldap-tls\"/> for details."
15820
msgstr ""
15821
15822
#: serverguide/C/network-auth.xml:2635(para)
15823
msgid ""
15824
"To load the schema into LDAP, on the LDAP server install the "
15825
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
15826
msgstr ""
15827
15828
#: serverguide/C/network-auth.xml:2641(command)
15829
msgid "sudo apt-get install krb5-kdc-ldap"
15830
msgstr ""
15831
15832
#: serverguide/C/network-auth.xml:2646(para)
15833
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
15834
msgstr ""
15835
15836
#: serverguide/C/network-auth.xml:2651(command)
15837
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
15838
msgstr ""
15839
15840
#: serverguide/C/network-auth.xml:2652(command)
15841
msgid ""
15842
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
15843
msgstr ""
15844
15845
#: serverguide/C/network-auth.xml:2658(para)
15846
msgid ""
15847
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
15848
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
15849
"<application>slapd</application> is also detailed in <xref "
15850
"linkend=\"openldap-configuration\"/>."
15851
msgstr ""
15852
15853
#: serverguide/C/network-auth.xml:2671(programlisting)
15854
#, no-wrap
15855
msgid ""
15856
"\n"
15857
"include /etc/ldap/schema/core.schema\n"
15858
"include /etc/ldap/schema/collective.schema\n"
15859
"include /etc/ldap/schema/corba.schema\n"
15860
"include /etc/ldap/schema/cosine.schema\n"
15861
"include /etc/ldap/schema/duaconf.schema\n"
15862
"include /etc/ldap/schema/dyngroup.schema\n"
15863
"include /etc/ldap/schema/inetorgperson.schema\n"
15864
"include /etc/ldap/schema/java.schema\n"
15865
"include /etc/ldap/schema/misc.schema\n"
15866
"include /etc/ldap/schema/nis.schema\n"
15867
"include /etc/ldap/schema/openldap.schema\n"
15868
"include /etc/ldap/schema/ppolicy.schema\n"
15869
"include /etc/ldap/schema/kerberos.schema\n"
15870
msgstr ""
15871
15872
#: serverguide/C/network-auth.xml:2691(para)
15873
msgid "Create a temporary directory to hold the LDIF files:"
15874
msgstr ""
15875
15876
#: serverguide/C/network-auth.xml:2706(command)
15877
msgid ""
15878
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
15879
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
15880
msgstr ""
15881
15882
#: serverguide/C/network-auth.xml:2716(para)
15883
msgid ""
15884
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
15885
"changing the following attributes:"
15886
msgstr ""
15887
15888
#: serverguide/C/network-auth.xml:2720(programlisting)
15889
#, no-wrap
15890
msgid ""
15891
"\n"
15892
"dn: cn=kerberos,cn=schema,cn=config\n"
15893
"...\n"
15894
"cn: kerberos\n"
15895
msgstr ""
15896
15897
#: serverguide/C/network-auth.xml:2726(para)
15898
msgid "And remove the following lines from the end of the file:"
15899
msgstr ""
15900
15901
#: serverguide/C/network-auth.xml:2730(programlisting)
15902
#, no-wrap
15903
msgid ""
15904
"\n"
15905
"structuralObjectClass: olcSchemaConfig\n"
15906
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
15907
"creatorsName: cn=config\n"
15908
"createTimestamp: 20090111203515Z\n"
15909
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
15910
"modifiersName: cn=config\n"
15911
"modifyTimestamp: 20090111203515Z\n"
15912
msgstr ""
15913
15914
#: serverguide/C/network-auth.xml:2749(para)
15915
msgid "Load the new schema with <application>ldapadd</application>:"
15916
msgstr ""
15917
15918
#: serverguide/C/network-auth.xml:2754(command)
15919
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
15920
msgstr ""
15921
15922
#: serverguide/C/network-auth.xml:2760(para)
15923
msgid ""
15924
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
15925
msgstr ""
15926
15927
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
15928
msgid "ldapmodify -x -D cn=admin,cn=config -W"
15929
msgstr ""
15930
15931
#: serverguide/C/network-auth.xml:2767(userinput)
15932
#, no-wrap
15933
msgid ""
15934
"dn: olcDatabase={1}hdb,cn=config\n"
15935
"add: olcDbIndex\n"
15936
"olcDbIndex: krbPrincipalName eq,pres,sub"
15937
msgstr ""
15938
15939
#: serverguide/C/network-auth.xml:2766(computeroutput)
15940
#, no-wrap
15941
msgid ""
15942
"Enter LDAP Password:\n"
15943
"<placeholder-1/>\n"
15944
"\n"
15945
"modifying entry \"olcDatabase={1}hdb,cn=config\""
15946
msgstr ""
15947
15948
#: serverguide/C/network-auth.xml:2777(para)
15949
msgid "Finally, update the Access Control Lists (ACL):"
15950
msgstr ""
15951
15952
#: serverguide/C/network-auth.xml:2784(userinput)
15953
#, no-wrap
15954
msgid ""
15955
"dn: olcDatabase={1}hdb,cn=config\n"
15956
"replace: olcAccess\n"
15957
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
15958
"dn=\"cn=admin,dc=exampl\n"
15959
" e,dc=com\" write by anonymous auth by self write by * none\n"
15960
"-\n"
15961
"add: olcAccess\n"
15962
"olcAccess: to dn.base=\"\" by * read\n"
15963
"-\n"
15964
"add: olcAccess\n"
15965
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
15966
msgstr ""
15967
15968
#: serverguide/C/network-auth.xml:2783(computeroutput)
15969
#, no-wrap
15970
msgid ""
15971
"Enter LDAP Password: \n"
15972
"<placeholder-1/>\n"
15973
"\n"
15974
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
15975
msgstr ""
15976
15977
#: serverguide/C/network-auth.xml:2804(para)
15978
msgid ""
15979
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
15980
"database."
15981
msgstr ""
15982
15983
#: serverguide/C/network-auth.xml:2810(title)
15984
msgid "Primary KDC Configuration"
15985
msgstr ""
15986
15987
#: serverguide/C/network-auth.xml:2812(para)
15988
msgid ""
15989
"With <application>OpenLDAP</application> configured it is time to configure "
15990
"the KDC."
15991
msgstr ""
15992
15993
#: serverguide/C/network-auth.xml:2818(para)
15994
msgid "First, install the necessary packages, from a terminal enter:"
15995
msgstr ""
15996
15997
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
15998
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
15999
msgstr ""
16000
16001
#: serverguide/C/network-auth.xml:2829(para)
16002
msgid ""
16003
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16004
"under the appropriate sections:"
16005
msgstr ""
16006
16007
#: serverguide/C/network-auth.xml:2833(programlisting)
16008
#, no-wrap
16009
msgid ""
16010
"\n"
16011
"[libdefaults]\n"
16012
" default_realm = EXAMPLE.COM\n"
16013
"\n"
16014
"...\n"
16015
"\n"
16016
"[realms]\n"
16017
" EXAMPLE.COM = {\n"
16018
" kdc = kdc01.example.com\n"
16019
" kdc = kdc02.example.com\n"
16020
" admin_server = kdc01.example.com\n"
16021
" admin_server = kdc02.example.com\n"
16022
" default_domain = example.com\n"
16023
" database_module = openldap_ldapconf\n"
16024
" }\n"
16025
"\n"
16026
"...\n"
16027
"\n"
16028
"[domain_realm]\n"
16029
" .example.com = EXAMPLE.COM\n"
16030
"\n"
16031
"\n"
16032
"...\n"
16033
"\n"
16034
"[dbdefaults]\n"
16035
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16036
"\n"
16037
"[dbmodules]\n"
16038
" openldap_ldapconf = {\n"
16039
" db_library = kldap\n"
16040
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16041
"\n"
16042
" # this object needs to have read rights on\n"
16043
" # the realm container, principal container and realm sub-"
16044
"trees\n"
16045
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16046
"\n"
16047
" # this object needs to have read and write rights on\n"
16048
" # the realm container, principal container and realm sub-"
16049
"trees\n"
16050
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16051
" ldap_servers = ldaps://ldap01.example.com "
16052
"ldaps://ldap02.example.com\n"
16053
" ldap_conns_per_server = 5\n"
16054
" }\n"
16055
msgstr ""
16056
16057
#: serverguide/C/network-auth.xml:2878(para)
16058
msgid ""
16059
"Change <emphasis>example.com</emphasis>, "
16060
"<emphasis>dc=example,dc=com</emphasis>, "
16061
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16062
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16063
"object, and LDAP server for your network."
16064
msgstr ""
16065
16066
#: serverguide/C/network-auth.xml:2887(para)
16067
msgid ""
16068
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16069
"the realm:"
16070
msgstr ""
16071
16072
#: serverguide/C/network-auth.xml:2892(command)
16073
msgid ""
16074
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16075
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16076
msgstr ""
16077
16078
#: serverguide/C/network-auth.xml:2898(para)
16079
msgid ""
16080
"Create a stash of the password used to bind to the LDAP server. This "
16081
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16082
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16083
"<filename>/etc/krb5.conf</filename>:"
16084
msgstr ""
16085
16086
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16087
msgid ""
16088
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16089
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16090
msgstr ""
16091
16092
#: serverguide/C/network-auth.xml:2910(para)
16093
msgid "Copy the CA certificate from the LDAP server:"
16094
msgstr ""
16095
16096
#: serverguide/C/network-auth.xml:2915(command)
16097
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16098
msgstr ""
16099
16100
#: serverguide/C/network-auth.xml:2916(command)
16101
msgid "sudo cp cacert.pem /etc/ssl/certs"
16102
msgstr ""
16103
16104
#: serverguide/C/network-auth.xml:2919(para)
16105
msgid ""
16106
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16107
msgstr ""
16108
16109
#: serverguide/C/network-auth.xml:2923(programlisting)
16110
#, no-wrap
16111
msgid ""
16112
"\n"
16113
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16114
msgstr ""
16115
16116
#: serverguide/C/network-auth.xml:2928(para)
16117
msgid ""
16118
"The certificate will also need to be copied to the Secondary KDC, to allow "
16119
"the connection to the LDAP servers using LDAPS."
16120
msgstr ""
16121
16122
#: serverguide/C/network-auth.xml:2937(para)
16123
msgid ""
16124
"You can now add Kerberos principals to the LDAP database, and they will be "
16125
"copied to any other LDAP servers configured for replication. To add a "
16126
"principal using the <application>kadmin.local</application> utility enter:"
16127
msgstr ""
16128
16129
#: serverguide/C/network-auth.xml:2945(userinput)
16130
#, no-wrap
16131
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16132
msgstr ""
16133
16134
#: serverguide/C/network-auth.xml:2944(computeroutput)
16135
#, no-wrap
16136
msgid ""
16137
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16138
"kadmin.local: <placeholder-1/>\n"
16139
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16140
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16141
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16142
"Principal \"steve@EXAMPLE.COM\" created."
16143
msgstr ""
16144
16145
#: serverguide/C/network-auth.xml:2952(para)
16146
msgid ""
16147
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16148
"krbExtraData attributes added to the "
16149
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16150
"the <application>kinit</application> and <application>klist</application> "
16151
"utilities to test that the user is indeed issued a ticket."
16152
msgstr ""
16153
16154
#: serverguide/C/network-auth.xml:2959(para)
16155
msgid ""
16156
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16157
"option is needed to add the Kerberos attributes. Otherwise a new "
16158
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16159
msgstr ""
16160
16161
#: serverguide/C/network-auth.xml:2967(title)
16162
msgid "Secondary KDC Configuration"
16163
msgstr ""
16164
16165
#: serverguide/C/network-auth.xml:2969(para)
16166
msgid ""
16167
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16168
"one using the normal Kerberos database."
16169
msgstr ""
16170
16171
#: serverguide/C/network-auth.xml:2975(para)
16172
msgid "First, install the necessary packages. In a terminal enter:"
16173
msgstr ""
16174
16175
#: serverguide/C/network-auth.xml:2986(para)
16176
msgid ""
16177
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16178
msgstr ""
16179
16180
#: serverguide/C/network-auth.xml:2990(programlisting)
16181
#, no-wrap
16182
msgid ""
16183
"\n"
16184
"[libdefaults]\n"
16185
" default_realm = EXAMPLE.COM\n"
16186
"\n"
16187
"...\n"
16188
"\n"
16189
"[realms]\n"
16190
" EXAMPLE.COM = {\n"
16191
" kdc = kdc01.example.com\n"
16192
" kdc = kdc02.example.com\n"
16193
" admin_server = kdc01.example.com\n"
16194
" admin_server = kdc02.example.com\n"
16195
" default_domain = example.com\n"
16196
" database_module = openldap_ldapconf\n"
16197
" }\n"
16198
"\n"
16199
"...\n"
16200
"\n"
16201
"[domain_realm]\n"
16202
" .example.com = EXAMPLE.COM\n"
16203
"\n"
16204
"...\n"
16205
"\n"
16206
"[dbdefaults]\n"
16207
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16208
"\n"
16209
"[dbmodules]\n"
16210
" openldap_ldapconf = {\n"
16211
" db_library = kldap\n"
16212
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16213
"\n"
16214
" # this object needs to have read rights on\n"
16215
" # the realm container, principal container and realm sub-"
16216
"trees\n"
16217
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16218
"\n"
16219
" # this object needs to have read and write rights on\n"
16220
" # the realm container, principal container and realm sub-"
16221
"trees\n"
16222
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16223
" ldap_servers = ldaps://ldap01.example.com "
16224
"ldaps://ldap02.example.com\n"
16225
" ldap_conns_per_server = 5\n"
16226
" }\n"
16227
msgstr ""
16228
16229
#: serverguide/C/network-auth.xml:3037(para)
16230
msgid "Create the stash for the LDAP bind password:"
16231
msgstr ""
16232
16233
#: serverguide/C/network-auth.xml:3048(para)
16234
msgid ""
16235
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16236
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16237
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16238
"encrypted connection such as <application>scp</application>, or on physical "
16239
"media."
16240
msgstr ""
16241
16242
#: serverguide/C/network-auth.xml:3055(command)
16243
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16244
msgstr ""
16245
16246
#: serverguide/C/network-auth.xml:3056(command)
16247
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16248
msgstr ""
16249
16250
#: serverguide/C/network-auth.xml:3060(para)
16251
msgid ""
16252
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16253
msgstr ""
16254
16255
#: serverguide/C/network-auth.xml:3068(para)
16256
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16257
msgstr ""
16258
16259
#: serverguide/C/network-auth.xml:3079(para)
16260
msgid ""
16261
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16262
"you should be able to continue to authenticate users if one LDAP server, one "
16263
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16264
msgstr ""
16265
16266
#: serverguide/C/network-auth.xml:3091(para)
16267
msgid ""
16268
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16269
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16270
"Guide</ulink> has some additional details."
16271
msgstr ""
16272
16273
#: serverguide/C/network-auth.xml:3097(para)
16274
msgid ""
16275
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16276
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16277
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16278
"5.6</ulink> and the <ulink "
16279
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16280
"\">kdb5_ldap_util man page</ulink>."
16281
msgstr ""
16282
16283
#: serverguide/C/network-auth.xml:3105(para)
16284
msgid ""
16285
"Another useful link is the <ulink "
16286
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16287
"b5.conf man page</ulink>."
16288
msgstr ""
16289
16290
#: serverguide/C/network-auth.xml:3110(para)
16291
msgid ""
16292
"Also, see the <ulink "
16293
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16294
"and LDAP</ulink> Ubuntu wiki page."
16295
msgstr ""
16296
16297
#: serverguide/C/monitoring.xml:13(title)
16298
msgid "Monitoring"
16299
msgstr ""
16300
16301
#: serverguide/C/monitoring.xml:17(para)
16302
msgid ""
16303
"The monitoring of essential servers and services is an important part of "
16304
"system administration. Most network services are monitored for performance, "
16305
"availability, or both. This section will cover installation and "
16306
"configuration of <application>Nagios</application> for availability "
16307
"monitoring, and <application>Munin</application> for performance monitoring."
16308
msgstr ""
16309
16310
#: serverguide/C/monitoring.xml:24(para)
16311
msgid ""
16312
"The examples in this section will use two servers with hostnames "
16313
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16314
"<emphasis>Server01</emphasis> will be configured with "
16315
"<application>Nagios</application> to monitor services on itself and "
16316
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16317
"<application>munin</application> package to gather information from the "
16318
"network. Using the <application>munin-node</application> package, "
16319
"<emphasis>server02</emphasis> will be configured to send information to "
16320
"<emphasis>server01</emphasis>."
16321
msgstr ""
16322
16323
#: serverguide/C/monitoring.xml:33(para)
16324
msgid ""
16325
"Hopefully these simple examples will allow you to monitor additional servers "
16326
"and services on your network."
16327
msgstr ""
16328
16329
#: serverguide/C/monitoring.xml:39(title)
16330
msgid "Nagios"
16331
msgstr ""
16332
16333
#: serverguide/C/monitoring.xml:44(para)
16334
msgid ""
16335
"First, on <emphasis>server01</emphasis> install the "
16336
"<application>nagios</application> package. In a terminal enter:"
16337
msgstr ""
16338
16339
#: serverguide/C/monitoring.xml:50(command)
16340
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16341
msgstr ""
16342
16343
#: serverguide/C/monitoring.xml:53(para)
16344
msgid ""
16345
"You will be asked to enter a password for the "
16346
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16347
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16348
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16349
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16350
"of the <application>apache2-utils</application> package."
16351
msgstr ""
16352
16353
#: serverguide/C/monitoring.xml:60(para)
16354
msgid ""
16355
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16356
"user enter:"
16357
msgstr ""
16358
16359
#: serverguide/C/monitoring.xml:65(command)
16360
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16361
msgstr ""
16362
16363
#: serverguide/C/monitoring.xml:68(para)
16364
msgid "To add a user:"
16365
msgstr ""
16366
16367
#: serverguide/C/monitoring.xml:73(command)
16368
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16369
msgstr ""
16370
16371
#: serverguide/C/monitoring.xml:76(para)
16372
msgid ""
16373
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16374
"server</application> package. From a terminal on server02 enter:"
16375
msgstr ""
16376
16377
#: serverguide/C/monitoring.xml:82(command)
16378
msgid "sudo apt-get install nagios-nrpe-server"
16379
msgstr ""
16380
16381
#: serverguide/C/monitoring.xml:86(para)
16382
msgid ""
16383
"<application>NRPE</application> allows you to execute local checks on remote "
16384
"hosts. There are other ways of accomplishing this through other Nagios "
16385
"plugins as well as other checks."
16386
msgstr ""
16387
16388
#: serverguide/C/monitoring.xml:94(title)
16389
msgid "Configuration Overview"
16390
msgstr ""
16391
16392
#: serverguide/C/monitoring.xml:96(para)
16393
msgid ""
16394
"There are a couple of directories containing "
16395
"<application>Nagios</application> configuration and check files."
16396
msgstr ""
16397
16398
#: serverguide/C/monitoring.xml:102(para)
16399
msgid ""
16400
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16401
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16402
"etc."
16403
msgstr ""
16404
16405
#: serverguide/C/monitoring.xml:108(para)
16406
msgid ""
16407
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16408
"service checks."
16409
msgstr ""
16410
16411
#: serverguide/C/monitoring.xml:113(para)
16412
msgid ""
16413
"<filename>/etc/nagios</filename>: on the remote host contains the "
16414
"<application>nagios-nrpe-server</application> configuration files."
16415
msgstr ""
16416
16417
#: serverguide/C/monitoring.xml:118(para)
16418
msgid ""
16419
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16420
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16421
msgstr ""
16422
16423
#: serverguide/C/monitoring.xml:123(para)
16424
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16425
msgstr ""
16426
16427
#: serverguide/C/monitoring.xml:129(para)
16428
msgid ""
16429
"There are a plethora of checks <application>Nagios</application> can be "
16430
"configured to execute for any given host. For this example Nagios will be "
16431
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16432
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16433
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16434
msgstr ""
16435
16436
#: serverguide/C/monitoring.xml:136(para)
16437
msgid ""
16438
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16439
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16440
msgstr ""
16441
16442
#: serverguide/C/monitoring.xml:141(para)
16443
msgid ""
16444
"Additionally, there are some terms that once explained will hopefully make "
16445
"understanding Nagios configuration easier:"
16446
msgstr ""
16447
16448
#: serverguide/C/monitoring.xml:147(para)
16449
msgid ""
16450
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16451
"is being monitored."
16452
msgstr ""
16453
16454
#: serverguide/C/monitoring.xml:152(para)
16455
msgid ""
16456
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16457
"could group all web servers, file server, etc."
16458
msgstr ""
16459
16460
#: serverguide/C/monitoring.xml:157(para)
16461
msgid ""
16462
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16463
"as HTTP, DNS, NFS, etc."
16464
msgstr ""
16465
16466
#: serverguide/C/monitoring.xml:162(para)
16467
msgid ""
16468
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16469
"together. This is useful for grouping multiple HTTP for example."
16470
msgstr ""
16471
16472
#: serverguide/C/monitoring.xml:168(para)
16473
msgid ""
16474
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16475
"place. Nagios can be configured to send emails, SMS messages, etc."
16476
msgstr ""
16477
16478
#: serverguide/C/monitoring.xml:174(para)
16479
msgid ""
16480
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16481
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16482
"will also <application>ping</application> check the "
16483
"<emphasis>gateway</emphasis>."
16484
msgstr ""
16485
16486
#: serverguide/C/monitoring.xml:179(para)
16487
msgid ""
16488
"Large Nagios installations can be quite complex to configure. It is usually "
16489
"best to start small, one or two hosts, get things configured the way you "
16490
"like then expand."
16491
msgstr ""
16492
16493
#: serverguide/C/monitoring.xml:194(para)
16494
msgid ""
16495
"First, create a <emphasis>host</emphasis> configuration file for "
16496
"<emphasis>server02</emphasis>. In a terminal enter:"
16497
msgstr ""
16498
16499
#: serverguide/C/monitoring.xml:199(command)
16500
msgid ""
16501
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16502
"/etc/nagios3/conf.d/server02.cfg"
16503
msgstr ""
16504
16505
#: serverguide/C/monitoring.xml:203(para)
16506
msgid ""
16507
"In the above and following command examples, replace "
16508
"<emphasis>\"server01\"</emphasis>, "
16509
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16510
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16511
"your servers."
16512
msgstr ""
16513
16514
#: serverguide/C/monitoring.xml:212(para)
16515
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16516
msgstr ""
16517
16518
#: serverguide/C/monitoring.xml:216(programlisting)
16519
#, no-wrap
16520
msgid ""
16521
"\n"
16522
"define host{\n"
16523
" use generic-host ; Name of host "
16524
"template to use\n"
16525
" host_name server02\n"
16526
" alias Server 02\n"
16527
" address 172.18.100.101\n"
16528
"}\n"
16529
"\n"
16530
"# check DNS service.\n"
16531
"define service {\n"
16532
" use generic-service\n"
16533
" host_name server02\n"
16534
" service_description DNS\n"
16535
" check_command check_dns!172.18.100.101\n"
16536
"}\n"
16537
msgstr ""
16538
16539
#: serverguide/C/monitoring.xml:236(para)
16540
msgid ""
16541
"Restart the <application>nagios</application> daemon to enable the new "
16542
"configuration:"
16543
msgstr ""
16544
16545
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16546
msgid "sudo /etc/init.d/nagios3 restart"
16547
msgstr ""
16548
16549
#: serverguide/C/monitoring.xml:251(para)
16550
msgid ""
16551
"Now add a service definition for the MySQL check by adding the following to "
16552
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16553
msgstr ""
16554
16555
#: serverguide/C/monitoring.xml:255(programlisting)
16556
#, no-wrap
16557
msgid ""
16558
"\n"
16559
"# check MySQL servers.\n"
16560
"define service {\n"
16561
" hostgroup_name mysql-servers\n"
16562
" service_description MySQL\n"
16563
" check_command "
16564
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16565
" use generic-service\n"
16566
" notification_interval 0 ; set > 0 if you want to be "
16567
"renotified\n"
16568
"}\n"
16569
msgstr ""
16570
16571
#: serverguide/C/monitoring.xml:269(para)
16572
msgid ""
16573
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16574
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16575
msgstr ""
16576
16577
#: serverguide/C/monitoring.xml:274(programlisting)
16578
#, no-wrap
16579
msgid ""
16580
"\n"
16581
"# MySQL hostgroup.\n"
16582
"define hostgroup {\n"
16583
" hostgroup_name mysql-servers\n"
16584
" alias MySQL servers\n"
16585
" members localhost, server02\n"
16586
" }\n"
16587
msgstr ""
16588
16589
#: serverguide/C/monitoring.xml:286(para)
16590
msgid ""
16591
"The Nagios check needs to authenticate to MySQL. To add a "
16592
"<emphasis>nagios</emphasis> user to MySQL enter:"
16593
msgstr ""
16594
16595
#: serverguide/C/monitoring.xml:291(command)
16596
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16597
msgstr ""
16598
16599
#: serverguide/C/monitoring.xml:295(para)
16600
msgid ""
16601
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16602
"<emphasis>mysql-servers</emphasis> hostgroup."
16603
msgstr ""
16604
16605
#: serverguide/C/monitoring.xml:303(para)
16606
msgid ""
16607
"Restart <application>nagios</application> to start checking the MySQL "
16608
"servers."
16609
msgstr ""
16610
16611
#: serverguide/C/monitoring.xml:318(para)
16612
msgid ""
16613
"Lastly configure NRPE to check the disk space on "
16614
"<emphasis>server02</emphasis>."
16615
msgstr ""
16616
16617
#: serverguide/C/monitoring.xml:322(para)
16618
msgid ""
16619
"On <emphasis>server01</emphasis> add the service check to "
16620
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16621
msgstr ""
16622
16623
#: serverguide/C/monitoring.xml:327(programlisting)
16624
#, no-wrap
16625
msgid ""
16626
"\n"
16627
"# NRPE disk check.\n"
16628
"define service {\n"
16629
" use generic-service\n"
16630
" host_name server02\n"
16631
" service_description nrpe-disk\n"
16632
" check_command "
16633
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16634
"}\n"
16635
msgstr ""
16636
16637
#: serverguide/C/monitoring.xml:340(para)
16638
msgid ""
16639
"Now on <emphasis>server02</emphasis> edit "
16640
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16641
msgstr ""
16642
16643
#: serverguide/C/monitoring.xml:344(programlisting)
16644
#, no-wrap
16645
msgid ""
16646
"\n"
16647
"allowed_hosts=172.18.100.100\n"
16648
msgstr ""
16649
16650
#: serverguide/C/monitoring.xml:348(para)
16651
msgid "And below in the command definition area add:"
16652
msgstr ""
16653
16654
#: serverguide/C/monitoring.xml:352(programlisting)
16655
#, no-wrap
16656
msgid ""
16657
"\n"
16658
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16659
"e\n"
16660
msgstr ""
16661
16662
#: serverguide/C/monitoring.xml:359(para)
16663
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16664
msgstr ""
16665
16666
#: serverguide/C/monitoring.xml:364(command)
16667
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16668
msgstr ""
16669
16670
#: serverguide/C/monitoring.xml:370(para)
16671
msgid ""
16672
"Also, on <emphasis>server01</emphasis> restart "
16673
"<application>nagios</application>:"
16674
msgstr ""
16675
16676
#: serverguide/C/monitoring.xml:383(para)
16677
msgid ""
16678
"You should now be able to see the host and service checks in the Nagios CGI "
16679
"files. To access them point a browser to http://server01/nagios3. You will "
16680
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
16681
"password."
16682
msgstr ""
16683
16684
#: serverguide/C/monitoring.xml:393(para)
16685
msgid ""
16686
"This section has just scratched the surface of Nagios' features. The "
16687
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
16688
"plugins</application> contain many more service checks."
16689
msgstr ""
16690
16691
#: serverguide/C/monitoring.xml:400(para)
16692
msgid ""
16693
"For more information see <ulink "
16694
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
16695
msgstr ""
16696
16697
#: serverguide/C/monitoring.xml:405(para)
16698
msgid ""
16699
"Specifically the <ulink "
16700
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
16701
"site."
16702
msgstr ""
16703
16704
#: serverguide/C/monitoring.xml:410(para)
16705
msgid ""
16706
"There is also a list of <ulink "
16707
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
16708
"Nagios and network monitoring:"
16709
msgstr ""
16710
16711
#: serverguide/C/monitoring.xml:416(para)
16712
msgid ""
16713
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
16714
"Wiki</ulink> page also has more details."
16715
msgstr ""
16716
16717
#: serverguide/C/monitoring.xml:425(title)
16718
msgid "Munin"
16719
msgstr ""
16720
16721
#: serverguide/C/monitoring.xml:430(para)
16722
msgid ""
16723
"Before installing <application>Munin</application> on "
16724
"<emphasis>server01</emphasis><application>apache2</application> will need to "
16725
"be installed. The default configuration is fine for running a "
16726
"<application>munin</application> server. For more information see <xref "
16727
"linkend=\"httpd\"/>."
16728
msgstr ""
16729
16730
#: serverguide/C/monitoring.xml:436(para)
16731
msgid ""
16732
"First, on <emphasis>server01</emphasis> install "
16733
"<application>munin</application>. In a terminal enter:"
16734
msgstr ""
16735
16736
#: serverguide/C/monitoring.xml:441(command)
16737
msgid "sudo apt-get install munin"
16738
msgstr ""
16739
16740
#: serverguide/C/monitoring.xml:444(para)
16741
msgid ""
16742
"Now on <emphasis>server02</emphasis> install the <application>munin-"
16743
"node</application> package:"
16744
msgstr ""
16745
16746
#: serverguide/C/monitoring.xml:449(command)
16747
msgid "sudo apt-get install munin-node"
16748
msgstr ""
16749
16750
#: serverguide/C/monitoring.xml:456(para)
16751
msgid ""
16752
"On <emphasis>server01</emphasis> edit the "
16753
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
16754
"<emphasis>server02</emphasis>:"
16755
msgstr ""
16756
16757
#: serverguide/C/monitoring.xml:461(programlisting)
16758
#, no-wrap
16759
msgid ""
16760
"\n"
16761
"## First our \"normal\" host.\n"
16762
"[server02]\n"
16763
" address 172.18.100.101\n"
16764
msgstr ""
16765
16766
#: serverguide/C/monitoring.xml:468(para)
16767
msgid ""
16768
"Replace <emphasis>server02</emphasis> and "
16769
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
16770
"for your server."
16771
msgstr ""
16772
16773
#: serverguide/C/monitoring.xml:474(para)
16774
msgid ""
16775
"Next, configure <application>munin-node</application> on "
16776
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
16777
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
16778
msgstr ""
16779
16780
#: serverguide/C/monitoring.xml:479(programlisting)
16781
#, no-wrap
16782
msgid ""
16783
"\n"
16784
"allow ^172\\.18\\.100\\.100$\n"
16785
msgstr ""
16786
16787
#: serverguide/C/monitoring.xml:484(para)
16788
msgid ""
16789
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
16790
"<application>munin</application> server."
16791
msgstr ""
16792
16793
#: serverguide/C/monitoring.xml:489(para)
16794
msgid ""
16795
"Now restart <application>munin-node</application> on "
16796
"<emphasis>server02</emphasis> for the changes to take effect:"
16797
msgstr ""
16798
16799
#: serverguide/C/monitoring.xml:494(command)
16800
msgid "sudo /etc/init.d/munin-node restart"
16801
msgstr ""
16802
16803
#: serverguide/C/monitoring.xml:497(para)
16804
msgid ""
16805
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
16806
"you should see links to nice graphs displaying information from the standard "
16807
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
16808
msgstr ""
16809
16810
#: serverguide/C/monitoring.xml:503(para)
16811
msgid ""
16812
"Since this is a new install it may take some time for the graphs to display "
16813
"anything useful."
16814
msgstr ""
16815
16816
#: serverguide/C/monitoring.xml:510(title)
16817
msgid "Additional Plugins"
16818
msgstr ""
16819
16820
#: serverguide/C/monitoring.xml:512(para)
16821
msgid ""
16822
"The <application>munin-plugins-extra</application> package contains "
16823
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
16824
"install the package, from a terminal enter:"
16825
msgstr ""
16826
16827
#: serverguide/C/monitoring.xml:518(command)
16828
msgid "sudo apt-get install munin-plugins-extra"
16829
msgstr ""
16830
16831
#: serverguide/C/monitoring.xml:521(para)
16832
msgid "Be sure to install the package on both the server and node machines."
16833
msgstr ""
16834
16835
#: serverguide/C/monitoring.xml:531(para)
16836
msgid ""
16837
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
16838
"website for more details."
16839
msgstr ""
16840
16841
#: serverguide/C/monitoring.xml:536(para)
16842
msgid ""
16843
"Specifically the <ulink "
16844
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
16845
"Documentation</ulink> page includes information on additional plugins, "
16846
"writing plugins, etc."
16847
msgstr ""
16848
16849
#: serverguide/C/monitoring.xml:542(para)
16850
msgid ""
16851
"Also, there is a book in German by Open Source Press: <ulink "
16852
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
16853
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
16854
msgstr ""
16855
16856
#: serverguide/C/monitoring.xml:548(para)
16857
msgid ""
16858
"Another resource is the <ulink "
16859
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
16860
"page."
16861
msgstr ""
16862
16863
#: serverguide/C/mail.xml:13(title)
16864
msgid "Email Services"
16865
msgstr ""
16866
16867
#: serverguide/C/mail.xml:14(para)
16868
msgid ""
16869
"The process of getting an email from one person to another over a network or "
16870
"the Internet involves many systems working together. Each of these systems "
16871
"must be correctly configured for the process to work. The sender uses a "
16872
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
16873
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
16874
"the last of which will hand it off to a <emphasis>Mail Delivery "
16875
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
16876
"it will be retrieved by the recipient's email client, usually via a POP3 or "
16877
"IMAP server."
16878
msgstr ""
16879
16880
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
16881
msgid "Postfix"
16882
msgstr ""
16883
16884
#: serverguide/C/mail.xml:25(para)
16885
msgid ""
16886
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
16887
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
16888
"compatible with the MTA <application>sendmail</application>. This section "
16889
"explains how to install and configure <application>postfix</application>. It "
16890
"also explains how to set it up as an SMTP server using a secure connection "
16891
"(for sending emails securely)."
16892
msgstr ""
16893
16894
#: serverguide/C/mail.xml:34(para)
16895
msgid ""
16896
"This guide does not cover setting up Postfix <emphasis>Virtual "
16897
"Domains</emphasis>, for information on Virtual Domains and other advanced "
16898
"configurations see <xref linkend=\"postfix-references\"/>."
16899
msgstr ""
16900
16901
#: serverguide/C/mail.xml:41(para)
16902
msgid ""
16903
"To install <application>postfix</application> run the following command:"
16904
msgstr ""
16905
16906
#: serverguide/C/mail.xml:47(para)
16907
msgid ""
16908
"Simply press return when the installation process asks questions, the "
16909
"configuration will be done in greater detail in the next stage."
16910
msgstr ""
16911
16912
#: serverguide/C/mail.xml:52(title)
16913
msgid "Basic Configuration"
16914
msgstr ""
16915
16916
#: serverguide/C/mail.xml:53(para)
16917
msgid ""
16918
"To configure <application>postfix</application>, run the following command:"
16919
msgstr ""
16920
16921
#: serverguide/C/mail.xml:57(command)
16922
msgid "sudo dpkg-reconfigure postfix"
16923
msgstr ""
16924
16925
#: serverguide/C/mail.xml:63(para)
16926
msgid "Internet Site"
16927
msgstr ""
16928
16929
#: serverguide/C/mail.xml:64(para)
16930
msgid "mail.example.com"
16931
msgstr ""
16932
16933
#: serverguide/C/mail.xml:65(para)
16934
msgid "steve"
16935
msgstr ""
16936
16937
#: serverguide/C/mail.xml:66(para)
16938
msgid "mail.example.com, localhost.localdomain, localhost"
16939
msgstr ""
16940
16941
#: serverguide/C/mail.xml:67(para)
16942
msgid "No"
16943
msgstr ""
16944
16945
#: serverguide/C/mail.xml:68(para)
16946
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
16947
msgstr ""
16948
16949
#: serverguide/C/mail.xml:69(para)
16950
msgid "0"
16951
msgstr ""
16952
16953
#: serverguide/C/mail.xml:70(para)
16954
msgid "+"
16955
msgstr ""
16956
16957
#: serverguide/C/mail.xml:71(para)
16958
msgid "all"
16959
msgstr ""
16960
16961
#: serverguide/C/mail.xml:59(para)
16962
msgid ""
16963
"The user interface will be displayed. On each screen, select the following "
16964
"values: <placeholder-1/>"
16965
msgstr ""
16966
16967
#: serverguide/C/mail.xml:75(para)
16968
msgid ""
16969
"Replace mail.example.com with the domain for which you'll accept email, "
16970
"192.168.0.0/24 with the actual network and class range of your mail server, "
16971
"and steve with the appropriate username."
16972
msgstr ""
16973
16974
#: serverguide/C/mail.xml:81(para)
16975
msgid ""
16976
"Now is a good time to decide which mailbox format you want to use. By "
16977
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
16978
"mailbox format. Rather than editing the configuration file directly, you can "
16979
"use the <command>postconf</command> command to configure all "
16980
"<application>postfix</application> parameters. The configuration parameters "
16981
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
16982
"you wish to re-configure a particular parameter, you can either run the "
16983
"command or change it manually in the file."
16984
msgstr ""
16985
16986
#: serverguide/C/mail.xml:92(para)
16987
msgid ""
16988
"To configure the mailbox format for <emphasis "
16989
"role=\"strong\">Maildir:</emphasis>"
16990
msgstr ""
16991
16992
#: serverguide/C/mail.xml:97(command)
16993
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
16994
msgstr ""
16995
16996
#: serverguide/C/mail.xml:100(para)
16997
msgid ""
16998
"This will place new mail in /home/<emphasis "
16999
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
17000
"your Mail Delivery Agent (MDA) to use the same path."
17001
msgstr ""
17002
17003
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17004
msgid "SMTP Authentication"
17005
msgstr ""
17006
17007
#: serverguide/C/mail.xml:110(para)
17008
msgid ""
17009
"SMTP-AUTH allows a client to identify itself through an authentication "
17010
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17011
"the authentication process. Once authenticated the SMTP server will allow "
17012
"the client to relay mail."
17013
msgstr ""
17014
17015
#: serverguide/C/mail.xml:117(para)
17016
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17017
msgstr ""
17018
17019
#: serverguide/C/mail.xml:120(screen)
17020
#, no-wrap
17021
msgid ""
17022
"\n"
17023
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17024
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17025
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17026
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17027
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17028
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17029
"sudo postconf -e 'smtpd_recipient_restrictions = "
17030
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17031
"sudo postconf -e 'inet_interfaces = all'\n"
17032
msgstr ""
17033
17034
#: serverguide/C/mail.xml:131(para)
17035
msgid ""
17036
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17037
"the Postfix queue directory."
17038
msgstr ""
17039
17040
#: serverguide/C/mail.xml:137(para)
17041
msgid ""
17042
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17043
"and-security\"/> for details. This example also uses a Certificate Authority "
17044
"(CA). For information on generating a CA certificate see <xref "
17045
"linkend=\"certificate-authority\"/>."
17046
msgstr ""
17047
17048
#: serverguide/C/mail.xml:143(para)
17049
msgid ""
17050
"You can get the digital certificate from a certificate authority. But unlike "
17051
"web clients, SMTP clients rarely complain about \"self-signed "
17052
"certificates\", so alternatively, you can create the certificate yourself. "
17053
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17054
"details."
17055
msgstr ""
17056
17057
#: serverguide/C/mail.xml:155(para)
17058
msgid ""
17059
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17060
"both incoming and outgoing mail:"
17061
msgstr ""
17062
17063
#: serverguide/C/mail.xml:158(screen)
17064
#, no-wrap
17065
msgid ""
17066
"\n"
17067
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17068
"sudo postconf -e 'smtp_use_tls = yes'\n"
17069
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17070
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17071
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17072
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17073
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17074
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17075
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17076
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17077
"sudo postconf -e 'myhostname = mail.example.com'\n"
17078
msgstr ""
17079
17080
#: serverguide/C/mail.xml:173(para)
17081
msgid ""
17082
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17083
"the certificate enter:"
17084
msgstr ""
17085
17086
#: serverguide/C/mail.xml:177(command)
17087
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17088
msgstr ""
17089
17090
#: serverguide/C/mail.xml:180(para)
17091
msgid ""
17092
"Again, for more details about certificates see <xref linkend=\"certificates-"
17093
"and-security\"/>."
17094
msgstr ""
17095
17096
#: serverguide/C/mail.xml:186(para)
17097
msgid ""
17098
"After running all the commands, <application>Postfix</application> is "
17099
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17100
"TLS encryption."
17101
msgstr ""
17102
17103
#: serverguide/C/mail.xml:191(para)
17104
msgid ""
17105
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17106
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17107
msgstr ""
17108
17109
#: serverguide/C/mail.xml:195(para)
17110
msgid ""
17111
"The postfix initial configuration is complete. Run the following command to "
17112
"restart the postfix daemon:"
17113
msgstr ""
17114
17115
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17116
msgid "sudo /etc/init.d/postfix restart"
17117
msgstr ""
17118
17119
#: serverguide/C/mail.xml:204(para)
17120
msgid ""
17121
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17122
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17123
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17124
"However it is still necessary to set up SASL authentication before you can "
17125
"use SMTP-AUTH."
17126
msgstr ""
17127
17128
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17129
msgid "Configuring SASL"
17130
msgstr ""
17131
17132
#: serverguide/C/mail.xml:215(para)
17133
msgid ""
17134
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17135
"enable Dovecot SASL the <application>dovecot-common</application> package "
17136
"will need to be installed. From a terminal prompt enter the following:"
17137
msgstr ""
17138
17139
#: serverguide/C/mail.xml:221(command)
17140
msgid "sudo apt-get install dovecot-common"
17141
msgstr ""
17142
17143
#: serverguide/C/mail.xml:223(para)
17144
msgid ""
17145
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17146
"In the <emphasis>auth default</emphasis> section uncomment the "
17147
"<emphasis>socket listen</emphasis> option and change the following:"
17148
msgstr ""
17149
17150
#: serverguide/C/mail.xml:227(programlisting)
17151
#, no-wrap
17152
msgid ""
17153
"\n"
17154
" socket listen {\n"
17155
" #master {\n"
17156
" # Master socket provides access to userdb information. It's typically\n"
17157
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17158
" # can find mailbox locations.\n"
17159
" #path = /var/run/dovecot/auth-master\n"
17160
" #mode = 0600\n"
17161
" # Default user/group is the one who started dovecot-auth (root)\n"
17162
" #user = \n"
17163
" #group = \n"
17164
" #}\n"
17165
" client {\n"
17166
" # The client socket is generally safe to export to everyone. Typical "
17167
"use\n"
17168
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17169
" # using it.\n"
17170
" path = /var/spool/postfix/private/auth-client\n"
17171
" mode = 0660\n"
17172
" user = postfix\n"
17173
" group = postfix\n"
17174
" }\n"
17175
" }\n"
17176
msgstr ""
17177
17178
#: serverguide/C/mail.xml:251(para)
17179
msgid ""
17180
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17181
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17182
"add <emphasis>\"login\"</emphasis>:"
17183
msgstr ""
17184
17185
#: serverguide/C/mail.xml:256(programlisting)
17186
#, no-wrap
17187
msgid ""
17188
"\n"
17189
" mechanisms = plain login\n"
17190
msgstr ""
17191
17192
#: serverguide/C/mail.xml:260(para)
17193
msgid ""
17194
"Once you have <application>Dovecot</application> configured restart it with:"
17195
msgstr ""
17196
17197
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17198
msgid "sudo /etc/init.d/dovecot restart"
17199
msgstr ""
17200
17201
#: serverguide/C/mail.xml:269(title)
17202
msgid "Postfix-Dovecot"
17203
msgstr ""
17204
17205
#: serverguide/C/mail.xml:271(para)
17206
msgid ""
17207
"Another option for configuring <application>Postfix</application> for SMTP-"
17208
"AUTH is using the <application>dovecot-postfix</application> package. This "
17209
"package will install <application>Dovecot</application> and configure "
17210
"<application>Postfix</application> to use it for both SASL authentication "
17211
"and as a Mail Delivery Agent (MDA). The package also configures "
17212
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17213
msgstr ""
17214
17215
#: serverguide/C/mail.xml:280(para)
17216
msgid ""
17217
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17218
"server. For example, if you are configuring your server to be a mail "
17219
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17220
"the above commands to configure Postfix for SMTPAUTH."
17221
msgstr ""
17222
17223
#: serverguide/C/mail.xml:287(para)
17224
msgid "To install the package, from a terminal prompt enter:"
17225
msgstr ""
17226
17227
#: serverguide/C/mail.xml:292(command)
17228
msgid "sudo apt-get install dovecot-postfix"
17229
msgstr ""
17230
17231
#: serverguide/C/mail.xml:295(para)
17232
msgid ""
17233
"You should now have a working mail server, but there are a few options that "
17234
"you may wish to further customize. For example, the package uses the "
17235
"certificate and key from the <application>ssl-cert</application> package, "
17236
"and in a production environment you should use a certificate and key "
17237
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17238
"for more details."
17239
msgstr ""
17240
17241
#: serverguide/C/mail.xml:301(para)
17242
msgid ""
17243
"Once you have a customized certificate and key for the host, change the "
17244
"following options in <filename>/etc/postfix/main.cf</filename>:"
17245
msgstr ""
17246
17247
#: serverguide/C/mail.xml:305(programlisting)
17248
#, no-wrap
17249
msgid ""
17250
"\n"
17251
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17252
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17253
msgstr ""
17254
17255
#: serverguide/C/mail.xml:310(para)
17256
msgid "Then restart Postfix:"
17257
msgstr ""
17258
17259
#: serverguide/C/mail.xml:321(para)
17260
msgid ""
17261
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17262
msgstr ""
17263
17264
#: serverguide/C/mail.xml:324(para)
17265
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17266
msgstr ""
17267
17268
#: serverguide/C/mail.xml:329(command)
17269
msgid "telnet mail.example.com 25"
17270
msgstr ""
17271
17272
#: serverguide/C/mail.xml:331(para)
17273
msgid ""
17274
"After you have established the connection to the postfix mail server, type:"
17275
msgstr ""
17276
17277
#: serverguide/C/mail.xml:335(screen)
17278
#, no-wrap
17279
msgid ""
17280
"\n"
17281
"ehlo mail.example.com\n"
17282
msgstr ""
17283
17284
#: serverguide/C/mail.xml:338(para)
17285
msgid ""
17286
"If you see the following lines among others, then everything is working "
17287
"perfectly. Type <command>quit</command> to exit."
17288
msgstr ""
17289
17290
#: serverguide/C/mail.xml:342(programlisting)
17291
#, no-wrap
17292
msgid ""
17293
"\n"
17294
"250-STARTTLS\n"
17295
"250-AUTH LOGIN PLAIN\n"
17296
"250-AUTH=LOGIN PLAIN\n"
17297
"250 8BITMIME\n"
17298
msgstr ""
17299
17300
#: serverguide/C/mail.xml:352(para)
17301
msgid ""
17302
"This section introduces some common ways to determine the cause if problems "
17303
"arise."
17304
msgstr ""
17305
17306
#: serverguide/C/mail.xml:356(title)
17307
msgid "Escaping chroot"
17308
msgstr ""
17309
17310
#: serverguide/C/mail.xml:357(para)
17311
msgid ""
17312
"The Ubuntu <application>postfix</application> package will by default "
17313
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17314
"This can add greater complexity when troubleshooting problems."
17315
msgstr ""
17316
17317
#: serverguide/C/mail.xml:361(para)
17318
msgid ""
17319
"To turn off the chroot operation locate for the following line in the "
17320
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17321
msgstr ""
17322
17323
#: serverguide/C/mail.xml:365(screen)
17324
#, no-wrap
17325
msgid ""
17326
"\n"
17327
"smtp inet n - - - - smtpd\n"
17328
msgstr ""
17329
17330
#: serverguide/C/mail.xml:368(para)
17331
msgid "and modify it as follows:"
17332
msgstr ""
17333
17334
#: serverguide/C/mail.xml:371(screen)
17335
#, no-wrap
17336
msgid ""
17337
"\n"
17338
"smtp inet n - n - - smtpd\n"
17339
msgstr ""
17340
17341
#: serverguide/C/mail.xml:374(para)
17342
msgid ""
17343
"You will then need to restart Postfix to use the new configuration. From a "
17344
"terminal prompt enter:"
17345
msgstr ""
17346
17347
#: serverguide/C/mail.xml:382(title)
17348
msgid "Log Files"
17349
msgstr ""
17350
17351
#: serverguide/C/mail.xml:383(para)
17352
msgid ""
17353
"<application>Postfix</application> sends all log messages to "
17354
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17355
"can sometimes get lost in the normal log output so they are also logged to "
17356
"<filename>/var/log/mail.err</filename> and "
17357
"<filename>/var/log/mail.warn</filename> respectively."
17358
msgstr ""
17359
17360
#: serverguide/C/mail.xml:388(para)
17361
msgid ""
17362
"To see messages entered into the logs in real time you can use the "
17363
"<application>tail -f</application> command:"
17364
msgstr ""
17365
17366
#: serverguide/C/mail.xml:393(command)
17367
msgid "tail -f /var/log/mail.err"
17368
msgstr ""
17369
17370
#: serverguide/C/mail.xml:395(para)
17371
msgid ""
17372
"The amount of detail that is recorded in the logs can be increased. Below "
17373
"are some configuration options for increasing the log level for some of the "
17374
"areas covered above."
17375
msgstr ""
17376
17377
#: serverguide/C/mail.xml:401(para)
17378
msgid ""
17379
"To increase <emphasis>TLS</emphasis> activity logging set the "
17380
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17381
msgstr ""
17382
17383
#: serverguide/C/mail.xml:405(command)
17384
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17385
msgstr ""
17386
17387
#: serverguide/C/mail.xml:409(para)
17388
msgid ""
17389
"If you are having trouble sending or receiving mail from a specific domain "
17390
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17391
msgstr ""
17392
17393
#: serverguide/C/mail.xml:414(command)
17394
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17395
msgstr ""
17396
17397
#: serverguide/C/mail.xml:418(para)
17398
msgid ""
17399
"You can increase the verbosity of any <application>Postfix</application> "
17400
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17401
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17402
"<emphasis>smtp</emphasis> entry:"
17403
msgstr ""
17404
17405
#: serverguide/C/mail.xml:422(programlisting)
17406
#, no-wrap
17407
msgid ""
17408
"\n"
17409
"smtp unix - - - - - smtp -v\n"
17410
msgstr ""
17411
17412
#: serverguide/C/mail.xml:428(para)
17413
msgid ""
17414
"It is important to note that after making one of the logging changes above "
17415
"the <application>Postfix</application> process will need to be reloaded in "
17416
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17417
"reload</command>"
17418
msgstr ""
17419
17420
#: serverguide/C/mail.xml:435(para)
17421
msgid ""
17422
"To increase the amount of information logged when troubleshooting "
17423
"<emphasis>SASL</emphasis> issues you can set the following options in "
17424
"<filename>/etc/dovecot/dovecot.conf</filename>"
17425
msgstr ""
17426
17427
#: serverguide/C/mail.xml:439(programlisting)
17428
#, no-wrap
17429
msgid ""
17430
"\n"
17431
"auth_debug=yes\n"
17432
"auth_debug_passwords=yes\n"
17433
msgstr ""
17434
17435
#: serverguide/C/mail.xml:446(para)
17436
msgid ""
17437
"Just like <application>Postfix</application> if you change a "
17438
"<application>Dovecot</application> configuration the process will need to be "
17439
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17440
msgstr ""
17441
17442
#: serverguide/C/mail.xml:452(para)
17443
msgid ""
17444
"Some of the options above can drastically increase the amount of information "
17445
"sent to the log files. Remember to return the log level back to normal after "
17446
"you have corrected the problem. Then reload the appropriate daemon for the "
17447
"new configuration to take affect."
17448
msgstr ""
17449
17450
#: serverguide/C/mail.xml:460(para)
17451
msgid ""
17452
"Administering a <application>Postfix</application> server can be a very "
17453
"complicated task. At some point you may need to turn to the Ubuntu community "
17454
"for more experienced help."
17455
msgstr ""
17456
17457
#: serverguide/C/mail.xml:464(para)
17458
msgid ""
17459
"A great place to ask for <application>Postfix</application> assistance, and "
17460
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17461
"server</emphasis> IRC channel on <ulink "
17462
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17463
"one of the <ulink "
17464
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17465
msgstr ""
17466
17467
#: serverguide/C/mail.xml:469(para)
17468
msgid ""
17469
"For in depth <application>Postfix</application> information Ubuntu "
17470
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17471
"Book of Postfix</ulink>."
17472
msgstr ""
17473
17474
#: serverguide/C/mail.xml:473(para)
17475
msgid ""
17476
"Finally, the <ulink "
17477
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17478
"also has great documentation on all the different configuration options "
17479
"available."
17480
msgstr ""
17481
17482
#: serverguide/C/mail.xml:477(para)
17483
msgid ""
17484
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17485
"Wiki Postifx</ulink> page has more information."
17486
msgstr ""
17487
17488
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17489
msgid "Exim4"
17490
msgstr ""
17491
17492
#: serverguide/C/mail.xml:486(para)
17493
msgid ""
17494
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17495
"developed at the University of Cambridge for use on Unix systems connected "
17496
"to the Internet. Exim can be installed in place of "
17497
"<application>sendmail</application>, although the configuration of "
17498
"<application>exim</application> is quite different to that of "
17499
"<application>sendmail</application>."
17500
msgstr ""
17501
17502
#: serverguide/C/mail.xml:497(para)
17503
msgid ""
17504
"To install <application>exim4</application>, run the following command: "
17505
"<screen>\n"
17506
"<command>sudo apt-get install exim4</command>\n"
17507
"</screen>"
17508
msgstr ""
17509
17510
#: serverguide/C/mail.xml:506(para)
17511
msgid ""
17512
"To configure <application>Exim4</application>, run the following command:"
17513
msgstr ""
17514
17515
#: serverguide/C/mail.xml:510(command)
17516
msgid "sudo dpkg-reconfigure exim4-config"
17517
msgstr ""
17518
17519
#: serverguide/C/mail.xml:512(para)
17520
msgid ""
17521
"The user interface will be displayed. The user interface lets you configure "
17522
"many parameters. For example, In <application>Exim4</application> the "
17523
"configuration files are split among multiple files. If you wish to have them "
17524
"in one file you can configure accordingly in this user interface."
17525
msgstr ""
17526
17527
#: serverguide/C/mail.xml:520(para)
17528
msgid ""
17529
"All the parameters you configure in the user interface are stored in "
17530
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17531
"re-configure, either you re-run the configuration wizard or manually edit "
17532
"this file using your favorite editor. Once you configure, you can run the "
17533
"following command to generate the master configuration file:"
17534
msgstr ""
17535
17536
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17537
msgid "sudo update-exim4.conf"
17538
msgstr ""
17539
17540
#: serverguide/C/mail.xml:533(para)
17541
msgid ""
17542
"The master configuration file, is generated and it is stored in "
17543
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17544
msgstr ""
17545
17546
#: serverguide/C/mail.xml:539(para)
17547
msgid ""
17548
"At any time, you should not edit the master configuration file, "
17549
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17550
"updated automatically every time you run <command>update-exim4.conf</command>"
17551
msgstr ""
17552
17553
#: serverguide/C/mail.xml:547(para)
17554
msgid ""
17555
"You can run the following command to start <application>Exim4</application> "
17556
"daemon."
17557
msgstr ""
17558
17559
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17560
msgid "sudo /etc/init.d/exim4 start"
17561
msgstr ""
17562
17563
#: serverguide/C/mail.xml:557(para)
17564
msgid ""
17565
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17566
msgstr ""
17567
17568
#: serverguide/C/mail.xml:560(para)
17569
msgid ""
17570
"The first step is to create a certificate for use with TLS. Enter the "
17571
"following into a terminal prompt:"
17572
msgstr ""
17573
17574
#: serverguide/C/mail.xml:564(command)
17575
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17576
msgstr ""
17577
17578
#: serverguide/C/mail.xml:566(para)
17579
msgid ""
17580
"Now Exim4 needs to be configured for TLS by editing "
17581
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17582
"the following:"
17583
msgstr ""
17584
17585
#: serverguide/C/mail.xml:570(programlisting)
17586
#, no-wrap
17587
msgid ""
17588
"\n"
17589
"MAIN_TLS_ENABLE = yes\n"
17590
msgstr ""
17591
17592
#: serverguide/C/mail.xml:573(para)
17593
msgid ""
17594
"Next you need to configure <application>Exim4</application> to use the "
17595
"<application>saslauthd</application> for authentication. Edit "
17596
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17597
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17598
"<emphasis>login_saslauthd_server</emphasis> sections:"
17599
msgstr ""
17600
17601
#: serverguide/C/mail.xml:578(programlisting)
17602
#, no-wrap
17603
msgid ""
17604
"\n"
17605
" plain_saslauthd_server:\n"
17606
" driver = plaintext\n"
17607
" public_name = PLAIN\n"
17608
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17609
" server_set_id = $auth2\n"
17610
" server_prompts = :\n"
17611
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17612
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17613
" .endif\n"
17614
"#\n"
17615
" login_saslauthd_server:\n"
17616
" driver = plaintext\n"
17617
" public_name = LOGIN\n"
17618
" server_prompts = \"Username:: : Password::\"\n"
17619
" # don't send system passwords over unencrypted connections\n"
17620
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
17621
" server_set_id = $auth1\n"
17622
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17623
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17624
" .endif\n"
17625
msgstr ""
17626
17627
#: serverguide/C/mail.xml:600(para)
17628
msgid "Finally, update the Exim4 configuration and restart the service:"
17629
msgstr ""
17630
17631
#: serverguide/C/mail.xml:605(command)
17632
msgid "sudo /etc/init.d/exim4 restart"
17633
msgstr ""
17634
17635
#: serverguide/C/mail.xml:610(para)
17636
msgid ""
17637
"This section provides details on configuring the saslauthd to provide "
17638
"authentication for <application>Exim4</application>."
17639
msgstr ""
17640
17641
#: serverguide/C/mail.xml:613(para)
17642
msgid ""
17643
"The first step is to install the sasl2-bin package. From a terminal prompt "
17644
"enter the following:"
17645
msgstr ""
17646
17647
#: serverguide/C/mail.xml:617(command)
17648
msgid "sudo apt-get install sasl2-bin"
17649
msgstr ""
17650
17651
#: serverguide/C/mail.xml:619(para)
17652
msgid ""
17653
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
17654
"and set START=no to:"
17655
msgstr ""
17656
17657
#: serverguide/C/mail.xml:622(programlisting)
17658
#, no-wrap
17659
msgid ""
17660
"\n"
17661
"START=yes\n"
17662
msgstr ""
17663
17664
#: serverguide/C/mail.xml:625(para)
17665
msgid ""
17666
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
17667
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
17668
"service:"
17669
msgstr ""
17670
17671
#: serverguide/C/mail.xml:630(command)
17672
msgid "sudo adduser Debian-exim sasl"
17673
msgstr ""
17674
17675
#: serverguide/C/mail.xml:632(para)
17676
msgid "Now start the <application>saslauthd</application> service:"
17677
msgstr ""
17678
17679
#: serverguide/C/mail.xml:636(command)
17680
msgid "sudo /etc/init.d/saslauthd start"
17681
msgstr ""
17682
17683
#: serverguide/C/mail.xml:638(para)
17684
msgid ""
17685
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
17686
"and SASL authentication."
17687
msgstr ""
17688
17689
#: serverguide/C/mail.xml:647(para)
17690
msgid ""
17691
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
17692
"information."
17693
msgstr ""
17694
17695
#: serverguide/C/mail.xml:652(para)
17696
msgid ""
17697
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
17698
"server\">Exim4 Book</ulink> available."
17699
msgstr ""
17700
17701
#: serverguide/C/mail.xml:657(para)
17702
msgid ""
17703
"Another resource is the <ulink "
17704
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
17705
"page."
17706
msgstr ""
17707
17708
#: serverguide/C/mail.xml:666(title)
17709
msgid "Dovecot Server"
17710
msgstr ""
17711
17712
#: serverguide/C/mail.xml:667(para)
17713
msgid ""
17714
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
17715
"security primarily in mind. It supports the major mailbox formats: mbox or "
17716
"Maildir. This section explain how to set it up as an imap or pop3 server."
17717
msgstr ""
17718
17719
#: serverguide/C/mail.xml:675(para)
17720
msgid ""
17721
"To install <application>dovecot</application>, run the following command in "
17722
"the command prompt:"
17723
msgstr ""
17724
17725
#: serverguide/C/mail.xml:680(command)
17726
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
17727
msgstr ""
17728
17729
#: serverguide/C/mail.xml:685(para)
17730
msgid ""
17731
"To configure <application>dovecot</application>, you can edit the file "
17732
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
17733
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
17734
"secure). A description of these protocols is beyond the scope of this guide. "
17735
"For further information, refer to the Wikipedia articles on <ulink "
17736
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
17737
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
17738
"link>."
17739
msgstr ""
17740
17741
#: serverguide/C/mail.xml:695(para)
17742
msgid ""
17743
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
17744
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
17745
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
17746
msgstr ""
17747
17748
#: serverguide/C/mail.xml:701(programlisting)
17749
#, no-wrap
17750
msgid ""
17751
"\n"
17752
"protocols = pop3 pop3s imap imaps\n"
17753
msgstr ""
17754
17755
#: serverguide/C/mail.xml:704(para)
17756
msgid ""
17757
"Next, choose the mailbox you would like to use. "
17758
"<application>Dovecot</application> supports <emphasis "
17759
"role=\"strong\">maildir</emphasis> and <emphasis "
17760
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
17761
"mailbox formats. They both have their own benefits and are discussed on "
17762
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
17763
"site</ulink>."
17764
msgstr ""
17765
17766
#: serverguide/C/mail.xml:712(para)
17767
msgid ""
17768
"Once you have chosen your mailbox type, edit the file "
17769
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
17770
msgstr ""
17771
17772
#: serverguide/C/mail.xml:717(programlisting)
17773
#, no-wrap
17774
msgid ""
17775
"\n"
17776
"mail_location = maildir:~/Maildir # (for maildir)\n"
17777
"or\n"
17778
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
17779
msgstr ""
17780
17781
#: serverguide/C/mail.xml:723(para)
17782
msgid ""
17783
"You should configure your Mail Transport Agent (MTA) to transfer the "
17784
"incoming mail to this type of mailbox if it is different from the one you "
17785
"have configured."
17786
msgstr ""
17787
17788
#: serverguide/C/mail.xml:729(para)
17789
msgid ""
17790
"Once you have configured dovecot, restart the "
17791
"<application>dovecot</application> daemon in order to test your setup:"
17792
msgstr ""
17793
17794
#: serverguide/C/mail.xml:738(para)
17795
msgid ""
17796
"If you have enabled imap, or pop3, you can also try to log in with the "
17797
"commands <command>telnet localhost pop3</command> or <command>telnet "
17798
"localhost imap2</command>. If you see something like the following, the "
17799
"installation has been successful:"
17800
msgstr ""
17801
17802
#: serverguide/C/mail.xml:745(programlisting)
17803
#, no-wrap
17804
msgid ""
17805
"\n"
17806
"bhuvan@rainbow:~$ telnet localhost pop3\n"
17807
"Trying 127.0.0.1...\n"
17808
"Connected to localhost.localdomain.\n"
17809
"Escape character is '^]'.\n"
17810
"+OK Dovecot ready.\n"
17811
msgstr ""
17812
17813
#: serverguide/C/mail.xml:754(title)
17814
msgid "Dovecot SSL Configuration"
17815
msgstr ""
17816
17817
#: serverguide/C/mail.xml:755(para)
17818
msgid ""
17819
"To configure <application>dovecot</application> to use SSL, you can edit the "
17820
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
17821
"lines:"
17822
msgstr ""
17823
17824
#: serverguide/C/mail.xml:760(programlisting)
17825
#, no-wrap
17826
msgid ""
17827
"\n"
17828
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
17829
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
17830
"ssl_disable = no\n"
17831
"disable_plaintext_auth = no\n"
17832
msgstr ""
17833
17834
#: serverguide/C/mail.xml:766(para)
17835
msgid ""
17836
"You can get the SSL certificate from a Certificate Issuing Authority or you "
17837
"can create self signed SSL certificate. The latter is a good option for "
17838
"email, because SMTP clients rarely complain about \"self-signed "
17839
"certificates\". Please refer to <xref linkend=\"certificates-and-"
17840
"security\"/> for details about how to create self signed SSL certificate. "
17841
"Once you create the certificate, you will have a key file and a certificate "
17842
"file. Please copy them to the location pointed in the "
17843
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
17844
msgstr ""
17845
17846
#: serverguide/C/mail.xml:781(title)
17847
msgid "Firewall Configuration for an Email Server"
17848
msgstr ""
17849
17850
#: serverguide/C/mail.xml:787(para)
17851
msgid "IMAP - 143"
17852
msgstr ""
17853
17854
#: serverguide/C/mail.xml:788(para)
17855
msgid "IMAPS - 993"
17856
msgstr ""
17857
17858
#: serverguide/C/mail.xml:789(para)
17859
msgid "POP3 - 110"
17860
msgstr ""
17861
17862
#: serverguide/C/mail.xml:790(para)
17863
msgid "POP3S - 995"
17864
msgstr ""
17865
17866
#: serverguide/C/mail.xml:782(para)
17867
msgid ""
17868
"To access your mail server from another computer, you must configure your "
17869
"firewall to allow connections to the server on the necessary ports. "
17870
"<placeholder-1/>"
17871
msgstr ""
17872
17873
#: serverguide/C/mail.xml:799(para)
17874
msgid ""
17875
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
17876
"more information."
17877
msgstr ""
17878
17879
#: serverguide/C/mail.xml:804(para)
17880
msgid ""
17881
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
17882
"Ubuntu Wiki</ulink> page has more details."
17883
msgstr ""
17884
17885
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
17886
msgid "Mailman"
17887
msgstr ""
17888
17889
#: serverguide/C/mail.xml:814(para)
17890
msgid ""
17891
"Mailman is an open source program for managing electronic mail discussions "
17892
"and e-newsletter lists. Many open source mailing lists (including all the "
17893
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
17894
"Mailman as their mailing list software. It is powerful and easy to install "
17895
"and maintain."
17896
msgstr ""
17897
17898
#: serverguide/C/mail.xml:824(para)
17899
msgid ""
17900
"Mailman provides a web interface for the administrators and users, using an "
17901
"external mail server to send and receive emails. It works perfectly with the "
17902
"following mail servers:"
17903
msgstr ""
17904
17905
#: serverguide/C/mail.xml:835(application)
17906
msgid "Exim"
17907
msgstr ""
17908
17909
#: serverguide/C/mail.xml:838(application)
17910
msgid "Sendmail"
17911
msgstr ""
17912
17913
#: serverguide/C/mail.xml:841(application)
17914
msgid "Qmail"
17915
msgstr ""
17916
17917
#: serverguide/C/mail.xml:846(para)
17918
msgid ""
17919
"We will see how to install and configure Mailman with, the Apache web "
17920
"server, and either the Postfix or Exim mail server. If you wish to install "
17921
"Mailman with a different mail server, please refer to the references section."
17922
msgstr ""
17923
17924
#: serverguide/C/mail.xml:853(para)
17925
msgid ""
17926
"You only need to install one mail server and "
17927
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
17928
msgstr ""
17929
17930
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
17931
msgid "Apache2"
17932
msgstr ""
17933
17934
#: serverguide/C/mail.xml:859(para)
17935
msgid ""
17936
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
17937
"installation\">HTTPD Installation</ulink> section for details."
17938
msgstr ""
17939
17940
#: serverguide/C/mail.xml:867(para)
17941
msgid ""
17942
"For instructions on installing and configuring Postfix refer to <xref "
17943
"linkend=\"postfix\"/>"
17944
msgstr ""
17945
17946
#: serverguide/C/mail.xml:873(para)
17947
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
17948
msgstr ""
17949
17950
#: serverguide/C/mail.xml:884(application)
17951
msgid "dc_use_split_config='true'"
17952
msgstr ""
17953
17954
#: serverguide/C/mail.xml:876(para)
17955
msgid ""
17956
"Once exim4 is installed, the configuration files are stored in the "
17957
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
17958
"configuration files are split across different files. You can change this "
17959
"behavior by changing the following variable in the "
17960
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
17961
msgstr ""
17962
17963
#: serverguide/C/mail.xml:891(para)
17964
msgid ""
17965
"To install <application>Mailman</application>, run following command at a "
17966
"terminal prompt:"
17967
msgstr ""
17968
17969
#: serverguide/C/mail.xml:895(command)
17970
msgid "sudo apt-get install mailman"
17971
msgstr ""
17972
17973
#: serverguide/C/mail.xml:897(para)
17974
msgid ""
17975
"It copies the installation files in "
17976
"<application>/var/lib/mailman</application> directory. It installs the CGI "
17977
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
17978
"creates <emphasis>list</emphasis> linux user. It creates the "
17979
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
17980
"this user."
17981
msgstr ""
17982
17983
#: serverguide/C/mail.xml:909(para)
17984
msgid ""
17985
"This section assumes you have successfully installed "
17986
"<application>mailman</application>, <application>apache2</application>, and "
17987
"<application>postfix</application> or <application>exim4</application>. Now "
17988
"you just need to configure them."
17989
msgstr ""
17990
17991
#: serverguide/C/mail.xml:918(para)
17992
msgid ""
17993
"An example Apache configuration file comes with "
17994
"<application>Mailman</application> and is placed in "
17995
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
17996
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
17997
"available</filename>:"
17998
msgstr ""
17999
18000
#: serverguide/C/mail.xml:924(command)
18001
msgid ""
18002
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18003
msgstr ""
18004
18005
#: serverguide/C/mail.xml:926(para)
18006
msgid ""
18007
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18008
"Mailman administration site. Now enable the new configuration and restart "
18009
"Apache:"
18010
msgstr ""
18011
18012
#: serverguide/C/mail.xml:931(command)
18013
msgid "sudo a2ensite mailman.conf"
18014
msgstr ""
18015
18016
#: serverguide/C/mail.xml:934(para)
18017
msgid ""
18018
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18019
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18020
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18021
"can make changes to the <filename>/etc/apache2/sites-"
18022
"available/mailman.conf</filename> file if you wish to change this behavior."
18023
msgstr ""
18024
18025
#: serverguide/C/mail.xml:945(para)
18026
msgid ""
18027
"For <application>Postfix</application> integration, we will associate the "
18028
"domain lists.example.com with the mailing lists. Please replace "
18029
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18030
msgstr ""
18031
18032
#: serverguide/C/mail.xml:949(para)
18033
msgid ""
18034
"You can use the postconf command to add the necessary configuration to "
18035
"<filename>/etc/postfix/main.cf</filename>:"
18036
msgstr ""
18037
18038
#: serverguide/C/mail.xml:953(command)
18039
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18040
msgstr ""
18041
18042
#: serverguide/C/mail.xml:954(command)
18043
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18044
msgstr ""
18045
18046
#: serverguide/C/mail.xml:955(command)
18047
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18048
msgstr ""
18049
18050
#: serverguide/C/mail.xml:957(para)
18051
msgid ""
18052
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18053
"the following transport:"
18054
msgstr ""
18055
18056
#: serverguide/C/mail.xml:960(programlisting)
18057
#, no-wrap
18058
msgid ""
18059
"\n"
18060
"mailman unix - n n - - pipe\n"
18061
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18062
" ${nexthop} ${user}\n"
18063
msgstr ""
18064
18065
#: serverguide/C/mail.xml:965(para)
18066
msgid ""
18067
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18068
"is delivered to a list."
18069
msgstr ""
18070
18071
#: serverguide/C/mail.xml:968(para)
18072
msgid ""
18073
"Associate the domain lists.example.com to the Mailman transport with the "
18074
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18075
msgstr ""
18076
18077
#: serverguide/C/mail.xml:971(programlisting)
18078
#, no-wrap
18079
msgid ""
18080
"\n"
18081
"lists.example.com mailman:\n"
18082
msgstr ""
18083
18084
#: serverguide/C/mail.xml:974(para)
18085
msgid ""
18086
"Now have <application>Postfix</application> build the transport map by "
18087
"entering the following from a terminal prompt:"
18088
msgstr ""
18089
18090
#: serverguide/C/mail.xml:978(command)
18091
msgid "sudo postmap -v /etc/postfix/transport"
18092
msgstr ""
18093
18094
#: serverguide/C/mail.xml:980(para)
18095
msgid "Then restart Postfix to enable the new configurations:"
18096
msgstr ""
18097
18098
#: serverguide/C/mail.xml:989(para)
18099
msgid ""
18100
"Once Exim4 is installed, you can start the Exim server using the following "
18101
"command from a terminal prompt:"
18102
msgstr ""
18103
18104
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18105
msgid "Main"
18106
msgstr ""
18107
18108
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18109
msgid "Transport"
18110
msgstr ""
18111
18112
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18113
msgid "Router"
18114
msgstr ""
18115
18116
#: serverguide/C/mail.xml:996(para)
18117
msgid ""
18118
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18119
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18120
"different types. For details, please refer to the <ulink "
18121
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18122
"add new a configuration file to the following configuration types: "
18123
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18124
"these mini configuration files. So, the order of these configuration files "
18125
"is very important."
18126
msgstr ""
18127
18128
#: serverguide/C/mail.xml:1027(programlisting)
18129
#, no-wrap
18130
msgid ""
18131
"\n"
18132
"# start\n"
18133
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18134
"# directory.\n"
18135
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18136
"# This is normally the same as ~mailman\n"
18137
"MM_HOME=/var/lib/mailman\n"
18138
"#\n"
18139
"# User and group for Mailman, should match your --with-mail-gid\n"
18140
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18141
"MM_UID=list\n"
18142
"MM_GID=list\n"
18143
"#\n"
18144
"# Domains that your lists are in - colon separated list\n"
18145
"# you may wish to add these into local_domains as well\n"
18146
"domainlist mm_domains=hostname.com\n"
18147
"#\n"
18148
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18149
"#\n"
18150
"# These values are derived from the ones above and should not need\n"
18151
"# editing unless you have munged your mailman installation\n"
18152
"#\n"
18153
"# The path of the Mailman mail wrapper script\n"
18154
"MM_WRAP=MM_HOME/mail/mailman\n"
18155
"#\n"
18156
"# The path of the list config file (used as a required file when\n"
18157
"# verifying list addresses)\n"
18158
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18159
"# end\n"
18160
msgstr ""
18161
18162
#: serverguide/C/mail.xml:1021(para)
18163
msgid ""
18164
"All the configuration files belonging to the main type are stored in the "
18165
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18166
"following content to a new file, named <filename>04_exim4-"
18167
"config_mailman</filename>: <placeholder-1/>"
18168
msgstr ""
18169
18170
#: serverguide/C/mail.xml:1067(programlisting)
18171
#, no-wrap
18172
msgid ""
18173
"\n"
18174
" mailman_transport:\n"
18175
" driver = pipe\n"
18176
" command = MM_WRAP \\\n"
18177
" '${if def:local_part_suffix \\\n"
18178
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18179
"\\\n"
18180
" {post}}' \\\n"
18181
" $local_part\n"
18182
" current_directory = MM_HOME\n"
18183
" home_directory = MM_HOME\n"
18184
" user = MM_UID\n"
18185
" group = MM_GID\n"
18186
msgstr ""
18187
18188
#: serverguide/C/mail.xml:1061(para)
18189
msgid ""
18190
"All the configuration files belonging to transport type are stored in the "
18191
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18192
"following content to a new file named <filename> 40_exim4-"
18193
"config_mailman</filename>: <placeholder-1/>"
18194
msgstr ""
18195
18196
#: serverguide/C/mail.xml:1088(programlisting)
18197
#, no-wrap
18198
msgid ""
18199
"\n"
18200
" mailman_router:\n"
18201
" driver = accept\n"
18202
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18203
" local_part_suffix_optional\n"
18204
" local_part_suffix = -bounces : -bounces+* : \\\n"
18205
" -confirm+* : -join : -leave : \\\n"
18206
" -owner : -request : -admin\n"
18207
" transport = mailman_transport\n"
18208
msgstr ""
18209
18210
#: serverguide/C/mail.xml:1084(para)
18211
msgid ""
18212
"All the configuration files belonging to router type are stored in the "
18213
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18214
"following content in to a new file named <filename>101_exim4-"
18215
"config_mailman</filename>: <placeholder-1/>"
18216
msgstr ""
18217
18218
#: serverguide/C/mail.xml:1101(para)
18219
msgid ""
18220
"The order of main and transport configuration files can be in any order. "
18221
"But, the order of router configuration files must be the same. This "
18222
"particular file must appear before the <application>200_exim4-"
18223
"config_primary</application> file. These two configuration files contain "
18224
"same type of information. The first file takes the precedence. For more "
18225
"details, please refer to the references section."
18226
msgstr ""
18227
18228
#: serverguide/C/mail.xml:1114(para)
18229
msgid ""
18230
"Once mailman is installed, you can run it using the following command:"
18231
msgstr ""
18232
18233
#: serverguide/C/mail.xml:1118(command)
18234
msgid "sudo /etc/init.d/mailman start"
18235
msgstr ""
18236
18237
#: serverguide/C/mail.xml:1120(para)
18238
msgid ""
18239
"Once mailman is installed, you should create the default mailing list. Run "
18240
"the following command to create the mailing list:"
18241
msgstr ""
18242
18243
#: serverguide/C/mail.xml:1126(command)
18244
msgid "sudo /usr/sbin/newlist mailman"
18245
msgstr ""
18246
18247
#: serverguide/C/mail.xml:1129(programlisting)
18248
#, no-wrap
18249
msgid ""
18250
"\n"
18251
" Enter the email address of the person running the list: bhuvan at "
18252
"ubuntu.com\n"
18253
" Initial mailman password:\n"
18254
" To finish creating your mailing list, you must edit your "
18255
"<filename>/etc/aliases</filename> (or\n"
18256
" equivalent) file by adding the following lines, and possibly running the\n"
18257
" `newaliases' program:\n"
18258
"\n"
18259
" ## mailman mailing list\n"
18260
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18261
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18262
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18263
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18264
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18265
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18266
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18267
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18268
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18269
"mailman\"\n"
18270
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18271
"mailman\"\n"
18272
"\n"
18273
" Hit enter to notify mailman owner...\n"
18274
"\n"
18275
" # \n"
18276
msgstr ""
18277
18278
#: serverguide/C/mail.xml:1152(para)
18279
msgid ""
18280
"We have configured either Postfix or Exim4 to recognize all emails from "
18281
"mailman. So, it is not mandatory to make any new entries in "
18282
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18283
"configuration files, please ensure that you restart those services before "
18284
"continuing to next section."
18285
msgstr ""
18286
18287
#: serverguide/C/mail.xml:1160(para)
18288
msgid ""
18289
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18290
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18291
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18292
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18293
msgstr ""
18294
18295
#: serverguide/C/mail.xml:1171(title)
18296
msgid "Administration"
18297
msgstr ""
18298
18299
#: serverguide/C/mail.xml:1172(para)
18300
msgid ""
18301
"We assume you have a default installation. The mailman cgi scripts are still "
18302
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18303
"Mailman provides a web based administration facility. To access this page, "
18304
"point your browser to the following url:"
18305
msgstr ""
18306
18307
#: serverguide/C/mail.xml:1180(para)
18308
msgid "http://hostname/cgi-bin/mailman/admin"
18309
msgstr ""
18310
18311
#: serverguide/C/mail.xml:1184(para)
18312
msgid ""
18313
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18314
"screen. If you click the mailing list name, it will ask for your "
18315
"authentication password. If you enter the correct password, you will be able "
18316
"to change administrative settings of this mailing list. You can create a new "
18317
"mailing list using the command line utility "
18318
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18319
"mailing list using the web interface."
18320
msgstr ""
18321
18322
#: serverguide/C/mail.xml:1197(title)
18323
msgid "Users"
18324
msgstr ""
18325
18326
#: serverguide/C/mail.xml:1198(para)
18327
msgid ""
18328
"Mailman provides a web based interface for users. To access this page, point "
18329
"your browser to the following url:"
18330
msgstr ""
18331
18332
#: serverguide/C/mail.xml:1203(para)
18333
msgid "http://hostname/cgi-bin/mailman/listinfo"
18334
msgstr ""
18335
18336
#: serverguide/C/mail.xml:1207(para)
18337
msgid ""
18338
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18339
"screen. If you click the mailing list name, it will display the subscription "
18340
"form. You can enter your email address, name (optional), and password to "
18341
"subscribe. An email invitation will be sent to you. You can follow the "
18342
"instructions in the email to subscribe."
18343
msgstr ""
18344
18345
#: serverguide/C/mail.xml:1219(ulink)
18346
msgid "GNU Mailman - Installation Manual"
18347
msgstr ""
18348
18349
#: serverguide/C/mail.xml:1223(ulink)
18350
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18351
msgstr ""
18352
18353
#: serverguide/C/mail.xml:1226(para)
18354
msgid ""
18355
"Also, see the <ulink "
18356
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18357
"Wiki</ulink> page."
18358
msgstr ""
18359
18360
#: serverguide/C/mail.xml:1232(title)
18361
msgid "Mail Filtering"
18362
msgstr ""
18363
18364
#: serverguide/C/mail.xml:1233(para)
18365
msgid ""
18366
"One of the largest issues with email today is the problem of Unsolicited "
18367
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18368
"and other forms of malware. According to some reports these messages make up "
18369
"the bulk of all email traffic on the Internet."
18370
msgstr ""
18371
18372
#: serverguide/C/mail.xml:1238(para)
18373
msgid ""
18374
"This section will cover integrating <application>Amavisd-new</application>, "
18375
"<application>Spamassassin</application>, and "
18376
"<application>ClamAV</application> with the "
18377
"<application>Postfix</application> Mail Transport Agent (MTA). "
18378
"<application>Postfix</application> can also check email validity by passing "
18379
"it through external content filters. These filters can sometimes determine "
18380
"if a message is spam without needing to process it with more resource "
18381
"intensive applications. Two common filters are <application>dkim-"
18382
"filter</application> and <application>python-policyd-spf</application>."
18383
msgstr ""
18384
18385
#: serverguide/C/mail.xml:1248(para)
18386
msgid ""
18387
"<application>Amavisd-new</application> is a wrapper program that can call "
18388
"any number of content filtering programs for spam detection, antivirus, etc."
18389
msgstr ""
18390
18391
#: serverguide/C/mail.xml:1254(para)
18392
msgid ""
18393
"<application>Spamassassin</application> uses a variety of mechanisms to "
18394
"filter email based on the message content."
18395
msgstr ""
18396
18397
#: serverguide/C/mail.xml:1259(para)
18398
msgid ""
18399
"<application>ClamAV</application> is an open source antivirus application."
18400
msgstr ""
18401
18402
#: serverguide/C/mail.xml:1264(para)
18403
msgid ""
18404
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18405
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18406
msgstr ""
18407
18408
#: serverguide/C/mail.xml:1270(para)
18409
msgid ""
18410
"<application>python-policyd-spf</application> enables Sender Policy "
18411
"Framework (SPF) checking with <application>Postfix</application>."
18412
msgstr ""
18413
18414
#: serverguide/C/mail.xml:1275(para)
18415
msgid "This is how the pieces fit together:"
18416
msgstr ""
18417
18418
#: serverguide/C/mail.xml:1280(para)
18419
msgid "An email message is accepted by <application>Postfix</application>."
18420
msgstr ""
18421
18422
#: serverguide/C/mail.xml:1285(para)
18423
msgid ""
18424
"The message is passed through any external filters <application>dkim-"
18425
"filter</application> and <application>python-policyd-spf</application> in "
18426
"this case."
18427
msgstr ""
18428
18429
#: serverguide/C/mail.xml:1291(para)
18430
msgid "<application>Amavisd-new</application> then processes the message."
18431
msgstr ""
18432
18433
#: serverguide/C/mail.xml:1296(para)
18434
msgid ""
18435
"<application>ClamAV</application> is used to scan the message. If the "
18436
"message contains a virus <application>Postfix</application> will reject the "
18437
"message."
18438
msgstr ""
18439
18440
#: serverguide/C/mail.xml:1302(para)
18441
msgid ""
18442
"Clean messages will then be analyzed by "
18443
"<application>Spamassassin</application> to find out if the message is spam. "
18444
"<application>Spamassassin</application> will then add X-Header lines "
18445
"allowing <application>Amavisd-new</application> to further manipulate the "
18446
"message."
18447
msgstr ""
18448
18449
#: serverguide/C/mail.xml:1309(para)
18450
msgid ""
18451
"For example, if a message has a Spam score of over fifty the message could "
18452
"be automatically dropped from the queue without the recipient ever having to "
18453
"be bothered. Another, way to handle flagged messages is to deliver them to "
18454
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18455
"see fit."
18456
msgstr ""
18457
18458
#: serverguide/C/mail.xml:1316(para)
18459
msgid ""
18460
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18461
"configuring Postfix."
18462
msgstr ""
18463
18464
#: serverguide/C/mail.xml:1319(para)
18465
msgid ""
18466
"To install the rest of the applications enter the following from a terminal "
18467
"prompt:"
18468
msgstr ""
18469
18470
#: serverguide/C/mail.xml:1323(command)
18471
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18472
msgstr ""
18473
18474
#: serverguide/C/mail.xml:1324(command)
18475
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18476
msgstr ""
18477
18478
#: serverguide/C/mail.xml:1326(para)
18479
msgid ""
18480
"There are some optional packages that integrate with "
18481
"<application>Spamassassin</application> for better spam detection:"
18482
msgstr ""
18483
18484
#: serverguide/C/mail.xml:1330(command)
18485
msgid "sudo apt-get install pyzor razor"
18486
msgstr ""
18487
18488
#: serverguide/C/mail.xml:1332(para)
18489
msgid ""
18490
"Along with the main filtering applications compression utilities are needed "
18491
"to process some email attachments:"
18492
msgstr ""
18493
18494
#: serverguide/C/mail.xml:1336(command)
18495
msgid ""
18496
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18497
msgstr ""
18498
18499
#: serverguide/C/mail.xml:1339(para)
18500
msgid ""
18501
"If some packages are not found, check that the "
18502
"<emphasis>multiverse</emphasis> repository is enabled in "
18503
"<filename>/etc/apt/sources.list</filename>"
18504
msgstr ""
18505
18506
#: serverguide/C/mail.xml:1340(para)
18507
msgid ""
18508
"If you make changes to the file, be sure to run <command>sudo apt-get "
18509
"update</command> before trying to install again."
18510
msgstr ""
18511
18512
#: serverguide/C/mail.xml:1345(para)
18513
msgid "Now configure everything to work together and filter email."
18514
msgstr ""
18515
18516
#: serverguide/C/mail.xml:1349(title)
18517
msgid "ClamAV"
18518
msgstr ""
18519
18520
#: serverguide/C/mail.xml:1350(para)
18521
msgid ""
18522
"The default behaviour of <application>ClamAV</application> will fit our "
18523
"needs. For more ClamAV configuration options, check the configuration files "
18524
"in <filename>/etc/clamav</filename>."
18525
msgstr ""
18526
18527
#: serverguide/C/mail.xml:1355(para)
18528
msgid ""
18529
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18530
"group in order for <application>Amavisd-new</application> to have the "
18531
"appropriate access to scan files:"
18532
msgstr ""
18533
18534
#: serverguide/C/mail.xml:1360(command)
18535
msgid "sudo adduser clamav amavis"
18536
msgstr ""
18537
18538
#: serverguide/C/mail.xml:1364(title)
18539
msgid "Spamassassin"
18540
msgstr ""
18541
18542
#: serverguide/C/mail.xml:1365(para)
18543
msgid ""
18544
"Spamassassin automatically detects optional components and will use them if "
18545
"they are present. This means that there is no need to configure "
18546
"<application>pyzor</application> and <application>razor</application>."
18547
msgstr ""
18548
18549
#: serverguide/C/mail.xml:1369(para)
18550
msgid ""
18551
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18552
"<application>Spamassassin</application> daemon. Change "
18553
"<emphasis>ENABLED=0</emphasis> to:"
18554
msgstr ""
18555
18556
#: serverguide/C/mail.xml:1373(programlisting)
18557
#, no-wrap
18558
msgid ""
18559
"\n"
18560
"ENABLED=1\n"
18561
msgstr ""
18562
18563
#: serverguide/C/mail.xml:1376(para)
18564
msgid "Now start the daemon:"
18565
msgstr ""
18566
18567
#: serverguide/C/mail.xml:1380(command)
18568
msgid "sudo /etc/init.d/spamassassin start"
18569
msgstr ""
18570
18571
#: serverguide/C/mail.xml:1384(title)
18572
msgid "Amavisd-new"
18573
msgstr ""
18574
18575
#: serverguide/C/mail.xml:1385(para)
18576
msgid ""
18577
"First activate spam and antivirus detection in <application>Amavisd-"
18578
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18579
"content_filter_mode</filename>:"
18580
msgstr ""
18581
18582
#: serverguide/C/mail.xml:1389(programlisting)
18583
#, no-wrap
18584
msgid ""
18585
"\n"
18586
"use strict;\n"
18587
"\n"
18588
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
18589
"# and to re-enable antivirus checking.\n"
18590
"\n"
18591
"#\n"
18592
"# Default antivirus checking mode\n"
18593
"# Uncomment the two lines below to enable it\n"
18594
"#\n"
18595
"\n"
18596
"@bypass_virus_checks_maps = (\n"
18597
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
18598
"$bypass_virus_checks_re);\n"
18599
"\n"
18600
"\n"
18601
"#\n"
18602
"# Default SPAM checking mode\n"
18603
"# Uncomment the two lines below to enable it\n"
18604
"#\n"
18605
"\n"
18606
"@bypass_spam_checks_maps = (\n"
18607
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
18608
"$bypass_spam_checks_re);\n"
18609
"\n"
18610
"1; # insure a defined return\n"
18611
msgstr ""
18612
18613
#: serverguide/C/mail.xml:1414(para)
18614
msgid ""
18615
"Bouncing spam can be a bad idea as the return address is often faked. "
18616
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
18617
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
18618
"D_BOUNCE, as follows:"
18619
msgstr ""
18620
18621
#: serverguide/C/mail.xml:1420(programlisting)
18622
#, no-wrap
18623
msgid ""
18624
"\n"
18625
"$final_spam_destiny = D_DISCARD;\n"
18626
msgstr ""
18627
18628
#: serverguide/C/mail.xml:1424(para)
18629
msgid ""
18630
"Additionally, you may want to adjust the following options to flag more "
18631
"messages as spam:"
18632
msgstr ""
18633
18634
#: serverguide/C/mail.xml:1428(programlisting)
18635
#, no-wrap
18636
msgid ""
18637
"\n"
18638
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
18639
"level\n"
18640
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
18641
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
18642
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
18643
msgstr ""
18644
18645
#: serverguide/C/mail.xml:1435(para)
18646
msgid ""
18647
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
18648
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
18649
"option. Also, if the server receives mail for multiple domains the "
18650
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
18651
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
18652
msgstr ""
18653
18654
#: serverguide/C/mail.xml:1442(programlisting)
18655
#, no-wrap
18656
msgid ""
18657
"\n"
18658
"$myhostname = 'mail.example.com';\n"
18659
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
18660
msgstr ""
18661
18662
#: serverguide/C/mail.xml:1447(para)
18663
msgid ""
18664
"After configuration <application>Amavisd-new</application> needs to be "
18665
"restarted:"
18666
msgstr ""
18667
18668
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
18669
msgid "sudo /etc/init.d/amavis restart"
18670
msgstr ""
18671
18672
#: serverguide/C/mail.xml:1454(title)
18673
msgid "DKIM Whitelist"
18674
msgstr ""
18675
18676
#: serverguide/C/mail.xml:1456(para)
18677
msgid ""
18678
"<application>Amavisd-new</application> can be configured to automatically "
18679
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
18680
"Keys. There are some pre-configured domains in the "
18681
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
18682
msgstr ""
18683
18684
#: serverguide/C/mail.xml:1462(para)
18685
msgid "There are multiple ways to configure the Whitelist for a domain:"
18686
msgstr ""
18687
18688
#: serverguide/C/mail.xml:1468(para)
18689
msgid ""
18690
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18691
"address from the \"example.com\" domain."
18692
msgstr ""
18693
18694
#: serverguide/C/mail.xml:1473(para)
18695
msgid ""
18696
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18697
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
18698
"have a valid signature."
18699
msgstr ""
18700
18701
#: serverguide/C/mail.xml:1479(para)
18702
msgid ""
18703
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
18704
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
18705
"role=\"italic\">example.com</emphasis> the parent domain."
18706
msgstr ""
18707
18708
#: serverguide/C/mail.xml:1485(para)
18709
msgid ""
18710
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
18711
"that have a valid signature from \"example.com\". This is usually used for "
18712
"discussion groups that sign thier messages."
18713
msgstr ""
18714
18715
#: serverguide/C/mail.xml:1492(para)
18716
msgid ""
18717
"A domain can also have multiple Whitelist configurations. After, editing the "
18718
"file restart <application>amaisd-new</application>:"
18719
msgstr ""
18720
18721
#: serverguide/C/mail.xml:1501(para)
18722
msgid ""
18723
"In this context, once a domain has been added to the Whitelist the message "
18724
"will not receive any anti-virus or spam filtering. This may or may not be "
18725
"the intended behavior you wish for a domain."
18726
msgstr ""
18727
18728
#: serverguide/C/mail.xml:1511(para)
18729
msgid ""
18730
"For <application>Postfix</application> integration, enter the following from "
18731
"a terminal prompt:"
18732
msgstr ""
18733
18734
#: serverguide/C/mail.xml:1515(command)
18735
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
18736
msgstr ""
18737
18738
#: serverguide/C/mail.xml:1517(para)
18739
msgid ""
18740
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
18741
"to the end of the file:"
18742
msgstr ""
18743
18744
#: serverguide/C/mail.xml:1520(programlisting)
18745
#, no-wrap
18746
msgid ""
18747
"\n"
18748
"smtp-amavis unix - - - - 2 smtp\n"
18749
" -o smtp_data_done_timeout=1200\n"
18750
" -o smtp_send_xforward_command=yes\n"
18751
" -o disable_dns_lookups=yes\n"
18752
" -o max_use=20\n"
18753
"\n"
18754
"127.0.0.1:10025 inet n - - - - smtpd\n"
18755
" -o content_filter=\n"
18756
" -o local_recipient_maps=\n"
18757
" -o relay_recipient_maps=\n"
18758
" -o smtpd_restriction_classes=\n"
18759
" -o smtpd_delay_reject=no\n"
18760
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
18761
" -o smtpd_helo_restrictions=\n"
18762
" -o smtpd_sender_restrictions=\n"
18763
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
18764
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
18765
" -o smtpd_end_of_data_restrictions=\n"
18766
" -o mynetworks=127.0.0.0/8\n"
18767
" -o smtpd_error_sleep_time=0\n"
18768
" -o smtpd_soft_error_limit=1001\n"
18769
" -o smtpd_hard_error_limit=1000\n"
18770
" -o smtpd_client_connection_count_limit=0\n"
18771
" -o smtpd_client_connection_rate_limit=0\n"
18772
" -o "
18773
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
18774
msgstr ""
18775
18776
#: serverguide/C/mail.xml:1547(para)
18777
msgid ""
18778
"Also add the following two lines immediately below the "
18779
"<emphasis>\"pickup\"</emphasis> transport service:"
18780
msgstr ""
18781
18782
#: serverguide/C/mail.xml:1550(programlisting)
18783
#, no-wrap
18784
msgid ""
18785
"\n"
18786
" -o content_filter=\n"
18787
" -o receive_override_options=no_header_body_checks\n"
18788
msgstr ""
18789
18790
#: serverguide/C/mail.xml:1554(para)
18791
msgid ""
18792
"This will prevent messages that are generated to report on spam from being "
18793
"classified as spam."
18794
msgstr ""
18795
18796
#: serverguide/C/mail.xml:1557(para)
18797
msgid "Now restart <application>Postfix</application>:"
18798
msgstr ""
18799
18800
#: serverguide/C/mail.xml:1563(para)
18801
msgid "Content filtering with spam and virus detection is now enabled."
18802
msgstr ""
18803
18804
#: serverguide/C/mail.xml:1570(para)
18805
msgid ""
18806
"First, test that the <application>Amavisd-new</application> SMTP is "
18807
"listening:"
18808
msgstr ""
18809
18810
#: serverguide/C/mail.xml:1573(programlisting)
18811
#, no-wrap
18812
msgid ""
18813
"\n"
18814
"telnet localhost 10024\n"
18815
"Trying 127.0.0.1...\n"
18816
"Connected to localhost.\n"
18817
"Escape character is '^]'.\n"
18818
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
18819
"^]\n"
18820
msgstr ""
18821
18822
#: serverguide/C/mail.xml:1581(para)
18823
msgid ""
18824
"In the Header of messages that go through the content filter you should see:"
18825
msgstr ""
18826
18827
#: serverguide/C/mail.xml:1584(programlisting)
18828
#, no-wrap
18829
msgid ""
18830
"\n"
18831
"X-Spam-Level: \n"
18832
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
18833
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
18834
"BAYES_00\n"
18835
"X-Spam-Level: \n"
18836
msgstr ""
18837
18838
#: serverguide/C/mail.xml:1591(para)
18839
msgid ""
18840
"Your output will vary, but the important thing is that there are <emphasis>X-"
18841
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
18842
msgstr ""
18843
18844
#: serverguide/C/mail.xml:1599(para)
18845
msgid ""
18846
"The best way to figure out why something is going wrong is to check the log "
18847
"files."
18848
msgstr ""
18849
18850
#: serverguide/C/mail.xml:1604(para)
18851
msgid ""
18852
"For instructions on <application>Postfix</application> logging see the <xref "
18853
"linkend=\"postfix-troubleshooting\"/> section."
18854
msgstr ""
18855
18856
#: serverguide/C/mail.xml:1610(para)
18857
msgid ""
18858
"<application>Amavisd-new</application> uses "
18859
"<application>Syslog</application> to send messages to "
18860
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
18861
"increased by adding the <emphasis>$log_level</emphasis> option to "
18862
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
18863
"1 to 5."
18864
msgstr ""
18865
18866
#: serverguide/C/mail.xml:1615(programlisting)
18867
#, no-wrap
18868
msgid ""
18869
"\n"
18870
"$log_level = 2;\n"
18871
msgstr ""
18872
18873
#: serverguide/C/mail.xml:1619(para)
18874
msgid ""
18875
"When the <application>Amavisd-new</application> log output is increased "
18876
"<application>Spamassassin</application> log output is also increased."
18877
msgstr ""
18878
18879
#: serverguide/C/mail.xml:1626(para)
18880
msgid ""
18881
"The <application>ClamAV</application> log level can be increased by editing "
18882
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
18883
msgstr ""
18884
18885
#: serverguide/C/mail.xml:1630(programlisting)
18886
#, no-wrap
18887
msgid ""
18888
"\n"
18889
"LogVerbose true\n"
18890
msgstr ""
18891
18892
#: serverguide/C/mail.xml:1633(para)
18893
msgid ""
18894
"By default <application>ClamAV</application> will send log messages to "
18895
"<filename>/var/log/clamav/clamav.log</filename>."
18896
msgstr ""
18897
18898
#: serverguide/C/mail.xml:1639(para)
18899
msgid ""
18900
"After changing an applications log settings remember to restart the service "
18901
"for the new settings to take affect. Also, once the issue you are "
18902
"troubleshooting is resolved it is a good idea to change the log settings "
18903
"back to normal."
18904
msgstr ""
18905
18906
#: serverguide/C/mail.xml:1647(para)
18907
msgid "For more information on filtering mail see the following links:"
18908
msgstr ""
18909
18910
#: serverguide/C/mail.xml:1653(ulink)
18911
msgid "Amavisd-new Documentation"
18912
msgstr ""
18913
18914
#: serverguide/C/mail.xml:1657(para)
18915
msgid ""
18916
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
18917
"Documentation</ulink> and <ulink "
18918
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
18919
msgstr ""
18920
18921
#: serverguide/C/mail.xml:1664(ulink)
18922
msgid "Spamassassin Wiki"
18923
msgstr ""
18924
18925
#: serverguide/C/mail.xml:1669(ulink)
18926
msgid "Pyzor Homepage"
18927
msgstr ""
18928
18929
#: serverguide/C/mail.xml:1674(ulink)
18930
msgid "Razor Homepage"
18931
msgstr ""
18932
18933
#: serverguide/C/mail.xml:1679(ulink)
18934
msgid "DKIM.org"
18935
msgstr ""
18936
18937
#: serverguide/C/mail.xml:1684(ulink)
18938
msgid "Postfix Amavis New"
18939
msgstr ""
18940
18941
#: serverguide/C/mail.xml:1688(para)
18942
msgid ""
18943
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
18944
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
18945
msgstr ""
18946
18947
#: serverguide/C/lamp-applications.xml:13(title)
18948
msgid "LAMP Applications"
18949
msgstr ""
18950
18951
#: serverguide/C/lamp-applications.xml:19(para)
18952
msgid ""
18953
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
18954
"Ubuntu servers. There is a plethora of Open Source applications written "
18955
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
18956
"Content Management Systems, and Management Software such as phpMyAdmin."
18957
msgstr ""
18958
18959
#: serverguide/C/lamp-applications.xml:26(para)
18960
msgid ""
18961
"One advantage of LAMP is the substantial flexibility for different database, "
18962
"web server, and scripting languages. Popular substitutes for MySQL include "
18963
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
18964
"instead of PHP."
18965
msgstr ""
18966
18967
#: serverguide/C/lamp-applications.xml:32(para)
18968
msgid ""
18969
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
18970
"is:"
18971
msgstr ""
18972
18973
#: serverguide/C/lamp-applications.xml:38(para)
18974
msgid "Download an archive containing the application source files."
18975
msgstr ""
18976
18977
#: serverguide/C/lamp-applications.xml:43(para)
18978
msgid ""
18979
"Unpack the archive, usually in a directory accessible to a web server."
18980
msgstr ""
18981
18982
#: serverguide/C/lamp-applications.xml:48(para)
18983
msgid ""
18984
"Depending on where the source was extracted, configure a web browser to "
18985
"serve the files."
18986
msgstr ""
18987
18988
#: serverguide/C/lamp-applications.xml:53(para)
18989
msgid "Configure the application to connect to the database."
18990
msgstr ""
18991
18992
#: serverguide/C/lamp-applications.xml:58(para)
18993
msgid ""
18994
"Run a script, or browse to a page of the application, to install the "
18995
"database needed by the application."
18996
msgstr ""
18997
18998
#: serverguide/C/lamp-applications.xml:63(para)
18999
msgid ""
19000
"Once the steps above, or similar steps, are completed you are ready to begin "
19001
"using the application."
19002
msgstr ""
19003
19004
#: serverguide/C/lamp-applications.xml:69(para)
19005
msgid ""
19006
"A disadvantage of using this approach is that the application files are not "
19007
"placed in the file system in a standard way, which can cause confusion as to "
19008
"where the application is installed. Another larger disadvantage is updating "
19009
"the application. When a new version is released, the same process used to "
19010
"install the application is needed to apply updates."
19011
msgstr ""
19012
19013
#: serverguide/C/lamp-applications.xml:76(para)
19014
msgid ""
19015
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19016
"packaged for Ubuntu, and are available for installation in the same way as "
19017
"non-LAMP applications. Depending on the application some extra configuration "
19018
"and setup steps may be needed, however."
19019
msgstr ""
19020
19021
#: serverguide/C/lamp-applications.xml:82(para)
19022
msgid ""
19023
"This section covers howto install and configure the Wiki applications "
19024
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19025
"and the MySQL management application <application>phpMyAdmin</application>."
19026
msgstr ""
19027
19028
#: serverguide/C/lamp-applications.xml:88(para)
19029
msgid ""
19030
"A Wiki is a website that allows the visitors to easily add, remove and "
19031
"modify available content easily. The ease of interaction and operation makes "
19032
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19033
"also referred to the collaborative software."
19034
msgstr ""
19035
19036
#: serverguide/C/lamp-applications.xml:100(title)
19037
msgid "Moin Moin"
19038
msgstr ""
19039
19040
#: serverguide/C/lamp-applications.xml:102(para)
19041
msgid ""
19042
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19043
"engine, and licensed under the GNU GPL."
19044
msgstr ""
19045
19046
#: serverguide/C/lamp-applications.xml:110(para)
19047
msgid ""
19048
"To install <application>MoinMoin</application>, run the following command in "
19049
"the command prompt:"
19050
msgstr ""
19051
19052
#: serverguide/C/lamp-applications.xml:116(command)
19053
msgid "sudo apt-get install python-moinmoin"
19054
msgstr ""
19055
19056
#: serverguide/C/lamp-applications.xml:119(para)
19057
msgid ""
19058
"You should also install <application>apache2</application> web server. For "
19059
"installing <application>apache2</application> web server, please refer to "
19060
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19061
"linkend=\"httpd\"/> section."
19062
msgstr ""
19063
19064
#: serverguide/C/lamp-applications.xml:130(para)
19065
msgid ""
19066
"For configuring your first Wiki application, please run the following set of "
19067
"commands. Let us assume that you are creating a Wiki named "
19068
"<emphasis>mywiki</emphasis>:"
19069
msgstr ""
19070
19071
#: serverguide/C/lamp-applications.xml:137(command)
19072
msgid "cd /usr/share/moin"
19073
msgstr ""
19074
19075
#: serverguide/C/lamp-applications.xml:138(command)
19076
msgid "sudo mkdir mywiki"
19077
msgstr ""
19078
19079
#: serverguide/C/lamp-applications.xml:139(command)
19080
msgid "sudo cp -R data mywiki"
19081
msgstr ""
19082
19083
#: serverguide/C/lamp-applications.xml:140(command)
19084
msgid "sudo cp -R underlay mywiki"
19085
msgstr ""
19086
19087
#: serverguide/C/lamp-applications.xml:141(command)
19088
msgid "sudo cp server/moin.cgi mywiki"
19089
msgstr ""
19090
19091
#: serverguide/C/lamp-applications.xml:142(command)
19092
msgid "sudo chown -R www-data.www-data mywiki"
19093
msgstr ""
19094
19095
#: serverguide/C/lamp-applications.xml:143(command)
19096
msgid "sudo chmod -R ug+rwX mywiki"
19097
msgstr ""
19098
19099
#: serverguide/C/lamp-applications.xml:144(command)
19100
msgid "sudo chmod -R o-rwx mywiki"
19101
msgstr ""
19102
19103
#: serverguide/C/lamp-applications.xml:147(para)
19104
msgid ""
19105
"Now you should configure <application>MoinMoin</application> to find your "
19106
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19107
"<application>MoinMoin</application>, open "
19108
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19109
msgstr ""
19110
19111
#: serverguide/C/lamp-applications.xml:155(programlisting)
19112
#, no-wrap
19113
msgid "data_dir = '/org/mywiki/data'"
19114
msgstr ""
19115
19116
#: serverguide/C/lamp-applications.xml:157(para)
19117
msgid "to"
19118
msgstr ""
19119
19120
#: serverguide/C/lamp-applications.xml:161(programlisting)
19121
#, no-wrap
19122
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19123
msgstr ""
19124
19125
#: serverguide/C/lamp-applications.xml:163(para)
19126
msgid ""
19127
"Also, below the <emphasis>data_dir</emphasis> option add the "
19128
"<emphasis>data_underlay_dir</emphasis>:"
19129
msgstr ""
19130
19131
#: serverguide/C/lamp-applications.xml:167(programlisting)
19132
#, no-wrap
19133
msgid ""
19134
"\n"
19135
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19136
msgstr ""
19137
19138
#: serverguide/C/lamp-applications.xml:172(para)
19139
msgid ""
19140
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19141
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19142
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19143
"change."
19144
msgstr ""
19145
19146
#: serverguide/C/lamp-applications.xml:181(para)
19147
msgid ""
19148
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19149
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19150
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19151
"<quote>(\"mywiki\", r\".*\")</quote>."
19152
msgstr ""
19153
19154
#: serverguide/C/lamp-applications.xml:189(para)
19155
msgid ""
19156
"Once you have configured <application>MoinMoin</application> to find your "
19157
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19158
"<application>apache2</application> and make it ready for your Wiki "
19159
"application."
19160
msgstr ""
19161
19162
#: serverguide/C/lamp-applications.xml:196(para)
19163
msgid ""
19164
"You should add the following lines in <filename>/etc/apache2/sites-"
19165
"available/default</filename> file inside the <quote><VirtualHost "
19166
"*></quote> tag:"
19167
msgstr ""
19168
19169
#: serverguide/C/lamp-applications.xml:202(programlisting)
19170
#, no-wrap
19171
msgid ""
19172
"\n"
19173
"### moin\n"
19174
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19175
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19176
" <Directory /usr/share/moin/htdocs>\n"
19177
" Order allow,deny\n"
19178
" allow from all\n"
19179
" </Directory>\n"
19180
"### end moin\n"
19181
msgstr ""
19182
19183
#: serverguide/C/lamp-applications.xml:214(para)
19184
msgid ""
19185
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19186
"<emphasis>alias</emphasis> line above, to the "
19187
"<application>moinmoin</application> version installed."
19188
msgstr ""
19189
19190
#: serverguide/C/lamp-applications.xml:220(para)
19191
msgid ""
19192
"Once you configure the <application>apache2</application> web server and "
19193
"make it ready for your Wiki application, you should restart it. You can run "
19194
"the following command to restart the <application>apache2</application> web "
19195
"server:"
19196
msgstr ""
19197
19198
#: serverguide/C/lamp-applications.xml:233(title)
19199
msgid "Verification"
19200
msgstr ""
19201
19202
#: serverguide/C/lamp-applications.xml:235(para)
19203
msgid ""
19204
"You can verify the Wiki application and see if it works by pointing your web "
19205
"browser to the following URL:"
19206
msgstr ""
19207
19208
#: serverguide/C/lamp-applications.xml:239(programlisting)
19209
#, no-wrap
19210
msgid ""
19211
"\n"
19212
"http://localhost/mywiki\n"
19213
msgstr ""
19214
19215
#: serverguide/C/lamp-applications.xml:243(para)
19216
msgid ""
19217
"You can also run the test command by pointing your web browser to the "
19218
"following URL:"
19219
msgstr ""
19220
19221
#: serverguide/C/lamp-applications.xml:248(programlisting)
19222
#, no-wrap
19223
msgid ""
19224
"\n"
19225
"http://localhost/mywiki?action=test\n"
19226
msgstr ""
19227
19228
#: serverguide/C/lamp-applications.xml:252(para)
19229
msgid ""
19230
"For more details, please refer to the <ulink "
19231
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19232
msgstr ""
19233
19234
#: serverguide/C/lamp-applications.xml:263(para)
19235
msgid ""
19236
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19237
"Wiki</ulink>."
19238
msgstr ""
19239
19240
#: serverguide/C/lamp-applications.xml:268(para)
19241
msgid ""
19242
"Also, see the <ulink "
19243
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19244
"MoinMoin</ulink> page."
19245
msgstr ""
19246
19247
#: serverguide/C/lamp-applications.xml:277(title)
19248
msgid "MediaWiki"
19249
msgstr ""
19250
19251
#: serverguide/C/lamp-applications.xml:279(para)
19252
msgid ""
19253
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19254
"either use <application>MySQL</application> or "
19255
"<application>PostgreSQL</application> Database Management System."
19256
msgstr ""
19257
19258
#: serverguide/C/lamp-applications.xml:289(para)
19259
msgid ""
19260
"Before installing <application>MediaWiki</application> you should also "
19261
"install <application>Apache2</application>, the "
19262
"<application>PHP5</application> scripting language and Database a Management "
19263
"System. <application>MySQL</application> or "
19264
"<application>PostgreSQL</application> are the most common, choose one "
19265
"depending on your need. Please refer to those sections in this manual for "
19266
"installation instructions."
19267
msgstr ""
19268
19269
#: serverguide/C/lamp-applications.xml:297(para)
19270
msgid ""
19271
"To install <application>MediaWiki</application>, run the following command "
19272
"in the command prompt:"
19273
msgstr ""
19274
19275
#: serverguide/C/lamp-applications.xml:303(command)
19276
msgid "sudo apt-get install mediawiki php5-gd"
19277
msgstr ""
19278
19279
#: serverguide/C/lamp-applications.xml:306(para)
19280
msgid ""
19281
"For additional <application>MediaWiki</application> functionality see the "
19282
"<application>mediawiki-extensions</application> package."
19283
msgstr ""
19284
19285
#: serverguide/C/lamp-applications.xml:316(para)
19286
msgid ""
19287
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19288
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19289
"directory. You should uncomment the following line in this file to access "
19290
"MediaWiki application."
19291
msgstr ""
19292
19293
#: serverguide/C/lamp-applications.xml:324(screen)
19294
#, no-wrap
19295
msgid ""
19296
"\n"
19297
"# Alias /mediawiki /var/lib/mediawiki\n"
19298
msgstr ""
19299
19300
#: serverguide/C/lamp-applications.xml:328(para)
19301
msgid ""
19302
"After you uncomment the above line, restart Apache server and access "
19303
"MediaWiki using the following url:"
19304
msgstr ""
19305
19306
#: serverguide/C/lamp-applications.xml:333(programlisting)
19307
#, no-wrap
19308
msgid ""
19309
"\n"
19310
"http://localhost/mediawiki/config/index.php\n"
19311
msgstr ""
19312
19313
#: serverguide/C/lamp-applications.xml:338(para)
19314
msgid ""
19315
"Please read the <quote>Checking environment...</quote> section in this page. "
19316
"You should be able to fix many issues by carefully reading this section."
19317
msgstr ""
19318
19319
#: serverguide/C/lamp-applications.xml:345(para)
19320
msgid ""
19321
"Once the configuration is complete, you should copy the "
19322
"<filename>LocalSettings.php</filename> file to "
19323
"<filename>/etc/mediawiki</filename> directory:"
19324
msgstr ""
19325
19326
#: serverguide/C/lamp-applications.xml:352(command)
19327
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19328
msgstr ""
19329
19330
#: serverguide/C/lamp-applications.xml:355(para)
19331
msgid ""
19332
"You may also want to edit "
19333
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19334
msgstr ""
19335
19336
#: serverguide/C/lamp-applications.xml:360(programlisting)
19337
#, no-wrap
19338
msgid ""
19339
"\n"
19340
"ini_set( 'memory_limit', '64M' );\n"
19341
msgstr ""
19342
19343
#: serverguide/C/lamp-applications.xml:367(title)
19344
msgid "Extensions"
19345
msgstr ""
19346
19347
#: serverguide/C/lamp-applications.xml:368(para)
19348
msgid ""
19349
"The extensions add new features and enhancements for the MediaWiki "
19350
"application. The extensions give wiki administrators and end users the "
19351
"ability to customize MediaWiki to their requirements."
19352
msgstr ""
19353
19354
#: serverguide/C/lamp-applications.xml:374(para)
19355
msgid ""
19356
"You can download MediaWiki extensions as an archive file or checkout from "
19357
"the Subversion repository. You should copy it to "
19358
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19359
"also add the following line at the end of file: "
19360
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19361
msgstr ""
19362
19363
#: serverguide/C/lamp-applications.xml:382(programlisting)
19364
#, no-wrap
19365
msgid ""
19366
"\n"
19367
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19368
msgstr ""
19369
19370
#: serverguide/C/lamp-applications.xml:392(para)
19371
msgid ""
19372
"For more details, please refer to the <ulink "
19373
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19374
msgstr ""
19375
19376
#: serverguide/C/lamp-applications.xml:398(para)
19377
msgid ""
19378
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19379
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19380
"new MediaWiki administrators."
19381
msgstr ""
19382
19383
#: serverguide/C/lamp-applications.xml:404(para)
19384
msgid ""
19385
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19386
"Wiki MediaWiki</ulink> page is a good resource."
19387
msgstr ""
19388
19389
#: serverguide/C/lamp-applications.xml:414(title)
19390
msgid "phpMyAdmin"
19391
msgstr ""
19392
19393
#: serverguide/C/lamp-applications.xml:416(para)
19394
msgid ""
19395
"<application>phpMyAdmin</application> is a LAMP application specifically "
19396
"written for administering <application>MySQL</application> servers. Written "
19397
"in <application>PHP</application>, and accessed through a web browser, "
19398
"phpMyAdmin provides a graphical interface for database administration tasks."
19399
msgstr ""
19400
19401
#: serverguide/C/lamp-applications.xml:425(para)
19402
msgid ""
19403
"Before installing <application>phpMyAdmin</application> you will need access "
19404
"to a <application>MySQL</application> database either on the same host as "
19405
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19406
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19407
"enter:"
19408
msgstr ""
19409
19410
#: serverguide/C/lamp-applications.xml:432(command)
19411
msgid "sudo apt-get install phpmyadmin"
19412
msgstr ""
19413
19414
#: serverguide/C/lamp-applications.xml:435(para)
19415
msgid ""
19416
"At the prompt choose which web server to be configured for "
19417
"<application>phpMyAdmin</application>. The rest of this section will use "
19418
"<application>Apache2</application> for the web server."
19419
msgstr ""
19420
19421
#: serverguide/C/lamp-applications.xml:440(para)
19422
msgid ""
19423
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19424
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19425
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19426
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19427
"user if you any setup, and enter the <application>MySQL</application> user's "
19428
"password."
19429
msgstr ""
19430
19431
#: serverguide/C/lamp-applications.xml:447(para)
19432
msgid ""
19433
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19434
"needed, create users, create/destroy databases and tables, etc."
19435
msgstr ""
19436
19437
#: serverguide/C/lamp-applications.xml:455(para)
19438
msgid ""
19439
"The configuration files for <application>phpMyAdmin</application> are "
19440
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19441
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19442
"configuration options that apply globally to "
19443
"<application>phpMyAdmin</application>."
19444
msgstr ""
19445
19446
#: serverguide/C/lamp-applications.xml:461(para)
19447
msgid ""
19448
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19449
"hosted on another server, adjust the following in "
19450
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19451
msgstr ""
19452
19453
#: serverguide/C/lamp-applications.xml:466(programlisting)
19454
#, no-wrap
19455
msgid ""
19456
"\n"
19457
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19458
msgstr ""
19459
19460
#: serverguide/C/lamp-applications.xml:471(para)
19461
msgid ""
19462
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19463
"remote database server name or IP address. Also, be sure that the "
19464
"<application>phpMyAdmin</application> host has permissions to access the "
19465
"remote database."
19466
msgstr ""
19467
19468
#: serverguide/C/lamp-applications.xml:477(para)
19469
msgid ""
19470
"Once configured, log out of <application>phpMyAdmin</application> and back "
19471
"in, and you should be accessing the new server."
19472
msgstr ""
19473
19474
#: serverguide/C/lamp-applications.xml:481(para)
19475
msgid ""
19476
"The <filename>config.header.inc.php</filename> and "
19477
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19478
"header and footer to <application>phpMyAdmin</application>."
19479
msgstr ""
19480
19481
#: serverguide/C/lamp-applications.xml:486(para)
19482
msgid ""
19483
"Another important configuration file is "
19484
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19485
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19486
"configure <application>Apache2</application> to serve the "
19487
"<application>phpMyAdmin</application> site. The file contains directives for "
19488
"loading <application>PHP</application>, directory permissions, etc. For more "
19489
"information on configuring <application>Apache2</application> see <xref "
19490
"linkend=\"httpd\"/>."
19491
msgstr ""
19492
19493
#: serverguide/C/lamp-applications.xml:500(para)
19494
msgid ""
19495
"The <application>phpMyAdmin</application> documentation comes installed with "
19496
"the package and can be accessed from the <emphasis>phpMyAdmin "
19497
"Documentation</emphasis> link (a question mark with a box around it) under "
19498
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19499
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19500
msgstr ""
19501
19502
#: serverguide/C/lamp-applications.xml:507(para)
19503
msgid ""
19504
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19505
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19506
msgstr ""
19507
19508
#: serverguide/C/lamp-applications.xml:512(para)
19509
msgid ""
19510
"A third resource is the <ulink "
19511
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19512
"Wiki</ulink> page."
19513
msgstr ""
19514
19515
#: serverguide/C/introduction.xml:14(para)
19516
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19517
msgstr ""
19518
19519
#: serverguide/C/introduction.xml:15(para)
19520
msgid ""
19521
"Here you can find information on how to install and configure various server "
19522
"applications. It is a step-by-step, task-oriented guide for configuring and "
19523
"customizing your system."
19524
msgstr ""
19525
19526
#: serverguide/C/introduction.xml:19(para)
19527
msgid ""
19528
"This guide assumes you have a basic understanding of your Ubuntu system. "
19529
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19530
"but if you need detailed instructions installing Ubuntu please refer to the "
19531
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19532
"Installation Guide</ulink>."
19533
msgstr ""
19534
19535
#: serverguide/C/introduction.xml:25(para)
19536
msgid ""
19537
"A HTML version of the manual is available online at <ulink "
19538
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19539
"HTML files are also available in the <application>ubuntu-"
19540
"serverguide</application> package. See <xref linkend=\"package-"
19541
"management\"/> for details on installing packages."
19542
msgstr ""
19543
19544
#: serverguide/C/introduction.xml:32(para)
19545
msgid ""
19546
"If you choose to install the <application>ubuntu-serverguide</application> "
19547
"you can view this document from a console by:"
19548
msgstr ""
19549
19550
#: serverguide/C/introduction.xml:36(command)
19551
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19552
msgstr ""
19553
19554
#: serverguide/C/introduction.xml:39(para)
19555
msgid ""
19556
"If you are using a localized version of Ubuntu, replace "
19557
"<emphasis>C</emphasis> with your language localization (e.g. "
19558
"<emphasis>en_GB</emphasis>)."
19559
msgstr ""
19560
19561
#: serverguide/C/introduction.xml:53(title)
19562
msgid "Support"
19563
msgstr ""
19564
19565
#: serverguide/C/introduction.xml:55(para)
19566
msgid ""
19567
"There are a couple of different ways that Ubuntu Server Edition is "
19568
"supported, commercial support and community support. The main commercial "
19569
"support (and development funding) is available from Canonical Ltd. They "
19570
"supply reasonably priced support contracts on a per desktop or per server "
19571
"basis. For more information see the <ulink "
19572
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19573
"page."
19574
msgstr ""
19575
19576
#: serverguide/C/introduction.xml:62(para)
19577
msgid ""
19578
"Community support is also provided by dedicated individuals, and companies, "
19579
"that wish to make Ubuntu the best distribution possible. Support is provided "
19580
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19581
"large amount of information available can be overwhelming, but a good search "
19582
"engine query can usually provide an answer to your questions. See the <ulink "
19583
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19584
"information."
19585
msgstr ""
19586
19587
#: serverguide/C/installation.xml:14(para)
19588
msgid ""
19589
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
19590
"Edition. For more detailed instructions, please refer to the <ulink "
19591
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19592
"Installation Guide</ulink>."
19593
msgstr ""
19594
19595
#: serverguide/C/installation.xml:19(title)
19596
msgid "Preparing to Install"
19597
msgstr ""
19598
19599
#: serverguide/C/installation.xml:20(para)
19600
msgid ""
19601
"This section explains various aspects to consider before starting the "
19602
"installation."
19603
msgstr ""
19604
19605
#: serverguide/C/installation.xml:24(title)
19606
msgid "System Requirements"
19607
msgstr ""
19608
19609
#: serverguide/C/installation.xml:25(para)
19610
msgid ""
19611
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
19612
"x86 and AMD64. The table below lists recommended hardware specifications. "
19613
"Depending on your needs, you might manage with less than this. However, most "
19614
"users risk being frustrated if they ignore these suggestions."
19615
msgstr ""
19616
19617
#: serverguide/C/installation.xml:27(title)
19618
msgid "Recommended Minimum Requirements"
19619
msgstr ""
19620
19621
#: serverguide/C/installation.xml:35(para)
19622
msgid "Install Type"
19623
msgstr ""
19624
19625
#: serverguide/C/installation.xml:36(para)
19626
msgid "RAM"
19627
msgstr ""
19628
19629
#: serverguide/C/installation.xml:37(para)
19630
msgid "Hard Drive Space"
19631
msgstr ""
19632
19633
#: serverguide/C/installation.xml:40(para)
19634
msgid "Base System"
19635
msgstr ""
19636
19637
#: serverguide/C/installation.xml:41(para)
19638
msgid "All Tasks Installed"
19639
msgstr ""
19640
19641
#: serverguide/C/installation.xml:46(para)
19642
msgid "Server"
19643
msgstr ""
19644
19645
#: serverguide/C/installation.xml:47(para)
19646
msgid "128 megabytes"
19647
msgstr ""
19648
19649
#: serverguide/C/installation.xml:48(para)
19650
msgid "500 megabytes"
19651
msgstr ""
19652
19653
#: serverguide/C/installation.xml:49(para)
19654
msgid "1 gigabyte"
19655
msgstr ""
19656
19657
#: serverguide/C/installation.xml:54(para)
19658
msgid ""
19659
"The Server Edition provides a common base for all sorts of server "
19660
"applications. It is a minimalist design providing a platform for the desired "
19661
"services, such as file/print services, web hosting, email hosting, etc."
19662
msgstr ""
19663
19664
#: serverguide/C/installation.xml:60(para)
19665
msgid ""
19666
"The requirements for UEC are slightly different for Front End requirements "
19667
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
19668
"requirements see <xref linkend=\"uec-node-requirements\"/>."
19669
msgstr ""
19670
19671
#: serverguide/C/installation.xml:68(title)
19672
msgid "Server and Desktop Differences"
19673
msgstr ""
19674
19675
#: serverguide/C/installation.xml:69(para)
19676
msgid ""
19677
"There are a few differences between the <emphasis>Ubuntu Server "
19678
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
19679
"should be noted that both editions use the same "
19680
"<application>apt</application> repositories. Making it just as easy to "
19681
"install a <emphasis role=\"italic\">server</emphasis> application on the "
19682
"Desktop Edition as it is on the Server Edition."
19683
msgstr ""
19684
19685
#: serverguide/C/installation.xml:75(para)
19686
msgid ""
19687
"The differences between the two editions are the lack of an X window "
19688
"environment in the Server Edition, the installation process, and different "
19689
"Kernel options."
19690
msgstr ""
19691
19692
#: serverguide/C/installation.xml:82(title)
19693
msgid "Kernel Differences:"
19694
msgstr ""
19695
19696
#: serverguide/C/installation.xml:85(para)
19697
msgid ""
19698
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
19699
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
19700
"Edition."
19701
msgstr ""
19702
19703
#: serverguide/C/installation.xml:91(para)
19704
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
19705
msgstr ""
19706
19707
#: serverguide/C/installation.xml:96(para)
19708
msgid ""
19709
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
19710
"Desktop Edition."
19711
msgstr ""
19712
19713
#: serverguide/C/installation.xml:102(para)
19714
msgid ""
19715
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
19716
"limited by memory addressing space."
19717
msgstr ""
19718
19719
#: serverguide/C/installation.xml:107(para)
19720
msgid ""
19721
"To see all kernel configuration options you can look through "
19722
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
19723
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
19724
"great resource on the options available."
19725
msgstr ""
19726
19727
#: serverguide/C/installation.xml:116(title)
19728
msgid "Backing Up"
19729
msgstr ""
19730
19731
#: serverguide/C/installation.xml:119(para)
19732
msgid ""
19733
"Before installing <application>Ubuntu Server Edition</application> you "
19734
"should make sure all data on the system is backed up. See <xref "
19735
"linkend=\"backups\"/> for backup options."
19736
msgstr ""
19737
19738
#: serverguide/C/installation.xml:123(para)
19739
msgid ""
19740
"If this is not the first time an operating system has been installed on your "
19741
"computer, it is likely you will need to re-partition your disk to make room "
19742
"for Ubuntu."
19743
msgstr ""
19744
19745
#: serverguide/C/installation.xml:127(para)
19746
msgid ""
19747
"Any time you partition your disk, you should be prepared to lose everything "
19748
"on the disk should you make a mistake or something goes wrong during "
19749
"partitioning. The programs used in installation are quite reliable, most "
19750
"have seen years of use, but they also perform destructive actions."
19751
msgstr ""
19752
19753
#: serverguide/C/installation.xml:139(title)
19754
msgid "Installing from CD"
19755
msgstr ""
19756
19757
#: serverguide/C/installation.xml:140(para)
19758
msgid ""
19759
"The basic steps to install Ubuntu Server Edition from CD are the same for "
19760
"installing any operating system from CD. Unlike the <emphasis>Desktop "
19761
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
19762
"a graphical installation program. Instead the Server Edition uses a console "
19763
"menu based process."
19764
msgstr ""
19765
19766
#: serverguide/C/installation.xml:147(para)
19767
msgid ""
19768
"First, download and burn the appropriate ISO file from the <ulink "
19769
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
19770
msgstr ""
19771
19772
#: serverguide/C/installation.xml:153(para)
19773
msgid "Boot the system from the CD-ROM drive."
19774
msgstr ""
19775
19776
#: serverguide/C/installation.xml:158(para)
19777
msgid ""
19778
"At the boot prompt you will be asked to select the language. Afterwards the "
19779
"installation process begins by asking for your keyboard layout."
19780
msgstr ""
19781
19782
#: serverguide/C/installation.xml:164(para)
19783
msgid ""
19784
"From the main boot menu there are some additional options to install Ubuntu "
19785
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
19786
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
19787
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
19788
"will cover the basic Ubuntu Server install."
19789
msgstr ""
19790
19791
#: serverguide/C/installation.xml:172(para)
19792
msgid ""
19793
"The installer then discovers your hardware configuration, and configures the "
19794
"network settings using DHCP. If you do not wish to use DHCP at the next "
19795
"screen choose \"Go Back\", and you have the option to \"Configure the "
19796
"network manually\"."
19797
msgstr ""
19798
19799
#: serverguide/C/installation.xml:179(para)
19800
msgid "Next, the installer asks for the system's hostname and Time Zone."
19801
msgstr ""
19802
19803
#: serverguide/C/installation.xml:184(para)
19804
msgid ""
19805
"You can then choose from several options to configure the hard drive layout. "
19806
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
19807
msgstr ""
19808
19809
#: serverguide/C/installation.xml:190(para)
19810
msgid "The Ubuntu base system is then installed."
19811
msgstr ""
19812
19813
#: serverguide/C/installation.xml:195(para)
19814
msgid ""
19815
"A new user is setup, this user will have <emphasis>root</emphasis> access "
19816
"through the <application>sudo</application> utility."
19817
msgstr ""
19818
19819
#: serverguide/C/installation.xml:201(para)
19820
msgid ""
19821
"After the user is setup, you will be asked to encrypt your <filename "
19822
"role=\"directory\">home</filename> directory."
19823
msgstr ""
19824
19825
#: serverguide/C/installation.xml:207(para)
19826
msgid ""
19827
"The next step in the installation process is to decide how you want to "
19828
"update the system. There are three options:"
19829
msgstr ""
19830
19831
#: serverguide/C/installation.xml:213(para)
19832
msgid ""
19833
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
19834
"log into the machine and manually install updates."
19835
msgstr ""
19836
19837
#: serverguide/C/installation.xml:219(para)
19838
msgid ""
19839
"<emphasis>Install security updates Automatically</emphasis>: will install "
19840
"the <application>unattended-upgrades</application> package, which will "
19841
"install security updates without the intervention of an administrator. For "
19842
"more details see <xref linkend=\"automatic-updates\"/>."
19843
msgstr ""
19844
19845
#: serverguide/C/installation.xml:226(para)
19846
msgid ""
19847
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
19848
"service provided by Canonical to help manage your Ubuntu machines. See the "
19849
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
19850
"site for details."
19851
msgstr ""
19852
19853
#: serverguide/C/installation.xml:235(para)
19854
msgid ""
19855
"You now have the option to install, or not install, several package tasks. "
19856
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
19857
"to launch <application>aptitude</application> to choose specific packages to "
19858
"install. For more information see <xref linkend=\"aptitude\"/>."
19859
msgstr ""
19860
19861
#: serverguide/C/installation.xml:243(para)
19862
msgid "Finally, the last step before rebooting is to set the clock to UTC."
19863
msgstr ""
19864
19865
#: serverguide/C/installation.xml:249(para)
19866
msgid ""
19867
"If at any point during installation you are not satisfied by the default "
19868
"setting, use the \"Go Back\" function at any prompt to be brought to a "
19869
"detailed installation menu that will allow you to modify the default "
19870
"settings."
19871
msgstr ""
19872
19873
#: serverguide/C/installation.xml:254(para)
19874
msgid ""
19875
"At some point during the installation process you may want to read the help "
19876
"screen provided by the installation system. To do this, press F1."
19877
msgstr ""
19878
19879
#: serverguide/C/installation.xml:259(para)
19880
msgid ""
19881
"Once again, for detailed instructions see the <ulink "
19882
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
19883
"Installation Guide</ulink>."
19884
msgstr ""
19885
19886
#: serverguide/C/installation.xml:265(title)
19887
msgid "Package Tasks"
19888
msgstr ""
19889
19890
#: serverguide/C/installation.xml:266(para)
19891
msgid ""
19892
"During the Server Edition installation you have the option of installing "
19893
"additional packages from the CD. The packages are grouped by the type of "
19894
"service they provide."
19895
msgstr ""
19896
19897
#: serverguide/C/installation.xml:272(para)
19898
msgid "Cloud computing: Walrus storage service"
19899
msgstr ""
19900
19901
#: serverguide/C/installation.xml:277(para)
19902
msgid "Cloud computing: all-in-one cluster"
19903
msgstr ""
19904
19905
#: serverguide/C/installation.xml:282(para)
19906
msgid "Cloud computing: Cluster controller"
19907
msgstr ""
19908
19909
#: serverguide/C/installation.xml:287(para)
19910
msgid "Cloud computing: Node controller"
19911
msgstr ""
19912
19913
#: serverguide/C/installation.xml:292(para)
19914
msgid "Cloud computing: Storage controller"
19915
msgstr ""
19916
19917
#: serverguide/C/installation.xml:297(para)
19918
msgid "Cloud computing: top-level cloud controller"
19919
msgstr ""
19920
19921
#: serverguide/C/installation.xml:302(para)
19922
msgid "DNS server: Selects the BIND DNS server and its documentation."
19923
msgstr ""
19924
19925
#: serverguide/C/installation.xml:307(para)
19926
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
19927
msgstr ""
19928
19929
#: serverguide/C/installation.xml:312(para)
19930
msgid ""
19931
"Mail server: This task selects a variety of package useful for a general "
19932
"purpose mail server system."
19933
msgstr ""
19934
19935
#: serverguide/C/installation.xml:317(para)
19936
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
19937
msgstr ""
19938
19939
#: serverguide/C/installation.xml:322(para)
19940
msgid ""
19941
"PostgreSQL database: This task selects client and server packages for the "
19942
"PostgreSQL database."
19943
msgstr ""
19944
19945
#: serverguide/C/installation.xml:327(para)
19946
msgid "Print server: This task sets up your system to be a print server."
19947
msgstr ""
19948
19949
#: serverguide/C/installation.xml:332(para)
19950
msgid ""
19951
"Samba File server: This task sets up your system to be a Samba file server, "
19952
"which is especially suitable in networks with both Windows and Linux systems."
19953
msgstr ""
19954
19955
#: serverguide/C/installation.xml:338(para)
19956
msgid ""
19957
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
19958
"etc."
19959
msgstr ""
19960
19961
#: serverguide/C/installation.xml:343(para)
19962
msgid ""
19963
"Virtual machine host: Includes packages needed to run KVM virtual machines."
19964
msgstr ""
19965
19966
#: serverguide/C/installation.xml:348(para)
19967
msgid ""
19968
"Manually select packages: Executes <application>apptitude</application> "
19969
"allowing you to individually select packages."
19970
msgstr ""
19971
19972
#: serverguide/C/installation.xml:353(para)
19973
msgid ""
19974
"Installing the package groups is accomplished using the "
19975
"<application>tasksel</application> utility. One of the important difference "
19976
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
19977
"installed, a package is also configured to reasonable defaults, eventually "
19978
"prompting you for additional required information. Likewise, when installing "
19979
"a task, the packages are not only installed, but also configured to provided "
19980
"a fully integrated service."
19981
msgstr ""
19982
19983
#: serverguide/C/installation.xml:360(para)
19984
msgid ""
19985
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
19986
"<xref linkend=\"uec\"/>."
19987
msgstr ""
19988
19989
#: serverguide/C/installation.xml:363(para)
19990
msgid ""
19991
"Once the installation process has finished you can view a list of available "
19992
"tasks by entering the following from a terminal prompt:"
19993
msgstr ""
19994
19995
#: serverguide/C/installation.xml:368(command)
19996
msgid "tasksel --list-tasks"
19997
msgstr ""
19998
19999
#: serverguide/C/installation.xml:371(para)
20000
msgid ""
20001
"The output will list tasks from other Ubuntu based distributions such as "
20002
"Kubuntu and Edubuntu. Note that you can also invoke the "
20003
"<command>tasksel</command> command by itself, which will bring up a menu of "
20004
"the different tasks available."
20005
msgstr ""
20006
20007
#: serverguide/C/installation.xml:377(para)
20008
msgid ""
20009
"You can view a list of which packages are installed with each task using the "
20010
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20011
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20012
"following:"
20013
msgstr ""
20014
20015
#: serverguide/C/installation.xml:382(command)
20016
msgid "tasksel --task-packages dns-server"
20017
msgstr ""
20018
20019
#: serverguide/C/installation.xml:384(para)
20020
msgid "The output of the command should list:"
20021
msgstr ""
20022
20023
#: serverguide/C/installation.xml:387(programlisting)
20024
#, no-wrap
20025
msgid ""
20026
"\n"
20027
"bind9-doc \n"
20028
"bind9utils \n"
20029
"bind9\n"
20030
msgstr ""
20031
20032
#: serverguide/C/installation.xml:392(para)
20033
msgid ""
20034
"Also, if you did not install one of the tasks during the installation "
20035
"process, but for example you decide to make your new LAMP server a DNS "
20036
"server as well. Simply insert the installation CD and from a terminal:"
20037
msgstr ""
20038
20039
#: serverguide/C/installation.xml:397(command)
20040
msgid "sudo tasksel install dns-server"
20041
msgstr ""
20042
20043
#: serverguide/C/installation.xml:402(title)
20044
msgid "Upgrading"
20045
msgstr ""
20046
20047
#: serverguide/C/installation.xml:403(para)
20048
msgid ""
20049
"There are several ways to upgrade from one Ubuntu release to another. This "
20050
"section gives an overview of the recommended upgrade method."
20051
msgstr ""
20052
20053
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20054
msgid "do-release-upgrade"
20055
msgstr ""
20056
20057
#: serverguide/C/installation.xml:408(para)
20058
msgid ""
20059
"The recommended way to upgrade a Server Edition installation is to use the "
20060
"<application>do-release-upgrade</application> utility. Part of the "
20061
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20062
"graphical dependencies and is installed by default."
20063
msgstr ""
20064
20065
#: serverguide/C/installation.xml:413(para)
20066
msgid ""
20067
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20068
"upgrade</command>. However, using <application>do-release-"
20069
"upgrade</application> is recommended because it has the ability to handle "
20070
"system configuration changes sometimes needed between releases."
20071
msgstr ""
20072
20073
#: serverguide/C/installation.xml:418(para)
20074
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20075
msgstr ""
20076
20077
#: serverguide/C/installation.xml:424(para)
20078
msgid ""
20079
"It is also possible to use <application>do-release-upgrade</application> to "
20080
"upgrade to a development version of Ubuntu. To accomplish this use the "
20081
"<emphasis>-d</emphasis> switch:"
20082
msgstr ""
20083
20084
#: serverguide/C/installation.xml:429(command)
20085
msgid "do-release-upgrade -d"
20086
msgstr ""
20087
20088
#: serverguide/C/installation.xml:432(para)
20089
msgid ""
20090
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20091
"for production environments."
20092
msgstr ""
20093
20094
#: serverguide/C/installation.xml:439(title)
20095
msgid "Advanced Installation"
20096
msgstr ""
20097
20098
#: serverguide/C/installation.xml:442(title)
20099
msgid "Software RAID"
20100
msgstr ""
20101
20102
#: serverguide/C/installation.xml:444(para)
20103
msgid ""
20104
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20105
"the probability of catastrophic data loss in case of drive failure. RAID is "
20106
"implemented in either software (where the operating system knows about both "
20107
"drives and actively maintains both of them) or hardware (where a special "
20108
"controller makes the OS think there's only one drive and maintains the "
20109
"drives 'invisibly')."
20110
msgstr ""
20111
20112
#: serverguide/C/installation.xml:451(para)
20113
msgid ""
20114
"The RAID software included with current versions of Linux (and Ubuntu) is "
20115
"based on the <application>'mdadm'</application> driver and works very well, "
20116
"better even than many so-called 'hardware' RAID controllers. This section "
20117
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20118
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20119
"another for <emphasis>swap</emphasis>."
20120
msgstr ""
20121
20122
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20123
msgid ""
20124
"Follow the installation steps until you get to the <emphasis>Partition "
20125
"disks</emphasis> step, then:"
20126
msgstr ""
20127
20128
#: serverguide/C/installation.xml:468(para)
20129
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20130
msgstr ""
20131
20132
#: serverguide/C/installation.xml:475(para)
20133
msgid ""
20134
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20135
"partition table on this device?\"</emphasis>."
20136
msgstr ""
20137
20138
#: serverguide/C/installation.xml:479(para)
20139
msgid ""
20140
"Repeat this step for each drive you wish to be part of the RAID array."
20141
msgstr ""
20142
20143
#: serverguide/C/installation.xml:486(para)
20144
msgid ""
20145
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20146
"select <emphasis>\"Create a new partition\"</emphasis>."
20147
msgstr ""
20148
20149
#: serverguide/C/installation.xml:493(para)
20150
msgid ""
20151
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20152
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20153
"size is twice that of RAM. Enter the partition size, then choose "
20154
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20155
msgstr ""
20156
20157
#: serverguide/C/installation.xml:502(para)
20158
msgid ""
20159
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20160
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20161
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20162
"<emphasis>\"Done setting up partition\"</emphasis>."
20163
msgstr ""
20164
20165
#: serverguide/C/installation.xml:511(para)
20166
msgid ""
20167
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20168
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20169
"partition\"</emphasis>."
20170
msgstr ""
20171
20172
#: serverguide/C/installation.xml:519(para)
20173
msgid ""
20174
"Use the rest of the free space on the drive and choose "
20175
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20176
msgstr ""
20177
20178
#: serverguide/C/installation.xml:526(para)
20179
msgid ""
20180
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20181
"at the top, changing it to <emphasis>\"physical volume for "
20182
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20183
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20184
"<emphasis>\"Done setting up partition\"</emphasis>."
20185
msgstr ""
20186
20187
#: serverguide/C/installation.xml:536(para)
20188
msgid "Repeat steps three through eight for the other disk and partitions."
20189
msgstr ""
20190
20191
#: serverguide/C/installation.xml:545(title)
20192
msgid "RAID Configuration"
20193
msgstr ""
20194
20195
#: serverguide/C/installation.xml:547(para)
20196
msgid "With the partitions setup the arrays are ready to be configured:"
20197
msgstr ""
20198
20199
#: serverguide/C/installation.xml:554(para)
20200
msgid ""
20201
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20202
"Software RAID\"</emphasis> at the top."
20203
msgstr ""
20204
20205
#: serverguide/C/installation.xml:561(para)
20206
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20207
msgstr ""
20208
20209
#: serverguide/C/installation.xml:568(para)
20210
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20211
msgstr ""
20212
20213
#: serverguide/C/installation.xml:575(para)
20214
msgid ""
20215
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20216
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20217
msgstr ""
20218
20219
#: serverguide/C/installation.xml:581(para)
20220
msgid ""
20221
"In order to use <emphasis>RAID5</emphasis> you need at least "
20222
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20223
"<emphasis>two</emphasis> drives are required."
20224
msgstr ""
20225
20226
#: serverguide/C/installation.xml:590(para)
20227
msgid ""
20228
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20229
"of hard drives you have, for the array. Then select "
20230
"<emphasis>\"Continue\"</emphasis>."
20231
msgstr ""
20232
20233
#: serverguide/C/installation.xml:598(para)
20234
msgid ""
20235
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20236
"default, then choose <emphasis>\"Continue\"</emphasis>."
20237
msgstr ""
20238
20239
#: serverguide/C/installation.xml:605(para)
20240
msgid ""
20241
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20242
"etc. The numbers will usually match and the different letters correspond to "
20243
"different hard drives."
20244
msgstr ""
20245
20246
#: serverguide/C/installation.xml:610(para)
20247
msgid ""
20248
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20249
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20250
"go to the next step."
20251
msgstr ""
20252
20253
#: serverguide/C/installation.xml:618(para)
20254
msgid ""
20255
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20256
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20257
"and <emphasis>sdb2</emphasis>."
20258
msgstr ""
20259
20260
#: serverguide/C/installation.xml:626(para)
20261
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20262
msgstr ""
20263
20264
#: serverguide/C/installation.xml:636(title)
20265
msgid "Formatting"
20266
msgstr ""
20267
20268
#: serverguide/C/installation.xml:638(para)
20269
msgid ""
20270
"There should now be a list of hard drives and RAID devices. The next step is "
20271
"to format and set the mount point for the RAID devices. Treat the RAID "
20272
"device as a local hard drive, format and mount accordingly."
20273
msgstr ""
20274
20275
#: serverguide/C/installation.xml:646(para)
20276
msgid ""
20277
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20278
"#0\"</emphasis> partition."
20279
msgstr ""
20280
20281
#: serverguide/C/installation.xml:653(para)
20282
msgid ""
20283
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20284
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20285
msgstr ""
20286
20287
#: serverguide/C/installation.xml:661(para)
20288
msgid ""
20289
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20290
"#1\"</emphasis> partition."
20291
msgstr ""
20292
20293
#: serverguide/C/installation.xml:668(para)
20294
msgid ""
20295
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20296
"journaling file system\"</emphasis>."
20297
msgstr ""
20298
20299
#: serverguide/C/installation.xml:675(para)
20300
msgid ""
20301
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20302
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20303
"options as appropriate, then select <emphasis>\"Done setting up "
20304
"partition\"</emphasis>."
20305
msgstr ""
20306
20307
#: serverguide/C/installation.xml:683(para)
20308
msgid ""
20309
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20310
"disk\"</emphasis>."
20311
msgstr ""
20312
20313
#: serverguide/C/installation.xml:690(para)
20314
msgid ""
20315
"If you choose to place the root partition on a RAID array, the installer "
20316
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20317
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20318
msgstr ""
20319
20320
#: serverguide/C/installation.xml:695(para)
20321
msgid "The installation process will then continue normally."
20322
msgstr ""
20323
20324
#: serverguide/C/installation.xml:701(title)
20325
msgid "Degraded RAID"
20326
msgstr ""
20327
20328
#: serverguide/C/installation.xml:703(para)
20329
msgid ""
20330
"At some point in the life of the computer a disk failure event may occur. "
20331
"When this happens, using Software RAID, the operating system will place the "
20332
"array into what is known as a <emphasis>degraded</emphasis> state."
20333
msgstr ""
20334
20335
#: serverguide/C/installation.xml:708(para)
20336
msgid ""
20337
"If the array has become degraded, due to the chance of data corruption, by "
20338
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20339
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20340
"second prompt giving you the option to go ahead and boot the system, or "
20341
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20342
"the desired behavior, especially if the machine is in a remote location. "
20343
"Booting to a degraded array can be configured several ways:"
20344
msgstr ""
20345
20346
#: serverguide/C/installation.xml:719(para)
20347
msgid ""
20348
"The <application>dpkg-reconfigure</application> utility can be used to "
20349
"configure the default behavior, and during the process you will be queried "
20350
"about additional settings related to the array. Such as monitoring, email "
20351
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20352
"following:"
20353
msgstr ""
20354
20355
#: serverguide/C/installation.xml:726(command)
20356
msgid "sudo dpkg-reconfigure mdadm"
20357
msgstr ""
20358
20359
#: serverguide/C/installation.xml:732(para)
20360
msgid ""
20361
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20362
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20363
"The file has the advantage of being able to pre-configure the system's "
20364
"behavior, and can also be manually edited:"
20365
msgstr ""
20366
20367
#: serverguide/C/installation.xml:738(programlisting)
20368
#, no-wrap
20369
msgid ""
20370
"\n"
20371
"BOOT_DEGRADED=true\n"
20372
msgstr ""
20373
20374
#: serverguide/C/installation.xml:743(para)
20375
msgid "The configuration file can be overridden by using a Kernel argument."
20376
msgstr ""
20377
20378
#: serverguide/C/installation.xml:751(para)
20379
msgid ""
20380
"Using a Kernel argument will allow the system to boot to a degraded array as "
20381
"well:"
20382
msgstr ""
20383
20384
#: serverguide/C/installation.xml:757(para)
20385
msgid ""
20386
"When the server is booting press <keycap>Shift</keycap> to open the "
20387
"<application>Grub</application> menu."
20388
msgstr ""
20389
20390
#: serverguide/C/installation.xml:762(para)
20391
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20392
msgstr ""
20393
20394
#: serverguide/C/installation.xml:767(para)
20395
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20396
msgstr ""
20397
20398
#: serverguide/C/installation.xml:772(para)
20399
msgid ""
20400
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20401
"end of the line."
20402
msgstr ""
20403
20404
#: serverguide/C/installation.xml:777(para)
20405
msgid ""
20406
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20407
"the system."
20408
msgstr ""
20409
20410
#: serverguide/C/installation.xml:786(para)
20411
msgid ""
20412
"Once the system has booted you can either repair the array see <xref "
20413
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20414
"another machine due to major hardware failure."
20415
msgstr ""
20416
20417
#: serverguide/C/installation.xml:793(title)
20418
msgid "RAID Maintenance"
20419
msgstr ""
20420
20421
#: serverguide/C/installation.xml:795(para)
20422
msgid ""
20423
"The <application>mdadm</application> utility can be used to view the status "
20424
"of an array, add disks to an array, remove disks, etc:"
20425
msgstr ""
20426
20427
#: serverguide/C/installation.xml:802(para)
20428
msgid "To view the status of an array, from a terminal prompt enter:"
20429
msgstr ""
20430
20431
#: serverguide/C/installation.xml:806(command)
20432
msgid "sudo mdadm -D /dev/md0"
20433
msgstr ""
20434
20435
#: serverguide/C/installation.xml:809(para)
20436
msgid ""
20437
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20438
"display <emphasis>detailed</emphasis> information about the "
20439
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20440
"with the appropriate RAID device."
20441
msgstr ""
20442
20443
#: serverguide/C/installation.xml:815(para)
20444
msgid "To view the status of a disk in an array:"
20445
msgstr ""
20446
20447
#: serverguide/C/installation.xml:819(command)
20448
msgid "sudo mdadm -E /dev/sda1"
20449
msgstr ""
20450
20451
#: serverguide/C/installation.xml:821(para)
20452
msgid ""
20453
"The output if very similar to the <command>mdadm -D</command> command, "
20454
"adjust <filename>/dev/sda1</filename> for each disk."
20455
msgstr ""
20456
20457
#: serverguide/C/installation.xml:826(para)
20458
msgid "If a disk fails and needs to be removed from an array enter:"
20459
msgstr ""
20460
20461
#: serverguide/C/installation.xml:830(command)
20462
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20463
msgstr ""
20464
20465
#: serverguide/C/installation.xml:832(para)
20466
msgid ""
20467
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20468
"the appropriate RAID device and disk."
20469
msgstr ""
20470
20471
#: serverguide/C/installation.xml:837(para)
20472
msgid "Similarly, to add a new disk:"
20473
msgstr ""
20474
20475
#: serverguide/C/installation.xml:841(command)
20476
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20477
msgstr ""
20478
20479
#: serverguide/C/installation.xml:846(para)
20480
msgid ""
20481
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20482
"though there is nothing physically wrong with the drive. It is usually "
20483
"worthwhile to remove the drive from the array then re-add it. This will "
20484
"cause the drive to re-sync with the array. If the drive will not sync with "
20485
"the array, it is a good indication of hardware failure."
20486
msgstr ""
20487
20488
#: serverguide/C/installation.xml:852(para)
20489
msgid ""
20490
"The <filename>/proc/mdstat</filename> file also contains useful information "
20491
"about the system's RAID devices:"
20492
msgstr ""
20493
20494
#: serverguide/C/installation.xml:857(command)
20495
msgid "cat /proc/mdstat"
20496
msgstr ""
20497
20498
#: serverguide/C/installation.xml:858(computeroutput)
20499
#, no-wrap
20500
msgid ""
20501
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20502
"[raid10] \n"
20503
"md0 : active raid1 sda1[0] sdb1[1]\n"
20504
" 10016384 blocks [2/2] [UU]\n"
20505
" \n"
20506
"unused devices: <none>"
20507
msgstr ""
20508
20509
#: serverguide/C/installation.xml:865(para)
20510
msgid ""
20511
"The following command is great for watching the status of a syncing drive:"
20512
msgstr ""
20513
20514
#: serverguide/C/installation.xml:870(command)
20515
msgid "watch -n1 cat /proc/mdstat"
20516
msgstr ""
20517
20518
#: serverguide/C/installation.xml:873(para)
20519
msgid ""
20520
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20521
"<application>watch</application> command."
20522
msgstr ""
20523
20524
#: serverguide/C/installation.xml:877(para)
20525
msgid ""
20526
"If you do need to replace a faulty drive, after the drive has been replaced "
20527
"and synced, <application>grub</application> will need to be installed. To "
20528
"install <application>grub</application> on the new drive, enter the "
20529
"following:"
20530
msgstr ""
20531
20532
#: serverguide/C/installation.xml:883(command)
20533
msgid "sudo grub-install /dev/md0"
20534
msgstr ""
20535
20536
#: serverguide/C/installation.xml:886(para)
20537
msgid ""
20538
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20539
msgstr ""
20540
20541
#: serverguide/C/installation.xml:894(para)
20542
msgid ""
20543
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20544
"can be configured. Please see the following links for more information:"
20545
msgstr ""
20546
20547
#: serverguide/C/installation.xml:901(para)
20548
msgid ""
20549
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20550
"Wiki Articles on RAID</ulink>."
20551
msgstr ""
20552
20553
#: serverguide/C/installation.xml:907(ulink)
20554
msgid "Software RAID HOWTO"
20555
msgstr ""
20556
20557
#: serverguide/C/installation.xml:912(ulink)
20558
msgid "Managing RAID on Linux"
20559
msgstr ""
20560
20561
#: serverguide/C/installation.xml:919(title)
20562
msgid "Logical Volume Manager (LVM)"
20563
msgstr ""
20564
20565
#: serverguide/C/installation.xml:921(para)
20566
msgid ""
20567
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20568
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20569
"hard disks. LVM volumes can be created on both software RAID partitions and "
20570
"standard partitions residing on a single disk. Volumes can also be extended, "
20571
"giving greater flexibility to systems as requirements change."
20572
msgstr ""
20573
20574
#: serverguide/C/installation.xml:930(para)
20575
msgid ""
20576
"A side effect of LVM's power and flexibility is a greater degree of "
20577
"complication. Before diving into the LVM installation process, it is best to "
20578
"get familiar with some terms."
20579
msgstr ""
20580
20581
#: serverguide/C/installation.xml:937(para)
20582
msgid ""
20583
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20584
"Volumes (LV)."
20585
msgstr ""
20586
20587
#: serverguide/C/installation.xml:942(para)
20588
msgid ""
20589
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
20590
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
20591
"which resides the actual EXT3, XFS, JFS, etc filesystem."
20592
msgstr ""
20593
20594
#: serverguide/C/installation.xml:948(para)
20595
msgid ""
20596
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
20597
"RAID partition. The Volume Group can be extended by adding more PVs."
20598
msgstr ""
20599
20600
#: serverguide/C/installation.xml:959(para)
20601
msgid ""
20602
"As an example this section covers installing Ubuntu Server Edition with "
20603
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
20604
"the initial install only one Physical Volume (PV) will be part of the Volume "
20605
"Group (VG). Another PV will be added after install to demonstrate how a VG "
20606
"can be extended."
20607
msgstr ""
20608
20609
#: serverguide/C/installation.xml:965(para)
20610
msgid ""
20611
"There are several installation options for LVM, <emphasis>\"Guided - use the "
20612
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
20613
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
20614
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
20615
"partitions and configure LVM. At this time the only way to configure a "
20616
"system with both LVM and standard partitions, during installation, is to use "
20617
"the Manual approach."
20618
msgstr ""
20619
20620
#: serverguide/C/installation.xml:982(para)
20621
msgid ""
20622
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
20623
"<emphasis>\"Manual\"</emphasis>."
20624
msgstr ""
20625
20626
#: serverguide/C/installation.xml:989(para)
20627
msgid ""
20628
"Select the hard disk and on the next screen choose \"yes\" to "
20629
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
20630
msgstr ""
20631
20632
#: serverguide/C/installation.xml:996(para)
20633
msgid ""
20634
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
20635
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
20636
msgstr ""
20637
20638
#: serverguide/C/installation.xml:1004(para)
20639
msgid ""
20640
"For the LVM <emphasis>/srv</emphasis>, create a new "
20641
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
20642
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
20643
"<emphasis>\"Done setting up the partition\"</emphasis>."
20644
msgstr ""
20645
20646
#: serverguide/C/installation.xml:1012(para)
20647
msgid ""
20648
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
20649
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
20650
"disk."
20651
msgstr ""
20652
20653
#: serverguide/C/installation.xml:1020(para)
20654
msgid ""
20655
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
20656
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
20657
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
20658
"After entering a name, select the partition configured for LVM, and choose "
20659
"<emphasis>\"Continue\"</emphasis>."
20660
msgstr ""
20661
20662
#: serverguide/C/installation.xml:1029(para)
20663
msgid ""
20664
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
20665
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
20666
"volume group, and enter a name for the new LV, for example "
20667
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
20668
"a size, which may be the full partition because it can always be extended "
20669
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
20670
"main <emphasis>\"Partition Disks\"</emphasis> screen."
20671
msgstr ""
20672
20673
#: serverguide/C/installation.xml:1039(para)
20674
msgid ""
20675
"Now add a filesystem to the new LVM. Select the partition under "
20676
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
20677
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
20678
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
20679
"select <emphasis>\"Done setting up the partition\"</emphasis>."
20680
msgstr ""
20681
20682
#: serverguide/C/installation.xml:1048(para)
20683
msgid ""
20684
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20685
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
20686
"the installation."
20687
msgstr ""
20688
20689
#: serverguide/C/installation.xml:1056(para)
20690
msgid "There are some useful utilities to view information about LVM:"
20691
msgstr ""
20692
20693
#: serverguide/C/installation.xml:1061(para)
20694
msgid ""
20695
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
20696
msgstr ""
20697
20698
#: serverguide/C/installation.xml:1062(para)
20699
msgid ""
20700
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
20701
msgstr ""
20702
20703
#: serverguide/C/installation.xml:1063(para)
20704
msgid ""
20705
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
20706
"Physical Volumes."
20707
msgstr ""
20708
20709
#: serverguide/C/installation.xml:1068(title)
20710
msgid "Extending Volume Groups"
20711
msgstr ""
20712
20713
#: serverguide/C/installation.xml:1070(para)
20714
msgid ""
20715
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
20716
"section covers adding a second hard disk, creating a Physical Volume (PV), "
20717
"adding it to the volume group (VG), extending the logical volume <filename "
20718
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
20719
"example assumes a second hard disk has been added to the system. This hard "
20720
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
20721
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
20722
"before issuing the commands below. You could lose some data if you issue "
20723
"those commands on a non-empty disk. In our example we will use the entire "
20724
"disk as a physical volume (you could choose to create partitions and use "
20725
"them as different physical volumes)"
20726
msgstr ""
20727
20728
#: serverguide/C/installation.xml:1082(para)
20729
msgid "First, create the physical volume, in a terminal execute:"
20730
msgstr ""
20731
20732
#: serverguide/C/installation.xml:1087(command)
20733
msgid "sudo pvcreate /dev/sdb"
20734
msgstr ""
20735
20736
#: serverguide/C/installation.xml:1093(para)
20737
msgid "Now extend the Volume Group (VG):"
20738
msgstr ""
20739
20740
#: serverguide/C/installation.xml:1098(command)
20741
msgid "sudo vgextend vg01 /dev/sdb"
20742
msgstr ""
20743
20744
#: serverguide/C/installation.xml:1104(para)
20745
msgid ""
20746
"Use <application>vgdisplay</application> to find out the free physical "
20747
"extents - Free PE / size (the size you can allocate). We will assume a free "
20748
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
20749
"whole free space available. Use your own PE and/or free space."
20750
msgstr ""
20751
20752
#: serverguide/C/installation.xml:1110(para)
20753
msgid ""
20754
"The Logical Volume (LV) can now be extended by different methods, we will "
20755
"only see how to use the PE to extend the LV:"
20756
msgstr ""
20757
20758
#: serverguide/C/installation.xml:1115(command)
20759
msgid "sudo lvextend /dev/vg01/srv -l +511"
20760
msgstr ""
20761
20762
#: serverguide/C/installation.xml:1118(para)
20763
msgid ""
20764
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
20765
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
20766
"Gig, Tera, etc bytes."
20767
msgstr ""
20768
20769
#: serverguide/C/installation.xml:1126(para)
20770
msgid ""
20771
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
20772
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
20773
"pratice to unmount it anyway and check the filesystem, so that you don't "
20774
"mess up the day you want to reduce a logical volume (in that case unmounting "
20775
"first is compulsory)."
20776
msgstr ""
20777
20778
#: serverguide/C/installation.xml:1132(para)
20779
msgid ""
20780
"The following commands are for an <emphasis>EXT3</emphasis> or "
20781
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
20782
"there may be other utilities available."
20783
msgstr ""
20784
20785
#: serverguide/C/installation.xml:1139(command)
20786
msgid "sudo e2fsck -f /dev/vg01/srv"
20787
msgstr ""
20788
20789
#: serverguide/C/installation.xml:1142(para)
20790
msgid ""
20791
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
20792
"forces checking even if the system seems clean."
20793
msgstr ""
20794
20795
#: serverguide/C/installation.xml:1149(para)
20796
msgid "Finally, resize the filesystem:"
20797
msgstr ""
20798
20799
#: serverguide/C/installation.xml:1154(command)
20800
msgid "sudo resize2fs /dev/vg01/srv"
20801
msgstr ""
20802
20803
#: serverguide/C/installation.xml:1160(para)
20804
msgid "Now mount the partition and check its size."
20805
msgstr ""
20806
20807
#: serverguide/C/installation.xml:1165(command)
20808
msgid "mount /dev/vg01/srv /srv && df -h /srv"
20809
msgstr ""
20810
20811
#: serverguide/C/installation.xml:1177(para)
20812
msgid ""
20813
"See the <ulink "
20814
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
20815
"Articles</ulink>."
20816
msgstr ""
20817
20818
#: serverguide/C/installation.xml:1182(para)
20819
msgid ""
20820
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
20821
"HOWTO</ulink> for more information."
20822
msgstr ""
20823
20824
#: serverguide/C/installation.xml:1187(para)
20825
msgid ""
20826
"Another good article is <ulink "
20827
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
20828
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
20829
"linuxdevcenter.com site."
20830
msgstr ""
20831
20832
#: serverguide/C/installation.xml:1194(para)
20833
msgid ""
20834
"For more information on <application>fdisk</application> see the <ulink "
20835
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
20836
"man page</ulink>."
20837
msgstr ""
20838
20839
#: serverguide/C/file-server.xml:13(title)
20840
msgid "File Servers"
20841
msgstr ""
20842
20843
#: serverguide/C/file-server.xml:15(para)
20844
msgid ""
20845
"If you have more than one computer on a single network. At some point you "
20846
"will probably need to share files between them. In this section we cover "
20847
"installing and configuring FTP, NFS, and CUPS."
20848
msgstr ""
20849
20850
#: serverguide/C/file-server.xml:22(title)
20851
msgid "FTP Server"
20852
msgstr ""
20853
20854
#: serverguide/C/file-server.xml:24(para)
20855
msgid ""
20856
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
20857
"files between computers. FTP works on a client/server model. The server "
20858
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
20859
"listens for FTP requests from remote clients. When a request is received, it "
20860
"manages the login and sets up the connection. For the duration of the "
20861
"session it executes any of commands sent by the FTP client."
20862
msgstr ""
20863
20864
#: serverguide/C/file-server.xml:33(para)
20865
msgid "Access to an FTP server can be managed in two ways:"
20866
msgstr ""
20867
20868
#: serverguide/C/file-server.xml:37(para)
20869
msgid "Anonymous"
20870
msgstr ""
20871
20872
#: serverguide/C/file-server.xml:40(para)
20873
msgid "Authenticated"
20874
msgstr ""
20875
20876
#: serverguide/C/file-server.xml:43(para)
20877
msgid ""
20878
"In the Anonymous mode, remote clients can access the FTP server by using the "
20879
"default user account called \"anonymous\" or \"ftp\" and sending an email "
20880
"address as the password. In the Authenticated mode a user must have an "
20881
"account and a password. User access to the FTP server directories and files "
20882
"is dependent on the permissions defined for the account used at login. As a "
20883
"general rule, the FTP daemon will hide the root directory of the FTP server "
20884
"and change it to the FTP Home directory. This hides the rest of the file "
20885
"system from remote sessions."
20886
msgstr ""
20887
20888
#: serverguide/C/file-server.xml:55(title)
20889
msgid "vsftpd - FTP Server Installation"
20890
msgstr ""
20891
20892
#: serverguide/C/file-server.xml:57(para)
20893
msgid ""
20894
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
20895
"and maintain. To install <application>vsftpd</application> you can run the "
20896
"following command:"
20897
msgstr ""
20898
20899
#: serverguide/C/file-server.xml:65(command)
20900
msgid "sudo apt-get install vsftpd"
20901
msgstr ""
20902
20903
#: serverguide/C/file-server.xml:71(title)
20904
msgid "Anonymous FTP Configuration"
20905
msgstr ""
20906
20907
#: serverguide/C/file-server.xml:73(para)
20908
msgid ""
20909
"By default <application>vsftpd</application> is configured to only allow "
20910
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
20911
"created with a home directory of <filename>/home/ftp</filename>. This is the "
20912
"default FTP directory."
20913
msgstr ""
20914
20915
#: serverguide/C/file-server.xml:80(para)
20916
msgid ""
20917
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
20918
"example, simply create a directory in another location and change the "
20919
"<emphasis>ftp</emphasis> user's home directory:"
20920
msgstr ""
20921
20922
#: serverguide/C/file-server.xml:87(command)
20923
msgid "sudo mkdir /srv/ftp"
20924
msgstr ""
20925
20926
#: serverguide/C/file-server.xml:88(command)
20927
msgid "sudo usermod -d /srv/ftp ftp"
20928
msgstr ""
20929
20930
#: serverguide/C/file-server.xml:91(para)
20931
msgid "After making the change restart <application>vsftpd</application>:"
20932
msgstr ""
20933
20934
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
20935
msgid "sudo /etc/init.d/vsftpd restart"
20936
msgstr ""
20937
20938
#: serverguide/C/file-server.xml:99(para)
20939
msgid ""
20940
"Finally, copy any files and directories you would like to make available "
20941
"through anonymous FTP to <filename>/srv/ftp</filename>."
20942
msgstr ""
20943
20944
#: serverguide/C/file-server.xml:106(title)
20945
msgid "User Authenticated FTP Configuration"
20946
msgstr ""
20947
20948
#: serverguide/C/file-server.xml:108(para)
20949
msgid ""
20950
"To configure <application>vsftpd</application> to authenticate system users "
20951
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
20952
msgstr ""
20953
20954
#: serverguide/C/file-server.xml:114(programlisting)
20955
#, no-wrap
20956
msgid ""
20957
"\n"
20958
"local_enable=YES\n"
20959
"write_enable=YES\n"
20960
msgstr ""
20961
20962
#: serverguide/C/file-server.xml:119(para)
20963
msgid "Now restart <application>vsftpd</application>:"
20964
msgstr ""
20965
20966
#: serverguide/C/file-server.xml:127(para)
20967
msgid ""
20968
"Now when system users login to FTP they will start in their "
20969
"<emphasis>home</emphasis> directories where they can download, upload, "
20970
"create directories, etc."
20971
msgstr ""
20972
20973
#: serverguide/C/file-server.xml:133(para)
20974
msgid ""
20975
"Similarly, by default, the anonymous users are not allowed to upload files "
20976
"to FTP server. To change this setting, you should uncomment the following "
20977
"line, and restart <application>vsftpd</application>:"
20978
msgstr ""
20979
20980
#: serverguide/C/file-server.xml:140(programlisting)
20981
#, no-wrap
20982
msgid ""
20983
"\n"
20984
"anon_upload_enable=YES\n"
20985
msgstr ""
20986
20987
#: serverguide/C/file-server.xml:145(para)
20988
msgid ""
20989
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
20990
"not enable anonymous upload on servers accessed directly from the Internet."
20991
msgstr ""
20992
20993
#: serverguide/C/file-server.xml:151(para)
20994
msgid ""
20995
"The configuration file consists of many configuration parameters. The "
20996
"information about each parameter is available in the configuration file. "
20997
"Alternatively, you can refer to the man page, <command>man 5 "
20998
"vsftpd.conf</command> for details of each parameter."
20999
msgstr ""
21000
21001
#: serverguide/C/file-server.xml:162(title)
21002
msgid "Securing FTP"
21003
msgstr ""
21004
21005
#: serverguide/C/file-server.xml:164(para)
21006
msgid ""
21007
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21008
"<application>vsftpd</application> more secure. For example users can be "
21009
"limited to their home directories by uncommenting:"
21010
msgstr ""
21011
21012
#: serverguide/C/file-server.xml:170(programlisting)
21013
#, no-wrap
21014
msgid ""
21015
"\n"
21016
"chroot_local_user=YES\n"
21017
msgstr ""
21018
21019
#: serverguide/C/file-server.xml:174(para)
21020
msgid ""
21021
"You can also limit a specific list of users to just their home directories:"
21022
msgstr ""
21023
21024
#: serverguide/C/file-server.xml:178(programlisting)
21025
#, no-wrap
21026
msgid ""
21027
"\n"
21028
"chroot_list_enable=YES\n"
21029
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21030
msgstr ""
21031
21032
#: serverguide/C/file-server.xml:183(para)
21033
msgid ""
21034
"After uncommenting the above options, create a "
21035
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21036
"per line. Then restart <application>vsftpd</application>:"
21037
msgstr ""
21038
21039
#: serverguide/C/file-server.xml:192(para)
21040
msgid ""
21041
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21042
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21043
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21044
"add them to the list."
21045
msgstr ""
21046
21047
#: serverguide/C/file-server.xml:199(para)
21048
msgid ""
21049
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21050
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21051
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21052
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21053
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21054
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21055
"with a shell may not be ideal for some environments, such as a shared web "
21056
"host."
21057
msgstr ""
21058
21059
#: serverguide/C/file-server.xml:208(para)
21060
msgid ""
21061
"To configure <emphasis>FTPS</emphasis>, edit "
21062
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21063
msgstr ""
21064
21065
#: serverguide/C/file-server.xml:212(programlisting)
21066
#, no-wrap
21067
msgid ""
21068
"\n"
21069
"ssl_enable=Yes\n"
21070
msgstr ""
21071
21072
#: serverguide/C/file-server.xml:216(para)
21073
msgid "Also, notice the certificate and key related options:"
21074
msgstr ""
21075
21076
#: serverguide/C/file-server.xml:220(programlisting)
21077
#, no-wrap
21078
msgid ""
21079
"\n"
21080
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21081
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21082
msgstr ""
21083
21084
#: serverguide/C/file-server.xml:225(para)
21085
msgid ""
21086
"By default these options are set the certificate and key provided by the "
21087
"<application>ssl-cert</application> package. In a production environment "
21088
"these should be replaced with a certificate and key generated for the "
21089
"specific host. For more information on certificates see <xref "
21090
"linkend=\"certificates-and-security\"/>."
21091
msgstr ""
21092
21093
#: serverguide/C/file-server.xml:231(para)
21094
msgid ""
21095
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21096
"be forced to use <emphasis>FTPS</emphasis>:"
21097
msgstr ""
21098
21099
#: serverguide/C/file-server.xml:240(para)
21100
msgid ""
21101
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21102
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21103
"adding the <emphasis>nologin</emphasis> shell:"
21104
msgstr ""
21105
21106
#: serverguide/C/file-server.xml:245(programlisting)
21107
#, no-wrap
21108
msgid ""
21109
"\n"
21110
"# /etc/shells: valid login shells\n"
21111
"/bin/csh\n"
21112
"/bin/sh\n"
21113
"/usr/bin/es\n"
21114
"/usr/bin/ksh\n"
21115
"/bin/ksh\n"
21116
"/usr/bin/rc\n"
21117
"/usr/bin/tcsh\n"
21118
"/bin/tcsh\n"
21119
"/usr/bin/esh\n"
21120
"/bin/dash\n"
21121
"/bin/bash\n"
21122
"/bin/rbash\n"
21123
"/usr/bin/screen\n"
21124
"/usr/sbin/nologin\n"
21125
msgstr ""
21126
21127
#: serverguide/C/file-server.xml:263(para)
21128
msgid ""
21129
"This is necessary because, by default <application>vsftpd</application> uses "
21130
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21131
"configuration file contains:"
21132
msgstr ""
21133
21134
#: serverguide/C/file-server.xml:268(programlisting)
21135
#, no-wrap
21136
msgid ""
21137
"\n"
21138
"auth required pam_shells.so\n"
21139
msgstr ""
21140
21141
#: serverguide/C/file-server.xml:272(para)
21142
msgid ""
21143
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21144
"in the <filename>/etc/shells</filename> file."
21145
msgstr ""
21146
21147
#: serverguide/C/file-server.xml:277(para)
21148
msgid ""
21149
"Most popular FTP clients can be configured connect using FTPS. The "
21150
"<application>lftp</application> command line FTP client has the ability to "
21151
"use FTPS as well."
21152
msgstr ""
21153
21154
#: serverguide/C/file-server.xml:288(para)
21155
msgid ""
21156
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21157
"website</ulink> for more information."
21158
msgstr ""
21159
21160
#: serverguide/C/file-server.xml:293(para)
21161
msgid ""
21162
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21163
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21164
"vsftpd.conf man page</ulink>."
21165
msgstr ""
21166
21167
#: serverguide/C/file-server.xml:299(para)
21168
msgid ""
21169
"The CodeGurus article <ulink "
21170
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21171
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21172
"contrasting FTPS and SFTP."
21173
msgstr ""
21174
21175
#: serverguide/C/file-server.xml:305(para)
21176
msgid ""
21177
"Also, for more information see the <ulink "
21178
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21179
"page."
21180
msgstr ""
21181
21182
#: serverguide/C/file-server.xml:315(title)
21183
msgid "Network File System (NFS)"
21184
msgstr ""
21185
21186
#: serverguide/C/file-server.xml:316(para)
21187
msgid ""
21188
"NFS allows a system to share directories and files with others over a "
21189
"network. By using NFS, users and programs can access files on remote systems "
21190
"almost as if they were local files."
21191
msgstr ""
21192
21193
#: serverguide/C/file-server.xml:322(para)
21194
msgid "Some of the most notable benefits that NFS can provide are:"
21195
msgstr ""
21196
21197
#: serverguide/C/file-server.xml:328(para)
21198
msgid ""
21199
"Local workstations use less disk space because commonly used data can be "
21200
"stored on a single machine and still remain accessible to others over the "
21201
"network."
21202
msgstr ""
21203
21204
#: serverguide/C/file-server.xml:333(para)
21205
msgid ""
21206
"There is no need for users to have separate home directories on every "
21207
"network machine. Home directories could be set up on the NFS server and made "
21208
"available throughout the network."
21209
msgstr ""
21210
21211
#: serverguide/C/file-server.xml:339(para)
21212
msgid ""
21213
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21214
"be used by other machines on the network. This may reduce the number of "
21215
"removable media drives throughout the network."
21216
msgstr ""
21217
21218
#: serverguide/C/file-server.xml:349(para)
21219
msgid ""
21220
"At a terminal prompt enter the following command to install the NFS Server:"
21221
msgstr ""
21222
21223
#: serverguide/C/file-server.xml:355(command)
21224
msgid "sudo apt-get install nfs-kernel-server"
21225
msgstr ""
21226
21227
#: serverguide/C/file-server.xml:361(para)
21228
msgid ""
21229
"You can configure the directories to be exported by adding them to the "
21230
"<filename>/etc/exports</filename> file. For example:"
21231
msgstr ""
21232
21233
#: serverguide/C/file-server.xml:366(screen)
21234
#, no-wrap
21235
msgid ""
21236
"\n"
21237
"/ubuntu *(ro,sync,no_root_squash)\n"
21238
"/home *(rw,sync,no_root_squash)\n"
21239
msgstr ""
21240
21241
#: serverguide/C/file-server.xml:372(para)
21242
msgid ""
21243
"You can replace * with one of the hostname formats. Make the hostname "
21244
"declaration as specific as possible so unwanted systems cannot access the "
21245
"NFS mount."
21246
msgstr ""
21247
21248
#: serverguide/C/file-server.xml:378(para)
21249
msgid ""
21250
"To start the NFS server, you can run the following command at a terminal "
21251
"prompt:"
21252
msgstr ""
21253
21254
#: serverguide/C/file-server.xml:383(command)
21255
msgid "sudo /etc/init.d/nfs-kernel-server start"
21256
msgstr ""
21257
21258
#: serverguide/C/file-server.xml:388(title)
21259
msgid "NFS Client Configuration"
21260
msgstr ""
21261
21262
#: serverguide/C/file-server.xml:389(para)
21263
msgid ""
21264
"Use the <application>mount</application> command to mount a shared NFS "
21265
"directory from another machine, by typing a command line similar to the "
21266
"following at a terminal prompt:"
21267
msgstr ""
21268
21269
#: serverguide/C/file-server.xml:395(command)
21270
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21271
msgstr ""
21272
21273
#: serverguide/C/file-server.xml:399(para)
21274
msgid ""
21275
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21276
"There should be no files or subdirectories in the "
21277
"<filename>/local/ubuntu</filename> directory."
21278
msgstr ""
21279
21280
#: serverguide/C/file-server.xml:406(para)
21281
msgid ""
21282
"An alternate way to mount an NFS share from another machine is to add a line "
21283
"to the <filename>/etc/fstab</filename> file. The line must state the "
21284
"hostname of the NFS server, the directory on the server being exported, and "
21285
"the directory on the local machine where the NFS share is to be mounted."
21286
msgstr ""
21287
21288
#: serverguide/C/file-server.xml:414(para)
21289
msgid ""
21290
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21291
"as follows:"
21292
msgstr ""
21293
21294
#: serverguide/C/file-server.xml:420(programlisting)
21295
#, no-wrap
21296
msgid ""
21297
"\n"
21298
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21299
"rsize=8192,wsize=8192,timeo=14,intr\n"
21300
msgstr ""
21301
21302
#: serverguide/C/file-server.xml:424(para)
21303
msgid ""
21304
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21305
"common</application> package is installed on your client. To install "
21306
"<application>nfs-common</application> enter the following command at the "
21307
"terminal prompt: <screen>\n"
21308
"<command>sudo apt-get install nfs-common</command>\n"
21309
"</screen>"
21310
msgstr ""
21311
21312
#: serverguide/C/file-server.xml:437(ulink)
21313
msgid "Linux NFS faq"
21314
msgstr ""
21315
21316
#: serverguide/C/file-server.xml:439(ulink)
21317
msgid "Ubuntu Wiki NFS Howto"
21318
msgstr ""
21319
21320
#: serverguide/C/file-server.xml:445(title)
21321
msgid "CUPS - Print Server"
21322
msgstr ""
21323
21324
#: serverguide/C/file-server.xml:446(para)
21325
msgid ""
21326
"The primary mechanism for Ubuntu printing and print services is the "
21327
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21328
"printing system is a freely available, portable printing layer which has "
21329
"become the new standard for printing in most Linux distributions."
21330
msgstr ""
21331
21332
#: serverguide/C/file-server.xml:453(para)
21333
msgid ""
21334
"CUPS manages print jobs and queues and provides network printing using the "
21335
"standard Internet Printing Protocol (IPP), while offering support for a very "
21336
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21337
"also supports PostScript Printer Description (PPD) and auto-detection of "
21338
"network printers, and features a simple web-based configuration and "
21339
"administration tool."
21340
msgstr ""
21341
21342
#: serverguide/C/file-server.xml:463(para)
21343
msgid ""
21344
"To install CUPS on your Ubuntu computer, simply use "
21345
"<application>sudo</application> with the <application>apt-get</application> "
21346
"command and give the packages to install as the first parameter. A complete "
21347
"CUPS install has many package dependencies, but they may all be specified on "
21348
"the same command line. Enter the following at a terminal prompt to install "
21349
"CUPS:"
21350
msgstr ""
21351
21352
#: serverguide/C/file-server.xml:468(command)
21353
msgid "sudo apt-get install cups"
21354
msgstr ""
21355
21356
#: serverguide/C/file-server.xml:471(para)
21357
msgid ""
21358
"Upon authenticating with your user password, the packages should be "
21359
"downloaded and installed without error. Upon the conclusion of installation, "
21360
"the CUPS server will be started automatically."
21361
msgstr ""
21362
21363
#: serverguide/C/file-server.xml:476(para)
21364
msgid ""
21365
"For troubleshooting purposes, you can access CUPS server errors via the "
21366
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21367
"error log does not show enough information to troubleshoot any problems you "
21368
"encounter, the verbosity of the CUPS log can be increased by changing the "
21369
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21370
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21371
"everything, from the default of \"info\". If you make this change, remember "
21372
"to change it back once you've solved your problem, to prevent the log file "
21373
"from becoming overly large."
21374
msgstr ""
21375
21376
#: serverguide/C/file-server.xml:489(para)
21377
msgid ""
21378
"The Common UNIX Printing System server's behavior is configured through the "
21379
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21380
"The CUPS configuration file follows the same syntax as the primary "
21381
"configuration file for the Apache HTTP server, so users familiar with "
21382
"editing Apache's configuration file should feel at ease when editing the "
21383
"CUPS configuration file. Some examples of settings you may wish to change "
21384
"initially will be presented here."
21385
msgstr ""
21386
21387
#: serverguide/C/file-server.xml:499(para)
21388
msgid ""
21389
"Prior to editing the configuration file, you should make a copy of the "
21390
"original file and protect it from writing, so you will have the original "
21391
"settings as a reference, and to reuse as necessary."
21392
msgstr ""
21393
21394
#: serverguide/C/file-server.xml:503(para)
21395
msgid ""
21396
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21397
"writing with the following commands, issued at a terminal prompt:"
21398
msgstr ""
21399
21400
#: serverguide/C/file-server.xml:509(command)
21401
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21402
msgstr ""
21403
21404
#: serverguide/C/file-server.xml:510(command)
21405
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21406
msgstr ""
21407
21408
#: serverguide/C/file-server.xml:515(para)
21409
msgid ""
21410
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21411
"address of the designated administrator of the CUPS server, simply edit the "
21412
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21413
"preferred text editor, and add or modify the <emphasis "
21414
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21415
"you are the Administrator for the CUPS server, and your e-mail address is "
21416
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21417
"as such:"
21418
msgstr ""
21419
21420
#: serverguide/C/file-server.xml:526(screen)
21421
#, no-wrap
21422
msgid ""
21423
"\n"
21424
"ServerAdmin bjoy@somebigco.com\n"
21425
msgstr ""
21426
21427
#: serverguide/C/file-server.xml:532(para)
21428
msgid ""
21429
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21430
"server installation listens only on the loopback interface at IP address "
21431
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21432
"listen on an actual network adapter's IP address, you must specify either a "
21433
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21434
"addition of a Listen directive. For example, if your CUPS server resides on "
21435
"a local network at the IP address <emphasis "
21436
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21437
"accessible to the other systems on this subnetwork, you would edit the "
21438
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21439
"such:"
21440
msgstr ""
21441
21442
#: serverguide/C/file-server.xml:546(screen)
21443
#, no-wrap
21444
msgid ""
21445
"\n"
21446
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21447
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21448
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21449
"(IPP)\n"
21450
msgstr ""
21451
21452
#: serverguide/C/file-server.xml:552(para)
21453
msgid ""
21454
"In the example above, you may comment out or remove the reference to the "
21455
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21456
"</application> to listen on that interface, but would rather have it only "
21457
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21458
"listening for all network interfaces for which a certain hostname is bound, "
21459
"including the Loopback, you could create a Listen entry for the hostname "
21460
"<emphasis>socrates</emphasis> as such:"
21461
msgstr ""
21462
21463
#: serverguide/C/file-server.xml:562(screen)
21464
#, no-wrap
21465
msgid ""
21466
"\n"
21467
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21468
msgstr ""
21469
21470
#: serverguide/C/file-server.xml:566(para)
21471
msgid ""
21472
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21473
"instead, as in:"
21474
msgstr ""
21475
21476
#: serverguide/C/file-server.xml:568(screen)
21477
#, no-wrap
21478
msgid ""
21479
"\n"
21480
"Port 631 # Listen on port 631 on all interfaces\n"
21481
msgstr ""
21482
21483
#: serverguide/C/file-server.xml:575(para)
21484
msgid ""
21485
"For more examples of configuration directives in the CUPS server "
21486
"configuration file, view the associated system manual page by entering the "
21487
"following command at a terminal prompt:"
21488
msgstr ""
21489
21490
#: serverguide/C/file-server.xml:582(command)
21491
msgid "man cupsd.conf"
21492
msgstr ""
21493
21494
#: serverguide/C/file-server.xml:586(para)
21495
msgid ""
21496
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21497
"configuration file, you'll need to restart the CUPS server by typing the "
21498
"following command at a terminal prompt:"
21499
msgstr ""
21500
21501
#: serverguide/C/file-server.xml:592(command)
21502
msgid "sudo /etc/init.d/cups restart"
21503
msgstr ""
21504
21505
#: serverguide/C/file-server.xml:598(title)
21506
msgid "Web Interface"
21507
msgstr ""
21508
21509
#: serverguide/C/file-server.xml:600(para)
21510
msgid ""
21511
"CUPS can be configured and monitored using a web interface, which by default "
21512
"is available at <ulink "
21513
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21514
"web interface can be used to perform all printer management tasks."
21515
msgstr ""
21516
21517
#: serverguide/C/file-server.xml:604(para)
21518
msgid ""
21519
"In order to perform administrative tasks via the web interface, you must "
21520
"either have the root account enabled on your server, or authenticate as a "
21521
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21522
"reasons, CUPS won't authenticate a user that doesn't have a password."
21523
msgstr ""
21524
21525
#: serverguide/C/file-server.xml:607(para)
21526
msgid ""
21527
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21528
"at the terminal prompt: <screen>\n"
21529
"<command>sudo usermod -aG lpadmin username</command>\n"
21530
"</screen>"
21531
msgstr ""
21532
21533
#: serverguide/C/file-server.xml:613(para)
21534
msgid ""
21535
"Further documentation is available in the <emphasis "
21536
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21537
msgstr ""
21538
21539
#: serverguide/C/file-server.xml:621(ulink)
21540
msgid "CUPS Website"
21541
msgstr ""
21542
21543
#: serverguide/C/file-server.xml:624(ulink)
21544
msgid "Ubuntu Wiki CUPS page"
21545
msgstr ""
21546
21547
#: serverguide/C/dns.xml:13(title)
21548
msgid "Domain Name Service (DNS)"
21549
msgstr ""
21550
21551
#: serverguide/C/dns.xml:14(para)
21552
msgid ""
21553
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21554
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21555
"alleviates the need to remember IP addresses. Computers that run DNS are "
21556
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21557
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21558
"common program used for maintaining a name server on Linux."
21559
msgstr ""
21560
21561
#: serverguide/C/dns.xml:24(para)
21562
msgid ""
21563
"At a terminal prompt, enter the following command to install "
21564
"<application>dns</application>:"
21565
msgstr ""
21566
21567
#: serverguide/C/dns.xml:28(command)
21568
msgid "sudo apt-get install bind9"
21569
msgstr ""
21570
21571
#: serverguide/C/dns.xml:30(para)
21572
msgid ""
21573
"A very useful package for testing and troubleshooting DNS issues is the "
21574
"dnsutils package. To install <application>dnsutils</application> enter the "
21575
"following:"
21576
msgstr ""
21577
21578
#: serverguide/C/dns.xml:35(command)
21579
msgid "sudo apt-get install dnsutils"
21580
msgstr ""
21581
21582
#: serverguide/C/dns.xml:40(para)
21583
msgid ""
21584
"There a many ways to configure <application>BIND9</application>. Some of the "
21585
"most common configurations are a caching nameserver, primary master, and a "
21586
"as a secondary master."
21587
msgstr ""
21588
21589
#: serverguide/C/dns.xml:46(para)
21590
msgid ""
21591
"When configured as a caching nameserver BIND9 will find the answer to name "
21592
"queries and remember the answer when the domain is queried again."
21593
msgstr ""
21594
21595
#: serverguide/C/dns.xml:52(para)
21596
msgid ""
21597
"As a primary master server BIND9 reads the data for a zone from a file on "
21598
"it's host and is authoritative for that zone."
21599
msgstr ""
21600
21601
#: serverguide/C/dns.xml:57(para)
21602
msgid ""
21603
"In a secondary master configuration BIND9 gets the zone data from another "
21604
"nameserver authoritative for the zone."
21605
msgstr ""
21606
21607
#: serverguide/C/dns.xml:65(para)
21608
msgid ""
21609
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
21610
"directory. The primary configuration file is "
21611
"<filename>/etc/bind/named.conf</filename>."
21612
msgstr ""
21613
21614
#: serverguide/C/dns.xml:72(para)
21615
msgid ""
21616
"The <emphasis>include</emphasis> line specifies the filename which contains "
21617
"the DNS options. The <emphasis>directory</emphasis> line in the "
21618
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
21619
"look for files. All files BIND uses will be relative to this directory."
21620
msgstr ""
21621
21622
#: serverguide/C/dns.xml:80(para)
21623
msgid ""
21624
"The file named <filename>/etc/bind/db.root</filename> describes the root "
21625
"nameservers in the world. The servers change over time, so the "
21626
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
21627
"This is usually done as updates to the <application>bind9</application> "
21628
"package. The <emphasis>zone</emphasis> section defines a master server, and "
21629
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
21630
msgstr ""
21631
21632
#: serverguide/C/dns.xml:90(para)
21633
msgid ""
21634
"It is possible to configure the same server to be a caching name server, "
21635
"primary master, and secondary master. A server can be the Start of Authority "
21636
"(SOA) for one zone, while providing secondary service for another zone. All "
21637
"the while providing caching services for hosts on the local LAN."
21638
msgstr ""
21639
21640
#: serverguide/C/dns.xml:98(title)
21641
msgid "Caching Nameserver"
21642
msgstr ""
21643
21644
#: serverguide/C/dns.xml:99(para)
21645
msgid ""
21646
"The default configuration is setup to act as a caching server. All that is "
21647
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
21648
"uncomment and edit the following in "
21649
"<filename>/etc/bind/named.conf.options</filename>:"
21650
msgstr ""
21651
21652
#: serverguide/C/dns.xml:103(programlisting)
21653
#, no-wrap
21654
msgid ""
21655
"\n"
21656
"forwarders {\n"
21657
" 1.2.3.4;\n"
21658
" 5.6.7.8;\n"
21659
" };\n"
21660
msgstr ""
21661
21662
#: serverguide/C/dns.xml:110(para)
21663
msgid ""
21664
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
21665
"the IP Adresses of actual nameservers."
21666
msgstr ""
21667
21668
#: serverguide/C/dns.xml:114(para)
21669
msgid ""
21670
"Now restart the DNS server, to enable the new configuration. From a terminal "
21671
"prompt:"
21672
msgstr ""
21673
21674
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
21675
msgid "sudo /etc/init.d/bind9 restart"
21676
msgstr ""
21677
21678
#: serverguide/C/dns.xml:120(para)
21679
msgid ""
21680
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
21681
"DNS server."
21682
msgstr ""
21683
21684
#: serverguide/C/dns.xml:125(title)
21685
msgid "Primary Master"
21686
msgstr ""
21687
21688
#: serverguide/C/dns.xml:126(para)
21689
msgid ""
21690
"In this section <application>BIND9</application> will be configured as the "
21691
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
21692
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
21693
"(Fully Qualified Domain Name)."
21694
msgstr ""
21695
21696
#: serverguide/C/dns.xml:132(title)
21697
msgid "Forward Zone File"
21698
msgstr ""
21699
21700
#: serverguide/C/dns.xml:133(para)
21701
msgid ""
21702
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
21703
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
21704
msgstr ""
21705
21706
#: serverguide/C/dns.xml:137(programlisting)
21707
#, no-wrap
21708
msgid ""
21709
"\n"
21710
"zone \"example.com\" {\n"
21711
"\ttype master;\n"
21712
" file \"/etc/bind/db.example.com\";\n"
21713
"};\n"
21714
msgstr ""
21715
21716
#: serverguide/C/dns.xml:143(para)
21717
msgid ""
21718
"Now use an existing zone file as a template to create the "
21719
"<filename>/etc/bind/db.example.com</filename> file:"
21720
msgstr ""
21721
21722
#: serverguide/C/dns.xml:147(command)
21723
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
21724
msgstr ""
21725
21726
#: serverguide/C/dns.xml:149(para)
21727
msgid ""
21728
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
21729
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
21730
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
21731
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
21732
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
21733
"leaving the \".\" at the end."
21734
msgstr ""
21735
21736
#: serverguide/C/dns.xml:155(para)
21737
msgid ""
21738
"Also, create an <emphasis>A record</emphasis> for <emphasis "
21739
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
21740
msgstr ""
21741
21742
#: serverguide/C/dns.xml:159(programlisting)
21743
#, no-wrap
21744
msgid ""
21745
"\n"
21746
";\n"
21747
"; BIND data file for local loopback interface\n"
21748
";\n"
21749
"$TTL 604800\n"
21750
"@ IN SOA ns.example.com. root.example.com. (\n"
21751
" 2 ; Serial\n"
21752
" 604800 ; Refresh\n"
21753
" 86400 ; Retry\n"
21754
" 2419200 ; Expire\n"
21755
" 604800 ) ; Negative Cache TTL\n"
21756
";\n"
21757
"@ IN NS ns.example.com.\n"
21758
"@ IN A 127.0.0.1\n"
21759
"@ IN AAAA ::1\n"
21760
"ns IN A 192.168.1.10\n"
21761
msgstr ""
21762
21763
#: serverguide/C/dns.xml:176(para)
21764
msgid ""
21765
"You must increment the <emphasis>Serial Number</emphasis> every time you "
21766
"make changes to the zone file. If you make multiple changes before "
21767
"restarting BIND9, simply increment the Serial once."
21768
msgstr ""
21769
21770
#: serverguide/C/dns.xml:180(para)
21771
msgid ""
21772
"Now, you can add DNS records to the bottom of the zone file. See <xref "
21773
"linkend=\"dns-record-types\"/> for details."
21774
msgstr ""
21775
21776
#: serverguide/C/dns.xml:184(para)
21777
msgid ""
21778
"Many admins like to use the last date edited as the serial of a zone, such "
21779
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
21780
"<emphasis>ss</emphasis> is the Serial Number)"
21781
msgstr ""
21782
21783
#: serverguide/C/dns.xml:189(para)
21784
msgid ""
21785
"Once you have made a change to the zone file "
21786
"<application>BIND9</application> will need to be restarted for the changes "
21787
"to take effect:"
21788
msgstr ""
21789
21790
#: serverguide/C/dns.xml:198(title)
21791
msgid "Reverse Zone File"
21792
msgstr ""
21793
21794
#: serverguide/C/dns.xml:199(para)
21795
msgid ""
21796
"Now that the zone is setup and resolving names to IP Adresses a "
21797
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
21798
"DNS to resolve an address to a name."
21799
msgstr ""
21800
21801
#: serverguide/C/dns.xml:203(para)
21802
msgid "Edit /etc/bind/named.conf.local and add the following:"
21803
msgstr ""
21804
21805
#: serverguide/C/dns.xml:206(programlisting)
21806
#, no-wrap
21807
msgid ""
21808
"\n"
21809
"zone \"1.168.192.in-addr.arpa\" {\n"
21810
" type master;\n"
21811
" notify no;\n"
21812
" file \"/etc/bind/db.192\";\n"
21813
"};\n"
21814
msgstr ""
21815
21816
#: serverguide/C/dns.xml:214(para)
21817
msgid ""
21818
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
21819
"whatever network you are using. Also, name the zone file "
21820
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
21821
"first octet of your network."
21822
msgstr ""
21823
21824
#: serverguide/C/dns.xml:219(para)
21825
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
21826
msgstr ""
21827
21828
#: serverguide/C/dns.xml:223(command)
21829
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
21830
msgstr ""
21831
21832
#: serverguide/C/dns.xml:225(para)
21833
msgid ""
21834
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
21835
"same options as <filename>/etc/bind/db.example.com</filename>:"
21836
msgstr ""
21837
21838
#: serverguide/C/dns.xml:229(programlisting)
21839
#, no-wrap
21840
msgid ""
21841
"\n"
21842
";\n"
21843
"; BIND reverse data file for local loopback interface\n"
21844
";\n"
21845
"$TTL 604800\n"
21846
"@ IN SOA ns.example.com. root.example.com. (\n"
21847
" 2 ; Serial\n"
21848
" 604800 ; Refresh\n"
21849
" 86400 ; Retry\n"
21850
" 2419200 ; Expire\n"
21851
" 604800 ) ; Negative Cache TTL\n"
21852
";\n"
21853
"@ IN NS ns.\n"
21854
"10 IN PTR ns.example.com.\n"
21855
msgstr ""
21856
21857
#: serverguide/C/dns.xml:244(para)
21858
msgid ""
21859
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
21860
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
21861
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
21862
"create a <emphasis>PTR record</emphasis> in "
21863
"<filename>/etc/bind/db.192</filename>."
21864
msgstr ""
21865
21866
#: serverguide/C/dns.xml:249(para)
21867
msgid ""
21868
"After creating the reverse zone file restart "
21869
"<application>BIND9</application>:"
21870
msgstr ""
21871
21872
#: serverguide/C/dns.xml:258(title)
21873
msgid "Secondary Master"
21874
msgstr ""
21875
21876
#: serverguide/C/dns.xml:259(para)
21877
msgid ""
21878
"Once a <emphasis>Primary Master</emphasis> has been configured a "
21879
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
21880
"availability of the domain should the Primary become unavailable."
21881
msgstr ""
21882
21883
#: serverguide/C/dns.xml:263(para)
21884
msgid ""
21885
"First, on the Primary Master server, the zone transfer needs to be allowed. "
21886
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
21887
"and Reverse zone definitions in "
21888
"<filename>/etc/bind/named.conf.local</filename>:"
21889
msgstr ""
21890
21891
#: serverguide/C/dns.xml:267(programlisting)
21892
#, no-wrap
21893
msgid ""
21894
"\n"
21895
"zone \"example.com\" {\n"
21896
" type master;\n"
21897
"\tfile \"/etc/bind/db.example.com\";\n"
21898
" allow-transfer { 192.168.1.11; };\n"
21899
"};\n"
21900
"\n"
21901
"zone \"1.168.192.in-addr.arpa\" {\n"
21902
" type master;\n"
21903
" notify no;\n"
21904
" file \"/etc/bind/db.192\";\n"
21905
"\tallow-transfer { 192.168.1.11; };\n"
21906
"};\n"
21907
msgstr ""
21908
21909
#: serverguide/C/dns.xml:282(para)
21910
msgid ""
21911
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
21912
"Secondary nameserver."
21913
msgstr ""
21914
21915
#: serverguide/C/dns.xml:286(para)
21916
msgid ""
21917
"Next, on the Secondary Master, install the <application>bind9</application> "
21918
"package the same way as on the Primary. Then edit the "
21919
"<filename>/etc/bind/named.conf.local</filename> and add the following "
21920
"declarations for the Forward and Reverse zones:"
21921
msgstr ""
21922
21923
#: serverguide/C/dns.xml:290(programlisting)
21924
#, no-wrap
21925
msgid ""
21926
"\n"
21927
"zone \"example.com\" {\n"
21928
"\ttype slave;\n"
21929
" file \"/var/cache/bind/db.example.com\";\n"
21930
" masters { 192.168.1.10; };\n"
21931
"}; \n"
21932
" \n"
21933
"zone \"1.168.192.in-addr.arpa\" {\n"
21934
"\ttype slave;\n"
21935
" file \"/var/cache/bind/db.192\";\n"
21936
" masters { 192.168.1.10; };\n"
21937
"};\n"
21938
msgstr ""
21939
21940
#: serverguide/C/dns.xml:304(para)
21941
msgid ""
21942
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
21943
"Primary nameserver."
21944
msgstr ""
21945
21946
#: serverguide/C/dns.xml:308(para)
21947
msgid "Restart <application>BIND9</application> on the Secondary Master:"
21948
msgstr ""
21949
21950
#: serverguide/C/dns.xml:314(para)
21951
msgid ""
21952
"In <filename>/var/log/syslog</filename> you should see something similar to:"
21953
msgstr ""
21954
21955
#: serverguide/C/dns.xml:317(programlisting)
21956
#, no-wrap
21957
msgid ""
21958
"\n"
21959
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
21960
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
21961
msgstr ""
21962
21963
#: serverguide/C/dns.xml:322(para)
21964
msgid ""
21965
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
21966
"on the Primary is larger than the one on the Secondary."
21967
msgstr ""
21968
21969
#: serverguide/C/dns.xml:328(para)
21970
msgid ""
21971
"The default directory for non-authoritative zone files is "
21972
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
21973
"<application>AppArmor</application> to allow the "
21974
"<application>named</application> daemon to write to. For more information on "
21975
"AppArmor see <xref linkend=\"apparmor\"/>."
21976
msgstr ""
21977
21978
#: serverguide/C/dns.xml:339(para)
21979
msgid ""
21980
"This section covers ways to help determine the cause when problems happen "
21981
"with DNS and <application>BIND9</application>."
21982
msgstr ""
21983
21984
#: serverguide/C/dns.xml:345(title)
21985
msgid "resolv.conf"
21986
msgstr ""
21987
21988
#: serverguide/C/dns.xml:346(para)
21989
msgid ""
21990
"The first step in testing <application>BIND9</application> is to add the "
21991
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
21992
"be configured as well as another host to double check things. Simply edit "
21993
"<filename>/etc/resolv.conf</filename> and add the following:"
21994
msgstr ""
21995
21996
#: serverguide/C/dns.xml:351(programlisting)
21997
#, no-wrap
21998
msgid ""
21999
"\n"
22000
"nameserver\t192.168.1.10\n"
22001
"nameserver\t192.168.1.11\n"
22002
msgstr ""
22003
22004
#: serverguide/C/dns.xml:356(para)
22005
msgid ""
22006
"You should also add the IP Address of the Secondary nameserver in case the "
22007
"Primary becomes unavailable."
22008
msgstr ""
22009
22010
#: serverguide/C/dns.xml:362(title)
22011
msgid "dig"
22012
msgstr ""
22013
22014
#: serverguide/C/dns.xml:363(para)
22015
msgid ""
22016
"If you installed the <application>dnsutils</application> package you can "
22017
"test your setup using the DNS lookup utility <application>dig</application>:"
22018
msgstr ""
22019
22020
#: serverguide/C/dns.xml:369(para)
22021
msgid ""
22022
"After installing <application>BIND9</application> use "
22023
"<application>dig</application> against the loopback interface to make sure "
22024
"it is listening on port 53. From a terminal prompt:"
22025
msgstr ""
22026
22027
#: serverguide/C/dns.xml:374(command)
22028
msgid "dig -x 127.0.0.1"
22029
msgstr ""
22030
22031
#: serverguide/C/dns.xml:376(para)
22032
msgid "You should see lines similar to the following in the command output:"
22033
msgstr ""
22034
22035
#: serverguide/C/dns.xml:379(programlisting)
22036
#, no-wrap
22037
msgid ""
22038
"\n"
22039
";; Query time: 1 msec\n"
22040
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22041
msgstr ""
22042
22043
#: serverguide/C/dns.xml:385(para)
22044
msgid ""
22045
"If you have configured <application>BIND9</application> as a "
22046
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22047
"the query time:"
22048
msgstr ""
22049
22050
#: serverguide/C/dns.xml:390(command)
22051
msgid "dig ubuntu.com"
22052
msgstr ""
22053
22054
#: serverguide/C/dns.xml:392(para)
22055
msgid "Note the query time toward the end of the command output:"
22056
msgstr ""
22057
22058
#: serverguide/C/dns.xml:395(programlisting)
22059
#, no-wrap
22060
msgid ""
22061
"\n"
22062
";; Query time: 49 msec\n"
22063
msgstr ""
22064
22065
#: serverguide/C/dns.xml:398(para)
22066
msgid "After a second dig there should be improvement:"
22067
msgstr ""
22068
22069
#: serverguide/C/dns.xml:401(programlisting)
22070
#, no-wrap
22071
msgid ""
22072
"\n"
22073
";; Query time: 1 msec\n"
22074
msgstr ""
22075
22076
#: serverguide/C/dns.xml:408(title)
22077
msgid "ping"
22078
msgstr ""
22079
22080
#: serverguide/C/dns.xml:410(para)
22081
msgid ""
22082
"Now to demonstrate how applications make use of DNS to resolve a host name "
22083
"use the <application>ping</application> utility to send an ICMP echo "
22084
"request. From a terminal prompt enter:"
22085
msgstr ""
22086
22087
#: serverguide/C/dns.xml:416(command)
22088
msgid "ping example.com"
22089
msgstr ""
22090
22091
#: serverguide/C/dns.xml:418(para)
22092
msgid ""
22093
"This tests if the nameserver can resolve the name "
22094
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22095
"should resemble:"
22096
msgstr ""
22097
22098
#: serverguide/C/dns.xml:422(programlisting)
22099
#, no-wrap
22100
msgid ""
22101
"\n"
22102
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22103
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22104
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22105
msgstr ""
22106
22107
#: serverguide/C/dns.xml:429(title)
22108
msgid "named-checkzone"
22109
msgstr ""
22110
22111
#: serverguide/C/dns.xml:430(para)
22112
msgid ""
22113
"A great way to test your zone files is by using the <application>named-"
22114
"checkzone</application> utility installed with the "
22115
"<application>bind9</application> package. This utility allows you to make "
22116
"sure the configuration is correct before restarting "
22117
"<application>BIND9</application> and making the changes live."
22118
msgstr ""
22119
22120
#: serverguide/C/dns.xml:437(para)
22121
msgid ""
22122
"To test our example Forward zone file enter the following from a command "
22123
"prompt:"
22124
msgstr ""
22125
22126
#: serverguide/C/dns.xml:441(command)
22127
msgid "named-checkzone example.com /etc/bind/db.example.com"
22128
msgstr ""
22129
22130
#: serverguide/C/dns.xml:443(para)
22131
msgid ""
22132
"If everything is configured correctly you should see output similar to:"
22133
msgstr ""
22134
22135
#: serverguide/C/dns.xml:446(programlisting)
22136
#, no-wrap
22137
msgid ""
22138
"\n"
22139
"zone example.com/IN: loaded serial 6\n"
22140
"OK\n"
22141
msgstr ""
22142
22143
#: serverguide/C/dns.xml:452(para)
22144
msgid "Similarly, to test the Reverse zone file enter the following:"
22145
msgstr ""
22146
22147
#: serverguide/C/dns.xml:456(command)
22148
msgid "named-checkzone example.com /etc/bind/db.192"
22149
msgstr ""
22150
22151
#: serverguide/C/dns.xml:458(para)
22152
msgid "The output should be similar to:"
22153
msgstr ""
22154
22155
#: serverguide/C/dns.xml:461(programlisting)
22156
#, no-wrap
22157
msgid ""
22158
"\n"
22159
"zone example.com/IN: loaded serial 3\n"
22160
"OK\n"
22161
msgstr ""
22162
22163
#: serverguide/C/dns.xml:468(para)
22164
msgid ""
22165
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22166
"different."
22167
msgstr ""
22168
22169
#: serverguide/C/dns.xml:475(title)
22170
msgid "Logging"
22171
msgstr ""
22172
22173
#: serverguide/C/dns.xml:476(para)
22174
msgid ""
22175
"<application>BIND9</application> has a wide variety of logging configuration "
22176
"options available. There are two main options. The "
22177
"<emphasis>channel</emphasis> option configures where logs go, and the "
22178
"<emphasis>category</emphasis> option determines what information to log."
22179
msgstr ""
22180
22181
#: serverguide/C/dns.xml:480(para)
22182
msgid "If no logging option is configured the default option is:"
22183
msgstr ""
22184
22185
#: serverguide/C/dns.xml:483(programlisting)
22186
#, no-wrap
22187
msgid ""
22188
"\n"
22189
"logging {\n"
22190
" category default { default_syslog; default_debug; };\n"
22191
" category unmatched { null; };\n"
22192
"};\n"
22193
msgstr ""
22194
22195
#: serverguide/C/dns.xml:489(para)
22196
msgid ""
22197
"This section covers configuring <application>BIND9</application> to send "
22198
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22199
"file."
22200
msgstr ""
22201
22202
#: serverguide/C/dns.xml:494(para)
22203
msgid ""
22204
"First, we need to configure a channel to specify which file to send the "
22205
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22206
"the following:"
22207
msgstr ""
22208
22209
#: serverguide/C/dns.xml:498(programlisting)
22210
#, no-wrap
22211
msgid ""
22212
"\n"
22213
"logging {\n"
22214
" channel query.log { \n"
22215
" file \"/var/log/query.log\";\n"
22216
" severity debug 3; \n"
22217
" }; \n"
22218
"};\n"
22219
msgstr ""
22220
22221
#: serverguide/C/dns.xml:508(para)
22222
msgid "Next, configure a category to send all DNS queries to the query file:"
22223
msgstr ""
22224
22225
#: serverguide/C/dns.xml:511(programlisting)
22226
#, no-wrap
22227
msgid ""
22228
"\n"
22229
"logging {\n"
22230
" channel query.log { \n"
22231
" file \"/var/log/query.log\"; \n"
22232
" severity debug 3; \n"
22233
" }; \n"
22234
" <emphasis>category queries { query.log; };</emphasis> \n"
22235
"};\n"
22236
msgstr ""
22237
22238
#: serverguide/C/dns.xml:523(para)
22239
msgid ""
22240
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22241
"level isn't specified level 1 is the default."
22242
msgstr ""
22243
22244
#: serverguide/C/dns.xml:529(para)
22245
msgid ""
22246
"Since the <emphasis>named daemon</emphasis> runs as the "
22247
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22248
"file must be created and the ownership changed:"
22249
msgstr ""
22250
22251
#: serverguide/C/dns.xml:534(command)
22252
msgid "sudo touch /var/log/query.log"
22253
msgstr ""
22254
22255
#: serverguide/C/dns.xml:535(command)
22256
msgid "sudo chown bind /var/log/query.log"
22257
msgstr ""
22258
22259
#: serverguide/C/dns.xml:539(para)
22260
msgid ""
22261
"Before <application>named</application> daemon can write to the new log file "
22262
"the <application>AppArmor</application> profile must be updated. First, edit "
22263
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22264
msgstr ""
22265
22266
#: serverguide/C/dns.xml:543(programlisting)
22267
#, no-wrap
22268
msgid ""
22269
"\n"
22270
"/var/log/query.log w,\n"
22271
msgstr ""
22272
22273
#: serverguide/C/dns.xml:546(para)
22274
msgid "Next, reload the profile:"
22275
msgstr ""
22276
22277
#: serverguide/C/dns.xml:550(command)
22278
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22279
msgstr ""
22280
22281
#: serverguide/C/dns.xml:552(para)
22282
msgid ""
22283
"For more information on <application>AppArmor</application> see <xref "
22284
"linkend=\"apparmor\"/>"
22285
msgstr ""
22286
22287
#: serverguide/C/dns.xml:557(para)
22288
msgid ""
22289
"Now restart <application>BIND9</application> for the changes to take effect:"
22290
msgstr ""
22291
22292
#: serverguide/C/dns.xml:565(para)
22293
msgid ""
22294
"You should see the file <filename>/var/log/query.log</filename> fill with "
22295
"query information. This is a simple example of the "
22296
"<application>BIND9</application> logging options. For coverage of advanced "
22297
"options see <xref linkend=\"dns-more-info\"/>."
22298
msgstr ""
22299
22300
#: serverguide/C/dns.xml:574(title)
22301
msgid "Common Record Types"
22302
msgstr ""
22303
22304
#: serverguide/C/dns.xml:575(para)
22305
msgid "This section covers some of the most common DNS record types."
22306
msgstr ""
22307
22308
#: serverguide/C/dns.xml:580(para)
22309
msgid ""
22310
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22311
msgstr ""
22312
22313
#: serverguide/C/dns.xml:583(programlisting)
22314
#, no-wrap
22315
msgid ""
22316
"\n"
22317
"www IN A 192.168.1.12\n"
22318
msgstr ""
22319
22320
#: serverguide/C/dns.xml:588(para)
22321
msgid ""
22322
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22323
"record. You cannot create a CNAME record pointing to another CNAME record."
22324
msgstr ""
22325
22326
#: serverguide/C/dns.xml:591(programlisting)
22327
#, no-wrap
22328
msgid ""
22329
"\n"
22330
"web IN CNAME www\n"
22331
msgstr ""
22332
22333
#: serverguide/C/dns.xml:596(para)
22334
msgid ""
22335
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22336
"to. Must point to an A record, not a CNAME."
22337
msgstr ""
22338
22339
#: serverguide/C/dns.xml:599(programlisting)
22340
#, no-wrap
22341
msgid ""
22342
"\n"
22343
" IN MX 1 mail.example.com.\n"
22344
"mail IN A 192.168.1.13\n"
22345
msgstr ""
22346
22347
#: serverguide/C/dns.xml:605(para)
22348
msgid ""
22349
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22350
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22351
"Secondary servers are defined."
22352
msgstr ""
22353
22354
#: serverguide/C/dns.xml:609(programlisting)
22355
#, no-wrap
22356
msgid ""
22357
"\n"
22358
" IN NS ns.example.com.\n"
22359
"\tIN NS ns2.example.com.\n"
22360
"ns IN A 192.168.1.10\n"
22361
"ns2\tIN A\t 192.168.1.11\n"
22362
msgstr ""
22363
22364
#: serverguide/C/dns.xml:622(para)
22365
msgid ""
22366
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22367
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22368
msgstr ""
22369
22370
#: serverguide/C/dns.xml:627(para)
22371
msgid ""
22372
"For in depth coverage of <emphasis>DNS</emphasis> and "
22373
"<application>BIND9</application> see <ulink "
22374
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22375
msgstr ""
22376
22377
#: serverguide/C/dns.xml:632(para)
22378
msgid ""
22379
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22380
"BIND</ulink> is a popular book now in it's fifth edition."
22381
msgstr ""
22382
22383
#: serverguide/C/dns.xml:637(para)
22384
msgid ""
22385
"A great place to ask for <application>BIND9</application> assistance, and "
22386
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22387
"server</emphasis> IRC channel on <ulink "
22388
"url=\"http://freenode.net\">freenode</ulink>."
22389
msgstr ""
22390
22391
#: serverguide/C/dns.xml:643(para)
22392
msgid ""
22393
"Also, see the <ulink "
22394
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22395
"HOWTO</ulink> in the Ubuntu Wiki."
22396
msgstr ""
22397
22398
#: serverguide/C/databases.xml:13(title)
22399
msgid "Databases"
22400
msgstr ""
22401
22402
#: serverguide/C/databases.xml:14(para)
22403
msgid "Ubuntu provides two popular database servers. They are:"
22404
msgstr ""
22405
22406
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22407
msgid "PostgreSQL"
22408
msgstr ""
22409
22410
#: serverguide/C/databases.xml:25(para)
22411
msgid ""
22412
"They are available in the main repository. This section explains how to "
22413
"install and configure these database servers."
22414
msgstr ""
22415
22416
#: serverguide/C/databases.xml:32(para)
22417
msgid ""
22418
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22419
"It is intended for mission-critical, heavy-load production systems as well "
22420
"as for embedding into mass-deployed software."
22421
msgstr ""
22422
22423
#: serverguide/C/databases.xml:41(para)
22424
msgid "To install MySQL, run the following command from a terminal prompt:"
22425
msgstr ""
22426
22427
#: serverguide/C/databases.xml:46(command)
22428
msgid "sudo apt-get install mysql-server"
22429
msgstr ""
22430
22431
#: serverguide/C/databases.xml:48(para)
22432
msgid ""
22433
"During the installation process you will be prompted to enter a password for "
22434
"the <application>MySQL</application> root user."
22435
msgstr ""
22436
22437
#: serverguide/C/databases.xml:53(para)
22438
msgid ""
22439
"Once the installation is complete, the MySQL server should be started "
22440
"automatically. You can run the following command from a terminal prompt to "
22441
"check whether the MySQL server is running:"
22442
msgstr ""
22443
22444
#: serverguide/C/databases.xml:61(command)
22445
msgid "sudo netstat -tap | grep mysql"
22446
msgstr ""
22447
22448
#: serverguide/C/databases.xml:70(programlisting)
22449
#, no-wrap
22450
msgid ""
22451
"\n"
22452
"tcp 0 0 localhost:mysql *:* LISTEN "
22453
" 2556/mysqld\n"
22454
msgstr ""
22455
22456
#: serverguide/C/databases.xml:74(para)
22457
msgid ""
22458
"If the server is not running correctly, you can type the following command "
22459
"to start it:"
22460
msgstr ""
22461
22462
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22463
msgid "sudo /etc/init.d/mysql restart"
22464
msgstr ""
22465
22466
#: serverguide/C/databases.xml:85(para)
22467
msgid ""
22468
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22469
"the basic settings -- log file, port number, etc. For example, to configure "
22470
"<application>MySQL</application> to listen for connections from network "
22471
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22472
"server's IP address:"
22473
msgstr ""
22474
22475
#: serverguide/C/databases.xml:91(programlisting)
22476
#, no-wrap
22477
msgid ""
22478
"\n"
22479
"bind-address = 192.168.0.5\n"
22480
msgstr ""
22481
22482
#: serverguide/C/databases.xml:95(para)
22483
msgid "Replace 192.168.0.5 with the appropriate address."
22484
msgstr ""
22485
22486
#: serverguide/C/databases.xml:99(para)
22487
msgid ""
22488
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22489
"<application>mysql</application> daemon will need to be restarted:"
22490
msgstr ""
22491
22492
#: serverguide/C/databases.xml:107(para)
22493
msgid ""
22494
"If you would like to change the "
22495
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22496
"terminal enter:"
22497
msgstr ""
22498
22499
#: serverguide/C/databases.xml:113(command)
22500
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22501
msgstr ""
22502
22503
#: serverguide/C/databases.xml:116(para)
22504
msgid ""
22505
"The <application>mysql</application> daemon will be stopped, and you will be "
22506
"prompted to enter a new password."
22507
msgstr ""
22508
22509
#: serverguide/C/databases.xml:125(para)
22510
msgid ""
22511
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22512
"more information."
22513
msgstr ""
22514
22515
#: serverguide/C/databases.xml:130(para)
22516
msgid ""
22517
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22518
"<application>mysql-doc-5.0</application> package. To install the package "
22519
"enter the following in a terminal:"
22520
msgstr ""
22521
22522
#: serverguide/C/databases.xml:135(command)
22523
msgid "sudo apt-get install mysql-doc-5.0"
22524
msgstr ""
22525
22526
#: serverguide/C/databases.xml:137(para)
22527
msgid ""
22528
"The documentation is in HTML format, to view them enter "
22529
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22530
"chapter/index.html</command> in your browser's address bar."
22531
msgstr ""
22532
22533
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22534
msgid ""
22535
"For general SQL information see <ulink "
22536
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22537
"Special Edition</ulink> by Rafe Colburn."
22538
msgstr ""
22539
22540
#: serverguide/C/databases.xml:149(para)
22541
msgid ""
22542
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22543
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22544
msgstr ""
22545
22546
#: serverguide/C/databases.xml:158(para)
22547
msgid ""
22548
"PostgreSQL is an object-relational database system that has the features of "
22549
"traditional commercial database systems with enhancements to be found in "
22550
"next-generation DBMS systems."
22551
msgstr ""
22552
22553
#: serverguide/C/databases.xml:165(para)
22554
msgid ""
22555
"To install PostgreSQL, run the following command in the command prompt:"
22556
msgstr ""
22557
22558
#: serverguide/C/databases.xml:172(command)
22559
msgid "sudo apt-get install postgresql"
22560
msgstr ""
22561
22562
#: serverguide/C/databases.xml:176(para)
22563
msgid ""
22564
"Once the installation is complete, you should configure the PostgreSQL "
22565
"server based on your needs, although the default configuration is viable."
22566
msgstr ""
22567
22568
#: serverguide/C/databases.xml:184(para)
22569
msgid ""
22570
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22571
"client authentication methods. By default, IDENT authentication method is "
22572
"used for <application>postgres</application> and local users. Please refer "
22573
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22574
"PostgreSQL Administrator's Guide</ulink>."
22575
msgstr ""
22576
22577
#: serverguide/C/databases.xml:191(para)
22578
msgid ""
22579
"The following discussion assumes that you wish to enable TCP/IP connections "
22580
"and use the MD5 method for client authentication. PostgreSQL configuration "
22581
"files are stored in the "
22582
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22583
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22584
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22585
msgstr ""
22586
22587
#: serverguide/C/databases.xml:201(para)
22588
msgid ""
22589
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
22590
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
22591
msgstr ""
22592
22593
#: serverguide/C/databases.xml:208(para)
22594
msgid ""
22595
"To enable TCP/IP connections, edit the file "
22596
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
22597
msgstr ""
22598
22599
#: serverguide/C/databases.xml:210(para)
22600
msgid ""
22601
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
22602
"change it to:"
22603
msgstr ""
22604
22605
#: serverguide/C/databases.xml:213(programlisting)
22606
#, no-wrap
22607
msgid ""
22608
"\n"
22609
"listen_addresses = 'localhost'\n"
22610
msgstr ""
22611
22612
#: serverguide/C/databases.xml:217(para)
22613
msgid ""
22614
"To allow other computers to connect to your "
22615
"<application>PostgreSQL</application> server replace 'localhost' with the "
22616
"<emphasis>IP Address</emphasis> of your server."
22617
msgstr ""
22618
22619
#: serverguide/C/databases.xml:222(para)
22620
msgid ""
22621
"You may also edit all other parameters, if you know what you are doing! For "
22622
"details, refer to the configuration file or to the PostgreSQL documentation."
22623
msgstr ""
22624
22625
#: serverguide/C/databases.xml:227(para)
22626
msgid ""
22627
"Now that we can connect to our <application>PostgreSQL</application> server, "
22628
"the next step is to set a password for the <emphasis>postgres</emphasis> "
22629
"user. Run the following command at a terminal prompt to connect to the "
22630
"default PostgreSQL template database:"
22631
msgstr ""
22632
22633
#: serverguide/C/databases.xml:234(command)
22634
msgid "sudo -u postgres psql template1"
22635
msgstr ""
22636
22637
#: serverguide/C/databases.xml:236(para)
22638
msgid ""
22639
"The above command connects to PostgreSQL database "
22640
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
22641
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
22642
"run the following SQL command at the <application>psql</application> prompt "
22643
"to configure the password for the user <emphasis "
22644
"role=\"italics\">postgres</emphasis>."
22645
msgstr ""
22646
22647
#: serverguide/C/databases.xml:244(command)
22648
msgid "ALTER USER postgres with encrypted password 'your_password';"
22649
msgstr ""
22650
22651
#: serverguide/C/databases.xml:246(para)
22652
msgid ""
22653
"After configuring the password, edit the file "
22654
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
22655
"<emphasis>MD5</emphasis> authentication with the "
22656
"<emphasis>postgres</emphasis> user:"
22657
msgstr ""
22658
22659
#: serverguide/C/databases.xml:252(programlisting)
22660
#, no-wrap
22661
msgid ""
22662
"\n"
22663
"local all postgres md5\n"
22664
msgstr ""
22665
22666
#: serverguide/C/databases.xml:256(para)
22667
msgid ""
22668
"Finally, you should restart the <application>PostgreSQL</application> "
22669
"service to initialize the new configuration. From a terminal prompt enter "
22670
"the following to restart <application>PostgreSQL</application>:"
22671
msgstr ""
22672
22673
#: serverguide/C/databases.xml:262(command)
22674
msgid "sudo /etc/init.d/postgresql-8.4 restart"
22675
msgstr ""
22676
22677
#: serverguide/C/databases.xml:265(para)
22678
msgid ""
22679
"The above configuration is not complete by any means. Please refer <ulink "
22680
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
22681
"Administrator's Guide</ulink> to configure more parameters."
22682
msgstr ""
22683
22684
#: serverguide/C/databases.xml:276(para)
22685
msgid ""
22686
"As mentioned above the <ulink "
22687
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
22688
"Guide</ulink> is an excellent resource. The guide is also available in the "
22689
"<application>postgresql-doc-8.4</application> package. Execute the following "
22690
"in a terminal to install the package:"
22691
msgstr ""
22692
22693
#: serverguide/C/databases.xml:282(command)
22694
msgid "sudo apt-get install postgresql-doc-8.4"
22695
msgstr ""
22696
22697
#: serverguide/C/databases.xml:284(para)
22698
msgid ""
22699
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
22700
"8.4/html/index.html</command> into the address bar of your browser."
22701
msgstr ""
22702
22703
#: serverguide/C/databases.xml:296(para)
22704
msgid ""
22705
"Also, see the <ulink "
22706
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
22707
"Wiki</ulink> page for more information."
22708
msgstr ""
22709
22710
#: serverguide/C/clustering.xml:13(title)
22711
msgid "Clustering"
22712
msgstr ""
22713
22714
#: serverguide/C/clustering.xml:16(title)
22715
msgid "DRBD"
22716
msgstr ""
22717
22718
#: serverguide/C/clustering.xml:18(para)
22719
msgid ""
22720
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
22721
"multiple hosts. The replication is transparent to other applications on the "
22722
"host systems. Any block device hard disks, partitions, RAID devices, logical "
22723
"volumes, etc can be mirrored."
22724
msgstr ""
22725
22726
#: serverguide/C/clustering.xml:24(para)
22727
msgid ""
22728
"To get started using <application>drbd</application>, first install the "
22729
"necessary packages. From a terminal enter:"
22730
msgstr ""
22731
22732
#: serverguide/C/clustering.xml:29(command)
22733
msgid "sudo apt-get install drbd8-utils"
22734
msgstr ""
22735
22736
#: serverguide/C/clustering.xml:33(para)
22737
msgid ""
22738
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
22739
"virtual machine you will need to manually compile the "
22740
"<application>drbd</application> module. It may be easier to install the "
22741
"<application>linux-server</application> package inside the virtual machine."
22742
msgstr ""
22743
22744
#: serverguide/C/clustering.xml:40(para)
22745
msgid ""
22746
"This section covers setting up a <application>drbd</application> to "
22747
"replicate a separate <filename>/srv</filename> partition, with an "
22748
"<application>ext3</application> filesystem between two hosts. The partition "
22749
"size is not particularly relevant, but both partitions need to be the same "
22750
"size."
22751
msgstr ""
22752
22753
#: serverguide/C/clustering.xml:49(para)
22754
msgid ""
22755
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
22756
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
22757
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
22758
"See <xref linkend=\"dns\"/> for details."
22759
msgstr ""
22760
22761
#: serverguide/C/clustering.xml:57(para)
22762
msgid ""
22763
"To configure <application>drbd</application>, on the first host edit "
22764
"<filename>/etc/drbd.conf</filename>:"
22765
msgstr ""
22766
22767
#: serverguide/C/clustering.xml:61(programlisting)
22768
#, no-wrap
22769
msgid ""
22770
"\n"
22771
"global { usage-count no; }\n"
22772
"common { syncer { rate 100M; } }\n"
22773
"resource r0 {\n"
22774
" protocol C;\n"
22775
" startup {\n"
22776
" wfc-timeout 15;\n"
22777
" degr-wfc-timeout 60;\n"
22778
" }\n"
22779
" net {\n"
22780
" cram-hmac-alg sha1;\n"
22781
" shared-secret \"secret\";\n"
22782
" }\n"
22783
" on drbd01 {\n"
22784
" device /dev/drbd0;\n"
22785
" disk /dev/sdb1;\n"
22786
" address 192.168.0.1:7788;\n"
22787
" meta-disk internal;\n"
22788
" }\n"
22789
" on drbd02 {\n"
22790
" device /dev/drbd0;\n"
22791
" disk /dev/sdb1;\n"
22792
" address 192.168.0.2:7788;\n"
22793
" meta-disk internal;\n"
22794
" }\n"
22795
"} \n"
22796
msgstr ""
22797
22798
#: serverguide/C/clustering.xml:90(para)
22799
msgid ""
22800
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
22801
"this example their default values are fine."
22802
msgstr ""
22803
22804
#: serverguide/C/clustering.xml:98(para)
22805
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
22806
msgstr ""
22807
22808
#: serverguide/C/clustering.xml:103(command)
22809
msgid "scp /etc/drbd.conf drbd02:~"
22810
msgstr ""
22811
22812
#: serverguide/C/clustering.xml:109(para)
22813
msgid ""
22814
"And, on <emphasis>drbd02</emphasis> move the file to "
22815
"<filename>/etc</filename>:"
22816
msgstr ""
22817
22818
#: serverguide/C/clustering.xml:114(command)
22819
msgid "sudo mv drbd.conf /etc/"
22820
msgstr ""
22821
22822
#: serverguide/C/clustering.xml:120(para)
22823
msgid ""
22824
"Next, on both hosts, start the <application>drbd</application> daemon:"
22825
msgstr ""
22826
22827
#: serverguide/C/clustering.xml:125(command)
22828
msgid "sudo /etc/init.d/drbd start"
22829
msgstr ""
22830
22831
#: serverguide/C/clustering.xml:131(para)
22832
msgid ""
22833
"Now using the <application>drbdadm</application> utility initialize the meta "
22834
"data storage. On each server execute:"
22835
msgstr ""
22836
22837
#: serverguide/C/clustering.xml:137(command)
22838
msgid "sudo drbdadm create-md r0"
22839
msgstr ""
22840
22841
#: serverguide/C/clustering.xml:143(para)
22842
msgid ""
22843
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
22844
"primary, enter the following:"
22845
msgstr ""
22846
22847
#: serverguide/C/clustering.xml:148(command)
22848
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
22849
msgstr ""
22850
22851
#: serverguide/C/clustering.xml:154(para)
22852
msgid ""
22853
"After executing the above command, the data will start syncing with the "
22854
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
22855
"the following:"
22856
msgstr ""
22857
22858
#: serverguide/C/clustering.xml:160(command)
22859
msgid "watch -n1 cat /proc/drbd"
22860
msgstr ""
22861
22862
#: serverguide/C/clustering.xml:163(para)
22863
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
22864
msgstr ""
22865
22866
#: serverguide/C/clustering.xml:170(para)
22867
msgid ""
22868
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
22869
msgstr ""
22870
22871
#: serverguide/C/clustering.xml:175(command)
22872
msgid "sudo mkfs.ext3 /dev/drbd0"
22873
msgstr ""
22874
22875
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
22876
msgid "sudo mount /dev/drbd0 /srv"
22877
msgstr ""
22878
22879
#: serverguide/C/clustering.xml:186(para)
22880
msgid ""
22881
"To test that the data is actually syncing between the hosts copy some files "
22882
"on the <emphasis>drbd01</emphasis>, the primary, to "
22883
"<filename>/srv</filename>:"
22884
msgstr ""
22885
22886
#: serverguide/C/clustering.xml:195(para)
22887
msgid "Next, unmount <filename>/srv</filename>:"
22888
msgstr ""
22889
22890
#: serverguide/C/clustering.xml:203(para)
22891
msgid ""
22892
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
22893
"<emphasis>secondary</emphasis> role:"
22894
msgstr ""
22895
22896
#: serverguide/C/clustering.xml:208(command)
22897
msgid "sudo drbdadm secondary r0"
22898
msgstr ""
22899
22900
#: serverguide/C/clustering.xml:211(para)
22901
msgid ""
22902
"Now on the <emphasis>secondary</emphasis> server "
22903
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
22904
msgstr ""
22905
22906
#: serverguide/C/clustering.xml:216(command)
22907
msgid "sudo drbdadm primary r0"
22908
msgstr ""
22909
22910
#: serverguide/C/clustering.xml:219(para)
22911
msgid "Lastly, mount the partition:"
22912
msgstr ""
22913
22914
#: serverguide/C/clustering.xml:227(para)
22915
msgid ""
22916
"Using <emphasis>ls</emphasis> you should see "
22917
"<filename>/srv/default</filename> copied from the former "
22918
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
22919
msgstr ""
22920
22921
#: serverguide/C/clustering.xml:238(para)
22922
msgid ""
22923
"For more information on <application>DRBD</application> see the <ulink "
22924
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
22925
msgstr ""
22926
22927
#: serverguide/C/clustering.xml:243(para)
22928
msgid ""
22929
"The <ulink "
22930
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
22931
"bd.conf man page</ulink> contains details on the options not covered in this "
22932
"guide."
22933
msgstr ""
22934
22935
#: serverguide/C/clustering.xml:249(para)
22936
msgid ""
22937
"Also, see the <ulink "
22938
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
22939
"adm man page</ulink>."
22940
msgstr ""
22941
22942
#: serverguide/C/clustering.xml:254(para)
22943
msgid ""
22944
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
22945
"Wiki</ulink> page also has more information."
22946
msgstr ""
22947
22948
#: serverguide/C/chat.xml:13(title)
22949
msgid "Chat Applications"
22950
msgstr ""
22951
22952
#: serverguide/C/chat.xml:19(para)
22953
msgid ""
22954
"In this section, we will discuss how to install and configure a IRC server, "
22955
"<application>ircd-irc2</application>. We will also discuss how to install "
22956
"and configure Jabber, an instance messaging server."
22957
msgstr ""
22958
22959
#: serverguide/C/chat.xml:28(title)
22960
msgid "IRC Server"
22961
msgstr ""
22962
22963
#: serverguide/C/chat.xml:30(para)
22964
msgid ""
22965
"The Ubuntu repository has many Internet Relay Chat servers. This section "
22966
"explains how to install and configure the original IRC server "
22967
"<application>ircd-irc2</application>."
22968
msgstr ""
22969
22970
#: serverguide/C/chat.xml:39(para)
22971
msgid ""
22972
"To install <application>ircd-irc2</application>, run the following command "
22973
"in the command prompt:"
22974
msgstr ""
22975
22976
#: serverguide/C/chat.xml:45(command)
22977
msgid "sudo apt-get install ircd-irc2"
22978
msgstr ""
22979
22980
#: serverguide/C/chat.xml:48(para)
22981
msgid ""
22982
"The configuration files are stored in <filename>/etc/ircd</filename> "
22983
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
22984
"irc2</filename> directory."
22985
msgstr ""
22986
22987
#: serverguide/C/chat.xml:59(para)
22988
msgid ""
22989
"The IRC settings can be done in the configuration file "
22990
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
22991
"this file by editing the following line:"
22992
msgstr ""
22993
22994
#: serverguide/C/chat.xml:64(programlisting)
22995
#, no-wrap
22996
msgid ""
22997
"\n"
22998
"M:irc.localhost::Debian ircd default configuration::000A\n"
22999
msgstr ""
23000
23001
#: serverguide/C/chat.xml:68(para)
23002
msgid ""
23003
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23004
"you set irc.livecipher.com as IRC host name, please make sure "
23005
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23006
"name should not be same as the host name."
23007
msgstr ""
23008
23009
#: serverguide/C/chat.xml:75(para)
23010
msgid ""
23011
"The IRC admin details can be configured by editting the following line:"
23012
msgstr ""
23013
23014
#: serverguide/C/chat.xml:80(programlisting)
23015
#, no-wrap
23016
msgid ""
23017
"\n"
23018
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23019
"Server::IRCnet:\n"
23020
msgstr ""
23021
23022
#: serverguide/C/chat.xml:84(para)
23023
msgid ""
23024
"You should add specific lines to configure the list of IRC ports to listen "
23025
"on, to configure Operator credentials, to configure client authentication, "
23026
"etc. For details, please refer to the example configuration file "
23027
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23028
msgstr ""
23029
23030
#: serverguide/C/chat.xml:92(para)
23031
msgid ""
23032
"The IRC banner to be displayed in the IRC client, when the user connects to "
23033
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23034
msgstr ""
23035
23036
#: serverguide/C/chat.xml:97(para)
23037
msgid ""
23038
"After making necessary changes to the configuration file, you can restart "
23039
"the IRC server using following command:"
23040
msgstr ""
23041
23042
#: serverguide/C/chat.xml:101(programlisting)
23043
#, no-wrap
23044
msgid ""
23045
"\n"
23046
"sudo /etc/init.d/ircd-irc2 restart\n"
23047
msgstr ""
23048
23049
#: serverguide/C/chat.xml:109(para)
23050
msgid ""
23051
"You may also be interested to take a look at other IRC servers available in "
23052
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23053
"<application>ircd-hybrid</application>."
23054
msgstr ""
23055
23056
#: serverguide/C/chat.xml:117(para)
23057
msgid ""
23058
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23059
"FAQ</ulink> for more details about the IRC Server."
23060
msgstr ""
23061
23062
#: serverguide/C/chat.xml:124(para)
23063
msgid ""
23064
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23065
"IRCD</ulink> page has more information."
23066
msgstr ""
23067
23068
#: serverguide/C/chat.xml:132(title)
23069
msgid "Jabber Instant Messaging Server"
23070
msgstr ""
23071
23072
#: serverguide/C/chat.xml:134(para)
23073
msgid ""
23074
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23075
"XMPP, an open standard for instant messaging, and used by many popular "
23076
"applications. This section covers setting up a <emphasis>Jabberd "
23077
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23078
"to providing messaging services to users over the Internet."
23079
msgstr ""
23080
23081
#: serverguide/C/chat.xml:143(para)
23082
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23083
msgstr ""
23084
23085
#: serverguide/C/chat.xml:148(command)
23086
msgid "sudo apt-get install jabberd2"
23087
msgstr ""
23088
23089
#: serverguide/C/chat.xml:155(para)
23090
msgid ""
23091
"A couple of XML configuration files will be used to configure "
23092
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23093
"authentication. This is a very simple form of authentication. However, "
23094
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23095
"Postgresql, etc for for user authentication."
23096
msgstr ""
23097
23098
#: serverguide/C/chat.xml:162(para)
23099
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23100
msgstr ""
23101
23102
#: serverguide/C/chat.xml:166(programlisting)
23103
#, no-wrap
23104
msgid ""
23105
"\n"
23106
" <id>jabber.example.com</id>\n"
23107
msgstr ""
23108
23109
#: serverguide/C/chat.xml:171(para)
23110
msgid ""
23111
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23112
"id, of your server."
23113
msgstr ""
23114
23115
#: serverguide/C/chat.xml:176(para)
23116
msgid "Now in the <storage> section change the <driver> to:"
23117
msgstr ""
23118
23119
#: serverguide/C/chat.xml:180(programlisting)
23120
#, no-wrap
23121
msgid ""
23122
"\n"
23123
" <driver>db</driver>\n"
23124
msgstr ""
23125
23126
#: serverguide/C/chat.xml:184(para)
23127
msgid ""
23128
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23129
"<emphasis><local></emphasis> section change:"
23130
msgstr ""
23131
23132
#: serverguide/C/chat.xml:188(programlisting)
23133
#, no-wrap
23134
msgid ""
23135
"\n"
23136
" <id>jabber.example.com</id>\n"
23137
msgstr ""
23138
23139
#: serverguide/C/chat.xml:192(para)
23140
msgid ""
23141
"And in the <authreg> section adjust the <module> section to:"
23142
msgstr ""
23143
23144
#: serverguide/C/chat.xml:196(programlisting)
23145
#, no-wrap
23146
msgid ""
23147
"\n"
23148
" <module>db</module>\n"
23149
msgstr ""
23150
23151
#: serverguide/C/chat.xml:200(para)
23152
msgid ""
23153
"Finally, restart <application>jabberd2</application> to enable the new "
23154
"settings:"
23155
msgstr ""
23156
23157
#: serverguide/C/chat.xml:205(command)
23158
msgid "sudo /etc/init.d/jabberd2 restart"
23159
msgstr ""
23160
23161
#: serverguide/C/chat.xml:208(para)
23162
msgid ""
23163
"You should now be able to connect to the server using a Jabber client like "
23164
"<application>Pidgin</application> for example."
23165
msgstr ""
23166
23167
#: serverguide/C/chat.xml:213(para)
23168
msgid ""
23169
"The advantage of using Berkeley DB for user data is that after being "
23170
"configured no additional maintenance is required. If you need more control "
23171
"over user accounts and credentials another authentication method is "
23172
"recommended."
23173
msgstr ""
23174
23175
#: serverguide/C/chat.xml:225(para)
23176
msgid ""
23177
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23178
"Site</ulink> contains more details on configuring "
23179
"<application>Jabberd2</application>."
23180
msgstr ""
23181
23182
#: serverguide/C/chat.xml:231(para)
23183
msgid ""
23184
"For more authentication options see the <ulink "
23185
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23186
"Guide</ulink>."
23187
msgstr ""
23188
23189
#: serverguide/C/chat.xml:236(para)
23190
msgid ""
23191
"Also, the <ulink "
23192
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23193
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23194
msgstr ""
23195
23196
#: serverguide/C/backups.xml:13(title)
23197
msgid "Backups"
23198
msgstr ""
23199
23200
#: serverguide/C/backups.xml:14(para)
23201
msgid ""
23202
"There are many ways to backup an Ubuntu installation. The most important "
23203
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23204
"consisting of what to backup, where to back it up to, and how to restore it."
23205
msgstr ""
23206
23207
#: serverguide/C/backups.xml:18(para)
23208
msgid ""
23209
"The following sections discuss various ways of accomplishing these tasks."
23210
msgstr ""
23211
23212
#: serverguide/C/backups.xml:22(title)
23213
msgid "Shell Scripts"
23214
msgstr ""
23215
23216
#: serverguide/C/backups.xml:23(para)
23217
msgid ""
23218
"One of the simplest ways to backup a system is using a <emphasis>shell "
23219
"script</emphasis>. For example, a script can be used to configure which "
23220
"directories to backup, and use those directories as arguments to the "
23221
"<application>tar</application> utility creating an archive file. The archive "
23222
"file can then be moved or copied to another location. The archive can also "
23223
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23224
msgstr ""
23225
23226
#: serverguide/C/backups.xml:29(para)
23227
msgid ""
23228
"The <application>tar</application> utility creates one archive file out of "
23229
"many files or directories. <application>tar</application> can also filter "
23230
"the files through compression utilities reducing the size of the archive "
23231
"file."
23232
msgstr ""
23233
23234
#: serverguide/C/backups.xml:35(title)
23235
msgid "Simple Shell Script"
23236
msgstr ""
23237
23238
#: serverguide/C/backups.xml:36(para)
23239
msgid ""
23240
"The following shell script uses <application>tar</application> to create an "
23241
"archive file on a remotely mounted NFS file system. The archive filename is "
23242
"determined using additional command line utilities."
23243
msgstr ""
23244
23245
#: serverguide/C/backups.xml:40(programlisting)
23246
#, no-wrap
23247
msgid ""
23248
"\n"
23249
"#!/bin/sh\n"
23250
"####################################\n"
23251
"#\n"
23252
"# Backup to NFS mount script.\n"
23253
"#\n"
23254
"####################################\n"
23255
"\n"
23256
"# What to backup. \n"
23257
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23258
"\n"
23259
"# Where to backup to.\n"
23260
"dest=\"/mnt/backup\"\n"
23261
"\n"
23262
"# Create archive filename.\n"
23263
"day=$(date +%A)\n"
23264
"hostname=$(hostname -s)\n"
23265
"archive_file=\"$hostname-$day.tgz\"\n"
23266
"\n"
23267
"# Print start status message.\n"
23268
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23269
"date\n"
23270
"echo\n"
23271
"\n"
23272
"# Backup the files using tar.\n"
23273
"tar czf $dest/$archive_file $backup_files\n"
23274
"\n"
23275
"# Print end status message.\n"
23276
"echo\n"
23277
"echo \"Backup finished\"\n"
23278
"date\n"
23279
"\n"
23280
"# Long listing of files in $dest to check file sizes.\n"
23281
"ls -lh $dest\n"
23282
msgstr ""
23283
23284
#: serverguide/C/backups.xml:77(para)
23285
msgid ""
23286
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23287
"would like to backup. The list should be customized to fit your needs."
23288
msgstr ""
23289
23290
#: serverguide/C/backups.xml:83(para)
23291
msgid ""
23292
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23293
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23294
"day of the week, giving a backup history of seven days. There are other ways "
23295
"to accomplish this including other ways using the "
23296
"<application>date</application> utility."
23297
msgstr ""
23298
23299
#: serverguide/C/backups.xml:90(para)
23300
msgid ""
23301
"<emphasis>$hostname:</emphasis> variable containing the "
23302
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23303
"archive filename gives you the option of placing daily archive files from "
23304
"multiple systems in the same directory."
23305
msgstr ""
23306
23307
#: serverguide/C/backups.xml:97(para)
23308
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23309
msgstr ""
23310
23311
#: serverguide/C/backups.xml:102(para)
23312
msgid ""
23313
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23314
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23315
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23316
"details using <emphasis>NFS</emphasis>."
23317
msgstr ""
23318
23319
#: serverguide/C/backups.xml:109(para)
23320
msgid ""
23321
"<emphasis>status messages:</emphasis> optional messages printed to the "
23322
"console using the <application>echo</application> utility."
23323
msgstr ""
23324
23325
#: serverguide/C/backups.xml:115(para)
23326
msgid ""
23327
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23328
"<application>tar</application> command used to create the archive file."
23329
msgstr ""
23330
23331
#: serverguide/C/backups.xml:121(para)
23332
msgid "<emphasis>c:</emphasis> creates an archive."
23333
msgstr ""
23334
23335
#: serverguide/C/backups.xml:126(para)
23336
msgid ""
23337
"<emphasis>z:</emphasis> filter the archive through the "
23338
"<application>gzip</application> utility compressing the archive."
23339
msgstr ""
23340
23341
#: serverguide/C/backups.xml:131(para)
23342
msgid ""
23343
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23344
"<application>tar</application> output will be sent to STDOUT."
23345
msgstr ""
23346
23347
#: serverguide/C/backups.xml:138(para)
23348
msgid ""
23349
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23350
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23351
"of the destination directory. This is useful for a quick file size check of "
23352
"the archive file. This check should not replace testing the archive file."
23353
msgstr ""
23354
23355
#: serverguide/C/backups.xml:145(para)
23356
msgid ""
23357
"This is a simple example of a backup shell script. There are large amount of "
23358
"options that can be included in a backup script. See <xref linkend=\"backup-"
23359
"shellscript-references\"/> for links to resources providing more in depth "
23360
"shell scripting information."
23361
msgstr ""
23362
23363
#: serverguide/C/backups.xml:152(title)
23364
msgid "Executing the Script"
23365
msgstr ""
23366
23367
#: serverguide/C/backups.xml:154(title)
23368
msgid "Executing from a Terminal"
23369
msgstr ""
23370
23371
#: serverguide/C/backups.xml:155(para)
23372
msgid ""
23373
"The simplest way of executing the above backup script is to copy and paste "
23374
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23375
"from a terminal prompt:"
23376
msgstr ""
23377
23378
#: serverguide/C/backups.xml:160(command)
23379
msgid "sudo bash backup.sh"
23380
msgstr ""
23381
23382
#: serverguide/C/backups.xml:162(para)
23383
msgid ""
23384
"This is a great way to test the script to make sure everything works as "
23385
"expected."
23386
msgstr ""
23387
23388
#: serverguide/C/backups.xml:167(title)
23389
msgid "Executing with cron"
23390
msgstr ""
23391
23392
#: serverguide/C/backups.xml:168(para)
23393
msgid ""
23394
"The <application>cron</application> utility can be used to automate the "
23395
"script execution. The <application>cron</application> daemon allows the "
23396
"execution of scripts, or commands, at a specified time and date."
23397
msgstr ""
23398
23399
#: serverguide/C/backups.xml:172(para)
23400
msgid ""
23401
"<application>cron</application> is configured through entries in a "
23402
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23403
"separated into fields:"
23404
msgstr ""
23405
23406
#: serverguide/C/backups.xml:176(programlisting)
23407
#, no-wrap
23408
msgid ""
23409
"\n"
23410
"# m h dom mon dow command\n"
23411
msgstr ""
23412
23413
#: serverguide/C/backups.xml:181(para)
23414
msgid ""
23415
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23416
msgstr ""
23417
23418
#: serverguide/C/backups.xml:186(para)
23419
msgid ""
23420
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23421
msgstr ""
23422
23423
#: serverguide/C/backups.xml:191(para)
23424
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23425
msgstr ""
23426
23427
#: serverguide/C/backups.xml:196(para)
23428
msgid ""
23429
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23430
msgstr ""
23431
23432
#: serverguide/C/backups.xml:201(para)
23433
msgid ""
23434
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23435
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23436
"valid."
23437
msgstr ""
23438
23439
#: serverguide/C/backups.xml:206(para)
23440
msgid "<emphasis>command:</emphasis> the command to execute."
23441
msgstr ""
23442
23443
#: serverguide/C/backups.xml:211(para)
23444
msgid ""
23445
"To add or change entries in a <filename>crontab</filename> file the "
23446
"<application>crontab -e</application> command should be used. Also, the "
23447
"contents of a <filename>crontab</filename> file can be viewed using the "
23448
"<application>crontab -l</application> command."
23449
msgstr ""
23450
23451
#: serverguide/C/backups.xml:215(para)
23452
msgid ""
23453
"To execute the <application>backup.sh</application> script listed above "
23454
"using <application>cron</application>. Enter the following from a terminal "
23455
"prompt:"
23456
msgstr ""
23457
23458
#: serverguide/C/backups.xml:220(command)
23459
msgid "sudo crontab -e"
23460
msgstr ""
23461
23462
#: serverguide/C/backups.xml:223(para)
23463
msgid ""
23464
"Using <application>sudo</application> with the <application>crontab -"
23465
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23466
"This is necessary if you are backing up directories only the root user has "
23467
"access to."
23468
msgstr ""
23469
23470
#: serverguide/C/backups.xml:228(para)
23471
msgid "Add the following entry to the <filename>crontab</filename> file:"
23472
msgstr ""
23473
23474
#: serverguide/C/backups.xml:231(programlisting)
23475
#, no-wrap
23476
msgid ""
23477
"\n"
23478
"# m h dom mon dow command\n"
23479
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23480
msgstr ""
23481
23482
#: serverguide/C/backups.xml:235(para)
23483
msgid ""
23484
"The <application>backup.sh</application> script will now be executed every "
23485
"day at 12:00 am."
23486
msgstr ""
23487
23488
#: serverguide/C/backups.xml:239(para)
23489
msgid ""
23490
"The <application>backup.sh</application> script will need to be copied to "
23491
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23492
"to execute properly. The script can reside anywhere on the file system "
23493
"simply change the script path appropriately."
23494
msgstr ""
23495
23496
#: serverguide/C/backups.xml:244(para)
23497
msgid ""
23498
"For more in depth <application>crontab</application> options see <xref "
23499
"linkend=\"backup-shellscript-references\"/>."
23500
msgstr ""
23501
23502
#: serverguide/C/backups.xml:250(title)
23503
msgid "Restoring from the Archive"
23504
msgstr ""
23505
23506
#: serverguide/C/backups.xml:251(para)
23507
msgid ""
23508
"Once an archive has been created it is important to test the archive. The "
23509
"archive can be tested by listing the files it contains, but the best test is "
23510
"to <emphasis>restore</emphasis> a file from the archive."
23511
msgstr ""
23512
23513
#: serverguide/C/backups.xml:257(para)
23514
msgid "To see a listing of the archive contents. From a terminal prompt:"
23515
msgstr ""
23516
23517
#: serverguide/C/backups.xml:261(command)
23518
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23519
msgstr ""
23520
23521
#: serverguide/C/backups.xml:265(para)
23522
msgid "To restore a file from the archive to a different directory enter:"
23523
msgstr ""
23524
23525
#: serverguide/C/backups.xml:269(command)
23526
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23527
msgstr ""
23528
23529
#: serverguide/C/backups.xml:271(para)
23530
msgid ""
23531
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23532
"redirects the extracted files to the specified directory. The above example "
23533
"will extract the <filename>/etc/hosts</filename> file to "
23534
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23535
"recreates the directory structure that it contains."
23536
msgstr ""
23537
23538
#: serverguide/C/backups.xml:276(para)
23539
msgid ""
23540
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23541
"the file to restore."
23542
msgstr ""
23543
23544
#: serverguide/C/backups.xml:281(para)
23545
msgid "To restore all files in the archive enter the following:"
23546
msgstr ""
23547
23548
#: serverguide/C/backups.xml:285(command)
23549
msgid "cd /"
23550
msgstr ""
23551
23552
#: serverguide/C/backups.xml:286(command)
23553
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23554
msgstr ""
23555
23556
#: serverguide/C/backups.xml:291(para)
23557
msgid "This will overwrite the files currently on the file system."
23558
msgstr ""
23559
23560
#: serverguide/C/backups.xml:300(para)
23561
msgid ""
23562
"For more information on shell scripting see the <ulink "
23563
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23564
msgstr ""
23565
23566
#: serverguide/C/backups.xml:305(para)
23567
msgid ""
23568
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23569
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23570
"great resource for shell scripting."
23571
msgstr ""
23572
23573
#: serverguide/C/backups.xml:311(para)
23574
msgid ""
23575
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23576
"Wiki Page</ulink> contains details on advanced "
23577
"<application>cron</application> options."
23578
msgstr ""
23579
23580
#: serverguide/C/backups.xml:318(para)
23581
msgid ""
23582
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23583
"tar Manual</ulink> for more <application>tar</application> options."
23584
msgstr ""
23585
23586
#: serverguide/C/backups.xml:324(para)
23587
msgid ""
23588
"The Wikipedia <ulink "
23589
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
23590
"Scheme</ulink> article contains information on other backup rotation schemes."
23591
msgstr ""
23592
23593
#: serverguide/C/backups.xml:330(para)
23594
msgid ""
23595
"The shell script uses <application>tar</application> to create the archive, "
23596
"but there many other command line utilities that can be used. For example:"
23597
msgstr ""
23598
23599
#: serverguide/C/backups.xml:336(para)
23600
msgid ""
23601
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
23602
"files to and from archives."
23603
msgstr ""
23604
23605
#: serverguide/C/backups.xml:341(para)
23606
msgid ""
23607
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
23608
"the <application>coreutils</application> package. A low level utility that "
23609
"can copy data from one format to another"
23610
msgstr ""
23611
23612
#: serverguide/C/backups.xml:347(para)
23613
msgid ""
23614
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
23615
"snap shot utility used to create copies of an entire file system."
23616
msgstr ""
23617
23618
#: serverguide/C/backups.xml:358(title)
23619
msgid "Archive Rotation"
23620
msgstr ""
23621
23622
#: serverguide/C/backups.xml:359(para)
23623
msgid ""
23624
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
23625
"allows for seven different archives. For a server whose data doesn't change "
23626
"often this may be enough. If the server has a large amount of data a more "
23627
"robust rotation scheme should be used."
23628
msgstr ""
23629
23630
#: serverguide/C/backups.xml:365(title)
23631
msgid "Rotating NFS Archives"
23632
msgstr ""
23633
23634
#: serverguide/C/backups.xml:366(para)
23635
msgid ""
23636
"In this section the shell script will be slightly modified to implement a "
23637
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
23638
msgstr ""
23639
23640
#: serverguide/C/backups.xml:372(para)
23641
msgid ""
23642
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
23643
"Friday."
23644
msgstr ""
23645
23646
#: serverguide/C/backups.xml:377(para)
23647
msgid ""
23648
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
23649
"weekly backups a month."
23650
msgstr ""
23651
23652
#: serverguide/C/backups.xml:382(para)
23653
msgid ""
23654
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
23655
"rotating two monthly backups based on if the month is odd or even."
23656
msgstr ""
23657
23658
#: serverguide/C/backups.xml:388(para)
23659
msgid "Here is the new script:"
23660
msgstr ""
23661
23662
#: serverguide/C/backups.xml:391(programlisting)
23663
#, no-wrap
23664
msgid ""
23665
"\n"
23666
"#!/bin/bash\n"
23667
"####################################\n"
23668
"#\n"
23669
"# Backup to NFS mount script with\n"
23670
"# grandfather-father-son rotation.\n"
23671
"#\n"
23672
"####################################\n"
23673
"\n"
23674
"# What to backup. \n"
23675
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23676
"\n"
23677
"# Where to backup to.\n"
23678
"dest=\"/mnt/backup\"\n"
23679
"\n"
23680
"# Setup variables for the archive filename.\n"
23681
"day=$(date +%A)\n"
23682
"hostname=$(hostname -s)\n"
23683
"\n"
23684
"# Find which week of the month 1-4 it is.\n"
23685
"day_num=$(date +%d)\n"
23686
"if (( $day_num <= 7 )); then\n"
23687
" week_file=\"$hostname-week1.tgz\"\n"
23688
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
23689
" week_file=\"$hostname-week2.tgz\"\n"
23690
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
23691
" week_file=\"$hostname-week3.tgz\"\n"
23692
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
23693
" week_file=\"$hostname-week4.tgz\"\n"
23694
"fi\n"
23695
"\n"
23696
"# Find if the Month is odd or even.\n"
23697
"month_num=$(date +%m)\n"
23698
"month=$(expr $month_num % 2)\n"
23699
"if [ $month -eq 0 ]; then\n"
23700
" month_file=\"$hostname-month2.tgz\"\n"
23701
"else\n"
23702
" month_file=\"$hostname-month1.tgz\"\n"
23703
"fi\n"
23704
"\n"
23705
"# Create archive filename.\n"
23706
"if [ $day_num == 1 ]; then\n"
23707
"\tarchive_file=$month_file\n"
23708
"elif [ $day != \"Saturday\" ]; then\n"
23709
" archive_file=\"$hostname-$day.tgz\"\n"
23710
"else \n"
23711
"\tarchive_file=$week_file\n"
23712
"fi\n"
23713
"\n"
23714
"# Print start status message.\n"
23715
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23716
"date\n"
23717
"echo\n"
23718
"\n"
23719
"# Backup the files using tar.\n"
23720
"tar czf $dest/$archive_file $backup_files\n"
23721
"\n"
23722
"# Print end status message.\n"
23723
"echo\n"
23724
"echo \"Backup finished\"\n"
23725
"date\n"
23726
"\n"
23727
"# Long listing of files in $dest to check file sizes.\n"
23728
"ls -lh $dest/\n"
23729
msgstr ""
23730
23731
#: serverguide/C/backups.xml:456(para)
23732
msgid ""
23733
"The script can be executed using the same methods as in <xref "
23734
"linkend=\"backup-executing-shellscript\"/>."
23735
msgstr ""
23736
23737
#: serverguide/C/backups.xml:459(para)
23738
msgid ""
23739
"It is good practice to take backup media off site in case of a disaster. In "
23740
"the shell script example the backup media is another server providing an NFS "
23741
"share. In all likelihood taking the NFS server to another location would not "
23742
"be practical. Depending upon connection speeds it may be an option to copy "
23743
"the archive file over a WAN link to a server in another location."
23744
msgstr ""
23745
23746
#: serverguide/C/backups.xml:465(para)
23747
msgid ""
23748
"Another option is to copy the archive file to an external hard drive which "
23749
"can then be taken off site. Since the price of external hard drives continue "
23750
"to decrease it may be cost affective to use two drives for each archive "
23751
"level. This would allow you to have one external drive attached to the "
23752
"backup server and one in another location."
23753
msgstr ""
23754
23755
#: serverguide/C/backups.xml:472(title)
23756
msgid "Tape Drives"
23757
msgstr ""
23758
23759
#: serverguide/C/backups.xml:473(para)
23760
msgid ""
23761
"A tape drive attached to the server can be used instead of a NFS share. "
23762
"Using a tape drive simplifies archive rotation, and taking the media off "
23763
"site as well."
23764
msgstr ""
23765
23766
#: serverguide/C/backups.xml:477(para)
23767
msgid ""
23768
"When using a tape drive the filename portions of the script aren't needed "
23769
"because the date is sent directly to the tape device. Some commands to "
23770
"manipulate the tape are needed. This is accomplished using "
23771
"<application>mt</application>, a magnetic tape control utility part of the "
23772
"<application>cpio</application> package."
23773
msgstr ""
23774
23775
#: serverguide/C/backups.xml:482(para)
23776
msgid "Here is the shell script modified to use a tape drive:"
23777
msgstr ""
23778
23779
#: serverguide/C/backups.xml:485(programlisting)
23780
#, no-wrap
23781
msgid ""
23782
"\n"
23783
"#!/bin/bash\n"
23784
"####################################\n"
23785
"#\n"
23786
"# Backup to tape drive script.\n"
23787
"#\n"
23788
"####################################\n"
23789
"\n"
23790
"# What to backup. \n"
23791
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23792
"\n"
23793
"# Where to backup to.\n"
23794
"dest=\"/dev/st0\"\n"
23795
"\n"
23796
"# Print start status message.\n"
23797
"echo \"Backing up $backup_files to $dest\"\n"
23798
"date\n"
23799
"echo\n"
23800
"\n"
23801
"# Make sure the tape is rewound.\n"
23802
"mt -f $dest rewind\n"
23803
"\n"
23804
"# Backup the files using tar.\n"
23805
"tar czf $dest $backup_files\n"
23806
"\n"
23807
"# Rewind and eject the tape.\n"
23808
"mt -f $dest rewoffl\n"
23809
"\n"
23810
"# Print end status message.\n"
23811
"echo\n"
23812
"echo \"Backup finished\"\n"
23813
"date\n"
23814
msgstr ""
23815
23816
#: serverguide/C/backups.xml:519(para)
23817
msgid ""
23818
"The default device name for a SCSI tape drive is "
23819
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
23820
"system."
23821
msgstr ""
23822
23823
#: serverguide/C/backups.xml:524(para)
23824
msgid ""
23825
"Restoring from a tape drive is basically the same as restoring from a file. "
23826
"Simply rewind the tape and use the device path instead of a file path. For "
23827
"example to restore the <filename>/etc/hosts</filename> file to "
23828
"<filename>/tmp/etc/hosts</filename>:"
23829
msgstr ""
23830
23831
#: serverguide/C/backups.xml:529(command)
23832
msgid "mt -f /dev/st0 rewind"
23833
msgstr ""
23834
23835
#: serverguide/C/backups.xml:530(command)
23836
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
23837
msgstr ""
23838
23839
#: serverguide/C/backups.xml:535(title)
23840
msgid "Bacula"
23841
msgstr ""
23842
23843
#: serverguide/C/backups.xml:536(para)
23844
msgid ""
23845
"<application>Bacula</application> is a backup program enabling you to "
23846
"backup, restore, and verify data across your network. There are Bacula "
23847
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
23848
"wide solution."
23849
msgstr ""
23850
23851
#: serverguide/C/backups.xml:542(para)
23852
msgid ""
23853
"<application>Bacula</application> is made up of several components and "
23854
"services used to manage which files to backup and where to back them up to:"
23855
msgstr ""
23856
23857
#: serverguide/C/backups.xml:548(para)
23858
msgid ""
23859
"<application>Bacula Director:</application> a service that controls all "
23860
"backup, restore, verify, and archive operations."
23861
msgstr ""
23862
23863
#: serverguide/C/backups.xml:553(para)
23864
msgid ""
23865
"<application>Bacula Console:</application> an application allowing "
23866
"communication with the Director. There are three versions of the Console:"
23867
msgstr ""
23868
23869
#: serverguide/C/backups.xml:558(para)
23870
msgid "Text based command line version."
23871
msgstr ""
23872
23873
#: serverguide/C/backups.xml:559(para)
23874
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
23875
msgstr ""
23876
23877
#: serverguide/C/backups.xml:560(para)
23878
msgid "wxWidgets GUI interface."
23879
msgstr ""
23880
23881
#: serverguide/C/backups.xml:564(para)
23882
msgid ""
23883
"<application>Bacula File:</application> also known as the "
23884
"<application>Bacula Client</application> program. This application is "
23885
"installed on machines to be backed up, and is responsible for the data "
23886
"requested by the Director."
23887
msgstr ""
23888
23889
#: serverguide/C/backups.xml:570(para)
23890
msgid ""
23891
"<application>Bacula Storage:</application> the programs that perform the "
23892
"storage and recovery of data to the physical media."
23893
msgstr ""
23894
23895
#: serverguide/C/backups.xml:575(para)
23896
msgid ""
23897
"<application>Bacula Catalog:</application> is responsible for maintaining "
23898
"the file indexes and volume databases for all files backed up, enabling "
23899
"quick location and restoration of archived files. The Catalog supports three "
23900
"different databases MySQL, PostgreSQL, and SQLite."
23901
msgstr ""
23902
23903
#: serverguide/C/backups.xml:581(para)
23904
msgid ""
23905
"<application>Bacula Monitor:</application> allows the monitoring of the "
23906
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
23907
"available as a GTK+ GUI application."
23908
msgstr ""
23909
23910
#: serverguide/C/backups.xml:587(para)
23911
msgid ""
23912
"These services and applications can be run on multiple servers and clients, "
23913
"or they can be installed on one machine if backing up a single disk or "
23914
"volume."
23915
msgstr ""
23916
23917
#: serverguide/C/backups.xml:594(para)
23918
msgid ""
23919
"There are multiple packages containing the different "
23920
"<application>Bacula</application> components. To install Bacula, from a "
23921
"terminal prompt enter:"
23922
msgstr ""
23923
23924
#: serverguide/C/backups.xml:599(command)
23925
msgid "sudo apt-get install bacula"
23926
msgstr ""
23927
23928
#: serverguide/C/backups.xml:601(para)
23929
msgid ""
23930
"By default installing the <application>bacula</application> package will use "
23931
"a <application>MySQL</application> database for the Catalog. If you want to "
23932
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
23933
"director-sqlite3</application> or <application>bacula-director-"
23934
"pgsql</application> respectively."
23935
msgstr ""
23936
23937
#: serverguide/C/backups.xml:607(para)
23938
msgid ""
23939
"During the install process you will be asked to supply credentials for the "
23940
"database <emphasis>administrator</emphasis> and the "
23941
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
23942
"database administrator will need to have the appropriate rights to create a "
23943
"database, see <xref linkend=\"mysql\"/> for more information."
23944
msgstr ""
23945
23946
#: serverguide/C/backups.xml:617(para)
23947
msgid ""
23948
"<application>Bacula</application> configuration files are formatted based on "
23949
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
23950
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
23951
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
23952
"directory."
23953
msgstr ""
23954
23955
#: serverguide/C/backups.xml:622(para)
23956
msgid ""
23957
"The various <application>Bacula</application> components must authorize "
23958
"themselves to each other. This is accomplished using the "
23959
"<emphasis>password</emphasis> directive. For example, the "
23960
"<emphasis>Storage</emphasis> resource password in the "
23961
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
23962
"<emphasis>Director</emphasis> resource password in "
23963
"<filename>/etc/bacula/bacula-sd.conf</filename>."
23964
msgstr ""
23965
23966
#: serverguide/C/backups.xml:628(para)
23967
msgid ""
23968
"By default the backup job named <emphasis>Client1</emphasis> is configured "
23969
"to archive the <application>Bacula</application> Catalog. If you plan on "
23970
"using the server to backup more than one client you should change the name "
23971
"of this job to something more descriptive. To change the name edit "
23972
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
23973
msgstr ""
23974
23975
#: serverguide/C/backups.xml:633(programlisting)
23976
#, no-wrap
23977
msgid ""
23978
"\n"
23979
"#\n"
23980
"# Define the main nightly save backup job\n"
23981
"# By default, this job will back up to disk in \n"
23982
"Job {\n"
23983
" Name = \"BackupServer\"\n"
23984
" JobDefs = \"DefaultJob\"\n"
23985
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
23986
"}\n"
23987
msgstr ""
23988
23989
#: serverguide/C/backups.xml:644(para)
23990
msgid ""
23991
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
23992
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
23993
"your appropriate hostname, or other descriptive name."
23994
msgstr ""
23995
23996
#: serverguide/C/backups.xml:649(para)
23997
msgid ""
23998
"The <emphasis>Console</emphasis> can be used to query the "
23999
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
24000
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24001
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24002
"the following from a terminal:"
24003
msgstr ""
24004
24005
#: serverguide/C/backups.xml:655(command)
24006
msgid "sudo adduser $username bacula"
24007
msgstr ""
24008
24009
#: serverguide/C/backups.xml:658(para)
24010
msgid ""
24011
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24012
"you are adding the current user to the group you should log out and back in "
24013
"for the new permissions to take effect."
24014
msgstr ""
24015
24016
#: serverguide/C/backups.xml:665(title)
24017
msgid "Localhost Backup"
24018
msgstr ""
24019
24020
#: serverguide/C/backups.xml:666(para)
24021
msgid ""
24022
"This section describes how to backup specified directories on a single host "
24023
"to a local tape drive."
24024
msgstr ""
24025
24026
#: serverguide/C/backups.xml:671(para)
24027
msgid ""
24028
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24029
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24030
msgstr ""
24031
24032
#: serverguide/C/backups.xml:674(programlisting)
24033
#, no-wrap
24034
msgid ""
24035
"\n"
24036
"Device {\n"
24037
" Name = \"Tape Drive\"\n"
24038
" Device Type = tape\n"
24039
" Media Type = DDS-4\n"
24040
" Archive Device = /dev/st0\n"
24041
" Hardware end of medium = No;\n"
24042
" AutomaticMount = yes; # when device opened, read it\n"
24043
" AlwaysOpen = Yes;\n"
24044
" RemovableMedia = yes;\n"
24045
" RandomAccess = no;\n"
24046
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24047
"}\n"
24048
msgstr ""
24049
24050
#: serverguide/C/backups.xml:688(para)
24051
msgid ""
24052
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24053
"Type and Archive Device to match your hardware."
24054
msgstr ""
24055
24056
#: serverguide/C/backups.xml:691(para)
24057
msgid "You could also uncomment one of the other examples in the file."
24058
msgstr ""
24059
24060
#: serverguide/C/backups.xml:696(para)
24061
msgid ""
24062
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24063
"<application>Storage</application> daemon will need to be restarted:"
24064
msgstr ""
24065
24066
#: serverguide/C/backups.xml:701(command)
24067
msgid "sudo /etc/init.d/bacula-sd restart"
24068
msgstr ""
24069
24070
#: serverguide/C/backups.xml:705(para)
24071
msgid ""
24072
"Now add a <emphasis>Storage</emphasis> resource in "
24073
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24074
msgstr ""
24075
24076
#: serverguide/C/backups.xml:708(programlisting)
24077
#, no-wrap
24078
msgid ""
24079
"\n"
24080
"# Definition of \"Tape Drive\" storage device\n"
24081
"Storage {\n"
24082
" Name = TapeDrive\n"
24083
" # Do not use \"localhost\" here \n"
24084
" Address = backupserver # N.B. Use a fully qualified name "
24085
"here\n"
24086
" SDPort = 9103\n"
24087
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24088
" Device = \"Tape Drive\"\n"
24089
" Media Type = tape\n"
24090
"}\n"
24091
msgstr ""
24092
24093
#: serverguide/C/backups.xml:720(para)
24094
msgid ""
24095
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24096
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24097
"to the actual host name."
24098
msgstr ""
24099
24100
#: serverguide/C/backups.xml:724(para)
24101
msgid ""
24102
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24103
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24104
msgstr ""
24105
24106
#: serverguide/C/backups.xml:730(para)
24107
msgid ""
24108
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24109
"directories to backup, by adding:"
24110
msgstr ""
24111
24112
#: serverguide/C/backups.xml:733(programlisting)
24113
#, no-wrap
24114
msgid ""
24115
"\n"
24116
"# LocalhostBacup FileSet.\n"
24117
"FileSet {\n"
24118
" Name = \"LocalhostFiles\"\n"
24119
" Include {\n"
24120
" Options {\n"
24121
" signature = MD5\n"
24122
" compression=GZIP\n"
24123
" }\n"
24124
" File = /etc\n"
24125
" File = /home\n"
24126
" }\n"
24127
"}\n"
24128
msgstr ""
24129
24130
#: serverguide/C/backups.xml:747(para)
24131
msgid ""
24132
"This <emphasis>FileSet</emphasis> will backup the <filename "
24133
"role=\"directory\">/etc</filename> and <filename "
24134
"role=\"directory\">/home</filename> directories. The "
24135
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24136
"create a MD5 signature for each file backed up, and to compress the files "
24137
"using GZIP."
24138
msgstr ""
24139
24140
#: serverguide/C/backups.xml:754(para)
24141
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24142
msgstr ""
24143
24144
#: serverguide/C/backups.xml:757(programlisting)
24145
#, no-wrap
24146
msgid ""
24147
"\n"
24148
"# LocalhostBackup Schedule -- Daily.\n"
24149
"Schedule {\n"
24150
" Name = \"LocalhostDaily\"\n"
24151
" Run = Full daily at 00:01\n"
24152
"}\n"
24153
msgstr ""
24154
24155
#: serverguide/C/backups.xml:764(para)
24156
msgid ""
24157
"The job will run every day at 00:01 or 12:01 am. There are many other "
24158
"scheduling options available."
24159
msgstr ""
24160
24161
#: serverguide/C/backups.xml:769(para)
24162
msgid "Finally create the <emphasis>Job</emphasis>:"
24163
msgstr ""
24164
24165
#: serverguide/C/backups.xml:772(programlisting)
24166
#, no-wrap
24167
msgid ""
24168
"\n"
24169
"# Localhost backup.\n"
24170
"Job {\n"
24171
" Name = \"LocalhostBackup\"\n"
24172
" JobDefs = \"DefaultJob\"\n"
24173
" Enabled = yes\n"
24174
" Level = Full\n"
24175
" FileSet = \"LocalhostFiles\"\n"
24176
" Schedule = \"LocalhostDaily\"\n"
24177
" Storage = TapeDrive\n"
24178
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24179
"} \n"
24180
msgstr ""
24181
24182
#: serverguide/C/backups.xml:785(para)
24183
msgid ""
24184
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24185
"drive."
24186
msgstr ""
24187
24188
#: serverguide/C/backups.xml:790(para)
24189
msgid ""
24190
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24191
"current tape does not have a label <application>Bacula</application> will "
24192
"send an email letting you know. To label a tape using the "
24193
"<application>Console</application> enter the following from a terminal:"
24194
msgstr ""
24195
24196
#: serverguide/C/backups.xml:796(command)
24197
msgid "bconsole"
24198
msgstr ""
24199
24200
#: serverguide/C/backups.xml:800(para)
24201
msgid "At the Bacula Console prompt enter:"
24202
msgstr ""
24203
24204
#: serverguide/C/backups.xml:804(command)
24205
msgid "label"
24206
msgstr ""
24207
24208
#: serverguide/C/backups.xml:808(para)
24209
msgid ""
24210
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24211
msgstr ""
24212
24213
#: serverguide/C/backups.xml:818(userinput)
24214
#, no-wrap
24215
msgid "2"
24216
msgstr ""
24217
24218
#: serverguide/C/backups.xml:812(computeroutput)
24219
#, no-wrap
24220
msgid ""
24221
"\n"
24222
"Automatically selected Catalog: MyCatalog\n"
24223
"Using Catalog \"MyCatalog\"\n"
24224
"The defined Storage resources are:\n"
24225
" 1: File\n"
24226
" 2: TapeDrive\n"
24227
"Select Storage resource (1-2):<placeholder-1/>\n"
24228
msgstr ""
24229
24230
#: serverguide/C/backups.xml:823(para)
24231
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24232
msgstr ""
24233
24234
#: serverguide/C/backups.xml:828(userinput)
24235
#, no-wrap
24236
msgid "Sunday"
24237
msgstr ""
24238
24239
#: serverguide/C/backups.xml:827(computeroutput)
24240
#, no-wrap
24241
msgid ""
24242
"\n"
24243
"Enter new Volume name: <placeholder-1/>\n"
24244
"Defined Pools:\n"
24245
" 1: Default\n"
24246
" 2: Scratch"
24247
msgstr ""
24248
24249
#: serverguide/C/backups.xml:833(para)
24250
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24251
msgstr ""
24252
24253
#: serverguide/C/backups.xml:838(para)
24254
msgid "Now, select the <emphasis>Pool</emphasis>:"
24255
msgstr ""
24256
24257
#: serverguide/C/backups.xml:843(userinput)
24258
#, no-wrap
24259
msgid "1"
24260
msgstr ""
24261
24262
#: serverguide/C/backups.xml:842(computeroutput)
24263
#, no-wrap
24264
msgid ""
24265
"\n"
24266
"Select the Pool (1-2): <placeholder-1/>\n"
24267
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24268
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24269
msgstr ""
24270
24271
#: serverguide/C/backups.xml:850(para)
24272
msgid ""
24273
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24274
"backup the localhost to an attached tape drive."
24275
msgstr ""
24276
24277
#: serverguide/C/backups.xml:858(para)
24278
msgid ""
24279
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24280
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24281
"Manual</ulink>"
24282
msgstr ""
24283
24284
#: serverguide/C/backups.xml:864(para)
24285
msgid ""
24286
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24287
"the latest Bacula news and developments."
24288
msgstr ""
24289
24290
#: serverguide/C/backups.xml:869(para)
24291
msgid ""
24292
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24293
"Ubuntu Wiki</ulink> page."
24294
msgstr ""
24295
24296
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24297
#: serverguide/C/backups.xml:0(None)
24298
msgid "translator-credits"
24299
msgstr ""
24300
"Launchpad Contributions:\n"
24301
" Launchpad Translations Administrators https://launchpad.net/~rosetta-admins"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1