« back to all changes in this revision
Viewing changes to serverguide/po/lo.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/lo.po
1
# Lao translation for ubuntu-docs
2
# Copyright (c) 2008 Rosetta Contributors and Canonical Ltd 2008
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2008.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2008-05-16 05:43+0000\n"
12
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13
"Language-Team: Lao <lo@li.org>\n"
14
"MIME-Version: 1.0\n"
15
"Content-Type: text/plain; charset=UTF-8\n"
16
"Content-Transfer-Encoding: 8bit\n"
17
"X-Launchpad-Export-Date: 2010-04-17 14:51+0000\n"
18
"X-Generator: Launchpad (build Unknown)\n"
19
20
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
21
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
22
msgstr ""
23
24
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
25
msgid "Ubuntu Server Guide"
26
msgstr ""
27
28
#: serverguide/C/serverguide-C.omf:9(date)
29
msgid "2007-09-30"
30
msgstr ""
31
32
#: serverguide/C/windows-networking.xml:13(title)
33
msgid "Windows Networking"
34
msgstr ""
35
36
#: serverguide/C/windows-networking.xml:15(para)
37
msgid ""
38
"Computer networks are often comprised of diverse systems, and while "
39
"operating a network made up entirely of Ubuntu desktop and server computers "
40
"would certainly be fun, some network environments must consist of both "
41
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
42
"class=\"registered\">Windows</trademark> systems working together in "
43
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
44
"principles and tools used in configuring your Ubuntu Server for sharing "
45
"network resources with Windows computers."
46
msgstr ""
47
48
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
49
msgid "Introduction"
50
msgstr ""
51
52
#: serverguide/C/windows-networking.xml:27(para)
53
msgid ""
54
"Successfully networking your Ubuntu system with Windows clients involves "
55
"providing and integrating with services common to Windows environments. Such "
56
"services assist the sharing of data and information about the computers and "
57
"users involved in the network, and may be classified under three major "
58
"categories of functionality:"
59
msgstr ""
60
61
#: serverguide/C/windows-networking.xml:35(para)
62
msgid ""
63
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
64
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
65
"folders, volumes, and the sharing of printers throughout the network."
66
msgstr ""
67
68
#: serverguide/C/windows-networking.xml:41(para)
69
msgid ""
70
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
71
"information about the computers and users of the network with such "
72
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
73
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
74
msgstr ""
75
76
#: serverguide/C/windows-networking.xml:48(para)
77
msgid ""
78
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
79
"the identity of a computer or user of the network and determining the "
80
"information the computer or user is authorized to access using such "
81
"principles and technologies as file permissions, group policies, and the "
82
"Kerberos authentication service."
83
msgstr ""
84
85
#: serverguide/C/windows-networking.xml:56(para)
86
msgid ""
87
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
88
"clients and share network resources among them. One of the principal pieces "
89
"of software your Ubuntu system includes for Windows networking is the Samba "
90
"suite of SMB server applications and tools."
91
msgstr ""
92
93
#: serverguide/C/windows-networking.xml:62(para)
94
msgid ""
95
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
96
"of the common Samba use cases, and how to install and configure the "
97
"necessary packages. Additional detailed documentation and information on "
98
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
99
"website</ulink>."
100
msgstr ""
101
102
#: serverguide/C/windows-networking.xml:70(title)
103
msgid "Samba File Server"
104
msgstr ""
105
106
#: serverguide/C/windows-networking.xml:72(para)
107
msgid ""
108
"One of the most common ways to network Ubuntu and Windows computers is to "
109
"configure Samba as a File Server. This section covers setting up a "
110
"<application>Samba</application> server to share files with Windows clients."
111
msgstr ""
112
113
#: serverguide/C/windows-networking.xml:77(para)
114
msgid ""
115
"The server will be configured to share files with any client on the network "
116
"without prompting for a password. If your environment requires stricter "
117
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
118
msgstr ""
119
120
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
121
msgid "Installation"
122
msgstr ""
123
124
#: serverguide/C/windows-networking.xml:85(para)
125
msgid ""
126
"The first step is to install the <application>samba</application> package. "
127
"From a terminal prompt enter:"
128
msgstr ""
129
130
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
131
msgid "sudo apt-get install samba"
132
msgstr ""
133
134
#: serverguide/C/windows-networking.xml:93(para)
135
msgid ""
136
"That's all there is to it; you are now ready to configure Samba to share "
137
"files."
138
msgstr ""
139
140
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
141
msgid "Configuration"
142
msgstr ""
143
144
#: serverguide/C/windows-networking.xml:101(para)
145
msgid ""
146
"The main Samba configuration file is located in "
147
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
148
"a significant amount of comments in order to document various configuration "
149
"directives."
150
msgstr ""
151
152
#: serverguide/C/windows-networking.xml:106(para)
153
msgid ""
154
"Not all the available options are included in the default configuration "
155
"file. See the <filename>smb.conf</filename><application>man</application> "
156
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
157
"Collection/\">Samba HOWTO Collection</ulink> for more details."
158
msgstr ""
159
160
#: serverguide/C/windows-networking.xml:116(para)
161
msgid ""
162
"First, edit the following key/value pairs in the "
163
"<emphasis>[global]</emphasis> section of "
164
"<filename>/etc/samba/smb.conf</filename>:"
165
msgstr ""
166
167
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
168
#, no-wrap
169
msgid ""
170
"\n"
171
" workgroup = EXAMPLE\n"
172
" ...\n"
173
" security = user\n"
174
msgstr ""
175
176
#: serverguide/C/windows-networking.xml:127(para)
177
msgid ""
178
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
179
"section, and is commented by default. Also, change "
180
"<emphasis>EXAMPLE</emphasis> to better match your environment."
181
msgstr ""
182
183
#: serverguide/C/windows-networking.xml:135(para)
184
msgid ""
185
"Create a new section at the bottom of the file, or uncomment one of the "
186
"examples, for the directory to be shared:"
187
msgstr ""
188
189
#: serverguide/C/windows-networking.xml:139(programlisting)
190
#, no-wrap
191
msgid ""
192
"\n"
193
"[share]\n"
194
" comment = Ubuntu File Server Share\n"
195
" path = /srv/samba/share\n"
196
" browsable = yes\n"
197
" guest ok = yes\n"
198
" read only = no\n"
199
" create mask = 0755\n"
200
msgstr ""
201
202
#: serverguide/C/windows-networking.xml:151(para)
203
msgid ""
204
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
205
"fit your needs."
206
msgstr ""
207
208
#: serverguide/C/windows-networking.xml:156(para)
209
msgid "<emphasis>path:</emphasis> the path to the directory to share."
210
msgstr ""
211
212
#: serverguide/C/windows-networking.xml:159(para)
213
msgid ""
214
"This example uses <filename>/srv/samba/sharename</filename> because, "
215
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
216
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
217
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
218
"specific data should be served. Technically Samba shares can be placed "
219
"anywhere on the filesystem as long as the permissions are correct, but "
220
"adhering to standards is recommended."
221
msgstr ""
222
223
#: serverguide/C/windows-networking.xml:168(para)
224
msgid ""
225
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
226
"directory using <application>Windows Explorer</application>."
227
msgstr ""
228
229
#: serverguide/C/windows-networking.xml:174(para)
230
msgid ""
231
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
232
"without supplying a password."
233
msgstr ""
234
235
#: serverguide/C/windows-networking.xml:179(para)
236
msgid ""
237
"<emphasis>read only:</emphasis> determines if the share is read only or if "
238
"write privileges are granted. Write privileges are allowed only when the "
239
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
240
"is <emphasis>yes</emphasis>, then access to the share is read only."
241
msgstr ""
242
243
#: serverguide/C/windows-networking.xml:184(para)
244
msgid ""
245
"<emphasis>create mask:</emphasis> determines the permissions new files will "
246
"have when created."
247
msgstr ""
248
249
#: serverguide/C/windows-networking.xml:193(para)
250
msgid ""
251
"Now that <application>Samba</application> is configured, the directory needs "
252
"to be created and the permissions changed. From a terminal enter:"
253
msgstr ""
254
255
#: serverguide/C/windows-networking.xml:199(command)
256
msgid "sudo mkdir -p /srv/samba/share"
257
msgstr ""
258
259
#: serverguide/C/windows-networking.xml:200(command)
260
msgid "sudo chown nobody.nogroup /srv/samba/share/"
261
msgstr ""
262
263
#: serverguide/C/windows-networking.xml:204(para)
264
msgid ""
265
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
266
"directory tree if it doesn't exist. Change the share name to fit your "
267
"environment."
268
msgstr ""
269
270
#: serverguide/C/windows-networking.xml:213(para)
271
msgid ""
272
"Finally, restart the <application>samba</application> services to enable the "
273
"new configuration:"
274
msgstr ""
275
276
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
277
msgid "sudo /etc/init.d/samba restart"
278
msgstr ""
279
280
#: serverguide/C/windows-networking.xml:225(para)
281
msgid ""
282
"Once again, the above configuration gives all access to any client on the "
283
"local network. For a more secure configuration see <xref linkend=\"samba-"
284
"fileprint-security\"/>."
285
msgstr ""
286
287
#: serverguide/C/windows-networking.xml:231(para)
288
msgid ""
289
"From a Windows client you should now be able to browse to the Ubuntu file "
290
"server and see the shared directory. To check that everything is working try "
291
"creating a directory from Windows."
292
msgstr ""
293
294
#: serverguide/C/windows-networking.xml:236(para)
295
msgid ""
296
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
297
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
298
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
299
"share actually exists and the permissions are correct."
300
msgstr ""
301
302
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
303
msgid "Resources"
304
msgstr ""
305
306
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
307
msgid ""
308
"For in depth Samba configurations see the <ulink "
309
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
310
"Collection</ulink>"
311
msgstr ""
312
313
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
314
msgid ""
315
"The guide is also available in <ulink "
316
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
317
"format</ulink>."
318
msgstr ""
319
320
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
321
msgid ""
322
"O'Reilly's <ulink "
323
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
324
"another good reference."
325
msgstr ""
326
327
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
328
msgid ""
329
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
330
"</ulink> page."
331
msgstr ""
332
333
#: serverguide/C/windows-networking.xml:274(title)
334
msgid "Samba Print Server"
335
msgstr ""
336
337
#: serverguide/C/windows-networking.xml:276(para)
338
msgid ""
339
"Another common use of Samba is to configure it to share printers installed, "
340
"either locally or over the network, on an Ubuntu server. Similar to <xref "
341
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
342
"any client on the local network to use the installed printers without "
343
"prompting for a username and password."
344
msgstr ""
345
346
#: serverguide/C/windows-networking.xml:282(para)
347
msgid ""
348
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
349
"security\"/>."
350
msgstr ""
351
352
#: serverguide/C/windows-networking.xml:289(para)
353
msgid ""
354
"Before installing and configuring Samba it is best to already have a working "
355
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
356
"for details."
357
msgstr ""
358
359
#: serverguide/C/windows-networking.xml:294(para)
360
msgid ""
361
"To install the <application>samba</application> package, from a terminal "
362
"enter:"
363
msgstr ""
364
365
#: serverguide/C/windows-networking.xml:305(para)
366
msgid ""
367
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
368
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
369
"network, and change <emphasis>security</emphasis> to <emphasis "
370
"role=\"italic\">share</emphasis>:"
371
msgstr ""
372
373
#: serverguide/C/windows-networking.xml:317(para)
374
msgid ""
375
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
376
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
377
msgstr ""
378
379
#: serverguide/C/windows-networking.xml:321(programlisting)
380
#, no-wrap
381
msgid ""
382
"\n"
383
" browsable = yes\n"
384
" guest ok = yes\n"
385
msgstr ""
386
387
#: serverguide/C/windows-networking.xml:326(para)
388
msgid "After editing <filename>smb.conf</filename> restart Samba:"
389
msgstr ""
390
391
#: serverguide/C/windows-networking.xml:334(para)
392
msgid ""
393
"The default Samba configuration will automatically share any printers "
394
"installed. Simply install the printer locally on your Windows clients."
395
msgstr ""
396
397
#: serverguide/C/windows-networking.xml:363(para)
398
msgid ""
399
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
400
"more information on configuring CUPS."
401
msgstr ""
402
403
#: serverguide/C/windows-networking.xml:377(title)
404
msgid "Securing a Samba File and Print Server"
405
msgstr ""
406
407
#: serverguide/C/windows-networking.xml:380(title)
408
msgid "Samba Security Modes"
409
msgstr ""
410
411
#: serverguide/C/windows-networking.xml:382(para)
412
msgid ""
413
"There are two security levels available to the Common Internet Filesystem "
414
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
415
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
416
"allows more flexibility, providing four ways of implementing user-level "
417
"security and one way to implement share-level:"
418
msgstr ""
419
420
#: serverguide/C/windows-networking.xml:391(para)
421
msgid ""
422
"<emphasis>security = user:</emphasis> requires clients to supply a username "
423
"and password to connect to shares. Samba user accounts are separate from "
424
"system accounts, but the <application>libpam-smbpass</application> package "
425
"will sync system users and passwords with the Samba user database."
426
msgstr ""
427
428
#: serverguide/C/windows-networking.xml:398(para)
429
msgid ""
430
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
431
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
432
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
433
"linkend=\"samba-dc\"/> for further information."
434
msgstr ""
435
436
#: serverguide/C/windows-networking.xml:405(para)
437
msgid ""
438
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
439
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
440
"integration\"/> for details."
441
msgstr ""
442
443
#: serverguide/C/windows-networking.xml:411(para)
444
msgid ""
445
"<emphasis>security = server:</emphasis> this mode is left over from before "
446
"Samba could become a member server, and due to some security issues should "
447
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
448
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
449
"of the Samba guide for more details."
450
msgstr ""
451
452
#: serverguide/C/windows-networking.xml:419(para)
453
msgid ""
454
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
455
"without supplying a username and password."
456
msgstr ""
457
458
#: serverguide/C/windows-networking.xml:426(para)
459
msgid ""
460
"The security mode you choose will depend on your environment and what you "
461
"need the Samba server to accomplish."
462
msgstr ""
463
464
#: serverguide/C/windows-networking.xml:432(title)
465
msgid "Security = User"
466
msgstr ""
467
468
#: serverguide/C/windows-networking.xml:434(para)
469
msgid ""
470
"This section will reconfigure the Samba file and print server, from <xref "
471
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
472
"require authentication."
473
msgstr ""
474
475
#: serverguide/C/windows-networking.xml:439(para)
476
msgid ""
477
"First, install the <application>libpam-smbpass</application> package which "
478
"will sync the system users to the Samba user database:"
479
msgstr ""
480
481
#: serverguide/C/windows-networking.xml:445(command)
482
msgid "sudo apt-get install libpam-smbpass"
483
msgstr ""
484
485
#: serverguide/C/windows-networking.xml:449(para)
486
msgid ""
487
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
488
"<application>libpam-smbpass</application> is already installed."
489
msgstr ""
490
491
#: serverguide/C/windows-networking.xml:455(para)
492
msgid ""
493
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
494
"<emphasis>[share]</emphasis> section change:"
495
msgstr ""
496
497
#: serverguide/C/windows-networking.xml:459(programlisting)
498
#, no-wrap
499
msgid ""
500
"\n"
501
" guest ok = no\n"
502
msgstr ""
503
504
#: serverguide/C/windows-networking.xml:463(para)
505
msgid "Finally, restart Samba for the new settings to take effect:"
506
msgstr ""
507
508
#: serverguide/C/windows-networking.xml:471(para)
509
msgid ""
510
"Now when connecting to the shared directories or printers you should be "
511
"prompted for a username and password."
512
msgstr ""
513
514
#: serverguide/C/windows-networking.xml:476(para)
515
msgid ""
516
"If you choose to map a network drive to the share you can check the "
517
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
518
"enter the username and password once, at least until the password changes."
519
msgstr ""
520
521
#: serverguide/C/windows-networking.xml:484(title)
522
msgid "Share Security"
523
msgstr ""
524
525
#: serverguide/C/windows-networking.xml:486(para)
526
msgid ""
527
"There are several options available to increase the security for each "
528
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
529
"this section will cover some common options."
530
msgstr ""
531
532
#: serverguide/C/windows-networking.xml:492(title)
533
msgid "Groups"
534
msgstr ""
535
536
#: serverguide/C/windows-networking.xml:494(para)
537
msgid ""
538
"Groups define a collection of computers or users which have a common level "
539
"of access to particular network resources and offer a level of granularity "
540
"in controlling access to such resources. For example, if a group <emphasis "
541
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
542
"role=\"italic\">freda</emphasis>, <emphasis "
543
"role=\"italic\">danika</emphasis>, and <emphasis "
544
"role=\"italic\">rob</emphasis> and a second group <emphasis "
545
"role=\"italic\">support</emphasis> is defined and consists of users "
546
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
547
"role=\"italic\">jeremy</emphasis>, and <emphasis "
548
"role=\"italic\">vincent</emphasis> then certain network resources configured "
549
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
550
"subsequently enable access by freda, danika, and rob, but not jeremy or "
551
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
552
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
553
"role=\"italic\">support</emphasis> groups, she will be able to access "
554
"resources configured for access by both groups, whereas all other users will "
555
"have only access to resources explicitly allowing the group they are part of."
556
msgstr ""
557
558
#: serverguide/C/windows-networking.xml:508(para)
559
msgid ""
560
"By default Samba looks for the local system groups defined in "
561
"<filename>/etc/group</filename> to determine which users belong to which "
562
"groups. For more information on adding and removing users from groups see "
563
"<xref linkend=\"adding-deleting-users\"/>."
564
msgstr ""
565
566
#: serverguide/C/windows-networking.xml:514(para)
567
msgid ""
568
"When defining groups in the Samba configuration file, "
569
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
570
"preface the group name with an \"@\" symbol. For example, if you wished to "
571
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
572
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
573
"do so by entering the group name as <emphasis "
574
"role=\"bold\">@sysadmin</emphasis>."
575
msgstr ""
576
577
#: serverguide/C/windows-networking.xml:523(title)
578
msgid "File Permissions"
579
msgstr ""
580
581
#: serverguide/C/windows-networking.xml:525(para)
582
msgid ""
583
"File Permissions define the explicit rights a computer or user has to a "
584
"particular directory, file, or set of files. Such permissions may be defined "
585
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
586
"the explicit permissions of a defined file share."
587
msgstr ""
588
589
#: serverguide/C/windows-networking.xml:531(para)
590
msgid ""
591
"For example, if you have defined a Samba share called "
592
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
593
"only</emphasis> permissions to the group of users known as <emphasis "
594
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
595
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
596
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
597
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
598
"under the <emphasis>[share]</emphasis> entry:"
599
msgstr ""
600
601
#: serverguide/C/windows-networking.xml:540(programlisting)
602
#, no-wrap
603
msgid ""
604
"\n"
605
" read list = @qa\n"
606
" write list = @sysadmin, vincent\n"
607
msgstr ""
608
609
#: serverguide/C/windows-networking.xml:545(para)
610
msgid ""
611
"Another possible Samba permission is to declare "
612
"<emphasis>administrative</emphasis> permissions to a particular shared "
613
"resource. Users having administrative permissions may read, write, or modify "
614
"any information contained in the resource the user has been given explicit "
615
"administrative permissions to."
616
msgstr ""
617
618
#: serverguide/C/windows-networking.xml:551(para)
619
msgid ""
620
"For example, if you wanted to give the user <emphasis "
621
"role=\"italic\">melissa</emphasis> administrative permissions to the "
622
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
623
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
624
"under the <emphasis>[share]</emphasis> entry:"
625
msgstr ""
626
627
#: serverguide/C/windows-networking.xml:558(programlisting)
628
#, no-wrap
629
msgid ""
630
"\n"
631
" admin users = melissa\n"
632
msgstr ""
633
634
#: serverguide/C/windows-networking.xml:562(para)
635
msgid ""
636
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
637
"the changes to take effect:"
638
msgstr ""
639
640
#: serverguide/C/windows-networking.xml:571(para)
641
msgid ""
642
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
643
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
644
"<emphasis role=\"italic\">security = share</emphasis>"
645
msgstr ""
646
647
#: serverguide/C/windows-networking.xml:577(para)
648
msgid ""
649
"Now that Samba has been configured to limit which groups have access to the "
650
"shared directory, the filesystem permissions need to be updated."
651
msgstr ""
652
653
#: serverguide/C/windows-networking.xml:582(para)
654
msgid ""
655
"Traditional Linux file permissions do not map well to Windows NT Access "
656
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
657
"providing more fine grained control. For example, to enable ACLs on "
658
"<filename>/srv</filename> an EXT3 filesystem, edit "
659
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
660
msgstr ""
661
662
#: serverguide/C/windows-networking.xml:589(programlisting)
663
#, no-wrap
664
msgid ""
665
"\n"
666
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
667
"0 1\n"
668
msgstr ""
669
670
#: serverguide/C/windows-networking.xml:593(para)
671
msgid "Then remount the partition:"
672
msgstr ""
673
674
#: serverguide/C/windows-networking.xml:598(command)
675
msgid "sudo mount -v -o remount /srv"
676
msgstr ""
677
678
#: serverguide/C/windows-networking.xml:602(para)
679
msgid ""
680
"The above example assumes <filename>/srv</filename> on a separate partition. "
681
"If <filename>/srv</filename>, or wherever you have configured your share "
682
"path, is part of the <filename>/</filename> partition a reboot may be "
683
"required."
684
msgstr ""
685
686
#: serverguide/C/windows-networking.xml:609(para)
687
msgid ""
688
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
689
"group will be given read, write, and execute permissions to "
690
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
691
"will be given read and execute permissions, and the files will be owned by "
692
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
693
msgstr ""
694
695
#: serverguide/C/windows-networking.xml:617(command)
696
msgid "sudo chown -R melissa /srv/samba/share/"
697
msgstr ""
698
699
#: serverguide/C/windows-networking.xml:618(command)
700
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
701
msgstr ""
702
703
#: serverguide/C/windows-networking.xml:619(command)
704
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
705
msgstr ""
706
707
#: serverguide/C/windows-networking.xml:623(para)
708
msgid ""
709
"The <application>setfacl</application> command above gives "
710
"<emphasis>execute</emphasis> permissions to all files in the "
711
"<filename>/srv/samba/share</filename> directory, which you may or may not "
712
"want."
713
msgstr ""
714
715
#: serverguide/C/windows-networking.xml:629(para)
716
msgid ""
717
"Now from a Windows client you should notice the new file permissions are "
718
"implemented. See the <application>acl</application> and "
719
"<application>setfacl</application> man pages for more information on POSIX "
720
"ACLs."
721
msgstr ""
722
723
#: serverguide/C/windows-networking.xml:637(title)
724
msgid "Samba AppArmor Profile"
725
msgstr ""
726
727
#: serverguide/C/windows-networking.xml:639(para)
728
msgid ""
729
"Ubuntu comes with the <application>AppArmor</application> security module, "
730
"which provides mandatory access controls. The default AppArmor profile for "
731
"Samba will need to be adapted to your configuration. For more details on "
732
"using AppArmor see <xref linkend=\"apparmor\"/>."
733
msgstr ""
734
735
#: serverguide/C/windows-networking.xml:645(para)
736
msgid ""
737
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
738
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
739
"of the <application>apparmor-profiles</application> packages. To install the "
740
"package, from a terminal prompt enter:"
741
msgstr ""
742
743
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
744
msgid "sudo apt-get install apparmor-profiles"
745
msgstr ""
746
747
#: serverguide/C/windows-networking.xml:656(para)
748
msgid "This package contains profiles for several other binaries."
749
msgstr ""
750
751
#: serverguide/C/windows-networking.xml:661(para)
752
msgid ""
753
"By default the profiles for <application>smbd</application> and "
754
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
755
"allowing Samba to work without modifying the profile, and only logging "
756
"errors. To place the <application>smbd</application> profile into "
757
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
758
"profile will need to be modified to reflect any directories that are shared."
759
msgstr ""
760
761
#: serverguide/C/windows-networking.xml:668(para)
762
msgid ""
763
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
764
"for <emphasis>[share]</emphasis> from the file server example:"
765
msgstr ""
766
767
#: serverguide/C/windows-networking.xml:673(programlisting)
768
#, no-wrap
769
msgid ""
770
"\n"
771
" /srv/samba/share/ r,\n"
772
" /srv/samba/share/** rwkix,\n"
773
msgstr ""
774
775
#: serverguide/C/windows-networking.xml:678(para)
776
msgid ""
777
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
778
msgstr ""
779
780
#: serverguide/C/windows-networking.xml:683(command)
781
msgid "sudo aa-enforce /usr/sbin/smbd"
782
msgstr ""
783
784
#: serverguide/C/windows-networking.xml:684(command)
785
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
786
msgstr ""
787
788
#: serverguide/C/windows-networking.xml:687(para)
789
msgid ""
790
"You should now be able to read, write, and execute files in the shared "
791
"directory as normal, and the <application>smbd</application> binary will "
792
"have access to only the configured files and directories. Be sure to add "
793
"entries for each directory you configure Samba to share. Also, any errors "
794
"will be logged to <filename>/var/log/syslog</filename>."
795
msgstr ""
796
797
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
798
msgid ""
799
"O'Reilly's <ulink "
800
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
801
"also a good reference."
802
msgstr ""
803
804
#: serverguide/C/windows-networking.xml:718(para)
805
msgid ""
806
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
807
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
808
"security."
809
msgstr ""
810
811
#: serverguide/C/windows-networking.xml:724(para)
812
msgid ""
813
"For more information on Samba and ACLs see the <ulink "
814
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
815
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
816
msgstr ""
817
818
#: serverguide/C/windows-networking.xml:740(title)
819
msgid "Samba as a Domain Controller"
820
msgstr ""
821
822
#: serverguide/C/windows-networking.xml:742(para)
823
msgid ""
824
"Although it cannot act as an Active Directory Primary Domain Controller "
825
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
826
"domain controller. A major advantage of this configuration is the ability to "
827
"centralize user and machine credentials. Samba can also use multiple "
828
"backends to store the user information."
829
msgstr ""
830
831
#: serverguide/C/windows-networking.xml:749(title)
832
msgid "Primary Domain Controller"
833
msgstr ""
834
835
#: serverguide/C/windows-networking.xml:751(para)
836
msgid ""
837
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
838
"using the default smbpasswd backend."
839
msgstr ""
840
841
#: serverguide/C/windows-networking.xml:758(para)
842
msgid ""
843
"First, install Samba, and <application>libpam-smbpass</application> to sync "
844
"the user accounts, by entering the following in a terminal prompt:"
845
msgstr ""
846
847
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
848
msgid "sudo apt-get install samba libpam-smbpass"
849
msgstr ""
850
851
#: serverguide/C/windows-networking.xml:770(para)
852
msgid ""
853
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
854
"The <emphasis>security</emphasis> mode should be set to <emphasis "
855
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
856
"should relate to your organization:"
857
msgstr ""
858
859
#: serverguide/C/windows-networking.xml:785(para)
860
msgid ""
861
"In the commented <quote>Domains</quote> section add or uncomment the "
862
"following:"
863
msgstr ""
864
865
#: serverguide/C/windows-networking.xml:789(programlisting)
866
#, no-wrap
867
msgid ""
868
"\n"
869
" domain logons = yes\n"
870
" logon path = \\\\%N\\%U\\profile\n"
871
" logon drive = H:\n"
872
" logon home = \\\\%N\\%U\n"
873
" logon script = logon.cmd\n"
874
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
875
"/var/lib/samba -s /bin/false %u\n"
876
msgstr ""
877
878
#: serverguide/C/windows-networking.xml:800(para)
879
msgid ""
880
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
881
"Samba to act as a domain controller."
882
msgstr ""
883
884
#: serverguide/C/windows-networking.xml:805(para)
885
msgid ""
886
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
887
"their home directory. It is also possible to configure a "
888
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
889
"directory."
890
msgstr ""
891
892
#: serverguide/C/windows-networking.xml:811(para)
893
msgid ""
894
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
895
msgstr ""
896
897
#: serverguide/C/windows-networking.xml:816(para)
898
msgid ""
899
"<emphasis>logon home:</emphasis> specifies the home directory location."
900
msgstr ""
901
902
#: serverguide/C/windows-networking.xml:821(para)
903
msgid ""
904
"<emphasis>logon script:</emphasis> determines the script to be run locally "
905
"once a user has logged in. The script needs to be placed in the "
906
"<emphasis>[netlogon]</emphasis> share."
907
msgstr ""
908
909
#: serverguide/C/windows-networking.xml:827(para)
910
msgid ""
911
"<emphasis>add machine script:</emphasis> a script that will automatically "
912
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
913
"workstation to join the domain."
914
msgstr ""
915
916
#: serverguide/C/windows-networking.xml:831(para)
917
msgid ""
918
"In this example the <emphasis>machines</emphasis> group will need to be "
919
"created using the <application>addgroup</application> utility see <xref "
920
"linkend=\"adding-deleting-users\"/> for details."
921
msgstr ""
922
923
#: serverguide/C/windows-networking.xml:839(para)
924
msgid ""
925
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
926
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
927
"commented."
928
msgstr ""
929
930
#: serverguide/C/windows-networking.xml:848(para)
931
msgid ""
932
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
933
"role=\"italic\">logon home</emphasis> to be mapped:"
934
msgstr ""
935
936
#: serverguide/C/windows-networking.xml:853(programlisting)
937
#, no-wrap
938
msgid ""
939
"\n"
940
"[homes]\n"
941
" comment = Home Directories\n"
942
" browseable = no\n"
943
" read only = no\n"
944
" create mask = 0700\n"
945
" directory mask = 0700\n"
946
" valid users = %S\n"
947
msgstr ""
948
949
#: serverguide/C/windows-networking.xml:866(para)
950
msgid ""
951
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
952
"share needs to be configured. To enable the share, uncomment:"
953
msgstr ""
954
955
#: serverguide/C/windows-networking.xml:871(programlisting)
956
#, no-wrap
957
msgid ""
958
"\n"
959
"[netlogon]\n"
960
" comment = Network Logon Service\n"
961
" path = /srv/samba/netlogon\n"
962
" guest ok = yes\n"
963
" read only = yes\n"
964
" share modes = no\n"
965
msgstr ""
966
967
#: serverguide/C/windows-networking.xml:881(para)
968
msgid ""
969
"The original <emphasis>netlogon</emphasis> share path is "
970
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
971
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
972
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
973
"location for site-specific data provided by the system."
974
msgstr ""
975
976
#: serverguide/C/windows-networking.xml:892(para)
977
msgid ""
978
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
979
"and an empty (for now) <filename>logon.cmd</filename> script file:"
980
msgstr ""
981
982
#: serverguide/C/windows-networking.xml:898(command)
983
msgid "sudo mkdir -p /srv/samba/netlogon"
984
msgstr ""
985
986
#: serverguide/C/windows-networking.xml:899(command)
987
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
988
msgstr ""
989
990
#: serverguide/C/windows-networking.xml:902(para)
991
msgid ""
992
"You can enter any normal Windows logon script commands in "
993
"<filename>logon.cmd</filename> to customize the client's environment."
994
msgstr ""
995
996
#: serverguide/C/windows-networking.xml:910(para)
997
msgid ""
998
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
999
"workstation to the domain, a system group needs to be mapped to the Windows "
1000
"<emphasis>Domain Admins</emphasis> group. Using the "
1001
"<application>net</application> utility, from a terminal enter:"
1002
msgstr ""
1003
1004
#: serverguide/C/windows-networking.xml:917(command)
1005
msgid ""
1006
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1007
"type=d"
1008
msgstr ""
1009
1010
#: serverguide/C/windows-networking.xml:921(para)
1011
msgid ""
1012
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1013
"prefer. Also, the user used to join the domain needs to be a member of the "
1014
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1015
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1016
"allows <application>sudo</application> use."
1017
msgstr ""
1018
1019
#: serverguide/C/windows-networking.xml:932(para)
1020
msgid "Finally, restart Samba to enable the new domain controller:"
1021
msgstr ""
1022
1023
#: serverguide/C/windows-networking.xml:943(para)
1024
msgid ""
1025
"You should now be able to join Windows clients to the Domain in the same "
1026
"manner as joining them to an NT4 domain running on a Windows server."
1027
msgstr ""
1028
1029
#: serverguide/C/windows-networking.xml:953(title)
1030
msgid "Backup Domain Controller"
1031
msgstr ""
1032
1033
#: serverguide/C/windows-networking.xml:955(para)
1034
msgid ""
1035
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1036
"Backup Domain Controller (BDC) as well. This will allow clients to "
1037
"authenticate in case the PDC becomes unavailable."
1038
msgstr ""
1039
1040
#: serverguide/C/windows-networking.xml:960(para)
1041
msgid ""
1042
"When configuring Samba as a BDC you need a way to sync account information "
1043
"with the PDC. There are multiple ways of accomplishing this "
1044
"<application>scp</application>, <application>rsync</application>, or by "
1045
"using <application>LDAP</application> as the <emphasis>passdb "
1046
"backend</emphasis>."
1047
msgstr ""
1048
1049
#: serverguide/C/windows-networking.xml:966(para)
1050
msgid ""
1051
"Using LDAP is the most robust way to sync account information, because both "
1052
"domain controllers can use the same information in real time. However, "
1053
"setting up a LDAP server may be overly complicated for a small number of "
1054
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1055
msgstr ""
1056
1057
#: serverguide/C/windows-networking.xml:975(para)
1058
msgid ""
1059
"First, install <application>samba</application> and <application>libpam-"
1060
"smbpass</application>. From a terminal enter:"
1061
msgstr ""
1062
1063
#: serverguide/C/windows-networking.xml:986(para)
1064
msgid ""
1065
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1066
"following in the <emphasis>[global]</emphasis>:"
1067
msgstr ""
1068
1069
#: serverguide/C/windows-networking.xml:999(para)
1070
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1071
msgstr ""
1072
1073
#: serverguide/C/windows-networking.xml:1003(programlisting)
1074
#, no-wrap
1075
msgid ""
1076
"\n"
1077
" domain logons = yes\n"
1078
" domain master = no\n"
1079
msgstr ""
1080
1081
#: serverguide/C/windows-networking.xml:1011(para)
1082
msgid ""
1083
"Make sure a user has rights to read the files in "
1084
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1085
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1086
"files, enter:"
1087
msgstr ""
1088
1089
#: serverguide/C/windows-networking.xml:1017(command)
1090
msgid "sudo chgrp -R admin /var/lib/samba"
1091
msgstr ""
1092
1093
#: serverguide/C/windows-networking.xml:1023(para)
1094
msgid ""
1095
"Next, sync the user accounts, using <application>scp</application> to copy "
1096
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1097
msgstr ""
1098
1099
#: serverguide/C/windows-networking.xml:1029(command)
1100
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1101
msgstr ""
1102
1103
#: serverguide/C/windows-networking.xml:1033(para)
1104
msgid ""
1105
"Replace <emphasis>username</emphasis> with a valid username and "
1106
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1107
msgstr ""
1108
1109
#: serverguide/C/windows-networking.xml:1042(para)
1110
msgid "Finally, restart <application>samba</application>:"
1111
msgstr ""
1112
1113
#: serverguide/C/windows-networking.xml:1053(para)
1114
msgid ""
1115
"You can test that your Backup Domain controller is working by stopping the "
1116
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1117
"the domain."
1118
msgstr ""
1119
1120
#: serverguide/C/windows-networking.xml:1058(para)
1121
msgid ""
1122
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1123
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1124
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1125
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1126
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1127
msgstr ""
1128
1129
#: serverguide/C/windows-networking.xml:1088(para)
1130
msgid ""
1131
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1132
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1133
"up a Primary Domain Controller."
1134
msgstr ""
1135
1136
#: serverguide/C/windows-networking.xml:1094(para)
1137
msgid ""
1138
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1139
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1140
"explains setting up a Backup Domain Controller."
1141
msgstr ""
1142
1143
#: serverguide/C/windows-networking.xml:1109(title)
1144
msgid "Samba Active Directory Integration"
1145
msgstr ""
1146
1147
#: serverguide/C/windows-networking.xml:1112(title)
1148
msgid "Accessing a Samba Share"
1149
msgstr ""
1150
1151
#: serverguide/C/windows-networking.xml:1114(para)
1152
msgid ""
1153
"Another, use for Samba is to integrate into an existing Windows network. "
1154
"Once part of an Active Directory domain, Samba can provide file and print "
1155
"services to AD users."
1156
msgstr ""
1157
1158
#: serverguide/C/windows-networking.xml:1119(para)
1159
msgid ""
1160
"The simplest way to join an AD domain is to use <application>Likewise-"
1161
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1162
"open\"/>."
1163
msgstr ""
1164
1165
#: serverguide/C/windows-networking.xml:1124(para)
1166
msgid ""
1167
"Once part of the domain, enter the following command in the terminal prompt:"
1168
msgstr ""
1169
1170
#: serverguide/C/windows-networking.xml:1129(command)
1171
msgid "sudo apt-get install samba smbfs smbclient"
1172
msgstr ""
1173
1174
#: serverguide/C/windows-networking.xml:1132(para)
1175
msgid ""
1176
"Since the <application>likewise-open</application> and "
1177
"<application>samba</application> packages use separate "
1178
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1179
"<filename role=\"directory\">/var/lib/samba</filename>:"
1180
msgstr ""
1181
1182
#: serverguide/C/windows-networking.xml:1138(command)
1183
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1184
msgstr ""
1185
1186
#: serverguide/C/windows-networking.xml:1139(command)
1187
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1188
msgstr ""
1189
1190
#: serverguide/C/windows-networking.xml:1142(para)
1191
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1192
msgstr ""
1193
1194
#: serverguide/C/windows-networking.xml:1146(programlisting)
1195
#, no-wrap
1196
msgid ""
1197
"\n"
1198
" workgroup = EXAMPLE\n"
1199
" ...\n"
1200
" security = ads\n"
1201
" realm = EXAMPLE.COM\n"
1202
" ...\n"
1203
" idmap backend = lwopen\n"
1204
" idmap uid = 50-9999999999\n"
1205
" idmap gid = 50-9999999999\n"
1206
msgstr ""
1207
1208
#: serverguide/C/windows-networking.xml:1157(para)
1209
msgid ""
1210
"Restart <application>samba</application> for the new settings to take effect:"
1211
msgstr ""
1212
1213
#: serverguide/C/windows-networking.xml:1165(para)
1214
msgid ""
1215
"You should now be able to access any <application>Samba</application> shares "
1216
"from a Windows client. However, be sure to give the appropriate AD users or "
1217
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1218
"security\"/> for more details."
1219
msgstr ""
1220
1221
#: serverguide/C/windows-networking.xml:1173(title)
1222
msgid "Accessing a Windows Share"
1223
msgstr ""
1224
1225
#: serverguide/C/windows-networking.xml:1175(para)
1226
msgid ""
1227
"Now that the Samba server is part of the Active Directory domain you can "
1228
"access any Windows server shares:"
1229
msgstr ""
1230
1231
#: serverguide/C/windows-networking.xml:1182(para)
1232
msgid ""
1233
"To mount a Windows file share enter the following in a terminal prompt:"
1234
msgstr ""
1235
1236
#: serverguide/C/windows-networking.xml:1186(command)
1237
msgid "mount.cifs //fs01.example.com/share mount_point"
1238
msgstr ""
1239
1240
#: serverguide/C/windows-networking.xml:1189(para)
1241
msgid ""
1242
"It is also possible to access shares on computers not part of an AD domain, "
1243
"but a username and password will need to be provided."
1244
msgstr ""
1245
1246
#: serverguide/C/windows-networking.xml:1197(para)
1247
msgid ""
1248
"To mount the share during boot place an entry in "
1249
"<filename>/etc/fstab</filename>, for example:"
1250
msgstr ""
1251
1252
#: serverguide/C/windows-networking.xml:1201(programlisting)
1253
#, no-wrap
1254
msgid ""
1255
"\n"
1256
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1257
"0 0\n"
1258
msgstr ""
1259
1260
#: serverguide/C/windows-networking.xml:1208(para)
1261
msgid ""
1262
"Another way to copy files from a Windows server is to use the "
1263
"<application>smbclient</application> utility. To list the files in a Windows "
1264
"share:"
1265
msgstr ""
1266
1267
#: serverguide/C/windows-networking.xml:1214(command)
1268
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1269
msgstr ""
1270
1271
#: serverguide/C/windows-networking.xml:1220(para)
1272
msgid "To copy a file from the share, enter:"
1273
msgstr ""
1274
1275
#: serverguide/C/windows-networking.xml:1225(command)
1276
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1277
msgstr ""
1278
1279
#: serverguide/C/windows-networking.xml:1228(para)
1280
msgid ""
1281
"This will copy the <filename>file.txt</filename> into the current directory."
1282
msgstr ""
1283
1284
#: serverguide/C/windows-networking.xml:1235(para)
1285
msgid "And to copy a file to the share:"
1286
msgstr ""
1287
1288
#: serverguide/C/windows-networking.xml:1240(command)
1289
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1290
msgstr ""
1291
1292
#: serverguide/C/windows-networking.xml:1243(para)
1293
msgid ""
1294
"This will copy the <filename>/etc/hosts</filename> to "
1295
"<filename>//fs01.example.com/share/hosts</filename>."
1296
msgstr ""
1297
1298
#: serverguide/C/windows-networking.xml:1250(para)
1299
msgid ""
1300
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1301
"<application>smbclient</application> command all at once. This is useful for "
1302
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1303
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1304
"and directory commands, simply execute:"
1305
msgstr ""
1306
1307
#: serverguide/C/windows-networking.xml:1257(command)
1308
msgid "smbclient //fs01.example.com/share -k"
1309
msgstr ""
1310
1311
#: serverguide/C/windows-networking.xml:1264(para)
1312
msgid ""
1313
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1314
"<emphasis>//192.168.0.5/share</emphasis>, "
1315
"<emphasis>username=steve,password=secret</emphasis>, and "
1316
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1317
"file name, and an actual username and password with rights to the share."
1318
msgstr ""
1319
1320
#: serverguide/C/windows-networking.xml:1275(para)
1321
msgid ""
1322
"For more <application>smbclient</application> options see the man page: "
1323
"<command>man smbclient</command>, also available <ulink "
1324
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1325
"line</ulink>."
1326
msgstr ""
1327
1328
#: serverguide/C/windows-networking.xml:1280(para)
1329
msgid ""
1330
"The <application>mount.cifs</application><ulink "
1331
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1332
"an page</ulink> is also useful for more detailed information."
1333
msgstr ""
1334
1335
#: serverguide/C/windows-networking.xml:1293(title)
1336
msgid "Likewise Open"
1337
msgstr ""
1338
1339
#: serverguide/C/windows-networking.xml:1295(para)
1340
msgid ""
1341
"<application>Likewise Open</application> simplifies the necessary "
1342
"configuration needed to authenticate a Linux machine to an Active Directory "
1343
"domain. Based on <application>winbind</application>, the "
1344
"<application>likewise-open</application> package takes the pain out of "
1345
"integrating Ubuntu authentication into an existing Windows network."
1346
msgstr ""
1347
1348
#: serverguide/C/windows-networking.xml:1304(para)
1349
msgid ""
1350
"There are two ways to use Likewise Open, <application>likewise-"
1351
"open</application> the command line utility and <application>likewise-open-"
1352
"gui</application>. This section focuses on the command line utility."
1353
msgstr ""
1354
1355
#: serverguide/C/windows-networking.xml:1309(para)
1356
msgid ""
1357
"To install the <application>likewise-open</application> package, open a "
1358
"terminal prompt and enter:"
1359
msgstr ""
1360
1361
#: serverguide/C/windows-networking.xml:1314(command)
1362
msgid "sudo apt-get install likewise-open"
1363
msgstr ""
1364
1365
#: serverguide/C/windows-networking.xml:1319(title)
1366
msgid "Joining a Domain"
1367
msgstr ""
1368
1369
#: serverguide/C/windows-networking.xml:1321(para)
1370
msgid ""
1371
"The main executable file of the <application>likewise-open</application> "
1372
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1373
"join your computer to the domain. Before you join a domain you will need to "
1374
"make sure you have:"
1375
msgstr ""
1376
1377
#: serverguide/C/windows-networking.xml:1329(para)
1378
msgid ""
1379
"Access to an Active Directory user with appropriate rights to join the "
1380
"domain."
1381
msgstr ""
1382
1383
#: serverguide/C/windows-networking.xml:1334(para)
1384
msgid ""
1385
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1386
"you want to join. If your AD domain does not match a valid domain such as "
1387
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1388
"the form of <emphasis>domainname.local</emphasis>."
1389
msgstr ""
1390
1391
#: serverguide/C/windows-networking.xml:1341(para)
1392
msgid ""
1393
"DNS for the domain setup properly. In a production AD environment this "
1394
"should be the case. Proper Microsoft DNS is needed so that client "
1395
"workstations can determine the Active Directory domain is available."
1396
msgstr ""
1397
1398
#: serverguide/C/windows-networking.xml:1345(para)
1399
msgid ""
1400
"If you don't have a Windows DNS server on your network, see <xref "
1401
"linkend=\"likewise-open-ms-dns\"/> for details."
1402
msgstr ""
1403
1404
#: serverguide/C/windows-networking.xml:1352(para)
1405
msgid "To join a domain, from a terminal prompt enter:"
1406
msgstr ""
1407
1408
#: serverguide/C/windows-networking.xml:1357(command)
1409
msgid "sudo domainjoin-cli join example.com Administrator"
1410
msgstr ""
1411
1412
#: serverguide/C/windows-networking.xml:1361(para)
1413
msgid ""
1414
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1415
"<emphasis>Administrator</emphasis> with the appropriate user name."
1416
msgstr ""
1417
1418
#: serverguide/C/windows-networking.xml:1367(para)
1419
msgid ""
1420
"You will then be prompted for the user's password. If all goes well a "
1421
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1422
msgstr ""
1423
1424
#: serverguide/C/windows-networking.xml:1373(para)
1425
msgid ""
1426
"After joining the domain, it is necessary to reboot before attempting to "
1427
"authenticate against the domain."
1428
msgstr ""
1429
1430
#: serverguide/C/windows-networking.xml:1379(para)
1431
msgid ""
1432
"After successfully joining an Ubuntu machine to an Active Directory domain "
1433
"you can authenticate using any valid AD user. To login you will need to "
1434
"enter the user name as 'domain\\username'. For example to ssh to a server "
1435
"joined to the domain enter:"
1436
msgstr ""
1437
1438
#: serverguide/C/windows-networking.xml:1386(command)
1439
msgid "ssh 'example\\steve'@hostname"
1440
msgstr ""
1441
1442
#: serverguide/C/windows-networking.xml:1390(para)
1443
msgid ""
1444
"If configuring a Desktop the user name will need to be prefixed with "
1445
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1446
msgstr ""
1447
1448
#: serverguide/C/windows-networking.xml:1396(para)
1449
msgid ""
1450
"To make likewise-open use a default domain, you can add the following "
1451
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1452
msgstr ""
1453
1454
#: serverguide/C/windows-networking.xml:1400(programlisting)
1455
#, no-wrap
1456
msgid ""
1457
"\n"
1458
"winbind use default domain = yes\n"
1459
msgstr ""
1460
1461
#: serverguide/C/windows-networking.xml:1404(para)
1462
msgid "Then restart the <application>likewise-open</application> daemons:"
1463
msgstr ""
1464
1465
#: serverguide/C/windows-networking.xml:1409(command)
1466
msgid "sudo /etc/init.d/likewise-open restart"
1467
msgstr ""
1468
1469
#: serverguide/C/windows-networking.xml:1413(para)
1470
msgid ""
1471
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1472
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1473
"using only their username."
1474
msgstr ""
1475
1476
#: serverguide/C/windows-networking.xml:1419(para)
1477
msgid ""
1478
"The <application>domainjoin-cli</application> utility can also be used to "
1479
"leave the domain. From a terminal:"
1480
msgstr ""
1481
1482
#: serverguide/C/windows-networking.xml:1424(command)
1483
msgid "sudo domainjoin-cli leave"
1484
msgstr ""
1485
1486
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1487
msgid "Other Utilities"
1488
msgstr ""
1489
1490
#: serverguide/C/windows-networking.xml:1431(para)
1491
msgid ""
1492
"The <application>likewise-open</application> package comes with a few other "
1493
"utilities that may be useful for gathering information about the Active "
1494
"Directory environment. These utilities are used to join the machine to the "
1495
"domain, and are the same as those available in the <application>samba-"
1496
"common</application> and <application>winbind</application> packages:"
1497
msgstr ""
1498
1499
#: serverguide/C/windows-networking.xml:1440(para)
1500
msgid ""
1501
"<application>lwinet</application>: Returns information about the network and "
1502
"the domain."
1503
msgstr ""
1504
1505
#: serverguide/C/windows-networking.xml:1445(para)
1506
msgid ""
1507
"<application>lwimsg</application>: Allows interaction with the "
1508
"<application>likewise-winbindd</application> daemon."
1509
msgstr ""
1510
1511
#: serverguide/C/windows-networking.xml:1450(para)
1512
msgid ""
1513
"<application>lwiinfo</application>: Displays information about various parts "
1514
"of the Domain."
1515
msgstr ""
1516
1517
#: serverguide/C/windows-networking.xml:1456(para)
1518
msgid "Please refer to each utility's man page specific for details."
1519
msgstr ""
1520
1521
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1522
msgid "Troubleshooting"
1523
msgstr ""
1524
1525
#: serverguide/C/windows-networking.xml:1466(para)
1526
msgid ""
1527
"If the client has trouble joining the domain, double check that the "
1528
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1529
"example:"
1530
msgstr ""
1531
1532
#: serverguide/C/windows-networking.xml:1471(programlisting)
1533
#, no-wrap
1534
msgid ""
1535
"\n"
1536
"nameserver 192.168.0.1\n"
1537
msgstr ""
1538
1539
#: serverguide/C/windows-networking.xml:1476(para)
1540
msgid ""
1541
"For more information when joining a domain, use the <emphasis>--loglevel "
1542
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1543
"<application>domainjoin-cli</application> utility:"
1544
msgstr ""
1545
1546
#: serverguide/C/windows-networking.xml:1482(command)
1547
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1548
msgstr ""
1549
1550
#: serverguide/C/windows-networking.xml:1486(para)
1551
msgid ""
1552
"If an Active Directory user has trouble logging in, check the "
1553
"<filename>/var/log/auth.log</filename> for details."
1554
msgstr ""
1555
1556
#: serverguide/C/windows-networking.xml:1491(para)
1557
msgid ""
1558
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1559
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1560
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1561
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1562
"<emphasis>hosts</emphasis> option. For example:"
1563
msgstr ""
1564
1565
#: serverguide/C/windows-networking.xml:1497(programlisting)
1566
#, no-wrap
1567
msgid ""
1568
"\n"
1569
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1570
msgstr ""
1571
1572
#: serverguide/C/windows-networking.xml:1501(para)
1573
msgid "Change the above to:"
1574
msgstr ""
1575
1576
#: serverguide/C/windows-networking.xml:1505(programlisting)
1577
#, no-wrap
1578
msgid ""
1579
"\n"
1580
"hosts: files dns [NOTFOUND=return]\n"
1581
msgstr ""
1582
1583
#: serverguide/C/windows-networking.xml:1509(para)
1584
msgid "Then restart networking by entering:"
1585
msgstr ""
1586
1587
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1588
msgid "sudo /etc/init.d/networking restart"
1589
msgstr ""
1590
1591
#: serverguide/C/windows-networking.xml:1517(para)
1592
msgid "You should now be able to join the Active Directory domain."
1593
msgstr ""
1594
1595
#: serverguide/C/windows-networking.xml:1525(title)
1596
msgid "Microsoft DNS"
1597
msgstr ""
1598
1599
#: serverguide/C/windows-networking.xml:1527(para)
1600
msgid ""
1601
"The following are instructions for installing DNS on an Active Directory "
1602
"domain controller running Windows Server 2003, but the instructions should "
1603
"be similar for other versions:"
1604
msgstr ""
1605
1606
#: serverguide/C/windows-networking.xml:1536(para)
1607
msgid ""
1608
"Click "
1609
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1610
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1611
"This will open the <application>Server Role Mangement</application> utility."
1612
msgstr ""
1613
1614
#: serverguide/C/windows-networking.xml:1544(para)
1615
msgid "Click <guilabel>Add or remove a role</guilabel>"
1616
msgstr ""
1617
1618
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1619
msgid "Click Next"
1620
msgstr ""
1621
1622
#: serverguide/C/windows-networking.xml:1546(para)
1623
msgid "Select \"DNS Server\""
1624
msgstr ""
1625
1626
#: serverguide/C/windows-networking.xml:1548(para)
1627
msgid "Click Next again to proceed"
1628
msgstr ""
1629
1630
#: serverguide/C/windows-networking.xml:1549(para)
1631
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1632
msgstr ""
1633
1634
#: serverguide/C/windows-networking.xml:1551(para)
1635
msgid ""
1636
"Make sure \"This server maintains the zone\" is selected and click Next."
1637
msgstr ""
1638
1639
#: serverguide/C/windows-networking.xml:1552(para)
1640
msgid "Enter your domain name and click Next"
1641
msgstr ""
1642
1643
#: serverguide/C/windows-networking.xml:1553(para)
1644
msgid "Click Next to \"Allow only secure dynamic updates\""
1645
msgstr ""
1646
1647
#: serverguide/C/windows-networking.xml:1555(para)
1648
msgid ""
1649
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1650
"should not forward queries\" and click Next."
1651
msgstr ""
1652
1653
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1654
msgid "Click Finish"
1655
msgstr ""
1656
1657
#: serverguide/C/windows-networking.xml:1562(para)
1658
msgid ""
1659
"DNS is now installed and can be further configured using the "
1660
"<application>Microsoft Management Console</application> DNS snap-in."
1661
msgstr ""
1662
1663
#: serverguide/C/windows-networking.xml:1570(para)
1664
msgid "Click Start"
1665
msgstr ""
1666
1667
#: serverguide/C/windows-networking.xml:1571(para)
1668
msgid "Control Panel"
1669
msgstr ""
1670
1671
#: serverguide/C/windows-networking.xml:1572(para)
1672
msgid "Network Connections"
1673
msgstr ""
1674
1675
#: serverguide/C/windows-networking.xml:1573(para)
1676
msgid "Right Click \"Local Area Connection\""
1677
msgstr ""
1678
1679
#: serverguide/C/windows-networking.xml:1574(para)
1680
msgid "Click Properties"
1681
msgstr ""
1682
1683
#: serverguide/C/windows-networking.xml:1575(para)
1684
msgid "Double click \"Internet Protocol (TCP/IP)\""
1685
msgstr ""
1686
1687
#: serverguide/C/windows-networking.xml:1576(para)
1688
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1689
msgstr ""
1690
1691
#: serverguide/C/windows-networking.xml:1577(para)
1692
msgid "Click Ok"
1693
msgstr ""
1694
1695
#: serverguide/C/windows-networking.xml:1578(para)
1696
msgid "Click Ok again to save the settings"
1697
msgstr ""
1698
1699
#: serverguide/C/windows-networking.xml:1567(para)
1700
msgid ""
1701
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1702
msgstr ""
1703
1704
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1705
msgid "References"
1706
msgstr ""
1707
1708
#: serverguide/C/windows-networking.xml:1587(para)
1709
msgid ""
1710
"Please refer to the <ulink "
1711
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1712
"further information."
1713
msgstr ""
1714
1715
#: serverguide/C/windows-networking.xml:1591(para)
1716
msgid ""
1717
"For more <application>domainjoin-cli</application> options see the man page: "
1718
"<command>man domainjoin-cli</command>."
1719
msgstr ""
1720
1721
#: serverguide/C/windows-networking.xml:1595(para)
1722
msgid ""
1723
"Also, see the <ulink "
1724
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1725
"LikewiseOpen</ulink> page."
1726
msgstr ""
1727
1728
#: serverguide/C/web-servers.xml:13(title)
1729
msgid "Web Servers"
1730
msgstr ""
1731
1732
#: serverguide/C/web-servers.xml:14(para)
1733
msgid ""
1734
"A Web server is a software responsible for accepting HTTP requests from "
1735
"clients, which are known as Web browsers, and serving them HTTP responses "
1736
"along with optional data contents, which usually are Web pages such as HTML "
1737
"documents and linked objects (images, etc.)."
1738
msgstr ""
1739
1740
#: serverguide/C/web-servers.xml:19(title)
1741
msgid "HTTPD - Apache2 Web Server"
1742
msgstr ""
1743
1744
#: serverguide/C/web-servers.xml:20(para)
1745
msgid ""
1746
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1747
"are used to serve Web Pages requested by client computers. Clients typically "
1748
"request and view Web Pages using Web Browser applications such as "
1749
"<application>Firefox</application>, <application>Opera</application>, or "
1750
"<application>Mozilla</application>."
1751
msgstr ""
1752
1753
#: serverguide/C/web-servers.xml:24(para)
1754
msgid ""
1755
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1756
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1757
"resource. For example, to view the home page of the <ulink "
1758
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1759
"the FQDN. To request specific information about <ulink "
1760
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1761
"enter the FQDN followed by a path."
1762
msgstr ""
1763
1764
#: serverguide/C/web-servers.xml:29(para)
1765
msgid ""
1766
"The most common protocol used to transfer Web pages is the Hyper Text "
1767
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1768
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1769
"protocol for uploading and downloading files, are also supported."
1770
msgstr ""
1771
1772
#: serverguide/C/web-servers.xml:33(para)
1773
msgid ""
1774
"Apache Web Servers are often used in combination with the "
1775
"<application>MySQL</application> database engine, the HyperText Preprocessor "
1776
"(<application>PHP</application>) scripting language, and other popular "
1777
"scripting languages such as <application>Python</application> and "
1778
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
1779
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
1780
"for the development and deployment of Web-based applications."
1781
msgstr ""
1782
1783
#: serverguide/C/web-servers.xml:42(para)
1784
msgid ""
1785
"The <application>Apache2</application> web server is available in Ubuntu "
1786
"Linux. To install Apache2:"
1787
msgstr ""
1788
1789
#: serverguide/C/web-servers.xml:48(para)
1790
msgid "At a terminal prompt enter the following command:"
1791
msgstr ""
1792
1793
#: serverguide/C/web-servers.xml:53(command)
1794
msgid "sudo apt-get install apache2"
1795
msgstr ""
1796
1797
#: serverguide/C/web-servers.xml:63(para)
1798
msgid ""
1799
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
1800
"text configuration files. These <emphasis>directives</emphasis> are "
1801
"separated between the following files and directories:"
1802
msgstr ""
1803
1804
#: serverguide/C/web-servers.xml:71(para)
1805
msgid ""
1806
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
1807
"Contains settings that are <emphasis>global</emphasis> to Apache2."
1808
msgstr ""
1809
1810
#: serverguide/C/web-servers.xml:77(para)
1811
msgid ""
1812
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
1813
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
1814
"serve content may add files, or symlinks, to this directory."
1815
msgstr ""
1816
1817
#: serverguide/C/web-servers.xml:83(para)
1818
msgid ""
1819
"<emphasis>envvars:</emphasis> file where Apache2 "
1820
"<emphasis>environment</emphasis> variables are set."
1821
msgstr ""
1822
1823
#: serverguide/C/web-servers.xml:88(para)
1824
msgid ""
1825
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
1826
"file, named after the <application>httpd</application> daemon. The file can "
1827
"be used for <emphasis>user specific</emphasis> configuration options that "
1828
"globally effect Apache2."
1829
msgstr ""
1830
1831
#: serverguide/C/web-servers.xml:95(para)
1832
msgid ""
1833
"<emphasis>mods-available:</emphasis> this directory contains configuration "
1834
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
1835
"modules will have specific configuration files, however."
1836
msgstr ""
1837
1838
#: serverguide/C/web-servers.xml:101(para)
1839
msgid ""
1840
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
1841
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
1842
"configuration file is symlinked it will be enabled the next time "
1843
"<application>apache2</application> is restarted."
1844
msgstr ""
1845
1846
#: serverguide/C/web-servers.xml:108(para)
1847
msgid ""
1848
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
1849
"TCP ports Apache2 is listening on."
1850
msgstr ""
1851
1852
#: serverguide/C/web-servers.xml:113(para)
1853
msgid ""
1854
"<emphasis>sites-available:</emphasis> this directory has configuration files "
1855
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
1856
"to be configured for multiple sites that have separate configurations."
1857
msgstr ""
1858
1859
#: serverguide/C/web-servers.xml:119(para)
1860
msgid ""
1861
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
1862
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
1863
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
1864
"a configuration file in sites-available is symlinked, the site configured by "
1865
"it will be active once Apache2 is restarted."
1866
msgstr ""
1867
1868
#: serverguide/C/web-servers.xml:127(para)
1869
msgid ""
1870
"In addition, other configuration files may be added using the "
1871
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
1872
"many configuration files. Any directive may be placed in any of these "
1873
"configuration files. Changes to the main configuration files are only "
1874
"recognized by Apache2 when it is started or restarted."
1875
msgstr ""
1876
1877
#: serverguide/C/web-servers.xml:136(para)
1878
msgid ""
1879
"The server also reads a file containing mime document types; the filename is "
1880
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
1881
"<filename>/etc/mime.types</filename> by default."
1882
msgstr ""
1883
1884
#: serverguide/C/web-servers.xml:141(title)
1885
msgid "Basic Settings"
1886
msgstr ""
1887
1888
#: serverguide/C/web-servers.xml:142(para)
1889
msgid ""
1890
"This section explains Apache2 server essential configuration parameters. "
1891
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
1892
"Documentation</ulink> for more details."
1893
msgstr ""
1894
1895
#: serverguide/C/web-servers.xml:150(para)
1896
msgid ""
1897
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
1898
"it is configured with a single default virtual host (using the "
1899
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
1900
"if you have a single site, or used as a template for additional virtual "
1901
"hosts if you have multiple sites. If left alone, the default virtual host "
1902
"will serve as your default site, or the site users will see if the URL they "
1903
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
1904
"your custom sites. To modify the default virtual host, edit the file "
1905
"<filename>/etc/apache2/sites-available/default</filename>."
1906
msgstr ""
1907
1908
#: serverguide/C/web-servers.xml:163(para)
1909
msgid ""
1910
"The directives set for a virtual host only apply to that particular virtual "
1911
"host. If a directive is set server-wide and not defined within the virtual "
1912
"host settings, the default setting is used. For example, you can define a "
1913
"Webmaster email address and not define individual email addresses for each "
1914
"virtual host."
1915
msgstr ""
1916
1917
#: serverguide/C/web-servers.xml:171(para)
1918
msgid ""
1919
"If you wish to configure a new virtual host or site, copy that file into the "
1920
"same directory with a name you choose. For example:"
1921
msgstr ""
1922
1923
#: serverguide/C/web-servers.xml:177(command)
1924
msgid ""
1925
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
1926
"available/mynewsite"
1927
msgstr ""
1928
1929
#: serverguide/C/web-servers.xml:180(para)
1930
msgid ""
1931
"Edit the new file to configure the new site using some of the directives "
1932
"described below."
1933
msgstr ""
1934
1935
#: serverguide/C/web-servers.xml:187(para)
1936
msgid ""
1937
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
1938
"to be advertised for the server's administrator. The default value is "
1939
"webmaster@localhost. This should be changed to an email address that is "
1940
"delivered to you (if you are the server's administrator). If your website "
1941
"has a problem, Apache2 will display an error message containing this email "
1942
"address to report the problem to. Find this directive in your site's "
1943
"configuration file in /etc/apache2/sites-available."
1944
msgstr ""
1945
1946
#: serverguide/C/web-servers.xml:198(para)
1947
msgid ""
1948
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
1949
"the IP address, Apache2 should listen on. If the IP address is not "
1950
"specified, Apache2 will listen on all IP addresses assigned to the machine "
1951
"it runs on. The default value for the Listen directive is 80. Change this to "
1952
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
1953
"that it will not be available to the Internet, to (for example) 81 to change "
1954
"the port that it listens on, or leave it as is for normal operation. This "
1955
"directive can be found and changed in its own file, "
1956
"<filename>/etc/apache2/ports.conf</filename>"
1957
msgstr ""
1958
1959
#: serverguide/C/web-servers.xml:211(para)
1960
msgid ""
1961
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
1962
"FQDN your site should answer to. The default virtual host has no ServerName "
1963
"directive specified, so it will respond to all requests that do not match a "
1964
"ServerName directive in another virtual host. If you have just acquired the "
1965
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
1966
"value of the ServerName directive in your virtual host configuration file "
1967
"should be ubunturocks.com. Add this directive to the new virtual host file "
1968
"you created earlier (<filename>/etc/apache2/sites-"
1969
"available/mynewsite</filename>)."
1970
msgstr ""
1971
1972
#: serverguide/C/web-servers.xml:223(para)
1973
msgid ""
1974
"You may also want your site to respond to www.ubunturocks.com, since many "
1975
"users will assume the www prefix is appropriate. Use the "
1976
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
1977
"wildcards in the ServerAlias directive."
1978
msgstr ""
1979
1980
#: serverguide/C/web-servers.xml:230(para)
1981
msgid ""
1982
"For example, the following configuration will cause your site to respond to "
1983
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
1984
msgstr ""
1985
1986
#: serverguide/C/web-servers.xml:236(programlisting)
1987
#, no-wrap
1988
msgid ""
1989
"\n"
1990
"ServerAlias *.ubunturocks.com\n"
1991
msgstr ""
1992
1993
#: serverguide/C/web-servers.xml:242(para)
1994
msgid ""
1995
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
1996
"should look for the files that make up the site. The default value is "
1997
"/var/www. No site is configured there, but if you uncomment the "
1998
"<emphasis>RedirectMatch</emphasis> directive in "
1999
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2000
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2001
"this value in your site's virtual host file, and remember to create that "
2002
"directory if necessary!"
2003
msgstr ""
2004
2005
#: serverguide/C/web-servers.xml:254(para)
2006
msgid ""
2007
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2008
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2009
"enabled point to \"available\" sites."
2010
msgstr ""
2011
2012
#: serverguide/C/web-servers.xml:260(para)
2013
msgid ""
2014
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2015
"<application>a2ensite</application> utility and restart Apache2:"
2016
msgstr ""
2017
2018
#: serverguide/C/web-servers.xml:266(command)
2019
msgid "sudo a2ensite mynewsite"
2020
msgstr ""
2021
2022
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2023
msgid "sudo /etc/init.d/apache2 restart"
2024
msgstr ""
2025
2026
#: serverguide/C/web-servers.xml:271(para)
2027
msgid ""
2028
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2029
"name for the VirtualHost. One method is to name the file after the "
2030
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2031
msgstr ""
2032
2033
#: serverguide/C/web-servers.xml:278(para)
2034
msgid ""
2035
"Similarly, use the <application>a2dissite</application> utility to disable "
2036
"sites. This is can be useful when troubleshooting configuration problems "
2037
"with multiple VirtualHosts:"
2038
msgstr ""
2039
2040
#: serverguide/C/web-servers.xml:284(command)
2041
msgid "sudo a2dissite mynewsite"
2042
msgstr ""
2043
2044
#: serverguide/C/web-servers.xml:290(title)
2045
msgid "Default Settings"
2046
msgstr ""
2047
2048
#: serverguide/C/web-servers.xml:292(para)
2049
msgid ""
2050
"This section explains configuration of the Apache2 server default settings. "
2051
"For example, if you add a virtual host, the settings you configure for the "
2052
"virtual host take precedence for that virtual host. For a directive not "
2053
"defined within the virtual host settings, the default value is used."
2054
msgstr ""
2055
2056
#: serverguide/C/web-servers.xml:304(para)
2057
msgid ""
2058
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2059
"server when a user requests an index of a directory by specifying a forward "
2060
"slash (/) at the end of the directory name."
2061
msgstr ""
2062
2063
#: serverguide/C/web-servers.xml:311(para)
2064
msgid ""
2065
"For example, when a user requests the page "
2066
"http://www.example.com/this_directory/, he or she will get either the "
2067
"DirectoryIndex page if it exists, a server-generated directory list if it "
2068
"does not and the Indexes option is specified, or a Permission Denied page if "
2069
"neither is true. The server will try to find one of the files listed in the "
2070
"DirectoryIndex directive and will return the first one it finds. If it does "
2071
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2072
"set for that directory, the server will generate and return a list, in HTML "
2073
"format, of the subdirectories and files in the directory. The default value, "
2074
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2075
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2076
"Apache2 finds a file in a requested directory matching any of these names, "
2077
"the first will be displayed."
2078
msgstr ""
2079
2080
#: serverguide/C/web-servers.xml:332(para)
2081
msgid ""
2082
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2083
"file for Apache2 to use for specific error events. For example, if a user "
2084
"requests a resource that does not exist, a 404 error will occur, and per "
2085
"Apache2's default configuration, the file "
2086
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2087
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2088
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2089
"redirects requests to the /error directory to "
2090
"<filename>/usr/share/apache2/error/</filename>."
2091
msgstr ""
2092
2093
#: serverguide/C/web-servers.xml:344(para)
2094
msgid ""
2095
"To see a list of the default ErrorDocument directives, use this command:"
2096
msgstr ""
2097
2098
#: serverguide/C/web-servers.xml:350(command)
2099
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2100
msgstr ""
2101
2102
#: serverguide/C/web-servers.xml:355(para)
2103
msgid ""
2104
"By default, the server writes the transfer log to the file "
2105
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2106
"per-site basis in your virtual host configuration files with the "
2107
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2108
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2109
"specify the file to which errors are logged, via the "
2110
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2111
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2112
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2113
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2114
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2115
"/etc/apache2/apache2.conf</filename> for the default value)."
2116
msgstr ""
2117
2118
#: serverguide/C/web-servers.xml:370(para)
2119
msgid ""
2120
"Some options are specified on a per-directory basis rather than per-server. "
2121
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2122
"is enclosed in XML-like tags, like so:"
2123
msgstr ""
2124
2125
#: serverguide/C/web-servers.xml:376(programlisting)
2126
#, no-wrap
2127
msgid ""
2128
"\n"
2129
"<Directory /var/www/mynewsite>\n"
2130
"...\n"
2131
"</Directory>\n"
2132
msgstr ""
2133
2134
#: serverguide/C/web-servers.xml:382(para)
2135
msgid ""
2136
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2137
"one or more of the following values (among others), separated by spaces:"
2138
msgstr ""
2139
2140
#: serverguide/C/web-servers.xml:394(para)
2141
msgid ""
2142
"Most files should not be executed as CGI scripts. This would be very "
2143
"dangerous. CGI scripts should kept in a directory separate from and outside "
2144
"your DocumentRoot, and only this directory should have the ExecCGI option "
2145
"set. This is the default, and the default location for CGI scripts is "
2146
"<filename>/usr/lib/cgi-bin</filename>."
2147
msgstr ""
2148
2149
#: serverguide/C/web-servers.xml:389(para)
2150
msgid ""
2151
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2152
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2153
msgstr ""
2154
2155
#: serverguide/C/web-servers.xml:405(para)
2156
msgid ""
2157
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2158
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2159
"other files. This is not a common option. See <ulink "
2160
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2161
"HOWTO</ulink> for more information."
2162
msgstr ""
2163
2164
#: serverguide/C/web-servers.xml:414(para)
2165
msgid ""
2166
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2167
"includes, but disable the <emphasis>#exec</emphasis> and "
2168
"<emphasis>#include</emphasis> commands in CGI scripts."
2169
msgstr ""
2170
2171
#: serverguide/C/web-servers.xml:426(para)
2172
msgid ""
2173
"For security reasons, this should usually not be set, and certainly should "
2174
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2175
"per-directory basis only if you are certain you want users to see the entire "
2176
"contents of the directory."
2177
msgstr ""
2178
2179
#: serverguide/C/web-servers.xml:421(para)
2180
msgid ""
2181
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2182
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2183
"index.html) exists in the requested directory. <placeholder-1/>"
2184
msgstr ""
2185
2186
#: serverguide/C/web-servers.xml:436(para)
2187
msgid ""
2188
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2189
"multiviews; this option is disabled by default for security reasons. See the "
2190
"<ulink "
2191
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2192
"Apache2 documentation on this option</ulink>."
2193
msgstr ""
2194
2195
#: serverguide/C/web-servers.xml:444(para)
2196
msgid ""
2197
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2198
"symbolic links if the target file or directory has the same owner as the "
2199
"link."
2200
msgstr ""
2201
2202
#: serverguide/C/web-servers.xml:456(title)
2203
msgid "httpd Settings"
2204
msgstr ""
2205
2206
#: serverguide/C/web-servers.xml:458(para)
2207
msgid ""
2208
"This section explains some basic <application>httpd</application> daemon "
2209
"configuration settings."
2210
msgstr ""
2211
2212
#: serverguide/C/web-servers.xml:462(para)
2213
msgid ""
2214
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2215
"the path to the lockfile used when the server is compiled with either "
2216
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2217
"stored on the local disk. It should be left to the default value unless the "
2218
"logs directory is located on an NFS share. If this is the case, the default "
2219
"value should be changed to a location on the local disk and to a directory "
2220
"that is readable only by root."
2221
msgstr ""
2222
2223
#: serverguide/C/web-servers.xml:471(para)
2224
msgid ""
2225
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2226
"file in which the server records its process ID (pid). This file should only "
2227
"be readable by root. In most cases, it should be left to the default value."
2228
msgstr ""
2229
2230
#: serverguide/C/web-servers.xml:477(para)
2231
msgid ""
2232
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2233
"used by the server to answer requests. This setting determines the server's "
2234
"access. Any files inaccessible to this user will also be inaccessible to "
2235
"your website's visitors. The default value for User is www-data."
2236
msgstr ""
2237
2238
#: serverguide/C/web-servers.xml:484(para)
2239
msgid ""
2240
"Unless you know exactly what you are doing, do not set the User directive to "
2241
"root. Using root as the User will create large security holes for your Web "
2242
"server."
2243
msgstr ""
2244
2245
#: serverguide/C/web-servers.xml:490(para)
2246
msgid ""
2247
"The Group directive is similar to the User directive. Group sets the group "
2248
"under which the server will answer requests. The default group is also www-"
2249
"data."
2250
msgstr ""
2251
2252
#: serverguide/C/web-servers.xml:496(title)
2253
msgid "Apache2 Modules"
2254
msgstr ""
2255
2256
#: serverguide/C/web-servers.xml:498(para)
2257
msgid ""
2258
"Apache2 is a modular server. This implies that only the most basic "
2259
"functionality is included in the core server. Extended features are "
2260
"available through modules which can be loaded into Apache2. By default, a "
2261
"base set of modules is included in the server at compile-time. If the server "
2262
"is compiled to use dynamically loaded modules, then modules can be compiled "
2263
"separately, and added at any time using the LoadModule directive. Otherwise, "
2264
"Apache2 must be recompiled to add or remove modules."
2265
msgstr ""
2266
2267
#: serverguide/C/web-servers.xml:510(para)
2268
msgid ""
2269
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2270
"Configuration directives may be conditionally included on the presence of a "
2271
"particular module by enclosing them in an "
2272
"<emphasis><IfModule></emphasis> block."
2273
msgstr ""
2274
2275
#: serverguide/C/web-servers.xml:517(para)
2276
msgid ""
2277
"You can install additional Apache2 modules and use them with your Web "
2278
"server. For example, run the following command from a terminal prompt to "
2279
"install the <emphasis>MySQL Authentication</emphasis> module:"
2280
msgstr ""
2281
2282
#: serverguide/C/web-servers.xml:524(command)
2283
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2284
msgstr ""
2285
2286
#: serverguide/C/web-servers.xml:527(para)
2287
msgid ""
2288
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2289
"additional modules."
2290
msgstr ""
2291
2292
#: serverguide/C/web-servers.xml:531(para)
2293
msgid ""
2294
"Use the <application>a2enmod</application> utility to enable a module:"
2295
msgstr ""
2296
2297
#: serverguide/C/web-servers.xml:537(command)
2298
msgid "sudo a2enmod auth_mysql"
2299
msgstr ""
2300
2301
#: serverguide/C/web-servers.xml:541(para)
2302
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2303
msgstr ""
2304
2305
#: serverguide/C/web-servers.xml:546(command)
2306
msgid "sudo a2dismod auth_mysql"
2307
msgstr ""
2308
2309
#: serverguide/C/web-servers.xml:553(title)
2310
msgid "HTTPS Configuration"
2311
msgstr ""
2312
2313
#: serverguide/C/web-servers.xml:555(para)
2314
msgid ""
2315
"The <application>mod_ssl</application> module adds an important feature to "
2316
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2317
"browser is communicating using SSL, the https:// prefix is used at the "
2318
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2319
"bar."
2320
msgstr ""
2321
2322
#: serverguide/C/web-servers.xml:564(para)
2323
msgid ""
2324
"The <application>mod_ssl</application> module is available in "
2325
"<application>apache2-common</application> package. Execute the following "
2326
"command from a terminal prompt to enable the "
2327
"<application>mod_ssl</application> module:"
2328
msgstr ""
2329
2330
#: serverguide/C/web-servers.xml:571(command)
2331
msgid "sudo a2enmod ssl"
2332
msgstr ""
2333
2334
#: serverguide/C/web-servers.xml:574(para)
2335
msgid ""
2336
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2337
"available/default-ssl</filename>. In order for "
2338
"<application>Apache2</application> to provide HTTPS, a "
2339
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2340
"needed. The default HTTPS configuration will use a certificate and key "
2341
"generated by the <application>ssl-cert</application> package. They are good "
2342
"for testing, but the auto-generated certificate and key should be replaced "
2343
"by a certificate specific to the site or server. For information on "
2344
"generating a key and obtaining a certificate see <xref "
2345
"linkend=\"certificates-and-security\"/>"
2346
msgstr ""
2347
2348
#: serverguide/C/web-servers.xml:584(para)
2349
msgid ""
2350
"To configure <application>Apache2</application> for HTTPS, enter the "
2351
"following:"
2352
msgstr ""
2353
2354
#: serverguide/C/web-servers.xml:589(command)
2355
msgid "sudo a2ensite default-ssl"
2356
msgstr ""
2357
2358
#: serverguide/C/web-servers.xml:593(para)
2359
msgid ""
2360
"The directories <filename>/etc/ssl/certs</filename> and "
2361
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2362
"install the certificate and key in another directory make sure to change "
2363
"<emphasis>SSLCertificateFile</emphasis> and "
2364
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2365
msgstr ""
2366
2367
#: serverguide/C/web-servers.xml:600(para)
2368
msgid ""
2369
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2370
"settings:"
2371
msgstr ""
2372
2373
#: serverguide/C/web-servers.xml:611(para)
2374
msgid ""
2375
"Depending on how you obtained your certificate you may need to enter a "
2376
"passphrase when <application>Apache2</application> starts."
2377
msgstr ""
2378
2379
#: serverguide/C/web-servers.xml:617(para)
2380
msgid ""
2381
"You can access the secure server pages by typing https://your_hostname/url/ "
2382
"in your browser address bar."
2383
msgstr ""
2384
2385
#: serverguide/C/web-servers.xml:628(para)
2386
msgid ""
2387
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2388
"Documentation</ulink> contains in depth information on Apache2 configuration "
2389
"directives. Also, see the <application>apache2-doc</application> package for "
2390
"the official Apache2 docs."
2391
msgstr ""
2392
2393
#: serverguide/C/web-servers.xml:635(para)
2394
msgid ""
2395
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2396
"Documentation</ulink> site for more SSL related information."
2397
msgstr ""
2398
2399
#: serverguide/C/web-servers.xml:641(para)
2400
msgid ""
2401
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2402
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2403
"configurations."
2404
msgstr ""
2405
2406
#: serverguide/C/web-servers.xml:647(para)
2407
msgid ""
2408
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2409
"server</emphasis> IRC channel on <ulink "
2410
"url=\"http://freenode.net/\">freenode.net</ulink>."
2411
msgstr ""
2412
2413
#: serverguide/C/web-servers.xml:653(para)
2414
msgid ""
2415
"Usually integrated with PHP and MySQL the <ulink "
2416
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2417
"Ubuntu Wiki </ulink> page is a good resource."
2418
msgstr ""
2419
2420
#: serverguide/C/web-servers.xml:664(title)
2421
msgid "PHP5 - Scripting Language"
2422
msgstr ""
2423
2424
#: serverguide/C/web-servers.xml:665(para)
2425
msgid ""
2426
"PHP is a general-purpose scripting language suited for Web development. The "
2427
"PHP script can be embedded into HTML. This section explains how to install "
2428
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2429
msgstr ""
2430
2431
#: serverguide/C/web-servers.xml:669(para)
2432
msgid ""
2433
"This section assumes you have installed and configured Apache2 Web Server "
2434
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2435
"sections in this document to install and configure Apache2 and MySQL "
2436
"respectively."
2437
msgstr ""
2438
2439
#: serverguide/C/web-servers.xml:676(para)
2440
msgid "The PHP5 is available in Ubuntu Linux."
2441
msgstr ""
2442
2443
#: serverguide/C/web-servers.xml:678(para)
2444
msgid ""
2445
"To install PHP5 you can enter the following command in the terminal prompt: "
2446
"<screen>\n"
2447
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2448
"</screen>"
2449
msgstr ""
2450
2451
#: serverguide/C/web-servers.xml:687(para)
2452
msgid ""
2453
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2454
"line you should install <application>php5-cli</application> package. To "
2455
"install <application>php5-cli</application> you can enter the following "
2456
"command in the terminal prompt: <screen>\n"
2457
"<command>sudo apt-get install php5-cli</command>\n"
2458
"</screen>"
2459
msgstr ""
2460
2461
#: serverguide/C/web-servers.xml:696(para)
2462
msgid ""
2463
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2464
"accomplish this, you should install <application>php5-cgi</application> "
2465
"package. You can run the following command in a terminal prompt to install "
2466
"<application>php5-cgi</application> package: <screen>\n"
2467
"<command>sudo apt-get install php5-cgi</command>\n"
2468
"</screen>"
2469
msgstr ""
2470
2471
#: serverguide/C/web-servers.xml:706(para)
2472
msgid ""
2473
"To use <application>MySQL</application> with PHP5 you should install "
2474
"<application>php5-mysql</application> package. To install <application>php5-"
2475
"mysql</application> you can enter the following command in the terminal "
2476
"prompt: <screen>\n"
2477
"<command>sudo apt-get install php5-mysql</command>\n"
2478
"</screen>"
2479
msgstr ""
2480
2481
#: serverguide/C/web-servers.xml:714(para)
2482
msgid ""
2483
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2484
"install <application>php5-pgsql</application> package. To install "
2485
"<application>php5-pgsql</application> you can enter the following command in "
2486
"the terminal prompt: <screen>\n"
2487
"<command>sudo apt-get install php5-pgsql</command>\n"
2488
"</screen>"
2489
msgstr ""
2490
2491
#: serverguide/C/web-servers.xml:727(para)
2492
msgid ""
2493
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2494
"you have installed <application>php5-cli</application> package, you can run "
2495
"PHP5 scripts from your command prompt."
2496
msgstr ""
2497
2498
#: serverguide/C/web-servers.xml:734(para)
2499
msgid ""
2500
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2501
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2502
"when you install the module. Please verify if the files "
2503
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2504
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2505
"not exists, you can enable the module using <command>a2enmod</command> "
2506
"command."
2507
msgstr ""
2508
2509
#: serverguide/C/web-servers.xml:745(para)
2510
msgid ""
2511
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2512
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2513
"following command at a terminal prompt to restart your web server: "
2514
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2515
msgstr ""
2516
2517
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2518
msgid "Testing"
2519
msgstr ""
2520
2521
#: serverguide/C/web-servers.xml:754(para)
2522
msgid ""
2523
"To verify your installation, you can run following PHP5 phpinfo script:"
2524
msgstr ""
2525
2526
#: serverguide/C/web-servers.xml:757(programlisting)
2527
#, no-wrap
2528
msgid ""
2529
"\n"
2530
"<?php\n"
2531
" phpinfo();\n"
2532
"?>\n"
2533
msgstr ""
2534
2535
#: serverguide/C/web-servers.xml:762(para)
2536
msgid ""
2537
"You can save the content in a file <filename>phpinfo.php</filename> and "
2538
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2539
"server. When point your browser to "
2540
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2541
"various PHP5 configuration parameters."
2542
msgstr ""
2543
2544
#: serverguide/C/web-servers.xml:776(para)
2545
msgid ""
2546
"For more in depth information see <ulink "
2547
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2548
msgstr ""
2549
2550
#: serverguide/C/web-servers.xml:781(para)
2551
msgid ""
2552
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2553
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2554
"5</ulink> and the <ulink "
2555
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2556
msgstr ""
2557
2558
#: serverguide/C/web-servers.xml:788(para)
2559
msgid ""
2560
"Also, see the <ulink "
2561
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2562
"Ubuntu Wiki</ulink> page for more information."
2563
msgstr ""
2564
2565
#: serverguide/C/web-servers.xml:799(title)
2566
msgid "Squid - Proxy Server"
2567
msgstr ""
2568
2569
#: serverguide/C/web-servers.xml:800(para)
2570
msgid ""
2571
"Squid is a full-featured web proxy cache server application which provides "
2572
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2573
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2574
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2575
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2576
"caching. Squid also supports a wide variety of caching protocols, such as "
2577
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2578
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2579
"Protocol. (WCCP)"
2580
msgstr ""
2581
2582
#: serverguide/C/web-servers.xml:808(para)
2583
msgid ""
2584
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2585
"and caching server needs, and scales from the branch office to enterprise "
2586
"level networks while providing extensive, granular access control mechanisms "
2587
"and monitoring of critical parameters via the Simple Network Management "
2588
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2589
"Squid proxy, or caching servers, ensure your system is configured with a "
2590
"large amount of physical memory, as Squid maintains an in-memory cache for "
2591
"increased performance."
2592
msgstr ""
2593
2594
#: serverguide/C/web-servers.xml:817(para)
2595
msgid ""
2596
"At a terminal prompt, enter the following command to install the Squid "
2597
"server:"
2598
msgstr ""
2599
2600
#: serverguide/C/web-servers.xml:822(command)
2601
msgid "sudo apt-get install squid"
2602
msgstr ""
2603
2604
#: serverguide/C/web-servers.xml:828(para)
2605
msgid ""
2606
"Squid is configured by editing the directives contained within the "
2607
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2608
"examples illustrate some of the directives which may be modified to affect "
2609
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2610
"see the References section."
2611
msgstr ""
2612
2613
#: serverguide/C/web-servers.xml:834(para)
2614
msgid ""
2615
"Prior to editing the configuration file, you should make a copy of the "
2616
"original file and protect it from writing so you will have the original "
2617
"settings as a reference, and to re-use as necessary."
2618
msgstr ""
2619
2620
#: serverguide/C/web-servers.xml:837(para)
2621
msgid ""
2622
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2623
"writing with the following commands entered at a terminal prompt:"
2624
msgstr ""
2625
2626
#: serverguide/C/web-servers.xml:842(command)
2627
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2628
msgstr ""
2629
2630
#: serverguide/C/web-servers.xml:843(command)
2631
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2632
msgstr ""
2633
2634
#: serverguide/C/web-servers.xml:849(para)
2635
msgid ""
2636
"To set your Squid server to listen on TCP port 8888 instead of the default "
2637
"TCP port 3128, change the http_port directive as such:"
2638
msgstr ""
2639
2640
#: serverguide/C/web-servers.xml:853(programlisting)
2641
#, no-wrap
2642
msgid ""
2643
"\n"
2644
"http_port 8888\n"
2645
msgstr ""
2646
2647
#: serverguide/C/web-servers.xml:858(para)
2648
msgid ""
2649
"Change the visible_hostname directive in order to give the Squid server a "
2650
"specific hostname. This hostname does not necessarily need to be the "
2651
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2652
msgstr ""
2653
2654
#: serverguide/C/web-servers.xml:862(programlisting)
2655
#, no-wrap
2656
msgid ""
2657
"\n"
2658
"visible_hostname weezie\n"
2659
msgstr ""
2660
2661
#: serverguide/C/web-servers.xml:867(para)
2662
msgid ""
2663
"Using Squid's access control, you may configure use of Internet services "
2664
"proxied by Squid to be available only users with certain Internet Protocol "
2665
"(IP) addresses. For example, we will illustrate access by users of the "
2666
"192.168.42.0/24 subnetwork only:"
2667
msgstr ""
2668
2669
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2670
msgid ""
2671
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2672
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2673
msgstr ""
2674
2675
#: serverguide/C/web-servers.xml:875(programlisting)
2676
#, no-wrap
2677
msgid ""
2678
"\n"
2679
"acl fortytwo_network src 192.168.42.0/24\n"
2680
msgstr ""
2681
2682
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2683
msgid ""
2684
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2685
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2686
msgstr ""
2687
2688
#: serverguide/C/web-servers.xml:882(programlisting)
2689
#, no-wrap
2690
msgid ""
2691
"\n"
2692
"http_access allow fortytwo_network\n"
2693
msgstr ""
2694
2695
#: serverguide/C/web-servers.xml:887(para)
2696
msgid ""
2697
"Using the excellent access control features of Squid, you may configure use "
2698
"of Internet services proxied by Squid to be available only during normal "
2699
"business hours. For example, we'll illustrate access by employees of a "
2700
"business which is operating between 9:00AM and 5:00PM, Monday through "
2701
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2702
msgstr ""
2703
2704
#: serverguide/C/web-servers.xml:895(programlisting)
2705
#, no-wrap
2706
msgid ""
2707
"\n"
2708
"acl biz_network src 10.1.42.0/24\n"
2709
"acl biz_hours time M T W T F 9:00-17:00\n"
2710
msgstr ""
2711
2712
#: serverguide/C/web-servers.xml:903(programlisting)
2713
#, no-wrap
2714
msgid ""
2715
"\n"
2716
"http_access allow biz_network biz_hours\n"
2717
msgstr ""
2718
2719
#: serverguide/C/web-servers.xml:910(para)
2720
msgid ""
2721
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2722
"save the file and restart the <application>squid</application> server "
2723
"application to effect the changes using the following command entered at a "
2724
"terminal prompt:"
2725
msgstr ""
2726
2727
#: serverguide/C/web-servers.xml:917(command)
2728
msgid "sudo /etc/init.d/squid restart"
2729
msgstr ""
2730
2731
#: serverguide/C/web-servers.xml:924(ulink)
2732
msgid "Squid Website"
2733
msgstr ""
2734
2735
#: serverguide/C/web-servers.xml:926(para)
2736
msgid ""
2737
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2738
"Squid</ulink> page."
2739
msgstr ""
2740
2741
#: serverguide/C/web-servers.xml:933(title)
2742
msgid "Ruby on Rails"
2743
msgstr ""
2744
2745
#: serverguide/C/web-servers.xml:934(para)
2746
msgid ""
2747
"Ruby on Rails is an open source web framework for developing database backed "
2748
"web applications. It is optimized for sustainable productivity of the "
2749
"programmer since it lets the programmer to write code by favouring "
2750
"convention over configuration."
2751
msgstr ""
2752
2753
#: serverguide/C/web-servers.xml:941(para)
2754
msgid ""
2755
"Before installing <application>Rails</application> you should install "
2756
"<application>Apache</application> and <application>MySQL</application>. To "
2757
"install the <application>Apache</application> package, please refer to <xref "
2758
"linkend=\"httpd\"/>. For instructions on installing "
2759
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
2760
msgstr ""
2761
2762
#: serverguide/C/web-servers.xml:949(para)
2763
msgid ""
2764
"Once you have <application>Apache</application> and "
2765
"<application>MySQL</application> packages installed, you are ready to "
2766
"install <application>Ruby on Rails</application> package."
2767
msgstr ""
2768
2769
#: serverguide/C/web-servers.xml:956(para)
2770
msgid ""
2771
"To install the <application>Ruby</application> base packages and "
2772
"<application>Ruby on Rails</application>, you can enter the following "
2773
"command in the terminal prompt:"
2774
msgstr ""
2775
2776
#: serverguide/C/web-servers.xml:962(command)
2777
msgid "sudo apt-get install rails"
2778
msgstr ""
2779
2780
#: serverguide/C/web-servers.xml:968(para)
2781
msgid ""
2782
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
2783
"configuration file to setup your domains."
2784
msgstr ""
2785
2786
#: serverguide/C/web-servers.xml:972(para)
2787
msgid ""
2788
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
2789
msgstr ""
2790
2791
#: serverguide/C/web-servers.xml:976(programlisting)
2792
#, no-wrap
2793
msgid ""
2794
"\n"
2795
"DocumentRoot /path/to/rails/application/public\n"
2796
msgstr ""
2797
2798
#: serverguide/C/web-servers.xml:979(para)
2799
msgid ""
2800
"Next, change the <Directory \"/path/to/rails/application/public\"> "
2801
"directive:"
2802
msgstr ""
2803
2804
#: serverguide/C/web-servers.xml:983(programlisting)
2805
#, no-wrap
2806
msgid ""
2807
"\n"
2808
"<Directory \"/path/to/rails/application/public\">\n"
2809
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
2810
" AllowOverride All\n"
2811
" Order allow,deny\n"
2812
" allow from all\n"
2813
" AddHandler cgi-script .cgi\n"
2814
"</Directory>\n"
2815
msgstr ""
2816
2817
#: serverguide/C/web-servers.xml:993(para)
2818
msgid ""
2819
"You should also enable the <application>mod_rewrite</application> module for "
2820
"Apache. To enable <application>mod_rewrite</application> module, please "
2821
"enter the following command in a terminal prompt:"
2822
msgstr ""
2823
2824
#: serverguide/C/web-servers.xml:999(command)
2825
msgid "sudo a2enmod rewrite"
2826
msgstr ""
2827
2828
#: serverguide/C/web-servers.xml:1002(para)
2829
msgid ""
2830
"Finally you will need to change the ownership of the "
2831
"<filename>/path/to/rails/application/public</filename> and "
2832
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
2833
"used to run the <application>Apache</application> process:"
2834
msgstr ""
2835
2836
#: serverguide/C/web-servers.xml:1008(command)
2837
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
2838
msgstr ""
2839
2840
#: serverguide/C/web-servers.xml:1009(command)
2841
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
2842
msgstr ""
2843
2844
#: serverguide/C/web-servers.xml:1012(para)
2845
msgid ""
2846
"That's it! Now you have your Server ready for your <application>Ruby on "
2847
"Rails</application> applications."
2848
msgstr ""
2849
2850
#: serverguide/C/web-servers.xml:1021(para)
2851
msgid ""
2852
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
2853
"for more information."
2854
msgstr ""
2855
2856
#: serverguide/C/web-servers.xml:1026(para)
2857
msgid ""
2858
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
2859
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
2860
"resource."
2861
msgstr ""
2862
2863
#: serverguide/C/web-servers.xml:1032(para)
2864
msgid ""
2865
"Another place for more information is the <ulink "
2866
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
2867
"Wiki</ulink> page."
2868
msgstr ""
2869
2870
#: serverguide/C/web-servers.xml:1043(title)
2871
msgid "Apache Tomcat"
2872
msgstr ""
2873
2874
#: serverguide/C/web-servers.xml:1044(para)
2875
msgid ""
2876
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
2877
"JSP (Java Server Pages) web applications."
2878
msgstr ""
2879
2880
#: serverguide/C/web-servers.xml:1046(para)
2881
msgid ""
2882
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
2883
"different ways of running Tomcat. You can install them as a classic unique "
2884
"system-wide instance, that will be started at boot time and will run as the "
2885
"tomcat6 unpriviledged user. But you can also deploy private instances that "
2886
"will run with your own user rights, and that you should start and stop by "
2887
"yourself. This second way is particularly useful in a development server "
2888
"context where multiple users need to test on their own private Tomcat "
2889
"instances."
2890
msgstr ""
2891
2892
#: serverguide/C/web-servers.xml:1056(title)
2893
msgid "System-wide installation"
2894
msgstr ""
2895
2896
#: serverguide/C/web-servers.xml:1057(para)
2897
msgid ""
2898
"To install the <application>Tomcat</application> server, you can enter the "
2899
"following command in the terminal prompt:"
2900
msgstr ""
2901
2902
#: serverguide/C/web-servers.xml:1060(command)
2903
msgid "sudo apt-get install tomcat6"
2904
msgstr ""
2905
2906
#: serverguide/C/web-servers.xml:1062(para)
2907
msgid ""
2908
"This will install a Tomcat server with just a default ROOT webapp that "
2909
"displays a minimal \"It works\" page by default."
2910
msgstr ""
2911
2912
#: serverguide/C/web-servers.xml:1068(para)
2913
msgid ""
2914
"Tomcat configuration files can be found in "
2915
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
2916
"will be described here, please see <ulink "
2917
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
2918
"documentation</ulink> for more."
2919
msgstr ""
2920
2921
#: serverguide/C/web-servers.xml:1074(title)
2922
msgid "Changing default ports"
2923
msgstr ""
2924
2925
#: serverguide/C/web-servers.xml:1075(para)
2926
msgid ""
2927
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
2928
"connector on port 8009. You might want to change those default ports to "
2929
"avoid conflict with another server on the system. This is done by changing "
2930
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
2931
msgstr ""
2932
2933
#: serverguide/C/web-servers.xml:1080(programlisting)
2934
#, no-wrap
2935
msgid ""
2936
"\n"
2937
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
2938
" connectionTimeout=\"20000\" \n"
2939
" redirectPort=\"8443\" />\n"
2940
"...\n"
2941
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
2942
"/>\n"
2943
msgstr ""
2944
2945
#: serverguide/C/web-servers.xml:1089(title)
2946
msgid "Changing JVM used"
2947
msgstr ""
2948
2949
#: serverguide/C/web-servers.xml:1090(para)
2950
msgid ""
2951
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
2952
"then try some other JVMs. If you have various JVMs installed, you can set "
2953
"which should be used by setting JAVA_HOME in "
2954
"<filename>/etc/default/tomcat6</filename>:"
2955
msgstr ""
2956
2957
#: serverguide/C/web-servers.xml:1094(programlisting)
2958
#, no-wrap
2959
msgid ""
2960
"\n"
2961
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
2962
msgstr ""
2963
2964
#: serverguide/C/web-servers.xml:1099(title)
2965
msgid "Declaring users and roles"
2966
msgstr ""
2967
2968
#: serverguide/C/web-servers.xml:1100(para)
2969
msgid ""
2970
"Usernames, passwords and roles (groups) can be defined centrally in a "
2971
"Servlet container. In Tomcat 6.0 this is done in the "
2972
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
2973
msgstr ""
2974
2975
#: serverguide/C/web-servers.xml:1103(programlisting)
2976
#, no-wrap
2977
msgid ""
2978
"\n"
2979
"<role rolename=\"admin\"/>\n"
2980
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
2981
msgstr ""
2982
2983
#: serverguide/C/web-servers.xml:1111(title)
2984
msgid "Using Tomcat standard webapps"
2985
msgstr ""
2986
2987
#: serverguide/C/web-servers.xml:1112(para)
2988
msgid ""
2989
"Tomcat is shipped with webapps that you can install for documentation, "
2990
"administration or demo purposes."
2991
msgstr ""
2992
2993
#: serverguide/C/web-servers.xml:1115(title)
2994
msgid "Tomcat documentation"
2995
msgstr ""
2996
2997
#: serverguide/C/web-servers.xml:1116(para)
2998
msgid ""
2999
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3000
"documentation, packaged as a webapp that you can access by default at "
3001
"http://yourserver:8080/docs. You can install it by entering the following "
3002
"command in the terminal prompt:"
3003
msgstr ""
3004
3005
#: serverguide/C/web-servers.xml:1121(command)
3006
msgid "sudo apt-get install tomcat6-docs"
3007
msgstr ""
3008
3009
#: serverguide/C/web-servers.xml:1125(title)
3010
msgid "Tomcat administration webapps"
3011
msgstr ""
3012
3013
#: serverguide/C/web-servers.xml:1126(para)
3014
msgid ""
3015
"The <application>tomcat6-admin</application> package contains two webapps "
3016
"that can be used to administer the Tomcat server using a web interface. You "
3017
"can install them by entering the following command in the terminal prompt:"
3018
msgstr ""
3019
3020
#: serverguide/C/web-servers.xml:1131(command)
3021
msgid "sudo apt-get install tomcat6-admin"
3022
msgstr ""
3023
3024
#: serverguide/C/web-servers.xml:1133(para)
3025
msgid ""
3026
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3027
"access by default at http://yourserver:8080/manager/html. It is primarily "
3028
"used to get server status and restart webapps."
3029
msgstr ""
3030
3031
#: serverguide/C/web-servers.xml:1136(para)
3032
msgid ""
3033
"Access to the <emphasis>manager</emphasis> application is protected by "
3034
"default: you need to define a user with the role \"manager\" in "
3035
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3036
msgstr ""
3037
3038
#: serverguide/C/web-servers.xml:1140(para)
3039
msgid ""
3040
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3041
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3042
"used to create virtual hosts dynamically."
3043
msgstr ""
3044
3045
#: serverguide/C/web-servers.xml:1144(para)
3046
msgid ""
3047
"Access to the <emphasis>host-manager</emphasis> application is also "
3048
"protected by default: you need to define a user with the role \"admin\" in "
3049
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3050
msgstr ""
3051
3052
#: serverguide/C/web-servers.xml:1149(para)
3053
msgid ""
3054
"For security reasons, the tomcat6 user cannot write to the "
3055
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3056
"these admin webapps (application deployment, virtual host creation) need "
3057
"write access to that directory. If you want to use these features execute "
3058
"the following, to give users in the tomcat6 group the necessary rights:"
3059
msgstr ""
3060
3061
#: serverguide/C/web-servers.xml:1156(command)
3062
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3063
msgstr ""
3064
3065
#: serverguide/C/web-servers.xml:1157(command)
3066
msgid "sudo chmod -R g+w /etc/tomcat6"
3067
msgstr ""
3068
3069
#: serverguide/C/web-servers.xml:1162(title)
3070
msgid "Tomcat examples webapps"
3071
msgstr ""
3072
3073
#: serverguide/C/web-servers.xml:1163(para)
3074
msgid ""
3075
"The <application>tomcat6-examples</application> package contains two webapps "
3076
"that can be used to test or demonstrate Servlets and JSP features, which you "
3077
"can access them by default at http://yourserver:8080/examples. You can "
3078
"install them by entering the following command in the terminal prompt:"
3079
msgstr ""
3080
3081
#: serverguide/C/web-servers.xml:1169(command)
3082
msgid "sudo apt-get install tomcat6-examples"
3083
msgstr ""
3084
3085
#: serverguide/C/web-servers.xml:1175(title)
3086
msgid "Using private instances"
3087
msgstr ""
3088
3089
#: serverguide/C/web-servers.xml:1176(para)
3090
msgid ""
3091
"Tomcat is heavily used in development and testing scenarios where using a "
3092
"single system-wide instance doesn't meet the requirements of multiple users "
3093
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3094
"help deploy your own user-oriented instances, allowing every user on a "
3095
"system to run (without root rights) separate private instances while still "
3096
"using the system-installed libraries."
3097
msgstr ""
3098
3099
#: serverguide/C/web-servers.xml:1183(para)
3100
msgid ""
3101
"It is possible to run the system-wide instance and the private instances in "
3102
"parallel, as long as they do not use the same TCP ports."
3103
msgstr ""
3104
3105
#: serverguide/C/web-servers.xml:1187(title)
3106
msgid "Installing private instance support"
3107
msgstr ""
3108
3109
#: serverguide/C/web-servers.xml:1188(para)
3110
msgid ""
3111
"You can install everything necessary to run private instances by entering "
3112
"the following command in the terminal prompt:"
3113
msgstr ""
3114
3115
#: serverguide/C/web-servers.xml:1191(command)
3116
msgid "sudo apt-get install tomcat6-user"
3117
msgstr ""
3118
3119
#: serverguide/C/web-servers.xml:1195(title)
3120
msgid "Creating a private instance"
3121
msgstr ""
3122
3123
#: serverguide/C/web-servers.xml:1196(para)
3124
msgid ""
3125
"You can create a private instance directory by entering the following "
3126
"command in the terminal prompt:"
3127
msgstr ""
3128
3129
#: serverguide/C/web-servers.xml:1199(command)
3130
msgid "tomcat6-instance-create my-instance"
3131
msgstr ""
3132
3133
#: serverguide/C/web-servers.xml:1201(para)
3134
msgid ""
3135
"This will create a new <filename>my-instance</filename> directory with all "
3136
"the necessary subdirectories and scripts. You can for example install your "
3137
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3138
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3139
"are deployed by default."
3140
msgstr ""
3141
3142
#: serverguide/C/web-servers.xml:1209(title)
3143
msgid "Configuring your private instance"
3144
msgstr ""
3145
3146
#: serverguide/C/web-servers.xml:1210(para)
3147
msgid ""
3148
"You will find the classic Tomcat configuration files for your private "
3149
"instance in the <filename>conf/</filename> subdirectory. You should for "
3150
"example certainly edit the <filename>conf/server.xml</filename> file to "
3151
"change the default ports used by your private Tomcat instance to avoid "
3152
"conflict with other instances that might be running."
3153
msgstr ""
3154
3155
#: serverguide/C/web-servers.xml:1218(title)
3156
msgid "Starting/stopping your private instance"
3157
msgstr ""
3158
3159
#: serverguide/C/web-servers.xml:1219(para)
3160
msgid ""
3161
"You can start your private instance by entering the following command in the "
3162
"terminal prompt (supposing your instance is located in the <filename>my-"
3163
"instance</filename> directory):"
3164
msgstr ""
3165
3166
#: serverguide/C/web-servers.xml:1223(command)
3167
msgid "my-instance/bin/startup.sh"
3168
msgstr ""
3169
3170
#: serverguide/C/web-servers.xml:1225(para)
3171
msgid ""
3172
"You should check the <filename>logs/</filename> subdirectory for any error. "
3173
"If you have a <emphasis>java.net.BindException: Address already in "
3174
"use<null>:8080</emphasis> error, it means that the port you're using "
3175
"is already taken and that you should change it."
3176
msgstr ""
3177
3178
#: serverguide/C/web-servers.xml:1230(para)
3179
msgid ""
3180
"You can stop your instance by entering the following command in the terminal "
3181
"prompt (supposing your instance is located in the <filename>my-"
3182
"instance</filename> directory):"
3183
msgstr ""
3184
3185
#: serverguide/C/web-servers.xml:1234(command)
3186
msgid "my-instance/bin/shutdown.sh"
3187
msgstr ""
3188
3189
#: serverguide/C/web-servers.xml:1243(para)
3190
msgid ""
3191
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3192
"website for more information."
3193
msgstr ""
3194
3195
#: serverguide/C/web-servers.xml:1248(para)
3196
msgid ""
3197
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3198
"Definitive Guide</ulink> is a good resource for building web applications "
3199
"with Tomcat."
3200
msgstr ""
3201
3202
#: serverguide/C/web-servers.xml:1254(para)
3203
msgid ""
3204
"For additional books see the <ulink "
3205
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3206
"page."
3207
msgstr ""
3208
3209
#: serverguide/C/web-servers.xml:1259(para)
3210
msgid ""
3211
"Also, see the<ulink "
3212
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3213
"Tomcat</ulink> page."
3214
msgstr ""
3215
3216
#: serverguide/C/vpn.xml:13(title)
3217
msgid "VPN"
3218
msgstr ""
3219
3220
#: serverguide/C/vpn.xml:15(para)
3221
msgid ""
3222
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3223
"network connection between two or more networks. There are several ways to "
3224
"create a VPN using software as well as dedicated hardware appliances. This "
3225
"chapter will cover installing and configuring "
3226
"<application>OpenVPN</application> to create a VPN between two servers."
3227
msgstr ""
3228
3229
#: serverguide/C/vpn.xml:23(title)
3230
msgid "OpenVPN"
3231
msgstr ""
3232
3233
#: serverguide/C/vpn.xml:25(para)
3234
msgid ""
3235
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3236
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3237
"clients through a bridge interface on the VPN server. This guide will assume "
3238
"that one VPN node, the server in this case, has a bridge interface "
3239
"configured. For more information on setting up a bridge see <xref "
3240
"linkend=\"bridging\"/>."
3241
msgstr ""
3242
3243
#: serverguide/C/vpn.xml:35(para)
3244
msgid "To install <application>openvpn</application> in a terminal enter:"
3245
msgstr ""
3246
3247
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3248
msgid "sudo apt-get install openvpn"
3249
msgstr ""
3250
3251
#: serverguide/C/vpn.xml:45(title)
3252
msgid "Server Certificates"
3253
msgstr ""
3254
3255
#: serverguide/C/vpn.xml:47(para)
3256
msgid ""
3257
"Now that the <application>openvpn</application> package is installed, the "
3258
"certificates for the VPN server need to be created."
3259
msgstr ""
3260
3261
#: serverguide/C/vpn.xml:52(para)
3262
msgid ""
3263
"First, copy the <filename>easy-rsa</filename> directory to "
3264
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3265
"scripts will not be lost when the package is updated. You will also need to "
3266
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3267
"the current user permission to create files. From a terminal enter:"
3268
msgstr ""
3269
3270
#: serverguide/C/vpn.xml:59(command)
3271
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3272
msgstr ""
3273
3274
#: serverguide/C/vpn.xml:60(command)
3275
msgid ""
3276
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3277
"rsa/"
3278
msgstr ""
3279
3280
#: serverguide/C/vpn.xml:61(command)
3281
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3282
msgstr ""
3283
3284
#: serverguide/C/vpn.xml:64(para)
3285
msgid ""
3286
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3287
"following to your environment:"
3288
msgstr ""
3289
3290
#: serverguide/C/vpn.xml:68(programlisting)
3291
#, no-wrap
3292
msgid ""
3293
"\n"
3294
"export KEY_COUNTRY=\"US\"\n"
3295
"export KEY_PROVINCE=\"NC\"\n"
3296
"export KEY_CITY=\"Winston-Salem\"\n"
3297
"export KEY_ORG=\"Example Company\"\n"
3298
"export KEY_EMAIL=\"steve@example.com\"\n"
3299
msgstr ""
3300
3301
#: serverguide/C/vpn.xml:76(para)
3302
msgid "Enter the following to create the server certificates:"
3303
msgstr ""
3304
3305
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3306
msgid "cd /etc/openvpn/easy-rsa/"
3307
msgstr ""
3308
3309
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3310
msgid "source vars"
3311
msgstr ""
3312
3313
#: serverguide/C/vpn.xml:83(command)
3314
msgid "./clean-all"
3315
msgstr ""
3316
3317
#: serverguide/C/vpn.xml:84(command)
3318
msgid "./build-dh"
3319
msgstr ""
3320
3321
#: serverguide/C/vpn.xml:85(command)
3322
msgid "./pkitool --initca"
3323
msgstr ""
3324
3325
#: serverguide/C/vpn.xml:86(command)
3326
msgid "./pkitool --server server"
3327
msgstr ""
3328
3329
#: serverguide/C/vpn.xml:87(command)
3330
msgid "cd keys"
3331
msgstr ""
3332
3333
#: serverguide/C/vpn.xml:88(command)
3334
msgid "openvpn --genkey --secret ta.key"
3335
msgstr ""
3336
3337
#: serverguide/C/vpn.xml:89(command)
3338
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3339
msgstr ""
3340
3341
#: serverguide/C/vpn.xml:94(title)
3342
msgid "Client Certificates"
3343
msgstr ""
3344
3345
#: serverguide/C/vpn.xml:96(para)
3346
msgid ""
3347
"The VPN client will also need a certificate to authenticate itself to the "
3348
"server. To create the certificate, enter the following in a terminal:"
3349
msgstr ""
3350
3351
#: serverguide/C/vpn.xml:104(command)
3352
msgid "./pkitool hostname"
3353
msgstr ""
3354
3355
#: serverguide/C/vpn.xml:108(para)
3356
msgid ""
3357
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3358
"machine connecting to the VPN."
3359
msgstr ""
3360
3361
#: serverguide/C/vpn.xml:113(para)
3362
msgid "Copy the following files to the client:"
3363
msgstr ""
3364
3365
#: serverguide/C/vpn.xml:118(para)
3366
msgid "/etc/openvpn/ca.crt"
3367
msgstr ""
3368
3369
#: serverguide/C/vpn.xml:119(para)
3370
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3371
msgstr ""
3372
3373
#: serverguide/C/vpn.xml:120(para)
3374
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3375
msgstr ""
3376
3377
#: serverguide/C/vpn.xml:121(para)
3378
msgid "/etc/openvpn/ta.key"
3379
msgstr ""
3380
3381
#: serverguide/C/vpn.xml:125(para)
3382
msgid ""
3383
"Remember to adjust the above file names for your client machine's "
3384
"<emphasis>hostname</emphasis>."
3385
msgstr ""
3386
3387
#: serverguide/C/vpn.xml:130(para)
3388
msgid ""
3389
"It is best to use a secure method to copy the certificate and key files. The "
3390
"<application>scp</application> utility is a good choice, but copying the "
3391
"files to removable media then to the client, also works well."
3392
msgstr ""
3393
3394
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3395
msgid "Server Configuration"
3396
msgstr ""
3397
3398
#: serverguide/C/vpn.xml:143(para)
3399
msgid ""
3400
"Now configure the <application>openvpn</application> server by creating "
3401
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3402
"terminal enter:"
3403
msgstr ""
3404
3405
#: serverguide/C/vpn.xml:149(command)
3406
msgid ""
3407
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3408
"/etc/openvpn/"
3409
msgstr ""
3410
3411
#: serverguide/C/vpn.xml:150(command)
3412
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3413
msgstr ""
3414
3415
#: serverguide/C/vpn.xml:153(para)
3416
msgid ""
3417
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3418
"options to:"
3419
msgstr ""
3420
3421
#: serverguide/C/vpn.xml:157(programlisting)
3422
#, no-wrap
3423
msgid ""
3424
"\n"
3425
"local 172.18.100.101\n"
3426
"dev tap0\n"
3427
"up \"/etc/openvpn/up.sh br0\"\n"
3428
"down \"/etc/openvpn/down.sh br0\"\n"
3429
";server 10.8.0.0 255.255.255.0\n"
3430
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3431
"push \"route 172.18.100.1 255.255.255.0\"\n"
3432
"push \"dhcp-option DNS 172.18.100.20\"\n"
3433
"push \"dhcp-option DOMAIN example.com\"\n"
3434
"tls-auth ta.key 0 # This file is secret\n"
3435
"user nobody\n"
3436
"group nogroup\n"
3437
msgstr ""
3438
3439
#: serverguide/C/vpn.xml:174(para)
3440
msgid ""
3441
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3442
msgstr ""
3443
3444
#: serverguide/C/vpn.xml:179(para)
3445
msgid ""
3446
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3447
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3448
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3449
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3450
"to clients."
3451
msgstr ""
3452
3453
#: serverguide/C/vpn.xml:186(para)
3454
msgid ""
3455
"<emphasis>push</emphasis>: are directives to add networking options for "
3456
"clients."
3457
msgstr ""
3458
3459
#: serverguide/C/vpn.xml:191(para)
3460
msgid ""
3461
"<emphasis>user and group</emphasis>: configure which user and group the "
3462
"<application>openvpn</application> daemon executes as."
3463
msgstr ""
3464
3465
#: serverguide/C/vpn.xml:198(para)
3466
msgid ""
3467
"Replace all IP addresses and domain names above with those of your network."
3468
msgstr ""
3469
3470
#: serverguide/C/vpn.xml:203(para)
3471
msgid ""
3472
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3473
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3474
msgstr ""
3475
3476
#: serverguide/C/vpn.xml:207(programlisting)
3477
#, no-wrap
3478
msgid ""
3479
"\n"
3480
"#!/bin/sh\n"
3481
"\n"
3482
"BR=$1\n"
3483
"DEV=$2\n"
3484
"MTU=$3\n"
3485
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3486
"/usr/sbin/brctl addif $BR $DEV\n"
3487
msgstr ""
3488
3489
#: serverguide/C/vpn.xml:217(para)
3490
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3491
msgstr ""
3492
3493
#: serverguide/C/vpn.xml:221(programlisting)
3494
#, no-wrap
3495
msgid ""
3496
"\n"
3497
"#!/bin/sh\n"
3498
"\n"
3499
"BR=$1\n"
3500
"DEV=$2\n"
3501
"\n"
3502
"/usr/sbin/brctl delif $BR $DEV\n"
3503
"/sbin/ifconfig $DEV down\n"
3504
msgstr ""
3505
3506
#: serverguide/C/vpn.xml:231(para)
3507
msgid "Then make them executable:"
3508
msgstr ""
3509
3510
#: serverguide/C/vpn.xml:236(command)
3511
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3512
msgstr ""
3513
3514
#: serverguide/C/vpn.xml:237(command)
3515
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3516
msgstr ""
3517
3518
#: serverguide/C/vpn.xml:240(para)
3519
msgid ""
3520
"After configuring the server, restart <application>openvpn</application> by "
3521
"entering:"
3522
msgstr ""
3523
3524
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3525
msgid "sudo /etc/init.d/openvpn restart"
3526
msgstr ""
3527
3528
#: serverguide/C/vpn.xml:250(title)
3529
msgid "Client Configuration"
3530
msgstr ""
3531
3532
#: serverguide/C/vpn.xml:252(para)
3533
msgid "First, install <application>openvpn</application> on the client:"
3534
msgstr ""
3535
3536
#: serverguide/C/vpn.xml:260(para)
3537
msgid ""
3538
"Then with the server configured and the client certificates copied to the "
3539
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3540
"file by copying the example. In a terminal on the client machine enter:"
3541
msgstr ""
3542
3543
#: serverguide/C/vpn.xml:266(command)
3544
msgid ""
3545
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3546
"/etc/openvpn"
3547
msgstr ""
3548
3549
#: serverguide/C/vpn.xml:269(para)
3550
msgid ""
3551
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3552
"following options:"
3553
msgstr ""
3554
3555
#: serverguide/C/vpn.xml:273(programlisting)
3556
#, no-wrap
3557
msgid ""
3558
"\n"
3559
"dev tap\n"
3560
"remote vpn.example.com 1194\n"
3561
"cert hostname.crt\n"
3562
"key hostname.key\n"
3563
"tls-auth ta.key 1\n"
3564
msgstr ""
3565
3566
#: serverguide/C/vpn.xml:282(para)
3567
msgid ""
3568
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3569
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3570
"key filenames."
3571
msgstr ""
3572
3573
#: serverguide/C/vpn.xml:288(para)
3574
msgid "Finally, restart <application>openvpn</application>:"
3575
msgstr ""
3576
3577
#: serverguide/C/vpn.xml:296(para)
3578
msgid "You should now be able to connect to the remote LAN through the VPN."
3579
msgstr ""
3580
3581
#: serverguide/C/vpn.xml:307(para)
3582
msgid ""
3583
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3584
"additional information."
3585
msgstr ""
3586
3587
#: serverguide/C/vpn.xml:312(para)
3588
msgid ""
3589
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3590
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3591
msgstr ""
3592
3593
#: serverguide/C/vpn.xml:318(para)
3594
msgid ""
3595
"Another source of further information is the <ulink "
3596
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3597
"OpenVPN</ulink> page."
3598
msgstr ""
3599
3600
#: serverguide/C/virtualization.xml:13(title)
3601
msgid "Virtualization"
3602
msgstr ""
3603
3604
#: serverguide/C/virtualization.xml:14(para)
3605
msgid ""
3606
"Virtualization is being adopted in many different environments and "
3607
"situations. If you are a developer, virtualization can provide you with a "
3608
"contained environment where you can safely do almost any sort of development "
3609
"safe from messing up your main working environment. If you are a systems "
3610
"administrator, you can use virtualization to more easily separate your "
3611
"services and move them around based on demand."
3612
msgstr ""
3613
3614
#: serverguide/C/virtualization.xml:20(para)
3615
msgid ""
3616
"The default virtualization technology supported in Ubuntu is "
3617
"<application>KVM</application>, a technology that takes advantage of "
3618
"virtualization extensions built into Intel and AMD hardware. For hardware "
3619
"without virtualization extensions <application>Xen</application> and "
3620
"<application>Qemu</application> are popular solutions."
3621
msgstr ""
3622
3623
#: serverguide/C/virtualization.xml:27(title)
3624
msgid "libvirt"
3625
msgstr ""
3626
3627
#: serverguide/C/virtualization.xml:28(para)
3628
msgid ""
3629
"The <application>libvirt</application> library is used to interface with "
3630
"different virtualization technologies. Before getting started with "
3631
"<application>libvirt</application> it is best to make sure your hardware "
3632
"supports the necessary virtualization extensions for "
3633
"<application>KVM</application>. Enter the following from a terminal prompt:"
3634
msgstr ""
3635
3636
#: serverguide/C/virtualization.xml:35(command)
3637
msgid "kvm-ok"
3638
msgstr ""
3639
3640
#: serverguide/C/virtualization.xml:37(para)
3641
msgid ""
3642
"A message will be printed informing you if your CPU "
3643
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3644
"virtualization."
3645
msgstr ""
3646
3647
#: serverguide/C/virtualization.xml:41(para)
3648
msgid ""
3649
"On most computer whose processor supports virtualization, it is necessary to "
3650
"activate an option in the BIOS to enable it."
3651
msgstr ""
3652
3653
#: serverguide/C/virtualization.xml:47(title)
3654
msgid "Virtual Networking"
3655
msgstr ""
3656
3657
#: serverguide/C/virtualization.xml:49(para)
3658
msgid ""
3659
"There are a few different ways to allow a virtual machine access to the "
3660
"external network. The default virtual network configuration is "
3661
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3662
"traffic is NATed through the host interface to the outside network."
3663
msgstr ""
3664
3665
#: serverguide/C/virtualization.xml:54(para)
3666
msgid ""
3667
"To enable external hosts to directly access services on virtual machines a "
3668
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3669
"interfaces to connect to the outside network through the physical interface, "
3670
"making them appear as normal hosts to the rest of the network. For "
3671
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3672
msgstr ""
3673
3674
#: serverguide/C/virtualization.xml:63(para)
3675
msgid "To install the necessary packages, from a terminal prompt enter:"
3676
msgstr ""
3677
3678
#: serverguide/C/virtualization.xml:67(command)
3679
msgid "sudo apt-get install kvm libvirt-bin"
3680
msgstr ""
3681
3682
#: serverguide/C/virtualization.xml:69(para)
3683
msgid ""
3684
"After installing <application>libvirt-bin</application>, the user used to "
3685
"manage virtual machines will need to be added to the "
3686
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3687
"the advanced networking options."
3688
msgstr ""
3689
3690
#: serverguide/C/virtualization.xml:73(para)
3691
msgid "In a terminal enter:"
3692
msgstr ""
3693
3694
#: serverguide/C/virtualization.xml:77(command)
3695
msgid "sudo adduser $USER libvirtd"
3696
msgstr ""
3697
3698
#: serverguide/C/virtualization.xml:80(para)
3699
msgid ""
3700
"If the user chosen is the current user, you will need to log out and back in "
3701
"for the new group membership to take effect."
3702
msgstr ""
3703
3704
#: serverguide/C/virtualization.xml:84(para)
3705
msgid ""
3706
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3707
"Installing a virtual machine follows the same process as installing the "
3708
"operating system directly on the hardware. You either need a way to automate "
3709
"the installation, or a keyboard and monitor will need to be attached to the "
3710
"physical machine."
3711
msgstr ""
3712
3713
#: serverguide/C/virtualization.xml:89(para)
3714
msgid ""
3715
"In the case of virtual machines a Graphical User Interface (GUI) is "
3716
"analogous to using a physical keyboard and mouse. Instead of installing a "
3717
"GUI the <application>virt-viewer</application> application can be used to "
3718
"connect to a virtual machine's console using <application>VNC</application>. "
3719
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3720
msgstr ""
3721
3722
#: serverguide/C/virtualization.xml:94(para)
3723
msgid ""
3724
"There are several ways to automate the Ubuntu installation process, for "
3725
"example using preseeds, kickstart, etc. Refer to the <ulink "
3726
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3727
"Installation Guide</ulink> for details."
3728
msgstr ""
3729
3730
#: serverguide/C/virtualization.xml:98(para)
3731
msgid ""
3732
"Yet another way to install an Ubuntu virtual machine is to use "
3733
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
3734
"builder</application> allows you to setup advanced partitions, execute "
3735
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
3736
"vmbuilder\"/>"
3737
msgstr ""
3738
3739
#: serverguide/C/virtualization.xml:104(title)
3740
msgid "virt-install"
3741
msgstr ""
3742
3743
#: serverguide/C/virtualization.xml:105(para)
3744
msgid ""
3745
"<application>virt-install</application> is part of the <application>python-"
3746
"virtinst</application> package. To install it, from a terminal prompt enter:"
3747
msgstr ""
3748
3749
#: serverguide/C/virtualization.xml:109(command)
3750
msgid "sudo apt-get install python-virtinst"
3751
msgstr ""
3752
3753
#: serverguide/C/virtualization.xml:111(para)
3754
msgid ""
3755
"There are several options available when using <application>virt-"
3756
"install</application>. For example:"
3757
msgstr ""
3758
3759
#: serverguide/C/virtualization.xml:115(command)
3760
msgid ""
3761
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
3762
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
3763
msgstr ""
3764
3765
#: serverguide/C/virtualization.xml:122(para)
3766
msgid ""
3767
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
3768
"be <emphasis>web_devel</emphasis> in this example."
3769
msgstr ""
3770
3771
#: serverguide/C/virtualization.xml:127(para)
3772
msgid ""
3773
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
3774
"machine will use."
3775
msgstr ""
3776
3777
#: serverguide/C/virtualization.xml:132(para)
3778
msgid ""
3779
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
3780
"disk which can be a file, partition, or logical volume. In this example a "
3781
"file named <filename>web_devel.img</filename>."
3782
msgstr ""
3783
3784
#: serverguide/C/virtualization.xml:138(para)
3785
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
3786
msgstr ""
3787
3788
#: serverguide/C/virtualization.xml:143(para)
3789
msgid ""
3790
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
3791
"file can be either an ISO file or the path to the host's CDROM device."
3792
msgstr ""
3793
3794
#: serverguide/C/virtualization.xml:149(para)
3795
msgid ""
3796
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
3797
"technologies."
3798
msgstr ""
3799
3800
#: serverguide/C/virtualization.xml:154(para)
3801
msgid ""
3802
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
3803
msgstr ""
3804
3805
#: serverguide/C/virtualization.xml:159(para)
3806
msgid ""
3807
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
3808
"virtual machine's console."
3809
msgstr ""
3810
3811
#: serverguide/C/virtualization.xml:164(para)
3812
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
3813
msgstr ""
3814
3815
#: serverguide/C/virtualization.xml:169(para)
3816
msgid ""
3817
"After launching <application>virt-install</application> you can connect to "
3818
"the virtual machine's console either locally using a GUI or with the "
3819
"<application>virt-viewer</application> utility."
3820
msgstr ""
3821
3822
#: serverguide/C/virtualization.xml:175(title)
3823
msgid "virt-clone"
3824
msgstr ""
3825
3826
#: serverguide/C/virtualization.xml:176(para)
3827
msgid ""
3828
"The <application>virt-clone</application> application can be used to copy "
3829
"one virtual machine to another. For example:"
3830
msgstr ""
3831
3832
#: serverguide/C/virtualization.xml:180(command)
3833
msgid ""
3834
"sudo virt-clone -o web_devel -n database_devel -f "
3835
"/path/to/database_devel.img --connect=qemu:///system"
3836
msgstr ""
3837
3838
#: serverguide/C/virtualization.xml:184(para)
3839
msgid "<emphasis>-o:</emphasis> original virtual machine."
3840
msgstr ""
3841
3842
#: serverguide/C/virtualization.xml:189(para)
3843
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
3844
msgstr ""
3845
3846
#: serverguide/C/virtualization.xml:194(para)
3847
msgid ""
3848
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
3849
"be used by the new virtual machine."
3850
msgstr ""
3851
3852
#: serverguide/C/virtualization.xml:199(para)
3853
msgid ""
3854
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
3855
msgstr ""
3856
3857
#: serverguide/C/virtualization.xml:204(para)
3858
msgid ""
3859
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
3860
"help troubleshoot problems with <application>virt-clone</application>."
3861
msgstr ""
3862
3863
#: serverguide/C/virtualization.xml:209(para)
3864
msgid ""
3865
"Replace <emphasis>web_devel</emphasis> and "
3866
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
3867
msgstr ""
3868
3869
#: serverguide/C/virtualization.xml:215(title)
3870
msgid "Virtual Machine Management"
3871
msgstr ""
3872
3873
#: serverguide/C/virtualization.xml:217(title)
3874
msgid "virsh"
3875
msgstr ""
3876
3877
#: serverguide/C/virtualization.xml:218(para)
3878
msgid ""
3879
"There are several utilities available to manage virtual machines and "
3880
"<application>libvirt</application>. The <application>virsh</application> "
3881
"utility can be used from the command line. Some examples:"
3882
msgstr ""
3883
3884
#: serverguide/C/virtualization.xml:224(para)
3885
msgid "To list running virtual machines:"
3886
msgstr ""
3887
3888
#: serverguide/C/virtualization.xml:228(command)
3889
msgid "virsh -c qemu:///system list"
3890
msgstr ""
3891
3892
#: serverguide/C/virtualization.xml:232(para)
3893
msgid "To start a virtual machine:"
3894
msgstr ""
3895
3896
#: serverguide/C/virtualization.xml:236(command)
3897
msgid "virsh -c qemu:///system start web_devel"
3898
msgstr ""
3899
3900
#: serverguide/C/virtualization.xml:240(para)
3901
msgid "Similarly, to start a virtual machine at boot:"
3902
msgstr ""
3903
3904
#: serverguide/C/virtualization.xml:244(command)
3905
msgid "virsh -c qemu:///system autostart web_devel"
3906
msgstr ""
3907
3908
#: serverguide/C/virtualization.xml:248(para)
3909
msgid "Reboot a virtual machine with:"
3910
msgstr ""
3911
3912
#: serverguide/C/virtualization.xml:252(command)
3913
msgid "virsh -c qemu:///system reboot web_devel"
3914
msgstr ""
3915
3916
#: serverguide/C/virtualization.xml:256(para)
3917
msgid ""
3918
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
3919
"order to be restored later. The following will save the virtual machine "
3920
"state into a file named according to the date:"
3921
msgstr ""
3922
3923
#: serverguide/C/virtualization.xml:261(command)
3924
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
3925
msgstr ""
3926
3927
#: serverguide/C/virtualization.xml:263(para)
3928
msgid "Once saved the virtual machine will no longer be running."
3929
msgstr ""
3930
3931
#: serverguide/C/virtualization.xml:268(para)
3932
msgid "A saved virtual machine can be restored using:"
3933
msgstr ""
3934
3935
#: serverguide/C/virtualization.xml:272(command)
3936
msgid "virsh -c qemu:///system restore web_devel-022708.state"
3937
msgstr ""
3938
3939
#: serverguide/C/virtualization.xml:276(para)
3940
msgid "To shutdown a virtual machine do:"
3941
msgstr ""
3942
3943
#: serverguide/C/virtualization.xml:280(command)
3944
msgid "virsh -c qemu:///system shutdown web_devel"
3945
msgstr ""
3946
3947
#: serverguide/C/virtualization.xml:284(para)
3948
msgid "A CDROM device can be mounted in a virtual machine by entering:"
3949
msgstr ""
3950
3951
#: serverguide/C/virtualization.xml:288(command)
3952
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
3953
msgstr ""
3954
3955
#: serverguide/C/virtualization.xml:293(para)
3956
msgid ""
3957
"In the above examples replace <emphasis>web_devel</emphasis> with the "
3958
"appropriate virtual machine name, and <filename>web_devel-"
3959
"022708.state</filename> with a descriptive file name."
3960
msgstr ""
3961
3962
#: serverguide/C/virtualization.xml:300(title)
3963
msgid "Virtual Machine Manager"
3964
msgstr ""
3965
3966
#: serverguide/C/virtualization.xml:301(para)
3967
msgid ""
3968
"The <application>virt-manager</application> package contains a graphical "
3969
"utility to manage local and remote virtual machines. To install virt-manager "
3970
"enter:"
3971
msgstr ""
3972
3973
#: serverguide/C/virtualization.xml:306(command)
3974
msgid "sudo apt-get install virt-manager"
3975
msgstr ""
3976
3977
#: serverguide/C/virtualization.xml:308(para)
3978
msgid ""
3979
"Since <application>virt-manager</application> requires a Graphical User "
3980
"Interface (GUI) environment it is recommended to be installed on a "
3981
"workstation or test machine instead of a production server. To connect to "
3982
"the local <application>libvirt</application> service enter:"
3983
msgstr ""
3984
3985
#: serverguide/C/virtualization.xml:314(command)
3986
msgid "virt-manager -c qemu:///system"
3987
msgstr ""
3988
3989
#: serverguide/C/virtualization.xml:316(para)
3990
msgid ""
3991
"You can connect to the <application>libvirt</application> service running on "
3992
"another host by entering the following in a terminal prompt:"
3993
msgstr ""
3994
3995
#: serverguide/C/virtualization.xml:320(command)
3996
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
3997
msgstr ""
3998
3999
#: serverguide/C/virtualization.xml:323(para)
4000
msgid ""
4001
"The above example assumes that <application>SSH</application> connectivity "
4002
"between the management system and virtnode1.mydomain.com has already been "
4003
"configured, and uses SSH keys for authentication. SSH "
4004
"<emphasis>keys</emphasis> are needed because "
4005
"<application>libvirt</application> sends the password prompt to another "
4006
"process. For details on configuring <application>SSH</application> see <xref "
4007
"linkend=\"openssh-server\"/>"
4008
msgstr ""
4009
4010
#: serverguide/C/virtualization.xml:333(title)
4011
msgid "Virtual Machine Viewer"
4012
msgstr ""
4013
4014
#: serverguide/C/virtualization.xml:334(para)
4015
msgid ""
4016
"The <application>virt-viewer</application> application allows you to connect "
4017
"to a virtual machine's console. <application>virt-viewer</application> does "
4018
"require a Graphical User Interface (GUI) to interface with the virtual "
4019
"machine."
4020
msgstr ""
4021
4022
#: serverguide/C/virtualization.xml:338(para)
4023
msgid ""
4024
"To install <application>virt-viewer</application> from a terminal enter:"
4025
msgstr ""
4026
4027
#: serverguide/C/virtualization.xml:342(command)
4028
msgid "sudo apt-get install virt-viewer"
4029
msgstr ""
4030
4031
#: serverguide/C/virtualization.xml:344(para)
4032
msgid ""
4033
"Once a virtual machine is installed and running you can connect to the "
4034
"virtual machine's console by using:"
4035
msgstr ""
4036
4037
#: serverguide/C/virtualization.xml:348(command)
4038
msgid "virt-viewer -c qemu:///system web_devel"
4039
msgstr ""
4040
4041
#: serverguide/C/virtualization.xml:350(para)
4042
msgid ""
4043
"Similar to <application>virt-manager</application>, <application>virt-"
4044
"viewer</application> can connect to a remote host using "
4045
"<emphasis>SSH</emphasis> with key authentication, as well:"
4046
msgstr ""
4047
4048
#: serverguide/C/virtualization.xml:355(command)
4049
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4050
msgstr ""
4051
4052
#: serverguide/C/virtualization.xml:357(para)
4053
msgid ""
4054
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4055
"appropriate virtual machine name."
4056
msgstr ""
4057
4058
#: serverguide/C/virtualization.xml:360(para)
4059
msgid ""
4060
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4061
"can also setup <application>SSH</application> access to the virtual machine. "
4062
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4063
"more details."
4064
msgstr ""
4065
4066
#: serverguide/C/virtualization.xml:369(para)
4067
msgid ""
4068
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4069
"for more details."
4070
msgstr ""
4071
4072
#: serverguide/C/virtualization.xml:374(para)
4073
msgid ""
4074
"For more information on <application>libvirt</application> see the <ulink "
4075
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4076
msgstr ""
4077
4078
#: serverguide/C/virtualization.xml:379(para)
4079
msgid ""
4080
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4081
"Manager</ulink> site has more information on <application>virt-"
4082
"manager</application> development."
4083
msgstr ""
4084
4085
#: serverguide/C/virtualization.xml:385(para)
4086
msgid ""
4087
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4088
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4089
"technology in Ubuntu."
4090
msgstr ""
4091
4092
#: serverguide/C/virtualization.xml:391(para)
4093
msgid ""
4094
"Another good resource is the <ulink "
4095
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4096
msgstr ""
4097
4098
#: serverguide/C/virtualization.xml:399(title)
4099
msgid "JeOS and vmbuilder"
4100
msgstr ""
4101
4102
#: serverguide/C/virtualization.xml:405(title)
4103
msgid "What is JeOS"
4104
msgstr ""
4105
4106
#: serverguide/C/virtualization.xml:407(para)
4107
msgid ""
4108
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4109
"variant of the Ubuntu Server operating system, configured specifically for "
4110
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4111
"only as an option either:"
4112
msgstr ""
4113
4114
#: serverguide/C/virtualization.xml:414(para)
4115
msgid ""
4116
"While installing from the Server Edition ISO (pressing "
4117
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4118
"installation\", which is the package selection equivalent to JeOS)."
4119
msgstr ""
4120
4121
#: serverguide/C/virtualization.xml:420(para)
4122
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4123
msgstr ""
4124
4125
#: serverguide/C/virtualization.xml:426(para)
4126
msgid ""
4127
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4128
"kernel that only contains the base elements needed to run within a "
4129
"virtualized environment."
4130
msgstr ""
4131
4132
#: serverguide/C/virtualization.xml:431(para)
4133
msgid ""
4134
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4135
"in the latest virtualization products from VMware. This combination of "
4136
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4137
"delivers a highly efficient use of server resources in large virtual "
4138
"deployments."
4139
msgstr ""
4140
4141
#: serverguide/C/virtualization.xml:437(para)
4142
msgid ""
4143
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4144
"can configure their supporting OS exactly as they require. They have the "
4145
"peace of mind that updates, whether for security or enhancement reasons, "
4146
"will be limited to the bare minimum of what is required in their specific "
4147
"environment. In turn, users deploying virtual appliances built on top of "
4148
"JeOS will have to go through fewer updates and therefore less maintenance "
4149
"than they would have had to with a standard full installation of a server."
4150
msgstr ""
4151
4152
#: serverguide/C/virtualization.xml:446(title)
4153
msgid "What is vmbuilder"
4154
msgstr ""
4155
4156
#: serverguide/C/virtualization.xml:448(para)
4157
msgid ""
4158
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4159
"will fetch the various package and build a virtual machine tailored for your "
4160
"needs in about a minute. vmbuilder is a script that automates the process of "
4161
"creating a ready to use Linux based VM. The currently supported hypervisors "
4162
"are KVM and Xen."
4163
msgstr ""
4164
4165
#: serverguide/C/virtualization.xml:454(para)
4166
msgid ""
4167
"You can pass command line options to add extra packages, remove packages, "
4168
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4169
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4170
"a local mirror, you can bootstrap a VM in less than a minute."
4171
msgstr ""
4172
4173
#: serverguide/C/virtualization.xml:460(para)
4174
msgid ""
4175
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4176
"vm-builder</application> started with little emphasis as a hack to help "
4177
"developers test their new code in a virtual machine without having to "
4178
"restart from scratch each time. As a few Ubuntu administrators started to "
4179
"notice this script, a few of them went on improving it and adapting it for "
4180
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4181
"virtualization specialist, not the golf player) decided to rewrite it from "
4182
"scratch for Intrepid as a python script with a few new design goals:"
4183
msgstr ""
4184
4185
#: serverguide/C/virtualization.xml:470(para)
4186
msgid "Develop it so that it can be reused by other distributions."
4187
msgstr ""
4188
4189
#: serverguide/C/virtualization.xml:475(para)
4190
msgid ""
4191
"Use a plugin mechanisms for all virtualization interactions so that others "
4192
"can easily add logic for other virtualization environments."
4193
msgstr ""
4194
4195
#: serverguide/C/virtualization.xml:480(para)
4196
msgid ""
4197
"Provide an easy to maintain web interface as an option to the command line "
4198
"interface."
4199
msgstr ""
4200
4201
#: serverguide/C/virtualization.xml:486(para)
4202
msgid "But the general principles and commands remain the same."
4203
msgstr ""
4204
4205
#: serverguide/C/virtualization.xml:493(title)
4206
msgid "Initial Setup"
4207
msgstr ""
4208
4209
#: serverguide/C/virtualization.xml:495(para)
4210
msgid ""
4211
"It is assumed that you have installed and configured "
4212
"<application>libvirt</application> and <application>KVM</application> "
4213
"locally on the machine you are using. For details on how to perform this, "
4214
"please refer to:"
4215
msgstr ""
4216
4217
#: serverguide/C/virtualization.xml:507(para)
4218
msgid ""
4219
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4220
"page."
4221
msgstr ""
4222
4223
#: serverguide/C/virtualization.xml:513(para)
4224
msgid ""
4225
"We also assume that you know how to use a text based text editor such as "
4226
"nano or vi. If you have not used any of them before, you can get an overview "
4227
"of the various text editors available by reading the <ulink "
4228
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4229
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4230
"principle should remain on other virtualization technologies."
4231
msgstr ""
4232
4233
#: serverguide/C/virtualization.xml:521(title)
4234
msgid "Install vmbuilder"
4235
msgstr ""
4236
4237
#: serverguide/C/virtualization.xml:523(para)
4238
msgid ""
4239
"The name of the package that we need to install is <application>python-vm-"
4240
"builder</application>. In a terminal prompt enter:"
4241
msgstr ""
4242
4243
#: serverguide/C/virtualization.xml:528(command)
4244
msgid "sudo apt-get install python-vm-builder"
4245
msgstr ""
4246
4247
#: serverguide/C/virtualization.xml:532(para)
4248
msgid ""
4249
"If you are running Hardy, you can still perform most of this using the older "
4250
"version of the package named <application>ubuntu-vm-builder</application>, "
4251
"there are only a few changes to the syntax of the tool."
4252
msgstr ""
4253
4254
#: serverguide/C/virtualization.xml:541(title)
4255
msgid "Defining Your Virtual Machine"
4256
msgstr ""
4257
4258
#: serverguide/C/virtualization.xml:543(para)
4259
msgid ""
4260
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4261
"are a few thing to consider:"
4262
msgstr ""
4263
4264
#: serverguide/C/virtualization.xml:549(para)
4265
msgid ""
4266
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4267
"will know how to extend disk size to fit their need, so either plan for a "
4268
"large virtual disk to allow for your appliance to grow, or explain fairly "
4269
"well in your documentation how to allocate more space. It might actually be "
4270
"a good idea to store data on some separate external storage."
4271
msgstr ""
4272
4273
#: serverguide/C/virtualization.xml:556(para)
4274
msgid ""
4275
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4276
"whatever you think is a safe minimum for your appliance."
4277
msgstr ""
4278
4279
#: serverguide/C/virtualization.xml:562(para)
4280
msgid ""
4281
"The <application>vmbuilder</application> command has 2 main parameters: the "
4282
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4283
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4284
"and can be found using the following command:"
4285
msgstr ""
4286
4287
#: serverguide/C/virtualization.xml:568(command)
4288
msgid "vmbuilder --help"
4289
msgstr ""
4290
4291
#: serverguide/C/virtualization.xml:572(title)
4292
msgid "Base Parameters"
4293
msgstr ""
4294
4295
#: serverguide/C/virtualization.xml:574(para)
4296
msgid ""
4297
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4298
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4299
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4300
msgstr ""
4301
4302
#: serverguide/C/virtualization.xml:580(command)
4303
msgid ""
4304
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4305
"libvirt qemu:///system"
4306
msgstr ""
4307
4308
#: serverguide/C/virtualization.xml:583(para)
4309
msgid ""
4310
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4311
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4312
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4313
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4314
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4315
"libvirt</emphasis> tells to inform the local virtualization environment to "
4316
"add the resulting VM to the list of available machines."
4317
msgstr ""
4318
4319
#: serverguide/C/virtualization.xml:591(para)
4320
msgid "Notes:"
4321
msgstr ""
4322
4323
#: serverguide/C/virtualization.xml:597(para)
4324
msgid ""
4325
"Because of the nature of operations performed by vmbuilder, it needs to have "
4326
"root privilege, hence the use of sudo."
4327
msgstr ""
4328
4329
#: serverguide/C/virtualization.xml:602(para)
4330
msgid ""
4331
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4332
"a 64 bit machine (--arch amd64)."
4333
msgstr ""
4334
4335
#: serverguide/C/virtualization.xml:607(para)
4336
msgid ""
4337
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4338
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4339
"use <emphasis>--flavour</emphasis> server instead."
4340
msgstr ""
4341
4342
#: serverguide/C/virtualization.xml:615(title)
4343
msgid "JeOS Installation Parameters"
4344
msgstr ""
4345
4346
#: serverguide/C/virtualization.xml:618(title)
4347
msgid "JeOS Networking"
4348
msgstr ""
4349
4350
#: serverguide/C/virtualization.xml:621(title)
4351
msgid "Assigning a fixed IP address"
4352
msgstr ""
4353
4354
#: serverguide/C/virtualization.xml:623(para)
4355
msgid ""
4356
"As a virtual appliance that may be deployed on various very different "
4357
"networks, it is very difficult to know what the actual network will look "
4358
"like. In order to simplify configuration, it is a good idea to take an "
4359
"approach similar to what network hardware vendors usually do, namely "
4360
"assigning an initial fixed IP address to the appliance in a private class "
4361
"network that you will provide in your documentation. An address in the range "
4362
"192.168.0.0/255 is usually a good choice."
4363
msgstr ""
4364
4365
#: serverguide/C/virtualization.xml:630(para)
4366
msgid "To do this we'll use the following parameters:"
4367
msgstr ""
4368
4369
#: serverguide/C/virtualization.xml:636(para)
4370
msgid ""
4371
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4372
"dhcp if not specified)"
4373
msgstr ""
4374
4375
#: serverguide/C/virtualization.xml:641(para)
4376
msgid ""
4377
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4378
"255.255.255.0)"
4379
msgstr ""
4380
4381
#: serverguide/C/virtualization.xml:646(para)
4382
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4383
msgstr ""
4384
4385
#: serverguide/C/virtualization.xml:651(para)
4386
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4387
msgstr ""
4388
4389
#: serverguide/C/virtualization.xml:656(para)
4390
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4391
msgstr ""
4392
4393
#: serverguide/C/virtualization.xml:661(para)
4394
msgid ""
4395
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4396
msgstr ""
4397
4398
#: serverguide/C/virtualization.xml:667(para)
4399
msgid ""
4400
"We assume for now that default values are good enough, so the resulting "
4401
"invocation becomes:"
4402
msgstr ""
4403
4404
#: serverguide/C/virtualization.xml:672(command)
4405
msgid ""
4406
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4407
"libvirt qemu:///system --ip 192.168.0.100"
4408
msgstr ""
4409
4410
#: serverguide/C/virtualization.xml:677(title)
4411
msgid "Modifying the libvirt Template to use Bridging"
4412
msgstr ""
4413
4414
#: serverguide/C/virtualization.xml:679(para)
4415
msgid ""
4416
"Because our appliance will be likely to need to be accessed by remote hosts, "
4417
"we need to configure libvirt so that the appliance uses bridge networking. "
4418
"To do this we use vmbuilder template mechanism to modify the default one."
4419
msgstr ""
4420
4421
#: serverguide/C/virtualization.xml:684(para)
4422
msgid ""
4423
"In our working directory we create the template hierarchy and copy the "
4424
"default template:"
4425
msgstr ""
4426
4427
#: serverguide/C/virtualization.xml:689(command)
4428
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4429
msgstr ""
4430
4431
#: serverguide/C/virtualization.xml:690(command)
4432
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4433
msgstr ""
4434
4435
#: serverguide/C/virtualization.xml:693(para)
4436
msgid ""
4437
"We can then edit "
4438
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4439
"change:"
4440
msgstr ""
4441
4442
#: serverguide/C/virtualization.xml:697(programlisting)
4443
#, no-wrap
4444
msgid ""
4445
"\n"
4446
" <interface type='network'>\n"
4447
" <source network='default'/>\n"
4448
" </interface>\n"
4449
msgstr ""
4450
4451
#: serverguide/C/virtualization.xml:703(para)
4452
msgid "To:"
4453
msgstr ""
4454
4455
#: serverguide/C/virtualization.xml:707(programlisting)
4456
#, no-wrap
4457
msgid ""
4458
"\n"
4459
" <interface type='bridge'>\n"
4460
" <source bridge='br0'/>\n"
4461
" </interface>\n"
4462
msgstr ""
4463
4464
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4465
msgid "Partitioning"
4466
msgstr ""
4467
4468
#: serverguide/C/virtualization.xml:719(para)
4469
msgid ""
4470
"Partitioning of the virtual appliance will have to take into consideration "
4471
"what you are planning to do with is. Because most appliances want to have a "
4472
"separate storage for data, having a separate <filename>/var</filename> would "
4473
"make sense."
4474
msgstr ""
4475
4476
#: serverguide/C/virtualization.xml:724(para)
4477
msgid ""
4478
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4479
msgstr ""
4480
4481
#: serverguide/C/virtualization.xml:728(programlisting)
4482
#, no-wrap
4483
msgid ""
4484
"\n"
4485
"--part PATH\n"
4486
" Allows you to specify a partition table in a partition file, located at "
4487
"PATH. Each line of the partition file should specify\n"
4488
" (root first):\n"
4489
" mountpoint size\n"
4490
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4491
"disk starts on a\n"
4492
" line with ’---’. ie :\n"
4493
" root 1000\n"
4494
" /opt 1000\n"
4495
" swap 256\n"
4496
" ---\n"
4497
" /var 2000\n"
4498
" /log 1500\n"
4499
msgstr ""
4500
4501
#: serverguide/C/virtualization.xml:743(para)
4502
msgid ""
4503
"In our case we will define a text file name "
4504
"<filename>vmbuilder.partition</filename> which will contain the following:"
4505
msgstr ""
4506
4507
#: serverguide/C/virtualization.xml:747(programlisting)
4508
#, no-wrap
4509
msgid ""
4510
"\n"
4511
"root 8000\n"
4512
"swap 4000\n"
4513
"---\n"
4514
"/var 20000\n"
4515
msgstr ""
4516
4517
#: serverguide/C/virtualization.xml:755(para)
4518
msgid ""
4519
"Note that as we are using virtual disk images, the actual sizes that we put "
4520
"here are maximum sizes for these volumes."
4521
msgstr ""
4522
4523
#: serverguide/C/virtualization.xml:760(para)
4524
msgid "Our command line now looks like:"
4525
msgstr ""
4526
4527
#: serverguide/C/virtualization.xml:765(command)
4528
msgid ""
4529
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4530
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4531
msgstr ""
4532
4533
#: serverguide/C/virtualization.xml:770(para)
4534
msgid ""
4535
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4536
"next line."
4537
msgstr ""
4538
4539
#: serverguide/C/virtualization.xml:777(title)
4540
msgid "User and Password"
4541
msgstr ""
4542
4543
#: serverguide/C/virtualization.xml:779(para)
4544
msgid ""
4545
"Again setting up a virtual appliance, you will need to provide a default "
4546
"user and password that is generic so that you can include it in your "
4547
"documentation. We will see later on in this tutorial how we will provide "
4548
"some security by defining a script that will be run the first time a user "
4549
"actually logs in the appliance, that will, among other things, ask him to "
4550
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4551
"as my user name, and <emphasis>'default'</emphasis> as the password."
4552
msgstr ""
4553
4554
#: serverguide/C/virtualization.xml:787(para)
4555
msgid "To do this we use the following optional parameters:"
4556
msgstr ""
4557
4558
#: serverguide/C/virtualization.xml:793(para)
4559
msgid ""
4560
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4561
"Default: ubuntu."
4562
msgstr ""
4563
4564
#: serverguide/C/virtualization.xml:798(para)
4565
msgid ""
4566
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4567
"added. Default: Ubuntu."
4568
msgstr ""
4569
4570
#: serverguide/C/virtualization.xml:803(para)
4571
msgid ""
4572
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4573
"Default: ubuntu."
4574
msgstr ""
4575
4576
#: serverguide/C/virtualization.xml:809(para)
4577
msgid "Our resulting command line becomes:"
4578
msgstr ""
4579
4580
#: serverguide/C/virtualization.xml:814(command)
4581
msgid ""
4582
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4583
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4584
"user user --name user --pass default"
4585
msgstr ""
4586
4587
#: serverguide/C/virtualization.xml:822(title)
4588
msgid "Installing Required Packages"
4589
msgstr ""
4590
4591
#: serverguide/C/virtualization.xml:824(para)
4592
msgid ""
4593
"In this example we will be installing a package "
4594
"<application>(Limesurvey)</application> that accesses a "
4595
"<application>MySQL</application> database and has a web interface. We will "
4596
"therefore require our OS to provide us with:"
4597
msgstr ""
4598
4599
#: serverguide/C/virtualization.xml:831(para)
4600
msgid "Apache"
4601
msgstr ""
4602
4603
#: serverguide/C/virtualization.xml:832(para)
4604
msgid "PHP"
4605
msgstr ""
4606
4607
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4608
msgid "MySQL"
4609
msgstr ""
4610
4611
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4612
msgid "OpenSSH Server"
4613
msgstr ""
4614
4615
#: serverguide/C/virtualization.xml:835(para)
4616
msgid "Limesurvey (as an example application that we have packaged)"
4617
msgstr ""
4618
4619
#: serverguide/C/virtualization.xml:838(para)
4620
msgid ""
4621
"This is done using vmbuilder by specifying the --addpkg option multiple "
4622
"times:"
4623
msgstr ""
4624
4625
#: serverguide/C/virtualization.xml:842(programlisting)
4626
#, no-wrap
4627
msgid ""
4628
"\n"
4629
"--addpkg PKG\n"
4630
" Install PKG into the guest (can be specfied multiple times)\n"
4631
msgstr ""
4632
4633
#: serverguide/C/virtualization.xml:847(para)
4634
msgid ""
4635
"However, due to the way vmbuilder operates, packages that have to ask "
4636
"questions to the user during the post install phase are not supported and "
4637
"should instead be installed while interactivity can occur. This is the case "
4638
"of Limesurvey, which we will have to install later, once the user logs in."
4639
msgstr ""
4640
4641
#: serverguide/C/virtualization.xml:853(para)
4642
msgid ""
4643
"Other packages that ask simple debconf question, such as <application>mysql-"
4644
"server</application> asking to set a password, the package can be installed "
4645
"immediately, but we will have to reconfigure it the first time the user logs "
4646
"in."
4647
msgstr ""
4648
4649
#: serverguide/C/virtualization.xml:859(para)
4650
msgid ""
4651
"If some packages that we need to install are not in main, we need to enable "
4652
"the additional repositories using --comp and --ppa:"
4653
msgstr ""
4654
4655
#: serverguide/C/virtualization.xml:863(programlisting)
4656
#, no-wrap
4657
msgid ""
4658
"\n"
4659
"--components COMP1,COMP2,...,COMPN\n"
4660
" A comma separated list of distro components to include (e.g. "
4661
"main,universe). This defaults\n"
4662
" to \"main\"\n"
4663
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4664
msgstr ""
4665
4666
#: serverguide/C/virtualization.xml:870(para)
4667
msgid ""
4668
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4669
"PPA (personal package archive) address so that it is added to the VM "
4670
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4671
"to the command line:"
4672
msgstr ""
4673
4674
#: serverguide/C/virtualization.xml:876(command)
4675
msgid ""
4676
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4677
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4678
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4679
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4680
"server --ppa nijaba"
4681
msgstr ""
4682
4683
#: serverguide/C/virtualization.xml:883(title)
4684
msgid "OpenSSH"
4685
msgstr ""
4686
4687
#: serverguide/C/virtualization.xml:885(para)
4688
msgid ""
4689
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4690
"it will allow our admins to access the appliance remotely. However, pushing "
4691
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4692
"security risk as all these server will share the same secret key, making it "
4693
"very easy for hackers to target our appliance with all the tools they need "
4694
"to crack it open in a breeze. As for the user password, we will instead rely "
4695
"on a script that will install OpenSSH the first time a user logs in so that "
4696
"the key generated will be different for each appliance. For this we'll use a "
4697
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4698
"interaction."
4699
msgstr ""
4700
4701
#: serverguide/C/virtualization.xml:897(title)
4702
msgid "Speed Considerations"
4703
msgstr ""
4704
4705
#: serverguide/C/virtualization.xml:900(title)
4706
msgid "Package Caching"
4707
msgstr ""
4708
4709
#: serverguide/C/virtualization.xml:902(para)
4710
msgid ""
4711
"When vmbuilder creates builds your system, it has to go fetch each one of "
4712
"the packages that composes it over the network to one of the official "
4713
"repositories, which, depending on your internet connection speed and the "
4714
"load of the mirror, can have a big impact on the actual build time. In order "
4715
"to reduce this, it is recommended to either have a local repository (which "
4716
"can be created using <application>apt-mirror</application>) or using a "
4717
"caching proxy such as <application>apt-proxy</application>. The later option "
4718
"being much simpler to implement and requiring less disk space, it is the one "
4719
"we will pick in this tutorial. To install it, simply type:"
4720
msgstr ""
4721
4722
#: serverguide/C/virtualization.xml:912(command)
4723
msgid "sudo apt-get install apt-proxy"
4724
msgstr ""
4725
4726
#: serverguide/C/virtualization.xml:915(para)
4727
msgid ""
4728
"Once this is complete, your (empty) proxy is ready for use on "
4729
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
4730
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
4731
"option:"
4732
msgstr ""
4733
4734
#: serverguide/C/virtualization.xml:920(programlisting)
4735
#, no-wrap
4736
msgid ""
4737
"\n"
4738
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
4739
" is http://archive.ubuntu.com/ubuntu for official\n"
4740
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
4741
" otherwise\n"
4742
msgstr ""
4743
4744
#: serverguide/C/virtualization.xml:927(para)
4745
msgid "So we add to the command line:"
4746
msgstr ""
4747
4748
#: serverguide/C/virtualization.xml:932(command)
4749
msgid "--mirror http://mirroraddress:9999/ubuntu"
4750
msgstr ""
4751
4752
#: serverguide/C/virtualization.xml:936(para)
4753
msgid ""
4754
"The mirror address specified here will also be used in the "
4755
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
4756
"is useful to specify here an address that can be resolved by the guest or to "
4757
"plan on reseting this address later on, such as in a <emphasis>--"
4758
"firstboot</emphasis> script."
4759
msgstr ""
4760
4761
#: serverguide/C/virtualization.xml:945(title)
4762
msgid "Install a Local Mirror"
4763
msgstr ""
4764
4765
#: serverguide/C/virtualization.xml:947(para)
4766
msgid ""
4767
"If we are in a larger environment, it may make sense to setup a local mirror "
4768
"of the Ubuntu repositories. The package apt-mirror provides you with a "
4769
"script that will handle the mirroring for you. You should plan on having "
4770
"about 20 gigabyte of free space per supported release and architecture."
4771
msgstr ""
4772
4773
#: serverguide/C/virtualization.xml:953(para)
4774
msgid ""
4775
"By default, <application>apt-mirror</application> uses the configuration "
4776
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
4777
"replicate only the architecture of the local machine. If you would like to "
4778
"support other architectures on your mirror, simply duplicate the lines "
4779
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
4780
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
4781
"archives as well, you will have:"
4782
msgstr ""
4783
4784
#: serverguide/C/virtualization.xml:960(programlisting)
4785
#, no-wrap
4786
msgid ""
4787
"\n"
4788
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4789
"multiverse \n"
4790
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4791
"multiverse\n"
4792
"\n"
4793
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
4794
"multiverse \n"
4795
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
4796
"universe multiverse \n"
4797
"\n"
4798
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
4799
"universe multiverse \n"
4800
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
4801
"universe multiverse \n"
4802
"\n"
4803
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
4804
"universe multiverse \n"
4805
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
4806
"universe multiverse \n"
4807
"\n"
4808
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4809
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4810
"installer \n"
4811
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4812
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4813
"installer \n"
4814
msgstr ""
4815
4816
#: serverguide/C/virtualization.xml:977(para)
4817
msgid ""
4818
"Notice that the source packages are not mirrored as they are seldom used "
4819
"compared to the binaries and they do take a lot more space, but they can be "
4820
"easily added to the list."
4821
msgstr ""
4822
4823
#: serverguide/C/virtualization.xml:982(para)
4824
msgid ""
4825
"Once the mirror has finished replicating (and this can be quite long), you "
4826
"need to configure Apache so that your mirror files (in "
4827
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
4828
"default), are published by your Apache server. For more information on "
4829
"Apache see <xref linkend=\"httpd\"/>."
4830
msgstr ""
4831
4832
#: serverguide/C/virtualization.xml:991(title)
4833
msgid "Installing in a RAM Disk"
4834
msgstr ""
4835
4836
#: serverguide/C/virtualization.xml:993(para)
4837
msgid ""
4838
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
4839
"faster than writing to disk. If you have some free memory, letting vmbuilder "
4840
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
4841
"-tmpfs</emphasis> will help you do just that:"
4842
msgstr ""
4843
4844
#: serverguide/C/virtualization.xml:999(programlisting)
4845
#, no-wrap
4846
msgid ""
4847
"\n"
4848
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
4849
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
4850
msgstr ""
4851
4852
#: serverguide/C/virtualization.xml:1004(para)
4853
msgid ""
4854
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
4855
"have 1G of free ram."
4856
msgstr ""
4857
4858
#: serverguide/C/virtualization.xml:1011(title)
4859
msgid "Package the Application"
4860
msgstr ""
4861
4862
#: serverguide/C/virtualization.xml:1013(para)
4863
msgid "Two option are available to us:"
4864
msgstr ""
4865
4866
#: serverguide/C/virtualization.xml:1019(para)
4867
msgid ""
4868
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
4869
"package. Since this is outside of the scope of this tutorial, we will not "
4870
"perform this here and invite the reader to read the documentation on how to "
4871
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
4872
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
4873
"repository for your package so that updates can be conveniently pulled from "
4874
"it. See the <ulink url=\"http://www.debian-"
4875
"administration.org/articles/286\">Debian Administration</ulink> article for "
4876
"a tutorial on this."
4877
msgstr ""
4878
4879
#: serverguide/C/virtualization.xml:1028(para)
4880
msgid ""
4881
"Manually install the application under <filename>/opt</filename> as "
4882
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
4883
"guidelines</ulink>."
4884
msgstr ""
4885
4886
#: serverguide/C/virtualization.xml:1035(para)
4887
msgid ""
4888
"In our case we'll use <application>Limesurvey</application> as example web "
4889
"application for which we wish to provide a virtual appliance. As noted "
4890
"before, we've made a version of the package available in a PPA (Personal "
4891
"Package Archive)."
4892
msgstr ""
4893
4894
#: serverguide/C/virtualization.xml:1042(title)
4895
msgid "Finishing Install"
4896
msgstr ""
4897
4898
#: serverguide/C/virtualization.xml:1045(title)
4899
msgid "First Boot"
4900
msgstr ""
4901
4902
#: serverguide/C/virtualization.xml:1047(para)
4903
msgid ""
4904
"As we mentioned earlier, the first time the machine boots we'll need to "
4905
"install <application>openssh-server</application> so that the key generated "
4906
"for it is unique for each machine. To do this, we'll write a script called "
4907
"<filename>boot.sh</filename> as follows:"
4908
msgstr ""
4909
4910
#: serverguide/C/virtualization.xml:1053(programlisting)
4911
#, no-wrap
4912
msgid ""
4913
"\n"
4914
"# This script will run the first time the virtual machine boots\n"
4915
"# It is ran as root.\n"
4916
"\n"
4917
"apt-get update\n"
4918
"apt-get install -qqy --force-yes openssh-server\n"
4919
msgstr ""
4920
4921
#: serverguide/C/virtualization.xml:1061(para)
4922
msgid ""
4923
"And we add the <command>--firstboot boot.sh</command> option to our command "
4924
"line."
4925
msgstr ""
4926
4927
#: serverguide/C/virtualization.xml:1067(title)
4928
msgid "First Login"
4929
msgstr ""
4930
4931
#: serverguide/C/virtualization.xml:1069(para)
4932
msgid ""
4933
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
4934
"set them up the first time a user logs in using a script named login.sh. "
4935
"We'll also use this script to let the user specify:"
4936
msgstr ""
4937
4938
#: serverguide/C/virtualization.xml:1075(para)
4939
msgid "His own password"
4940
msgstr ""
4941
4942
#: serverguide/C/virtualization.xml:1076(para)
4943
msgid "Define the keyboard and other locale info he wants to use"
4944
msgstr ""
4945
4946
#: serverguide/C/virtualization.xml:1079(para)
4947
msgid "So we'll define <filename>login.sh</filename> as follows:"
4948
msgstr ""
4949
4950
#: serverguide/C/virtualization.xml:1083(programlisting)
4951
#, no-wrap
4952
msgid ""
4953
"\n"
4954
"# This script is ran the first time a user logs in\n"
4955
"\n"
4956
"echo \"Your appliance is about to be finished to be set up.\"\n"
4957
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
4958
"echo \"starting by changing your user password.\"\n"
4959
"\n"
4960
"passwd\n"
4961
"\n"
4962
"#give the opportunity to change the keyboard\n"
4963
"sudo dpkg-reconfigure console-setup\n"
4964
"\n"
4965
"#configure the mysql server root password\n"
4966
"sudo dpkg-reconfigure mysql-server-5.0\n"
4967
"\n"
4968
"#install limesurvey\n"
4969
"sudo apt-get install -qqy --force-yes limesurvey\n"
4970
"\n"
4971
"echo \"Your appliance is now configured. To use it point your\"\n"
4972
"echo \"browser to http://serverip/limesurvey/admin\"\n"
4973
msgstr ""
4974
4975
#: serverguide/C/virtualization.xml:1105(para)
4976
msgid ""
4977
"And we add the <command>--firstlogin login.sh</command> option to our "
4978
"command line."
4979
msgstr ""
4980
4981
#: serverguide/C/virtualization.xml:1112(title)
4982
msgid "Useful Additions"
4983
msgstr ""
4984
4985
#: serverguide/C/virtualization.xml:1115(title)
4986
msgid "Configuring Automatic Updates"
4987
msgstr ""
4988
4989
#: serverguide/C/virtualization.xml:1117(para)
4990
msgid ""
4991
"To have your system be configured to update itself on a regular basis, we "
4992
"will just install <application>unattended-upgrades</application>, so we add "
4993
"the following option to our command line:"
4994
msgstr ""
4995
4996
#: serverguide/C/virtualization.xml:1123(command)
4997
msgid "--addpkg unattended-upgrades"
4998
msgstr ""
4999
5000
#: serverguide/C/virtualization.xml:1126(para)
5001
msgid ""
5002
"As we have put our application package in a PPA, the process will update not "
5003
"only the system, but also the application each time we update the version in "
5004
"the PPA."
5005
msgstr ""
5006
5007
#: serverguide/C/virtualization.xml:1133(title)
5008
msgid "ACPI Event Handling"
5009
msgstr ""
5010
5011
#: serverguide/C/virtualization.xml:1135(para)
5012
msgid ""
5013
"For your virtual machine to be able to handle restart and shutdown events it "
5014
"is being sent, it is a good idea to install the acpid package as well. To do "
5015
"this we just add the following option:"
5016
msgstr ""
5017
5018
#: serverguide/C/virtualization.xml:1141(command)
5019
msgid "--addpkg acpid"
5020
msgstr ""
5021
5022
#: serverguide/C/virtualization.xml:1147(title)
5023
msgid "Final Command"
5024
msgstr ""
5025
5026
#: serverguide/C/virtualization.xml:1149(para)
5027
msgid "Here is the command with all the options discussed above:"
5028
msgstr ""
5029
5030
#: serverguide/C/virtualization.xml:1154(command)
5031
msgid ""
5032
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5033
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5034
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5035
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5036
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5037
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5038
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5039
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5040
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5041
"firstlogin login.sh es"
5042
msgstr ""
5043
5044
#: serverguide/C/virtualization.xml:1169(para)
5045
msgid ""
5046
"If you are interested in learning more, have questions or suggestions, "
5047
"please contact the Ubuntu Server Team at:"
5048
msgstr ""
5049
5050
#: serverguide/C/virtualization.xml:1174(para)
5051
msgid "IRC: #ubuntu-server on freenode"
5052
msgstr ""
5053
5054
#: serverguide/C/virtualization.xml:1179(para)
5055
msgid ""
5056
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5057
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5058
msgstr ""
5059
5060
#: serverguide/C/virtualization.xml:1184(para)
5061
msgid ""
5062
"Also, see the <ulink "
5063
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5064
"Wiki</ulink> page."
5065
msgstr ""
5066
5067
#: serverguide/C/virtualization.xml:1192(title)
5068
msgid "UEC"
5069
msgstr ""
5070
5071
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5072
msgid "Overview"
5073
msgstr ""
5074
5075
#: serverguide/C/virtualization.xml:1197(para)
5076
msgid ""
5077
"This tutorial covers <application>UEC</application> installation from the "
5078
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5079
"with a single system serving as the <emphasis>\"all-in-one "
5080
"controller\"</emphasis>, and one or more nodes attached."
5081
msgstr ""
5082
5083
#: serverguide/C/virtualization.xml:1202(para)
5084
msgid ""
5085
"From this Tutorial you will learn how to install, configure, register and "
5086
"perform several operations on a basic <application>UEC</application> setup "
5087
"that results in a cloud with a one controller <emphasis>\"front-"
5088
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5089
"instances. You will also use examples to help get you started using your own "
5090
"private compute cloud."
5091
msgstr ""
5092
5093
#: serverguide/C/virtualization.xml:1210(title)
5094
msgid "Prerequisites"
5095
msgstr ""
5096
5097
#: serverguide/C/virtualization.xml:1212(para)
5098
msgid ""
5099
"To deploy a minimal cloud infrastructure, you’ll need at least "
5100
"<emphasis>two</emphasis> dedicated systems:"
5101
msgstr ""
5102
5103
#: serverguide/C/virtualization.xml:1218(para)
5104
msgid "A front end."
5105
msgstr ""
5106
5107
#: serverguide/C/virtualization.xml:1223(para)
5108
msgid "One or more node(s)."
5109
msgstr ""
5110
5111
#: serverguide/C/virtualization.xml:1229(para)
5112
msgid ""
5113
"The following are recommendations, rather than fixed requirements. However, "
5114
"our experience in developing this documentation indicated the following "
5115
"suggestions."
5116
msgstr ""
5117
5118
#: serverguide/C/virtualization.xml:1234(title)
5119
msgid "Front End Requirements"
5120
msgstr ""
5121
5122
#: serverguide/C/virtualization.xml:1236(para)
5123
msgid "Use the following table for a system that will run one or more of:"
5124
msgstr ""
5125
5126
#: serverguide/C/virtualization.xml:1241(para)
5127
msgid "Cloud Controller (CLC)"
5128
msgstr ""
5129
5130
#: serverguide/C/virtualization.xml:1242(para)
5131
msgid "Cluster Controller (CC)"
5132
msgstr ""
5133
5134
#: serverguide/C/virtualization.xml:1243(para)
5135
msgid "Walrus (the S3-like storage service)"
5136
msgstr ""
5137
5138
#: serverguide/C/virtualization.xml:1244(para)
5139
msgid "Storage Controller (SC)"
5140
msgstr ""
5141
5142
#: serverguide/C/virtualization.xml:1248(title)
5143
msgid "UEC Front End Requirements"
5144
msgstr ""
5145
5146
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5147
msgid "Hardware"
5148
msgstr ""
5149
5150
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5151
msgid "Minimum"
5152
msgstr ""
5153
5154
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5155
msgid "Suggested"
5156
msgstr ""
5157
5158
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5159
msgid "Notes"
5160
msgstr ""
5161
5162
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5163
msgid "CPU"
5164
msgstr ""
5165
5166
#: serverguide/C/virtualization.xml:1265(para)
5167
msgid "1 GHz"
5168
msgstr ""
5169
5170
#: serverguide/C/virtualization.xml:1266(para)
5171
msgid "2 x 2 GHz"
5172
msgstr ""
5173
5174
#: serverguide/C/virtualization.xml:1267(para)
5175
msgid ""
5176
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5177
"a dual core processor."
5178
msgstr ""
5179
5180
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5181
msgid "Memory"
5182
msgstr ""
5183
5184
#: serverguide/C/virtualization.xml:1271(para)
5185
msgid "512 MB"
5186
msgstr ""
5187
5188
#: serverguide/C/virtualization.xml:1272(para)
5189
msgid "2 GB"
5190
msgstr ""
5191
5192
#: serverguide/C/virtualization.xml:1273(para)
5193
msgid "The Java web front end benefits from lots of available memory."
5194
msgstr ""
5195
5196
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5197
msgid "Disk"
5198
msgstr ""
5199
5200
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5201
msgid "5400 RPM IDE"
5202
msgstr ""
5203
5204
#: serverguide/C/virtualization.xml:1278(para)
5205
msgid "7200 RPM SATA"
5206
msgstr ""
5207
5208
#: serverguide/C/virtualization.xml:1279(para)
5209
msgid ""
5210
"Slower disks will work, but will yield much longer instance startup times."
5211
msgstr ""
5212
5213
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5214
msgid "Disk Space"
5215
msgstr ""
5216
5217
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5218
msgid "40 GB"
5219
msgstr ""
5220
5221
#: serverguide/C/virtualization.xml:1284(para)
5222
msgid "200 GB"
5223
msgstr ""
5224
5225
#: serverguide/C/virtualization.xml:1285(para)
5226
msgid ""
5227
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5228
"does not like to run out of disk space."
5229
msgstr ""
5230
5231
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5232
msgid "Networking"
5233
msgstr ""
5234
5235
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5236
msgid "100 Mbps"
5237
msgstr ""
5238
5239
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5240
msgid "1000 Mbps"
5241
msgstr ""
5242
5243
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5244
msgid ""
5245
"Machine images are hundreds of MB, and need to be copied over the network to "
5246
"nodes."
5247
msgstr ""
5248
5249
#: serverguide/C/virtualization.xml:1299(title)
5250
msgid "Node Requirements"
5251
msgstr ""
5252
5253
#: serverguide/C/virtualization.xml:1301(para)
5254
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5255
msgstr ""
5256
5257
#: serverguide/C/virtualization.xml:1306(para)
5258
msgid "the Node Controller (NC)"
5259
msgstr ""
5260
5261
#: serverguide/C/virtualization.xml:1310(title)
5262
msgid "UEC Node Requirements"
5263
msgstr ""
5264
5265
#: serverguide/C/virtualization.xml:1327(para)
5266
msgid "VT Extensions"
5267
msgstr ""
5268
5269
#: serverguide/C/virtualization.xml:1328(para)
5270
msgid "VT, 64-bit, Multicore"
5271
msgstr ""
5272
5273
#: serverguide/C/virtualization.xml:1329(para)
5274
msgid ""
5275
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5276
"only run 1 VM per CPU core on a Node."
5277
msgstr ""
5278
5279
#: serverguide/C/virtualization.xml:1333(para)
5280
msgid "1 GB"
5281
msgstr ""
5282
5283
#: serverguide/C/virtualization.xml:1334(para)
5284
msgid "4 GB"
5285
msgstr ""
5286
5287
#: serverguide/C/virtualization.xml:1335(para)
5288
msgid "Additional memory means more, and larger guests."
5289
msgstr ""
5290
5291
#: serverguide/C/virtualization.xml:1340(para)
5292
msgid "7200 RPM SATA or SCSI"
5293
msgstr ""
5294
5295
#: serverguide/C/virtualization.xml:1341(para)
5296
msgid ""
5297
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5298
"bottleneck."
5299
msgstr ""
5300
5301
#: serverguide/C/virtualization.xml:1346(para)
5302
msgid "100 GB"
5303
msgstr ""
5304
5305
#: serverguide/C/virtualization.xml:1347(para)
5306
msgid ""
5307
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5308
"space."
5309
msgstr ""
5310
5311
#: serverguide/C/virtualization.xml:1363(title)
5312
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5313
msgstr ""
5314
5315
#: serverguide/C/virtualization.xml:1367(para)
5316
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5317
msgstr ""
5318
5319
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5320
msgid ""
5321
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5322
msgstr ""
5323
5324
#: serverguide/C/virtualization.xml:1377(para)
5325
msgid ""
5326
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5327
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5328
msgstr ""
5329
5330
#: serverguide/C/virtualization.xml:1383(para)
5331
msgid ""
5332
"It will ask two other cloud-specific questions during the course of the "
5333
"install:"
5334
msgstr ""
5335
5336
#: serverguide/C/virtualization.xml:1388(para)
5337
msgid "Name of your cluster."
5338
msgstr ""
5339
5340
#: serverguide/C/virtualization.xml:1391(para)
5341
msgid "e.g. <emphasis>cluster1</emphasis>."
5342
msgstr ""
5343
5344
#: serverguide/C/virtualization.xml:1394(para)
5345
msgid ""
5346
"A range of public IP addresses on the LAN that the cloud can allocate to "
5347
"instances."
5348
msgstr ""
5349
5350
#: serverguide/C/virtualization.xml:1397(para)
5351
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5352
msgstr ""
5353
5354
#: serverguide/C/virtualization.xml:1405(title)
5355
msgid "Installing the Node Controller(s)"
5356
msgstr ""
5357
5358
#: serverguide/C/virtualization.xml:1407(para)
5359
msgid ""
5360
"The node controller install is even simpler. Just make sure that you are "
5361
"connected to the network on which the cloud/cluster controller is already "
5362
"running."
5363
msgstr ""
5364
5365
#: serverguide/C/virtualization.xml:1413(para)
5366
msgid "Boot from the same ISO on the node(s)."
5367
msgstr ""
5368
5369
#: serverguide/C/virtualization.xml:1423(para)
5370
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5371
msgstr ""
5372
5373
#: serverguide/C/virtualization.xml:1428(para)
5374
msgid ""
5375
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5376
"install for you."
5377
msgstr ""
5378
5379
#: serverguide/C/virtualization.xml:1433(para)
5380
msgid "Confirm the partitioning scheme."
5381
msgstr ""
5382
5383
#: serverguide/C/virtualization.xml:1438(para)
5384
msgid ""
5385
"The rest of the installation should proceed uninterrupted; complete the "
5386
"installation and reboot the node."
5387
msgstr ""
5388
5389
#: serverguide/C/virtualization.xml:1446(title)
5390
msgid "Register the Node(s)"
5391
msgstr ""
5392
5393
#: serverguide/C/virtualization.xml:1448(para)
5394
msgid ""
5395
"Nodes are the physical systems within <application>UEC</application> that "
5396
"actually run the virtual machine instances of the cloud."
5397
msgstr ""
5398
5399
#: serverguide/C/virtualization.xml:1452(para)
5400
msgid ""
5401
"Once one or more Ubuntu Server node(s) are installed and running the "
5402
"<application>eucalyptus-nc</application> service, log onto the "
5403
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5404
msgstr ""
5405
5406
#: serverguide/C/virtualization.xml:1458(command)
5407
msgid "sudo euca_conf --no-rsync --discover-nodes"
5408
msgstr ""
5409
5410
#: serverguide/C/virtualization.xml:1461(para)
5411
msgid ""
5412
"This will discover the systems on the network running the "
5413
"<application>eucalyptus-nc</application> service, and the administrator can "
5414
"confirm the registration of each node by its IP address."
5415
msgstr ""
5416
5417
#: serverguide/C/virtualization.xml:1467(para)
5418
msgid ""
5419
"If you get prompted for passwords, or receive errors from scp, you may need "
5420
"to revisit the key synchronization instructions at <ulink "
5421
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5422
"lation</ulink>."
5423
msgstr ""
5424
5425
#: serverguide/C/virtualization.xml:1475(title)
5426
msgid "Obtain Credentials"
5427
msgstr ""
5428
5429
#: serverguide/C/virtualization.xml:1477(para)
5430
msgid ""
5431
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5432
"users of the cloud will need to retrieve their credentials. This can be done "
5433
"either through a web browser, or at the command line."
5434
msgstr ""
5435
5436
#: serverguide/C/virtualization.xml:1483(title)
5437
msgid "From a Web Browser"
5438
msgstr ""
5439
5440
#: serverguide/C/virtualization.xml:1487(para)
5441
msgid ""
5442
"From your web browser (either remotely or on your Ubuntu server) access the "
5443
"following URL:"
5444
msgstr ""
5445
5446
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5447
#, no-wrap
5448
msgid ""
5449
"\n"
5450
"https://<cloud-controller-ip-address>:8443/\n"
5451
msgstr ""
5452
5453
#: serverguide/C/virtualization.xml:1495(para)
5454
msgid ""
5455
"You must use a secure connection, so make sure you use \"https\" not "
5456
"\"http\" in your URL. You will get a security certificate warning. You will "
5457
"have to add an exception to view the page. If you do not accept it you will "
5458
"not be able to view the Eucalyptus configuration page."
5459
msgstr ""
5460
5461
#: serverguide/C/virtualization.xml:1503(para)
5462
msgid ""
5463
"Use username <emphasis>'admin'</emphasis> and password "
5464
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5465
"to change your password)."
5466
msgstr ""
5467
5468
#: serverguide/C/virtualization.xml:1509(para)
5469
msgid ""
5470
"Then follow the on-screen instructions to update the admin password and "
5471
"email address."
5472
msgstr ""
5473
5474
#: serverguide/C/virtualization.xml:1514(para)
5475
msgid ""
5476
"Once the first time configuration process is completed, click the "
5477
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5478
"the screen."
5479
msgstr ""
5480
5481
#: serverguide/C/virtualization.xml:1520(para)
5482
msgid ""
5483
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5484
"certificates."
5485
msgstr ""
5486
5487
#: serverguide/C/virtualization.xml:1525(para)
5488
msgid "Save them to <filename>~/.euca</filename>."
5489
msgstr ""
5490
5491
#: serverguide/C/virtualization.xml:1530(para)
5492
msgid ""
5493
"Unzip the downloaded zip file into a safe location "
5494
"(<filename>~/.euca</filename>)."
5495
msgstr ""
5496
5497
#: serverguide/C/virtualization.xml:1534(command)
5498
msgid "unzip -d ~/.euca mycreds.zip"
5499
msgstr ""
5500
5501
#: serverguide/C/virtualization.xml:1541(title)
5502
msgid "From a Command Line"
5503
msgstr ""
5504
5505
#: serverguide/C/virtualization.xml:1545(para)
5506
msgid ""
5507
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5508
"Controller</emphasis>, you can run:"
5509
msgstr ""
5510
5511
#: serverguide/C/virtualization.xml:1549(command)
5512
msgid "mkdir -p ~/.euca"
5513
msgstr ""
5514
5515
#: serverguide/C/virtualization.xml:1550(command)
5516
msgid "chmod 700 ~/.euca"
5517
msgstr ""
5518
5519
#: serverguide/C/virtualization.xml:1551(command)
5520
msgid "cd ~/.euca"
5521
msgstr ""
5522
5523
#: serverguide/C/virtualization.xml:1552(command)
5524
msgid "sudo euca_conf --get-credentials mycreds.zip"
5525
msgstr ""
5526
5527
#: serverguide/C/virtualization.xml:1553(command)
5528
msgid "unzip mycreds.zip"
5529
msgstr ""
5530
5531
#: serverguide/C/virtualization.xml:1554(command)
5532
msgid "cd -"
5533
msgstr ""
5534
5535
#: serverguide/C/virtualization.xml:1561(title)
5536
msgid "Extracting and Using Your Credentials"
5537
msgstr ""
5538
5539
#: serverguide/C/virtualization.xml:1563(para)
5540
msgid ""
5541
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5542
"certificates."
5543
msgstr ""
5544
5545
#: serverguide/C/virtualization.xml:1569(para)
5546
msgid ""
5547
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5548
"Eucalyptus environment:"
5549
msgstr ""
5550
5551
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5552
msgid ". ~/.euca/eucarc"
5553
msgstr ""
5554
5555
#: serverguide/C/virtualization.xml:1577(para)
5556
msgid ""
5557
"You may additionally wish to add this command to your "
5558
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5559
"set up automatically when you log in. Eucalyptus treats this set of "
5560
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5561
"the holder global privileges across the cloud. As such, they should be "
5562
"protected in the same way that other elevated-priority access is protected "
5563
"(e.g. should not be made visible to the general user population)."
5564
msgstr ""
5565
5566
#: serverguide/C/virtualization.xml:1584(command)
5567
msgid ""
5568
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5569
msgstr ""
5570
5571
#: serverguide/C/virtualization.xml:1588(para)
5572
msgid "Install the required cloud user tools:"
5573
msgstr ""
5574
5575
#: serverguide/C/virtualization.xml:1592(command)
5576
msgid "sudo apt-get install euca2ools"
5577
msgstr ""
5578
5579
#: serverguide/C/virtualization.xml:1596(para)
5580
msgid ""
5581
"To validate that everything is working correctly, get the local cluster "
5582
"availability details:"
5583
msgstr ""
5584
5585
#: serverguide/C/virtualization.xml:1601(command)
5586
msgid "euca-describe-availability-zones verbose"
5587
msgstr ""
5588
5589
#: serverguide/C/virtualization.xml:1602(computeroutput)
5590
#, no-wrap
5591
msgid ""
5592
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5593
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5594
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5595
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5596
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5597
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5598
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5599
msgstr ""
5600
5601
#: serverguide/C/virtualization.xml:1612(para)
5602
msgid "Your output from the above command will vary."
5603
msgstr ""
5604
5605
#: serverguide/C/virtualization.xml:1622(title)
5606
msgid "Running an Image"
5607
msgstr ""
5608
5609
#: serverguide/C/virtualization.xml:1624(para)
5610
msgid "There are multiple ways to instantiate an image in UEC:"
5611
msgstr ""
5612
5613
#: serverguide/C/virtualization.xml:1629(para)
5614
msgid "Use the command line."
5615
msgstr ""
5616
5617
#: serverguide/C/virtualization.xml:1630(para)
5618
msgid ""
5619
"Use one of the UEC compatible management tools such as "
5620
"<emphasis>Landscape</emphasis>."
5621
msgstr ""
5622
5623
#: serverguide/C/virtualization.xml:1632(para)
5624
msgid ""
5625
"Use the <ulink "
5626
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5627
"extension to Firefox."
5628
msgstr ""
5629
5630
#: serverguide/C/virtualization.xml:1638(para)
5631
msgid "Here we will describe the process from the command line:"
5632
msgstr ""
5633
5634
#: serverguide/C/virtualization.xml:1644(para)
5635
msgid ""
5636
"Before running an instance of your image, you should first create a "
5637
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5638
"instance as root, once it boots. The key is stored, so you will only have to "
5639
"do this once."
5640
msgstr ""
5641
5642
#: serverguide/C/virtualization.xml:1648(para)
5643
msgid "Run the following command:"
5644
msgstr ""
5645
5646
#: serverguide/C/virtualization.xml:1651(programlisting)
5647
#, no-wrap
5648
msgid ""
5649
"\n"
5650
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5651
" touch ~/.euca/mykey.priv\n"
5652
" chmod 0600 ~/.euca/mykey.priv\n"
5653
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5654
"fi\n"
5655
msgstr ""
5656
5657
#: serverguide/C/virtualization.xml:1659(para)
5658
msgid ""
5659
"You can call your key whatever you like (in this example, the key is called "
5660
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5661
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5662
"a list of created keys stored in the system."
5663
msgstr ""
5664
5665
#: serverguide/C/virtualization.xml:1666(para)
5666
msgid "You must also allow access to port 22 in your instances:"
5667
msgstr ""
5668
5669
#: serverguide/C/virtualization.xml:1670(command)
5670
msgid "euca-describe-groups"
5671
msgstr ""
5672
5673
#: serverguide/C/virtualization.xml:1671(command)
5674
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5675
msgstr ""
5676
5677
#: serverguide/C/virtualization.xml:1675(para)
5678
msgid "Next, you can create instances of your registered image:"
5679
msgstr ""
5680
5681
#: serverguide/C/virtualization.xml:1679(command)
5682
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5683
msgstr ""
5684
5685
#: serverguide/C/virtualization.xml:1682(para)
5686
msgid ""
5687
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5688
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5689
"on the <emphasis>Store</emphasis> page to see the sample command."
5690
msgstr ""
5691
5692
#: serverguide/C/virtualization.xml:1689(para)
5693
msgid ""
5694
"The first time you run an instance, the system will be setting up caches for "
5695
"the image from which it will be created. This can often take some time the "
5696
"first time an instance is run given that VM images are usually quite large."
5697
msgstr ""
5698
5699
#: serverguide/C/virtualization.xml:1693(para)
5700
msgid "To monitor the state of your instance, run:"
5701
msgstr ""
5702
5703
#: serverguide/C/virtualization.xml:1697(command)
5704
msgid "watch -n5 euca-describe-instances"
5705
msgstr ""
5706
5707
#: serverguide/C/virtualization.xml:1699(para)
5708
msgid ""
5709
"In the output, you should see information about the instance, including its "
5710
"state. While first-time caching is being performed, the instance's state "
5711
"will be <emphasis>'pending'</emphasis>."
5712
msgstr ""
5713
5714
#: serverguide/C/virtualization.xml:1705(para)
5715
msgid ""
5716
"When the instance is fully started, the above state will become "
5717
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5718
"instance in the output, then connect to it:"
5719
msgstr ""
5720
5721
#: serverguide/C/virtualization.xml:1710(command)
5722
msgid ""
5723
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5724
"'{print $4}')"
5725
msgstr ""
5726
5727
#: serverguide/C/virtualization.xml:1711(command)
5728
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
5729
msgstr ""
5730
5731
#: serverguide/C/virtualization.xml:1715(para)
5732
msgid ""
5733
"And when you are done with this instance, exit your SSH connection, then "
5734
"terminate your instance:"
5735
msgstr ""
5736
5737
#: serverguide/C/virtualization.xml:1719(command)
5738
msgid ""
5739
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
5740
"awk '{print $2}')"
5741
msgstr ""
5742
5743
#: serverguide/C/virtualization.xml:1720(command)
5744
msgid "euca-terminate-instances $INSTANCEID"
5745
msgstr ""
5746
5747
#: serverguide/C/virtualization.xml:1727(title)
5748
msgid "Install an Image from the Store"
5749
msgstr ""
5750
5751
#: serverguide/C/virtualization.xml:1729(para)
5752
msgid ""
5753
"The following is by far the simplest way to install an image. However, "
5754
"advanced users may be interested in learning how to <ulink "
5755
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
5756
"own image</ulink>."
5757
msgstr ""
5758
5759
#: serverguide/C/virtualization.xml:1734(para)
5760
msgid ""
5761
"The simplest way to add an image to <application>UEC</application> is to "
5762
"install it from the Image Store on the UEC web interface."
5763
msgstr ""
5764
5765
#: serverguide/C/virtualization.xml:1740(para)
5766
msgid ""
5767
"Access the web interface at the following URL (Make sure you specify https):"
5768
msgstr ""
5769
5770
#: serverguide/C/virtualization.xml:1748(para)
5771
msgid ""
5772
"Enter your login and password (if requested, as you may still be logged in "
5773
"from earlier)."
5774
msgstr ""
5775
5776
#: serverguide/C/virtualization.xml:1753(para)
5777
msgid "Click on the <emphasis>Store</emphasis> tab."
5778
msgstr ""
5779
5780
#: serverguide/C/virtualization.xml:1758(para)
5781
msgid "Browse available images."
5782
msgstr ""
5783
5784
#: serverguide/C/virtualization.xml:1763(para)
5785
msgid "Click on <emphasis>install</emphasis> for the image you want."
5786
msgstr ""
5787
5788
#: serverguide/C/virtualization.xml:1769(para)
5789
msgid ""
5790
"Once the image has been downloaded and installed, you can click on "
5791
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
5792
"button to view the command to execute to instantiate (start) this image. The "
5793
"image will also appear on the list given on the <emphasis>Image</emphasis> "
5794
"tab."
5795
msgstr ""
5796
5797
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
5798
msgid "More Information"
5799
msgstr ""
5800
5801
#: serverguide/C/virtualization.xml:1779(para)
5802
msgid ""
5803
"How to use the <ulink "
5804
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
5805
"Controller</ulink>"
5806
msgstr ""
5807
5808
#: serverguide/C/virtualization.xml:1783(para)
5809
msgid "Controlling eucalyptus services:"
5810
msgstr ""
5811
5812
#: serverguide/C/virtualization.xml:1788(para)
5813
msgid ""
5814
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
5815
msgstr ""
5816
5817
#: serverguide/C/virtualization.xml:1789(para)
5818
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
5819
msgstr ""
5820
5821
#: serverguide/C/virtualization.xml:1792(para)
5822
msgid "Locations of some important files:"
5823
msgstr ""
5824
5825
#: serverguide/C/virtualization.xml:1799(emphasis)
5826
msgid "Log files:"
5827
msgstr ""
5828
5829
#: serverguide/C/virtualization.xml:1802(para)
5830
msgid "/var/log/eucalyptus"
5831
msgstr ""
5832
5833
#: serverguide/C/virtualization.xml:1807(emphasis)
5834
msgid "Configuration files:"
5835
msgstr ""
5836
5837
#: serverguide/C/virtualization.xml:1810(para)
5838
msgid "/etc/eucalyptus"
5839
msgstr ""
5840
5841
#: serverguide/C/virtualization.xml:1815(emphasis)
5842
msgid "Database:"
5843
msgstr ""
5844
5845
#: serverguide/C/virtualization.xml:1818(para)
5846
msgid "/var/lib/eucalyptus/db"
5847
msgstr ""
5848
5849
#: serverguide/C/virtualization.xml:1823(emphasis)
5850
msgid "Keys:"
5851
msgstr ""
5852
5853
#: serverguide/C/virtualization.xml:1826(para)
5854
msgid "/var/lib/eucalyptus"
5855
msgstr ""
5856
5857
#: serverguide/C/virtualization.xml:1827(para)
5858
msgid "/var/lib/eucalyptus/.ssh"
5859
msgstr ""
5860
5861
#: serverguide/C/virtualization.xml:1833(para)
5862
msgid ""
5863
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
5864
"running the client tools."
5865
msgstr ""
5866
5867
#: serverguide/C/virtualization.xml:1844(para)
5868
msgid ""
5869
"For information on loading instances see the <ulink "
5870
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
5871
"page."
5872
msgstr ""
5873
5874
#: serverguide/C/virtualization.xml:1849(para)
5875
msgid ""
5876
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
5877
"documentation, downloads)</ulink>."
5878
msgstr ""
5879
5880
#: serverguide/C/virtualization.xml:1854(para)
5881
msgid ""
5882
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
5883
"(bugs, code)</ulink>."
5884
msgstr ""
5885
5886
#: serverguide/C/virtualization.xml:1859(para)
5887
msgid ""
5888
"<ulink "
5889
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
5890
"ptus Troubleshooting (1.5)</ulink>."
5891
msgstr ""
5892
5893
#: serverguide/C/virtualization.xml:1864(para)
5894
msgid ""
5895
"<ulink url=\"http://support.rightscale.com/2._References/02-"
5896
"Cloud_Infrastructures/Eucalyptus/03-"
5897
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
5898
"RightScale</ulink>."
5899
msgstr ""
5900
5901
#: serverguide/C/virtualization.xml:1870(para)
5902
msgid ""
5903
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
5904
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
5905
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
5906
msgstr ""
5907
5908
#: serverguide/C/virtualization.xml:1879(title)
5909
msgid "Glossary"
5910
msgstr ""
5911
5912
#: serverguide/C/virtualization.xml:1881(para)
5913
msgid ""
5914
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
5915
"unfamiliar to some readers. This page is intended to provide a glossary of "
5916
"such terms and acronyms."
5917
msgstr ""
5918
5919
#: serverguide/C/virtualization.xml:1888(para)
5920
msgid ""
5921
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
5922
"computing resources through virtual machines, provisioned and recollected "
5923
"dynamically."
5924
msgstr ""
5925
5926
#: serverguide/C/virtualization.xml:1894(para)
5927
msgid ""
5928
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
5929
"provides the web UI (an https server on port 8443), and implements the "
5930
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
5931
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
5932
"cloud</application> package."
5933
msgstr ""
5934
5935
#: serverguide/C/virtualization.xml:1901(para)
5936
msgid ""
5937
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
5938
"Cluster Controller. There can be more than one Cluster in an installation of "
5939
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
5940
"floor2, floor2)."
5941
msgstr ""
5942
5943
#: serverguide/C/virtualization.xml:1907(para)
5944
msgid ""
5945
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
5946
"manages collections of node resources. This service is provided by the "
5947
"Ubuntu <application>eucalyptus-cc</application> package."
5948
msgstr ""
5949
5950
#: serverguide/C/virtualization.xml:1913(para)
5951
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
5952
msgstr ""
5953
5954
#: serverguide/C/virtualization.xml:1918(para)
5955
msgid ""
5956
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
5957
"pay-by-the-gigabyte public cloud computing offering."
5958
msgstr ""
5959
5960
#: serverguide/C/virtualization.xml:1923(para)
5961
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
5962
msgstr ""
5963
5964
#: serverguide/C/virtualization.xml:1928(para)
5965
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
5966
msgstr ""
5967
5968
#: serverguide/C/virtualization.xml:1933(para)
5969
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
5970
msgstr ""
5971
5972
#: serverguide/C/virtualization.xml:1938(para)
5973
msgid ""
5974
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
5975
"Linking Your Programs To Useful Systems. An open source project originally "
5976
"from the University of California at Santa Barbara, now supported by "
5977
"Eucalyptus Systems, a Canonical Partner."
5978
msgstr ""
5979
5980
#: serverguide/C/virtualization.xml:1945(para)
5981
msgid ""
5982
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
5983
"the high level Eucalyptus components (cloud, walrus, storage controller, "
5984
"cluster controller)."
5985
msgstr ""
5986
5987
#: serverguide/C/virtualization.xml:1951(para)
5988
msgid ""
5989
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
5990
"running virtual machines, running a node controller. Within Ubuntu, this "
5991
"generally means that the CPU has VT extensions, and can run the KVM "
5992
"hypervisor."
5993
msgstr ""
5994
5995
#: serverguide/C/virtualization.xml:1957(para)
5996
msgid ""
5997
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
5998
"on nodes which host the virtual machines that comprise the cloud. This "
5999
"service is provided by the Ubuntu package <application>eucalyptus-"
6000
"nc</application>."
6001
msgstr ""
6002
6003
#: serverguide/C/virtualization.xml:1963(para)
6004
msgid ""
6005
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6006
"gigabyte persistent storage solution for EC2."
6007
msgstr ""
6008
6009
#: serverguide/C/virtualization.xml:1968(para)
6010
msgid ""
6011
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6012
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6013
"installation can have its own Storage Controller. This component is provided "
6014
"by the <application>eucalyptus-sc</application> package."
6015
msgstr ""
6016
6017
#: serverguide/C/virtualization.xml:1975(para)
6018
msgid ""
6019
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6020
"solution, based on Eucalyptus."
6021
msgstr ""
6022
6023
#: serverguide/C/virtualization.xml:1980(para)
6024
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6025
msgstr ""
6026
6027
#: serverguide/C/virtualization.xml:1985(para)
6028
msgid ""
6029
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6030
"some modern CPUs, allowing for accelerated virtual machine hosting."
6031
msgstr ""
6032
6033
#: serverguide/C/virtualization.xml:1990(para)
6034
msgid ""
6035
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6036
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6037
"put/get abstractions."
6038
msgstr ""
6039
6040
#: serverguide/C/virtualization.xml:2000(title)
6041
msgid "OpenNebula"
6042
msgstr ""
6043
6044
#: serverguide/C/virtualization.xml:2002(para)
6045
msgid ""
6046
"<application>OpenNebula</application> allows virtual machines to be placed "
6047
"and re-placed dynamically on a pool of physical resources. This allows a "
6048
"virtual machine to be hosted from any location available."
6049
msgstr ""
6050
6051
#: serverguide/C/virtualization.xml:2007(para)
6052
msgid ""
6053
"This section will detail configuring an OpenNebula cluster using three "
6054
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6055
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6056
"also need a bridge configured to allow the virtual machines access to the "
6057
"local network. For details see <xref linkend=\"bridging\"/>."
6058
msgstr ""
6059
6060
#: serverguide/C/virtualization.xml:2016(para)
6061
msgid "First, from a terminal on the Front-End enter:"
6062
msgstr ""
6063
6064
#: serverguide/C/virtualization.xml:2021(command)
6065
msgid "sudo apt-get install opennebula"
6066
msgstr ""
6067
6068
#: serverguide/C/virtualization.xml:2024(para)
6069
msgid "On each Compute Node install:"
6070
msgstr ""
6071
6072
#: serverguide/C/virtualization.xml:2029(command)
6073
msgid "sudo apt-get install opennebula-node"
6074
msgstr ""
6075
6076
#: serverguide/C/virtualization.xml:2032(para)
6077
msgid ""
6078
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6079
"to have a password. On each machine execute:"
6080
msgstr ""
6081
6082
#: serverguide/C/virtualization.xml:2037(command)
6083
msgid "sudo passwd oneadmin"
6084
msgstr ""
6085
6086
#: serverguide/C/virtualization.xml:2040(para)
6087
msgid ""
6088
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6089
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6090
msgstr ""
6091
6092
#: serverguide/C/virtualization.xml:2045(command)
6093
msgid ""
6094
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6095
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6096
msgstr ""
6097
6098
#: serverguide/C/virtualization.xml:2046(command)
6099
msgid ""
6100
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6101
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6102
msgstr ""
6103
6104
#: serverguide/C/virtualization.xml:2047(command)
6105
msgid ""
6106
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6107
"/var/lib/one/.ssh/authorized_keys\""
6108
msgstr ""
6109
6110
#: serverguide/C/virtualization.xml:2050(para)
6111
msgid ""
6112
"The SSH key for the Compute Nodes needs to be added to the "
6113
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6114
"accomplish this <application>ssh</application> to each Compute Node as a "
6115
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6116
"session, and execute the following to copy the SSH key from "
6117
"<filename>~/.ssh/known_hosts</filename> to "
6118
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6119
msgstr ""
6120
6121
#: serverguide/C/virtualization.xml:2057(command)
6122
msgid ""
6123
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6124
"/etc/ssh/ssh_known_hosts\""
6125
msgstr ""
6126
6127
#: serverguide/C/virtualization.xml:2058(command)
6128
msgid ""
6129
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6130
"/etc/ssh/ssh_known_hosts\""
6131
msgstr ""
6132
6133
#: serverguide/C/virtualization.xml:2062(para)
6134
msgid ""
6135
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6136
"appropriate host names."
6137
msgstr ""
6138
6139
#: serverguide/C/virtualization.xml:2067(para)
6140
msgid ""
6141
"This allows the <emphasis>oneadmin</emphasis> to use "
6142
"<application>scp</application>, without a password or manual intervention, "
6143
"to deploy an image to the Compute Nodes."
6144
msgstr ""
6145
6146
#: serverguide/C/virtualization.xml:2072(para)
6147
msgid ""
6148
"On the Front-End create a directory to store the VM images, giving the "
6149
"<emphasis>oneadmin</emphasis> user access to the directory:"
6150
msgstr ""
6151
6152
#: serverguide/C/virtualization.xml:2077(command)
6153
msgid "sudo mkdir /var/lib/one/images"
6154
msgstr ""
6155
6156
#: serverguide/C/virtualization.xml:2078(command)
6157
msgid "sudo chown oneadmin /var/lib/one/images/"
6158
msgstr ""
6159
6160
#: serverguide/C/virtualization.xml:2081(para)
6161
msgid ""
6162
"Finally, copy a virtual machine disk file into "
6163
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6164
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6165
"and-vmbuilder\"/> for details."
6166
msgstr ""
6167
6168
#: serverguide/C/virtualization.xml:2090(para)
6169
msgid ""
6170
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6171
"and virtual machines added to the cluster."
6172
msgstr ""
6173
6174
#: serverguide/C/virtualization.xml:2094(para)
6175
msgid "From a terminal prompt enter:"
6176
msgstr ""
6177
6178
#: serverguide/C/virtualization.xml:2099(command)
6179
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6180
msgstr ""
6181
6182
#: serverguide/C/virtualization.xml:2100(command)
6183
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6184
msgstr ""
6185
6186
#: serverguide/C/virtualization.xml:2103(para)
6187
msgid ""
6188
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6189
"<filename>vnet01.template</filename>:"
6190
msgstr ""
6191
6192
#: serverguide/C/virtualization.xml:2107(programlisting)
6193
#, no-wrap
6194
msgid ""
6195
"\n"
6196
"NAME = \"LAN\"\n"
6197
"TYPE = RANGED\n"
6198
"BRIDGE = br0\n"
6199
"NETWORK_SIZE = C\n"
6200
"NETWORK_ADDRESS = 192.168.0.0\n"
6201
msgstr ""
6202
6203
#: serverguide/C/virtualization.xml:2116(para)
6204
msgid ""
6205
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6206
msgstr ""
6207
6208
#: serverguide/C/virtualization.xml:2121(para)
6209
msgid ""
6210
"Using the <application>onevnet</application> utility, add the virtual "
6211
"network to OpenNebula:"
6212
msgstr ""
6213
6214
#: serverguide/C/virtualization.xml:2126(command)
6215
msgid "onevnet create vnet01.template"
6216
msgstr ""
6217
6218
#: serverguide/C/virtualization.xml:2129(para)
6219
msgid ""
6220
"Now create a <emphasis>VM Template</emphasis> file named "
6221
"<filename>vm01.template</filename>:"
6222
msgstr ""
6223
6224
#: serverguide/C/virtualization.xml:2133(programlisting)
6225
#, no-wrap
6226
msgid ""
6227
"\n"
6228
"NAME = vm01\n"
6229
"CPU = 0.5\n"
6230
"MEMORY = 512\n"
6231
"\n"
6232
"OS = [ BOOT = hd ]\n"
6233
"\n"
6234
"DISK = [\n"
6235
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6236
" target = \"hda\",\n"
6237
" readonly = \"no\" ]\n"
6238
"\n"
6239
"NIC = [ NETWORK=\"LAN\" ]\n"
6240
"\n"
6241
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6242
msgstr ""
6243
6244
#: serverguide/C/virtualization.xml:2150(para)
6245
msgid "Start the virtual machine using <application>onevm</application>:"
6246
msgstr ""
6247
6248
#: serverguide/C/virtualization.xml:2155(command)
6249
msgid "onevm submit vm01.template"
6250
msgstr ""
6251
6252
#: serverguide/C/virtualization.xml:2158(para)
6253
msgid ""
6254
"Use the <application>onevm list</application> option to view information "
6255
"about virtual machines. Also, the <application>onevm show vm01</application> "
6256
"option will display more details about a specific virtual machine."
6257
msgstr ""
6258
6259
#: serverguide/C/virtualization.xml:2169(para)
6260
msgid ""
6261
"See the <ulink "
6262
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6263
"> for more information."
6264
msgstr ""
6265
6266
#: serverguide/C/virtualization.xml:2174(para)
6267
msgid ""
6268
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6269
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6270
"url=\"http://freenode.net\">Freenode</ulink>."
6271
msgstr ""
6272
6273
#: serverguide/C/virtualization.xml:2180(para)
6274
msgid ""
6275
"Also, the <ulink "
6276
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6277
"Wiki</ulink> page has more details."
6278
msgstr ""
6279
6280
#: serverguide/C/vcs.xml:13(title)
6281
msgid "Version Control System"
6282
msgstr ""
6283
6284
#: serverguide/C/vcs.xml:14(para)
6285
msgid ""
6286
"Version control is the art of managing changes to information. It has long "
6287
"been a critical tool for programmers, who typically spend their time making "
6288
"small changes to software and then undoing those changes the next day. But "
6289
"the usefulness of version control software extends far beyond the bounds of "
6290
"the software development world. Anywhere you can find people using computers "
6291
"to manage information that changes often, there is room for version control."
6292
msgstr ""
6293
6294
#: serverguide/C/vcs.xml:17(title)
6295
msgid "Bazaar"
6296
msgstr ""
6297
6298
#: serverguide/C/vcs.xml:18(para)
6299
msgid ""
6300
"Bazaar is a new version control system sponsored by Canonical, the "
6301
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6302
"support a central repository model, Bazaar also supports "
6303
"<emphasis>distributed version control</emphasis>, giving people the ability "
6304
"to collaborate more efficiently. In particular, Bazaar is designed to "
6305
"maximize the level of community participation in open source projects."
6306
msgstr ""
6307
6308
#: serverguide/C/vcs.xml:29(para)
6309
msgid ""
6310
"At a terminal prompt, enter the following command to install "
6311
"<application>bzr</application>: <screen>\n"
6312
"<command>sudo apt-get install bzr</command>\n"
6313
"</screen>"
6314
msgstr ""
6315
6316
#: serverguide/C/vcs.xml:40(para)
6317
msgid ""
6318
"To introduce yourself to <application>bzr</application>, use the "
6319
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6320
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6321
"</screen>"
6322
msgstr ""
6323
6324
#: serverguide/C/vcs.xml:49(title)
6325
msgid "Learning Bazaar"
6326
msgstr ""
6327
6328
#: serverguide/C/vcs.xml:50(para)
6329
msgid ""
6330
"Bazaar comes with bundled documentation installed into "
6331
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6332
"is a good place to start. The <application>bzr</application> command also "
6333
"comes with built-in help: <screen>\n"
6334
"<command>$ bzr help</command>\n"
6335
"</screen>"
6336
msgstr ""
6337
6338
#: serverguide/C/vcs.xml:60(para)
6339
msgid ""
6340
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6341
"<command>$ bzr help foo</command>\n"
6342
"</screen>"
6343
msgstr ""
6344
6345
#: serverguide/C/vcs.xml:68(title)
6346
msgid "Launchpad Integration"
6347
msgstr ""
6348
6349
#: serverguide/C/vcs.xml:69(para)
6350
msgid ""
6351
"While highly useful as a stand-alone system, Bazaar has good, optional "
6352
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6353
"the collaborative development system used by Canonical and the broader open "
6354
"source community to manage and extend Ubuntu itself. For information on how "
6355
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6356
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6357
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6358
msgstr ""
6359
6360
#: serverguide/C/vcs.xml:81(title)
6361
msgid "Subversion"
6362
msgstr ""
6363
6364
#: serverguide/C/vcs.xml:82(para)
6365
msgid ""
6366
"Subversion is an open source version control system. Using Subversion, you "
6367
"can record the history of source files and documents. It manages files and "
6368
"directories over time. A tree of files is placed into a central repository. "
6369
"The repository is much like an ordinary file server, except that it "
6370
"remembers every change ever made to files and directories."
6371
msgstr ""
6372
6373
#: serverguide/C/vcs.xml:87(para)
6374
msgid ""
6375
"To access Subversion repository using the HTTP protocol, you must install "
6376
"and configure a web server. Apache2 is proven to work with Subversion. "
6377
"Please refer to the HTTP subsection in the Apache2 section to install and "
6378
"configure Apache2. To access the Subversion repository using the HTTPS "
6379
"protocol, you must install and configure a digital certificate in your "
6380
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6381
"section to install and configure the digital certificate."
6382
msgstr ""
6383
6384
#: serverguide/C/vcs.xml:96(para)
6385
msgid ""
6386
"To install Subversion, run the following command from a terminal prompt:"
6387
msgstr ""
6388
6389
#: serverguide/C/vcs.xml:101(command)
6390
msgid "sudo apt-get install subversion libapache2-svn"
6391
msgstr ""
6392
6393
#: serverguide/C/vcs.xml:108(para)
6394
msgid ""
6395
"This step assumes you have installed above mentioned packages on your "
6396
"system. This section explains how to create a Subversion repository and "
6397
"access the project."
6398
msgstr ""
6399
6400
#: serverguide/C/vcs.xml:111(title)
6401
msgid "Create Subversion Repository"
6402
msgstr ""
6403
6404
#: serverguide/C/vcs.xml:112(para)
6405
msgid ""
6406
"The Subversion repository can be created using the following command from a "
6407
"terminal prompt:"
6408
msgstr ""
6409
6410
#: serverguide/C/vcs.xml:116(command)
6411
msgid "svnadmin create /path/to/repos/project"
6412
msgstr ""
6413
6414
#: serverguide/C/vcs.xml:121(title)
6415
msgid "Importing Files"
6416
msgstr ""
6417
6418
#: serverguide/C/vcs.xml:122(para)
6419
msgid ""
6420
"Once you create the repository you can <emphasis>import</emphasis> files "
6421
"into the repository. To import a directory, enter the following from a "
6422
"terminal prompt: <screen>\n"
6423
"<command>svn import /path/to/import/directory "
6424
"file:///path/to/repos/project</command>\n"
6425
"</screen>"
6426
msgstr ""
6427
6428
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6429
msgid "Access Methods"
6430
msgstr ""
6431
6432
#: serverguide/C/vcs.xml:135(para)
6433
msgid ""
6434
"Subversion repositories can be accessed (checked out) through many different "
6435
"methods --on local disk, or through various network protocols. A repository "
6436
"location, however, is always a URL. The table describes how different URL "
6437
"schemes map to the available access methods."
6438
msgstr ""
6439
6440
#: serverguide/C/vcs.xml:146(para)
6441
msgid "Schema"
6442
msgstr ""
6443
6444
#: serverguide/C/vcs.xml:147(para)
6445
msgid "Access Method"
6446
msgstr ""
6447
6448
#: serverguide/C/vcs.xml:152(para)
6449
msgid "file://"
6450
msgstr ""
6451
6452
#: serverguide/C/vcs.xml:153(para)
6453
msgid "direct repository access (on local disk)"
6454
msgstr ""
6455
6456
#: serverguide/C/vcs.xml:156(para)
6457
msgid "http://"
6458
msgstr ""
6459
6460
#: serverguide/C/vcs.xml:157(para)
6461
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6462
msgstr ""
6463
6464
#: serverguide/C/vcs.xml:160(para)
6465
msgid "https://"
6466
msgstr ""
6467
6468
#: serverguide/C/vcs.xml:161(para)
6469
msgid "Same as http://, but with SSL encryption"
6470
msgstr ""
6471
6472
#: serverguide/C/vcs.xml:164(para)
6473
msgid "svn://"
6474
msgstr ""
6475
6476
#: serverguide/C/vcs.xml:165(para)
6477
msgid "Access via custom protocol to an svnserve server"
6478
msgstr ""
6479
6480
#: serverguide/C/vcs.xml:168(para)
6481
msgid "svn+ssh://"
6482
msgstr ""
6483
6484
#: serverguide/C/vcs.xml:169(para)
6485
msgid "Same as svn://, but through an SSH tunnel"
6486
msgstr ""
6487
6488
#: serverguide/C/vcs.xml:175(para)
6489
msgid ""
6490
"In this section, we will see how to configure Subversion for all these "
6491
"access methods. Here, we cover the basics. For more advanced usage details, "
6492
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6493
msgstr ""
6494
6495
#: serverguide/C/vcs.xml:182(title)
6496
msgid "Direct repository access (file://)"
6497
msgstr ""
6498
6499
#: serverguide/C/vcs.xml:183(para)
6500
msgid ""
6501
"This is the simplest of all access methods. It does not require any "
6502
"Subversion server process to be running. This access method is used to "
6503
"access Subversion from the same machine. The syntax of the command, entered "
6504
"at a terminal prompt, is as follows:"
6505
msgstr ""
6506
6507
#: serverguide/C/vcs.xml:190(command)
6508
msgid "svn co file:///path/to/repos/project"
6509
msgstr ""
6510
6511
#: serverguide/C/vcs.xml:193(para)
6512
msgid "or"
6513
msgstr ""
6514
6515
#: serverguide/C/vcs.xml:196(command)
6516
msgid "svn co file://localhost/path/to/repos/project"
6517
msgstr ""
6518
6519
#: serverguide/C/vcs.xml:200(para)
6520
msgid ""
6521
"If you do not specify the hostname, there are three forward slashes (///) -- "
6522
"two for the protocol (file, in this case) plus the leading slash in the "
6523
"path. If you specify the hostname, you must use two forward slashes (//)."
6524
msgstr ""
6525
6526
#: serverguide/C/vcs.xml:202(para)
6527
msgid ""
6528
"The repository permissions depend on filesystem permissions. If the user has "
6529
"read/write permission, he can checkout from and commit to the repository."
6530
msgstr ""
6531
6532
#: serverguide/C/vcs.xml:205(title)
6533
msgid "Access via WebDAV protocol (http://)"
6534
msgstr ""
6535
6536
#: serverguide/C/vcs.xml:206(para)
6537
msgid ""
6538
"To access the Subversion repository via WebDAV protocol, you must configure "
6539
"your Apache 2 web server. Add the following snippet between the "
6540
"<emphasis><VirtualHost></emphasis> and "
6541
"<emphasis></VirtualHost></emphasis> elements in "
6542
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6543
"VirtualHost file:"
6544
msgstr ""
6545
6546
#: serverguide/C/vcs.xml:212(programlisting)
6547
#, no-wrap
6548
msgid ""
6549
"\n"
6550
" <Location /svn>\n"
6551
" DAV svn\n"
6552
" SVNPath /home/svn\n"
6553
" AuthType Basic\n"
6554
" AuthName \"Your repository name\"\n"
6555
" AuthUserFile /etc/subversion/passwd\n"
6556
" Require valid-user\n"
6557
" </Location> \n"
6558
msgstr ""
6559
6560
#: serverguide/C/vcs.xml:223(para)
6561
msgid ""
6562
"The above configuration snippet assumes that Subversion repositories are "
6563
"created under <filename>/home/svn/</filename> directory using "
6564
"<command>svnadmin</command> command. They can be accessible using "
6565
"<command>http://hostname/svn/repos_name</command> url."
6566
msgstr ""
6567
6568
#: serverguide/C/vcs.xml:229(para)
6569
msgid ""
6570
"To import or commit files to your Subversion repository over HTTP, the "
6571
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6572
"HTTP user is <command>www-data</command>. To change the ownership of the "
6573
"repository files enter the following command from terminal prompt:"
6574
msgstr ""
6575
6576
#: serverguide/C/vcs.xml:238(command)
6577
msgid "sudo chown -R www-data:www-data /path/to/repos"
6578
msgstr ""
6579
6580
#: serverguide/C/vcs.xml:241(para)
6581
msgid ""
6582
"By changing the ownership of repository as <command>www-data</command> you "
6583
"will not be able to import or commit files into the repository by running "
6584
"<command>svn import file:///</command> command as any user other than "
6585
"<command>www-data</command>."
6586
msgstr ""
6587
6588
#: serverguide/C/vcs.xml:250(para)
6589
msgid ""
6590
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6591
"that will contain user authentication details. To create a file issue the "
6592
"following command at a command prompt (which will create the file and add "
6593
"the first user):"
6594
msgstr ""
6595
6596
#: serverguide/C/vcs.xml:256(command)
6597
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6598
msgstr ""
6599
6600
#: serverguide/C/vcs.xml:259(para)
6601
msgid ""
6602
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6603
"option replaces the old file. Instead use this form:"
6604
msgstr ""
6605
6606
#: serverguide/C/vcs.xml:264(command)
6607
msgid "sudo htpasswd /etc/subversion/password user_name"
6608
msgstr ""
6609
6610
#: serverguide/C/vcs.xml:268(para)
6611
msgid ""
6612
"This command will prompt you to enter the password. Once you enter the "
6613
"password, the user is added. Now, to access the repository you can run the "
6614
"following command:"
6615
msgstr ""
6616
6617
#: serverguide/C/vcs.xml:269(command)
6618
msgid "svn co http://servername/svn"
6619
msgstr ""
6620
6621
#: serverguide/C/vcs.xml:271(para)
6622
msgid ""
6623
"The password is transmitted as plain text. If you are worried about password "
6624
"snooping, you are advised to use SSL encryption. For details, please refer "
6625
"next section."
6626
msgstr ""
6627
6628
#: serverguide/C/vcs.xml:277(title)
6629
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6630
msgstr ""
6631
6632
#: serverguide/C/vcs.xml:278(para)
6633
msgid ""
6634
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6635
"(https://) is similar to http:// except that you must install and configure "
6636
"the digital certificate in your Apache2 web server. To use SSL with "
6637
"Subversion add the above Apache2 configuration to "
6638
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6639
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6640
"configuration\"/>."
6641
msgstr ""
6642
6643
#: serverguide/C/vcs.xml:287(para)
6644
msgid ""
6645
"You can install a digital certificate issued by a signing authority. "
6646
"Alternatively, you can install your own self-signed certificate."
6647
msgstr ""
6648
6649
#: serverguide/C/vcs.xml:292(para)
6650
msgid ""
6651
"This step assumes you have installed and configured a digital certificate in "
6652
"your Apache 2 web server. Now, to access the Subversion repository, please "
6653
"refer to the above section! The access methods are exactly the same, except "
6654
"the protocol. You must use https:// to access the Subversion repository."
6655
msgstr ""
6656
6657
#: serverguide/C/vcs.xml:302(title)
6658
msgid "Access via custom protocol (svn://)"
6659
msgstr ""
6660
6661
#: serverguide/C/vcs.xml:303(para)
6662
msgid ""
6663
"Once the Subversion repository is created, you can configure the access "
6664
"control. You can edit the <filename> "
6665
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6666
"access control. For example, to set up authentication, you can uncomment the "
6667
"following lines in the configuration file:"
6668
msgstr ""
6669
6670
#: serverguide/C/vcs.xml:310(programlisting)
6671
#, no-wrap
6672
msgid ""
6673
"# [general]\n"
6674
"# password-db = passwd"
6675
msgstr ""
6676
6677
#: serverguide/C/vcs.xml:313(para)
6678
msgid ""
6679
"After uncommenting the above lines, you can maintain the user list in the "
6680
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6681
"directory and add the new user. The syntax is as follows:"
6682
msgstr ""
6683
6684
#: serverguide/C/vcs.xml:319(programlisting)
6685
#, no-wrap
6686
msgid "username = password"
6687
msgstr ""
6688
6689
#: serverguide/C/vcs.xml:320(para)
6690
msgid "For more details, please refer to the file."
6691
msgstr ""
6692
6693
#: serverguide/C/vcs.xml:324(para)
6694
msgid ""
6695
"Now, to access Subversion via the svn:// custom protocol, either from the "
6696
"same machine or a different machine, you can run svnserver using svnserve "
6697
"command. The syntax is as follows:"
6698
msgstr ""
6699
6700
#: serverguide/C/vcs.xml:329(programlisting)
6701
#, no-wrap
6702
msgid ""
6703
"$ svnserve -d --foreground -r /path/to/repos\n"
6704
"# -d -- daemon mode\n"
6705
"# --foreground -- run in foreground (useful for debugging)\n"
6706
"# -r -- root of directory to serve\n"
6707
"\n"
6708
"For more usage details, please refer to:\n"
6709
"$ svnserve --help"
6710
msgstr ""
6711
6712
#: serverguide/C/vcs.xml:337(para)
6713
msgid ""
6714
"Once you run this command, Subversion starts listening on default port "
6715
"(3690). To access the project repository, you must run the following command "
6716
"from a terminal prompt:"
6717
msgstr ""
6718
6719
#: serverguide/C/vcs.xml:340(command)
6720
msgid "svn co svn://hostname/project project --username user_name"
6721
msgstr ""
6722
6723
#: serverguide/C/vcs.xml:343(para)
6724
msgid ""
6725
"Based on server configuration, it prompts for password. Once you are "
6726
"authenticated, it checks out the code from Subversion repository. To "
6727
"synchronize the project repository with the local copy, you can run the "
6728
"<command>update</command> sub-command. The syntax of the command, entered at "
6729
"a terminal prompt, is as follows:"
6730
msgstr ""
6731
6732
#: serverguide/C/vcs.xml:351(command)
6733
msgid "cd project_dir ; svn update"
6734
msgstr ""
6735
6736
#: serverguide/C/vcs.xml:354(para)
6737
msgid ""
6738
"For more details about using each Subversion sub-command, you can refer to "
6739
"the manual. For example, to learn more about the co (checkout) command, "
6740
"please run the following command from a terminal prompt:"
6741
msgstr ""
6742
6743
#: serverguide/C/vcs.xml:358(command)
6744
msgid "svn co help"
6745
msgstr ""
6746
6747
#: serverguide/C/vcs.xml:362(title)
6748
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
6749
msgstr ""
6750
6751
#: serverguide/C/vcs.xml:363(para)
6752
msgid ""
6753
"The configuration and server process is same as in the svn:// method. For "
6754
"details, please refer to the above section. This step assumes you have "
6755
"followed the above step and started the Subversion server using "
6756
"<application>svnserve</application> command."
6757
msgstr ""
6758
6759
#: serverguide/C/vcs.xml:369(para)
6760
msgid ""
6761
"It is also assumed that the ssh server is running on that machine and that "
6762
"it is allowing incoming connections. To confirm, please try to login to that "
6763
"machine using ssh. If you can login, everything is perfect. If you cannot "
6764
"login, please address it before continuing further."
6765
msgstr ""
6766
6767
#: serverguide/C/vcs.xml:375(para)
6768
msgid ""
6769
"The svn+ssh:// protocol is used to access the Subversion repository using "
6770
"SSL encryption. The data transfer is encrypted using this method. To access "
6771
"the project repository (for example with a checkout), you must use the "
6772
"following command syntax:"
6773
msgstr ""
6774
6775
#: serverguide/C/vcs.xml:382(command)
6776
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
6777
msgstr ""
6778
6779
#: serverguide/C/vcs.xml:386(para)
6780
msgid ""
6781
"You must use the full path (/path/to/repos/project) to access the Subversion "
6782
"repository using this access method."
6783
msgstr ""
6784
6785
#: serverguide/C/vcs.xml:389(para)
6786
msgid ""
6787
"Based on server configuration, it prompts for password. You must enter the "
6788
"password you use to login via ssh. Once you are authenticated, it checks out "
6789
"the code from the Subversion repository."
6790
msgstr ""
6791
6792
#: serverguide/C/vcs.xml:399(title)
6793
msgid "CVS Server"
6794
msgstr ""
6795
6796
#: serverguide/C/vcs.xml:400(para)
6797
msgid ""
6798
"CVS is a version control system. You can use it to record the history of "
6799
"source files."
6800
msgstr ""
6801
6802
#: serverguide/C/vcs.xml:406(para)
6803
msgid ""
6804
"To install <application>CVS</application>, run the following command from a "
6805
"terminal prompt: <screen>\n"
6806
"<command>sudo apt-get install cvs</command>\n"
6807
"</screen> After you install <application>cvs</application>, you should "
6808
"install <application>xinetd</application> to start/stop the cvs server. At "
6809
"the prompt, enter the following command to install "
6810
"<application>xinetd</application>: <screen>\n"
6811
"<command>sudo apt-get install xinetd</command>\n"
6812
"</screen>"
6813
msgstr ""
6814
6815
#: serverguide/C/vcs.xml:439(programlisting)
6816
#, no-wrap
6817
msgid ""
6818
"\n"
6819
"service cvspserver\n"
6820
"{\n"
6821
" port = 2401\n"
6822
" socket_type = stream\n"
6823
" protocol = tcp\n"
6824
" user = root\n"
6825
" wait = no\n"
6826
" type = UNLISTED\n"
6827
" server = /usr/bin/cvs\n"
6828
" server_args = -f --allow-root /var/lib/cvs pserver\n"
6829
" disable = no\n"
6830
"}\n"
6831
msgstr ""
6832
6833
#: serverguide/C/vcs.xml:455(para)
6834
msgid ""
6835
"Be sure to edit the repository if you have changed the default repository "
6836
"(<application>/var/lib/cvs</application>) directory."
6837
msgstr ""
6838
6839
#: serverguide/C/vcs.xml:424(para)
6840
msgid ""
6841
"Once you install cvs, the repository will be automatically initialized. By "
6842
"default, the repository resides under the "
6843
"<application>/var/lib/cvs</application> directory. You can change this path "
6844
"by running following command: <screen>\n"
6845
"<command>cvs -d /your/new/cvs/repo init</command>\n"
6846
"</screen> Once the initial repository is set up, you can configure "
6847
"<application>xinetd</application> to start the CVS server. You can copy the "
6848
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
6849
"<placeholder-1/><placeholder-2/> Once you have configured "
6850
"<application>xinetd</application> you can start the cvs server by running "
6851
"following command: <screen>\n"
6852
"<command>sudo /etc/init.d/xinetd restart</command>\n"
6853
"</screen>"
6854
msgstr ""
6855
6856
#: serverguide/C/vcs.xml:468(para)
6857
msgid ""
6858
"You can confirm that the CVS server is running by issuing the following "
6859
"command:"
6860
msgstr ""
6861
6862
#: serverguide/C/vcs.xml:475(command)
6863
msgid "sudo netstat -tap | grep cvs"
6864
msgstr ""
6865
6866
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
6867
msgid ""
6868
"When you run this command, you should see the following line or something "
6869
"similar:"
6870
msgstr ""
6871
6872
#: serverguide/C/vcs.xml:484(programlisting)
6873
#, no-wrap
6874
msgid ""
6875
"\n"
6876
"tcp 0 0 *:cvspserver *:* LISTEN \n"
6877
msgstr ""
6878
6879
#: serverguide/C/vcs.xml:488(para)
6880
msgid ""
6881
"From here you can continue to add users, add new projects, and manage the "
6882
"CVS server."
6883
msgstr ""
6884
6885
#: serverguide/C/vcs.xml:493(para)
6886
msgid ""
6887
"CVS allows the user to add users independently of the underlying OS "
6888
"installation. Probably the easiest way is to use the Linux Users for CVS, "
6889
"although it has potential security issues. Please refer to the CVS manual "
6890
"for details."
6891
msgstr ""
6892
6893
#: serverguide/C/vcs.xml:503(title)
6894
msgid "Add Projects"
6895
msgstr ""
6896
6897
#: serverguide/C/vcs.xml:515(para)
6898
msgid ""
6899
"You can use the CVSROOT environment variable to store the CVS root "
6900
"directory. Once you export the CVSROOT environment variable, you can avoid "
6901
"using -d option in the above cvs command."
6902
msgstr ""
6903
6904
#: serverguide/C/vcs.xml:527(para)
6905
msgid ""
6906
"When you add a new project, the CVS user you use must have write access to "
6907
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
6908
"the <application>src</application> group has write access to the CVS "
6909
"repository. So, you can add the user to this group, and he can then add and "
6910
"manage projects in the CVS repository."
6911
msgstr ""
6912
6913
#: serverguide/C/vcs.xml:504(para)
6914
msgid ""
6915
"This section explains how to add new project to the CVS repository. Create "
6916
"the directory and add necessary document and source files to the directory. "
6917
"Now, run the following command to add this project to CVS repository: "
6918
"<screen>\n"
6919
"<command>cd your/project</command>\n"
6920
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
6921
"\"Importing my project to CVS repository\" . new_project start</command>\n"
6922
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
6923
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
6924
"purpose in this context, but since CVS requires them, they must be present. "
6925
"<placeholder-2/>"
6926
msgstr ""
6927
6928
#: serverguide/C/vcs.xml:540(ulink)
6929
msgid "Bazaar Home Page"
6930
msgstr ""
6931
6932
#: serverguide/C/vcs.xml:541(ulink)
6933
msgid "Launchpad"
6934
msgstr ""
6935
6936
#: serverguide/C/vcs.xml:542(ulink)
6937
msgid "Subversion Home Page"
6938
msgstr ""
6939
6940
#: serverguide/C/vcs.xml:543(ulink)
6941
msgid "Subversion Book"
6942
msgstr ""
6943
6944
#: serverguide/C/vcs.xml:545(ulink)
6945
msgid "CVS Manual"
6946
msgstr ""
6947
6948
#: serverguide/C/vcs.xml:546(ulink)
6949
msgid "Easy Bazaar Ubuntu Wiki page"
6950
msgstr ""
6951
6952
#: serverguide/C/vcs.xml:547(ulink)
6953
msgid "Ubuntu Wiki Subversion page"
6954
msgstr ""
6955
6956
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
6957
msgid "Credits and License"
6958
msgstr ""
6959
6960
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
6961
msgid ""
6962
"This document is maintained by the Ubuntu documentation team "
6963
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
6964
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
6965
msgstr ""
6966
6967
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
6968
msgid ""
6969
"This document is made available under the Creative Commons ShareAlike 2.5 "
6970
"License (CC-BY-SA)."
6971
msgstr ""
6972
6973
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
6974
msgid ""
6975
"You are free to modify, extend, and improve the Ubuntu documentation source "
6976
"code under the terms of this license. All derivative works must be released "
6977
"under this license."
6978
msgstr ""
6979
6980
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
6981
msgid ""
6982
"This documentation is distributed in the hope that it will be useful, but "
6983
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
6984
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
6985
msgstr ""
6986
6987
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
6988
msgid ""
6989
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
6990
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
6991
msgstr ""
6992
6993
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
6994
msgid "2008"
6995
msgstr ""
6996
6997
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
6998
msgid "Ubuntu Documentation Project"
6999
msgstr ""
7000
7001
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7002
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7003
msgstr ""
7004
7005
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7006
msgid "The Ubuntu Documentation Project"
7007
msgstr ""
7008
7009
#: serverguide/C/serverguide.xml:17(para)
7010
msgid ""
7011
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7012
"information on how to install and configure various server applications on "
7013
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7014
"guide for configuring and customizing your system."
7015
msgstr ""
7016
7017
#: serverguide/C/security.xml:13(title)
7018
msgid "Security"
7019
msgstr ""
7020
7021
#: serverguide/C/security.xml:14(para)
7022
msgid ""
7023
"Security should always be considered when installing, deploying, and using "
7024
"any type of computer system. Although a fresh installation of Ubuntu is "
7025
"relatively safe for immediate use on the Internet, it is important to have a "
7026
"balanced understanding of your systems security posture based on how it will "
7027
"be used after deployment."
7028
msgstr ""
7029
7030
#: serverguide/C/security.xml:17(para)
7031
msgid ""
7032
"This chapter provides an overview of security related topics as they pertain "
7033
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7034
"to protect your server and network from any number of potential security "
7035
"threats."
7036
msgstr ""
7037
7038
#: serverguide/C/security.xml:21(title)
7039
msgid "User Management"
7040
msgstr ""
7041
7042
#: serverguide/C/security.xml:22(para)
7043
msgid ""
7044
"User management is a critical part of maintaining a secure system. "
7045
"Ineffective user and privilege management often lead many systems into being "
7046
"compromised. Therefore, it is important that you understand how you can "
7047
"protect your server through simple and effective user account management "
7048
"techniques."
7049
msgstr ""
7050
7051
#: serverguide/C/security.xml:26(title)
7052
msgid "Where is root?"
7053
msgstr ""
7054
7055
#: serverguide/C/security.xml:27(para)
7056
msgid ""
7057
"Ubuntu developers made a conscientious decision to disable the "
7058
"administrative root account by default in all Ubuntu installations. This "
7059
"does not mean that the root account has been deleted or that it may not be "
7060
"accessed. It merely has been given a password which matches no possible "
7061
"encrypted value, therefore may not log in directly by itself."
7062
msgstr ""
7063
7064
#: serverguide/C/security.xml:30(para)
7065
msgid ""
7066
"Instead, users are encouraged to make use of a tool by the name of "
7067
"<application>sudo</application> to carry out system administrative duties. "
7068
"<application>Sudo</application> allows an authorized user to temporarily "
7069
"elevate their privileges using their own password instead of having to know "
7070
"the password belonging to the root account. This simple yet effective "
7071
"methodology provides accountability for all user actions, and gives the "
7072
"administrator granular control over which actions a user can perform with "
7073
"said privileges."
7074
msgstr ""
7075
7076
#: serverguide/C/security.xml:35(para)
7077
msgid ""
7078
"If for some reason you wish to enable the root account, simply give it a "
7079
"password:"
7080
msgstr ""
7081
7082
#: serverguide/C/security.xml:39(command)
7083
msgid "sudo passwd"
7084
msgstr ""
7085
7086
#: serverguide/C/security.xml:41(para)
7087
msgid ""
7088
"Sudo will prompt you for your password, and then ask you to supply a new "
7089
"password for root as shown below:"
7090
msgstr ""
7091
7092
#: serverguide/C/security.xml:44(userinput)
7093
#, no-wrap
7094
msgid "(enter your own password)"
7095
msgstr ""
7096
7097
#: serverguide/C/security.xml:45(userinput)
7098
#, no-wrap
7099
msgid "(enter a new password for root)"
7100
msgstr ""
7101
7102
#: serverguide/C/security.xml:46(userinput)
7103
#, no-wrap
7104
msgid "(repeat new password for root)"
7105
msgstr ""
7106
7107
#: serverguide/C/security.xml:44(computeroutput)
7108
#, no-wrap
7109
msgid ""
7110
"[sudo] password for username: <placeholder-1/>\n"
7111
"Enter new UNIX password: <placeholder-2/>\n"
7112
"Retype new UNIX password: <placeholder-3/>\n"
7113
"passwd: password updated successfully"
7114
msgstr ""
7115
7116
#: serverguide/C/security.xml:51(para)
7117
msgid "To disable the root account, use the following passwd syntax:"
7118
msgstr ""
7119
7120
#: serverguide/C/security.xml:55(command)
7121
msgid "sudo passwd -l root"
7122
msgstr ""
7123
7124
#: serverguide/C/security.xml:59(para)
7125
msgid ""
7126
"You should read more on <application>Sudo</application> by checking out it's "
7127
"man page:"
7128
msgstr ""
7129
7130
#: serverguide/C/security.xml:63(command)
7131
msgid "man sudo"
7132
msgstr ""
7133
7134
#: serverguide/C/security.xml:67(para)
7135
msgid ""
7136
"By default, the initial user created by the Ubuntu installer is a member of "
7137
"the group \"admin\" which is added to the file "
7138
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7139
"give any other account full root access through "
7140
"<application>sudo</application>, simply add them to the admin group."
7141
msgstr ""
7142
7143
#: serverguide/C/security.xml:73(title)
7144
msgid "Adding and Deleting Users"
7145
msgstr ""
7146
7147
#: serverguide/C/security.xml:74(para)
7148
msgid ""
7149
"The process for managing local users and groups is straight forward and "
7150
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7151
"other Debian based distributions, encourage the use of the \"adduser\" "
7152
"package for account management."
7153
msgstr ""
7154
7155
#: serverguide/C/security.xml:79(para)
7156
msgid ""
7157
"To add a user account, use the following syntax, and follow the prompts to "
7158
"give the account a password and identifiable characteristics such as a full "
7159
"name, phone number, etc."
7160
msgstr ""
7161
7162
#: serverguide/C/security.xml:83(command)
7163
msgid "sudo adduser username"
7164
msgstr ""
7165
7166
#: serverguide/C/security.xml:87(para)
7167
msgid ""
7168
"To delete a user account and its primary group, use the following syntax:"
7169
msgstr ""
7170
7171
#: serverguide/C/security.xml:91(command)
7172
msgid "sudo deluser username"
7173
msgstr ""
7174
7175
#: serverguide/C/security.xml:93(para)
7176
msgid ""
7177
"Deleting an account does not remove their respective home folder. It is up "
7178
"to you whether or not you wish to delete the folder manually or keep it "
7179
"according to your desired retention policies."
7180
msgstr ""
7181
7182
#: serverguide/C/security.xml:96(para)
7183
msgid ""
7184
"Remember, any user added later on with the same UID/GID as the previous "
7185
"owner will now have access to this folder if you have not taken the "
7186
"necessary precautions."
7187
msgstr ""
7188
7189
#: serverguide/C/security.xml:99(para)
7190
msgid ""
7191
"You may want to change these UID/GID values to something more appropriate, "
7192
"such as the root account, and perhaps even relocate the folder to avoid "
7193
"future conflicts:"
7194
msgstr ""
7195
7196
#: serverguide/C/security.xml:103(command)
7197
msgid "sudo chown -R root:root /home/username/"
7198
msgstr ""
7199
7200
#: serverguide/C/security.xml:104(command)
7201
msgid "sudo mkdir /home/archived_users/"
7202
msgstr ""
7203
7204
#: serverguide/C/security.xml:105(command)
7205
msgid "sudo mv /home/username /home/archived_users/"
7206
msgstr ""
7207
7208
#: serverguide/C/security.xml:109(para)
7209
msgid ""
7210
"To temporarily lock or unlock a user account, use the following syntax, "
7211
"respectively:"
7212
msgstr ""
7213
7214
#: serverguide/C/security.xml:113(command)
7215
msgid "sudo passwd -l username"
7216
msgstr ""
7217
7218
#: serverguide/C/security.xml:114(command)
7219
msgid "sudo passwd -u username"
7220
msgstr ""
7221
7222
#: serverguide/C/security.xml:118(para)
7223
msgid ""
7224
"To add or delete a personalized group, use the following syntax, "
7225
"respectively:"
7226
msgstr ""
7227
7228
#: serverguide/C/security.xml:122(command)
7229
msgid "sudo addgroup groupname"
7230
msgstr ""
7231
7232
#: serverguide/C/security.xml:123(command)
7233
msgid "sudo delgroup groupname"
7234
msgstr ""
7235
7236
#: serverguide/C/security.xml:127(para)
7237
msgid "To add a user to a group, use the following syntax:"
7238
msgstr ""
7239
7240
#: serverguide/C/security.xml:131(command)
7241
msgid "sudo adduser username groupname"
7242
msgstr ""
7243
7244
#: serverguide/C/security.xml:138(title)
7245
msgid "User Profile Security"
7246
msgstr ""
7247
7248
#: serverguide/C/security.xml:139(para)
7249
msgid ""
7250
"When a new user is created, the adduser utility creates a brand new home "
7251
"directory named <filename class=\"directory\">/home/username</filename>, "
7252
"respectively. The default profile is modeled after the contents found in the "
7253
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7254
"includes all profile basics."
7255
msgstr ""
7256
7257
#: serverguide/C/security.xml:142(para)
7258
msgid ""
7259
"If your server will be home to multiple users, you should pay close "
7260
"attention to the user home directory permissions to ensure confidentiality. "
7261
"By default, user home directories in Ubuntu are created with world "
7262
"read/execute permissions. This means that all users can browse and access "
7263
"the contents of other users home directories. This may not be suitable for "
7264
"your environment."
7265
msgstr ""
7266
7267
#: serverguide/C/security.xml:147(para)
7268
msgid ""
7269
"To verify your current users home directory permissions, use the following "
7270
"syntax:"
7271
msgstr ""
7272
7273
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7274
msgid "ls -ld /home/username"
7275
msgstr ""
7276
7277
#: serverguide/C/security.xml:153(para)
7278
msgid ""
7279
"The following output shows that the directory <filename "
7280
"class=\"directory\">/home/username</filename> has world readable permissions:"
7281
msgstr ""
7282
7283
#: serverguide/C/security.xml:156(computeroutput)
7284
#, no-wrap
7285
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7286
msgstr ""
7287
7288
#: serverguide/C/security.xml:160(para)
7289
msgid ""
7290
"You can remove the world readable permissions using the following syntax:"
7291
msgstr ""
7292
7293
#: serverguide/C/security.xml:164(command)
7294
msgid "sudo chmod 0750 /home/username"
7295
msgstr ""
7296
7297
#: serverguide/C/security.xml:167(para)
7298
msgid ""
7299
"Some people tend to use the recursive option (-R) indiscriminately which "
7300
"modifies all child folders and files, but this is not necessary, and may "
7301
"yield other undesirable results. The parent directory alone is sufficient "
7302
"for preventing unauthorized access to anything below the parent."
7303
msgstr ""
7304
7305
#: serverguide/C/security.xml:171(para)
7306
msgid ""
7307
"A much more efficient approach to the matter would be to modify the "
7308
"<application>adduser</application> global default permissions when creating "
7309
"user home folders. Simply edit the file "
7310
"<filename>/etc/adduser.conf</filename> and modify the "
7311
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7312
"new home directories will receive the correct permissions."
7313
msgstr ""
7314
7315
#: serverguide/C/security.xml:174(programlisting)
7316
#, no-wrap
7317
msgid ""
7318
"\n"
7319
"DIR_MODE=0750\n"
7320
msgstr ""
7321
7322
#: serverguide/C/security.xml:179(para)
7323
msgid ""
7324
"After correcting the directory permissions using any of the previously "
7325
"mentioned techniques, verify the results using the following syntax:"
7326
msgstr ""
7327
7328
#: serverguide/C/security.xml:185(para)
7329
msgid ""
7330
"The results below show that world readable permissions have been removed:"
7331
msgstr ""
7332
7333
#: serverguide/C/security.xml:188(computeroutput)
7334
#, no-wrap
7335
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7336
msgstr ""
7337
7338
#: serverguide/C/security.xml:195(title)
7339
msgid "Password Policy"
7340
msgstr ""
7341
7342
#: serverguide/C/security.xml:196(para)
7343
msgid ""
7344
"A strong password policy is one of the most important aspects of your "
7345
"security posture. Many successful security breaches involve simple brute "
7346
"force and dictionary attacks against weak passwords. If you intend to offer "
7347
"any form of remote access involving your local password system, make sure "
7348
"you adequately address minimum password complexity requirements, maximum "
7349
"password lifetimes, and frequent audits of your authentication systems."
7350
msgstr ""
7351
7352
#: serverguide/C/security.xml:200(title)
7353
msgid "Minimum Password Length"
7354
msgstr ""
7355
7356
#: serverguide/C/security.xml:201(para)
7357
msgid ""
7358
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7359
"well as some basic entropy checks. These values are controlled in the file "
7360
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7361
msgstr ""
7362
7363
#: serverguide/C/security.xml:204(programlisting)
7364
#, no-wrap
7365
msgid ""
7366
"\n"
7367
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7368
msgstr ""
7369
7370
#: serverguide/C/security.xml:207(para)
7371
msgid ""
7372
"If you would like to adjust the minimum length to 6 characters, change the "
7373
"appropriate variable to min=6. The modification is outlined below."
7374
msgstr ""
7375
7376
#: serverguide/C/security.xml:210(programlisting)
7377
#, no-wrap
7378
msgid ""
7379
"\n"
7380
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7381
msgstr ""
7382
7383
#: serverguide/C/security.xml:214(para)
7384
msgid ""
7385
"The <varname>max=8</varname> variable does not represent the maximum length "
7386
"of a password. It only means that complexity requirements will not be "
7387
"checked on passwords over 8 characters. You may want to look at the "
7388
"<application>libpam-cracklib</application> package for additional password "
7389
"entropy assistance."
7390
msgstr ""
7391
7392
#: serverguide/C/security.xml:220(title)
7393
msgid "Password Expiration"
7394
msgstr ""
7395
7396
#: serverguide/C/security.xml:221(para)
7397
msgid ""
7398
"When creating user accounts, you should make it a policy to have a minimum "
7399
"and maximum password age forcing users to change their passwords when they "
7400
"expire."
7401
msgstr ""
7402
7403
#: serverguide/C/security.xml:226(para)
7404
msgid ""
7405
"To easily view the current status of a user account, use the following "
7406
"syntax:"
7407
msgstr ""
7408
7409
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7410
msgid "sudo chage -l username"
7411
msgstr ""
7412
7413
#: serverguide/C/security.xml:232(para)
7414
msgid ""
7415
"The output below shows interesting facts about the user account, namely that "
7416
"there are no policies applied:"
7417
msgstr ""
7418
7419
#: serverguide/C/security.xml:235(computeroutput)
7420
#, no-wrap
7421
msgid ""
7422
"Last password change : Jan 20, 2008\n"
7423
"Password expires : never\n"
7424
"Password inactive : never\n"
7425
"Account expires : never\n"
7426
"Minimum number of days between password change : 0\n"
7427
"Maximum number of days between password change : 99999\n"
7428
"Number of days of warning before password expires : 7"
7429
msgstr ""
7430
7431
#: serverguide/C/security.xml:245(para)
7432
msgid ""
7433
"To set any of these values, simply use the following syntax, and follow the "
7434
"interactive prompts:"
7435
msgstr ""
7436
7437
#: serverguide/C/security.xml:249(command)
7438
msgid "sudo chage username"
7439
msgstr ""
7440
7441
#: serverguide/C/security.xml:251(para)
7442
msgid ""
7443
"The following is also an example of how you can manually change the explicit "
7444
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7445
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7446
"password expiration, and a warning time period (-W) of 14 days before "
7447
"password expiration."
7448
msgstr ""
7449
7450
#: serverguide/C/security.xml:255(command)
7451
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7452
msgstr ""
7453
7454
#: serverguide/C/security.xml:259(para)
7455
msgid "To verify changes, use the same syntax as mentioned previously:"
7456
msgstr ""
7457
7458
#: serverguide/C/security.xml:265(para)
7459
msgid ""
7460
"The output below shows the new policies that have been established for the "
7461
"account:"
7462
msgstr ""
7463
7464
#: serverguide/C/security.xml:268(computeroutput)
7465
#, no-wrap
7466
msgid ""
7467
"Last password change : Jan 20, 2008\n"
7468
"Password expires : Apr 19, 2008\n"
7469
"Password inactive : May 19, 2008\n"
7470
"Account expires : Jan 31, 2008\n"
7471
"Minimum number of days between password change : 5\n"
7472
"Maximum number of days between password change : 90\n"
7473
"Number of days of warning before password expires : 14"
7474
msgstr ""
7475
7476
#: serverguide/C/security.xml:284(title)
7477
msgid "Other Security Considerations"
7478
msgstr ""
7479
7480
#: serverguide/C/security.xml:285(para)
7481
msgid ""
7482
"Many applications use alternate authentication mechanisms that can be easily "
7483
"overlooked by even experienced system administrators. Therefore, it is "
7484
"important to understand and control how users authenticate and gain access "
7485
"to services and applications on your server."
7486
msgstr ""
7487
7488
#: serverguide/C/security.xml:290(title)
7489
msgid "SSH Access by Disabled Users"
7490
msgstr ""
7491
7492
#: serverguide/C/security.xml:291(para)
7493
msgid ""
7494
"Simply disabling/locking a user account will not prevent a user from logging "
7495
"into your server remotely if they have previously set up RSA public key "
7496
"authentication. They will still be able to gain shell access to the server, "
7497
"without the need for any password. Remember to check the users home "
7498
"directory for files that will allow for this type of authenticated SSH "
7499
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7500
msgstr ""
7501
7502
#: serverguide/C/security.xml:294(para)
7503
msgid ""
7504
"Remove or rename the directory <filename "
7505
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7506
"further SSH authentication capabilities."
7507
msgstr ""
7508
7509
#: serverguide/C/security.xml:297(para)
7510
msgid ""
7511
"Be sure to check for any established SSH connections by the disabled user, "
7512
"as it is possible they may have existing inbound or outbound connections. "
7513
"Kill any that are found."
7514
msgstr ""
7515
7516
#: serverguide/C/security.xml:300(para)
7517
msgid ""
7518
"Restrict SSH access to only user accounts that should have it. For example, "
7519
"you may create a group called \"sshlogin\" and add the group name as the "
7520
"value associated with the <varname>AllowGroups</varname> variable located in "
7521
"the file <filename>/etc/ssh/sshd_config</filename>."
7522
msgstr ""
7523
7524
#: serverguide/C/security.xml:303(programlisting)
7525
#, no-wrap
7526
msgid ""
7527
"\n"
7528
"AllowGroups sshlogin\n"
7529
msgstr ""
7530
7531
#: serverguide/C/security.xml:306(para)
7532
msgid ""
7533
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7534
"SSH service."
7535
msgstr ""
7536
7537
#: serverguide/C/security.xml:310(command)
7538
msgid "sudo adduser username sshlogin"
7539
msgstr ""
7540
7541
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7542
msgid "sudo /etc/init.d/ssh restart"
7543
msgstr ""
7544
7545
#: serverguide/C/security.xml:315(title)
7546
msgid "External User Database Authentication"
7547
msgstr ""
7548
7549
#: serverguide/C/security.xml:316(para)
7550
msgid ""
7551
"Most enterprise networks require centralized authentication and access "
7552
"controls for all system resources. If you have configured your server to "
7553
"authenticate users against external databases, be sure to disable the user "
7554
"accounts both externally and locally, this way you ensure that local "
7555
"fallback authentication is not possible."
7556
msgstr ""
7557
7558
#: serverguide/C/security.xml:325(title)
7559
msgid "Console Security"
7560
msgstr ""
7561
7562
#: serverguide/C/security.xml:326(para)
7563
msgid ""
7564
"As with any other security barrier you put in place to protect your server, "
7565
"it is pretty tough to defend against untold damage caused by someone with "
7566
"physical access to your environment, for example, theft of hard drives, "
7567
"power or service disruption and so on. Therefore, console security should be "
7568
"addressed merely as one component of your overall physical security "
7569
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7570
"very least slow down a determined one, so it is still advisable to perform "
7571
"basic precautions with regard to console security."
7572
msgstr ""
7573
7574
#: serverguide/C/security.xml:329(para)
7575
msgid ""
7576
"The following instructions will help defend your server against issues that "
7577
"could otherwise yield very serious consequences."
7578
msgstr ""
7579
7580
#: serverguide/C/security.xml:334(title)
7581
msgid "Disable Ctrl+Alt+Delete"
7582
msgstr ""
7583
7584
#: serverguide/C/security.xml:335(para)
7585
msgid ""
7586
"First and foremost, anyone that has physical access to the keyboard can "
7587
"simply use the "
7588
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7589
"eycombo> key combination to reboot the server without having to log on. "
7590
"Sure, someone could simply unplug the power source, but you should still "
7591
"prevent the use of this key combination on a production server. This forces "
7592
"an attacker to take more drastic measures to reboot the server, and will "
7593
"prevent accidental reboots at the same time."
7594
msgstr ""
7595
7596
#: serverguide/C/security.xml:340(para)
7597
msgid ""
7598
"To disable the reboot action taken by pressing the "
7599
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7600
"eycombo> key combination, comment out the following line in the file "
7601
"<filename>/etc/init/control-alt-delete.conf</filename>."
7602
msgstr ""
7603
7604
#: serverguide/C/security.xml:343(programlisting)
7605
#, no-wrap
7606
msgid ""
7607
"\n"
7608
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7609
msgstr ""
7610
7611
#: serverguide/C/security.xml:352(title)
7612
msgid "Firewall"
7613
msgstr ""
7614
7615
#: serverguide/C/security.xml:355(para)
7616
msgid ""
7617
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7618
"which is used to manipulate or decide the fate of network traffic headed "
7619
"into or through your server. All modern Linux firewall solutions use this "
7620
"system for packet filtering."
7621
msgstr ""
7622
7623
#: serverguide/C/security.xml:360(para)
7624
msgid ""
7625
"The kernel's packet filtering system would be of little use to "
7626
"administrators without a userspace interface to manage it. This is the "
7627
"purpose of iptables. When a packet reaches your server, it will be handed "
7628
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7629
"based on the rules supplied to it from userspace via iptables. Thus, "
7630
"iptables is all you need to manage your firewall if you're familiar with it, "
7631
"but many frontends are available to simplify the task."
7632
msgstr ""
7633
7634
#: serverguide/C/security.xml:370(title)
7635
msgid "ufw - Uncomplicated Firewall"
7636
msgstr ""
7637
7638
#: serverguide/C/security.xml:371(para)
7639
msgid ""
7640
"The default firewall configuration tool for Ubuntu is "
7641
"<application>ufw</application>. Developed to ease iptables firewall "
7642
"configuration, <application>ufw</application> provides a user friendly way "
7643
"to create an IPv4 or IPv6 host-based firewall."
7644
msgstr ""
7645
7646
#: serverguide/C/security.xml:375(para)
7647
msgid ""
7648
"<application>ufw</application> by default is initially disabled. From the "
7649
"<application>ufw</application> man page:"
7650
msgstr ""
7651
7652
#: serverguide/C/security.xml:379(quote)
7653
msgid ""
7654
"ufw is not intended to provide complete firewall functionality via its "
7655
"command interface, but instead provides an easy way to add or remove simple "
7656
"rules. It is currently mainly used for host-based firewalls."
7657
msgstr ""
7658
7659
#: serverguide/C/security.xml:383(para)
7660
msgid ""
7661
"The following are some examples of how to use <application>ufw</application>:"
7662
msgstr ""
7663
7664
#: serverguide/C/security.xml:388(para)
7665
msgid ""
7666
"First, <application>ufw</application> needs to be enabled. From a terminal "
7667
"prompt enter:"
7668
msgstr ""
7669
7670
#: serverguide/C/security.xml:392(command)
7671
msgid "sudo ufw enable"
7672
msgstr ""
7673
7674
#: serverguide/C/security.xml:396(para)
7675
msgid "To open a port (ssh in this example):"
7676
msgstr ""
7677
7678
#: serverguide/C/security.xml:400(command)
7679
msgid "sudo ufw allow 22"
7680
msgstr ""
7681
7682
#: serverguide/C/security.xml:404(para)
7683
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7684
msgstr ""
7685
7686
#: serverguide/C/security.xml:408(command)
7687
msgid "sudo ufw insert 1 allow 80"
7688
msgstr ""
7689
7690
#: serverguide/C/security.xml:412(para)
7691
msgid "Similarly, to close an opened port:"
7692
msgstr ""
7693
7694
#: serverguide/C/security.xml:416(command)
7695
msgid "sudo ufw deny 22"
7696
msgstr ""
7697
7698
#: serverguide/C/security.xml:420(para)
7699
msgid "To remove a rule, use delete followed by the rule:"
7700
msgstr ""
7701
7702
#: serverguide/C/security.xml:424(command)
7703
msgid "sudo ufw delete deny 22"
7704
msgstr ""
7705
7706
#: serverguide/C/security.xml:428(para)
7707
msgid ""
7708
"It is also possible to allow access from specific hosts or networks to a "
7709
"port. The following example allows ssh access from host 192.168.0.2 to any "
7710
"ip address on this host:"
7711
msgstr ""
7712
7713
#: serverguide/C/security.xml:433(command)
7714
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7715
msgstr ""
7716
7717
#: serverguide/C/security.xml:435(para)
7718
msgid ""
7719
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7720
"subnet."
7721
msgstr ""
7722
7723
#: serverguide/C/security.xml:441(para)
7724
msgid ""
7725
"Adding the <emphasis>--dry-run</emphasis> option to a "
7726
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
7727
"apply them. For example, the following is what would be applied if opening "
7728
"the HTTP port:"
7729
msgstr ""
7730
7731
#: serverguide/C/security.xml:447(command)
7732
msgid "sudo ufw --dry-run allow http"
7733
msgstr ""
7734
7735
#: serverguide/C/security.xml:451(computeroutput)
7736
#, no-wrap
7737
msgid ""
7738
"*filter\n"
7739
":ufw-user-input - [0:0]\n"
7740
":ufw-user-output - [0:0]\n"
7741
":ufw-user-forward - [0:0]\n"
7742
":ufw-user-limit - [0:0]\n"
7743
":ufw-user-limit-accept - [0:0]\n"
7744
"### RULES ###\n"
7745
"\n"
7746
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
7747
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
7748
"\n"
7749
"### END RULES ###\n"
7750
"-A ufw-user-input -j RETURN\n"
7751
"-A ufw-user-output -j RETURN\n"
7752
"-A ufw-user-forward -j RETURN\n"
7753
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
7754
"LIMIT]: \"\n"
7755
"-A ufw-user-limit -j REJECT\n"
7756
"-A ufw-user-limit-accept -j ACCEPT\n"
7757
"COMMIT\n"
7758
"Rules updated"
7759
msgstr ""
7760
7761
#: serverguide/C/security.xml:475(para)
7762
msgid "<application>ufw</application> can be disabled by:"
7763
msgstr ""
7764
7765
#: serverguide/C/security.xml:479(command)
7766
msgid "sudo ufw disable"
7767
msgstr ""
7768
7769
#: serverguide/C/security.xml:483(para)
7770
msgid "To see the firewall status, enter:"
7771
msgstr ""
7772
7773
#: serverguide/C/security.xml:487(command)
7774
msgid "sudo ufw status"
7775
msgstr ""
7776
7777
#: serverguide/C/security.xml:491(para)
7778
msgid "And for more verbose status information use:"
7779
msgstr ""
7780
7781
#: serverguide/C/security.xml:495(command)
7782
msgid "sudo ufw status verbose"
7783
msgstr ""
7784
7785
#: serverguide/C/security.xml:499(para)
7786
msgid "To view the <emphasis>numbered</emphasis> format:"
7787
msgstr ""
7788
7789
#: serverguide/C/security.xml:503(command)
7790
msgid "sudo ufw status numbered"
7791
msgstr ""
7792
7793
#: serverguide/C/security.xml:508(para)
7794
msgid ""
7795
"If the port you want to open or close is defined in "
7796
"<filename>/etc/services</filename>, you can use the port name instead of the "
7797
"number. In the above examples, replace <emphasis>22</emphasis> with "
7798
"<emphasis>ssh</emphasis>."
7799
msgstr ""
7800
7801
#: serverguide/C/security.xml:514(para)
7802
msgid ""
7803
"This is a quick introduction to using <application>ufw</application>. Please "
7804
"refer to the <application>ufw</application> man page for more information."
7805
msgstr ""
7806
7807
#: serverguide/C/security.xml:520(title)
7808
msgid "ufw Application Integration"
7809
msgstr ""
7810
7811
#: serverguide/C/security.xml:522(para)
7812
msgid ""
7813
"Applications that open ports can include an <application>ufw</application> "
7814
"profile, which details the ports needed for the application to function "
7815
"properly. The profiles are kept in <filename "
7816
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
7817
"the default ports have been changed."
7818
msgstr ""
7819
7820
#: serverguide/C/security.xml:531(para)
7821
msgid ""
7822
"To view which applications have installed a profile, enter the following in "
7823
"a terminal:"
7824
msgstr ""
7825
7826
#: serverguide/C/security.xml:536(command)
7827
msgid "sudo ufw app list"
7828
msgstr ""
7829
7830
#: serverguide/C/security.xml:542(para)
7831
msgid ""
7832
"Similar to allowing traffic to a port, using an application profile is "
7833
"accomplished by entering:"
7834
msgstr ""
7835
7836
#: serverguide/C/security.xml:547(command)
7837
msgid "sudo ufw allow Samba"
7838
msgstr ""
7839
7840
#: serverguide/C/security.xml:553(para)
7841
msgid "An extended syntax is available as well:"
7842
msgstr ""
7843
7844
#: serverguide/C/security.xml:558(command)
7845
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
7846
msgstr ""
7847
7848
#: serverguide/C/security.xml:561(para)
7849
msgid ""
7850
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
7851
"with the application profile you are using and the IP range for your network."
7852
msgstr ""
7853
7854
#: serverguide/C/security.xml:567(para)
7855
msgid ""
7856
"There is no need to specify the <emphasis>protocol</emphasis> for the "
7857
"application, because that information is detailed in the profile. Also, note "
7858
"that the <emphasis>app</emphasis> name replaces the "
7859
"<emphasis>port</emphasis> number."
7860
msgstr ""
7861
7862
#: serverguide/C/security.xml:576(para)
7863
msgid ""
7864
"To view details about which ports, protocols, etc are defined for an "
7865
"application, enter:"
7866
msgstr ""
7867
7868
#: serverguide/C/security.xml:581(command)
7869
msgid "sudo ufw app info Samba"
7870
msgstr ""
7871
7872
#: serverguide/C/security.xml:587(para)
7873
msgid ""
7874
"Not all applications that require opening a network port come with "
7875
"<application>ufw</application> profiles, but if you have profiled an "
7876
"application and want the file to be included with the package, please file a "
7877
"bug against the package in <ulink "
7878
"url=\"https://launchpad.net/\">Launchpad</ulink>."
7879
msgstr ""
7880
7881
#: serverguide/C/security.xml:596(title)
7882
msgid "IP Masquerading"
7883
msgstr ""
7884
7885
#: serverguide/C/security.xml:597(para)
7886
msgid ""
7887
"The purpose of IP Masquerading is to allow machines with private, non-"
7888
"routable IP addresses on your network to access the Internet through the "
7889
"machine doing the masquerading. Traffic from your private network destined "
7890
"for the Internet must be manipulated for replies to be routable back to the "
7891
"machine that made the request. To do this, the kernel must modify the "
7892
"<emphasis>source</emphasis> IP address of each packet so that replies will "
7893
"be routed back to it, rather than to the private IP address that made the "
7894
"request, which is impossible over the Internet. Linux uses "
7895
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
7896
"connections belong to which machines and reroute each return packet "
7897
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
7898
"having originated from your Ubuntu gateway machine. This process is referred "
7899
"to in Microsoft documentation as Internet Connection Sharing."
7900
msgstr ""
7901
7902
#: serverguide/C/security.xml:613(title)
7903
msgid "ufw Masquerading"
7904
msgstr ""
7905
7906
#: serverguide/C/security.xml:614(para)
7907
msgid ""
7908
"IP Masquerading can be achieved using custom <application>ufw</application> "
7909
"rules. This is possible because the current back-end for "
7910
"<application>ufw</application> is <application>iptables-"
7911
"restore</application> with the rules files located in "
7912
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
7913
"legacy iptables rules used without <application>ufw</application>, and rules "
7914
"that are more network gateway or bridge related."
7915
msgstr ""
7916
7917
#: serverguide/C/security.xml:620(para)
7918
msgid ""
7919
"The rules are split into two different files, rules that should be executed "
7920
"before <application>ufw</application> command line rules, and rules that are "
7921
"executed after <application>ufw</application> command line rules."
7922
msgstr ""
7923
7924
#: serverguide/C/security.xml:626(para)
7925
msgid ""
7926
"First, packet forwarding needs to be enabled in "
7927
"<application>ufw</application>. Two configuration files will need to be "
7928
"adjusted, in <filename>/etc/default/ufw</filename> change the "
7929
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
7930
msgstr ""
7931
7932
#: serverguide/C/security.xml:630(programlisting)
7933
#, no-wrap
7934
msgid ""
7935
"\n"
7936
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
7937
msgstr ""
7938
7939
#: serverguide/C/security.xml:633(para)
7940
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
7941
msgstr ""
7942
7943
#: serverguide/C/security.xml:636(programlisting)
7944
#, no-wrap
7945
msgid ""
7946
"\n"
7947
"net/ipv4/ip_forward=1\n"
7948
msgstr ""
7949
7950
#: serverguide/C/security.xml:639(para)
7951
msgid "Similarly, for IPv6 forwarding uncomment:"
7952
msgstr ""
7953
7954
#: serverguide/C/security.xml:642(programlisting)
7955
#, no-wrap
7956
msgid ""
7957
"\n"
7958
"net/ipv6/conf/default/forwarding=1\n"
7959
msgstr ""
7960
7961
#: serverguide/C/security.xml:647(para)
7962
msgid ""
7963
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
7964
"file. The default rules only configure the <emphasis>filter</emphasis> "
7965
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
7966
"need to be configured. Add the following to the top of the file just after "
7967
"the header comments:"
7968
msgstr ""
7969
7970
#: serverguide/C/security.xml:652(programlisting)
7971
#, no-wrap
7972
msgid ""
7973
"\n"
7974
"# nat Table rules\n"
7975
"*nat\n"
7976
":POSTROUTING ACCEPT [0:0]\n"
7977
"\n"
7978
"# Forward traffic from eth1 through eth0.\n"
7979
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
7980
"\n"
7981
"# don't delete the 'COMMIT' line or these nat table rules won't be "
7982
"processed\n"
7983
"COMMIT\n"
7984
msgstr ""
7985
7986
#: serverguide/C/security.xml:663(para)
7987
msgid ""
7988
"The comments are not strictly necessary, but it is considered good practice "
7989
"to document your configuration. Also, when modifying any of the "
7990
"<emphasis>rules</emphasis> files in <filename "
7991
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
7992
"line for each table modified:"
7993
msgstr ""
7994
7995
#: serverguide/C/security.xml:669(programlisting)
7996
#, no-wrap
7997
msgid ""
7998
"\n"
7999
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8000
"COMMIT\n"
8001
msgstr ""
8002
8003
#: serverguide/C/security.xml:674(para)
8004
msgid ""
8005
"For each <emphasis>Table</emphasis> a corresponding "
8006
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8007
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8008
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8009
"<emphasis>mangle</emphasis> tables."
8010
msgstr ""
8011
8012
#: serverguide/C/security.xml:681(para)
8013
msgid ""
8014
"In the above example replace <emphasis>eth0</emphasis>, "
8015
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8016
"appropriate interfaces and IP range for your network."
8017
msgstr ""
8018
8019
#: serverguide/C/security.xml:689(para)
8020
msgid ""
8021
"Finally, disable and re-enable <application>ufw</application> to apply the "
8022
"changes:"
8023
msgstr ""
8024
8025
#: serverguide/C/security.xml:693(command)
8026
msgid "sudo ufw disable && sudo ufw enable"
8027
msgstr ""
8028
8029
#: serverguide/C/security.xml:697(para)
8030
msgid ""
8031
"IP Masquerading should now be enabled. You can also add any additional "
8032
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8033
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8034
"forward</emphasis> chain."
8035
msgstr ""
8036
8037
#: serverguide/C/security.xml:704(title)
8038
msgid "iptables Masquerading"
8039
msgstr ""
8040
8041
#: serverguide/C/security.xml:705(para)
8042
msgid ""
8043
"<application>iptables</application> can also be used to enable masquerading."
8044
msgstr ""
8045
8046
#: serverguide/C/security.xml:710(para)
8047
msgid ""
8048
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8049
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8050
"uncomment the following line"
8051
msgstr ""
8052
8053
#: serverguide/C/security.xml:714(programlisting)
8054
#, no-wrap
8055
msgid ""
8056
"\n"
8057
"net.ipv4.ip_forward=1\n"
8058
msgstr ""
8059
8060
#: serverguide/C/security.xml:717(para)
8061
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8062
msgstr ""
8063
8064
#: serverguide/C/security.xml:720(programlisting)
8065
#, no-wrap
8066
msgid ""
8067
"\n"
8068
"net.ipv6.conf.default.forwarding=1\n"
8069
msgstr ""
8070
8071
#: serverguide/C/security.xml:725(para)
8072
msgid ""
8073
"Next, execute the <application>sysctl</application> command to enable the "
8074
"new settings in the configuration file:"
8075
msgstr ""
8076
8077
#: serverguide/C/security.xml:729(command)
8078
msgid "sudo sysctl -p"
8079
msgstr ""
8080
8081
#: serverguide/C/security.xml:733(para)
8082
msgid ""
8083
"IP Masquerading can now be accomplished with a single iptables rule, which "
8084
"may differ slightly based on your network configuration:"
8085
msgstr ""
8086
8087
#: serverguide/C/security.xml:736(screen)
8088
#, no-wrap
8089
msgid ""
8090
"\n"
8091
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8092
msgstr ""
8093
8094
#: serverguide/C/security.xml:739(para)
8095
msgid ""
8096
"The above command assumes that your private address space is 192.168.0.0/16 "
8097
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8098
"follows:"
8099
msgstr ""
8100
8101
#: serverguide/C/security.xml:744(para)
8102
msgid "-t nat -- the rule is to go into the nat table"
8103
msgstr ""
8104
8105
#: serverguide/C/security.xml:745(para)
8106
msgid ""
8107
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8108
msgstr ""
8109
8110
#: serverguide/C/security.xml:746(para)
8111
msgid ""
8112
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8113
"specified address space"
8114
msgstr ""
8115
8116
#: serverguide/C/security.xml:747(para)
8117
msgid ""
8118
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8119
"specified network device"
8120
msgstr ""
8121
8122
#: serverguide/C/security.xml:749(para)
8123
msgid ""
8124
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8125
"MASQUERADE target to be manipulated as described above"
8126
msgstr ""
8127
8128
#: serverguide/C/security.xml:757(para)
8129
msgid ""
8130
"Also, each chain in the filter table (the default table, and where most or "
8131
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8132
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8133
"you may have set the policies to DROP or REJECT, in which case your "
8134
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8135
"above rule to work:"
8136
msgstr ""
8137
8138
#: serverguide/C/security.xml:764(screen)
8139
#, no-wrap
8140
msgid ""
8141
"\n"
8142
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8143
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8144
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8145
msgstr ""
8146
8147
#: serverguide/C/security.xml:768(para)
8148
msgid ""
8149
"The above commands will allow all connections from your local network to the "
8150
"Internet and all traffic related to those connections to return to the "
8151
"machine that initiated them."
8152
msgstr ""
8153
8154
#: serverguide/C/security.xml:775(para)
8155
msgid ""
8156
"If you want masquerading to be enabled on reboot, which you probably do, "
8157
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8158
"example add the first command with no filtering:"
8159
msgstr ""
8160
8161
#: serverguide/C/security.xml:779(screen)
8162
#, no-wrap
8163
msgid ""
8164
"\n"
8165
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8166
msgstr ""
8167
8168
#: serverguide/C/security.xml:787(title)
8169
msgid "Logs"
8170
msgstr ""
8171
8172
#: serverguide/C/security.xml:788(para)
8173
msgid ""
8174
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8175
"firewall rules, and noticing unusual activity on your network. You must "
8176
"include logging rules in your firewall for them to be generated, though, and "
8177
"logging rules must come before any applicable terminating rule (a rule with "
8178
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8179
"REJECT)."
8180
msgstr ""
8181
8182
#: serverguide/C/security.xml:795(para)
8183
msgid ""
8184
"If you are using <application>ufw</application>, you can turn on logging by "
8185
"entering the following in a terminal:"
8186
msgstr ""
8187
8188
#: serverguide/C/security.xml:799(command)
8189
msgid "sudo ufw logging on"
8190
msgstr ""
8191
8192
#: serverguide/C/security.xml:801(para)
8193
msgid ""
8194
"To turn logging off in <application>ufw</application>, simply replace "
8195
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8196
"role=\"italic\">off</emphasis> in the above command."
8197
msgstr ""
8198
8199
#: serverguide/C/security.xml:804(para)
8200
msgid ""
8201
"If using <application>iptables</application> instead of "
8202
"<application>ufw</application>, enter:"
8203
msgstr ""
8204
8205
#: serverguide/C/security.xml:807(screen)
8206
#, no-wrap
8207
msgid ""
8208
"\n"
8209
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8210
"prefix \"NEW_HTTP_CONN: \"\n"
8211
msgstr ""
8212
8213
#: serverguide/C/security.xml:810(para)
8214
msgid ""
8215
"A request on port 80 from the local machine, then, would generate a log in "
8216
"dmesg that looks like this:"
8217
msgstr ""
8218
8219
#: serverguide/C/security.xml:815(programlisting)
8220
#, no-wrap
8221
msgid ""
8222
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8223
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8224
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8225
"WINDOW=32767 RES=0x00 SYN URGP=0"
8226
msgstr ""
8227
8228
#: serverguide/C/security.xml:817(para)
8229
msgid ""
8230
"The above log will also appear in <filename>/var/log/messages</filename>, "
8231
"<filename>/var/log/syslog</filename>, and "
8232
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8233
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8234
"and configuring <application>ulogd</application> and using the ULOG target "
8235
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8236
"server that listens for logging instructions from the kernel specifically "
8237
"for firewalls, and can log to any file you like, or even to a "
8238
"<application>PostgreSQL</application> or <application>MySQL</application> "
8239
"database. Making sense of your firewall logs can be simplified by using a "
8240
"log analyzing tool such as <application>fwanalog</application>, "
8241
"<application> fwlogwatch</application>, or <application>lire</application>."
8242
msgstr ""
8243
8244
#: serverguide/C/security.xml:832(title)
8245
msgid "Other Tools"
8246
msgstr ""
8247
8248
#: serverguide/C/security.xml:833(para)
8249
msgid ""
8250
"There are many tools available to help you construct a complete firewall "
8251
"without intimate knowledge of iptables. For the GUI-inclined:"
8252
msgstr ""
8253
8254
#: serverguide/C/security.xml:839(para)
8255
msgid ""
8256
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8257
"popular and easy to use."
8258
msgstr ""
8259
8260
#: serverguide/C/security.xml:844(para)
8261
msgid ""
8262
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8263
"and will look familiar to an administrator who has used a commercial "
8264
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8265
msgstr ""
8266
8267
#: serverguide/C/security.xml:850(para)
8268
msgid ""
8269
"If you prefer a command-line tool with plain-text configuration files:"
8270
msgstr ""
8271
8272
#: serverguide/C/security.xml:855(para)
8273
msgid ""
8274
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8275
"powerful solution to help you configure an advanced firewall for any network."
8276
msgstr ""
8277
8278
#: serverguide/C/security.xml:861(para)
8279
msgid ""
8280
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8281
"a working firewall \"out of the box\" with zero configuration, and will "
8282
"allow you to easily set up a more advanced firewall by editing simple, well-"
8283
"documented configuration files."
8284
msgstr ""
8285
8286
#: serverguide/C/security.xml:868(para)
8287
msgid ""
8288
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8289
"designed to be a desktop firewall application. It is made up of a server "
8290
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8291
"like many popular interactive firewall applications for Windows."
8292
msgstr ""
8293
8294
#: serverguide/C/security.xml:880(para)
8295
msgid ""
8296
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8297
"Firewall</ulink> wiki page contains information on the development of "
8298
"<application>ufw</application>."
8299
msgstr ""
8300
8301
#: serverguide/C/security.xml:886(para)
8302
msgid ""
8303
"Also, the <application>ufw</application> manual page contains some very "
8304
"useful information: <command>man ufw</command>."
8305
msgstr ""
8306
8307
#: serverguide/C/security.xml:891(para)
8308
msgid ""
8309
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8310
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8311
"on using <application>iptables</application>."
8312
msgstr ""
8313
8314
#: serverguide/C/security.xml:897(para)
8315
msgid ""
8316
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8317
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8318
msgstr ""
8319
8320
#: serverguide/C/security.xml:903(para)
8321
msgid ""
8322
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8323
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8324
msgstr ""
8325
8326
#: serverguide/C/security.xml:911(title)
8327
msgid "AppArmor"
8328
msgstr ""
8329
8330
#: serverguide/C/security.xml:912(para)
8331
msgid ""
8332
"<application>AppArmor</application> is a Linux Security Module "
8333
"implementation of name-based mandatory access controls. AppArmor confines "
8334
"individual programs to a set of listed files and posix 1003.1e draft "
8335
"capabilities."
8336
msgstr ""
8337
8338
#: serverguide/C/security.xml:916(para)
8339
msgid ""
8340
"<application>AppArmor</application> is installed and loaded by default. It "
8341
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8342
"and permissions the application requires. Some packages will install their "
8343
"own profiles, and additional profiles can be found in the "
8344
"<application>apparmor-profiles</application> package."
8345
msgstr ""
8346
8347
#: serverguide/C/security.xml:921(para)
8348
msgid ""
8349
"To install the <application>apparmor-profiles</application> package from a "
8350
"terminal prompt:"
8351
msgstr ""
8352
8353
#: serverguide/C/security.xml:927(para)
8354
msgid "AppArmor profiles have two modes of execution:"
8355
msgstr ""
8356
8357
#: serverguide/C/security.xml:932(para)
8358
msgid ""
8359
"Complaining/Learning: profile violations are permitted and logged. Useful "
8360
"for testing and developing new profiles."
8361
msgstr ""
8362
8363
#: serverguide/C/security.xml:937(para)
8364
msgid ""
8365
"Enforced/Confined: enforces profile policy as well as logging the violation."
8366
msgstr ""
8367
8368
#: serverguide/C/security.xml:943(title)
8369
msgid "Using AppArmor"
8370
msgstr ""
8371
8372
#: serverguide/C/security.xml:944(para)
8373
msgid ""
8374
"The <application>apparmor-utils</application> package contains command line "
8375
"utilities that you can use to change the <application>AppArmor</application> "
8376
"execution mode, find the status of a profile, create new profiles, etc."
8377
msgstr ""
8378
8379
#: serverguide/C/security.xml:950(para)
8380
msgid ""
8381
"<application>apparmor_status</application> is used to view the current "
8382
"status of AppArmor profiles."
8383
msgstr ""
8384
8385
#: serverguide/C/security.xml:954(command)
8386
msgid "sudo apparmor_status"
8387
msgstr ""
8388
8389
#: serverguide/C/security.xml:958(para)
8390
msgid ""
8391
"<application>aa-complain</application> places a profile into "
8392
"<emphasis>complain</emphasis> mode."
8393
msgstr ""
8394
8395
#: serverguide/C/security.xml:962(command)
8396
msgid "sudo aa-complain /path/to/bin"
8397
msgstr ""
8398
8399
#: serverguide/C/security.xml:966(para)
8400
msgid ""
8401
"<application>aa-enforce</application> places a profile into "
8402
"<emphasis>enforce</emphasis> mode."
8403
msgstr ""
8404
8405
#: serverguide/C/security.xml:970(command)
8406
msgid "sudo aa-enforce /path/to/bin"
8407
msgstr ""
8408
8409
#: serverguide/C/security.xml:974(para)
8410
msgid ""
8411
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8412
"profiles are located. It can be used to manipulate the "
8413
"<emphasis>mode</emphasis> of all profiles."
8414
msgstr ""
8415
8416
#: serverguide/C/security.xml:978(para)
8417
msgid "Enter the following to place all profiles into complain mode:"
8418
msgstr ""
8419
8420
#: serverguide/C/security.xml:982(command)
8421
msgid "sudo aa-complain /etc/apparmor.d/*"
8422
msgstr ""
8423
8424
#: serverguide/C/security.xml:984(para)
8425
msgid "To place all profiles in enforce mode:"
8426
msgstr ""
8427
8428
#: serverguide/C/security.xml:988(command)
8429
msgid "sudo aa-enforce /etc/apparmor.d/*"
8430
msgstr ""
8431
8432
#: serverguide/C/security.xml:992(para)
8433
msgid ""
8434
"<application>apparmor_parser</application> is used to load a profile into "
8435
"the kernel. It can also be used to reload a currently loaded profile using "
8436
"the <emphasis>-r</emphasis> option. To load a profile:"
8437
msgstr ""
8438
8439
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8440
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8441
msgstr ""
8442
8443
#: serverguide/C/security.xml:999(para)
8444
msgid "To reload a profile:"
8445
msgstr ""
8446
8447
#: serverguide/C/security.xml:1003(command)
8448
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8449
msgstr ""
8450
8451
#: serverguide/C/security.xml:1007(para)
8452
msgid ""
8453
"<filename>/etc/init.d/apparmor</filename> can be used to "
8454
"<emphasis>reload</emphasis> all profiles:"
8455
msgstr ""
8456
8457
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8458
msgid "sudo /etc/init.d/apparmor reload"
8459
msgstr ""
8460
8461
#: serverguide/C/security.xml:1015(para)
8462
msgid ""
8463
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8464
"with the <application>apparmor_parser -R</application> option to "
8465
"<emphasis>disable</emphasis> a profile."
8466
msgstr ""
8467
8468
#: serverguide/C/security.xml:1020(command)
8469
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8470
msgstr ""
8471
8472
#: serverguide/C/security.xml:1021(command)
8473
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8474
msgstr ""
8475
8476
#: serverguide/C/security.xml:1023(para)
8477
msgid ""
8478
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8479
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8480
"load the profile using the <emphasis>-a</emphasis> option."
8481
msgstr ""
8482
8483
#: serverguide/C/security.xml:1028(command)
8484
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8485
msgstr ""
8486
8487
#: serverguide/C/security.xml:1033(para)
8488
msgid ""
8489
"<application>AppArmor</application> can be disabled, and the kernel module "
8490
"unloaded by entering the following:"
8491
msgstr ""
8492
8493
#: serverguide/C/security.xml:1037(command)
8494
msgid "sudo /etc/init.d/apparmor stop"
8495
msgstr ""
8496
8497
#: serverguide/C/security.xml:1038(command)
8498
msgid "sudo update-rc.d -f apparmor remove"
8499
msgstr ""
8500
8501
#: serverguide/C/security.xml:1042(para)
8502
msgid "To re-enable <application>AppArmor</application> enter:"
8503
msgstr ""
8504
8505
#: serverguide/C/security.xml:1046(command)
8506
msgid "sudo /etc/init.d/apparmor start"
8507
msgstr ""
8508
8509
#: serverguide/C/security.xml:1047(command)
8510
msgid "sudo update-rc.d apparmor defaults"
8511
msgstr ""
8512
8513
#: serverguide/C/security.xml:1052(para)
8514
msgid ""
8515
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8516
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8517
"the actual executable file path. For example for the "
8518
"<application>ping</application> command use <filename>/bin/ping</filename>"
8519
msgstr ""
8520
8521
#: serverguide/C/security.xml:1060(title)
8522
msgid "Profiles"
8523
msgstr ""
8524
8525
#: serverguide/C/security.xml:1061(para)
8526
msgid ""
8527
"<application>AppArmor</application> profiles are simple text files located "
8528
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8529
"path to the executable they profile replacing the \"/\" with \".\". For "
8530
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8531
"profile for the <filename>/bin/ping</filename> command."
8532
msgstr ""
8533
8534
#: serverguide/C/security.xml:1067(para)
8535
msgid "There are two main type of rules used in profiles:"
8536
msgstr ""
8537
8538
#: serverguide/C/security.xml:1072(para)
8539
msgid ""
8540
"<emphasis>Path entries:</emphasis> which detail which files an application "
8541
"can access in the file system."
8542
msgstr ""
8543
8544
#: serverguide/C/security.xml:1077(para)
8545
msgid ""
8546
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8547
"confined process is allowed to use."
8548
msgstr ""
8549
8550
#: serverguide/C/security.xml:1082(para)
8551
msgid ""
8552
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8553
msgstr ""
8554
8555
#: serverguide/C/security.xml:1085(programlisting)
8556
#, no-wrap
8557
msgid ""
8558
"\n"
8559
"#include <tunables/global>\n"
8560
"/bin/ping flags=(complain) {\n"
8561
" #include <abstractions/base>\n"
8562
" #include <abstractions/consoles>\n"
8563
" #include <abstractions/nameservice>\n"
8564
"\n"
8565
" capability net_raw,\n"
8566
" capability setuid,\n"
8567
" network inet raw,\n"
8568
" \n"
8569
" /bin/ping mixr,\n"
8570
" /etc/modules.conf r,\n"
8571
"}\n"
8572
msgstr ""
8573
8574
#: serverguide/C/security.xml:1102(para)
8575
msgid ""
8576
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8577
"from other files. This allows statements pertaining to multiple applications "
8578
"to be placed in a common file."
8579
msgstr ""
8580
8581
#: serverguide/C/security.xml:1108(para)
8582
msgid ""
8583
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8584
"program, also setting the mode to <emphasis>complain</emphasis>."
8585
msgstr ""
8586
8587
#: serverguide/C/security.xml:1114(para)
8588
msgid ""
8589
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8590
"the CAP_NET_RAW Posix.1e capability."
8591
msgstr ""
8592
8593
#: serverguide/C/security.xml:1119(para)
8594
msgid ""
8595
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8596
"execute access to the file."
8597
msgstr ""
8598
8599
#: serverguide/C/security.xml:1125(para)
8600
msgid ""
8601
"After editing a profile file the profile must be reloaded. See <xref "
8602
"linkend=\"apparmor-usage\"/> for details."
8603
msgstr ""
8604
8605
#: serverguide/C/security.xml:1130(title)
8606
msgid "Creating a Profile"
8607
msgstr ""
8608
8609
#: serverguide/C/security.xml:1133(para)
8610
msgid ""
8611
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8612
"application should be exercised. The test plan should be divided into small "
8613
"test cases. Each test case should have a small description and list the "
8614
"steps to follow."
8615
msgstr ""
8616
8617
#: serverguide/C/security.xml:1137(para)
8618
msgid "Some standard test cases are:"
8619
msgstr ""
8620
8621
#: serverguide/C/security.xml:1142(para)
8622
msgid "Starting the program."
8623
msgstr ""
8624
8625
#: serverguide/C/security.xml:1147(para)
8626
msgid "Stopping the program."
8627
msgstr ""
8628
8629
#: serverguide/C/security.xml:1152(para)
8630
msgid "Reloading the program."
8631
msgstr ""
8632
8633
#: serverguide/C/security.xml:1157(para)
8634
msgid "Testing all the commands supported by the init script."
8635
msgstr ""
8636
8637
#: serverguide/C/security.xml:1164(para)
8638
msgid ""
8639
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8640
"genprof</application> to generate a new profile. From a terminal:"
8641
msgstr ""
8642
8643
#: serverguide/C/security.xml:1169(command)
8644
msgid "sudo aa-genprof executable"
8645
msgstr ""
8646
8647
#: serverguide/C/security.xml:1171(para)
8648
msgid "For example:"
8649
msgstr ""
8650
8651
#: serverguide/C/security.xml:1175(command)
8652
msgid "sudo aa-genprof slapd"
8653
msgstr ""
8654
8655
#: serverguide/C/security.xml:1179(para)
8656
msgid ""
8657
"To get your new profile included in the <application>apparmor-"
8658
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8659
"against the <ulink "
8660
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8661
"/ulink> package:"
8662
msgstr ""
8663
8664
#: serverguide/C/security.xml:1186(para)
8665
msgid "Include your test plan and test cases."
8666
msgstr ""
8667
8668
#: serverguide/C/security.xml:1191(para)
8669
msgid "Attach your new profile to the bug."
8670
msgstr ""
8671
8672
#: serverguide/C/security.xml:1200(title)
8673
msgid "Updating Profiles"
8674
msgstr ""
8675
8676
#: serverguide/C/security.xml:1201(para)
8677
msgid ""
8678
"When the program is misbehaving, audit messages are sent to the log files. "
8679
"The program <application>aa-logprof</application> can be used to scan log "
8680
"files for <application>AppArmor</application> audit messages, review them "
8681
"and update the profiles. From a terminal:"
8682
msgstr ""
8683
8684
#: serverguide/C/security.xml:1206(command)
8685
msgid "sudo aa-logprof"
8686
msgstr ""
8687
8688
#: serverguide/C/security.xml:1214(para)
8689
msgid ""
8690
"See the <ulink "
8691
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8692
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8693
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8694
"configuration options."
8695
msgstr ""
8696
8697
#: serverguide/C/security.xml:1221(para)
8698
msgid ""
8699
"For details using AppArmor with other Ubuntu releases see the <ulink "
8700
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8701
"Wiki</ulink> page."
8702
msgstr ""
8703
8704
#: serverguide/C/security.xml:1229(para)
8705
msgid ""
8706
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8707
"page is another introduction to AppArmor."
8708
msgstr ""
8709
8710
#: serverguide/C/security.xml:1236(para)
8711
msgid ""
8712
"A great place to ask for <application>AppArmor</application> assistance, and "
8713
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8714
"server</emphasis> IRC channel on <ulink "
8715
"url=\"http://freenode.net\">freenode</ulink>."
8716
msgstr ""
8717
8718
#: serverguide/C/security.xml:1246(title)
8719
msgid "Certificates"
8720
msgstr ""
8721
8722
#: serverguide/C/security.xml:1247(para)
8723
msgid ""
8724
"One of the most common forms of cryptography today is <emphasis>public-"
8725
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8726
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
8727
"system works by <emphasis>encrypting</emphasis> information using the public "
8728
"key. The information can then only be <emphasis>decrypted</emphasis> using "
8729
"the private key."
8730
msgstr ""
8731
8732
#: serverguide/C/security.xml:1253(para)
8733
msgid ""
8734
"A common use for public-key cryptography is encrypting application traffic "
8735
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
8736
"connection. For example, configuring Apache to provide "
8737
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
8738
"encrypt traffic using a protocol that does not itself provide encryption."
8739
msgstr ""
8740
8741
#: serverguide/C/security.xml:1258(para)
8742
msgid ""
8743
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
8744
"<emphasis>public key</emphasis> and other information about a server and the "
8745
"organization who is responsible for it. Certificates can be digitally signed "
8746
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
8747
"third party that has confirmed that the information contained in the "
8748
"certificate is accurate."
8749
msgstr ""
8750
8751
#: serverguide/C/security.xml:1265(title)
8752
msgid "Types of Certificates"
8753
msgstr ""
8754
8755
#: serverguide/C/security.xml:1266(para)
8756
msgid ""
8757
"To set up a secure server using public-key cryptography, in most cases, you "
8758
"send your certificate request (including your public key), proof of your "
8759
"company's identity, and payment to a CA. The CA verifies the certificate "
8760
"request and your identity, and then sends back a certificate for your secure "
8761
"server. Alternatively, you can create your own <emphasis>self-"
8762
"signed</emphasis> certificate."
8763
msgstr ""
8764
8765
#: serverguide/C/security.xml:1276(para)
8766
msgid ""
8767
"Note, that self-signed certificates should not be used in most production "
8768
"environments."
8769
msgstr ""
8770
8771
#: serverguide/C/security.xml:1280(para)
8772
msgid ""
8773
"Continuing the HTTPS example, a CA-signed certificate provides two important "
8774
"capabilities that a self-signed certificate does not:"
8775
msgstr ""
8776
8777
#: serverguide/C/security.xml:1287(para)
8778
msgid ""
8779
"Browsers (usually) automatically recognize the certificate and allow a "
8780
"secure connection to be made without prompting the user."
8781
msgstr ""
8782
8783
#: serverguide/C/security.xml:1294(para)
8784
msgid ""
8785
"When a CA issues a signed certificate, it is guaranteeing the identity of "
8786
"the organization that is providing the web pages to the browser."
8787
msgstr ""
8788
8789
#: serverguide/C/security.xml:1302(para)
8790
msgid ""
8791
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
8792
"certificates they automatically accept. If a browser encounters a "
8793
"certificate whose authorizing CA is not in the list, the browser asks the "
8794
"user to either accept or decline the connection. Also, other applications "
8795
"may generate an error message when using a self-singed certificate."
8796
msgstr ""
8797
8798
#: serverguide/C/security.xml:1310(para)
8799
msgid ""
8800
"The process of getting a certificate from a CA is fairly easy. A quick "
8801
"overview is as follows:"
8802
msgstr ""
8803
8804
#: serverguide/C/security.xml:1317(para)
8805
msgid "Create a private and public encryption key pair."
8806
msgstr ""
8807
8808
#: serverguide/C/security.xml:1320(para)
8809
msgid ""
8810
"Create a certificate request based on the public key. The certificate "
8811
"request contains information about your server and the company hosting it."
8812
msgstr ""
8813
8814
#: serverguide/C/security.xml:1325(para)
8815
msgid ""
8816
"Send the certificate request, along with documents proving your identity, to "
8817
"a CA. We cannot tell you which certificate authority to choose. Your "
8818
"decision may be based on your past experiences, or on the experiences of "
8819
"your friends or colleagues, or purely on monetary factors."
8820
msgstr ""
8821
8822
#: serverguide/C/security.xml:1331(para)
8823
msgid ""
8824
"Once you have decided upon a CA, you need to follow the instructions they "
8825
"provide on how to obtain a certificate from them."
8826
msgstr ""
8827
8828
#: serverguide/C/security.xml:1336(para)
8829
msgid ""
8830
"When the CA is satisfied that you are indeed who you claim to be, they send "
8831
"you a digital certificate."
8832
msgstr ""
8833
8834
#: serverguide/C/security.xml:1340(para)
8835
msgid ""
8836
"Install this certificate on your secure server, and configure the "
8837
"appropriate applications to use the certificate."
8838
msgstr ""
8839
8840
#: serverguide/C/security.xml:1349(title)
8841
msgid "Generating a Certificate Signing Request (CSR)"
8842
msgstr ""
8843
8844
#: serverguide/C/security.xml:1351(para)
8845
msgid ""
8846
"Whether you are getting a certificate from a CA or generating your own self-"
8847
"signed certificate, the first step is to generate a key."
8848
msgstr ""
8849
8850
#: serverguide/C/security.xml:1356(para)
8851
msgid ""
8852
"If the certificate will be used by service daemons, such as Apache, Postfix, "
8853
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
8854
"passphrase allows the services to start without manual intervention, usually "
8855
"the preferred way to start a daemon."
8856
msgstr ""
8857
8858
#: serverguide/C/security.xml:1362(para)
8859
msgid ""
8860
"This section will cover generating a key with a passphrase, and one without. "
8861
"The non-passphrase key will then be used to generate a certificate that can "
8862
"be used with various service daemons."
8863
msgstr ""
8864
8865
#: serverguide/C/security.xml:1368(para)
8866
msgid ""
8867
"Running your secure service without a passphrase is convenient because you "
8868
"will not need to enter the passphrase every time you start your secure "
8869
"service. But it is insecure and a compromise of the key means a compromise "
8870
"of the server as well."
8871
msgstr ""
8872
8873
#: serverguide/C/security.xml:1375(para)
8874
msgid ""
8875
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
8876
"Request (CSR) run the following command from a terminal prompt:"
8877
msgstr ""
8878
8879
#: serverguide/C/security.xml:1381(command)
8880
msgid "openssl genrsa -des3 -out server.key 1024"
8881
msgstr ""
8882
8883
#: serverguide/C/security.xml:1384(programlisting)
8884
#, no-wrap
8885
msgid ""
8886
"\n"
8887
"Generating RSA private key, 1024 bit long modulus\n"
8888
".....................++++++\n"
8889
".................++++++\n"
8890
"unable to write 'random state'\n"
8891
"e is 65537 (0x10001)\n"
8892
"Enter pass phrase for server.key:\n"
8893
msgstr ""
8894
8895
#: serverguide/C/security.xml:1393(para)
8896
msgid ""
8897
"You can now enter your passphrase. For best security, it should at least "
8898
"contain eight characters. The minimum length when specifying -des3 is four "
8899
"characters. It should include numbers and/or punctuation and not be a word "
8900
"in a dictionary. Also remember that your passphrase is case-sensitive."
8901
msgstr ""
8902
8903
#: serverguide/C/security.xml:1401(para)
8904
msgid ""
8905
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
8906
"server key is generated and stored in the <filename>server.key</filename> "
8907
"file."
8908
msgstr ""
8909
8910
#: serverguide/C/security.xml:1407(para)
8911
msgid ""
8912
"Now create the insecure key, the one without a passphrase, and shuffle the "
8913
"key names:"
8914
msgstr ""
8915
8916
#: serverguide/C/security.xml:1413(command)
8917
msgid "openssl rsa -in server.key -out server.key.insecure"
8918
msgstr ""
8919
8920
#: serverguide/C/security.xml:1414(command)
8921
msgid "mv server.key server.key.secure"
8922
msgstr ""
8923
8924
#: serverguide/C/security.xml:1415(command)
8925
msgid "mv server.key.insecure server.key"
8926
msgstr ""
8927
8928
#: serverguide/C/security.xml:1418(para)
8929
msgid ""
8930
"The insecure key is now named <filename>server.key</filename>, and you can "
8931
"use this file to generate the CSR without passphrase."
8932
msgstr ""
8933
8934
#: serverguide/C/security.xml:1423(para)
8935
msgid "To create the CSR, run the following command at a terminal prompt:"
8936
msgstr ""
8937
8938
#: serverguide/C/security.xml:1428(command)
8939
msgid "openssl req -new -key server.key -out server.csr"
8940
msgstr ""
8941
8942
#: serverguide/C/security.xml:1431(para)
8943
msgid ""
8944
"It will prompt you enter the passphrase. If you enter the correct "
8945
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
8946
"etc. Once you enter all these details, your CSR will be created and it will "
8947
"be stored in the <filename>server.csr</filename> file."
8948
msgstr ""
8949
8950
#: serverguide/C/security.xml:1439(para)
8951
msgid ""
8952
"You can now submit this CSR file to a CA for processing. The CA will use "
8953
"this CSR file and issue the certificate. On the other hand, you can create "
8954
"self-signed certificate using this CSR."
8955
msgstr ""
8956
8957
#: serverguide/C/security.xml:1447(title)
8958
msgid "Creating a Self-Signed Certificate"
8959
msgstr ""
8960
8961
#: serverguide/C/security.xml:1448(para)
8962
msgid ""
8963
"To create the self-signed certificate, run the following command at a "
8964
"terminal prompt:"
8965
msgstr ""
8966
8967
#: serverguide/C/security.xml:1453(command)
8968
msgid ""
8969
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
8970
"server.crt"
8971
msgstr ""
8972
8973
#: serverguide/C/security.xml:1456(para)
8974
msgid ""
8975
"The above command will prompt you to enter the passphrase. Once you enter "
8976
"the correct passphrase, your certificate will be created and it will be "
8977
"stored in the <filename>server.crt</filename> file."
8978
msgstr ""
8979
8980
#: serverguide/C/security.xml:1461(para)
8981
msgid ""
8982
"If your secure server is to be used in a production environment, you "
8983
"probably need a CA-signed certificate. It is not recommended to use self-"
8984
"signed certificate."
8985
msgstr ""
8986
8987
#: serverguide/C/security.xml:1469(title)
8988
msgid "Installing the Certificate"
8989
msgstr ""
8990
8991
#: serverguide/C/security.xml:1471(para)
8992
msgid ""
8993
"You can install the key file <filename>server.key</filename> and certificate "
8994
"file <filename>server.crt</filename>, or the certificate file issued by your "
8995
"CA, by running following commands at a terminal prompt:"
8996
msgstr ""
8997
8998
#: serverguide/C/security.xml:1477(command)
8999
msgid "sudo cp server.crt /etc/ssl/certs"
9000
msgstr ""
9001
9002
#: serverguide/C/security.xml:1478(command)
9003
msgid "sudo cp server.key /etc/ssl/private"
9004
msgstr ""
9005
9006
#: serverguide/C/security.xml:1480(para)
9007
msgid ""
9008
"Now simply configure any applications, with the ability to use public-key "
9009
"cryptography, to use the <emphasis>certificate</emphasis> and "
9010
"<emphasis>key</emphasis> files. For example, "
9011
"<application>Apache</application> can provide HTTPS, "
9012
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9013
msgstr ""
9014
9015
#: serverguide/C/security.xml:1487(title)
9016
msgid "Certification Authority"
9017
msgstr ""
9018
9019
#: serverguide/C/security.xml:1489(para)
9020
msgid ""
9021
"If the services on your network require more than a few self-signed "
9022
"certificates it may be worth the additional effort to setup your own "
9023
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9024
"certificates signed by your own CA, allows the various services using the "
9025
"certificates to easily trust other services using certificates issued from "
9026
"the same CA."
9027
msgstr ""
9028
9029
#: serverguide/C/security.xml:1499(para)
9030
msgid ""
9031
"First, create the directories to hold the CA certificate and related files:"
9032
msgstr ""
9033
9034
#: serverguide/C/security.xml:1504(command)
9035
msgid "sudo mkdir /etc/ssl/CA"
9036
msgstr ""
9037
9038
#: serverguide/C/security.xml:1505(command)
9039
msgid "sudo mkdir /etc/ssl/newcerts"
9040
msgstr ""
9041
9042
#: serverguide/C/security.xml:1511(para)
9043
msgid ""
9044
"The CA needs a few additional files to operate, one to keep track of the "
9045
"last serial number used by the CA, each certificate must have a unique "
9046
"serial number, and another file to record which certificates have been "
9047
"issued:"
9048
msgstr ""
9049
9050
#: serverguide/C/security.xml:1518(command)
9051
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9052
msgstr ""
9053
9054
#: serverguide/C/security.xml:1519(command)
9055
msgid "sudo touch /etc/ssl/CA/index.txt"
9056
msgstr ""
9057
9058
#: serverguide/C/security.xml:1525(para)
9059
msgid ""
9060
"The third file is a CA configuration file. Though not strictly necessary, it "
9061
"is very convenient when issuing multiple certificates. Edit "
9062
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9063
"]</emphasis> change:"
9064
msgstr ""
9065
9066
#: serverguide/C/security.xml:1531(programlisting)
9067
#, no-wrap
9068
msgid ""
9069
"\n"
9070
"dir = /etc/ssl/ # Where everything is kept\n"
9071
"database = $dir/CA/index.txt # database index file.\n"
9072
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9073
"serial = $dir/CA/serial # The current serial number\n"
9074
"private_key = $dir/private/cakey.pem# The private key\n"
9075
msgstr ""
9076
9077
#: serverguide/C/security.xml:1542(para)
9078
msgid "Next, create the self-singed root certificate:"
9079
msgstr ""
9080
9081
#: serverguide/C/security.xml:1547(command)
9082
msgid ""
9083
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9084
"days 3650"
9085
msgstr ""
9086
9087
#: serverguide/C/security.xml:1550(para)
9088
msgid "You will then be asked to enter the details about the certificate."
9089
msgstr ""
9090
9091
#: serverguide/C/security.xml:1557(para)
9092
msgid "Now install the root certificate and key:"
9093
msgstr ""
9094
9095
#: serverguide/C/security.xml:1562(command)
9096
msgid "sudo mv cakey.pem /etc/ssl/private/"
9097
msgstr ""
9098
9099
#: serverguide/C/security.xml:1563(command)
9100
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9101
msgstr ""
9102
9103
#: serverguide/C/security.xml:1569(para)
9104
msgid ""
9105
"You are now ready to start signing certificates. The first item needed is a "
9106
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9107
"for details. Once you have a CSR, enter the following to generate a "
9108
"certificate signed by the CA:"
9109
msgstr ""
9110
9111
#: serverguide/C/security.xml:1576(command)
9112
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9113
msgstr ""
9114
9115
#: serverguide/C/security.xml:1579(para)
9116
msgid ""
9117
"After entering the password for the CA key, you will be prompted to sign the "
9118
"certificate, and again to commit the new certificate. You should then see a "
9119
"somewhat large amount of output related to the certificate creation."
9120
msgstr ""
9121
9122
#: serverguide/C/security.xml:1588(para)
9123
msgid ""
9124
"There should now be a new file, "
9125
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9126
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9127
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9128
"file named after the hostname of the server where the certificate will be "
9129
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9130
"descriptive name."
9131
msgstr ""
9132
9133
#: serverguide/C/security.xml:1596(para)
9134
msgid ""
9135
"Subsequent certificates will be named <filename>02.pem</filename>, "
9136
"<filename>03.pem</filename>, etc."
9137
msgstr ""
9138
9139
#: serverguide/C/security.xml:1601(para)
9140
msgid ""
9141
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9142
"name."
9143
msgstr ""
9144
9145
#: serverguide/C/security.xml:1609(para)
9146
msgid ""
9147
"Finally, copy the new certificate to the host that needs it, and configure "
9148
"the appropriate applications to use it. The default location to install "
9149
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9150
"enables multiple services to use the same certificate without overly "
9151
"complicated file permissions."
9152
msgstr ""
9153
9154
#: serverguide/C/security.xml:1615(para)
9155
msgid ""
9156
"For applications that can be configured to use a CA certificate, you should "
9157
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9158
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9159
"server."
9160
msgstr ""
9161
9162
#: serverguide/C/security.xml:1629(para)
9163
msgid ""
9164
"For more detailed instructions on using cryptography see the <ulink "
9165
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9166
"Certificates HOWTO</ulink> by tlpd.org"
9167
msgstr ""
9168
9169
#: serverguide/C/security.xml:1635(para)
9170
msgid ""
9171
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9172
"of Certificate Authorities."
9173
msgstr ""
9174
9175
#: serverguide/C/security.xml:1640(para)
9176
msgid ""
9177
"The Wikipedia <ulink "
9178
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9179
"information regarding HTTPS."
9180
msgstr ""
9181
9182
#: serverguide/C/security.xml:1645(para)
9183
msgid ""
9184
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9185
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9186
msgstr ""
9187
9188
#: serverguide/C/security.xml:1650(para)
9189
msgid ""
9190
"Also, O'Reilly's <ulink "
9191
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9192
"OpenSSL</ulink> is a good in depth reference."
9193
msgstr ""
9194
9195
#: serverguide/C/security.xml:1659(title)
9196
msgid "eCryptfs"
9197
msgstr ""
9198
9199
#: serverguide/C/security.xml:1661(para)
9200
msgid ""
9201
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9202
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9203
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9204
"filesystem, partition type, etc."
9205
msgstr ""
9206
9207
#: serverguide/C/security.xml:1667(para)
9208
msgid ""
9209
"During installation there is an option to encrypt the <filename "
9210
"role=\"directory\">/home</filename> partition. This will automatically "
9211
"configure everything needed to encrypt and mount the partition."
9212
msgstr ""
9213
9214
#: serverguide/C/security.xml:1672(para)
9215
msgid ""
9216
"As an example, this section will cover configuring <filename "
9217
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9218
msgstr ""
9219
9220
#: serverguide/C/security.xml:1677(title)
9221
msgid "Using eCryptfs"
9222
msgstr ""
9223
9224
#: serverguide/C/security.xml:1679(para)
9225
msgid "First, install the necessary packages. From a terminal prompt enter:"
9226
msgstr ""
9227
9228
#: serverguide/C/security.xml:1684(command)
9229
msgid "sudo apt-get install ecryptfs-utils"
9230
msgstr ""
9231
9232
#: serverguide/C/security.xml:1687(para)
9233
msgid "Now mount the partition to be encrypted:"
9234
msgstr ""
9235
9236
#: serverguide/C/security.xml:1692(command)
9237
msgid "sudo mount -t ecryptfs /srv /srv"
9238
msgstr ""
9239
9240
#: serverguide/C/security.xml:1695(para)
9241
msgid ""
9242
"You will then be prompted for some details on how "
9243
"<application>ecryptfs</application> should encrypt the data."
9244
msgstr ""
9245
9246
#: serverguide/C/security.xml:1699(para)
9247
msgid ""
9248
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9249
"copy the <filename>/etc/default</filename> folder to "
9250
"<filename>/srv</filename>:"
9251
msgstr ""
9252
9253
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9254
msgid "sudo cp -r /etc/default /srv"
9255
msgstr ""
9256
9257
#: serverguide/C/security.xml:1708(para)
9258
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9259
msgstr ""
9260
9261
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9262
msgid "sudo umount /srv"
9263
msgstr ""
9264
9265
#: serverguide/C/security.xml:1714(command)
9266
msgid "cat /srv/default/cron"
9267
msgstr ""
9268
9269
#: serverguide/C/security.xml:1717(para)
9270
msgid ""
9271
"Remounting <filename>/srv</filename> using "
9272
"<application>ecryptfs</application> will make the data viewable once again."
9273
msgstr ""
9274
9275
#: serverguide/C/security.xml:1723(title)
9276
msgid "Automatically Mounting Encrypted Partitions"
9277
msgstr ""
9278
9279
#: serverguide/C/security.xml:1725(para)
9280
msgid ""
9281
"There are a couple of ways to automatically mount an "
9282
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9283
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9284
"mount options, along with a passphrase file residing on a USB key."
9285
msgstr ""
9286
9287
#: serverguide/C/security.xml:1731(para)
9288
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9289
msgstr ""
9290
9291
#: serverguide/C/security.xml:1735(programlisting)
9292
#, no-wrap
9293
msgid ""
9294
"\n"
9295
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9296
"ecryptfs_sig=5826dd62cf81c615\n"
9297
"ecryptfs_cipher=aes\n"
9298
"ecryptfs_key_bytes=16\n"
9299
"ecryptfs_passthrough=n\n"
9300
"ecryptfs_enable_filename_crypto=n\n"
9301
msgstr ""
9302
9303
#: serverguide/C/security.xml:1745(para)
9304
msgid ""
9305
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9306
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9307
msgstr ""
9308
9309
#: serverguide/C/security.xml:1750(para)
9310
msgid ""
9311
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9312
"file:"
9313
msgstr ""
9314
9315
#: serverguide/C/security.xml:1754(programlisting)
9316
#, no-wrap
9317
msgid ""
9318
"\n"
9319
"passphrase_passwd=[secrets]\n"
9320
msgstr ""
9321
9322
#: serverguide/C/security.xml:1758(para)
9323
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9324
msgstr ""
9325
9326
#: serverguide/C/security.xml:1762(programlisting)
9327
#, no-wrap
9328
msgid ""
9329
"\n"
9330
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9331
"/srv /srv ecryptfs defaults 0 0\n"
9332
msgstr ""
9333
9334
#: serverguide/C/security.xml:1767(para)
9335
msgid "Make sure the USB drive is mounted before the encrypted partition."
9336
msgstr ""
9337
9338
#: serverguide/C/security.xml:1771(para)
9339
msgid ""
9340
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9341
"ecryptfs."
9342
msgstr ""
9343
9344
#: serverguide/C/security.xml:1779(para)
9345
msgid ""
9346
"The <application>ecryptfs-utils</application> package includes several other "
9347
"useful utilities:"
9348
msgstr ""
9349
9350
#: serverguide/C/security.xml:1785(para)
9351
msgid ""
9352
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9353
"<filename>~/Private</filename> directory to contain encrypted information. "
9354
"This utility can be run by unprivileged users to keep data private from "
9355
"other users on the system."
9356
msgstr ""
9357
9358
#: serverguide/C/security.xml:1792(para)
9359
msgid ""
9360
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9361
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9362
"directory."
9363
msgstr ""
9364
9365
#: serverguide/C/security.xml:1798(para)
9366
msgid ""
9367
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9368
"kernel keyring."
9369
msgstr ""
9370
9371
#: serverguide/C/security.xml:1803(para)
9372
msgid ""
9373
"<emphasis>ecryptfs-manager:</emphasis> manages "
9374
"<application>eCryptfs</application> objects such as keys."
9375
msgstr ""
9376
9377
#: serverguide/C/security.xml:1808(para)
9378
msgid ""
9379
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9380
"<application>ecryptfs</application> meta information for a file."
9381
msgstr ""
9382
9383
#: serverguide/C/security.xml:1821(para)
9384
msgid ""
9385
"For more information on eCryptfs see the <ulink "
9386
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9387
msgstr ""
9388
9389
#: serverguide/C/security.xml:1826(para)
9390
msgid ""
9391
"There is also a <ulink "
9392
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9393
"article covering eCryptfs."
9394
msgstr ""
9395
9396
#: serverguide/C/security.xml:1831(para)
9397
msgid ""
9398
"Also, for more <application>ecryptfs</application> options see the <ulink "
9399
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9400
"yptfs man page</ulink>."
9401
msgstr ""
9402
9403
#: serverguide/C/security.xml:1837(para)
9404
msgid ""
9405
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9406
"Ubuntu Wiki</ulink> page also has more details."
9407
msgstr ""
9408
9409
#: serverguide/C/reporting-bugs.xml:13(title)
9410
msgid "Appendix"
9411
msgstr ""
9412
9413
#: serverguide/C/reporting-bugs.xml:16(title)
9414
msgid "Reporting Bugs in Ubuntu Server Edition"
9415
msgstr ""
9416
9417
#: serverguide/C/reporting-bugs.xml:18(para)
9418
msgid ""
9419
"While the Ubuntu Project attempts to release software with as few bugs as "
9420
"possible, they do occur. You can help fix these bugs by reporting ones that "
9421
"you find to the project. The Ubuntu Project uses <ulink "
9422
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9423
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9424
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9425
"account</ulink>."
9426
msgstr ""
9427
9428
#: serverguide/C/reporting-bugs.xml:30(title)
9429
msgid "Reporting Bugs With ubuntu-bug"
9430
msgstr ""
9431
9432
#: serverguide/C/reporting-bugs.xml:32(para)
9433
msgid ""
9434
"The preferred way to report a bug is with the <application>ubuntu-"
9435
"bug</application> command. The ubuntu-bug tool gathers information about the "
9436
"system useful to developers in diagnosing the reported problem that will "
9437
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9438
"need to be filed against a specific software package, thus the name of the "
9439
"package that the bug occurs in needs to be given to ubuntu-bug:"
9440
msgstr ""
9441
9442
#: serverguide/C/reporting-bugs.xml:43(command)
9443
msgid "ubuntu-bug PACKAGENAME"
9444
msgstr ""
9445
9446
#: serverguide/C/reporting-bugs.xml:46(para)
9447
msgid ""
9448
"For example, to file a bug against the openssh-server package, you would do:"
9449
msgstr ""
9450
9451
#: serverguide/C/reporting-bugs.xml:51(command)
9452
msgid "ubuntu-bug openssh-server"
9453
msgstr ""
9454
9455
#: serverguide/C/reporting-bugs.xml:54(para)
9456
msgid ""
9457
"You can specify either a binary package or the source package for ubuntu-"
9458
"bug. Again using openssh-server as an example, you could also generate the "
9459
"report against the source package for openssh-server, openssh:"
9460
msgstr ""
9461
9462
#: serverguide/C/reporting-bugs.xml:62(command)
9463
msgid "ubuntu-bug openssh"
9464
msgstr ""
9465
9466
#: serverguide/C/reporting-bugs.xml:66(para)
9467
msgid ""
9468
"See <xref linkend=\"package-management\"/> for more information about "
9469
"packages in Ubuntu."
9470
msgstr ""
9471
9472
#: serverguide/C/reporting-bugs.xml:72(para)
9473
msgid ""
9474
"The ubuntu-bug command will gather information about the system in question, "
9475
"possibly including information specific to the specified package, and then "
9476
"ask you what you would like to do with collected information:"
9477
msgstr ""
9478
9479
#: serverguide/C/reporting-bugs.xml:80(command)
9480
msgid "ubuntu-bug postgresql"
9481
msgstr ""
9482
9483
#: serverguide/C/reporting-bugs.xml:79(screen)
9484
#, no-wrap
9485
msgid ""
9486
"\n"
9487
"<placeholder-1/>\n"
9488
"\n"
9489
"*** Collecting problem information\n"
9490
"\n"
9491
"The collected information can be sent to the developers to improve the\n"
9492
"application. This might take a few minutes.\n"
9493
"..........\n"
9494
"\n"
9495
"*** Send problem report to the developers?\n"
9496
"\n"
9497
"After the problem report has been sent, please fill out the form in the\n"
9498
"automatically opened web browser.\n"
9499
"\n"
9500
"What would you like to do? Your options are:\n"
9501
" S: Send report (1.7 KiB)\n"
9502
" V: View report\n"
9503
" K: Keep report file for sending later or copying to somewhere else\n"
9504
" C: Cancel\n"
9505
"Please choose (S/V/K/C):\n"
9506
msgstr ""
9507
9508
#: serverguide/C/reporting-bugs.xml:101(para)
9509
msgid "The options available are:"
9510
msgstr ""
9511
9512
#: serverguide/C/reporting-bugs.xml:108(para)
9513
msgid ""
9514
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9515
"the collected information to Launchpad as part of the the process of filing "
9516
"a bug report. You will be given the opportunity to describe the situation "
9517
"that led up to the occurrance of the bug."
9518
msgstr ""
9519
9520
#: serverguide/C/reporting-bugs.xml:115(screen)
9521
#, no-wrap
9522
msgid ""
9523
"\n"
9524
"*** Uploading problem information\n"
9525
"\n"
9526
"The collected information is being sent to the bug tracking system.\n"
9527
"This might take a few minutes.\n"
9528
"91%\n"
9529
"\n"
9530
"*** To continue, you must visit the following URL:\n"
9531
"\n"
9532
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9533
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9534
"\n"
9535
"You can launch a browser now, or copy this URL into a browser on another\n"
9536
"computer.\n"
9537
"\n"
9538
"Choices:\n"
9539
" 1: Launch a browser now\n"
9540
" C: Cancel\n"
9541
"Please choose (1/C):\n"
9542
msgstr ""
9543
9544
#: serverguide/C/reporting-bugs.xml:135(para)
9545
msgid ""
9546
"If you choose to start a browser, by default the text based web browser "
9547
"<application>w3m</application> will be used to finish filing the bug report. "
9548
"Alternately, you can copy the given URL to a currently running web browser."
9549
msgstr ""
9550
9551
#: serverguide/C/reporting-bugs.xml:144(para)
9552
msgid ""
9553
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9554
"the collected information to be displayed to the terminal for review."
9555
msgstr ""
9556
9557
#: serverguide/C/reporting-bugs.xml:150(screen)
9558
#, no-wrap
9559
msgid ""
9560
"\n"
9561
"Package: postgresql 8.4.2-2\n"
9562
"PackageArchitecture: all\n"
9563
"Tags: lucid\n"
9564
"ProblemType: Bug\n"
9565
"ProcEnviron:\n"
9566
" LANG=en_US.UTF-8\n"
9567
" SHELL=/bin/bash\n"
9568
"Uname: Linux 2.6.32-16-server x86_64\n"
9569
"Dependencies:\n"
9570
" adduser 3.112ubuntu1\n"
9571
" base-files 5.0.0ubuntu10\n"
9572
" base-passwd 3.5.22\n"
9573
" coreutils 7.4-2ubuntu2\n"
9574
"...\n"
9575
msgstr ""
9576
9577
#: serverguide/C/reporting-bugs.xml:167(para)
9578
msgid ""
9579
"After viewing the report, you will be brought back to the same menu asking "
9580
"what you would like to do with the report."
9581
msgstr ""
9582
9583
#: serverguide/C/reporting-bugs.xml:174(para)
9584
msgid ""
9585
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9586
"File causes the gathered information to be written to a file. This file can "
9587
"then be used to later file a bug report or transferred to a different Ubuntu "
9588
"system for reporting. To submit the report file, simply give it as an "
9589
"argument to the ubuntu-bug command:"
9590
msgstr ""
9591
9592
#: serverguide/C/reporting-bugs.xml:189(userinput)
9593
#, no-wrap
9594
msgid "k"
9595
msgstr ""
9596
9597
#: serverguide/C/reporting-bugs.xml:192(command)
9598
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9599
msgstr ""
9600
9601
#: serverguide/C/reporting-bugs.xml:183(screen)
9602
#, no-wrap
9603
msgid ""
9604
"\n"
9605
"What would you like to do? Your options are:\n"
9606
" S: Send report (1.7 KiB)\n"
9607
" V: View report\n"
9608
" K: Keep report file for sending later or copying to somewhere else\n"
9609
" C: Cancel\n"
9610
"Please choose (S/V/K/C): <placeholder-1/>\n"
9611
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9612
"\n"
9613
"<placeholder-2/>\n"
9614
"\n"
9615
"*** Send problem report to the developers?\n"
9616
"...\n"
9617
msgstr ""
9618
9619
#: serverguide/C/reporting-bugs.xml:200(para)
9620
msgid ""
9621
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9622
"collected information to be discarded."
9623
msgstr ""
9624
9625
#: serverguide/C/reporting-bugs.xml:210(title)
9626
msgid "Reporting Application Crashes"
9627
msgstr ""
9628
9629
#: serverguide/C/reporting-bugs.xml:212(para)
9630
msgid ""
9631
"The software package that provides the ubuntu-bug utility, "
9632
"<application>apport</application>, can be configured to trigger when "
9633
"applications crash. This is disabled by default, as capturing a crash can be "
9634
"resource intensive depending on how much memory the application that crashed "
9635
"was using as apport captures and processes the core dump."
9636
msgstr ""
9637
9638
#: serverguide/C/reporting-bugs.xml:221(para)
9639
msgid ""
9640
"Configuring apport to capture information about crashing applications "
9641
"requires a couple of steps. First, <application>gdb</application> needs to "
9642
"be installed; it is not installed by default in Ubuntu Server Edition."
9643
msgstr ""
9644
9645
#: serverguide/C/reporting-bugs.xml:229(command)
9646
msgid "sudo apt-get install gdb"
9647
msgstr ""
9648
9649
#: serverguide/C/reporting-bugs.xml:232(para)
9650
msgid ""
9651
"See <xref linkend=\"package-management\"/> for more information about "
9652
"managing packages in Ubuntu."
9653
msgstr ""
9654
9655
#: serverguide/C/reporting-bugs.xml:237(para)
9656
msgid ""
9657
"Once you have ensured that gdb is installed, open the file "
9658
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9659
"<emphasis>enabled</emphasis> setting to be <emphasis "
9660
"role=\"bold\">1</emphasis> like so:"
9661
msgstr ""
9662
9663
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9664
#, no-wrap
9665
msgid ""
9666
"\n"
9667
"# set this to 0 to disable apport, or to 1 to enable it\n"
9668
"# you can temporarily override this with\n"
9669
"# sudo service apport start force_start=1\n"
9670
"enabled=<userinput>1</userinput>\n"
9671
"\n"
9672
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9673
"maxsize=209715200\n"
9674
msgstr ""
9675
9676
#: serverguide/C/reporting-bugs.xml:254(para)
9677
msgid ""
9678
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9679
"start the apport service:"
9680
msgstr ""
9681
9682
#: serverguide/C/reporting-bugs.xml:261(command)
9683
msgid "sudo start apport"
9684
msgstr ""
9685
9686
#: serverguide/C/reporting-bugs.xml:264(para)
9687
msgid ""
9688
"After an application crashes, use the <application>apport-cli</application> "
9689
"command to search for the existing saved crash report information:"
9690
msgstr ""
9691
9692
#: serverguide/C/reporting-bugs.xml:271(command)
9693
msgid "apport-cli"
9694
msgstr ""
9695
9696
#: serverguide/C/reporting-bugs.xml:270(screen)
9697
#, no-wrap
9698
msgid ""
9699
"\n"
9700
"<placeholder-1/>\n"
9701
"\n"
9702
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
9703
"\n"
9704
"If you were not doing anything confidential (entering passwords or other\n"
9705
"private information), you can help to improve the application by\n"
9706
"reporting\n"
9707
"the problem.\n"
9708
"\n"
9709
"What would you like to do? Your options are:\n"
9710
" R: Report Problem...\n"
9711
" I: Cancel and ignore future crashes of this program version\n"
9712
" C: Cancel\n"
9713
"Please choose (R/I/C):\n"
9714
msgstr ""
9715
9716
#: serverguide/C/reporting-bugs.xml:287(para)
9717
msgid ""
9718
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
9719
"steps as when using ubuntu-bug. One important difference is that a crash "
9720
"report will be marked as private when filed on Launchpad, meaning that it "
9721
"will be visible to only a limited set of bug triagers. These triagers will "
9722
"review the gathered data for private information before making the bug "
9723
"report publicly visible."
9724
msgstr ""
9725
9726
#: serverguide/C/reporting-bugs.xml:307(para)
9727
msgid ""
9728
"See the <ulink "
9729
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
9730
"Bugs</ulink> Ubuntu wiki page."
9731
msgstr ""
9732
9733
#: serverguide/C/reporting-bugs.xml:313(para)
9734
msgid ""
9735
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
9736
"has some useful information. Though some of it pertains to using a GUI."
9737
msgstr ""
9738
9739
#: serverguide/C/remote-administration.xml:13(title)
9740
msgid "Remote Administration"
9741
msgstr ""
9742
9743
#: serverguide/C/remote-administration.xml:14(para)
9744
msgid ""
9745
"There are many ways to remotely administer a Linux server. This chapter will "
9746
"cover one of the most popular <application>SSH</application> as well as "
9747
"<application>eBox</application>, a web based administration framework."
9748
msgstr ""
9749
9750
#: serverguide/C/remote-administration.xml:23(para)
9751
msgid ""
9752
"This section of the Ubuntu Server Guide introduces a powerful collection of "
9753
"tools for the remote control of networked computers and transfer of data "
9754
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
9755
"also learn about some of the configuration settings possible with the "
9756
"OpenSSH server application and how to change them on your Ubuntu system."
9757
msgstr ""
9758
9759
#: serverguide/C/remote-administration.xml:30(para)
9760
msgid ""
9761
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
9762
"family of tools for remotely controlling a computer or transferring files "
9763
"between computers. Traditional tools used to accomplish these functions, "
9764
"such as <application>telnet</application> or <application>rcp</application>, "
9765
"are insecure and transmit the user's password in cleartext when used. "
9766
"OpenSSH provides a server daemon and client tools to facilitate secure, "
9767
"encrypted remote control and file transfer operations, effectively replacing "
9768
"the legacy tools."
9769
msgstr ""
9770
9771
#: serverguide/C/remote-administration.xml:39(para)
9772
msgid ""
9773
"The OpenSSH server component, <application>sshd</application>, listens "
9774
"continuously for client connections from any of the client tools. When a "
9775
"connection request occurs, <application>sshd</application> sets up the "
9776
"correct connection depending on the type of client tool connecting. For "
9777
"example, if the remote computer is connecting with the "
9778
"<application>ssh</application> client application, the OpenSSH server sets "
9779
"up a remote control session after authentication. If a remote user connects "
9780
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
9781
"daemon initiates a secure copy of files between the server and client after "
9782
"authentication. OpenSSH can use many authentication methods, including plain "
9783
"password, public key, and <application>Kerberos</application> tickets."
9784
msgstr ""
9785
9786
#: serverguide/C/remote-administration.xml:53(para)
9787
msgid ""
9788
"Installation of the OpenSSH client and server applications is simple. To "
9789
"install the OpenSSH client applications on your Ubuntu system, use this "
9790
"command at a terminal prompt:"
9791
msgstr ""
9792
9793
#: serverguide/C/remote-administration.xml:59(command)
9794
msgid "sudo apt-get install openssh-client"
9795
msgstr ""
9796
9797
#: serverguide/C/remote-administration.xml:61(para)
9798
msgid ""
9799
"To install the OpenSSH server application, and related support files, use "
9800
"this command at a terminal prompt:"
9801
msgstr ""
9802
9803
#: serverguide/C/remote-administration.xml:66(command)
9804
msgid "sudo apt-get install openssh-server"
9805
msgstr ""
9806
9807
#: serverguide/C/remote-administration.xml:68(para)
9808
msgid ""
9809
"The <application>openssh-server</application> package can also be selected "
9810
"to install during the Server Edition installation process."
9811
msgstr ""
9812
9813
#: serverguide/C/remote-administration.xml:75(para)
9814
msgid ""
9815
"You may configure the default behavior of the OpenSSH server application, "
9816
"<application>sshd</application>, by editing the file "
9817
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
9818
"configuration directives used in this file, you may view the appropriate "
9819
"manual page with the following command, issued at a terminal prompt:"
9820
msgstr ""
9821
9822
#: serverguide/C/remote-administration.xml:83(command)
9823
msgid "man sshd_config"
9824
msgstr ""
9825
9826
#: serverguide/C/remote-administration.xml:85(para)
9827
msgid ""
9828
"There are many directives in the <application>sshd</application> "
9829
"configuration file controlling such things as communication settings and "
9830
"authentication modes. The following are examples of configuration directives "
9831
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
9832
"file."
9833
msgstr ""
9834
9835
#: serverguide/C/remote-administration.xml:92(para)
9836
msgid ""
9837
"Prior to editing the configuration file, you should make a copy of the "
9838
"original file and protect it from writing so you will have the original "
9839
"settings as a reference and to reuse as necessary."
9840
msgstr ""
9841
9842
#: serverguide/C/remote-administration.xml:96(para)
9843
msgid ""
9844
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
9845
"writing with the following commands, issued at a terminal prompt:"
9846
msgstr ""
9847
9848
#: serverguide/C/remote-administration.xml:101(command)
9849
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
9850
msgstr ""
9851
9852
#: serverguide/C/remote-administration.xml:102(command)
9853
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
9854
msgstr ""
9855
9856
#: serverguide/C/remote-administration.xml:104(para)
9857
msgid ""
9858
"The following are examples of configuration directives you may change:"
9859
msgstr ""
9860
9861
#: serverguide/C/remote-administration.xml:109(para)
9862
msgid ""
9863
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
9864
"port 22, change the Port directive as such:"
9865
msgstr ""
9866
9867
#: serverguide/C/remote-administration.xml:113(para)
9868
msgid "Port 2222"
9869
msgstr ""
9870
9871
#: serverguide/C/remote-administration.xml:118(para)
9872
msgid ""
9873
"To have <application>sshd</application> allow public key-based login "
9874
"credentials, simply add or modify the line:"
9875
msgstr ""
9876
9877
#: serverguide/C/remote-administration.xml:122(para)
9878
msgid "PubkeyAuthentication yes"
9879
msgstr ""
9880
9881
#: serverguide/C/remote-administration.xml:125(para)
9882
msgid ""
9883
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
9884
"present, ensure the line is not commented out."
9885
msgstr ""
9886
9887
#: serverguide/C/remote-administration.xml:131(para)
9888
msgid ""
9889
"To make your OpenSSH server display the contents of the "
9890
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
9891
"or modify the line:"
9892
msgstr ""
9893
9894
#: serverguide/C/remote-administration.xml:136(para)
9895
msgid "Banner /etc/issue.net"
9896
msgstr ""
9897
9898
#: serverguide/C/remote-administration.xml:139(para)
9899
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
9900
msgstr ""
9901
9902
#: serverguide/C/remote-administration.xml:144(para)
9903
msgid ""
9904
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
9905
"save the file, and restart the <application>sshd</application> server "
9906
"application to effect the changes using the following command at a terminal "
9907
"prompt:"
9908
msgstr ""
9909
9910
#: serverguide/C/remote-administration.xml:153(para)
9911
msgid ""
9912
"Many other configuration directives for <application>sshd</application> are "
9913
"available for changing the server application's behavior to fit your needs. "
9914
"Be advised, however, if your only method of access to a server is "
9915
"<application>ssh</application>, and you make a mistake in configuring "
9916
"<application>sshd</application> via the "
9917
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
9918
"out of the server upon restarting it, or that the "
9919
"<application>sshd</application> server refuses to start due to an incorrect "
9920
"configuration directive, so be extra careful when editing this file on a "
9921
"remote server."
9922
msgstr ""
9923
9924
#: serverguide/C/remote-administration.xml:168(title)
9925
msgid "SSH Keys"
9926
msgstr ""
9927
9928
#: serverguide/C/remote-administration.xml:169(para)
9929
msgid ""
9930
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
9931
"the need of a password. SSH key authentication uses two keys a "
9932
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
9933
msgstr ""
9934
9935
#: serverguide/C/remote-administration.xml:173(para)
9936
msgid "To generate the keys, from a terminal prompt enter:"
9937
msgstr ""
9938
9939
#: serverguide/C/remote-administration.xml:177(command)
9940
msgid "ssh-keygen -t dsa"
9941
msgstr ""
9942
9943
#: serverguide/C/remote-administration.xml:179(para)
9944
msgid ""
9945
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
9946
"identity of the user. During the process you will be prompted for a "
9947
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
9948
"key."
9949
msgstr ""
9950
9951
#: serverguide/C/remote-administration.xml:183(para)
9952
msgid ""
9953
"By default the <emphasis>public</emphasis> key is saved in the file "
9954
"<filename>~/.ssh/id_dsa.pub</filename>, while "
9955
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
9956
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
9957
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
9958
msgstr ""
9959
9960
#: serverguide/C/remote-administration.xml:189(command)
9961
msgid "ssh-copy-id username@remotehost"
9962
msgstr ""
9963
9964
#: serverguide/C/remote-administration.xml:191(para)
9965
msgid ""
9966
"Finally, double check the permissions on the "
9967
"<filename>authorized_keys</filename> file, only the authenticated user "
9968
"should have read and write permissions. If the permissions are not correct "
9969
"change them by:"
9970
msgstr ""
9971
9972
#: serverguide/C/remote-administration.xml:196(command)
9973
msgid "chmod 600 .ssh/authorized_keys"
9974
msgstr ""
9975
9976
#: serverguide/C/remote-administration.xml:198(para)
9977
msgid ""
9978
"You should now be able to SSH to the host without being prompted for a "
9979
"password."
9980
msgstr ""
9981
9982
#: serverguide/C/remote-administration.xml:207(para)
9983
msgid ""
9984
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
9985
"page."
9986
msgstr ""
9987
9988
#: serverguide/C/remote-administration.xml:213(ulink)
9989
msgid "OpenSSH Website"
9990
msgstr ""
9991
9992
#: serverguide/C/remote-administration.xml:218(ulink)
9993
msgid "Advanced OpenSSH Wiki Page"
9994
msgstr ""
9995
9996
#: serverguide/C/remote-administration.xml:226(title)
9997
msgid "eBox"
9998
msgstr ""
9999
10000
#: serverguide/C/remote-administration.xml:227(para)
10001
msgid ""
10002
"<application>eBox</application> is a web framework used to manage server "
10003
"application configuration. The modular design of eBox allows you to pick and "
10004
"choose which services you want to configure using eBox."
10005
msgstr ""
10006
10007
#: serverguide/C/remote-administration.xml:234(para)
10008
msgid ""
10009
"The different <application>eBox</application> modules are split into "
10010
"different packages, allowing you to only install those necessary. One way to "
10011
"view the available packages is to enter the following from a terminal:"
10012
msgstr ""
10013
10014
#: serverguide/C/remote-administration.xml:240(command)
10015
msgid "apt-cache rdepends ebox | uniq"
10016
msgstr ""
10017
10018
#: serverguide/C/remote-administration.xml:242(para)
10019
msgid ""
10020
"To install the <application>ebox</application> package, which contains the "
10021
"default modules, enter the following:"
10022
msgstr ""
10023
10024
#: serverguide/C/remote-administration.xml:247(command)
10025
msgid "sudo apt-get install ebox"
10026
msgstr ""
10027
10028
#: serverguide/C/remote-administration.xml:250(para)
10029
msgid ""
10030
"During the installation you will be asked to supply a password for the ebox "
10031
"user. After installing eBox the web interface can be accessed from: "
10032
"<emphasis>https://yourserver/ebox</emphasis>."
10033
msgstr ""
10034
10035
#: serverguide/C/remote-administration.xml:259(para)
10036
msgid ""
10037
"An important thing to remember when using <application>eBox</application> is "
10038
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10039
"button that implements the new configuration. After clicking the Change "
10040
"button most, but not all, modules will then need to be "
10041
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10042
"<quote>Save changes</quote> link in the top right hand corner."
10043
msgstr ""
10044
10045
#: serverguide/C/remote-administration.xml:267(para)
10046
msgid ""
10047
"Once you make a change that requires a Save, the link will change from green "
10048
"to red."
10049
msgstr ""
10050
10051
#: serverguide/C/remote-administration.xml:273(title)
10052
msgid "eBox Modules"
10053
msgstr ""
10054
10055
#: serverguide/C/remote-administration.xml:274(para)
10056
msgid ""
10057
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10058
"new module is installed it will not be automatically enabled."
10059
msgstr ""
10060
10061
#: serverguide/C/remote-administration.xml:278(para)
10062
msgid ""
10063
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10064
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10065
"which modules you would like to enable and click the <quote>Save</quote> "
10066
"link."
10067
msgstr ""
10068
10069
#: serverguide/C/remote-administration.xml:284(title)
10070
msgid "Default Modules"
10071
msgstr ""
10072
10073
#: serverguide/C/remote-administration.xml:285(para)
10074
msgid ""
10075
"This section provides a quick summary of the default "
10076
"<application>eBox</application> modules."
10077
msgstr ""
10078
10079
#: serverguide/C/remote-administration.xml:291(para)
10080
msgid ""
10081
"<emphasis>System:</emphasis> contains options allowing configuration of "
10082
"general eBox items."
10083
msgstr ""
10084
10085
#: serverguide/C/remote-administration.xml:297(para)
10086
msgid ""
10087
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10088
"and contains a change password form."
10089
msgstr ""
10090
10091
#: serverguide/C/remote-administration.xml:303(para)
10092
msgid ""
10093
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10094
"about disk usage."
10095
msgstr ""
10096
10097
#: serverguide/C/remote-administration.xml:309(para)
10098
msgid ""
10099
"<emphasis>Backup:</emphasis> is used to backup "
10100
"<application>eBox</application> configuration information, and the "
10101
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10102
"information not included in the <emphasis>Configuration</emphasis> option "
10103
"such as log files."
10104
msgstr ""
10105
10106
#: serverguide/C/remote-administration.xml:317(para)
10107
msgid ""
10108
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10109
msgstr ""
10110
10111
#: serverguide/C/remote-administration.xml:322(para)
10112
msgid ""
10113
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10114
"when reporting bugs to the eBox developers."
10115
msgstr ""
10116
10117
#: serverguide/C/remote-administration.xml:330(para)
10118
msgid ""
10119
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10120
"queried depending on the purge time configured."
10121
msgstr ""
10122
10123
#: serverguide/C/remote-administration.xml:336(para)
10124
msgid ""
10125
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10126
"through rss, jabber, and log file."
10127
msgstr ""
10128
10129
#: serverguide/C/remote-administration.xml:343(emphasis)
10130
msgid "Available Events:"
10131
msgstr ""
10132
10133
#: serverguide/C/remote-administration.xml:347(para)
10134
msgid ""
10135
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10136
"drops below a configured percentage, 10% by default."
10137
msgstr ""
10138
10139
#: serverguide/C/remote-administration.xml:353(para)
10140
msgid ""
10141
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10142
"has logged something."
10143
msgstr ""
10144
10145
#: serverguide/C/remote-administration.xml:359(para)
10146
msgid ""
10147
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10148
"any issues arise."
10149
msgstr ""
10150
10151
#: serverguide/C/remote-administration.xml:365(para)
10152
msgid ""
10153
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10154
"times in a short time period."
10155
msgstr ""
10156
10157
#: serverguide/C/remote-administration.xml:371(para)
10158
msgid ""
10159
"<emphasis>State:</emphasis> alerts on the state of "
10160
"<application>eBox</application>, either up or down."
10161
msgstr ""
10162
10163
#: serverguide/C/remote-administration.xml:380(emphasis)
10164
msgid "Dispatchers:"
10165
msgstr ""
10166
10167
#: serverguide/C/remote-administration.xml:384(para)
10168
msgid ""
10169
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10170
"<application>eBox</application> log file "
10171
"<filename>/var/log/ebox/ebox.log</filename>."
10172
msgstr ""
10173
10174
#: serverguide/C/remote-administration.xml:391(para)
10175
msgid ""
10176
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10177
"configure it by clicking on the <quote>Configure</quote> icon."
10178
msgstr ""
10179
10180
#: serverguide/C/remote-administration.xml:397(para)
10181
msgid ""
10182
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10183
"subscribe to the link in order to view event alerts."
10184
msgstr ""
10185
10186
#: serverguide/C/remote-administration.xml:410(title)
10187
msgid "Additional Modules"
10188
msgstr ""
10189
10190
#: serverguide/C/remote-administration.xml:411(para)
10191
msgid ""
10192
"Here is a quick description of other available "
10193
"<application>eBox</application> modules:"
10194
msgstr ""
10195
10196
#: serverguide/C/remote-administration.xml:416(para)
10197
msgid ""
10198
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10199
"options through eBox."
10200
msgstr ""
10201
10202
#: serverguide/C/remote-administration.xml:422(para)
10203
msgid ""
10204
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10205
msgstr ""
10206
10207
#: serverguide/C/remote-administration.xml:427(para)
10208
msgid ""
10209
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10210
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10211
msgstr ""
10212
10213
#: serverguide/C/remote-administration.xml:433(para)
10214
msgid ""
10215
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10216
"server."
10217
msgstr ""
10218
10219
#: serverguide/C/remote-administration.xml:438(para)
10220
msgid ""
10221
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10222
"server configuration options."
10223
msgstr ""
10224
10225
#: serverguide/C/remote-administration.xml:444(para)
10226
msgid ""
10227
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10228
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10229
"group of IPs."
10230
msgstr ""
10231
10232
#: serverguide/C/remote-administration.xml:451(para)
10233
msgid ""
10234
"<emphasis>Services:</emphasis> displays configuration information for "
10235
"services that are available to the network."
10236
msgstr ""
10237
10238
#: serverguide/C/remote-administration.xml:457(para)
10239
msgid ""
10240
"<emphasis>Squid:</emphasis> configuration options for the "
10241
"<application>Squid</application> proxy server."
10242
msgstr ""
10243
10244
#: serverguide/C/remote-administration.xml:463(para)
10245
msgid ""
10246
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10247
msgstr ""
10248
10249
#: serverguide/C/remote-administration.xml:468(para)
10250
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10251
msgstr ""
10252
10253
#: serverguide/C/remote-administration.xml:473(para)
10254
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10255
msgstr ""
10256
10257
#: serverguide/C/remote-administration.xml:478(para)
10258
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10259
msgstr ""
10260
10261
#: serverguide/C/remote-administration.xml:483(para)
10262
msgid ""
10263
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10264
"Network application."
10265
msgstr ""
10266
10267
#: serverguide/C/remote-administration.xml:494(para)
10268
msgid ""
10269
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10270
"Wiki</ulink> page has more details."
10271
msgstr ""
10272
10273
#: serverguide/C/remote-administration.xml:499(para)
10274
msgid ""
10275
"For more information also see the <ulink url=\"http://ebox-"
10276
"platform.com/\">eBox Home Page</ulink>."
10277
msgstr ""
10278
10279
#: serverguide/C/package-management.xml:13(title)
10280
msgid "Package Management"
10281
msgstr ""
10282
10283
#: serverguide/C/package-management.xml:14(para)
10284
msgid ""
10285
"Ubuntu features a comprehensive package management system for the "
10286
"installation, upgrade, configuration, and removal of software. In addition "
10287
"to providing access to an organized base of over 24,000 software packages "
10288
"for your Ubuntu computer, the package management facilities also feature "
10289
"dependency resolution capabilities and software update checking."
10290
msgstr ""
10291
10292
#: serverguide/C/package-management.xml:16(para)
10293
msgid ""
10294
"Several tools are available for interacting with Ubuntu's package management "
10295
"system, from simple command-line utilities which may be easily automated by "
10296
"system administrators, to a simple graphical interface which is easy to use "
10297
"by those new to Ubuntu."
10298
msgstr ""
10299
10300
#: serverguide/C/package-management.xml:21(para)
10301
msgid ""
10302
"Ubuntu's package management system is derived from the same system used by "
10303
"the Debian GNU/Linux distribution. The package files contain all of the "
10304
"necessary files, meta-data, and instructions to implement a particular "
10305
"functionality or software application on your Ubuntu computer."
10306
msgstr ""
10307
10308
#: serverguide/C/package-management.xml:24(para)
10309
msgid ""
10310
"Debian package files typically have the extension '.deb', and typically "
10311
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10312
"collections of packages found on various media, such as CD-ROM discs, or "
10313
"online. Packages are normally of the pre-compiled binary format; thus "
10314
"installation is quick and requires no compiling of software."
10315
msgstr ""
10316
10317
#: serverguide/C/package-management.xml:27(para)
10318
msgid ""
10319
"Many complex packages use the concept of <emphasis "
10320
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10321
"packages required by the principal package in order to function properly. "
10322
"For example, the speech synthesis package "
10323
"<application>Festival</application> depends upon the package "
10324
"<application>libasound2</application>, which is a package supplying the "
10325
"<application>ALSA</application> sound library needed for audio playback. In "
10326
"order for <application>Festival</application> to function, it and all of its "
10327
"dependencies must be installed. The software management tools in Ubuntu will "
10328
"do this automatically."
10329
msgstr ""
10330
10331
#: serverguide/C/package-management.xml:32(title)
10332
msgid "dpkg"
10333
msgstr ""
10334
10335
#: serverguide/C/package-management.xml:34(para)
10336
msgid ""
10337
"<application>dpkg</application> is a package manager for "
10338
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10339
"packages, but unlike other package management system's it can not "
10340
"automatically download and install packages and their dependencies. This "
10341
"section covers using <application>dpkg</application> to manage locally "
10342
"installed packages:"
10343
msgstr ""
10344
10345
#: serverguide/C/package-management.xml:43(para)
10346
msgid ""
10347
"To list all packages installed on the system, from a terminal prompt enter:"
10348
msgstr ""
10349
10350
#: serverguide/C/package-management.xml:48(command)
10351
msgid "dpkg -l"
10352
msgstr ""
10353
10354
#: serverguide/C/package-management.xml:54(para)
10355
msgid ""
10356
"Depending on the amount of packages on your system, this can generate a "
10357
"large amount of output. Pipe the output through "
10358
"<application>grep</application> to see if a specific package is installed:"
10359
msgstr ""
10360
10361
#: serverguide/C/package-management.xml:60(command)
10362
msgid "dpkg -l | grep apache2"
10363
msgstr ""
10364
10365
#: serverguide/C/package-management.xml:63(para)
10366
msgid ""
10367
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10368
"package name, or other regular expression."
10369
msgstr ""
10370
10371
#: serverguide/C/package-management.xml:70(para)
10372
msgid ""
10373
"To list the files installed by a package, in this case the "
10374
"<application>ufw</application> package, enter:"
10375
msgstr ""
10376
10377
#: serverguide/C/package-management.xml:75(command)
10378
msgid "dpkg -L ufw"
10379
msgstr ""
10380
10381
#: serverguide/C/package-management.xml:81(para)
10382
msgid ""
10383
"If you are not sure which package installed a file, <application>dpkg -"
10384
"S</application> may be able to tell you. For example:"
10385
msgstr ""
10386
10387
#: serverguide/C/package-management.xml:87(command)
10388
msgid "dpkg -S /etc/host.conf"
10389
msgstr ""
10390
10391
#: serverguide/C/package-management.xml:88(computeroutput)
10392
#, no-wrap
10393
msgid "base-files: /etc/host.conf"
10394
msgstr ""
10395
10396
#: serverguide/C/package-management.xml:91(para)
10397
msgid ""
10398
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10399
"<application>base-files</application> package."
10400
msgstr ""
10401
10402
#: serverguide/C/package-management.xml:96(para)
10403
msgid ""
10404
"Many files are automatically generated during the package install process, "
10405
"and even though they are on the filesystem <command>dpkg -S</command> may "
10406
"not know which package they belong to."
10407
msgstr ""
10408
10409
#: serverguide/C/package-management.xml:105(para)
10410
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10411
msgstr ""
10412
10413
#: serverguide/C/package-management.xml:110(command)
10414
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10415
msgstr ""
10416
10417
#: serverguide/C/package-management.xml:113(para)
10418
msgid ""
10419
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10420
"the local .deb file."
10421
msgstr ""
10422
10423
#: serverguide/C/package-management.xml:120(para)
10424
msgid "Uninstalling a package can be accomplished by:"
10425
msgstr ""
10426
10427
#: serverguide/C/package-management.xml:125(command)
10428
msgid "sudo dpkg -r zip"
10429
msgstr ""
10430
10431
#: serverguide/C/package-management.xml:129(para)
10432
msgid ""
10433
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10434
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10435
"manager that handles dependencies, to ensure that the system is in a "
10436
"consistent state. For example using <command>dpkg -r</command> you can "
10437
"remove the <application>zip</application> package, but any packages that "
10438
"depend on it will still be installed and may no longer function correctly."
10439
msgstr ""
10440
10441
#: serverguide/C/package-management.xml:140(para)
10442
msgid ""
10443
"For more <application>dpkg</application> options see the man page: "
10444
"<command>man dpkg</command>."
10445
msgstr ""
10446
10447
#: serverguide/C/package-management.xml:146(title)
10448
msgid "Apt-Get"
10449
msgstr ""
10450
10451
#: serverguide/C/package-management.xml:147(para)
10452
msgid ""
10453
"The <application>apt-get</application> command is a powerful command-line "
10454
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10455
"(APT) performing such functions as installation of new software packages, "
10456
"upgrade of existing software packages, updating of the package list index, "
10457
"and even upgrading the entire Ubuntu system."
10458
msgstr ""
10459
10460
#: serverguide/C/package-management.xml:150(para)
10461
msgid ""
10462
"Being a simple command-line tool, <application>apt-get</application> has "
10463
"numerous advantages over other package management tools available in Ubuntu "
10464
"for server administrators. Some of these advantages include ease of use over "
10465
"simple terminal connections (SSH) and the ability to be used in system "
10466
"administration scripts, which can in turn be automated by the "
10467
"<application>cron</application> scheduling utility."
10468
msgstr ""
10469
10470
#: serverguide/C/package-management.xml:157(para)
10471
msgid ""
10472
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10473
"packages using the <application>apt-get</application> tool is quite simple. "
10474
"For example, to install the network scanner <emphasis "
10475
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10476
"<command>sudo apt-get install nmap</command>\n"
10477
"</screen>"
10478
msgstr ""
10479
10480
#: serverguide/C/package-management.xml:165(para)
10481
msgid ""
10482
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10483
"packages is also a straightforward and simple process. To remove the nmap "
10484
"package installed in the previous example, type the following: <screen>\n"
10485
"<command>sudo apt-get remove nmap</command>\n"
10486
"</screen>"
10487
msgstr ""
10488
10489
#: serverguide/C/package-management.xml:172(para)
10490
msgid ""
10491
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10492
"multiple packages to be installed or removed, separated by spaces."
10493
msgstr ""
10494
10495
#: serverguide/C/package-management.xml:175(para)
10496
msgid ""
10497
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10498
"remove</command> will remove the package configuration files as well. This "
10499
"may or may not be the desired effect so use with caution."
10500
msgstr ""
10501
10502
#: serverguide/C/package-management.xml:181(para)
10503
msgid ""
10504
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10505
"index is essentially a database of available packages from the repositories "
10506
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10507
"the local package index with the latest changes made in repositories, type "
10508
"the following: <screen>\n"
10509
"<command>sudo apt-get update</command>\n"
10510
"</screen>"
10511
msgstr ""
10512
10513
#: serverguide/C/package-management.xml:189(para)
10514
msgid ""
10515
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10516
"versions of packages currently installed on your computer may become "
10517
"available from the package repositories (for example security updates). To "
10518
"upgrade your system, first update your package index as outlined above, and "
10519
"then type: <screen>\n"
10520
"<command>sudo apt-get upgrade</command>\n"
10521
"</screen>"
10522
msgstr ""
10523
10524
#: serverguide/C/package-management.xml:195(para)
10525
msgid ""
10526
"For information on upgrading to a new Ubuntu release see <xref "
10527
"linkend=\"installing-upgrading\"/>."
10528
msgstr ""
10529
10530
#: serverguide/C/package-management.xml:153(para)
10531
msgid ""
10532
"Some examples of popular uses for the <application>apt-get</application> "
10533
"utility: <placeholder-1/>"
10534
msgstr ""
10535
10536
#: serverguide/C/package-management.xml:201(para)
10537
msgid ""
10538
"Actions of the <application>apt-get</application> command, such as "
10539
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10540
"log file."
10541
msgstr ""
10542
10543
#: serverguide/C/package-management.xml:204(para)
10544
msgid ""
10545
"For further information about the use of <application>APT</application>, "
10546
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10547
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10548
"help</screen>"
10549
msgstr ""
10550
10551
#: serverguide/C/package-management.xml:208(title)
10552
msgid "Aptitude"
10553
msgstr ""
10554
10555
#: serverguide/C/package-management.xml:209(para)
10556
msgid ""
10557
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10558
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10559
"the common package management functions, such as installation, removal, and "
10560
"upgrade, are performed in <application>Aptitude</application> with single-"
10561
"key commands, which are typically lowercase letters."
10562
msgstr ""
10563
10564
#: serverguide/C/package-management.xml:212(para)
10565
msgid ""
10566
"<application>Aptitude</application> is best suited for use in a non-"
10567
"graphical terminal environment to ensure proper functioning of the command "
10568
"keys. You may start <application>Aptitude</application> as a normal user "
10569
"with the following command at a terminal prompt: <screen>\n"
10570
"<command>sudo aptitude</command>\n"
10571
"</screen>"
10572
msgstr ""
10573
10574
#: serverguide/C/package-management.xml:219(para)
10575
msgid ""
10576
"When <application>Aptitude</application> starts, you will see a menu bar at "
10577
"the top of the screen and two panes below the menu bar. The top pane "
10578
"contains package categories, such as <emphasis role=\"italics\">New "
10579
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10580
"Packages</emphasis>. The bottom pane contains information related to the "
10581
"packages and package categories."
10582
msgstr ""
10583
10584
#: serverguide/C/package-management.xml:222(para)
10585
msgid ""
10586
"Using <application>Aptitude</application> for package management is "
10587
"relatively straightforward, and the user interface makes common tasks simple "
10588
"to perform. The following are examples of common package management "
10589
"functions as performed in <application>Aptitude</application>:"
10590
msgstr ""
10591
10592
#: serverguide/C/package-management.xml:226(para)
10593
msgid ""
10594
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10595
"locate the package via the Not Installed Packages package category, for "
10596
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10597
"key, and highlight the package you wish to install. After highlighting the "
10598
"package you wish to install, press the <keycap>+</keycap> key, and the "
10599
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10600
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10601
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10602
"again, and you will be prompted to become root to complete the installation. "
10603
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10604
"your user password to become root. Finally, press <keycap>g</keycap> once "
10605
"more and you'll be prompted to download the package. Press "
10606
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10607
"prompt, and downloading and installation of the package will commence."
10608
msgstr ""
10609
10610
#: serverguide/C/package-management.xml:230(para)
10611
msgid ""
10612
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10613
"locate the package via the Installed Packages package category, for example, "
10614
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10615
"highlight the package you wish to remove. After highlighting the package you "
10616
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10617
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10618
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10619
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10620
"prompted to become root to complete the installation. Press "
10621
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10622
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10623
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10624
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10625
"the package will commence."
10626
msgstr ""
10627
10628
#: serverguide/C/package-management.xml:234(para)
10629
msgid ""
10630
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10631
"package index, simply press the <keycap>u</keycap> key and you will be "
10632
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10633
"which will result in a Password: prompt. Enter your user password to become "
10634
"root. Updating of the package index will commence. Press "
10635
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10636
"presented to complete the process."
10637
msgstr ""
10638
10639
#: serverguide/C/package-management.xml:238(para)
10640
msgid ""
10641
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10642
"perform the update of the package index as detailed above, and then press "
10643
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10644
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10645
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10646
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10647
"result in a Password: prompt. Enter your user password to become root. "
10648
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10649
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10650
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10651
"will commence."
10652
msgstr ""
10653
10654
#: serverguide/C/package-management.xml:245(para)
10655
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10656
msgstr ""
10657
10658
#: serverguide/C/package-management.xml:250(para)
10659
msgid ""
10660
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10661
"configuration remains on system"
10662
msgstr ""
10663
10664
#: serverguide/C/package-management.xml:254(para)
10665
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10666
msgstr ""
10667
10668
#: serverguide/C/package-management.xml:258(para)
10669
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10670
msgstr ""
10671
10672
#: serverguide/C/package-management.xml:262(para)
10673
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10674
msgstr ""
10675
10676
#: serverguide/C/package-management.xml:266(para)
10677
msgid ""
10678
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10679
"configured"
10680
msgstr ""
10681
10682
#: serverguide/C/package-management.xml:270(para)
10683
msgid ""
10684
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10685
"and requires fix"
10686
msgstr ""
10687
10688
#: serverguide/C/package-management.xml:274(para)
10689
msgid ""
10690
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10691
"requires fix"
10692
msgstr ""
10693
10694
#: serverguide/C/package-management.xml:242(para)
10695
msgid ""
10696
"The first column of information displayed in the package list in the top "
10697
"pane, when actually viewing packages lists the current state of the package, "
10698
"and uses the following key to describe the state of the package: "
10699
"<placeholder-1/>"
10700
msgstr ""
10701
10702
#: serverguide/C/package-management.xml:280(para)
10703
msgid ""
10704
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
10705
"wish to exit. Many other functions are available from the Aptitude menu by "
10706
"pressing the <keycap>F10</keycap> key."
10707
msgstr ""
10708
10709
#: serverguide/C/package-management.xml:285(title)
10710
msgid "Automatic Updates"
10711
msgstr ""
10712
10713
#: serverguide/C/package-management.xml:287(para)
10714
msgid ""
10715
"The <application>unattended-upgrades</application> package can be used to "
10716
"automatically install updated packages, and can be configured to update all "
10717
"packages or just install security updates. First, install the package by "
10718
"entering the following in a terminal:"
10719
msgstr ""
10720
10721
#: serverguide/C/package-management.xml:293(command)
10722
msgid "sudo apt-get install unattended-upgrades"
10723
msgstr ""
10724
10725
#: serverguide/C/package-management.xml:296(para)
10726
msgid ""
10727
"To configure <application>unattended-upgrades</application>, edit "
10728
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
10729
"the following to fit your needs:"
10730
msgstr ""
10731
10732
#: serverguide/C/package-management.xml:301(programlisting)
10733
#, no-wrap
10734
msgid ""
10735
"\n"
10736
"Unattended-Upgrade::Allowed-Origins {\n"
10737
" \"Ubuntu lucid-security\";\n"
10738
"// \"Ubuntu lucid-updates\";\n"
10739
"};\n"
10740
msgstr ""
10741
10742
#: serverguide/C/package-management.xml:308(para)
10743
msgid ""
10744
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
10745
"will not be automatically updated. To blacklist a package, add it to the "
10746
"list:"
10747
msgstr ""
10748
10749
#: serverguide/C/package-management.xml:313(programlisting)
10750
#, no-wrap
10751
msgid ""
10752
"\n"
10753
"Unattended-Upgrade::Package-Blacklist {\n"
10754
"// \"vim\";\n"
10755
"// \"libc6\";\n"
10756
"// \"libc6-dev\";\n"
10757
"// \"libc6-i686\";\n"
10758
"};\n"
10759
msgstr ""
10760
10761
#: serverguide/C/package-management.xml:323(para)
10762
msgid ""
10763
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
10764
"whatever follows \"//\" will not be evaluated."
10765
msgstr ""
10766
10767
#: serverguide/C/package-management.xml:328(para)
10768
msgid ""
10769
"To enable automatic updates, edit "
10770
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
10771
"<application>apt</application> configuration options:"
10772
msgstr ""
10773
10774
#: serverguide/C/package-management.xml:332(programlisting)
10775
#, no-wrap
10776
msgid ""
10777
"\n"
10778
"APT::Periodic::Update-Package-Lists \"1\";\n"
10779
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
10780
"APT::Periodic::AutocleanInterval \"7\";\n"
10781
"APT::Periodic::Unattended-Upgrade \"1\";\n"
10782
msgstr ""
10783
10784
#: serverguide/C/package-management.xml:339(para)
10785
msgid ""
10786
"The above configuration updates the package list, downloads, and installs "
10787
"available upgrades every day. The local download archive is cleaned every "
10788
"week."
10789
msgstr ""
10790
10791
#: serverguide/C/package-management.xml:345(para)
10792
msgid ""
10793
"You can read more about <application>apt</application> Periodic "
10794
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
10795
"header."
10796
msgstr ""
10797
10798
#: serverguide/C/package-management.xml:350(para)
10799
msgid ""
10800
"The results of <application>unattended-upgrades</application> will be logged "
10801
"to <filename>/var/log/unattended-upgrades</filename>."
10802
msgstr ""
10803
10804
#: serverguide/C/package-management.xml:355(title)
10805
msgid "Notifications"
10806
msgstr ""
10807
10808
#: serverguide/C/package-management.xml:357(para)
10809
msgid ""
10810
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
10811
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
10812
"<application>unattended-upgrades</application> to email an administrator "
10813
"detailing any packages that need upgrading or have problems."
10814
msgstr ""
10815
10816
#: serverguide/C/package-management.xml:362(para)
10817
msgid ""
10818
"Another useful package is <application>apticron</application>. "
10819
"<application>apticron</application> will configure a "
10820
"<application>cron</application> job to email an administrator information "
10821
"about any packages on the system that have updates available, as well as a "
10822
"summary of changes in each package."
10823
msgstr ""
10824
10825
#: serverguide/C/package-management.xml:368(para)
10826
msgid ""
10827
"To install the <application>apticron</application> package, in a terminal "
10828
"enter:"
10829
msgstr ""
10830
10831
#: serverguide/C/package-management.xml:373(command)
10832
msgid "sudo apt-get install apticron"
10833
msgstr ""
10834
10835
#: serverguide/C/package-management.xml:376(para)
10836
msgid ""
10837
"Once the package is installed edit "
10838
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
10839
"and other options:"
10840
msgstr ""
10841
10842
#: serverguide/C/package-management.xml:380(programlisting)
10843
#, no-wrap
10844
msgid ""
10845
"\n"
10846
"EMAIL=\"root@example.com\"\n"
10847
msgstr ""
10848
10849
#: serverguide/C/package-management.xml:389(para)
10850
msgid ""
10851
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
10852
"system repositories is stored in the /etc/apt/sources.list configuration "
10853
"file. An example of this file is referenced here, along with information on "
10854
"adding or removing repository references from the file."
10855
msgstr ""
10856
10857
#: serverguide/C/package-management.xml:395(para)
10858
msgid ""
10859
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
10860
"typical <filename>/etc/apt/sources.list</filename> file."
10861
msgstr ""
10862
10863
#: serverguide/C/package-management.xml:399(para)
10864
msgid ""
10865
"You may edit the file to enable repositories or disable them. For example, "
10866
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
10867
"operations occur, simply comment out the appropriate line for the CD-ROM, "
10868
"which appears at the top of the file:"
10869
msgstr ""
10870
10871
#: serverguide/C/package-management.xml:404(screen)
10872
#, no-wrap
10873
msgid ""
10874
"\n"
10875
"# no more prompting for CD-ROM please\n"
10876
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
10877
"main restricted\n"
10878
msgstr ""
10879
10880
#: serverguide/C/package-management.xml:410(title)
10881
msgid "Extra Repositories"
10882
msgstr ""
10883
10884
#: serverguide/C/package-management.xml:411(para)
10885
msgid ""
10886
"In addition to the officially supported package repositories available for "
10887
"Ubuntu, there exist additional community-maintained repositories which add "
10888
"thousands more potential packages for installation. Two of the most popular "
10889
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
10890
"repositories. These repositories are not officially supported by Ubuntu, but "
10891
"because they are maintained by the community they generally provide packages "
10892
"which are safe for use with your Ubuntu computer."
10893
msgstr ""
10894
10895
#: serverguide/C/package-management.xml:414(para)
10896
msgid ""
10897
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
10898
"licensing issues that prevent them from being distributed with a free "
10899
"operating system, and they may be illegal in your locality."
10900
msgstr ""
10901
10902
#: serverguide/C/package-management.xml:416(para)
10903
msgid ""
10904
"Be advised that neither the <emphasis>Universe</emphasis> or "
10905
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
10906
"packages. In particular, there may not be security updates for these "
10907
"packages."
10908
msgstr ""
10909
10910
#: serverguide/C/package-management.xml:420(para)
10911
msgid ""
10912
"Many other package sources are available, sometimes even offering only one "
10913
"package, as in the case of package sources provided by the developer of a "
10914
"single application. You should always be very careful and cautious when "
10915
"using non-standard package sources, however. Research the source and "
10916
"packages carefully before performing any installation, as some package "
10917
"sources and their packages could render your system unstable or non-"
10918
"functional in some respects."
10919
msgstr ""
10920
10921
#: serverguide/C/package-management.xml:423(para)
10922
msgid ""
10923
"By default, the <emphasis>Universe</emphasis> and "
10924
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
10925
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
10926
"comment the following lines:"
10927
msgstr ""
10928
10929
#: serverguide/C/package-management.xml:430(programlisting)
10930
#, no-wrap
10931
msgid ""
10932
"\n"
10933
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10934
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10935
"\n"
10936
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10937
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10938
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10939
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10940
"\n"
10941
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10942
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10943
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10944
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10945
"\n"
10946
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
10947
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
10948
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10949
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10950
msgstr ""
10951
10952
#: serverguide/C/package-management.xml:456(para)
10953
msgid ""
10954
"Most of the material covered in this chapter is available in "
10955
"<application>man</application> pages, many of which are available online."
10956
msgstr ""
10957
10958
#: serverguide/C/package-management.xml:463(para)
10959
msgid ""
10960
"The <ulink "
10961
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
10962
"re</ulink> Ubuntu wiki page has more information."
10963
msgstr ""
10964
10965
#: serverguide/C/package-management.xml:468(para)
10966
msgid ""
10967
"For more <application>dpkg</application> details see the <ulink "
10968
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
10969
"man page</ulink>."
10970
msgstr ""
10971
10972
#: serverguide/C/package-management.xml:474(para)
10973
msgid ""
10974
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
10975
"HOWTO</ulink> and <ulink "
10976
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
10977
"get man page</ulink> contain useful information regarding <application>apt-"
10978
"get</application> usage."
10979
msgstr ""
10980
10981
#: serverguide/C/package-management.xml:481(para)
10982
msgid ""
10983
"See the <ulink "
10984
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
10985
"de man page</ulink> for more <application>aptitude</application> options."
10986
msgstr ""
10987
10988
#: serverguide/C/package-management.xml:487(para)
10989
msgid ""
10990
"The <ulink "
10991
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
10992
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
10993
"adding repositories."
10994
msgstr ""
10995
10996
#: serverguide/C/other-apps.xml:13(title)
10997
msgid "Other Useful Applications"
10998
msgstr ""
10999
11000
#: serverguide/C/other-apps.xml:15(para)
11001
msgid ""
11002
"There are many very useful applications developed by the Ubuntu Server Team, "
11003
"and others that are well integrated with Ubuntu Server Edition, that might "
11004
"not be well known. This chapter will showcase some useful applications that "
11005
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11006
"easier."
11007
msgstr ""
11008
11009
#: serverguide/C/other-apps.xml:23(title)
11010
msgid "pam_motd"
11011
msgstr ""
11012
11013
#: serverguide/C/other-apps.xml:25(para)
11014
msgid ""
11015
"When logging into an Ubuntu server you may have noticed the informative "
11016
"Message Of The Day (MOTD). This information is obtained and displayed using "
11017
"a couple of packages:"
11018
msgstr ""
11019
11020
#: serverguide/C/other-apps.xml:32(para)
11021
msgid ""
11022
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11023
"<application>landscape-client</application>, which can be used to manage "
11024
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11025
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11026
"utility which is used to gather the information displayed in the MOTD."
11027
msgstr ""
11028
11029
#: serverguide/C/other-apps.xml:40(para)
11030
msgid ""
11031
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11032
"the MOTD via <application>pam_motd</application> module."
11033
msgstr ""
11034
11035
#: serverguide/C/other-apps.xml:46(para)
11036
msgid ""
11037
"<application>pam_motd</application> executes the scripts in "
11038
"<filename>/etc/update-motd.d</filename> in order based on the number "
11039
"prepended to the script. The output of the scripts is written to "
11040
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11041
"concatenated with <filename>/etc/motd.tail</filename>."
11042
msgstr ""
11043
11044
#: serverguide/C/other-apps.xml:52(para)
11045
msgid ""
11046
"You can add your own dynamic information to the MOTD. For example, to add "
11047
"local weather information:"
11048
msgstr ""
11049
11050
#: serverguide/C/other-apps.xml:58(para)
11051
msgid "First, install the <application>weather-util</application> package:"
11052
msgstr ""
11053
11054
#: serverguide/C/other-apps.xml:63(command)
11055
msgid "sudo apt-get install weather-util"
11056
msgstr ""
11057
11058
#: serverguide/C/other-apps.xml:68(para)
11059
msgid ""
11060
"The <application>weather</application> utility uses METAR data from the "
11061
"National Oceanic and Atmospheric Administration and forecasts from the "
11062
"National Weather Service. In order to find local information you will need "
11063
"the 4-character ICAO location indicator. This can be determined by browsing "
11064
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11065
"Weather Service</ulink> site."
11066
msgstr ""
11067
11068
#: serverguide/C/other-apps.xml:75(para)
11069
msgid ""
11070
"Although the National Weather Service is a United States government agency "
11071
"there are weather stations available world wide. However, local weather "
11072
"information for all locations outside the U.S. may not be available."
11073
msgstr ""
11074
11075
#: serverguide/C/other-apps.xml:81(para)
11076
msgid ""
11077
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11078
"script to use <application>weather</application> with your local ICAO "
11079
"indicator:"
11080
msgstr ""
11081
11082
#: serverguide/C/other-apps.xml:86(programlisting)
11083
#, no-wrap
11084
msgid ""
11085
"\n"
11086
"#!/bin/sh\n"
11087
"#\n"
11088
"#\n"
11089
"# Prints the local weather information for the MOTD.\n"
11090
"#\n"
11091
"#\n"
11092
"\n"
11093
"# Replace KINT with your local weather station.\n"
11094
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11095
"\n"
11096
"echo\n"
11097
"weather -i KINT\n"
11098
"echo\n"
11099
"\n"
11100
msgstr ""
11101
11102
#: serverguide/C/other-apps.xml:104(para)
11103
msgid "Make the script executable:"
11104
msgstr ""
11105
11106
#: serverguide/C/other-apps.xml:109(command)
11107
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11108
msgstr ""
11109
11110
#: serverguide/C/other-apps.xml:113(para)
11111
msgid ""
11112
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11113
"weather</filename>:"
11114
msgstr ""
11115
11116
#: serverguide/C/other-apps.xml:118(command)
11117
msgid ""
11118
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11119
msgstr ""
11120
11121
#: serverguide/C/other-apps.xml:122(para)
11122
msgid "Finally, exit the server and re-login to view the new MOTD."
11123
msgstr ""
11124
11125
#: serverguide/C/other-apps.xml:128(para)
11126
msgid ""
11127
"You should now be greeted with some useful information, and some information "
11128
"about the local weather that may not be quite so useful. Hopefully the "
11129
"<application>local-weather</application> example demonstrates the "
11130
"flexibility of <application>pam_motd</application>."
11131
msgstr ""
11132
11133
#: serverguide/C/other-apps.xml:136(title)
11134
msgid "etckeeper"
11135
msgstr ""
11136
11137
#: serverguide/C/other-apps.xml:138(para)
11138
msgid ""
11139
"<application>etckeeper</application> allows the contents of <filename "
11140
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11141
"System (VCS) repository. It hooks into <application>apt</application> to "
11142
"automatically commit changes to <filename>/etc</filename> when packages are "
11143
"installed or upgraded. Placing <filename>/etc</filename> under version "
11144
"control is considered an industry best practice, and the goal of "
11145
"<application>etckeeper</application> is to make this process as painless as "
11146
"possible."
11147
msgstr ""
11148
11149
#: serverguide/C/other-apps.xml:146(para)
11150
msgid ""
11151
"Install <application>etckeeper</application> by entering the following in a "
11152
"terminal:"
11153
msgstr ""
11154
11155
#: serverguide/C/other-apps.xml:151(command)
11156
msgid "sudo apt-get install etckeeper"
11157
msgstr ""
11158
11159
#: serverguide/C/other-apps.xml:154(para)
11160
msgid ""
11161
"The main configuration file, "
11162
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11163
"main option is which VCS to use. By default "
11164
"<application>etckeeper</application> is configured to use "
11165
"<application>bzr</application> for version control. The repository is "
11166
"automatically initialized (and committed for the first time) during package "
11167
"installation. It is possible to undo this by entering the following command:"
11168
msgstr ""
11169
11170
#: serverguide/C/other-apps.xml:164(command)
11171
msgid "sudo etckeeper uninit"
11172
msgstr ""
11173
11174
#: serverguide/C/other-apps.xml:167(para)
11175
msgid ""
11176
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11177
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11178
"It will also automatically commit changes before and after package "
11179
"installation. For a more precise tracking of changes, it is recommended to "
11180
"commit your changes manually, together with a commit message, using:"
11181
msgstr ""
11182
11183
#: serverguide/C/other-apps.xml:176(command)
11184
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11185
msgstr ""
11186
11187
#: serverguide/C/other-apps.xml:179(para)
11188
msgid ""
11189
"Using the VCS commands you can view log information about files in "
11190
"<filename>/etc</filename>:"
11191
msgstr ""
11192
11193
#: serverguide/C/other-apps.xml:184(command)
11194
msgid "sudo bzr log /etc/passwd"
11195
msgstr ""
11196
11197
#: serverguide/C/other-apps.xml:187(para)
11198
msgid ""
11199
"To demonstrate the integration with the package management system, install "
11200
"<application>postfix</application>:"
11201
msgstr ""
11202
11203
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11204
msgid "sudo apt-get install postfix"
11205
msgstr ""
11206
11207
#: serverguide/C/other-apps.xml:195(para)
11208
msgid ""
11209
"When the installation is finished, all the "
11210
"<application>postfix</application> configuration files should be committed "
11211
"to the repository:"
11212
msgstr ""
11213
11214
#: serverguide/C/other-apps.xml:201(computeroutput)
11215
#, no-wrap
11216
msgid ""
11217
"Committing to: /etc/\n"
11218
"added aliases.db\n"
11219
"modified group\n"
11220
"modified group-\n"
11221
"modified gshadow\n"
11222
"modified gshadow-\n"
11223
"modified passwd\n"
11224
"modified passwd-\n"
11225
"added postfix\n"
11226
"added resolvconf\n"
11227
"added rsyslog.d\n"
11228
"modified shadow\n"
11229
"modified shadow-\n"
11230
"added init.d/postfix\n"
11231
"added network/if-down.d/postfix\n"
11232
"added network/if-up.d/postfix\n"
11233
"added postfix/dynamicmaps.cf\n"
11234
"added postfix/main.cf\n"
11235
"added postfix/master.cf\n"
11236
"added postfix/post-install\n"
11237
"added postfix/postfix-files\n"
11238
"added postfix/postfix-script\n"
11239
"added postfix/sasl\n"
11240
"added ppp/ip-down.d\n"
11241
"added ppp/ip-down.d/postfix\n"
11242
"added ppp/ip-up.d/postfix\n"
11243
"added rc0.d/K20postfix\n"
11244
"added rc1.d/K20postfix\n"
11245
"added rc2.d/S20postfix\n"
11246
"added rc3.d/S20postfix\n"
11247
"added rc4.d/S20postfix\n"
11248
"added rc5.d/S20postfix\n"
11249
"added rc6.d/K20postfix\n"
11250
"added resolvconf/update-libc.d\n"
11251
"added resolvconf/update-libc.d/postfix\n"
11252
"added rsyslog.d/postfix.conf\n"
11253
"added ufw/applications.d/postfix\n"
11254
"Committed revision 2."
11255
msgstr ""
11256
11257
#: serverguide/C/other-apps.xml:241(para)
11258
msgid ""
11259
"For an example of how <application>etckeeper</application> tracks manual "
11260
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11261
"<application>bzr</application> you can see which files have been modified:"
11262
msgstr ""
11263
11264
#: serverguide/C/other-apps.xml:247(command)
11265
msgid "sudo bzr status /etc/"
11266
msgstr ""
11267
11268
#: serverguide/C/other-apps.xml:248(computeroutput)
11269
#, no-wrap
11270
msgid ""
11271
"modified:\n"
11272
" hosts"
11273
msgstr ""
11274
11275
#: serverguide/C/other-apps.xml:252(para)
11276
msgid "Now commit the changes:"
11277
msgstr ""
11278
11279
#: serverguide/C/other-apps.xml:257(command)
11280
msgid "sudo etckeeper commit \"new host\""
11281
msgstr ""
11282
11283
#: serverguide/C/other-apps.xml:260(para)
11284
msgid ""
11285
"For more information on <application>bzr</application> see <xref "
11286
"linkend=\"bazaar\"/>."
11287
msgstr ""
11288
11289
#: serverguide/C/other-apps.xml:266(title)
11290
msgid "Byobu"
11291
msgstr ""
11292
11293
#: serverguide/C/other-apps.xml:268(para)
11294
msgid ""
11295
"One of the most useful applications for any system administrator is "
11296
"<application>screen</application>. It allows the execution of multiple "
11297
"shells in one terminal. To make some of the advanced "
11298
"<application>screen</application> features more user friendly, and provide "
11299
"some useful information about the system, the "
11300
"<application>byobu</application> package was created."
11301
msgstr ""
11302
11303
#: serverguide/C/other-apps.xml:275(para)
11304
msgid ""
11305
"When executing <application>byobu</application> pressing the "
11306
"<emphasis>F9</emphasis> key will bring up the "
11307
"<application>Configuration</application> menu. This menu will allow you to:"
11308
msgstr ""
11309
11310
#: serverguide/C/other-apps.xml:281(para)
11311
msgid "View the Help menu"
11312
msgstr ""
11313
11314
#: serverguide/C/other-apps.xml:282(para)
11315
msgid "Change Byobu's background color"
11316
msgstr ""
11317
11318
#: serverguide/C/other-apps.xml:283(para)
11319
msgid "Change Byobu's foreground color"
11320
msgstr ""
11321
11322
#: serverguide/C/other-apps.xml:284(para)
11323
msgid "Toggle status notifications"
11324
msgstr ""
11325
11326
#: serverguide/C/other-apps.xml:285(para)
11327
msgid "Change the key binding set"
11328
msgstr ""
11329
11330
#: serverguide/C/other-apps.xml:286(para)
11331
msgid "Change the escape sequence"
11332
msgstr ""
11333
11334
#: serverguide/C/other-apps.xml:287(para)
11335
msgid "Create new windows"
11336
msgstr ""
11337
11338
#: serverguide/C/other-apps.xml:288(para)
11339
msgid "Manage the default windows"
11340
msgstr ""
11341
11342
#: serverguide/C/other-apps.xml:289(para)
11343
msgid "Byobu currently does not launch at login (toggle on)"
11344
msgstr ""
11345
11346
#: serverguide/C/other-apps.xml:292(para)
11347
msgid ""
11348
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11349
"sequence, new window, change window, etc. There are two key binding sets to "
11350
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11351
"keys</emphasis>. If you wish to use the original key bindings choose the "
11352
"<emphasis>none</emphasis> set."
11353
msgstr ""
11354
11355
#: serverguide/C/other-apps.xml:298(para)
11356
msgid ""
11357
"<application>byobu</application> provides a menu which displays the Ubuntu "
11358
"release, processor information, memory information, and the time and date. "
11359
"The effect is similar to a desktop menu."
11360
msgstr ""
11361
11362
#: serverguide/C/other-apps.xml:303(para)
11363
msgid ""
11364
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11365
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11366
"executed any time a terminal is opened. Changes made to "
11367
"<application>byobu</application> are on a per user basis, and will not "
11368
"affect other users on the system."
11369
msgstr ""
11370
11371
#: serverguide/C/other-apps.xml:309(para)
11372
msgid ""
11373
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11374
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11375
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11376
"commands. Here is a quick list of movement commands:"
11377
msgstr ""
11378
11379
#: serverguide/C/other-apps.xml:316(para)
11380
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11381
msgstr ""
11382
11383
#: serverguide/C/other-apps.xml:317(para)
11384
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11385
msgstr ""
11386
11387
#: serverguide/C/other-apps.xml:318(para)
11388
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11389
msgstr ""
11390
11391
#: serverguide/C/other-apps.xml:319(para)
11392
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11393
msgstr ""
11394
11395
#: serverguide/C/other-apps.xml:320(para)
11396
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11397
msgstr ""
11398
11399
#: serverguide/C/other-apps.xml:321(para)
11400
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11401
msgstr ""
11402
11403
#: serverguide/C/other-apps.xml:322(para)
11404
msgid ""
11405
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11406
"the buffer)"
11407
msgstr ""
11408
11409
#: serverguide/C/other-apps.xml:323(para)
11410
msgid "<emphasis>/</emphasis> - Search forward"
11411
msgstr ""
11412
11413
#: serverguide/C/other-apps.xml:324(para)
11414
msgid "<emphasis>?</emphasis> - Search backward"
11415
msgstr ""
11416
11417
#: serverguide/C/other-apps.xml:325(para)
11418
msgid ""
11419
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11420
msgstr ""
11421
11422
#: serverguide/C/other-apps.xml:334(para)
11423
msgid ""
11424
"See the <ulink "
11425
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11426
"update-motd man page</ulink> for more options available to "
11427
"<application>update-motd</application>."
11428
msgstr ""
11429
11430
#: serverguide/C/other-apps.xml:340(para)
11431
msgid ""
11432
"The Debian Package of the Day <ulink "
11433
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11434
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11435
"details about using the <application>weather</application>utility."
11436
msgstr ""
11437
11438
#: serverguide/C/other-apps.xml:347(para)
11439
msgid ""
11440
"See the <ulink "
11441
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11442
"more details on using <application>etckeeper</application>."
11443
msgstr ""
11444
11445
#: serverguide/C/other-apps.xml:353(para)
11446
msgid ""
11447
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11448
"Ubuntu Wiki</ulink> page."
11449
msgstr ""
11450
11451
#: serverguide/C/other-apps.xml:358(para)
11452
msgid ""
11453
"For the latest news and information about <application>bzr</application> see "
11454
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11455
msgstr ""
11456
11457
#: serverguide/C/other-apps.xml:363(para)
11458
msgid ""
11459
"For more information on <application>screen</application> see the <ulink "
11460
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11461
msgstr ""
11462
11463
#: serverguide/C/other-apps.xml:368(para)
11464
msgid ""
11465
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11466
"screen</ulink> page."
11467
msgstr ""
11468
11469
#: serverguide/C/other-apps.xml:373(para)
11470
msgid ""
11471
"Also, see the <application>byobu</application><ulink "
11472
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11473
"information."
11474
msgstr ""
11475
11476
#: serverguide/C/network-config.xml:14(para)
11477
msgid ""
11478
"Networks consist of two or more devices, such as computer systems, printers, "
11479
"and related equipment which are connected by either physical cabling or "
11480
"wireless links for the purpose of sharing and distributing information among "
11481
"the connected devices."
11482
msgstr ""
11483
11484
#: serverguide/C/network-config.xml:20(para)
11485
msgid ""
11486
"This section provides general and specific information pertaining to "
11487
"networking, including an overview of network concepts and detailed "
11488
"discussion of popular network protocols."
11489
msgstr ""
11490
11491
#: serverguide/C/network-config.xml:27(title)
11492
msgid "Network Configuration"
11493
msgstr ""
11494
11495
#: serverguide/C/network-config.xml:28(para)
11496
msgid ""
11497
"Ubuntu ships with a number of graphical utilities to configure your network "
11498
"devices. This document is geared toward server administrators and will focus "
11499
"on managing your network on the command line."
11500
msgstr ""
11501
11502
#: serverguide/C/network-config.xml:35(title)
11503
msgid "Ethernet Interfaces"
11504
msgstr ""
11505
11506
#: serverguide/C/network-config.xml:36(para)
11507
msgid ""
11508
"Ethernet interfaces are identified by the system using the naming convention "
11509
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11510
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11511
"interface is typically identified as <emphasis "
11512
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11513
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11514
"order."
11515
msgstr ""
11516
11517
#: serverguide/C/network-config.xml:46(title)
11518
msgid "Identify Ethernet Interfaces"
11519
msgstr ""
11520
11521
#: serverguide/C/network-config.xml:47(para)
11522
msgid ""
11523
"To quickly identify all available Ethernet interfaces, you can use the "
11524
"<application>ifconfig</application> command as shown below."
11525
msgstr ""
11526
11527
#: serverguide/C/network-config.xml:52(userinput)
11528
#, no-wrap
11529
msgid "ifconfig -a | grep eth"
11530
msgstr ""
11531
11532
#: serverguide/C/network-config.xml:51(screen)
11533
#, no-wrap
11534
msgid ""
11535
"\n"
11536
"<placeholder-1/>\n"
11537
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11538
msgstr ""
11539
11540
#: serverguide/C/network-config.xml:55(para)
11541
msgid ""
11542
"Another application that can help identify all network interfaces available "
11543
"to your system is the <application>lshw</application> command. In the "
11544
"example below, <application>lshw</application> shows a single Ethernet "
11545
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11546
"along with bus information, driver details and all supported capabilities."
11547
msgstr ""
11548
11549
#: serverguide/C/network-config.xml:62(userinput)
11550
#, no-wrap
11551
msgid "sudo lshw -class network"
11552
msgstr ""
11553
11554
#: serverguide/C/network-config.xml:61(screen)
11555
#, no-wrap
11556
msgid ""
11557
"\n"
11558
"<placeholder-1/>\n"
11559
" *-network\n"
11560
" description: Ethernet interface\n"
11561
" product: BCM4401-B0 100Base-TX\n"
11562
" vendor: Broadcom Corporation\n"
11563
" physical id: 0\n"
11564
" bus info: pci@0000:03:00.0\n"
11565
" logical name: eth0\n"
11566
" version: 02\n"
11567
" serial: 00:15:c5:4a:16:5a\n"
11568
" size: 10MB/s\n"
11569
" capacity: 100MB/s\n"
11570
" width: 32 bits\n"
11571
" clock: 33MHz\n"
11572
" capabilities: (snipped for brevity)\n"
11573
" configuration: (snipped for brevity)\n"
11574
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11575
msgstr ""
11576
11577
#: serverguide/C/network-config.xml:83(title)
11578
msgid "Ethernet Interface Logical Names"
11579
msgstr ""
11580
11581
#: serverguide/C/network-config.xml:84(para)
11582
msgid ""
11583
"Interface logical names are configured in the file "
11584
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11585
"like control which interface receives a particular logical name, find the "
11586
"line matching the interfaces physical MAC address and modify the value of "
11587
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11588
"Reboot the system to commit your changes."
11589
msgstr ""
11590
11591
#: serverguide/C/network-config.xml:92(programlisting)
11592
#, no-wrap
11593
msgid ""
11594
"\n"
11595
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11596
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11597
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11598
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11599
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11600
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11601
msgstr ""
11602
11603
#: serverguide/C/network-config.xml:99(title)
11604
msgid "Ethernet Interface Settings"
11605
msgstr ""
11606
11607
#: serverguide/C/network-config.xml:100(para)
11608
msgid ""
11609
"<application>ethtool</application> is a program that displays and changes "
11610
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11611
"and Wake-on-LAN. It is not installed by default, but is available for "
11612
"installation in the repositories."
11613
msgstr ""
11614
11615
#: serverguide/C/network-config.xml:106(userinput)
11616
#, no-wrap
11617
msgid "sudo apt-get install ethtool"
11618
msgstr ""
11619
11620
#: serverguide/C/network-config.xml:108(para)
11621
msgid ""
11622
"The following is an example of how to view supported features and configured "
11623
"settings of an Ethernet interface."
11624
msgstr ""
11625
11626
#: serverguide/C/network-config.xml:113(userinput)
11627
#, no-wrap
11628
msgid "sudo ethtool eth0"
11629
msgstr ""
11630
11631
#: serverguide/C/network-config.xml:112(screen)
11632
#, no-wrap
11633
msgid ""
11634
"\n"
11635
"<placeholder-1/>\n"
11636
"Settings for eth0:\n"
11637
" Supported ports: [ TP ]\n"
11638
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11639
" 100baseT/Half 100baseT/Full \n"
11640
" 1000baseT/Half 1000baseT/Full \n"
11641
" Supports auto-negotiation: Yes\n"
11642
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11643
" 100baseT/Half 100baseT/Full \n"
11644
" 1000baseT/Half 1000baseT/Full \n"
11645
" Advertised auto-negotiation: Yes\n"
11646
" Speed: 1000Mb/s\n"
11647
" Duplex: Full\n"
11648
" Port: Twisted Pair\n"
11649
" PHYAD: 1\n"
11650
" Transceiver: internal\n"
11651
" Auto-negotiation: on\n"
11652
" Supports Wake-on: g\n"
11653
" Wake-on: d\n"
11654
" Current message level: 0x000000ff (255)\n"
11655
" Link detected: yes\n"
11656
msgstr ""
11657
11658
#: serverguide/C/network-config.xml:135(para)
11659
msgid ""
11660
"Changes made with the <application>ethtool</application> command are "
11661
"temporary and will be lost after a reboot. If you would like to retain "
11662
"settings, simply add the desired <application>ethtool</application> command "
11663
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11664
"configuration file <filename>/etc/network/interfaces</filename>."
11665
msgstr ""
11666
11667
#: serverguide/C/network-config.xml:141(para)
11668
msgid ""
11669
"The following is an example of how the interface identified as <emphasis "
11670
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11671
"speed of 1000Mb/s running in full duplex mode."
11672
msgstr ""
11673
11674
#: serverguide/C/network-config.xml:145(programlisting)
11675
#, no-wrap
11676
msgid ""
11677
"\n"
11678
"auto eth0\n"
11679
"iface eth0 inet static\n"
11680
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11681
msgstr ""
11682
11683
#: serverguide/C/network-config.xml:151(para)
11684
msgid ""
11685
"Although the example above shows the interface configured to use the "
11686
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11687
"other methods as well, such as DHCP. The example is meant to demonstrate "
11688
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11689
"statement in relation to the rest of the interface configuration."
11690
msgstr ""
11691
11692
#: serverguide/C/network-config.xml:163(title)
11693
msgid "IP Addressing"
11694
msgstr ""
11695
11696
#: serverguide/C/network-config.xml:164(para)
11697
msgid ""
11698
"The following section describes the process of configuring your systems IP "
11699
"address and default gateway needed for communicating on a local area network "
11700
"and the Internet."
11701
msgstr ""
11702
11703
#: serverguide/C/network-config.xml:171(title)
11704
msgid "Temporary IP Address Assignment"
11705
msgstr ""
11706
11707
#: serverguide/C/network-config.xml:172(para)
11708
msgid ""
11709
"For temporary network configurations, you can use standard commands such as "
11710
"<application>ip</application>, <application>ifconfig</application> and "
11711
"<application>route</application>, which are also found on most other "
11712
"GNU/Linux operating systems. These commands allow you to configure settings "
11713
"which take effect immediately, however they are not persistent and will be "
11714
"lost after a reboot."
11715
msgstr ""
11716
11717
#: serverguide/C/network-config.xml:180(para)
11718
msgid ""
11719
"To temporarily configure an IP address, you can use the "
11720
"<application>ifconfig</application> command in the following manner. Just "
11721
"modify the IP address and subnet mask to match your network requirements."
11722
msgstr ""
11723
11724
#: serverguide/C/network-config.xml:186(userinput)
11725
#, no-wrap
11726
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
11727
msgstr ""
11728
11729
#: serverguide/C/network-config.xml:188(para)
11730
msgid ""
11731
"To verify the IP address configuration of <application>eth0</application>, "
11732
"you can use the <application>ifconfig</application> command in the following "
11733
"manner."
11734
msgstr ""
11735
11736
#: serverguide/C/network-config.xml:193(userinput)
11737
#, no-wrap
11738
msgid "ifconfig eth0"
11739
msgstr ""
11740
11741
#: serverguide/C/network-config.xml:192(screen)
11742
#, no-wrap
11743
msgid ""
11744
"\n"
11745
"<placeholder-1/>\n"
11746
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
11747
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
11748
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
11749
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
11750
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
11751
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
11752
" collisions:0 txqueuelen:1000 \n"
11753
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
11754
" Interrupt:16 \n"
11755
msgstr ""
11756
11757
#: serverguide/C/network-config.xml:204(para)
11758
msgid ""
11759
"To configure a default gateway, you can use the "
11760
"<application>route</application> command in the following manner. Modify the "
11761
"default gateway address to match your network requirements."
11762
msgstr ""
11763
11764
#: serverguide/C/network-config.xml:210(userinput)
11765
#, no-wrap
11766
msgid "sudo route add default gw 10.0.0.1 eth0"
11767
msgstr ""
11768
11769
#: serverguide/C/network-config.xml:212(para)
11770
msgid ""
11771
"To verify your default gateway configuration, you can use the "
11772
"<application>route</application> command in the following manner."
11773
msgstr ""
11774
11775
#: serverguide/C/network-config.xml:217(userinput)
11776
#, no-wrap
11777
msgid "route -n"
11778
msgstr ""
11779
11780
#: serverguide/C/network-config.xml:216(screen)
11781
#, no-wrap
11782
msgid ""
11783
"\n"
11784
"<placeholder-1/>\n"
11785
"Kernel IP routing table\n"
11786
"Destination Gateway Genmask Flags Metric Ref Use "
11787
"Iface\n"
11788
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
11789
"eth0\n"
11790
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
11791
"eth0\n"
11792
msgstr ""
11793
11794
#: serverguide/C/network-config.xml:223(para)
11795
msgid ""
11796
"If you require DNS for your temporary network configuration, you can add DNS "
11797
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
11798
"example below shows how to enter two DNS servers to "
11799
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
11800
"appropriate for your network. A more lengthy description of DNS client "
11801
"configuration is in a following section."
11802
msgstr ""
11803
11804
#: serverguide/C/network-config.xml:230(programlisting)
11805
#, no-wrap
11806
msgid ""
11807
"\n"
11808
"nameserver 8.8.8.8\n"
11809
"nameserver 8.8.4.4\n"
11810
msgstr ""
11811
11812
#: serverguide/C/network-config.xml:234(para)
11813
msgid ""
11814
"If you no longer need this configuration and wish to purge all IP "
11815
"configuration from an interface, you can use the "
11816
"<application>ip</application> command with the flush option as shown below."
11817
msgstr ""
11818
11819
#: serverguide/C/network-config.xml:240(userinput)
11820
#, no-wrap
11821
msgid "ip addr flush eth0"
11822
msgstr ""
11823
11824
#: serverguide/C/network-config.xml:243(para)
11825
msgid ""
11826
"Flushing the IP configuration using the <application>ip</application> "
11827
"command does not clear the contents of "
11828
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
11829
"entries manually."
11830
msgstr ""
11831
11832
#: serverguide/C/network-config.xml:251(title)
11833
msgid "Dynamic IP Address Assignment (DHCP Client)"
11834
msgstr ""
11835
11836
#: serverguide/C/network-config.xml:252(para)
11837
msgid ""
11838
"To configure your server to use DHCP for dynamic address assignment, add the "
11839
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
11840
"statement for the appropriate interface in the file "
11841
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11842
"are configuring your first Ethernet interface identified as <emphasis "
11843
"role=\"italic\">eth0</emphasis>."
11844
msgstr ""
11845
11846
#: serverguide/C/network-config.xml:259(programlisting)
11847
#, no-wrap
11848
msgid ""
11849
"\n"
11850
"auto eth0\n"
11851
"iface eth0 inet dhcp\n"
11852
msgstr ""
11853
11854
#: serverguide/C/network-config.xml:263(para)
11855
msgid ""
11856
"By adding an interface configuration as shown above, you can manually enable "
11857
"the interface through the <application>ifup</application> command which "
11858
"initiates the DHCP process via <application>dhclient</application>."
11859
msgstr ""
11860
11861
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
11862
#, no-wrap
11863
msgid "sudo ifup eth0"
11864
msgstr ""
11865
11866
#: serverguide/C/network-config.xml:271(para)
11867
msgid ""
11868
"To manually disable the interface, you can use the "
11869
"<application>ifdown</application> command, which in turn will initiate the "
11870
"DHCP release process and shut down the interface."
11871
msgstr ""
11872
11873
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
11874
#, no-wrap
11875
msgid "sudo ifdown eth0"
11876
msgstr ""
11877
11878
#: serverguide/C/network-config.xml:282(title)
11879
msgid "Static IP Address Assignment"
11880
msgstr ""
11881
11882
#: serverguide/C/network-config.xml:283(para)
11883
msgid ""
11884
"To configure your system to use a static IP address assignment, add the "
11885
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
11886
"family statement for the appropriate interface in the file "
11887
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11888
"are configuring your first Ethernet interface identified as <emphasis "
11889
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
11890
"role=\"italic\">address</emphasis>, <emphasis "
11891
"role=\"italic\">netmask</emphasis>, and <emphasis "
11892
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
11893
"network."
11894
msgstr ""
11895
11896
#: serverguide/C/network-config.xml:292(programlisting)
11897
#, no-wrap
11898
msgid ""
11899
"\n"
11900
"auto eth0\n"
11901
"iface eth0 inet static\n"
11902
"address 10.0.0.100\n"
11903
"netmask 255.255.255.0\n"
11904
"gateway 10.0.0.1\n"
11905
msgstr ""
11906
11907
#: serverguide/C/network-config.xml:299(para)
11908
msgid ""
11909
"By adding an interface configuration as shown above, you can manually enable "
11910
"the interface through the <application>ifup</application> command."
11911
msgstr ""
11912
11913
#: serverguide/C/network-config.xml:306(para)
11914
msgid ""
11915
"To manually disable the interface, you can use the "
11916
"<application>ifdown</application> command."
11917
msgstr ""
11918
11919
#: serverguide/C/network-config.xml:316(title)
11920
msgid "Loopback Interface"
11921
msgstr ""
11922
11923
#: serverguide/C/network-config.xml:317(para)
11924
msgid ""
11925
"The loopback interface is identified by the system as <emphasis "
11926
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
11927
"can be viewed using the ifconfig command."
11928
msgstr ""
11929
11930
#: serverguide/C/network-config.xml:322(userinput)
11931
#, no-wrap
11932
msgid "ifconfig lo"
11933
msgstr ""
11934
11935
#: serverguide/C/network-config.xml:321(screen)
11936
#, no-wrap
11937
msgid ""
11938
"\n"
11939
"<placeholder-1/>\n"
11940
"lo Link encap:Local Loopback \n"
11941
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
11942
" inet6 addr: ::1/128 Scope:Host\n"
11943
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
11944
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
11945
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
11946
" collisions:0 txqueuelen:0 \n"
11947
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
11948
msgstr ""
11949
11950
#: serverguide/C/network-config.xml:332(para)
11951
msgid ""
11952
"By default, there should be two lines in "
11953
"<filename>/etc/network/interfaces</filename> responsible for automatically "
11954
"configuring your loopback interface. It is recommended that you keep the "
11955
"default settings unless you have a specific purpose for changing them. An "
11956
"example of the two default lines are shown below."
11957
msgstr ""
11958
11959
#: serverguide/C/network-config.xml:338(programlisting)
11960
#, no-wrap
11961
msgid ""
11962
"\n"
11963
"auto lo\n"
11964
"iface lo inet loopback\n"
11965
msgstr ""
11966
11967
#: serverguide/C/network-config.xml:347(title)
11968
msgid "Name Resolution"
11969
msgstr ""
11970
11971
#: serverguide/C/network-config.xml:348(para)
11972
msgid ""
11973
"Name resolution as it relates to IP networking is the process of mapping IP "
11974
"addresses to hostnames, making it easier to identify resources on a network. "
11975
"The following section will explain how to properly configure your system for "
11976
"name resolution using DNS and static hostname records."
11977
msgstr ""
11978
11979
#: serverguide/C/network-config.xml:356(title)
11980
msgid "DNS Client Configuration"
11981
msgstr ""
11982
11983
#: serverguide/C/network-config.xml:357(para)
11984
msgid ""
11985
"To configure your system to use DNS for name resolution, add the IP "
11986
"addresses of the DNS servers that are appropriate for your network in the "
11987
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
11988
"suffix search-lists to match your network domain names."
11989
msgstr ""
11990
11991
#: serverguide/C/network-config.xml:362(para)
11992
msgid ""
11993
"Below is an example of a typical configuration of "
11994
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
11995
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
11996
msgstr ""
11997
11998
#: serverguide/C/network-config.xml:367(programlisting)
11999
#, no-wrap
12000
msgid ""
12001
"\n"
12002
"search example.com\n"
12003
"nameserver 8.8.8.8\n"
12004
"nameserver 8.8.4.4\n"
12005
msgstr ""
12006
12007
#: serverguide/C/network-config.xml:372(para)
12008
msgid ""
12009
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12010
"multiple domain names so that DNS queries will be appended in the order in "
12011
"which they are entered. For example, your network may have multiple sub-"
12012
"domains to search; a parent domain of <emphasis "
12013
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12014
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12015
"role=\"italic\">dev.example.com</emphasis>."
12016
msgstr ""
12017
12018
#: serverguide/C/network-config.xml:380(para)
12019
msgid ""
12020
"If you have multiple domains you wish to search, your configuration might "
12021
"look like the following."
12022
msgstr ""
12023
12024
#: serverguide/C/network-config.xml:383(programlisting)
12025
#, no-wrap
12026
msgid ""
12027
"\n"
12028
"search example.com sales.example.com dev.example.com\n"
12029
"nameserver 8.8.8.8\n"
12030
"nameserver 8.8.4.4\n"
12031
msgstr ""
12032
12033
#: serverguide/C/network-config.xml:388(para)
12034
msgid ""
12035
"If you try to ping a host with the name of <emphasis "
12036
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12037
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12038
msgstr ""
12039
12040
#: serverguide/C/network-config.xml:394(para)
12041
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12042
msgstr ""
12043
12044
#: serverguide/C/network-config.xml:399(para)
12045
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12046
msgstr ""
12047
12048
#: serverguide/C/network-config.xml:404(para)
12049
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12050
msgstr ""
12051
12052
#: serverguide/C/network-config.xml:409(para)
12053
msgid ""
12054
"If no matches are found, the DNS server will provide a result of <emphasis "
12055
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12056
msgstr ""
12057
12058
#: serverguide/C/network-config.xml:416(title)
12059
msgid "Static Hostnames"
12060
msgstr ""
12061
12062
#: serverguide/C/network-config.xml:417(para)
12063
msgid ""
12064
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12065
"file <filename>/etc/hosts</filename>. Entries in the "
12066
"<filename>hosts</filename> file will have precedence over DNS by default. "
12067
"This means that if your system tries to resolve a hostname and it matches an "
12068
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12069
"some configurations, especially when Internet access is not required, "
12070
"servers that communicate with a limited number of resources can be "
12071
"conveniently set to use static hostnames instead of DNS."
12072
msgstr ""
12073
12074
#: serverguide/C/network-config.xml:424(para)
12075
msgid ""
12076
"The following is an example of a <filename>hosts</filename> file where a "
12077
"number of local servers have been identified by simple hostnames, aliases "
12078
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12079
msgstr ""
12080
12081
#: serverguide/C/network-config.xml:428(programlisting)
12082
#, no-wrap
12083
msgid ""
12084
"\n"
12085
"127.0.0.1\tlocalhost\n"
12086
"127.0.1.1\tubuntu-server\n"
12087
"10.0.0.11\tserver1 vpn server1.example.com\n"
12088
"10.0.0.12\tserver2 mail server2.example.com\n"
12089
"10.0.0.13\tserver3 www server3.example.com\n"
12090
"10.0.0.14\tserver4 file server4.example.com\n"
12091
msgstr ""
12092
12093
#: serverguide/C/network-config.xml:437(para)
12094
msgid ""
12095
"In the above example, notice that each of the servers have been given "
12096
"aliases in addition to their proper names and FQDN's. <emphasis "
12097
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12098
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12099
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12100
"role=\"italic\">server3</emphasis> as <emphasis "
12101
"role=\"italic\">www</emphasis>, and <emphasis "
12102
"role=\"italic\">server4</emphasis> as <emphasis "
12103
"role=\"italic\">file</emphasis>."
12104
msgstr ""
12105
12106
#: serverguide/C/network-config.xml:449(title)
12107
msgid "Name Service Switch Configuration"
12108
msgstr ""
12109
12110
#: serverguide/C/network-config.xml:450(para)
12111
msgid ""
12112
"The order in which your system selects a method of resolving hostnames to IP "
12113
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12114
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12115
"section, typically static hostnames defined in the systems "
12116
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12117
"from DNS. The following is an example of the line responsible for this order "
12118
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12119
msgstr ""
12120
12121
#: serverguide/C/network-config.xml:458(programlisting)
12122
#, no-wrap
12123
msgid ""
12124
"\n"
12125
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12126
msgstr ""
12127
12128
#: serverguide/C/network-config.xml:464(para)
12129
msgid ""
12130
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12131
"hostnames located in <filename>/etc/hosts</filename>."
12132
msgstr ""
12133
12134
#: serverguide/C/network-config.xml:470(para)
12135
msgid ""
12136
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12137
"name using Multicast DNS."
12138
msgstr ""
12139
12140
#: serverguide/C/network-config.xml:475(para)
12141
msgid ""
12142
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12143
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12144
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12145
"authoritative and that the system should not try to continue hunting for an "
12146
"answer."
12147
msgstr ""
12148
12149
#: serverguide/C/network-config.xml:483(para)
12150
msgid ""
12151
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12152
msgstr ""
12153
12154
#: serverguide/C/network-config.xml:488(para)
12155
msgid ""
12156
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12157
msgstr ""
12158
12159
#: serverguide/C/network-config.xml:494(para)
12160
msgid ""
12161
"To modify the order of the above mentioned name resolution methods, you can "
12162
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12163
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12164
"versus Multicast DNS, you can change the string in "
12165
"<filename>/etc/nsswitch.conf</filename> as shown below."
12166
msgstr ""
12167
12168
#: serverguide/C/network-config.xml:501(programlisting)
12169
#, no-wrap
12170
msgid ""
12171
"\n"
12172
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12173
msgstr ""
12174
12175
#: serverguide/C/network-config.xml:508(title)
12176
msgid "Bridging"
12177
msgstr ""
12178
12179
#: serverguide/C/network-config.xml:510(para)
12180
msgid ""
12181
"Bridging multiple interfaces is a more advanced configuration, but is very "
12182
"useful in multiple scenarios. One scenario is setting up a bridge with "
12183
"multiple network interfaces, then using a firewall to filter traffic between "
12184
"two network segments. Another scenario is using bridge on a system with one "
12185
"interface to allow virtual machines direct access to the outside network. "
12186
"The following example covers the latter scenario."
12187
msgstr ""
12188
12189
#: serverguide/C/network-config.xml:517(para)
12190
msgid ""
12191
"Before configuring a bridge you will need to install the <application>bridge-"
12192
"utils</application> package. To install the package, in a terminal enter:"
12193
msgstr ""
12194
12195
#: serverguide/C/network-config.xml:523(command)
12196
msgid "sudo apt-get install bridge-utils"
12197
msgstr ""
12198
12199
#: serverguide/C/network-config.xml:526(para)
12200
msgid ""
12201
"Next, configure the bridge by editing "
12202
"<filename>/etc/network/interfaces</filename>:"
12203
msgstr ""
12204
12205
#: serverguide/C/network-config.xml:530(programlisting)
12206
#, no-wrap
12207
msgid ""
12208
"\n"
12209
"auto lo\n"
12210
"iface lo inet loopback\n"
12211
"\n"
12212
"auto br0\n"
12213
"iface br0 inet static\n"
12214
" address 192.168.0.10\n"
12215
" network 192.168.0.0\n"
12216
" netmask 255.255.255.0\n"
12217
" broadcast 192.168.0.255\n"
12218
" gateway 192.168.0.1\n"
12219
" bridge_ports eth0\n"
12220
" bridge_fd 9\n"
12221
" bridge_hello 2\n"
12222
" bridge_maxage 12\n"
12223
" bridge_stp off\n"
12224
msgstr ""
12225
12226
#: serverguide/C/network-config.xml:549(para)
12227
msgid "Enter the appropriate values for your physical interface and network."
12228
msgstr ""
12229
12230
#: serverguide/C/network-config.xml:554(para)
12231
msgid "Now restart networking to enable the bridge interface:"
12232
msgstr ""
12233
12234
#: serverguide/C/network-config.xml:561(para)
12235
msgid ""
12236
"The new bridge interface should now be up and running. The "
12237
"<application>brctl</application> provides useful information about the state "
12238
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12239
"<command>man brctl</command> for more information."
12240
msgstr ""
12241
12242
#: serverguide/C/network-config.xml:577(para)
12243
msgid ""
12244
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12245
"Network page</ulink> has links to articles covering more advanced network "
12246
"configuration."
12247
msgstr ""
12248
12249
#: serverguide/C/network-config.xml:583(para)
12250
msgid ""
12251
"The <ulink "
12252
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12253
"nterfaces man page</ulink> has details on more options for "
12254
"<filename>/etc/network/interfaces</filename>."
12255
msgstr ""
12256
12257
#: serverguide/C/network-config.xml:589(para)
12258
msgid ""
12259
"The <ulink "
12260
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12261
"lient man page</ulink> has details on more options for configuring DHCP "
12262
"client settings."
12263
msgstr ""
12264
12265
#: serverguide/C/network-config.xml:595(para)
12266
msgid ""
12267
"For more information on DNS client configuration see the <ulink "
12268
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12269
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12270
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12271
"Administrator's Guide</ulink> is a good source of resolver and name service "
12272
"configuration information."
12273
msgstr ""
12274
12275
#: serverguide/C/network-config.xml:603(para)
12276
msgid ""
12277
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12278
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12279
"man page</ulink> and the Linux Foundation's <ulink "
12280
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12281
msgstr ""
12282
12283
#: serverguide/C/network-config.xml:614(title)
12284
msgid "TCP/IP"
12285
msgstr ""
12286
12287
#: serverguide/C/network-config.xml:615(para)
12288
msgid ""
12289
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12290
"standard set of protocols developed in the late 1970s by the Defense "
12291
"Advanced Research Projects Agency (DARPA) as a means of communication "
12292
"between different types of computers and computer networks. TCP/IP is the "
12293
"driving force of the Internet, and thus it is the most popular set of "
12294
"network protocols on Earth."
12295
msgstr ""
12296
12297
#: serverguide/C/network-config.xml:623(title)
12298
msgid "TCP/IP Introduction"
12299
msgstr ""
12300
12301
#: serverguide/C/network-config.xml:624(para)
12302
msgid ""
12303
"The two protocol components of TCP/IP deal with different aspects of "
12304
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12305
"TCP/IP is a connectionless protocol which deals only with network packet "
12306
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12307
"basic unit of networking information. The IP Datagram consists of a header "
12308
"followed by a message. The <emphasis> Transmission Control "
12309
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12310
"establish connections which may be used to exchange data streams. TCP also "
12311
"guarantees that the data between connections is delivered and that it "
12312
"arrives at one network host in the same order as sent from another network "
12313
"host."
12314
msgstr ""
12315
12316
#: serverguide/C/network-config.xml:637(title)
12317
msgid "TCP/IP Configuration"
12318
msgstr ""
12319
12320
#: serverguide/C/network-config.xml:638(para)
12321
msgid ""
12322
"The TCP/IP protocol configuration consists of several elements which must be "
12323
"set by editing the appropriate configuration files, or deploying solutions "
12324
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12325
"can be configured to provide the proper TCP/IP configuration settings to "
12326
"network clients automatically. These configuration values must be set "
12327
"correctly in order to facilitate the proper network operation of your Ubuntu "
12328
"system."
12329
msgstr ""
12330
12331
#: serverguide/C/network-config.xml:650(para)
12332
msgid ""
12333
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12334
"identifying string expressed as four decimal numbers ranging from zero (0) "
12335
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12336
"four numbers representing eight (8) bits of the address for a total length "
12337
"of thirty-two (32) bits for the whole address. This format is called "
12338
"<emphasis>dotted quad notation</emphasis>."
12339
msgstr ""
12340
12341
#: serverguide/C/network-config.xml:660(para)
12342
msgid ""
12343
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12344
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12345
"separate the portions of an IP address significant to the network from the "
12346
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12347
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12348
"three bytes of the IP address and allows the last byte of the IP address to "
12349
"remain available for specifying hosts on the subnetwork."
12350
msgstr ""
12351
12352
#: serverguide/C/network-config.xml:671(para)
12353
msgid ""
12354
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12355
"represents the bytes comprising the network portion of an IP address. For "
12356
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12357
"network address, where twelve (12) represents the first byte of the IP "
12358
"address, (the network part) and zeroes (0) in all of the remaining three "
12359
"bytes to represent the potential host values. A network host using the "
12360
"private IP address 192.168.1.100 would in turn use a Network Address of "
12361
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12362
"network and a zero (0) for all the possible hosts on the network."
12363
msgstr ""
12364
12365
#: serverguide/C/network-config.xml:684(para)
12366
msgid ""
12367
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12368
"is an IP address which allows network data to be sent simultaneously to all "
12369
"hosts on a given subnetwork rather than specifying a particular host. The "
12370
"standard general broadcast address for IP networks is 255.255.255.255, but "
12371
"this broadcast address cannot be used to send a broadcast message to every "
12372
"host on the Internet because routers block it. A more appropriate broadcast "
12373
"address is set to match a specific subnetwork. For example, on the private "
12374
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12375
"Broadcast messages are typically produced by network protocols such as the "
12376
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12377
msgstr ""
12378
12379
#: serverguide/C/network-config.xml:697(para)
12380
msgid ""
12381
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12382
"IP address through which a particular network, or host on a network, may be "
12383
"reached. If one network host wishes to communicate with another network "
12384
"host, and that host is not located on the same network, then a "
12385
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12386
"Address will be that of a router on the same network, which will in turn "
12387
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12388
"value of the Gateway Address setting must be correct, or your system will "
12389
"not be able to reach any hosts beyond those on the same network."
12390
msgstr ""
12391
12392
#: serverguide/C/network-config.xml:708(para)
12393
msgid ""
12394
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12395
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12396
"resolve network hostnames into IP addresses. There are three levels of "
12397
"Nameserver Addresses, which may be specified in order of precedence: The "
12398
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12399
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12400
"your system to be able to resolve network hostnames into their corresponding "
12401
"IP addresses, you must specify valid Nameserver Addresses which you are "
12402
"authorized to use in your system's TCP/IP configuration. In many cases these "
12403
"addresses can and will be provided by your network service provider, but "
12404
"many free and publicly accessible nameservers are available for use, such as "
12405
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12406
msgstr ""
12407
12408
#: serverguide/C/network-config.xml:722(para)
12409
msgid ""
12410
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12411
"Address are typically specified via the appropriate directives in the file "
12412
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12413
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12414
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12415
"system manual page for <filename>interfaces</filename> or "
12416
"<filename>resolv.conf</filename> respectively, with the following commands "
12417
"typed at a terminal prompt:"
12418
msgstr ""
12419
12420
#: serverguide/C/network-config.xml:729(para)
12421
msgid ""
12422
"Access the system manual page for <filename>interfaces</filename> with the "
12423
"following command:"
12424
msgstr ""
12425
12426
#: serverguide/C/network-config.xml:734(command)
12427
msgid "man interfaces"
12428
msgstr ""
12429
12430
#: serverguide/C/network-config.xml:737(para)
12431
msgid ""
12432
"Access the system manual page for <filename>resolv.conf</filename> with the "
12433
"following command:"
12434
msgstr ""
12435
12436
#: serverguide/C/network-config.xml:741(command)
12437
msgid "man resolv.conf"
12438
msgstr ""
12439
12440
#: serverguide/C/network-config.xml:646(para)
12441
msgid ""
12442
"The common configuration elements of TCP/IP and their purposes are as "
12443
"follows: <placeholder-1/>"
12444
msgstr ""
12445
12446
#: serverguide/C/network-config.xml:748(title)
12447
msgid "IP Routing"
12448
msgstr ""
12449
12450
#: serverguide/C/network-config.xml:749(para)
12451
msgid ""
12452
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12453
"network along which network data may be sent. Routing uses a set of "
12454
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12455
"packets from their source to the destination, often via many intermediary "
12456
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12457
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12458
"<emphasis>Dynamic Routing.</emphasis>"
12459
msgstr ""
12460
12461
#: serverguide/C/network-config.xml:758(para)
12462
msgid ""
12463
"Static routing involves manually adding IP routes to the system's routing "
12464
"table, and this is usually done by manipulating the routing table with the "
12465
"<application>route</application> command. Static routing enjoys many "
12466
"advantages over dynamic routing, such as simplicity of implementation on "
12467
"smaller networks, predictability (the routing table is always computed in "
12468
"advance, and thus the route is precisely the same each time it is used), and "
12469
"low overhead on other routers and network links due to the lack of a dynamic "
12470
"routing protocol. However, static routing does present some disadvantages as "
12471
"well. For example, static routing is limited to small networks and does not "
12472
"scale well. Static routing also fails completely to adapt to network outages "
12473
"and failures along the route due to the fixed nature of the route."
12474
msgstr ""
12475
12476
#: serverguide/C/network-config.xml:768(para)
12477
msgid ""
12478
"Dynamic routing depends on large networks with multiple possible IP routes "
12479
"from a source to a destination and makes use of special routing protocols, "
12480
"such as the Router Information Protocol (RIP), which handle the automatic "
12481
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12482
"routing has several advantages over static routing, such as superior "
12483
"scalability and the ability to adapt to failures and outages along network "
12484
"routes. Additionally, there is less manual configuration of the routing "
12485
"tables, since routers learn from one another about their existence and "
12486
"available routes. This trait also eliminates the possibility of introducing "
12487
"mistakes in the routing tables via human error. Dynamic routing is not "
12488
"perfect, however, and presents disadvantages such as heightened complexity "
12489
"and additional network overhead from router communications, which does not "
12490
"immediately benefit the end users, but still consumes network bandwidth."
12491
msgstr ""
12492
12493
#: serverguide/C/network-config.xml:782(title)
12494
msgid "TCP and UDP"
12495
msgstr ""
12496
12497
#: serverguide/C/network-config.xml:783(para)
12498
msgid ""
12499
"TCP is a connection-based protocol, offering error correction and guaranteed "
12500
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12501
"Flow control determines when the flow of a data stream needs to be stopped, "
12502
"and previously sent data packets should to be re-sent due to problems such "
12503
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12504
"accurate delivery of the data. TCP is typically used in the exchange of "
12505
"important information such as database transactions."
12506
msgstr ""
12507
12508
#: serverguide/C/network-config.xml:791(para)
12509
msgid ""
12510
"The User Datagram Protocol (UDP), on the other hand, is a "
12511
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12512
"transmission of important data because it lacks flow control or any other "
12513
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12514
"applications as audio and video streaming, where it is considerably faster "
12515
"than TCP due to the lack of error correction and flow control, and where the "
12516
"loss of a few packets is not generally catastrophic."
12517
msgstr ""
12518
12519
#: serverguide/C/network-config.xml:801(title)
12520
msgid "ICMP"
12521
msgstr ""
12522
12523
#: serverguide/C/network-config.xml:802(para)
12524
msgid ""
12525
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12526
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12527
"supports network packets containing control, error, and informational "
12528
"messages. ICMP is used by such network applications as the "
12529
"<application>ping</application> utility, which can determine the "
12530
"availability of a network host or device. Examples of some error messages "
12531
"returned by ICMP which are useful to both network hosts and devices such as "
12532
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12533
"<emphasis>Time Exceeded</emphasis>."
12534
msgstr ""
12535
12536
#: serverguide/C/network-config.xml:812(title)
12537
msgid "Daemons"
12538
msgstr ""
12539
12540
#: serverguide/C/network-config.xml:813(para)
12541
msgid ""
12542
"Daemons are special system applications which typically execute continuously "
12543
"in the background and await requests for the functions they provide from "
12544
"other applications. Many daemons are network-centric; that is, a large "
12545
"number of daemons executing in the background on an Ubuntu system may "
12546
"provide network-related functionality. Some examples of such network daemons "
12547
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12548
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12549
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12550
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12551
"Daemon</emphasis> (imapd), which provides E-Mail services."
12552
msgstr ""
12553
12554
#: serverguide/C/network-config.xml:828(para)
12555
msgid ""
12556
"There are man pages for <ulink "
12557
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12558
"nk> and <ulink "
12559
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12560
"that contain more useful information."
12561
msgstr ""
12562
12563
#: serverguide/C/network-config.xml:834(para)
12564
msgid ""
12565
"Also, see the <ulink "
12566
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12567
"and Technical Overview</ulink> IBM Redbook."
12568
msgstr ""
12569
12570
#: serverguide/C/network-config.xml:840(para)
12571
msgid ""
12572
"Another resource is O'Reilly's <ulink "
12573
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12574
"Administration</ulink>."
12575
msgstr ""
12576
12577
#: serverguide/C/network-config.xml:849(title)
12578
msgid "Dynamic Host Configuration Protocol (DHCP)"
12579
msgstr ""
12580
12581
#: serverguide/C/network-config.xml:850(para)
12582
msgid ""
12583
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12584
"enables host computers to be automatically assigned settings from a server "
12585
"as opposed to manually configuring each network host. Computers configured "
12586
"to be DHCP clients have no control over the settings they receive from the "
12587
"DHCP server, and the configuration is transparent to the computer's user."
12588
msgstr ""
12589
12590
#: serverguide/C/network-config.xml:857(para)
12591
msgid ""
12592
"The most common settings provided by a DHCP server to DHCP clients include:"
12593
msgstr ""
12594
12595
#: serverguide/C/network-config.xml:862(para)
12596
msgid "IP-Address and Netmask"
12597
msgstr ""
12598
12599
#: serverguide/C/network-config.xml:865(para)
12600
msgid "DNS"
12601
msgstr ""
12602
12603
#: serverguide/C/network-config.xml:868(para)
12604
msgid "WINS"
12605
msgstr ""
12606
12607
#: serverguide/C/network-config.xml:871(para)
12608
msgid ""
12609
"However, a DHCP server can also supply configuration properties such as:"
12610
msgstr ""
12611
12612
#: serverguide/C/network-config.xml:876(para)
12613
msgid "Host Name"
12614
msgstr ""
12615
12616
#: serverguide/C/network-config.xml:879(para)
12617
msgid "Domain Name"
12618
msgstr ""
12619
12620
#: serverguide/C/network-config.xml:882(para)
12621
msgid "Default Gateway"
12622
msgstr ""
12623
12624
#: serverguide/C/network-config.xml:885(para)
12625
msgid "Time Server"
12626
msgstr ""
12627
12628
#: serverguide/C/network-config.xml:888(para)
12629
msgid "Print Server"
12630
msgstr ""
12631
12632
#: serverguide/C/network-config.xml:891(para)
12633
msgid ""
12634
"The advantage of using DHCP is that changes to the network, for example a "
12635
"change in the address of the DNS server, need only be changed at the DHCP "
12636
"server, and all network hosts will be reconfigured the next time their DHCP "
12637
"clients poll the DHCP server. As an added advantage, it is also easier to "
12638
"integrate new computers into the network, as there is no need to check for "
12639
"the availability of an IP address. Conflicts in IP address allocation are "
12640
"also reduced."
12641
msgstr ""
12642
12643
#: serverguide/C/network-config.xml:899(para)
12644
msgid "A DHCP server can provide configuration settings using two methods:"
12645
msgstr ""
12646
12647
#: serverguide/C/network-config.xml:904(term)
12648
msgid "MAC Address"
12649
msgstr ""
12650
12651
#: serverguide/C/network-config.xml:906(para)
12652
msgid ""
12653
"This method entails using DHCP to identify the unique hardware address of "
12654
"each network card connected to the network and then continually supplying a "
12655
"constant configuration each time the DHCP client makes a request to the DHCP "
12656
"server using that network device."
12657
msgstr ""
12658
12659
#: serverguide/C/network-config.xml:915(term)
12660
msgid "Address Pool"
12661
msgstr ""
12662
12663
#: serverguide/C/network-config.xml:917(para)
12664
msgid ""
12665
"This method entails defining a pool (sometimes also called a range or scope) "
12666
"of IP addresses from which DHCP clients are supplied their configuration "
12667
"properties dynamically and on a \"first come, first served\" basis. When a "
12668
"DHCP client is no longer on the network for a specified period, the "
12669
"configuration is expired and released back to the address pool for use by "
12670
"other DHCP Clients."
12671
msgstr ""
12672
12673
#: serverguide/C/network-config.xml:928(para)
12674
msgid ""
12675
"Ubuntu is shipped with both DHCP server and client. The server is "
12676
"<application>dhcpd</application> (dynamic host configuration protocol "
12677
"daemon). The client provided with Ubuntu is "
12678
"<application>dhclient</application> and should be installed on all computers "
12679
"required to be automatically configured. Both programs are easy to install "
12680
"and configure and will be automatically started at system boot."
12681
msgstr ""
12682
12683
#: serverguide/C/network-config.xml:938(para)
12684
msgid ""
12685
"At a terminal prompt, enter the following command to install "
12686
"<application>dhcpd</application>:"
12687
msgstr ""
12688
12689
#: serverguide/C/network-config.xml:943(command)
12690
msgid "sudo apt-get install dhcp3-server"
12691
msgstr ""
12692
12693
#: serverguide/C/network-config.xml:945(para)
12694
msgid ""
12695
"You will probably need to change the default configuration by editing "
12696
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12697
msgstr ""
12698
12699
#: serverguide/C/network-config.xml:949(para)
12700
msgid ""
12701
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
12702
"dhcpd should listen to. By default it listens to eth0."
12703
msgstr ""
12704
12705
#: serverguide/C/network-config.xml:953(para)
12706
msgid ""
12707
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
12708
"messages."
12709
msgstr ""
12710
12711
#: serverguide/C/network-config.xml:960(para)
12712
msgid ""
12713
"The error message the installation ends with might be a little confusing, "
12714
"but the following steps will help you configure the service:"
12715
msgstr ""
12716
12717
#: serverguide/C/network-config.xml:964(para)
12718
msgid ""
12719
"Most commonly, what you want to do is assign an IP address randomly. This "
12720
"can be done with settings as follows:"
12721
msgstr ""
12722
12723
#: serverguide/C/network-config.xml:968(programlisting)
12724
#, no-wrap
12725
msgid ""
12726
"\n"
12727
"# Sample /etc/dhcpd.conf\n"
12728
"# (add your comments here) \n"
12729
"default-lease-time 600;\n"
12730
"max-lease-time 7200;\n"
12731
"option subnet-mask 255.255.255.0;\n"
12732
"option broadcast-address 192.168.1.255;\n"
12733
"option routers 192.168.1.254;\n"
12734
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
12735
"option domain-name \"mydomain.example\";\n"
12736
"\n"
12737
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
12738
"range 192.168.1.10 192.168.1.100;\n"
12739
"range 192.168.1.150 192.168.1.200;\n"
12740
"} \n"
12741
msgstr ""
12742
12743
#: serverguide/C/network-config.xml:984(para)
12744
msgid ""
12745
"This will result in the DHCP server giving a client an IP address from the "
12746
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
12747
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
12748
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
12749
"server will also \"advise\" the client that it should use 255.255.255.0 as "
12750
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
12751
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
12752
msgstr ""
12753
12754
#: serverguide/C/network-config.xml:993(para)
12755
msgid ""
12756
"If you need to specify a WINS server for your Windows clients, you will need "
12757
"to include the netbios-name-servers option, e.g."
12758
msgstr ""
12759
12760
#: serverguide/C/network-config.xml:997(programlisting)
12761
#, no-wrap
12762
msgid ""
12763
"\n"
12764
"option netbios-name-servers 192.168.1.1; \n"
12765
msgstr ""
12766
12767
#: serverguide/C/network-config.xml:1000(para)
12768
msgid ""
12769
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
12770
"be found <ulink "
12771
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
12772
msgstr ""
12773
12774
#: serverguide/C/network-config.xml:1010(para)
12775
msgid ""
12776
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
12777
"server Ubuntu Wiki</ulink> page has more information."
12778
msgstr ""
12779
12780
#: serverguide/C/network-config.xml:1015(para)
12781
msgid ""
12782
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
12783
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
12784
"hcpd.conf man page</ulink>."
12785
msgstr ""
12786
12787
#: serverguide/C/network-config.xml:1021(para)
12788
msgid ""
12789
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
12790
"FAQ</ulink>"
12791
msgstr ""
12792
12793
#: serverguide/C/network-config.xml:1031(title)
12794
msgid "Time Synchronisation with NTP"
12795
msgstr ""
12796
12797
#: serverguide/C/network-config.xml:1032(para)
12798
msgid ""
12799
"This page describes methods for keeping your computer's time accurate. This "
12800
"is useful for servers, but is not necessary (or desirable) for desktop "
12801
"machines."
12802
msgstr ""
12803
12804
#: serverguide/C/network-config.xml:1035(para)
12805
msgid ""
12806
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
12807
"client requests the current time from a server, and uses it to set its own "
12808
"clock."
12809
msgstr ""
12810
12811
#: serverguide/C/network-config.xml:1038(para)
12812
msgid ""
12813
"Behind this simple description, there is a lot of complexity - there are "
12814
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
12815
"clocks (often via GPS), and tier two and three servers spreading the load of "
12816
"actually handling requests across the Internet. Also the client software is "
12817
"a lot more complex than you might think - it has to factor out communication "
12818
"delays, and adjust the time in a way that does not upset all the other "
12819
"processes that run on the server. But luckily all that complexity is hidden "
12820
"from you!"
12821
msgstr ""
12822
12823
#: serverguide/C/network-config.xml:1041(para)
12824
msgid ""
12825
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
12826
msgstr ""
12827
12828
#: serverguide/C/network-config.xml:1046(title)
12829
msgid "ntpdate"
12830
msgstr ""
12831
12832
#: serverguide/C/network-config.xml:1047(para)
12833
msgid ""
12834
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
12835
"set up your time according to Ubuntu's NTP server. However, a server's clock "
12836
"is likely to drift considerably between reboots, so it makes sense to "
12837
"correct the time occasionally. The easiest way to do this is to get cron to "
12838
"run ntpdate every day. With your favorite editor, as root, create a file "
12839
"<code>/etc/cron.daily/ntpdate</code> containing:"
12840
msgstr ""
12841
12842
#: serverguide/C/network-config.xml:1052(screen)
12843
#, no-wrap
12844
msgid "ntpdate ntp.ubuntu.com\n"
12845
msgstr ""
12846
12847
#: serverguide/C/network-config.xml:1054(para)
12848
msgid ""
12849
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
12850
msgstr ""
12851
12852
#: serverguide/C/network-config.xml:1057(screen)
12853
#, no-wrap
12854
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
12855
msgstr ""
12856
12857
#: serverguide/C/network-config.xml:1061(title)
12858
msgid "ntpd"
12859
msgstr ""
12860
12861
#: serverguide/C/network-config.xml:1062(para)
12862
msgid ""
12863
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
12864
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
12865
"calculates the drift of your system clock and continuously adjusts it, so "
12866
"there are no large corrections that could lead to inconsistent logs for "
12867
"instance. The cost is a little processing power and memory, but for a modern "
12868
"server this is negligible."
12869
msgstr ""
12870
12871
#: serverguide/C/network-config.xml:1065(para)
12872
msgid "To set up ntpd:"
12873
msgstr ""
12874
12875
#: serverguide/C/network-config.xml:1066(screen)
12876
#, no-wrap
12877
msgid "sudo apt-get install ntp\n"
12878
msgstr ""
12879
12880
#: serverguide/C/network-config.xml:1071(title)
12881
msgid "Changing Time Servers"
12882
msgstr ""
12883
12884
#: serverguide/C/network-config.xml:1072(para)
12885
msgid ""
12886
"In both cases above, your system will use Ubuntu's NTP server at "
12887
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
12888
"use several servers to increase accuracy and resilience, and you may want to "
12889
"use time servers that are geographically closer to you. to do this for "
12890
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
12891
msgstr ""
12892
12893
#: serverguide/C/network-config.xml:1079(screen)
12894
#, no-wrap
12895
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
12896
msgstr ""
12897
12898
#: serverguide/C/network-config.xml:1081(para)
12899
msgid ""
12900
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
12901
"lines:"
12902
msgstr ""
12903
12904
#: serverguide/C/network-config.xml:1086(screen)
12905
#, no-wrap
12906
msgid ""
12907
"server ntp.ubuntu.com\n"
12908
"server pool.ntp.org\n"
12909
msgstr ""
12910
12911
#: serverguide/C/network-config.xml:1089(para)
12912
msgid ""
12913
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
12914
"really good idea which uses round-robin DNS to return an NTP server from a "
12915
"pool, spreading the load between several different servers. Even better, "
12916
"they have pools for different regions - for instance, if you are in New "
12917
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
12918
"<code>pool.ntp.org</code> . Look at <ulink "
12919
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
12920
"details."
12921
msgstr ""
12922
12923
#: serverguide/C/network-config.xml:1100(para)
12924
msgid ""
12925
"You can also Google for NTP servers in your region, and add these to your "
12926
"configuration. To test that a server works, just type <code>sudo ntpdate "
12927
"ntp.server.name</code> and see what happens."
12928
msgstr ""
12929
12930
#: serverguide/C/network-config.xml:1111(para)
12931
msgid ""
12932
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
12933
"Time</ulink> wiki page for more information."
12934
msgstr ""
12935
12936
#: serverguide/C/network-config.xml:1117(ulink)
12937
msgid "NTP Support"
12938
msgstr ""
12939
12940
#: serverguide/C/network-config.xml:1122(ulink)
12941
msgid "The NTP FAQ and HOWTO"
12942
msgstr ""
12943
12944
#: serverguide/C/network-auth.xml:13(title)
12945
msgid "Network Authentication"
12946
msgstr ""
12947
12948
#: serverguide/C/network-auth.xml:15(para)
12949
msgid "This section explains various Network Authentication protocols."
12950
msgstr ""
12951
12952
#: serverguide/C/network-auth.xml:19(title)
12953
msgid "OpenLDAP Server"
12954
msgstr ""
12955
12956
#: serverguide/C/network-auth.xml:20(para)
12957
msgid ""
12958
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
12959
"simplified version of the X.500 protocol. The directory setup in this "
12960
"section will be used for authentication. Nevertheless, LDAP can be used in "
12961
"numerous ways: authentication, shared directory (for mail clients), address "
12962
"book, etc."
12963
msgstr ""
12964
12965
#: serverguide/C/network-auth.xml:28(para)
12966
msgid ""
12967
"To describe LDAP quickly, all information is stored in a tree structure. "
12968
"With <application>OpenLDAP</application> you have freedom to determine the "
12969
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
12970
"We will begin with a basic tree containing two nodes below the root:"
12971
msgstr ""
12972
12973
#: serverguide/C/network-auth.xml:37(para)
12974
msgid "\"People\" node where your users will be stored"
12975
msgstr ""
12976
12977
#: serverguide/C/network-auth.xml:40(para)
12978
msgid "\"Groups\" node where your groups will be stored"
12979
msgstr ""
12980
12981
#: serverguide/C/network-auth.xml:44(para)
12982
msgid ""
12983
"Before beginning, you should determine what the root of your LDAP directory "
12984
"will be. By default, your tree will be determined by your Fully Qualified "
12985
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
12986
"example), your root node will be dc=example,dc=com."
12987
msgstr ""
12988
12989
#: serverguide/C/network-auth.xml:54(para)
12990
msgid ""
12991
"First, install the <application>OpenLDAP</application> server daemon "
12992
"<application>slapd</application> and <application>ldap-utils</application>, "
12993
"a package containing LDAP management utilities:"
12994
msgstr ""
12995
12996
#: serverguide/C/network-auth.xml:60(command)
12997
msgid "sudo apt-get install slapd ldap-utils"
12998
msgstr ""
12999
13000
#: serverguide/C/network-auth.xml:63(para)
13001
msgid ""
13002
"By default <application>slapd</application> is configured with minimal "
13003
"options needed to run the <application>slapd</application> daemon."
13004
msgstr ""
13005
13006
#: serverguide/C/network-auth.xml:68(para)
13007
msgid ""
13008
"The configuration example in the following sections will match the domain "
13009
"name of the server. For example, if the machine's Fully Qualified Domain "
13010
"Name (FQDN) is ldap.example.com, the default suffix will be "
13011
"<emphasis>dc=example,dc=com</emphasis>."
13012
msgstr ""
13013
13014
#: serverguide/C/network-auth.xml:76(title)
13015
msgid "Populating LDAP"
13016
msgstr ""
13017
13018
#: serverguide/C/network-auth.xml:78(para)
13019
msgid ""
13020
"<application>OpenLDAP</application> uses a separate directory which contains "
13021
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13022
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13023
"<application>slapd</application> daemon, allowing the modification of schema "
13024
"definitions, indexes, ACLs, etc without stopping the service."
13025
msgstr ""
13026
13027
#: serverguide/C/network-auth.xml:86(para)
13028
msgid ""
13029
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13030
"configuration and will need additional configuration options in order to "
13031
"populate the frontend directory. The frontend will be populated with a "
13032
"\"classical\" scheme that will be compatible with address book applications "
13033
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13034
"various applications, such as web applications, email Mail Transfer Agent "
13035
"(MTA) applications, etc."
13036
msgstr ""
13037
13038
#: serverguide/C/network-auth.xml:95(para)
13039
msgid ""
13040
"For external applications to authenticate using LDAP they will each need to "
13041
"be specifically configured to do so. Refer to the individual application "
13042
"documentation for details."
13043
msgstr ""
13044
13045
#: serverguide/C/network-auth.xml:103(para)
13046
msgid ""
13047
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13048
"examples to match your LDAP configuration."
13049
msgstr ""
13050
13051
#: serverguide/C/network-auth.xml:108(para)
13052
msgid ""
13053
"First, some additional schema files need to be loaded. In a terminal enter:"
13054
msgstr ""
13055
13056
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13057
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13058
msgstr ""
13059
13060
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13061
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13062
msgstr ""
13063
13064
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13065
msgid ""
13066
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13067
msgstr ""
13068
13069
#: serverguide/C/network-auth.xml:118(para)
13070
msgid ""
13071
"Next, copy the following example LDIF file, naming it "
13072
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13073
msgstr ""
13074
13075
#: serverguide/C/network-auth.xml:123(programlisting)
13076
#, no-wrap
13077
msgid ""
13078
"\n"
13079
"# Load dynamic backend modules\n"
13080
"dn: cn=module,cn=config\n"
13081
"objectClass: olcModuleList\n"
13082
"cn: module\n"
13083
"olcModulepath: /usr/lib/ldap\n"
13084
"olcModuleload: back_hdb\n"
13085
"\n"
13086
"# Database settings\n"
13087
"dn: olcDatabase=hdb,cn=config\n"
13088
"objectClass: olcDatabaseConfig\n"
13089
"objectClass: olcHdbConfig\n"
13090
"olcDatabase: {1}hdb\n"
13091
"olcSuffix: dc=example,dc=com\n"
13092
"olcDbDirectory: /var/lib/ldap\n"
13093
"olcRootDN: cn=admin,dc=example,dc=com\n"
13094
"olcRootPW: secret\n"
13095
"olcDbConfig: set_cachesize 0 2097152 0\n"
13096
"olcDbConfig: set_lk_max_objects 1500\n"
13097
"olcDbConfig: set_lk_max_locks 1500\n"
13098
"olcDbConfig: set_lk_max_lockers 1500\n"
13099
"olcDbIndex: objectClass eq\n"
13100
"olcLastMod: TRUE\n"
13101
"olcDbCheckpoint: 512 30\n"
13102
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13103
"by anonymous auth by self write by * none\n"
13104
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13105
"olcAccess: to dn.base=\"\" by * read\n"
13106
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13107
"\n"
13108
msgstr ""
13109
13110
#: serverguide/C/network-auth.xml:155(para)
13111
msgid ""
13112
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13113
msgstr ""
13114
13115
#: serverguide/C/network-auth.xml:160(para)
13116
msgid "Now add the LDIF to the directory:"
13117
msgstr ""
13118
13119
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13120
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13121
msgstr ""
13122
13123
#: serverguide/C/network-auth.xml:168(para)
13124
msgid ""
13125
"The frontend directory is now ready to be populated. Create a "
13126
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13127
msgstr ""
13128
13129
#: serverguide/C/network-auth.xml:173(programlisting)
13130
#, no-wrap
13131
msgid ""
13132
"\n"
13133
"# Create top-level object in domain\n"
13134
"dn: dc=example,dc=com\n"
13135
"objectClass: top\n"
13136
"objectClass: dcObject\n"
13137
"objectclass: organization\n"
13138
"o: Example Organization\n"
13139
"dc: Example\n"
13140
"description: LDAP Example \n"
13141
"\n"
13142
"# Admin user.\n"
13143
"dn: cn=admin,dc=example,dc=com\n"
13144
"objectClass: simpleSecurityObject\n"
13145
"objectClass: organizationalRole\n"
13146
"cn: admin\n"
13147
"description: LDAP administrator\n"
13148
"userPassword: secret\n"
13149
"\n"
13150
"dn: ou=people,dc=example,dc=com\n"
13151
"objectClass: organizationalUnit\n"
13152
"ou: people\n"
13153
"\n"
13154
"dn: ou=groups,dc=example,dc=com\n"
13155
"objectClass: organizationalUnit\n"
13156
"ou: groups\n"
13157
"\n"
13158
"dn: uid=john,ou=people,dc=example,dc=com\n"
13159
"objectClass: inetOrgPerson\n"
13160
"objectClass: posixAccount\n"
13161
"objectClass: shadowAccount\n"
13162
"uid: john\n"
13163
"sn: Doe\n"
13164
"givenName: John\n"
13165
"cn: John Doe\n"
13166
"displayName: John Doe\n"
13167
"uidNumber: 1000\n"
13168
"gidNumber: 10000\n"
13169
"userPassword: password\n"
13170
"gecos: John Doe\n"
13171
"loginShell: /bin/bash\n"
13172
"homeDirectory: /home/john\n"
13173
"shadowExpire: -1\n"
13174
"shadowFlag: 0\n"
13175
"shadowWarning: 7\n"
13176
"shadowMin: 8\n"
13177
"shadowMax: 999999\n"
13178
"shadowLastChange: 10877\n"
13179
"mail: john.doe@example.com\n"
13180
"postalCode: 31000\n"
13181
"l: Toulouse\n"
13182
"o: Example\n"
13183
"mobile: +33 (0)6 xx xx xx xx\n"
13184
"homePhone: +33 (0)5 xx xx xx xx\n"
13185
"title: System Administrator\n"
13186
"postalAddress: \n"
13187
"initials: JD\n"
13188
"\n"
13189
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13190
"objectClass: posixGroup\n"
13191
"cn: example\n"
13192
"gidNumber: 10000\n"
13193
msgstr ""
13194
13195
#: serverguide/C/network-auth.xml:236(para)
13196
msgid ""
13197
"In this example the directory structure, a user, and a group have been "
13198
"setup. In other examples you might see the <emphasis>objectClass: "
13199
"top</emphasis> added in every entry, but that is the default behaviour so "
13200
"you do not have to add it explicitly."
13201
msgstr ""
13202
13203
#: serverguide/C/network-auth.xml:243(para)
13204
msgid "Add the entries to the LDAP directory:"
13205
msgstr ""
13206
13207
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13208
msgid ""
13209
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13210
msgstr ""
13211
13212
#: serverguide/C/network-auth.xml:252(para)
13213
msgid ""
13214
"We can check that the content has been correctly added with the "
13215
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13216
"directory:"
13217
msgstr ""
13218
13219
#: serverguide/C/network-auth.xml:258(command)
13220
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13221
msgstr ""
13222
13223
#: serverguide/C/network-auth.xml:259(computeroutput)
13224
#, no-wrap
13225
msgid ""
13226
"\n"
13227
"dn: uid=john,ou=people,dc=example,dc=com\n"
13228
"cn: John Doe\n"
13229
"sn: Doe\n"
13230
"givenName: John\n"
13231
msgstr ""
13232
13233
#: serverguide/C/network-auth.xml:267(para)
13234
msgid "Just a quick explanation:"
13235
msgstr ""
13236
13237
#: serverguide/C/network-auth.xml:273(para)
13238
msgid ""
13239
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13240
"the default."
13241
msgstr ""
13242
13243
#: serverguide/C/network-auth.xml:279(para)
13244
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13245
msgstr ""
13246
13247
#: serverguide/C/network-auth.xml:287(title)
13248
msgid "Further Configuration"
13249
msgstr ""
13250
13251
#: serverguide/C/network-auth.xml:290(para)
13252
msgid ""
13253
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13254
"utilities in the <application>ldap-utils</application> package. For example:"
13255
msgstr ""
13256
13257
#: serverguide/C/network-auth.xml:298(para)
13258
msgid ""
13259
"Use <application>ldapsearch</application> to view the tree, entering the "
13260
"admin password set during installation or reconfiguration:"
13261
msgstr ""
13262
13263
#: serverguide/C/network-auth.xml:304(command)
13264
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13265
msgstr ""
13266
13267
#: serverguide/C/network-auth.xml:308(computeroutput)
13268
#, no-wrap
13269
msgid ""
13270
"\n"
13271
"SASL/EXTERNAL authentication started\n"
13272
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13273
"SASL SSF: 0\n"
13274
"dn: cn=config\n"
13275
"\n"
13276
"dn: cn=module{0},cn=config\n"
13277
"\n"
13278
"dn: cn=schema,cn=config\n"
13279
"\n"
13280
"dn: cn={0}core,cn=schema,cn=config\n"
13281
"\n"
13282
"dn: cn={1}cosine,cn=schema,cn=config\n"
13283
"\n"
13284
"dn: cn={2}nis,cn=schema,cn=config\n"
13285
"\n"
13286
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13287
"\n"
13288
"dn: olcDatabase={-1}frontend,cn=config\n"
13289
"\n"
13290
"dn: olcDatabase={0}config,cn=config\n"
13291
"\n"
13292
"dn: olcDatabase={1}hdb,cn=config\n"
13293
msgstr ""
13294
13295
#: serverguide/C/network-auth.xml:334(para)
13296
msgid ""
13297
"The output above is the current configuration options for the "
13298
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13299
msgstr ""
13300
13301
#: serverguide/C/network-auth.xml:342(para)
13302
msgid ""
13303
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13304
"another attribute to the index list using "
13305
"<application>ldapmodify</application>:"
13306
msgstr ""
13307
13308
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13309
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13310
msgstr ""
13311
13312
#: serverguide/C/network-auth.xml:356(userinput)
13313
#, no-wrap
13314
msgid ""
13315
"dn: olcDatabase={1}hdb,cn=config\n"
13316
"add: olcDbIndex\n"
13317
"olcDbIndex: uidNumber eq"
13318
msgstr ""
13319
13320
#: serverguide/C/network-auth.xml:352(computeroutput)
13321
#, no-wrap
13322
msgid ""
13323
"\n"
13324
"SASL/EXTERNAL authentication started\n"
13325
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13326
"SASL SSF: 0\n"
13327
"<placeholder-1/>\n"
13328
"\n"
13329
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13330
msgstr ""
13331
13332
#: serverguide/C/network-auth.xml:364(para)
13333
msgid ""
13334
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13335
"exit the utility."
13336
msgstr ""
13337
13338
#: serverguide/C/network-auth.xml:371(para)
13339
msgid ""
13340
"<application>ldapmodify</application> can also read the changes from a file. "
13341
"Copy and paste the following into a file named "
13342
"<filename>uid_index.ldif</filename>:"
13343
msgstr ""
13344
13345
#: serverguide/C/network-auth.xml:376(programlisting)
13346
#, no-wrap
13347
msgid ""
13348
"\n"
13349
"dn: olcDatabase={1}hdb,cn=config\n"
13350
"add: olcDbIndex\n"
13351
"olcDbIndex: uid eq,pres,sub\n"
13352
msgstr ""
13353
13354
#: serverguide/C/network-auth.xml:382(para)
13355
msgid "Then execute <application>ldapmodify</application>:"
13356
msgstr ""
13357
13358
#: serverguide/C/network-auth.xml:387(command)
13359
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13360
msgstr ""
13361
13362
#: serverguide/C/network-auth.xml:391(computeroutput)
13363
#, no-wrap
13364
msgid ""
13365
"\n"
13366
"SASL/EXTERNAL authentication started\n"
13367
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13368
"SASL SSF: 0\n"
13369
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13370
msgstr ""
13371
13372
#: serverguide/C/network-auth.xml:399(para)
13373
msgid "The file method is very useful for large changes."
13374
msgstr ""
13375
13376
#: serverguide/C/network-auth.xml:406(para)
13377
msgid ""
13378
"Adding additional <emphasis>schemas</emphasis> to "
13379
"<application>slapd</application> requires the schema to be converted to LDIF "
13380
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13381
"directory contains some schema files already converted to LDIF format as "
13382
"demonstrated in the previous section. Fortunately, the "
13383
"<application>slapd</application> program can be used to automate the "
13384
"conversion. The following example will add the "
13385
"<emphasis>dyngoup.schema</emphasis>:"
13386
msgstr ""
13387
13388
#: serverguide/C/network-auth.xml:416(para)
13389
msgid ""
13390
"First, create a conversion <filename>schema_convert.conf</filename> file "
13391
"containing the following lines:"
13392
msgstr ""
13393
13394
#: serverguide/C/network-auth.xml:421(programlisting)
13395
#, no-wrap
13396
msgid ""
13397
"\n"
13398
"include /etc/ldap/schema/core.schema\n"
13399
"include /etc/ldap/schema/collective.schema\n"
13400
"include /etc/ldap/schema/corba.schema\n"
13401
"include /etc/ldap/schema/cosine.schema\n"
13402
"include /etc/ldap/schema/duaconf.schema\n"
13403
"include /etc/ldap/schema/dyngroup.schema\n"
13404
"include /etc/ldap/schema/inetorgperson.schema\n"
13405
"include /etc/ldap/schema/java.schema\n"
13406
"include /etc/ldap/schema/misc.schema\n"
13407
"include /etc/ldap/schema/nis.schema\n"
13408
"include /etc/ldap/schema/openldap.schema\n"
13409
"include /etc/ldap/schema/ppolicy.schema\n"
13410
msgstr ""
13411
13412
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13413
msgid "Next, create a temporary directory to hold the output:"
13414
msgstr ""
13415
13416
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13417
msgid "mkdir /tmp/ldif_output"
13418
msgstr ""
13419
13420
#: serverguide/C/network-auth.xml:450(para)
13421
msgid ""
13422
"Now using <application>slapcat</application> convert the schema files to "
13423
"LDIF:"
13424
msgstr ""
13425
13426
#: serverguide/C/network-auth.xml:455(command)
13427
msgid ""
13428
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13429
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13430
msgstr ""
13431
13432
#: serverguide/C/network-auth.xml:458(para)
13433
msgid ""
13434
"Adjust the configuration file name and temporary directory names if yours "
13435
"are different. Also, it may be worthwhile to keep the "
13436
"<filename>ldif_output</filename> directory around in case you want to add "
13437
"additional schemas in the future."
13438
msgstr ""
13439
13440
#: serverguide/C/network-auth.xml:467(para)
13441
msgid ""
13442
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13443
"following attributes:"
13444
msgstr ""
13445
13446
#: serverguide/C/network-auth.xml:471(programlisting)
13447
#, no-wrap
13448
msgid ""
13449
"\n"
13450
"dn: cn=dyngroup,cn=schema,cn=config\n"
13451
"...\n"
13452
"cn: dyngroup\n"
13453
msgstr ""
13454
13455
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13456
msgid "And remove the following lines from the bottom of the file:"
13457
msgstr ""
13458
13459
#: serverguide/C/network-auth.xml:481(programlisting)
13460
#, no-wrap
13461
msgid ""
13462
"\n"
13463
"structuralObjectClass: olcSchemaConfig\n"
13464
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13465
"creatorsName: cn=config\n"
13466
"createTimestamp: 20080826021140Z\n"
13467
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13468
"modifiersName: cn=config\n"
13469
"modifyTimestamp: 20080826021140Z\n"
13470
msgstr ""
13471
13472
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13473
msgid ""
13474
"The attribute values will vary, just be sure the attributes are removed."
13475
msgstr ""
13476
13477
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13478
msgid ""
13479
"Finally, using the <application>ldapadd</application> utility, add the new "
13480
"schema to the directory:"
13481
msgstr ""
13482
13483
#: serverguide/C/network-auth.xml:506(command)
13484
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13485
msgstr ""
13486
13487
#: serverguide/C/network-auth.xml:512(para)
13488
msgid ""
13489
"There should now be a <emphasis>dn: "
13490
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13491
msgstr ""
13492
13493
#: serverguide/C/network-auth.xml:522(title)
13494
msgid "LDAP Replication"
13495
msgstr ""
13496
13497
#: serverguide/C/network-auth.xml:524(para)
13498
msgid ""
13499
"LDAP often quickly becomes a highly critical service to the network. "
13500
"Multiple systems will come to depend on LDAP for authentication, "
13501
"authorization, configuration, etc. It is a good idea to setup a redundant "
13502
"system through replication."
13503
msgstr ""
13504
13505
#: serverguide/C/network-auth.xml:530(para)
13506
msgid ""
13507
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13508
"Syncrepl allows the changes to be synced using a "
13509
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13510
"provider sends directory changes to consumers."
13511
msgstr ""
13512
13513
#: serverguide/C/network-auth.xml:537(title)
13514
msgid "Provider Configuration"
13515
msgstr ""
13516
13517
#: serverguide/C/network-auth.xml:539(para)
13518
msgid ""
13519
"The following is an example of a <emphasis>Single-Master</emphasis> "
13520
"configuration. In this configuration one OpenLDAP server is configured as a "
13521
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13522
msgstr ""
13523
13524
#: serverguide/C/network-auth.xml:547(para)
13525
msgid ""
13526
"First, configure the provider server. Copy the following to a file named "
13527
"<filename>provider_sync.ldif</filename>:"
13528
msgstr ""
13529
13530
#: serverguide/C/network-auth.xml:552(programlisting)
13531
#, no-wrap
13532
msgid ""
13533
"\n"
13534
"# Add indexes to the frontend db.\n"
13535
"dn: olcDatabase={1}hdb,cn=config\n"
13536
"changetype: modify\n"
13537
"add: olcDbIndex\n"
13538
"olcDbIndex: entryCSN eq\n"
13539
"-\n"
13540
"add: olcDbIndex\n"
13541
"olcDbIndex: entryUUID eq\n"
13542
"\n"
13543
"#Load the syncprov and accesslog modules.\n"
13544
"dn: cn=module{0},cn=config\n"
13545
"changetype: modify\n"
13546
"add: olcModuleLoad\n"
13547
"olcModuleLoad: syncprov\n"
13548
"-\n"
13549
"add: olcModuleLoad\n"
13550
"olcModuleLoad: accesslog\n"
13551
"\n"
13552
"# Accesslog database definitions\n"
13553
"dn: olcDatabase={2}hdb,cn=config\n"
13554
"objectClass: olcDatabaseConfig\n"
13555
"objectClass: olcHdbConfig\n"
13556
"olcDatabase: {2}hdb\n"
13557
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13558
"olcSuffix: cn=accesslog\n"
13559
"olcRootDN: cn=admin,dc=example,dc=com\n"
13560
"olcDbIndex: default eq\n"
13561
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13562
"\n"
13563
"# Accesslog db syncprov.\n"
13564
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13565
"changetype: add\n"
13566
"objectClass: olcOverlayConfig\n"
13567
"objectClass: olcSyncProvConfig\n"
13568
"olcOverlay: syncprov\n"
13569
"olcSpNoPresent: TRUE\n"
13570
"olcSpReloadHint: TRUE\n"
13571
"\n"
13572
"# syncrepl Provider for primary db\n"
13573
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13574
"changetype: add\n"
13575
"objectClass: olcOverlayConfig\n"
13576
"objectClass: olcSyncProvConfig\n"
13577
"olcOverlay: syncprov\n"
13578
"olcSpNoPresent: TRUE\n"
13579
"\n"
13580
"# accesslog overlay definitions for primary db\n"
13581
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13582
"objectClass: olcOverlayConfig\n"
13583
"objectClass: olcAccessLogConfig\n"
13584
"olcOverlay: accesslog\n"
13585
"olcAccessLogDB: cn=accesslog\n"
13586
"olcAccessLogOps: writes\n"
13587
"olcAccessLogSuccess: TRUE\n"
13588
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13589
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13590
msgstr ""
13591
13592
#: serverguide/C/network-auth.xml:614(para)
13593
msgid ""
13594
"The <application>AppArmor</application> profile for "
13595
"<application>slapd</application> will need to be adjusted for the accesslog "
13596
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13597
"adding:"
13598
msgstr ""
13599
13600
#: serverguide/C/network-auth.xml:619(programlisting)
13601
#, no-wrap
13602
msgid ""
13603
"\n"
13604
" /var/lib/ldap/accesslog/ r,\n"
13605
" /var/lib/ldap/accesslog/** rwk,\n"
13606
msgstr ""
13607
13608
#: serverguide/C/network-auth.xml:624(para)
13609
msgid ""
13610
"Then create the directory, reload the <application>apparmor</application> "
13611
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13612
msgstr ""
13613
13614
#: serverguide/C/network-auth.xml:630(command)
13615
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13616
msgstr ""
13617
13618
#: serverguide/C/network-auth.xml:631(command)
13619
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13620
msgstr ""
13621
13622
#: serverguide/C/network-auth.xml:636(para)
13623
msgid ""
13624
"Using the <emphasis>-u openldap</emphasis> option with the "
13625
"<application>sudo</application> commands above removes the need to adjust "
13626
"permissions for the new directory later."
13627
msgstr ""
13628
13629
#: serverguide/C/network-auth.xml:645(para)
13630
msgid ""
13631
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13632
"directory:"
13633
msgstr ""
13634
13635
#: serverguide/C/network-auth.xml:649(programlisting)
13636
#, no-wrap
13637
msgid ""
13638
"\n"
13639
"olcRootDN: cn=admin,dc=example,dc=com\n"
13640
msgstr ""
13641
13642
#: serverguide/C/network-auth.xml:657(para)
13643
msgid ""
13644
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13645
msgstr ""
13646
13647
#: serverguide/C/network-auth.xml:662(command)
13648
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13649
msgstr ""
13650
13651
#: serverguide/C/network-auth.xml:669(para)
13652
msgid "Restart <application>slapd</application>:"
13653
msgstr ""
13654
13655
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13656
msgid "sudo /etc/init.d/slapd restart"
13657
msgstr ""
13658
13659
#: serverguide/C/network-auth.xml:680(para)
13660
msgid ""
13661
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13662
"to configure a <emphasis>Consumer</emphasis> server."
13663
msgstr ""
13664
13665
#: serverguide/C/network-auth.xml:687(title)
13666
msgid "Consumer Configuration"
13667
msgstr ""
13668
13669
#: serverguide/C/network-auth.xml:692(para)
13670
msgid ""
13671
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13672
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13673
"configuration steps."
13674
msgstr ""
13675
13676
#: serverguide/C/network-auth.xml:697(para)
13677
msgid "Add the additional schema files:"
13678
msgstr ""
13679
13680
#: serverguide/C/network-auth.xml:707(para)
13681
msgid ""
13682
"Also, create, or copy from the provider server, the "
13683
"<filename>backend.example.com.ldif</filename>"
13684
msgstr ""
13685
13686
#: serverguide/C/network-auth.xml:711(programlisting)
13687
#, no-wrap
13688
msgid ""
13689
"\n"
13690
"# Load dynamic backend modules\n"
13691
"dn: cn=module,cn=config\n"
13692
"objectClass: olcModuleList\n"
13693
"cn: module\n"
13694
"olcModulepath: /usr/lib/ldap\n"
13695
"olcModuleload: back_hdb\n"
13696
"\n"
13697
"# Database settings\n"
13698
"dn: olcDatabase=hdb,cn=config\n"
13699
"objectClass: olcDatabaseConfig\n"
13700
"objectClass: olcHdbConfig\n"
13701
"olcDatabase: {1}hdb\n"
13702
"olcSuffix: dc=example,dc=com\n"
13703
"olcDbDirectory: /var/lib/ldap\n"
13704
"olcRootDN: cn=admin,dc=example,dc=com\n"
13705
"olcRootPW: secret\n"
13706
"olcDbConfig: set_cachesize 0 2097152 0\n"
13707
"olcDbConfig: set_lk_max_objects 1500\n"
13708
"olcDbConfig: set_lk_max_locks 1500\n"
13709
"olcDbConfig: set_lk_max_lockers 1500\n"
13710
"olcDbIndex: objectClass eq\n"
13711
"olcLastMod: TRUE\n"
13712
"olcDbCheckpoint: 512 30\n"
13713
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13714
"by anonymous auth by self write by * none\n"
13715
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13716
"olcAccess: to dn.base=\"\" by * read\n"
13717
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13718
msgstr ""
13719
13720
#: serverguide/C/network-auth.xml:741(para)
13721
msgid "And add the LDIF by entering:"
13722
msgstr ""
13723
13724
#: serverguide/C/network-auth.xml:752(para)
13725
msgid ""
13726
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
13727
"listed above, and add it:"
13728
msgstr ""
13729
13730
#: serverguide/C/network-auth.xml:760(para)
13731
msgid ""
13732
"The two severs should now have the same configuration except for the "
13733
"<emphasis>Syncrepl</emphasis> options."
13734
msgstr ""
13735
13736
#: serverguide/C/network-auth.xml:768(para)
13737
msgid ""
13738
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
13739
msgstr ""
13740
13741
#: serverguide/C/network-auth.xml:772(programlisting)
13742
#, no-wrap
13743
msgid ""
13744
"\n"
13745
"#Load the syncprov module.\n"
13746
"dn: cn=module{0},cn=config\n"
13747
"changetype: modify\n"
13748
"add: olcModuleLoad\n"
13749
"olcModuleLoad: syncprov\n"
13750
"\n"
13751
"# syncrepl specific indices\n"
13752
"dn: olcDatabase={1}hdb,cn=config\n"
13753
"changetype: modify\n"
13754
"add: olcDbIndex\n"
13755
"olcDbIndex: entryUUID eq\n"
13756
"-\n"
13757
"add: olcSyncRepl\n"
13758
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
13759
"binddn=\"cn=admin,dc=example,dc=com\" \n"
13760
" credentials=secret searchbase=\"dc=example,dc=com\" "
13761
"logbase=\"cn=accesslog\" \n"
13762
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
13763
"schemachecking=on \n"
13764
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
13765
"-\n"
13766
"add: olcUpdateRef\n"
13767
"olcUpdateRef: ldap://ldap01.example.com\n"
13768
msgstr ""
13769
13770
#: serverguide/C/network-auth.xml:795(para)
13771
msgid "You will probably want to change the following attributes:"
13772
msgstr ""
13773
13774
#: serverguide/C/network-auth.xml:800(para)
13775
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
13776
msgstr ""
13777
13778
#: serverguide/C/network-auth.xml:801(emphasis)
13779
msgid "binddn"
13780
msgstr ""
13781
13782
#: serverguide/C/network-auth.xml:802(emphasis)
13783
msgid "credentials"
13784
msgstr ""
13785
13786
#: serverguide/C/network-auth.xml:803(emphasis)
13787
msgid "searchbase"
13788
msgstr ""
13789
13790
#: serverguide/C/network-auth.xml:804(emphasis)
13791
msgid "olcUpdateRef:"
13792
msgstr ""
13793
13794
#: serverguide/C/network-auth.xml:810(para)
13795
msgid "Add the LDIF file to the configuration tree:"
13796
msgstr ""
13797
13798
#: serverguide/C/network-auth.xml:815(command)
13799
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
13800
msgstr ""
13801
13802
#: serverguide/C/network-auth.xml:821(para)
13803
msgid ""
13804
"The frontend database should now sync between servers. You can add "
13805
"additional servers using the steps above as the need arises."
13806
msgstr ""
13807
13808
#: serverguide/C/network-auth.xml:831(programlisting)
13809
#, no-wrap
13810
msgid "127.0.0.1\tldap01.example.com ldap01"
13811
msgstr ""
13812
13813
#: serverguide/C/network-auth.xml:827(para)
13814
msgid ""
13815
"The <application>slapd</application> daemon will send log information to "
13816
"<filename>/var/log/syslog</filename> by default. So if all does "
13817
"<emphasis>not</emphasis> go well check there for errors and other "
13818
"troubleshooting information. Also, be sure that each server knows it's Fully "
13819
"Qualified Domain Name (FQDN). This is configured in "
13820
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
13821
msgstr ""
13822
13823
#: serverguide/C/network-auth.xml:839(title)
13824
msgid "Setting up ACL"
13825
msgstr ""
13826
13827
#: serverguide/C/network-auth.xml:841(para)
13828
msgid ""
13829
"Authentication requires access to the password field, that should be not "
13830
"accessible by default. Also, in order for users to change their own "
13831
"password, using <command>passwd</command> or other utilities, "
13832
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
13833
"authenticated."
13834
msgstr ""
13835
13836
#: serverguide/C/network-auth.xml:848(para)
13837
msgid ""
13838
"To view the Access Control List (ACL), use the "
13839
"<application>ldapsearch</application> utility:"
13840
msgstr ""
13841
13842
#: serverguide/C/network-auth.xml:853(command)
13843
msgid ""
13844
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
13845
"olcAccess"
13846
msgstr ""
13847
13848
#: serverguide/C/network-auth.xml:857(computeroutput)
13849
#, no-wrap
13850
msgid ""
13851
"Enter LDAP Password: \n"
13852
"dn: olcDatabase={1}hdb,cn=config\n"
13853
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
13854
"dn=\"cn=admin,dc=exampl\n"
13855
" e,dc=com\" write by anonymous auth by self write by * none\n"
13856
"olcAccess: {1}to dn.base=\"\" by * read\n"
13857
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13858
msgstr ""
13859
13860
#: serverguide/C/network-auth.xml:869(title)
13861
msgid "TLS and SSL"
13862
msgstr ""
13863
13864
#: serverguide/C/network-auth.xml:871(para)
13865
msgid ""
13866
"When authenticating to an OpenLDAP server it is best to do so using an "
13867
"encrypted session. This can be accomplished using Transport Layer Security "
13868
"(TLS) and/or Secure Sockets Layer (SSL)."
13869
msgstr ""
13870
13871
#: serverguide/C/network-auth.xml:876(para)
13872
msgid ""
13873
"The first step in the process is to obtain or create a "
13874
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
13875
"is compiled using the <application>gnutls</application> library, the "
13876
"<application>certtool</application> utility will be used to create "
13877
"certificates."
13878
msgstr ""
13879
13880
#: serverguide/C/network-auth.xml:885(para)
13881
msgid ""
13882
"First, install <application>gnutls-bin</application> by entering the "
13883
"following in a terminal:"
13884
msgstr ""
13885
13886
#: serverguide/C/network-auth.xml:890(command)
13887
msgid "sudo apt-get install gnutls-bin"
13888
msgstr ""
13889
13890
#: serverguide/C/network-auth.xml:896(para)
13891
msgid ""
13892
"Next, create a private key for the <emphasis>Certificate "
13893
"Authority</emphasis> (CA):"
13894
msgstr ""
13895
13896
#: serverguide/C/network-auth.xml:901(command)
13897
msgid ""
13898
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
13899
msgstr ""
13900
13901
#: serverguide/C/network-auth.xml:907(para)
13902
msgid ""
13903
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
13904
"CA certificate containing:"
13905
msgstr ""
13906
13907
#: serverguide/C/network-auth.xml:911(programlisting)
13908
#, no-wrap
13909
msgid ""
13910
"\n"
13911
"cn = Example Company\n"
13912
"ca\n"
13913
"cert_signing_key\n"
13914
msgstr ""
13915
13916
#: serverguide/C/network-auth.xml:920(para)
13917
msgid "Now create the self-signed CA certificate:"
13918
msgstr ""
13919
13920
#: serverguide/C/network-auth.xml:925(command)
13921
msgid ""
13922
"sudo certtool --generate-self-signed --load-privkey "
13923
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
13924
"/etc/ssl/certs/cacert.pem"
13925
msgstr ""
13926
13927
#: serverguide/C/network-auth.xml:932(para)
13928
msgid "Make a private key for the server:"
13929
msgstr ""
13930
13931
#: serverguide/C/network-auth.xml:937(command)
13932
msgid ""
13933
"sudo sh -c \"certtool --generate-privkey > "
13934
"/etc/ssl/private/ldap01_slapd_key.pem\""
13935
msgstr ""
13936
13937
#: serverguide/C/network-auth.xml:941(para)
13938
msgid ""
13939
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
13940
"hostname. Naming the certificate and key for the host and service that will "
13941
"be using them will help keep filenames and paths straight."
13942
msgstr ""
13943
13944
#: serverguide/C/network-auth.xml:950(para)
13945
msgid ""
13946
"To sign the server's certificate with the CA, create the "
13947
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
13948
msgstr ""
13949
13950
#: serverguide/C/network-auth.xml:954(programlisting)
13951
#, no-wrap
13952
msgid ""
13953
"\n"
13954
"organization = Example Company\n"
13955
"cn = ldap01.example.com\n"
13956
"tls_www_server\n"
13957
"encryption_key\n"
13958
"signing_key\n"
13959
msgstr ""
13960
13961
#: serverguide/C/network-auth.xml:965(para)
13962
msgid "Create the server's certificate:"
13963
msgstr ""
13964
13965
#: serverguide/C/network-auth.xml:970(command)
13966
msgid ""
13967
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
13968
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
13969
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
13970
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
13971
msgstr ""
13972
13973
#: serverguide/C/network-auth.xml:978(para)
13974
msgid ""
13975
"Once you have a certificate, key, and CA cert installed, use "
13976
"<application>ldapmodify</application> to add the new configuration options:"
13977
msgstr ""
13978
13979
#: serverguide/C/network-auth.xml:989(userinput)
13980
#, no-wrap
13981
msgid ""
13982
"dn: cn=config\n"
13983
"add: olcTLSCACertificateFile\n"
13984
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
13985
"-\n"
13986
"add: olcTLSCertificateFile\n"
13987
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
13988
"-\n"
13989
"add: olcTLSCertificateKeyFile\n"
13990
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
13991
msgstr ""
13992
13993
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
13994
#, no-wrap
13995
msgid ""
13996
"Enter LDAP Password:\n"
13997
"<placeholder-1/>\n"
13998
"\n"
13999
"modifying entry \"cn=config\"\n"
14000
msgstr ""
14001
14002
#: serverguide/C/network-auth.xml:1004(para)
14003
msgid ""
14004
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14005
"<filename>ldap01_slapd_key.pem</filename>, and "
14006
"<filename>cacert.pem</filename> names if yours are different."
14007
msgstr ""
14008
14009
#: serverguide/C/network-auth.xml:1010(para)
14010
msgid ""
14011
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14012
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14013
msgstr ""
14014
14015
#: serverguide/C/network-auth.xml:1014(programlisting)
14016
#, no-wrap
14017
msgid ""
14018
"\n"
14019
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14020
msgstr ""
14021
14022
#: serverguide/C/network-auth.xml:1018(para)
14023
msgid ""
14024
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14025
msgstr ""
14026
14027
#: serverguide/C/network-auth.xml:1023(command)
14028
msgid "sudo adduser openldap ssl-cert"
14029
msgstr ""
14030
14031
#: serverguide/C/network-auth.xml:1024(command)
14032
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14033
msgstr ""
14034
14035
#: serverguide/C/network-auth.xml:1025(command)
14036
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14037
msgstr ""
14038
14039
#: serverguide/C/network-auth.xml:1029(para)
14040
msgid ""
14041
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14042
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14043
"adjust the commands appropriately."
14044
msgstr ""
14045
14046
#: serverguide/C/network-auth.xml:1035(para)
14047
msgid "Finally, restart <application>slapd</application>:"
14048
msgstr ""
14049
14050
#: serverguide/C/network-auth.xml:1043(para)
14051
msgid ""
14052
"The <application>slapd</application> daemon should now be listening for "
14053
"LDAPS connections and be able to use STARTTLS during authentication."
14054
msgstr ""
14055
14056
#: serverguide/C/network-auth.xml:1049(para)
14057
msgid ""
14058
"If you run into troubles with the server not starting, check the "
14059
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14060
"it is likely there is a configuration problem. Check that the certificate is "
14061
"signed by the authority from in the files configured, and that the ssl-cert "
14062
"group has read permissions on the private key."
14063
msgstr ""
14064
14065
#: serverguide/C/network-auth.xml:1061(title)
14066
msgid "TLS Replication"
14067
msgstr ""
14068
14069
#: serverguide/C/network-auth.xml:1063(para)
14070
msgid ""
14071
"If you have setup <application>Syncrepl</application> between servers, it is "
14072
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14073
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14074
"linkend=\"openldap-server-replication\"/>."
14075
msgstr ""
14076
14077
#: serverguide/C/network-auth.xml:1069(para)
14078
msgid ""
14079
"Assuming you have followed the above instructions and created a CA "
14080
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14081
"server. Follow the following instructions to create a certificate and key "
14082
"for the <emphasis>Consumer</emphasis> server."
14083
msgstr ""
14084
14085
#: serverguide/C/network-auth.xml:1078(para)
14086
msgid "Create a new key for the Consumer server:"
14087
msgstr ""
14088
14089
#: serverguide/C/network-auth.xml:1083(command)
14090
msgid "mkdir ldap02-ssl"
14091
msgstr ""
14092
14093
#: serverguide/C/network-auth.xml:1084(command)
14094
msgid "cd ldap02-ssl"
14095
msgstr ""
14096
14097
#: serverguide/C/network-auth.xml:1085(command)
14098
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14099
msgstr ""
14100
14101
#: serverguide/C/network-auth.xml:1089(para)
14102
msgid ""
14103
"Creating a new directory is not strictly necessary, but it will help keep "
14104
"things organized and make it easier to copy the files to the Consumer server."
14105
msgstr ""
14106
14107
#: serverguide/C/network-auth.xml:1098(para)
14108
msgid ""
14109
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14110
"server, changing the attributes to match your locality and server:"
14111
msgstr ""
14112
14113
#: serverguide/C/network-auth.xml:1103(programlisting)
14114
#, no-wrap
14115
msgid ""
14116
"\n"
14117
"country = US\n"
14118
"state = North Carolina\n"
14119
"locality = Winston-Salem\n"
14120
"organization = Example Company\n"
14121
"cn = ldap02.salem.edu\n"
14122
"tls_www_client\n"
14123
"encryption_key\n"
14124
"signing_key\n"
14125
msgstr ""
14126
14127
#: serverguide/C/network-auth.xml:1117(para)
14128
msgid "Create the certificate:"
14129
msgstr ""
14130
14131
#: serverguide/C/network-auth.xml:1122(command)
14132
msgid ""
14133
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14134
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14135
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14136
"ldap02_slapd_cert.pem"
14137
msgstr ""
14138
14139
#: serverguide/C/network-auth.xml:1130(para)
14140
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14141
msgstr ""
14142
14143
#: serverguide/C/network-auth.xml:1135(command)
14144
msgid "cp /etc/ssl/certs/cacert.pem ."
14145
msgstr ""
14146
14147
#: serverguide/C/network-auth.xml:1141(para)
14148
msgid ""
14149
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14150
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14151
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14152
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14153
"<filename>/etc/ssl/private</filename>."
14154
msgstr ""
14155
14156
#: serverguide/C/network-auth.xml:1150(para)
14157
msgid ""
14158
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14159
"by entering:"
14160
msgstr ""
14161
14162
#: serverguide/C/network-auth.xml:1160(userinput)
14163
#, no-wrap
14164
msgid ""
14165
"dn: cn=config\n"
14166
"add: olcTLSCACertificateFile\n"
14167
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14168
"-\n"
14169
"add: olcTLSCertificateFile\n"
14170
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14171
"-\n"
14172
"add: olcTLSCertificateKeyFile\n"
14173
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14174
msgstr ""
14175
14176
#: serverguide/C/network-auth.xml:1177(para)
14177
msgid ""
14178
"As with the Provider you can now edit "
14179
"<filename>/etc/default/slapd</filename> and add the "
14180
"<emphasis>ldaps:///</emphasis> parameter to the "
14181
"<emphasis>SLAPD_SERVICES</emphasis> option."
14182
msgstr ""
14183
14184
#: serverguide/C/network-auth.xml:1185(para)
14185
msgid ""
14186
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14187
"modify the <emphasis>Consumer</emphasis> server's "
14188
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14189
msgstr ""
14190
14191
#: serverguide/C/network-auth.xml:1198(userinput)
14192
#, no-wrap
14193
msgid ""
14194
"\n"
14195
"dn: olcDatabase={1}hdb,cn=config\n"
14196
"replace: olcSyncrepl\n"
14197
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14198
"binddn=\"cn=ad\n"
14199
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14200
"logbas\n"
14201
" e=\"cn=accesslog\" "
14202
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14203
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14204
"starttls=yes"
14205
msgstr ""
14206
14207
#: serverguide/C/network-auth.xml:1195(computeroutput)
14208
#, no-wrap
14209
msgid ""
14210
"SASL/EXTERNAL authentication started\n"
14211
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14212
"SASL SSF: 0\n"
14213
"<placeholder-1/>\n"
14214
"\n"
14215
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14216
msgstr ""
14217
14218
#: serverguide/C/network-auth.xml:1210(para)
14219
msgid ""
14220
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14221
"(FQDN) in the certificate, you may have to edit "
14222
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14223
msgstr ""
14224
14225
#: serverguide/C/network-auth.xml:1215(programlisting)
14226
#, no-wrap
14227
msgid ""
14228
"\n"
14229
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14230
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14231
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14232
msgstr ""
14233
14234
#: serverguide/C/network-auth.xml:1222(para)
14235
msgid ""
14236
"Finally, restart <application>slapd</application> on each of the servers:"
14237
msgstr ""
14238
14239
#: serverguide/C/network-auth.xml:1235(title)
14240
msgid "LDAP Authentication"
14241
msgstr ""
14242
14243
#: serverguide/C/network-auth.xml:1237(para)
14244
msgid ""
14245
"Once you have a working LDAP server, the <application>auth-client-"
14246
"config</application> and <application>libnss-ldap</application> packages "
14247
"take the pain out of configuring an Ubuntu client to authenticate using "
14248
"LDAP. To install the packages from, a terminal prompt enter:"
14249
msgstr ""
14250
14251
#: serverguide/C/network-auth.xml:1244(command)
14252
msgid "sudo apt-get install libnss-ldap"
14253
msgstr ""
14254
14255
#: serverguide/C/network-auth.xml:1247(para)
14256
msgid ""
14257
"During the install a menu dialog will ask you connection details about your "
14258
"LDAP server."
14259
msgstr ""
14260
14261
#: serverguide/C/network-auth.xml:1251(para)
14262
msgid ""
14263
"If you make a mistake when entering your information you can execute the "
14264
"dialog again using:"
14265
msgstr ""
14266
14267
#: serverguide/C/network-auth.xml:1256(command)
14268
msgid "sudo dpkg-reconfigure ldap-auth-config"
14269
msgstr ""
14270
14271
#: serverguide/C/network-auth.xml:1259(para)
14272
msgid ""
14273
"The results of the dialog can be seen in "
14274
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14275
"covered in the menu edit this file accordingly."
14276
msgstr ""
14277
14278
#: serverguide/C/network-auth.xml:1264(para)
14279
msgid ""
14280
"Now that <application>libnss-ldap</application> is configured enable the "
14281
"<application>auth-client-config</application> LDAP profile by entering:"
14282
msgstr ""
14283
14284
#: serverguide/C/network-auth.xml:1270(command)
14285
msgid "sudo auth-client-config -t nss -p lac_ldap"
14286
msgstr ""
14287
14288
#: serverguide/C/network-auth.xml:1275(para)
14289
msgid ""
14290
"<emphasis>-t:</emphasis> only modifies "
14291
"<filename>/etc/nsswitch.conf</filename>."
14292
msgstr ""
14293
14294
#: serverguide/C/network-auth.xml:1280(para)
14295
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14296
msgstr ""
14297
14298
#: serverguide/C/network-auth.xml:1285(para)
14299
msgid ""
14300
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14301
"config</application> profile that is part of the <application>ldap-auth-"
14302
"config</application> package."
14303
msgstr ""
14304
14305
#: serverguide/C/network-auth.xml:1292(para)
14306
msgid ""
14307
"Using the <application>pam-auth-update</application> utility, configure the "
14308
"system to use LDAP for authentication:"
14309
msgstr ""
14310
14311
#: serverguide/C/network-auth.xml:1297(command)
14312
msgid "sudo pam-auth-update"
14313
msgstr ""
14314
14315
#: serverguide/C/network-auth.xml:1300(para)
14316
msgid ""
14317
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14318
"any other authentication mechanisms you need."
14319
msgstr ""
14320
14321
#: serverguide/C/network-auth.xml:1304(para)
14322
msgid ""
14323
"You should now be able to login using user credentials stored in the LDAP "
14324
"directory."
14325
msgstr ""
14326
14327
#: serverguide/C/network-auth.xml:1309(para)
14328
msgid ""
14329
"If you are going to use LDAP to store Samba users you will need to configure "
14330
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14331
"for details."
14332
msgstr ""
14333
14334
#: serverguide/C/network-auth.xml:1317(title)
14335
msgid "User and Group Management"
14336
msgstr ""
14337
14338
#: serverguide/C/network-auth.xml:1319(para)
14339
msgid ""
14340
"The <application>ldap-utils</application> package comes with multiple "
14341
"utilities to manage the directory, but the long string of options needed, "
14342
"can make them a burden to use. The <application>ldapscripts</application> "
14343
"package contains configurable scripts to easily manage LDAP users and groups."
14344
msgstr ""
14345
14346
#: serverguide/C/network-auth.xml:1325(para)
14347
msgid "To install the package, from a terminal enter:"
14348
msgstr ""
14349
14350
#: serverguide/C/network-auth.xml:1330(command)
14351
msgid "sudo apt-get install ldapscripts"
14352
msgstr ""
14353
14354
#: serverguide/C/network-auth.xml:1333(para)
14355
msgid ""
14356
"Next, edit the config file "
14357
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14358
"changing the following to match your environment:"
14359
msgstr ""
14360
14361
#: serverguide/C/network-auth.xml:1338(programlisting)
14362
#, no-wrap
14363
msgid ""
14364
"\n"
14365
"SERVER=localhost\n"
14366
"BINDDN='cn=admin,dc=example,dc=com'\n"
14367
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14368
"SUFFIX='dc=example,dc=com'\n"
14369
"GSUFFIX='ou=Groups'\n"
14370
"USUFFIX='ou=People'\n"
14371
"MSUFFIX='ou=Computers'\n"
14372
"GIDSTART=10000\n"
14373
"UIDSTART=10000\n"
14374
"MIDSTART=10000\n"
14375
msgstr ""
14376
14377
#: serverguide/C/network-auth.xml:1351(para)
14378
msgid ""
14379
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14380
"authenticated access to the directory:"
14381
msgstr ""
14382
14383
#: serverguide/C/network-auth.xml:1356(command)
14384
msgid ""
14385
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14386
msgstr ""
14387
14388
#: serverguide/C/network-auth.xml:1357(command)
14389
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14390
msgstr ""
14391
14392
#: serverguide/C/network-auth.xml:1361(para)
14393
msgid ""
14394
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14395
"user."
14396
msgstr ""
14397
14398
#: serverguide/C/network-auth.xml:1366(para)
14399
msgid ""
14400
"The <application>ldapscripts</application> are now ready to help manage your "
14401
"directory. The following are some examples of how to use the scripts:"
14402
msgstr ""
14403
14404
#: serverguide/C/network-auth.xml:1373(para)
14405
msgid "Create a new user:"
14406
msgstr ""
14407
14408
#: serverguide/C/network-auth.xml:1377(command)
14409
msgid "sudo ldapadduser george example"
14410
msgstr ""
14411
14412
#: serverguide/C/network-auth.xml:1379(para)
14413
msgid ""
14414
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14415
"and set the user's primary group (gid) to <emphasis "
14416
"role=\"italic\">example</emphasis>"
14417
msgstr ""
14418
14419
#: serverguide/C/network-auth.xml:1385(para)
14420
msgid "Change a user's password:"
14421
msgstr ""
14422
14423
#: serverguide/C/network-auth.xml:1389(command)
14424
msgid "sudo ldapsetpasswd george"
14425
msgstr ""
14426
14427
#: serverguide/C/network-auth.xml:1390(computeroutput)
14428
#, no-wrap
14429
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14430
msgstr ""
14431
14432
#: serverguide/C/network-auth.xml:1391(userinput)
14433
#, no-wrap
14434
msgid "New Password: "
14435
msgstr ""
14436
14437
#: serverguide/C/network-auth.xml:1392(userinput)
14438
#, no-wrap
14439
msgid "New Password (verify): "
14440
msgstr ""
14441
14442
#: serverguide/C/network-auth.xml:1396(para)
14443
msgid "Delete a user:"
14444
msgstr ""
14445
14446
#: serverguide/C/network-auth.xml:1400(command)
14447
msgid "sudo ldapdeleteuser george"
14448
msgstr ""
14449
14450
#: serverguide/C/network-auth.xml:1405(para)
14451
msgid "Add a group:"
14452
msgstr ""
14453
14454
#: serverguide/C/network-auth.xml:1409(command)
14455
msgid "sudo ldapaddgroup qa"
14456
msgstr ""
14457
14458
#: serverguide/C/network-auth.xml:1413(para)
14459
msgid "Delete a group:"
14460
msgstr ""
14461
14462
#: serverguide/C/network-auth.xml:1417(command)
14463
msgid "sudo ldapdeletegroup qa"
14464
msgstr ""
14465
14466
#: serverguide/C/network-auth.xml:1421(para)
14467
msgid "Add a user to a group:"
14468
msgstr ""
14469
14470
#: serverguide/C/network-auth.xml:1425(command)
14471
msgid "sudo ldapaddusertogroup george qa"
14472
msgstr ""
14473
14474
#: serverguide/C/network-auth.xml:1427(para)
14475
msgid ""
14476
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14477
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14478
"role=\"italic\">george</emphasis>."
14479
msgstr ""
14480
14481
#: serverguide/C/network-auth.xml:1433(para)
14482
msgid "Remove a user from a group:"
14483
msgstr ""
14484
14485
#: serverguide/C/network-auth.xml:1437(command)
14486
msgid "sudo ldapdeleteuserfromgroup george qa"
14487
msgstr ""
14488
14489
#: serverguide/C/network-auth.xml:1439(para)
14490
msgid ""
14491
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14492
"<emphasis role=\"italic\">qa</emphasis> group."
14493
msgstr ""
14494
14495
#: serverguide/C/network-auth.xml:1445(para)
14496
msgid ""
14497
"The <application>ldapmodifyuser</application> script allows you to add, "
14498
"remove, or replace a user's attributes. The script uses the same syntax as "
14499
"the <application>ldapmodify</application> utility. For example:"
14500
msgstr ""
14501
14502
#: serverguide/C/network-auth.xml:1450(command)
14503
msgid "sudo ldapmodifyuser george"
14504
msgstr ""
14505
14506
#: serverguide/C/network-auth.xml:1451(computeroutput)
14507
#, no-wrap
14508
msgid ""
14509
"# About to modify the following entry :\n"
14510
"dn: uid=george,ou=People,dc=example,dc=com\n"
14511
"objectClass: account\n"
14512
"objectClass: posixAccount\n"
14513
"cn: george\n"
14514
"uid: george\n"
14515
"uidNumber: 1001\n"
14516
"gidNumber: 1001\n"
14517
"homeDirectory: /home/george\n"
14518
"loginShell: /bin/bash\n"
14519
"gecos: george\n"
14520
"description: User account\n"
14521
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14522
"\n"
14523
"# Enter your modifications here, end with CTRL-D.\n"
14524
"dn: uid=george,ou=People,dc=example,dc=com"
14525
msgstr ""
14526
14527
#: serverguide/C/network-auth.xml:1467(userinput)
14528
#, no-wrap
14529
msgid ""
14530
"replace: gecos\n"
14531
"gecos: George Carlin"
14532
msgstr ""
14533
14534
#: serverguide/C/network-auth.xml:1470(para)
14535
msgid ""
14536
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14537
"Carlin</quote>."
14538
msgstr ""
14539
14540
#: serverguide/C/network-auth.xml:1475(para)
14541
msgid ""
14542
"Another great feature of <application>ldapscripts</application>, is the "
14543
"template system. Templates allow you to customize the attributes of user, "
14544
"group, and machine objectes. For example, to enable the "
14545
"<emphasis>user</emphasis> template edit "
14546
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14547
msgstr ""
14548
14549
#: serverguide/C/network-auth.xml:1482(programlisting)
14550
#, no-wrap
14551
msgid ""
14552
"\n"
14553
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14554
msgstr ""
14555
14556
#: serverguide/C/network-auth.xml:1486(para)
14557
msgid ""
14558
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14559
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14560
"<filename>ldapadduser.template.sample</filename> file to "
14561
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14562
msgstr ""
14563
14564
#: serverguide/C/network-auth.xml:1493(command)
14565
msgid ""
14566
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14567
"/etc/ldapscripts/ldapadduser.template"
14568
msgstr ""
14569
14570
#: serverguide/C/network-auth.xml:1496(para)
14571
msgid ""
14572
"Edit the new template to add the desired attributes. The following will "
14573
"create new user's as with an <emphasis>objectClass</emphasis> of "
14574
"<emphasis>inetOrgPerson</emphasis>:"
14575
msgstr ""
14576
14577
#: serverguide/C/network-auth.xml:1501(programlisting)
14578
#, no-wrap
14579
msgid ""
14580
"\n"
14581
"dn: uid=<user>,<usuffix>,<suffix>\n"
14582
"objectClass: inetOrgPerson\n"
14583
"objectClass: posixAccount\n"
14584
"cn: <user>\n"
14585
"sn: <ask>\n"
14586
"uid: <user>\n"
14587
"uidNumber: <uid>\n"
14588
"gidNumber: <gid>\n"
14589
"homeDirectory: <home>\n"
14590
"loginShell: <shell>\n"
14591
"gecos: <user>\n"
14592
"description: User account\n"
14593
"title: Employee\n"
14594
msgstr ""
14595
14596
#: serverguide/C/network-auth.xml:1517(para)
14597
msgid ""
14598
"Notice the <emphasis><ask></emphasis> option used for the "
14599
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14600
"<application>ldapadduser</application> to prompt you for the attribute value "
14601
"during user creation."
14602
msgstr ""
14603
14604
#: serverguide/C/network-auth.xml:1525(para)
14605
msgid ""
14606
"There are more useful scripts in the package, to see a full list enter: "
14607
"<command>dpkg -L ldapscripts | grep bin</command>"
14608
msgstr ""
14609
14610
#: serverguide/C/network-auth.xml:1534(para)
14611
msgid ""
14612
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14613
"Ubuntu Wiki</ulink> page has more details."
14614
msgstr ""
14615
14616
#: serverguide/C/network-auth.xml:1539(para)
14617
msgid ""
14618
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14619
"Home Page</ulink>"
14620
msgstr ""
14621
14622
#: serverguide/C/network-auth.xml:1544(para)
14623
msgid ""
14624
"Though starting to show it's age, a great source for in depth LDAP "
14625
"information is O'Reilly's <ulink "
14626
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14627
"Administration</ulink>"
14628
msgstr ""
14629
14630
#: serverguide/C/network-auth.xml:1550(para)
14631
msgid ""
14632
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14633
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14634
"newer versions of OpenLDAP."
14635
msgstr ""
14636
14637
#: serverguide/C/network-auth.xml:1556(para)
14638
msgid ""
14639
"For more information on <application>auth-client-config</application> see "
14640
"the man page: <command>man auth-client-config</command>."
14641
msgstr ""
14642
14643
#: serverguide/C/network-auth.xml:1561(para)
14644
msgid ""
14645
"For more details regarding the <application>ldapscripts</application> "
14646
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14647
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14648
msgstr ""
14649
14650
#: serverguide/C/network-auth.xml:1571(title)
14651
msgid "Samba and LDAP"
14652
msgstr ""
14653
14654
#: serverguide/C/network-auth.xml:1573(para)
14655
msgid ""
14656
"This section covers configuring Samba to use LDAP for user, group, and "
14657
"machine account information and authentication. The assumption is, you "
14658
"already have a working OpenLDAP directory installed and the server is "
14659
"configured to use it for authentication. See <xref linkend=\"openldap-"
14660
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14661
"setting up OpenLDAP. For more information on installing and configuring "
14662
"Samba see <xref linkend=\"windows-networking\"/>."
14663
msgstr ""
14664
14665
#: serverguide/C/network-auth.xml:1583(para)
14666
msgid ""
14667
"There are three packages needed when integrating Samba with LDAP. "
14668
"<application>samba</application>, <application>samba-doc</application>, and "
14669
"<application>smbldap-tools</application> packages . To install the packages, "
14670
"from a terminal enter:"
14671
msgstr ""
14672
14673
#: serverguide/C/network-auth.xml:1589(command)
14674
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14675
msgstr ""
14676
14677
#: serverguide/C/network-auth.xml:1592(para)
14678
msgid ""
14679
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14680
"needed, but unless you have another package or custom scripts, a method of "
14681
"managing users, groups, and computer accounts is needed."
14682
msgstr ""
14683
14684
#: serverguide/C/network-auth.xml:1599(title)
14685
msgid "OpenLDAP Configuration"
14686
msgstr ""
14687
14688
#: serverguide/C/network-auth.xml:1601(para)
14689
msgid ""
14690
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14691
"the user objects in the directory will need additional attributes. This "
14692
"section assumes you want Samba to be configured as a Windows NT domain "
14693
"controller, and will add the necessary LDAP objects and attributes."
14694
msgstr ""
14695
14696
#: serverguide/C/network-auth.xml:1609(para)
14697
msgid ""
14698
"The Samba attributes are defined in the <filename>samba.schema</filename> "
14699
"file which is part of the <application>samba-doc</application> package. The "
14700
"schema file needs to be unzipped and copied to "
14701
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
14702
msgstr ""
14703
14704
#: serverguide/C/network-auth.xml:1616(command)
14705
msgid ""
14706
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
14707
"/etc/ldap/schema/"
14708
msgstr ""
14709
14710
#: serverguide/C/network-auth.xml:1617(command)
14711
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
14712
msgstr ""
14713
14714
#: serverguide/C/network-auth.xml:1623(para)
14715
msgid ""
14716
"The <emphasis>samba</emphasis> schema needs to be added to the "
14717
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
14718
"<application>slapd</application> is also detailed in <xref "
14719
"linkend=\"openldap-configuration\"/>."
14720
msgstr ""
14721
14722
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
14723
msgid ""
14724
"First, create a configuration file named "
14725
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
14726
"containing the following lines:"
14727
msgstr ""
14728
14729
#: serverguide/C/network-auth.xml:1636(programlisting)
14730
#, no-wrap
14731
msgid ""
14732
"\n"
14733
"include /etc/ldap/schema/core.schema\n"
14734
"include /etc/ldap/schema/collective.schema\n"
14735
"include /etc/ldap/schema/corba.schema\n"
14736
"include /etc/ldap/schema/cosine.schema\n"
14737
"include /etc/ldap/schema/duaconf.schema\n"
14738
"include /etc/ldap/schema/dyngroup.schema\n"
14739
"include /etc/ldap/schema/inetorgperson.schema\n"
14740
"include /etc/ldap/schema/java.schema\n"
14741
"include /etc/ldap/schema/misc.schema\n"
14742
"include /etc/ldap/schema/nis.schema\n"
14743
"include /etc/ldap/schema/openldap.schema\n"
14744
"include /etc/ldap/schema/ppolicy.schema\n"
14745
"include /etc/ldap/schema/samba.schema\n"
14746
msgstr ""
14747
14748
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
14749
msgid ""
14750
"Now use <application>slapcat</application> to convert the schema files:"
14751
msgstr ""
14752
14753
#: serverguide/C/network-auth.xml:1671(command)
14754
msgid ""
14755
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
14756
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
14757
msgstr ""
14758
14759
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
14760
msgid ""
14761
"Change the above file and path names to match your own if they are different."
14762
msgstr ""
14763
14764
#: serverguide/C/network-auth.xml:1681(para)
14765
msgid ""
14766
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
14767
"the following attributes:"
14768
msgstr ""
14769
14770
#: serverguide/C/network-auth.xml:1685(programlisting)
14771
#, no-wrap
14772
msgid ""
14773
"\n"
14774
"dn: cn=samba,cn=schema,cn=config\n"
14775
"...\n"
14776
"cn: samba\n"
14777
msgstr ""
14778
14779
#: serverguide/C/network-auth.xml:1695(programlisting)
14780
#, no-wrap
14781
msgid ""
14782
"\n"
14783
"structuralObjectClass: olcSchemaConfig\n"
14784
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
14785
"creatorsName: cn=config\n"
14786
"createTimestamp: 20080827045234Z\n"
14787
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
14788
"modifiersName: cn=config\n"
14789
"modifyTimestamp: 20080827045234Z\n"
14790
msgstr ""
14791
14792
#: serverguide/C/network-auth.xml:1720(command)
14793
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
14794
msgstr ""
14795
14796
#: serverguide/C/network-auth.xml:1726(para)
14797
msgid ""
14798
"There should now be a <emphasis>dn: "
14799
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
14800
"sequential schema, entry in the cn=config tree."
14801
msgstr ""
14802
14803
#: serverguide/C/network-auth.xml:1734(para)
14804
msgid ""
14805
"Copy and paste the following into a file named "
14806
"<filename>samba_indexes.ldif</filename>:"
14807
msgstr ""
14808
14809
#: serverguide/C/network-auth.xml:1738(programlisting)
14810
#, no-wrap
14811
msgid ""
14812
"\n"
14813
"dn: olcDatabase={1}hdb,cn=config\n"
14814
"changetype: modify\n"
14815
"add: olcDbIndex\n"
14816
"olcDbIndex: uidNumber eq\n"
14817
"olcDbIndex: gidNumber eq\n"
14818
"olcDbIndex: loginShell eq\n"
14819
"olcDbIndex: uid eq,pres,sub\n"
14820
"olcDbIndex: memberUid eq,pres,sub\n"
14821
"olcDbIndex: uniqueMember eq,pres\n"
14822
"olcDbIndex: sambaSID eq\n"
14823
"olcDbIndex: sambaPrimaryGroupSID eq\n"
14824
"olcDbIndex: sambaGroupType eq\n"
14825
"olcDbIndex: sambaSIDList eq\n"
14826
"olcDbIndex: sambaDomainName eq\n"
14827
"olcDbIndex: default sub\n"
14828
msgstr ""
14829
14830
#: serverguide/C/network-auth.xml:1756(para)
14831
msgid ""
14832
"Using the <application>ldapmodify</application> utility load the new indexes:"
14833
msgstr ""
14834
14835
#: serverguide/C/network-auth.xml:1761(command)
14836
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
14837
msgstr ""
14838
14839
#: serverguide/C/network-auth.xml:1763(para)
14840
msgid ""
14841
"If all went well you should see the new indexes using "
14842
"<application>ldapsearch</application>:"
14843
msgstr ""
14844
14845
#: serverguide/C/network-auth.xml:1768(command)
14846
msgid ""
14847
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
14848
msgstr ""
14849
14850
#: serverguide/C/network-auth.xml:1774(para)
14851
msgid ""
14852
"Next, configure the <application>smbldap-tools</application> package to "
14853
"match your environment. The package comes with a configuration script that "
14854
"will ask questions about the needed options. To run the script enter:"
14855
msgstr ""
14856
14857
#: serverguide/C/network-auth.xml:1780(command)
14858
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
14859
msgstr ""
14860
14861
#: serverguide/C/network-auth.xml:1781(command)
14862
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
14863
msgstr ""
14864
14865
#: serverguide/C/network-auth.xml:1784(para)
14866
msgid ""
14867
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
14868
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
14869
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
14870
"configure script, so if you made any mistakes while executing the script it "
14871
"may be simpler to edit the file appropriately."
14872
msgstr ""
14873
14874
#: serverguide/C/network-auth.xml:1794(para)
14875
msgid ""
14876
"The <application>smbldap-populate</application> script will add the "
14877
"necessary users, groups, and LDAP objects required for Samba. It is a good "
14878
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
14879
"<application>slapcat</application> before executing the command:"
14880
msgstr ""
14881
14882
#: serverguide/C/network-auth.xml:1801(command)
14883
msgid "sudo slapcat -l backup.ldif"
14884
msgstr ""
14885
14886
#: serverguide/C/network-auth.xml:1807(para)
14887
msgid ""
14888
"Once you have a current backup execute <application>smbldap-"
14889
"populate</application> by entering:"
14890
msgstr ""
14891
14892
#: serverguide/C/network-auth.xml:1812(command)
14893
msgid "sudo smbldap-populate"
14894
msgstr ""
14895
14896
#: serverguide/C/network-auth.xml:1816(para)
14897
msgid ""
14898
"You can create an LDIF file containing the new Samba objects by executing "
14899
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
14900
"look over the changes making sure everything is correct."
14901
msgstr ""
14902
14903
#: serverguide/C/network-auth.xml:1824(para)
14904
msgid ""
14905
"Your LDAP directory now has the necessary domain information to authenticate "
14906
"Samba users."
14907
msgstr ""
14908
14909
#: serverguide/C/network-auth.xml:1830(title)
14910
msgid "Samba Configuration"
14911
msgstr ""
14912
14913
#: serverguide/C/network-auth.xml:1832(para)
14914
msgid ""
14915
"There a multiple ways to configure Samba for details on some common "
14916
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
14917
"Samba to use LDAP, edit the main Samba configuration file "
14918
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
14919
"backend</emphasis> option and adding the following:"
14920
msgstr ""
14921
14922
#: serverguide/C/network-auth.xml:1838(programlisting)
14923
#, no-wrap
14924
msgid ""
14925
"\n"
14926
"# passdb backend = tdbsam\n"
14927
"\n"
14928
"# LDAP Settings\n"
14929
" passdb backend = ldapsam:ldap://hostname\n"
14930
" ldap suffix = dc=example,dc=com\n"
14931
" ldap user suffix = ou=People\n"
14932
" ldap group suffix = ou=Groups\n"
14933
" ldap machine suffix = ou=Computers\n"
14934
" ldap idmap suffix = ou=Idmap\n"
14935
" ldap admin dn = cn=admin,dc=example,dc=com\n"
14936
" ldap ssl = start tls\n"
14937
" ldap passwd sync = yes\n"
14938
"...\n"
14939
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
14940
msgstr ""
14941
14942
#: serverguide/C/network-auth.xml:1855(para)
14943
msgid "Restart <application>samba</application> to enable the new settings:"
14944
msgstr ""
14945
14946
#: serverguide/C/network-auth.xml:1863(para)
14947
msgid ""
14948
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
14949
"enter:"
14950
msgstr ""
14951
14952
#: serverguide/C/network-auth.xml:1868(command)
14953
msgid "sudo smbpasswd -w secret"
14954
msgstr ""
14955
14956
#: serverguide/C/network-auth.xml:1872(para)
14957
msgid ""
14958
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
14959
"password."
14960
msgstr ""
14961
14962
#: serverguide/C/network-auth.xml:1877(para)
14963
msgid ""
14964
"If you currently have users in LDAP, and you want them to authenticate using "
14965
"Samba, they will need some Samba attributes defined in the "
14966
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
14967
"users using the <application>smbpasswd</application> utility, replacing "
14968
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
14969
msgstr ""
14970
14971
#: serverguide/C/network-auth.xml:1885(command)
14972
msgid "sudo smbpasswd -a username"
14973
msgstr ""
14974
14975
#: serverguide/C/network-auth.xml:1888(para)
14976
msgid "You will then be asked to enter the user's password."
14977
msgstr ""
14978
14979
#: serverguide/C/network-auth.xml:1892(para)
14980
msgid ""
14981
"To add new user, group, and machine accounts use the utilities from the "
14982
"<application>smbldap-tools</application> package. Here are some examples:"
14983
msgstr ""
14984
14985
#: serverguide/C/network-auth.xml:1899(para)
14986
msgid ""
14987
"To add a new user to LDAP with Samba attributes enter the following, "
14988
"replacing username with an actual username:"
14989
msgstr ""
14990
14991
#: serverguide/C/network-auth.xml:1903(command)
14992
msgid "sudo smbldap-useradd -a -P username"
14993
msgstr ""
14994
14995
#: serverguide/C/network-auth.xml:1905(para)
14996
msgid ""
14997
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
14998
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
14999
"passwd</application> utility after the user is created allowing you to enter "
15000
"a password for the user."
15001
msgstr ""
15002
15003
#: serverguide/C/network-auth.xml:1911(para)
15004
msgid "To remove a user from the directory enter:"
15005
msgstr ""
15006
15007
#: serverguide/C/network-auth.xml:1915(command)
15008
msgid "sudo smbldap-userdel username"
15009
msgstr ""
15010
15011
#: serverguide/C/network-auth.xml:1917(para)
15012
msgid ""
15013
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15014
"r</emphasis> option to remove the user's home directory."
15015
msgstr ""
15016
15017
#: serverguide/C/network-auth.xml:1922(para)
15018
msgid ""
15019
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15020
"groupname with an appropriate group:"
15021
msgstr ""
15022
15023
#: serverguide/C/network-auth.xml:1926(command)
15024
msgid "sudo smbldap-groupadd -a groupname"
15025
msgstr ""
15026
15027
#: serverguide/C/network-auth.xml:1928(para)
15028
msgid ""
15029
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15030
"a</emphasis> adds the Samba attributes."
15031
msgstr ""
15032
15033
#: serverguide/C/network-auth.xml:1933(para)
15034
msgid ""
15035
"To add a user to a group use <application>smbldap-groupmod</application>:"
15036
msgstr ""
15037
15038
#: serverguide/C/network-auth.xml:1937(command)
15039
msgid "sudo smbldap-groupmod -m username groupname"
15040
msgstr ""
15041
15042
#: serverguide/C/network-auth.xml:1939(para)
15043
msgid ""
15044
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15045
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15046
"listing them in <emphasis>comma separated</emphasis> format."
15047
msgstr ""
15048
15049
#: serverguide/C/network-auth.xml:1945(para)
15050
msgid ""
15051
"<application>smbldap-groupmod</application> can also be used to remove a "
15052
"user from a group:"
15053
msgstr ""
15054
15055
#: serverguide/C/network-auth.xml:1949(command)
15056
msgid "sudo smbldap-groupmod -x username groupname"
15057
msgstr ""
15058
15059
#: serverguide/C/network-auth.xml:1953(para)
15060
msgid ""
15061
"Additionally, the <application>smbldap-useradd</application> utility can add "
15062
"Samba machine accounts:"
15063
msgstr ""
15064
15065
#: serverguide/C/network-auth.xml:1957(command)
15066
msgid "sudo smbldap-useradd -t 0 -w username"
15067
msgstr ""
15068
15069
#: serverguide/C/network-auth.xml:1959(para)
15070
msgid ""
15071
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15072
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15073
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15074
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15075
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15076
"<application>smbldap-useradd</application>."
15077
msgstr ""
15078
15079
#: serverguide/C/network-auth.xml:1968(para)
15080
msgid ""
15081
"There are more useful utilities and options in the <application>smbldap-"
15082
"tools</application> package. The man page for each utility provides more "
15083
"details."
15084
msgstr ""
15085
15086
#: serverguide/C/network-auth.xml:1979(para)
15087
msgid ""
15088
"There are multiple places where LDAP and Samba is documented in the <ulink "
15089
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15090
"Collection</ulink>."
15091
msgstr ""
15092
15093
#: serverguide/C/network-auth.xml:1985(para)
15094
msgid ""
15095
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15096
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15097
msgstr ""
15098
15099
#: serverguide/C/network-auth.xml:1991(para)
15100
msgid ""
15101
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15102
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15103
msgstr ""
15104
15105
#: serverguide/C/network-auth.xml:1997(para)
15106
msgid ""
15107
"Again, for more information on <application>smbldap-tools</application> see "
15108
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15109
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15110
msgstr ""
15111
15112
#: serverguide/C/network-auth.xml:2004(para)
15113
msgid ""
15114
"Also, there is a list of <ulink "
15115
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15116
"wiki</ulink> articles with more information."
15117
msgstr ""
15118
15119
#: serverguide/C/network-auth.xml:2013(title)
15120
msgid "Kerberos"
15121
msgstr ""
15122
15123
#: serverguide/C/network-auth.xml:2015(para)
15124
msgid ""
15125
"<application>Kerberos</application> is a network authentication system based "
15126
"on the principal of a trusted third party. The other two parties being the "
15127
"user and the service the user wishes to authenticate to. Not all services "
15128
"and applications can use Kerberos, but for those that can, it brings the "
15129
"network environment one step closer to being Single Sign On (SSO)."
15130
msgstr ""
15131
15132
#: serverguide/C/network-auth.xml:2021(para)
15133
msgid ""
15134
"This section covers installation and configuration of a Kerberos server, and "
15135
"some example client configurations."
15136
msgstr ""
15137
15138
#: serverguide/C/network-auth.xml:2028(para)
15139
msgid ""
15140
"If you are new to Kerberos there are a few terms that are good to understand "
15141
"before setting up a Kerberos server. Most of the terms will relate to things "
15142
"you may be familiar with in other environments:"
15143
msgstr ""
15144
15145
#: serverguide/C/network-auth.xml:2035(para)
15146
msgid ""
15147
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15148
"by servers need to be defined as Kerberos Principals."
15149
msgstr ""
15150
15151
#: serverguide/C/network-auth.xml:2040(para)
15152
msgid ""
15153
"<emphasis>Instances:</emphasis> are used for service principals and special "
15154
"administrative principals."
15155
msgstr ""
15156
15157
#: serverguide/C/network-auth.xml:2045(para)
15158
msgid ""
15159
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15160
"Kerberos installation. Usually the DNS domain converted to uppercase "
15161
"(EXAMPLE.COM)."
15162
msgstr ""
15163
15164
#: serverguide/C/network-auth.xml:2051(para)
15165
msgid ""
15166
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15167
"a database of all principals, the authentication server, and the ticket "
15168
"granting server. For each realm there must be at least one KDC."
15169
msgstr ""
15170
15171
#: serverguide/C/network-auth.xml:2057(para)
15172
msgid ""
15173
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15174
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15175
"password which is known only to the user and the KDC."
15176
msgstr ""
15177
15178
#: serverguide/C/network-auth.xml:2063(para)
15179
msgid ""
15180
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15181
"clients upon request."
15182
msgstr ""
15183
15184
#: serverguide/C/network-auth.xml:2068(para)
15185
msgid ""
15186
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15187
"One principal being a user and the other a service requested by the user. "
15188
"Tickets establish an encryption key used for secure communication during the "
15189
"authenticated session."
15190
msgstr ""
15191
15192
#: serverguide/C/network-auth.xml:2074(para)
15193
msgid ""
15194
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15195
"principal database and contain the encryption key for a service or host."
15196
msgstr ""
15197
15198
#: serverguide/C/network-auth.xml:2081(para)
15199
msgid ""
15200
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15201
"redundancy, which contains a database of Principals. When a user principal "
15202
"logs into a workstation, configured for Kerberos authentication, the KDC "
15203
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15204
"match, the user is authenticated and can then request tickets for Kerberized "
15205
"services from the Ticket Granting Server (TGS). The service tickets allow "
15206
"the user to authenticate to the service without entering another username "
15207
"and password."
15208
msgstr ""
15209
15210
#: serverguide/C/network-auth.xml:2090(title)
15211
msgid "Kerberos Server"
15212
msgstr ""
15213
15214
#: serverguide/C/network-auth.xml:2094(para)
15215
msgid ""
15216
"Before installing the Kerberos server a properly configured DNS server is "
15217
"needed for your domain. Since the Kerberos Realm by convention matches the "
15218
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15219
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15220
msgstr ""
15221
15222
#: serverguide/C/network-auth.xml:2100(para)
15223
msgid ""
15224
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15225
"between a client machine and the server differs by more than five minutes "
15226
"(by default), the workstation will not be able to authenticate. To correct "
15227
"the problem all hosts should have their time synchronized using the "
15228
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15229
"NTP see <xref linkend=\"NTP\"/>."
15230
msgstr ""
15231
15232
#: serverguide/C/network-auth.xml:2107(para)
15233
msgid ""
15234
"The first step in installing a Kerberos Realm is to install the "
15235
"<application>krb5-kdc</application> and <application>krb5-admin-"
15236
"server</application> packages. From a terminal enter:"
15237
msgstr ""
15238
15239
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15240
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15241
msgstr ""
15242
15243
#: serverguide/C/network-auth.xml:2116(para)
15244
msgid ""
15245
"You will be asked at the end of the install to supply a name for the "
15246
"Kerberos and Admin servers, which may or may not be the same server, for the "
15247
"realm."
15248
msgstr ""
15249
15250
#: serverguide/C/network-auth.xml:2121(para)
15251
msgid ""
15252
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15253
"utility:"
15254
msgstr ""
15255
15256
#: serverguide/C/network-auth.xml:2126(command)
15257
msgid "sudo krb5_newrealm"
15258
msgstr ""
15259
15260
#: serverguide/C/network-auth.xml:2133(para)
15261
msgid ""
15262
"The questions asked during installation are used to configure the "
15263
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15264
"Distribution Center (KDC) settings simply edit the file and restart the "
15265
"<application>krb5-kdc</application> daemon."
15266
msgstr ""
15267
15268
#: serverguide/C/network-auth.xml:2141(para)
15269
msgid ""
15270
"Now that the KDC running an admin user is needed. It is recommended to use a "
15271
"different username from your everyday username. Using the "
15272
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15273
msgstr ""
15274
15275
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15276
msgid "sudo kadmin.local"
15277
msgstr ""
15278
15279
#: serverguide/C/network-auth.xml:2148(computeroutput)
15280
#, no-wrap
15281
msgid ""
15282
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15283
"kadmin.local:"
15284
msgstr ""
15285
15286
#: serverguide/C/network-auth.xml:2149(userinput)
15287
#, no-wrap
15288
msgid " addprinc steve/admin"
15289
msgstr ""
15290
15291
#: serverguide/C/network-auth.xml:2150(computeroutput)
15292
#, no-wrap
15293
msgid ""
15294
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15295
"policy\n"
15296
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15297
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15298
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15299
"kadmin.local:"
15300
msgstr ""
15301
15302
#: serverguide/C/network-auth.xml:2154(userinput)
15303
#, no-wrap
15304
msgid " quit"
15305
msgstr ""
15306
15307
#: serverguide/C/network-auth.xml:2157(para)
15308
msgid ""
15309
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15310
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15311
"is an <emphasis>Instance</emphasis>, and <emphasis "
15312
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15313
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15314
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15315
"rights."
15316
msgstr ""
15317
15318
#: serverguide/C/network-auth.xml:2165(para)
15319
msgid ""
15320
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15321
"your Realm and admin username."
15322
msgstr ""
15323
15324
#: serverguide/C/network-auth.xml:2173(para)
15325
msgid ""
15326
"Next, the new admin user needs to have the appropriate Access Control List "
15327
"(ACL) permissions. The permissions are configured in the "
15328
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15329
msgstr ""
15330
15331
#: serverguide/C/network-auth.xml:2178(programlisting)
15332
#, no-wrap
15333
msgid ""
15334
"\n"
15335
"steve/admin@EXAMPLE.COM *\n"
15336
msgstr ""
15337
15338
#: serverguide/C/network-auth.xml:2182(para)
15339
msgid ""
15340
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15341
"any operation on all principals in the realm."
15342
msgstr ""
15343
15344
#: serverguide/C/network-auth.xml:2189(para)
15345
msgid ""
15346
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15347
"to take affect:"
15348
msgstr ""
15349
15350
#: serverguide/C/network-auth.xml:2194(command)
15351
msgid "sudo /etc/init.d/krb5-admin-server restart"
15352
msgstr ""
15353
15354
#: serverguide/C/network-auth.xml:2200(para)
15355
msgid ""
15356
"The new user principal can be tested using the <application>kinit "
15357
"utility</application>:"
15358
msgstr ""
15359
15360
#: serverguide/C/network-auth.xml:2205(command)
15361
msgid "kinit steve/admin"
15362
msgstr ""
15363
15364
#: serverguide/C/network-auth.xml:2206(computeroutput)
15365
#, no-wrap
15366
msgid "steve/admin@EXAMPLE.COM's Password:"
15367
msgstr ""
15368
15369
#: serverguide/C/network-auth.xml:2209(para)
15370
msgid ""
15371
"After entering the password, use the <application>klist</application> "
15372
"utility to view information about the Ticket Granting Ticket (TGT):"
15373
msgstr ""
15374
15375
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15376
msgid "klist"
15377
msgstr ""
15378
15379
#: serverguide/C/network-auth.xml:2216(computeroutput)
15380
#, no-wrap
15381
msgid ""
15382
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15383
" Principal: steve/admin@EXAMPLE.COM\n"
15384
"\n"
15385
" Issued Expires Principal\n"
15386
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15387
msgstr ""
15388
15389
#: serverguide/C/network-auth.xml:2223(para)
15390
msgid ""
15391
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15392
"the KDC. For example:"
15393
msgstr ""
15394
15395
#: serverguide/C/network-auth.xml:2227(programlisting)
15396
#, no-wrap
15397
msgid ""
15398
"\n"
15399
"192.168.0.1 kdc01.example.com kdc01\n"
15400
msgstr ""
15401
15402
#: serverguide/C/network-auth.xml:2231(para)
15403
msgid ""
15404
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15405
msgstr ""
15406
15407
#: serverguide/C/network-auth.xml:2238(para)
15408
msgid ""
15409
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15410
"are needed. Add the following to "
15411
"<filename>/etc/named/db.example.com</filename>:"
15412
msgstr ""
15413
15414
#: serverguide/C/network-auth.xml:2243(programlisting)
15415
#, no-wrap
15416
msgid ""
15417
"\n"
15418
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15419
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15420
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15421
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15422
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15423
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15424
msgstr ""
15425
15426
#: serverguide/C/network-auth.xml:2253(para)
15427
msgid ""
15428
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15429
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15430
"KDC."
15431
msgstr ""
15432
15433
#: serverguide/C/network-auth.xml:2259(para)
15434
msgid ""
15435
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15436
msgstr ""
15437
15438
#: serverguide/C/network-auth.xml:2266(para)
15439
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15440
msgstr ""
15441
15442
#: serverguide/C/network-auth.xml:2273(title)
15443
msgid "Secondary KDC"
15444
msgstr ""
15445
15446
#: serverguide/C/network-auth.xml:2275(para)
15447
msgid ""
15448
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15449
"practice to have a Secondary KDC in case the primary becomes unavailable."
15450
msgstr ""
15451
15452
#: serverguide/C/network-auth.xml:2283(para)
15453
msgid ""
15454
"First, install the packages, and when asked for the Kerberos and Admin "
15455
"server names enter the name of the Primary KDC:"
15456
msgstr ""
15457
15458
#: serverguide/C/network-auth.xml:2294(para)
15459
msgid ""
15460
"Once you have the packages installed, create the Secondary KDC's host "
15461
"principal. From a terminal prompt, enter:"
15462
msgstr ""
15463
15464
#: serverguide/C/network-auth.xml:2299(command)
15465
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15466
msgstr ""
15467
15468
#: serverguide/C/network-auth.xml:2303(para)
15469
msgid ""
15470
"After, issuing any <application>kadmin</application> commands you will be "
15471
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15472
"password."
15473
msgstr ""
15474
15475
#: serverguide/C/network-auth.xml:2312(para)
15476
msgid "Extract the <emphasis>keytab</emphasis> file:"
15477
msgstr ""
15478
15479
#: serverguide/C/network-auth.xml:2317(command)
15480
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15481
msgstr ""
15482
15483
#: serverguide/C/network-auth.xml:2323(para)
15484
msgid ""
15485
"There should now be a <filename>keytab.kdc02</filename> in the current "
15486
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15487
msgstr ""
15488
15489
#: serverguide/C/network-auth.xml:2329(command)
15490
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15491
msgstr ""
15492
15493
#: serverguide/C/network-auth.xml:2333(para)
15494
msgid ""
15495
"If the path to the <filename>keytab.kdc02</filename> file is different "
15496
"adjust accordingly."
15497
msgstr ""
15498
15499
#: serverguide/C/network-auth.xml:2338(para)
15500
msgid ""
15501
"Also, you can list the principals in a Keytab file, which can be useful when "
15502
"troubleshooting, using the <application>klist</application> utility:"
15503
msgstr ""
15504
15505
#: serverguide/C/network-auth.xml:2344(command)
15506
msgid "sudo klist -k /etc/krb5.keytab"
15507
msgstr ""
15508
15509
#: serverguide/C/network-auth.xml:2350(para)
15510
msgid ""
15511
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15512
"that lists all KDCs for the Realm. For example, on both primary and "
15513
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15514
msgstr ""
15515
15516
#: serverguide/C/network-auth.xml:2355(programlisting)
15517
#, no-wrap
15518
msgid ""
15519
"\n"
15520
"host/kdc01.example.com@EXAMPLE.COM\n"
15521
"host/kdc02.example.com@EXAMPLE.COM\n"
15522
msgstr ""
15523
15524
#: serverguide/C/network-auth.xml:2363(para)
15525
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15526
msgstr ""
15527
15528
#: serverguide/C/network-auth.xml:2368(command)
15529
msgid "sudo kdb5_util -s create"
15530
msgstr ""
15531
15532
#: serverguide/C/network-auth.xml:2374(para)
15533
msgid ""
15534
"Now start the <application>kpropd</application> daemon, which listens for "
15535
"connections from the <application>kprop</application> utility. "
15536
"<application>kprop</application> is used to transfer dump files:"
15537
msgstr ""
15538
15539
#: serverguide/C/network-auth.xml:2381(command)
15540
msgid "sudo kpropd -S"
15541
msgstr ""
15542
15543
#: serverguide/C/network-auth.xml:2387(para)
15544
msgid ""
15545
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15546
"of the principal database:"
15547
msgstr ""
15548
15549
#: serverguide/C/network-auth.xml:2392(command)
15550
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15551
msgstr ""
15552
15553
#: serverguide/C/network-auth.xml:2398(para)
15554
msgid ""
15555
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15556
"<filename>/etc/krb5.keytab</filename>:"
15557
msgstr ""
15558
15559
#: serverguide/C/network-auth.xml:2403(command)
15560
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15561
msgstr ""
15562
15563
#: serverguide/C/network-auth.xml:2404(command)
15564
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15565
msgstr ""
15566
15567
#: serverguide/C/network-auth.xml:2408(para)
15568
msgid ""
15569
"Make sure there is a <emphasis>host</emphasis> for "
15570
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15571
msgstr ""
15572
15573
#: serverguide/C/network-auth.xml:2416(para)
15574
msgid ""
15575
"Using the <application>kprop</application> utility push the database to the "
15576
"Secondary KDC:"
15577
msgstr ""
15578
15579
#: serverguide/C/network-auth.xml:2421(command)
15580
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15581
msgstr ""
15582
15583
#: serverguide/C/network-auth.xml:2425(para)
15584
msgid ""
15585
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15586
"worked. If there is an error message check "
15587
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15588
"information."
15589
msgstr ""
15590
15591
#: serverguide/C/network-auth.xml:2431(para)
15592
msgid ""
15593
"You may also want to create a <application>cron</application> job to "
15594
"periodically update the database on the Secondary KDC. For example, the "
15595
"following will push the database every hour:"
15596
msgstr ""
15597
15598
#: serverguide/C/network-auth.xml:2436(programlisting)
15599
#, no-wrap
15600
msgid ""
15601
"\n"
15602
"# m h dom mon dow command\n"
15603
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15604
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15605
msgstr ""
15606
15607
#: serverguide/C/network-auth.xml:2444(para)
15608
msgid ""
15609
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15610
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15611
msgstr ""
15612
15613
#: serverguide/C/network-auth.xml:2450(command)
15614
msgid "sudo kdb5_util stash"
15615
msgstr ""
15616
15617
#: serverguide/C/network-auth.xml:2456(para)
15618
msgid ""
15619
"Finally, start the <application>krb5-kdc</application> daemon on the "
15620
"Secondary KDC:"
15621
msgstr ""
15622
15623
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15624
msgid "sudo /etc/init.d/krb5-kdc start"
15625
msgstr ""
15626
15627
#: serverguide/C/network-auth.xml:2467(para)
15628
msgid ""
15629
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15630
"for the Realm. You can test this by stopping the <application>krb5-"
15631
"kdc</application> daemon on the Primary KDC, then use "
15632
"<application>kinit</application> to request a ticket. If all goes well you "
15633
"should receive a ticket from the Secondary KDC."
15634
msgstr ""
15635
15636
#: serverguide/C/network-auth.xml:2475(title)
15637
msgid "Kerberos Linux Client"
15638
msgstr ""
15639
15640
#: serverguide/C/network-auth.xml:2477(para)
15641
msgid ""
15642
"This section covers configuring a Linux system as a "
15643
"<application>Kerberos</application> client. This will allow access to any "
15644
"kerberized services once a user has successfully logged into the system."
15645
msgstr ""
15646
15647
#: serverguide/C/network-auth.xml:2485(para)
15648
msgid ""
15649
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15650
"user</application> and <application>libpam-krb5</application> packages are "
15651
"needed, along with a few others that are not strictly necessary but make "
15652
"life easier. To install the packages enter the following in a terminal "
15653
"prompt:"
15654
msgstr ""
15655
15656
#: serverguide/C/network-auth.xml:2492(command)
15657
msgid ""
15658
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15659
msgstr ""
15660
15661
#: serverguide/C/network-auth.xml:2495(para)
15662
msgid ""
15663
"The <application>auth-client-config</application> package allows simple "
15664
"configuration of PAM for authentication from multiple sources, and the "
15665
"<application>libpam-ccreds</application> will cache authentication "
15666
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15667
"is unavailable. This package is also useful for laptops that may "
15668
"authenticate using Kerberos while on the corporate network, but will need to "
15669
"be accessed off the network as well."
15670
msgstr ""
15671
15672
#: serverguide/C/network-auth.xml:2506(para)
15673
msgid "To configure the client in a terminal enter:"
15674
msgstr ""
15675
15676
#: serverguide/C/network-auth.xml:2511(command)
15677
msgid "sudo dpkg-reconfigure krb5-config"
15678
msgstr ""
15679
15680
#: serverguide/C/network-auth.xml:2514(para)
15681
msgid ""
15682
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15683
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15684
"records, the menu will prompt you for the hostname of the Key Distribution "
15685
"Center (KDC) and Realm Administration server."
15686
msgstr ""
15687
15688
#: serverguide/C/network-auth.xml:2520(para)
15689
msgid ""
15690
"The <application>dpkg-reconfigure</application> adds entries to the "
15691
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15692
"entries similar to the following:"
15693
msgstr ""
15694
15695
#: serverguide/C/network-auth.xml:2525(programlisting)
15696
#, no-wrap
15697
msgid ""
15698
"\n"
15699
"[libdefaults]\n"
15700
" default_realm = EXAMPLE.COM\n"
15701
"...\n"
15702
"[realms]\n"
15703
" EXAMPLE.COM = } \n"
15704
" kdc = 192.168.0.1 \n"
15705
" admin_server = 192.168.0.1\n"
15706
" }\n"
15707
msgstr ""
15708
15709
#: serverguide/C/network-auth.xml:2536(para)
15710
msgid ""
15711
"You can test the configuration by requesting a ticket using the "
15712
"<application>kinit</application> utility. For example:"
15713
msgstr ""
15714
15715
#: serverguide/C/network-auth.xml:2541(command)
15716
msgid "kinit steve@EXAMPLE.COM"
15717
msgstr ""
15718
15719
#: serverguide/C/network-auth.xml:2542(computeroutput)
15720
#, no-wrap
15721
msgid "Password for steve@EXAMPLE.COM:"
15722
msgstr ""
15723
15724
#: serverguide/C/network-auth.xml:2545(para)
15725
msgid ""
15726
"When a ticket has been granted, the details can be viewed using "
15727
"<application>klist</application>:"
15728
msgstr ""
15729
15730
#: serverguide/C/network-auth.xml:2551(computeroutput)
15731
#, no-wrap
15732
msgid ""
15733
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
15734
"Default principal: steve@EXAMPLE.COM\n"
15735
"\n"
15736
"Valid starting Expires Service principal\n"
15737
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
15738
" renew until 07/25/08 05:18:57\n"
15739
"\n"
15740
"\n"
15741
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
15742
"klist: You have no tickets cached"
15743
msgstr ""
15744
15745
#: serverguide/C/network-auth.xml:2563(para)
15746
msgid ""
15747
"Next, use the <application>auth-client-config</application> to configure the "
15748
"<application>libpam-krb5</application> module to request a ticket during "
15749
"login:"
15750
msgstr ""
15751
15752
#: serverguide/C/network-auth.xml:2569(command)
15753
msgid "sudo auth-client-config -a -p kerberos_example"
15754
msgstr ""
15755
15756
#: serverguide/C/network-auth.xml:2572(para)
15757
msgid ""
15758
"You will should now receive a ticket upon successful login authentication."
15759
msgstr ""
15760
15761
#: serverguide/C/network-auth.xml:2583(para)
15762
msgid ""
15763
"For more information on Kerberos see the <ulink "
15764
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
15765
msgstr ""
15766
15767
#: serverguide/C/network-auth.xml:2588(para)
15768
msgid ""
15769
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
15770
"Kerberos</ulink> page has more details."
15771
msgstr ""
15772
15773
#: serverguide/C/network-auth.xml:2593(para)
15774
msgid ""
15775
"O'Reilly's <ulink "
15776
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
15777
"Guide</ulink> is a great reference when setting up Kerberos."
15778
msgstr ""
15779
15780
#: serverguide/C/network-auth.xml:2599(para)
15781
msgid ""
15782
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
15783
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
15784
"Kerberos questions."
15785
msgstr ""
15786
15787
#: serverguide/C/network-auth.xml:2609(title)
15788
msgid "Kerberos and LDAP"
15789
msgstr ""
15790
15791
#: serverguide/C/network-auth.xml:2611(para)
15792
msgid ""
15793
"Replicating a Kerberos principal database between two servers can be "
15794
"complicated, and adds an additional user database to your network. "
15795
"Fortunately, MIT Kerberos can be configured to use an "
15796
"<application>LDAP</application> directory as a principal database. This "
15797
"section covers configuring a primary and secondary kerberos server to use "
15798
"<application>OpenLDAP</application> for the principal database."
15799
msgstr ""
15800
15801
#: serverguide/C/network-auth.xml:2619(title)
15802
msgid "Configuring OpenLDAP"
15803
msgstr ""
15804
15805
#: serverguide/C/network-auth.xml:2621(para)
15806
msgid ""
15807
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
15808
"<application>OpenLDAP</application> server that has network connectivity to "
15809
"the Primary and Secondary KDCs. The rest of this section assumes that you "
15810
"also have LDAP replication configured between at least two servers. For "
15811
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
15812
msgstr ""
15813
15814
#: serverguide/C/network-auth.xml:2628(para)
15815
msgid ""
15816
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
15817
"that traffic between the KDC and LDAP server is encrypted. See <xref "
15818
"linkend=\"openldap-tls\"/> for details."
15819
msgstr ""
15820
15821
#: serverguide/C/network-auth.xml:2635(para)
15822
msgid ""
15823
"To load the schema into LDAP, on the LDAP server install the "
15824
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
15825
msgstr ""
15826
15827
#: serverguide/C/network-auth.xml:2641(command)
15828
msgid "sudo apt-get install krb5-kdc-ldap"
15829
msgstr ""
15830
15831
#: serverguide/C/network-auth.xml:2646(para)
15832
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
15833
msgstr ""
15834
15835
#: serverguide/C/network-auth.xml:2651(command)
15836
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
15837
msgstr ""
15838
15839
#: serverguide/C/network-auth.xml:2652(command)
15840
msgid ""
15841
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
15842
msgstr ""
15843
15844
#: serverguide/C/network-auth.xml:2658(para)
15845
msgid ""
15846
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
15847
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
15848
"<application>slapd</application> is also detailed in <xref "
15849
"linkend=\"openldap-configuration\"/>."
15850
msgstr ""
15851
15852
#: serverguide/C/network-auth.xml:2671(programlisting)
15853
#, no-wrap
15854
msgid ""
15855
"\n"
15856
"include /etc/ldap/schema/core.schema\n"
15857
"include /etc/ldap/schema/collective.schema\n"
15858
"include /etc/ldap/schema/corba.schema\n"
15859
"include /etc/ldap/schema/cosine.schema\n"
15860
"include /etc/ldap/schema/duaconf.schema\n"
15861
"include /etc/ldap/schema/dyngroup.schema\n"
15862
"include /etc/ldap/schema/inetorgperson.schema\n"
15863
"include /etc/ldap/schema/java.schema\n"
15864
"include /etc/ldap/schema/misc.schema\n"
15865
"include /etc/ldap/schema/nis.schema\n"
15866
"include /etc/ldap/schema/openldap.schema\n"
15867
"include /etc/ldap/schema/ppolicy.schema\n"
15868
"include /etc/ldap/schema/kerberos.schema\n"
15869
msgstr ""
15870
15871
#: serverguide/C/network-auth.xml:2691(para)
15872
msgid "Create a temporary directory to hold the LDIF files:"
15873
msgstr ""
15874
15875
#: serverguide/C/network-auth.xml:2706(command)
15876
msgid ""
15877
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
15878
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
15879
msgstr ""
15880
15881
#: serverguide/C/network-auth.xml:2716(para)
15882
msgid ""
15883
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
15884
"changing the following attributes:"
15885
msgstr ""
15886
15887
#: serverguide/C/network-auth.xml:2720(programlisting)
15888
#, no-wrap
15889
msgid ""
15890
"\n"
15891
"dn: cn=kerberos,cn=schema,cn=config\n"
15892
"...\n"
15893
"cn: kerberos\n"
15894
msgstr ""
15895
15896
#: serverguide/C/network-auth.xml:2726(para)
15897
msgid "And remove the following lines from the end of the file:"
15898
msgstr ""
15899
15900
#: serverguide/C/network-auth.xml:2730(programlisting)
15901
#, no-wrap
15902
msgid ""
15903
"\n"
15904
"structuralObjectClass: olcSchemaConfig\n"
15905
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
15906
"creatorsName: cn=config\n"
15907
"createTimestamp: 20090111203515Z\n"
15908
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
15909
"modifiersName: cn=config\n"
15910
"modifyTimestamp: 20090111203515Z\n"
15911
msgstr ""
15912
15913
#: serverguide/C/network-auth.xml:2749(para)
15914
msgid "Load the new schema with <application>ldapadd</application>:"
15915
msgstr ""
15916
15917
#: serverguide/C/network-auth.xml:2754(command)
15918
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
15919
msgstr ""
15920
15921
#: serverguide/C/network-auth.xml:2760(para)
15922
msgid ""
15923
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
15924
msgstr ""
15925
15926
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
15927
msgid "ldapmodify -x -D cn=admin,cn=config -W"
15928
msgstr ""
15929
15930
#: serverguide/C/network-auth.xml:2767(userinput)
15931
#, no-wrap
15932
msgid ""
15933
"dn: olcDatabase={1}hdb,cn=config\n"
15934
"add: olcDbIndex\n"
15935
"olcDbIndex: krbPrincipalName eq,pres,sub"
15936
msgstr ""
15937
15938
#: serverguide/C/network-auth.xml:2766(computeroutput)
15939
#, no-wrap
15940
msgid ""
15941
"Enter LDAP Password:\n"
15942
"<placeholder-1/>\n"
15943
"\n"
15944
"modifying entry \"olcDatabase={1}hdb,cn=config\""
15945
msgstr ""
15946
15947
#: serverguide/C/network-auth.xml:2777(para)
15948
msgid "Finally, update the Access Control Lists (ACL):"
15949
msgstr ""
15950
15951
#: serverguide/C/network-auth.xml:2784(userinput)
15952
#, no-wrap
15953
msgid ""
15954
"dn: olcDatabase={1}hdb,cn=config\n"
15955
"replace: olcAccess\n"
15956
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
15957
"dn=\"cn=admin,dc=exampl\n"
15958
" e,dc=com\" write by anonymous auth by self write by * none\n"
15959
"-\n"
15960
"add: olcAccess\n"
15961
"olcAccess: to dn.base=\"\" by * read\n"
15962
"-\n"
15963
"add: olcAccess\n"
15964
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
15965
msgstr ""
15966
15967
#: serverguide/C/network-auth.xml:2783(computeroutput)
15968
#, no-wrap
15969
msgid ""
15970
"Enter LDAP Password: \n"
15971
"<placeholder-1/>\n"
15972
"\n"
15973
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
15974
msgstr ""
15975
15976
#: serverguide/C/network-auth.xml:2804(para)
15977
msgid ""
15978
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
15979
"database."
15980
msgstr ""
15981
15982
#: serverguide/C/network-auth.xml:2810(title)
15983
msgid "Primary KDC Configuration"
15984
msgstr ""
15985
15986
#: serverguide/C/network-auth.xml:2812(para)
15987
msgid ""
15988
"With <application>OpenLDAP</application> configured it is time to configure "
15989
"the KDC."
15990
msgstr ""
15991
15992
#: serverguide/C/network-auth.xml:2818(para)
15993
msgid "First, install the necessary packages, from a terminal enter:"
15994
msgstr ""
15995
15996
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
15997
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
15998
msgstr ""
15999
16000
#: serverguide/C/network-auth.xml:2829(para)
16001
msgid ""
16002
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16003
"under the appropriate sections:"
16004
msgstr ""
16005
16006
#: serverguide/C/network-auth.xml:2833(programlisting)
16007
#, no-wrap
16008
msgid ""
16009
"\n"
16010
"[libdefaults]\n"
16011
" default_realm = EXAMPLE.COM\n"
16012
"\n"
16013
"...\n"
16014
"\n"
16015
"[realms]\n"
16016
" EXAMPLE.COM = {\n"
16017
" kdc = kdc01.example.com\n"
16018
" kdc = kdc02.example.com\n"
16019
" admin_server = kdc01.example.com\n"
16020
" admin_server = kdc02.example.com\n"
16021
" default_domain = example.com\n"
16022
" database_module = openldap_ldapconf\n"
16023
" }\n"
16024
"\n"
16025
"...\n"
16026
"\n"
16027
"[domain_realm]\n"
16028
" .example.com = EXAMPLE.COM\n"
16029
"\n"
16030
"\n"
16031
"...\n"
16032
"\n"
16033
"[dbdefaults]\n"
16034
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16035
"\n"
16036
"[dbmodules]\n"
16037
" openldap_ldapconf = {\n"
16038
" db_library = kldap\n"
16039
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16040
"\n"
16041
" # this object needs to have read rights on\n"
16042
" # the realm container, principal container and realm sub-"
16043
"trees\n"
16044
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16045
"\n"
16046
" # this object needs to have read and write rights on\n"
16047
" # the realm container, principal container and realm sub-"
16048
"trees\n"
16049
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16050
" ldap_servers = ldaps://ldap01.example.com "
16051
"ldaps://ldap02.example.com\n"
16052
" ldap_conns_per_server = 5\n"
16053
" }\n"
16054
msgstr ""
16055
16056
#: serverguide/C/network-auth.xml:2878(para)
16057
msgid ""
16058
"Change <emphasis>example.com</emphasis>, "
16059
"<emphasis>dc=example,dc=com</emphasis>, "
16060
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16061
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16062
"object, and LDAP server for your network."
16063
msgstr ""
16064
16065
#: serverguide/C/network-auth.xml:2887(para)
16066
msgid ""
16067
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16068
"the realm:"
16069
msgstr ""
16070
16071
#: serverguide/C/network-auth.xml:2892(command)
16072
msgid ""
16073
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16074
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16075
msgstr ""
16076
16077
#: serverguide/C/network-auth.xml:2898(para)
16078
msgid ""
16079
"Create a stash of the password used to bind to the LDAP server. This "
16080
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16081
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16082
"<filename>/etc/krb5.conf</filename>:"
16083
msgstr ""
16084
16085
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16086
msgid ""
16087
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16088
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16089
msgstr ""
16090
16091
#: serverguide/C/network-auth.xml:2910(para)
16092
msgid "Copy the CA certificate from the LDAP server:"
16093
msgstr ""
16094
16095
#: serverguide/C/network-auth.xml:2915(command)
16096
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16097
msgstr ""
16098
16099
#: serverguide/C/network-auth.xml:2916(command)
16100
msgid "sudo cp cacert.pem /etc/ssl/certs"
16101
msgstr ""
16102
16103
#: serverguide/C/network-auth.xml:2919(para)
16104
msgid ""
16105
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16106
msgstr ""
16107
16108
#: serverguide/C/network-auth.xml:2923(programlisting)
16109
#, no-wrap
16110
msgid ""
16111
"\n"
16112
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16113
msgstr ""
16114
16115
#: serverguide/C/network-auth.xml:2928(para)
16116
msgid ""
16117
"The certificate will also need to be copied to the Secondary KDC, to allow "
16118
"the connection to the LDAP servers using LDAPS."
16119
msgstr ""
16120
16121
#: serverguide/C/network-auth.xml:2937(para)
16122
msgid ""
16123
"You can now add Kerberos principals to the LDAP database, and they will be "
16124
"copied to any other LDAP servers configured for replication. To add a "
16125
"principal using the <application>kadmin.local</application> utility enter:"
16126
msgstr ""
16127
16128
#: serverguide/C/network-auth.xml:2945(userinput)
16129
#, no-wrap
16130
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16131
msgstr ""
16132
16133
#: serverguide/C/network-auth.xml:2944(computeroutput)
16134
#, no-wrap
16135
msgid ""
16136
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16137
"kadmin.local: <placeholder-1/>\n"
16138
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16139
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16140
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16141
"Principal \"steve@EXAMPLE.COM\" created."
16142
msgstr ""
16143
16144
#: serverguide/C/network-auth.xml:2952(para)
16145
msgid ""
16146
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16147
"krbExtraData attributes added to the "
16148
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16149
"the <application>kinit</application> and <application>klist</application> "
16150
"utilities to test that the user is indeed issued a ticket."
16151
msgstr ""
16152
16153
#: serverguide/C/network-auth.xml:2959(para)
16154
msgid ""
16155
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16156
"option is needed to add the Kerberos attributes. Otherwise a new "
16157
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16158
msgstr ""
16159
16160
#: serverguide/C/network-auth.xml:2967(title)
16161
msgid "Secondary KDC Configuration"
16162
msgstr ""
16163
16164
#: serverguide/C/network-auth.xml:2969(para)
16165
msgid ""
16166
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16167
"one using the normal Kerberos database."
16168
msgstr ""
16169
16170
#: serverguide/C/network-auth.xml:2975(para)
16171
msgid "First, install the necessary packages. In a terminal enter:"
16172
msgstr ""
16173
16174
#: serverguide/C/network-auth.xml:2986(para)
16175
msgid ""
16176
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16177
msgstr ""
16178
16179
#: serverguide/C/network-auth.xml:2990(programlisting)
16180
#, no-wrap
16181
msgid ""
16182
"\n"
16183
"[libdefaults]\n"
16184
" default_realm = EXAMPLE.COM\n"
16185
"\n"
16186
"...\n"
16187
"\n"
16188
"[realms]\n"
16189
" EXAMPLE.COM = {\n"
16190
" kdc = kdc01.example.com\n"
16191
" kdc = kdc02.example.com\n"
16192
" admin_server = kdc01.example.com\n"
16193
" admin_server = kdc02.example.com\n"
16194
" default_domain = example.com\n"
16195
" database_module = openldap_ldapconf\n"
16196
" }\n"
16197
"\n"
16198
"...\n"
16199
"\n"
16200
"[domain_realm]\n"
16201
" .example.com = EXAMPLE.COM\n"
16202
"\n"
16203
"...\n"
16204
"\n"
16205
"[dbdefaults]\n"
16206
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16207
"\n"
16208
"[dbmodules]\n"
16209
" openldap_ldapconf = {\n"
16210
" db_library = kldap\n"
16211
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16212
"\n"
16213
" # this object needs to have read rights on\n"
16214
" # the realm container, principal container and realm sub-"
16215
"trees\n"
16216
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16217
"\n"
16218
" # this object needs to have read and write rights on\n"
16219
" # the realm container, principal container and realm sub-"
16220
"trees\n"
16221
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16222
" ldap_servers = ldaps://ldap01.example.com "
16223
"ldaps://ldap02.example.com\n"
16224
" ldap_conns_per_server = 5\n"
16225
" }\n"
16226
msgstr ""
16227
16228
#: serverguide/C/network-auth.xml:3037(para)
16229
msgid "Create the stash for the LDAP bind password:"
16230
msgstr ""
16231
16232
#: serverguide/C/network-auth.xml:3048(para)
16233
msgid ""
16234
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16235
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16236
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16237
"encrypted connection such as <application>scp</application>, or on physical "
16238
"media."
16239
msgstr ""
16240
16241
#: serverguide/C/network-auth.xml:3055(command)
16242
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16243
msgstr ""
16244
16245
#: serverguide/C/network-auth.xml:3056(command)
16246
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16247
msgstr ""
16248
16249
#: serverguide/C/network-auth.xml:3060(para)
16250
msgid ""
16251
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16252
msgstr ""
16253
16254
#: serverguide/C/network-auth.xml:3068(para)
16255
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16256
msgstr ""
16257
16258
#: serverguide/C/network-auth.xml:3079(para)
16259
msgid ""
16260
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16261
"you should be able to continue to authenticate users if one LDAP server, one "
16262
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16263
msgstr ""
16264
16265
#: serverguide/C/network-auth.xml:3091(para)
16266
msgid ""
16267
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16268
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16269
"Guide</ulink> has some additional details."
16270
msgstr ""
16271
16272
#: serverguide/C/network-auth.xml:3097(para)
16273
msgid ""
16274
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16275
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16276
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16277
"5.6</ulink> and the <ulink "
16278
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16279
"\">kdb5_ldap_util man page</ulink>."
16280
msgstr ""
16281
16282
#: serverguide/C/network-auth.xml:3105(para)
16283
msgid ""
16284
"Another useful link is the <ulink "
16285
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16286
"b5.conf man page</ulink>."
16287
msgstr ""
16288
16289
#: serverguide/C/network-auth.xml:3110(para)
16290
msgid ""
16291
"Also, see the <ulink "
16292
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16293
"and LDAP</ulink> Ubuntu wiki page."
16294
msgstr ""
16295
16296
#: serverguide/C/monitoring.xml:13(title)
16297
msgid "Monitoring"
16298
msgstr ""
16299
16300
#: serverguide/C/monitoring.xml:17(para)
16301
msgid ""
16302
"The monitoring of essential servers and services is an important part of "
16303
"system administration. Most network services are monitored for performance, "
16304
"availability, or both. This section will cover installation and "
16305
"configuration of <application>Nagios</application> for availability "
16306
"monitoring, and <application>Munin</application> for performance monitoring."
16307
msgstr ""
16308
16309
#: serverguide/C/monitoring.xml:24(para)
16310
msgid ""
16311
"The examples in this section will use two servers with hostnames "
16312
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16313
"<emphasis>Server01</emphasis> will be configured with "
16314
"<application>Nagios</application> to monitor services on itself and "
16315
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16316
"<application>munin</application> package to gather information from the "
16317
"network. Using the <application>munin-node</application> package, "
16318
"<emphasis>server02</emphasis> will be configured to send information to "
16319
"<emphasis>server01</emphasis>."
16320
msgstr ""
16321
16322
#: serverguide/C/monitoring.xml:33(para)
16323
msgid ""
16324
"Hopefully these simple examples will allow you to monitor additional servers "
16325
"and services on your network."
16326
msgstr ""
16327
16328
#: serverguide/C/monitoring.xml:39(title)
16329
msgid "Nagios"
16330
msgstr ""
16331
16332
#: serverguide/C/monitoring.xml:44(para)
16333
msgid ""
16334
"First, on <emphasis>server01</emphasis> install the "
16335
"<application>nagios</application> package. In a terminal enter:"
16336
msgstr ""
16337
16338
#: serverguide/C/monitoring.xml:50(command)
16339
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16340
msgstr ""
16341
16342
#: serverguide/C/monitoring.xml:53(para)
16343
msgid ""
16344
"You will be asked to enter a password for the "
16345
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16346
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16347
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16348
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16349
"of the <application>apache2-utils</application> package."
16350
msgstr ""
16351
16352
#: serverguide/C/monitoring.xml:60(para)
16353
msgid ""
16354
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16355
"user enter:"
16356
msgstr ""
16357
16358
#: serverguide/C/monitoring.xml:65(command)
16359
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16360
msgstr ""
16361
16362
#: serverguide/C/monitoring.xml:68(para)
16363
msgid "To add a user:"
16364
msgstr ""
16365
16366
#: serverguide/C/monitoring.xml:73(command)
16367
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16368
msgstr ""
16369
16370
#: serverguide/C/monitoring.xml:76(para)
16371
msgid ""
16372
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16373
"server</application> package. From a terminal on server02 enter:"
16374
msgstr ""
16375
16376
#: serverguide/C/monitoring.xml:82(command)
16377
msgid "sudo apt-get install nagios-nrpe-server"
16378
msgstr ""
16379
16380
#: serverguide/C/monitoring.xml:86(para)
16381
msgid ""
16382
"<application>NRPE</application> allows you to execute local checks on remote "
16383
"hosts. There are other ways of accomplishing this through other Nagios "
16384
"plugins as well as other checks."
16385
msgstr ""
16386
16387
#: serverguide/C/monitoring.xml:94(title)
16388
msgid "Configuration Overview"
16389
msgstr ""
16390
16391
#: serverguide/C/monitoring.xml:96(para)
16392
msgid ""
16393
"There are a couple of directories containing "
16394
"<application>Nagios</application> configuration and check files."
16395
msgstr ""
16396
16397
#: serverguide/C/monitoring.xml:102(para)
16398
msgid ""
16399
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16400
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16401
"etc."
16402
msgstr ""
16403
16404
#: serverguide/C/monitoring.xml:108(para)
16405
msgid ""
16406
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16407
"service checks."
16408
msgstr ""
16409
16410
#: serverguide/C/monitoring.xml:113(para)
16411
msgid ""
16412
"<filename>/etc/nagios</filename>: on the remote host contains the "
16413
"<application>nagios-nrpe-server</application> configuration files."
16414
msgstr ""
16415
16416
#: serverguide/C/monitoring.xml:118(para)
16417
msgid ""
16418
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16419
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16420
msgstr ""
16421
16422
#: serverguide/C/monitoring.xml:123(para)
16423
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16424
msgstr ""
16425
16426
#: serverguide/C/monitoring.xml:129(para)
16427
msgid ""
16428
"There are a plethora of checks <application>Nagios</application> can be "
16429
"configured to execute for any given host. For this example Nagios will be "
16430
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16431
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16432
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16433
msgstr ""
16434
16435
#: serverguide/C/monitoring.xml:136(para)
16436
msgid ""
16437
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16438
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16439
msgstr ""
16440
16441
#: serverguide/C/monitoring.xml:141(para)
16442
msgid ""
16443
"Additionally, there are some terms that once explained will hopefully make "
16444
"understanding Nagios configuration easier:"
16445
msgstr ""
16446
16447
#: serverguide/C/monitoring.xml:147(para)
16448
msgid ""
16449
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16450
"is being monitored."
16451
msgstr ""
16452
16453
#: serverguide/C/monitoring.xml:152(para)
16454
msgid ""
16455
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16456
"could group all web servers, file server, etc."
16457
msgstr ""
16458
16459
#: serverguide/C/monitoring.xml:157(para)
16460
msgid ""
16461
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16462
"as HTTP, DNS, NFS, etc."
16463
msgstr ""
16464
16465
#: serverguide/C/monitoring.xml:162(para)
16466
msgid ""
16467
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16468
"together. This is useful for grouping multiple HTTP for example."
16469
msgstr ""
16470
16471
#: serverguide/C/monitoring.xml:168(para)
16472
msgid ""
16473
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16474
"place. Nagios can be configured to send emails, SMS messages, etc."
16475
msgstr ""
16476
16477
#: serverguide/C/monitoring.xml:174(para)
16478
msgid ""
16479
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16480
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16481
"will also <application>ping</application> check the "
16482
"<emphasis>gateway</emphasis>."
16483
msgstr ""
16484
16485
#: serverguide/C/monitoring.xml:179(para)
16486
msgid ""
16487
"Large Nagios installations can be quite complex to configure. It is usually "
16488
"best to start small, one or two hosts, get things configured the way you "
16489
"like then expand."
16490
msgstr ""
16491
16492
#: serverguide/C/monitoring.xml:194(para)
16493
msgid ""
16494
"First, create a <emphasis>host</emphasis> configuration file for "
16495
"<emphasis>server02</emphasis>. In a terminal enter:"
16496
msgstr ""
16497
16498
#: serverguide/C/monitoring.xml:199(command)
16499
msgid ""
16500
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16501
"/etc/nagios3/conf.d/server02.cfg"
16502
msgstr ""
16503
16504
#: serverguide/C/monitoring.xml:203(para)
16505
msgid ""
16506
"In the above and following command examples, replace "
16507
"<emphasis>\"server01\"</emphasis>, "
16508
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16509
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16510
"your servers."
16511
msgstr ""
16512
16513
#: serverguide/C/monitoring.xml:212(para)
16514
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16515
msgstr ""
16516
16517
#: serverguide/C/monitoring.xml:216(programlisting)
16518
#, no-wrap
16519
msgid ""
16520
"\n"
16521
"define host{\n"
16522
" use generic-host ; Name of host "
16523
"template to use\n"
16524
" host_name server02\n"
16525
" alias Server 02\n"
16526
" address 172.18.100.101\n"
16527
"}\n"
16528
"\n"
16529
"# check DNS service.\n"
16530
"define service {\n"
16531
" use generic-service\n"
16532
" host_name server02\n"
16533
" service_description DNS\n"
16534
" check_command check_dns!172.18.100.101\n"
16535
"}\n"
16536
msgstr ""
16537
16538
#: serverguide/C/monitoring.xml:236(para)
16539
msgid ""
16540
"Restart the <application>nagios</application> daemon to enable the new "
16541
"configuration:"
16542
msgstr ""
16543
16544
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16545
msgid "sudo /etc/init.d/nagios3 restart"
16546
msgstr ""
16547
16548
#: serverguide/C/monitoring.xml:251(para)
16549
msgid ""
16550
"Now add a service definition for the MySQL check by adding the following to "
16551
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16552
msgstr ""
16553
16554
#: serverguide/C/monitoring.xml:255(programlisting)
16555
#, no-wrap
16556
msgid ""
16557
"\n"
16558
"# check MySQL servers.\n"
16559
"define service {\n"
16560
" hostgroup_name mysql-servers\n"
16561
" service_description MySQL\n"
16562
" check_command "
16563
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16564
" use generic-service\n"
16565
" notification_interval 0 ; set > 0 if you want to be "
16566
"renotified\n"
16567
"}\n"
16568
msgstr ""
16569
16570
#: serverguide/C/monitoring.xml:269(para)
16571
msgid ""
16572
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16573
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16574
msgstr ""
16575
16576
#: serverguide/C/monitoring.xml:274(programlisting)
16577
#, no-wrap
16578
msgid ""
16579
"\n"
16580
"# MySQL hostgroup.\n"
16581
"define hostgroup {\n"
16582
" hostgroup_name mysql-servers\n"
16583
" alias MySQL servers\n"
16584
" members localhost, server02\n"
16585
" }\n"
16586
msgstr ""
16587
16588
#: serverguide/C/monitoring.xml:286(para)
16589
msgid ""
16590
"The Nagios check needs to authenticate to MySQL. To add a "
16591
"<emphasis>nagios</emphasis> user to MySQL enter:"
16592
msgstr ""
16593
16594
#: serverguide/C/monitoring.xml:291(command)
16595
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16596
msgstr ""
16597
16598
#: serverguide/C/monitoring.xml:295(para)
16599
msgid ""
16600
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16601
"<emphasis>mysql-servers</emphasis> hostgroup."
16602
msgstr ""
16603
16604
#: serverguide/C/monitoring.xml:303(para)
16605
msgid ""
16606
"Restart <application>nagios</application> to start checking the MySQL "
16607
"servers."
16608
msgstr ""
16609
16610
#: serverguide/C/monitoring.xml:318(para)
16611
msgid ""
16612
"Lastly configure NRPE to check the disk space on "
16613
"<emphasis>server02</emphasis>."
16614
msgstr ""
16615
16616
#: serverguide/C/monitoring.xml:322(para)
16617
msgid ""
16618
"On <emphasis>server01</emphasis> add the service check to "
16619
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16620
msgstr ""
16621
16622
#: serverguide/C/monitoring.xml:327(programlisting)
16623
#, no-wrap
16624
msgid ""
16625
"\n"
16626
"# NRPE disk check.\n"
16627
"define service {\n"
16628
" use generic-service\n"
16629
" host_name server02\n"
16630
" service_description nrpe-disk\n"
16631
" check_command "
16632
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16633
"}\n"
16634
msgstr ""
16635
16636
#: serverguide/C/monitoring.xml:340(para)
16637
msgid ""
16638
"Now on <emphasis>server02</emphasis> edit "
16639
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16640
msgstr ""
16641
16642
#: serverguide/C/monitoring.xml:344(programlisting)
16643
#, no-wrap
16644
msgid ""
16645
"\n"
16646
"allowed_hosts=172.18.100.100\n"
16647
msgstr ""
16648
16649
#: serverguide/C/monitoring.xml:348(para)
16650
msgid "And below in the command definition area add:"
16651
msgstr ""
16652
16653
#: serverguide/C/monitoring.xml:352(programlisting)
16654
#, no-wrap
16655
msgid ""
16656
"\n"
16657
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16658
"e\n"
16659
msgstr ""
16660
16661
#: serverguide/C/monitoring.xml:359(para)
16662
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16663
msgstr ""
16664
16665
#: serverguide/C/monitoring.xml:364(command)
16666
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16667
msgstr ""
16668
16669
#: serverguide/C/monitoring.xml:370(para)
16670
msgid ""
16671
"Also, on <emphasis>server01</emphasis> restart "
16672
"<application>nagios</application>:"
16673
msgstr ""
16674
16675
#: serverguide/C/monitoring.xml:383(para)
16676
msgid ""
16677
"You should now be able to see the host and service checks in the Nagios CGI "
16678
"files. To access them point a browser to http://server01/nagios3. You will "
16679
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
16680
"password."
16681
msgstr ""
16682
16683
#: serverguide/C/monitoring.xml:393(para)
16684
msgid ""
16685
"This section has just scratched the surface of Nagios' features. The "
16686
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
16687
"plugins</application> contain many more service checks."
16688
msgstr ""
16689
16690
#: serverguide/C/monitoring.xml:400(para)
16691
msgid ""
16692
"For more information see <ulink "
16693
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
16694
msgstr ""
16695
16696
#: serverguide/C/monitoring.xml:405(para)
16697
msgid ""
16698
"Specifically the <ulink "
16699
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
16700
"site."
16701
msgstr ""
16702
16703
#: serverguide/C/monitoring.xml:410(para)
16704
msgid ""
16705
"There is also a list of <ulink "
16706
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
16707
"Nagios and network monitoring:"
16708
msgstr ""
16709
16710
#: serverguide/C/monitoring.xml:416(para)
16711
msgid ""
16712
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
16713
"Wiki</ulink> page also has more details."
16714
msgstr ""
16715
16716
#: serverguide/C/monitoring.xml:425(title)
16717
msgid "Munin"
16718
msgstr ""
16719
16720
#: serverguide/C/monitoring.xml:430(para)
16721
msgid ""
16722
"Before installing <application>Munin</application> on "
16723
"<emphasis>server01</emphasis><application>apache2</application> will need to "
16724
"be installed. The default configuration is fine for running a "
16725
"<application>munin</application> server. For more information see <xref "
16726
"linkend=\"httpd\"/>."
16727
msgstr ""
16728
16729
#: serverguide/C/monitoring.xml:436(para)
16730
msgid ""
16731
"First, on <emphasis>server01</emphasis> install "
16732
"<application>munin</application>. In a terminal enter:"
16733
msgstr ""
16734
16735
#: serverguide/C/monitoring.xml:441(command)
16736
msgid "sudo apt-get install munin"
16737
msgstr ""
16738
16739
#: serverguide/C/monitoring.xml:444(para)
16740
msgid ""
16741
"Now on <emphasis>server02</emphasis> install the <application>munin-"
16742
"node</application> package:"
16743
msgstr ""
16744
16745
#: serverguide/C/monitoring.xml:449(command)
16746
msgid "sudo apt-get install munin-node"
16747
msgstr ""
16748
16749
#: serverguide/C/monitoring.xml:456(para)
16750
msgid ""
16751
"On <emphasis>server01</emphasis> edit the "
16752
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
16753
"<emphasis>server02</emphasis>:"
16754
msgstr ""
16755
16756
#: serverguide/C/monitoring.xml:461(programlisting)
16757
#, no-wrap
16758
msgid ""
16759
"\n"
16760
"## First our \"normal\" host.\n"
16761
"[server02]\n"
16762
" address 172.18.100.101\n"
16763
msgstr ""
16764
16765
#: serverguide/C/monitoring.xml:468(para)
16766
msgid ""
16767
"Replace <emphasis>server02</emphasis> and "
16768
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
16769
"for your server."
16770
msgstr ""
16771
16772
#: serverguide/C/monitoring.xml:474(para)
16773
msgid ""
16774
"Next, configure <application>munin-node</application> on "
16775
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
16776
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
16777
msgstr ""
16778
16779
#: serverguide/C/monitoring.xml:479(programlisting)
16780
#, no-wrap
16781
msgid ""
16782
"\n"
16783
"allow ^172\\.18\\.100\\.100$\n"
16784
msgstr ""
16785
16786
#: serverguide/C/monitoring.xml:484(para)
16787
msgid ""
16788
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
16789
"<application>munin</application> server."
16790
msgstr ""
16791
16792
#: serverguide/C/monitoring.xml:489(para)
16793
msgid ""
16794
"Now restart <application>munin-node</application> on "
16795
"<emphasis>server02</emphasis> for the changes to take effect:"
16796
msgstr ""
16797
16798
#: serverguide/C/monitoring.xml:494(command)
16799
msgid "sudo /etc/init.d/munin-node restart"
16800
msgstr ""
16801
16802
#: serverguide/C/monitoring.xml:497(para)
16803
msgid ""
16804
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
16805
"you should see links to nice graphs displaying information from the standard "
16806
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
16807
msgstr ""
16808
16809
#: serverguide/C/monitoring.xml:503(para)
16810
msgid ""
16811
"Since this is a new install it may take some time for the graphs to display "
16812
"anything useful."
16813
msgstr ""
16814
16815
#: serverguide/C/monitoring.xml:510(title)
16816
msgid "Additional Plugins"
16817
msgstr ""
16818
16819
#: serverguide/C/monitoring.xml:512(para)
16820
msgid ""
16821
"The <application>munin-plugins-extra</application> package contains "
16822
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
16823
"install the package, from a terminal enter:"
16824
msgstr ""
16825
16826
#: serverguide/C/monitoring.xml:518(command)
16827
msgid "sudo apt-get install munin-plugins-extra"
16828
msgstr ""
16829
16830
#: serverguide/C/monitoring.xml:521(para)
16831
msgid "Be sure to install the package on both the server and node machines."
16832
msgstr ""
16833
16834
#: serverguide/C/monitoring.xml:531(para)
16835
msgid ""
16836
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
16837
"website for more details."
16838
msgstr ""
16839
16840
#: serverguide/C/monitoring.xml:536(para)
16841
msgid ""
16842
"Specifically the <ulink "
16843
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
16844
"Documentation</ulink> page includes information on additional plugins, "
16845
"writing plugins, etc."
16846
msgstr ""
16847
16848
#: serverguide/C/monitoring.xml:542(para)
16849
msgid ""
16850
"Also, there is a book in German by Open Source Press: <ulink "
16851
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
16852
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
16853
msgstr ""
16854
16855
#: serverguide/C/monitoring.xml:548(para)
16856
msgid ""
16857
"Another resource is the <ulink "
16858
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
16859
"page."
16860
msgstr ""
16861
16862
#: serverguide/C/mail.xml:13(title)
16863
msgid "Email Services"
16864
msgstr ""
16865
16866
#: serverguide/C/mail.xml:14(para)
16867
msgid ""
16868
"The process of getting an email from one person to another over a network or "
16869
"the Internet involves many systems working together. Each of these systems "
16870
"must be correctly configured for the process to work. The sender uses a "
16871
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
16872
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
16873
"the last of which will hand it off to a <emphasis>Mail Delivery "
16874
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
16875
"it will be retrieved by the recipient's email client, usually via a POP3 or "
16876
"IMAP server."
16877
msgstr ""
16878
16879
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
16880
msgid "Postfix"
16881
msgstr ""
16882
16883
#: serverguide/C/mail.xml:25(para)
16884
msgid ""
16885
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
16886
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
16887
"compatible with the MTA <application>sendmail</application>. This section "
16888
"explains how to install and configure <application>postfix</application>. It "
16889
"also explains how to set it up as an SMTP server using a secure connection "
16890
"(for sending emails securely)."
16891
msgstr ""
16892
16893
#: serverguide/C/mail.xml:34(para)
16894
msgid ""
16895
"This guide does not cover setting up Postfix <emphasis>Virtual "
16896
"Domains</emphasis>, for information on Virtual Domains and other advanced "
16897
"configurations see <xref linkend=\"postfix-references\"/>."
16898
msgstr ""
16899
16900
#: serverguide/C/mail.xml:41(para)
16901
msgid ""
16902
"To install <application>postfix</application> run the following command:"
16903
msgstr ""
16904
16905
#: serverguide/C/mail.xml:47(para)
16906
msgid ""
16907
"Simply press return when the installation process asks questions, the "
16908
"configuration will be done in greater detail in the next stage."
16909
msgstr ""
16910
16911
#: serverguide/C/mail.xml:52(title)
16912
msgid "Basic Configuration"
16913
msgstr ""
16914
16915
#: serverguide/C/mail.xml:53(para)
16916
msgid ""
16917
"To configure <application>postfix</application>, run the following command:"
16918
msgstr ""
16919
16920
#: serverguide/C/mail.xml:57(command)
16921
msgid "sudo dpkg-reconfigure postfix"
16922
msgstr ""
16923
16924
#: serverguide/C/mail.xml:63(para)
16925
msgid "Internet Site"
16926
msgstr ""
16927
16928
#: serverguide/C/mail.xml:64(para)
16929
msgid "mail.example.com"
16930
msgstr ""
16931
16932
#: serverguide/C/mail.xml:65(para)
16933
msgid "steve"
16934
msgstr ""
16935
16936
#: serverguide/C/mail.xml:66(para)
16937
msgid "mail.example.com, localhost.localdomain, localhost"
16938
msgstr ""
16939
16940
#: serverguide/C/mail.xml:67(para)
16941
msgid "No"
16942
msgstr ""
16943
16944
#: serverguide/C/mail.xml:68(para)
16945
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
16946
msgstr ""
16947
16948
#: serverguide/C/mail.xml:69(para)
16949
msgid "0"
16950
msgstr ""
16951
16952
#: serverguide/C/mail.xml:70(para)
16953
msgid "+"
16954
msgstr ""
16955
16956
#: serverguide/C/mail.xml:71(para)
16957
msgid "all"
16958
msgstr ""
16959
16960
#: serverguide/C/mail.xml:59(para)
16961
msgid ""
16962
"The user interface will be displayed. On each screen, select the following "
16963
"values: <placeholder-1/>"
16964
msgstr ""
16965
16966
#: serverguide/C/mail.xml:75(para)
16967
msgid ""
16968
"Replace mail.example.com with the domain for which you'll accept email, "
16969
"192.168.0.0/24 with the actual network and class range of your mail server, "
16970
"and steve with the appropriate username."
16971
msgstr ""
16972
16973
#: serverguide/C/mail.xml:81(para)
16974
msgid ""
16975
"Now is a good time to decide which mailbox format you want to use. By "
16976
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
16977
"mailbox format. Rather than editing the configuration file directly, you can "
16978
"use the <command>postconf</command> command to configure all "
16979
"<application>postfix</application> parameters. The configuration parameters "
16980
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
16981
"you wish to re-configure a particular parameter, you can either run the "
16982
"command or change it manually in the file."
16983
msgstr ""
16984
16985
#: serverguide/C/mail.xml:92(para)
16986
msgid ""
16987
"To configure the mailbox format for <emphasis "
16988
"role=\"strong\">Maildir:</emphasis>"
16989
msgstr ""
16990
16991
#: serverguide/C/mail.xml:97(command)
16992
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
16993
msgstr ""
16994
16995
#: serverguide/C/mail.xml:100(para)
16996
msgid ""
16997
"This will place new mail in /home/<emphasis "
16998
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
16999
"your Mail Delivery Agent (MDA) to use the same path."
17000
msgstr ""
17001
17002
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17003
msgid "SMTP Authentication"
17004
msgstr ""
17005
17006
#: serverguide/C/mail.xml:110(para)
17007
msgid ""
17008
"SMTP-AUTH allows a client to identify itself through an authentication "
17009
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17010
"the authentication process. Once authenticated the SMTP server will allow "
17011
"the client to relay mail."
17012
msgstr ""
17013
17014
#: serverguide/C/mail.xml:117(para)
17015
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17016
msgstr ""
17017
17018
#: serverguide/C/mail.xml:120(screen)
17019
#, no-wrap
17020
msgid ""
17021
"\n"
17022
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17023
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17024
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17025
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17026
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17027
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17028
"sudo postconf -e 'smtpd_recipient_restrictions = "
17029
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17030
"sudo postconf -e 'inet_interfaces = all'\n"
17031
msgstr ""
17032
17033
#: serverguide/C/mail.xml:131(para)
17034
msgid ""
17035
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17036
"the Postfix queue directory."
17037
msgstr ""
17038
17039
#: serverguide/C/mail.xml:137(para)
17040
msgid ""
17041
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17042
"and-security\"/> for details. This example also uses a Certificate Authority "
17043
"(CA). For information on generating a CA certificate see <xref "
17044
"linkend=\"certificate-authority\"/>."
17045
msgstr ""
17046
17047
#: serverguide/C/mail.xml:143(para)
17048
msgid ""
17049
"You can get the digital certificate from a certificate authority. But unlike "
17050
"web clients, SMTP clients rarely complain about \"self-signed "
17051
"certificates\", so alternatively, you can create the certificate yourself. "
17052
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17053
"details."
17054
msgstr ""
17055
17056
#: serverguide/C/mail.xml:155(para)
17057
msgid ""
17058
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17059
"both incoming and outgoing mail:"
17060
msgstr ""
17061
17062
#: serverguide/C/mail.xml:158(screen)
17063
#, no-wrap
17064
msgid ""
17065
"\n"
17066
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17067
"sudo postconf -e 'smtp_use_tls = yes'\n"
17068
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17069
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17070
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17071
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17072
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17073
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17074
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17075
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17076
"sudo postconf -e 'myhostname = mail.example.com'\n"
17077
msgstr ""
17078
17079
#: serverguide/C/mail.xml:173(para)
17080
msgid ""
17081
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17082
"the certificate enter:"
17083
msgstr ""
17084
17085
#: serverguide/C/mail.xml:177(command)
17086
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17087
msgstr ""
17088
17089
#: serverguide/C/mail.xml:180(para)
17090
msgid ""
17091
"Again, for more details about certificates see <xref linkend=\"certificates-"
17092
"and-security\"/>."
17093
msgstr ""
17094
17095
#: serverguide/C/mail.xml:186(para)
17096
msgid ""
17097
"After running all the commands, <application>Postfix</application> is "
17098
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17099
"TLS encryption."
17100
msgstr ""
17101
17102
#: serverguide/C/mail.xml:191(para)
17103
msgid ""
17104
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17105
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17106
msgstr ""
17107
17108
#: serverguide/C/mail.xml:195(para)
17109
msgid ""
17110
"The postfix initial configuration is complete. Run the following command to "
17111
"restart the postfix daemon:"
17112
msgstr ""
17113
17114
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17115
msgid "sudo /etc/init.d/postfix restart"
17116
msgstr ""
17117
17118
#: serverguide/C/mail.xml:204(para)
17119
msgid ""
17120
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17121
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17122
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17123
"However it is still necessary to set up SASL authentication before you can "
17124
"use SMTP-AUTH."
17125
msgstr ""
17126
17127
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17128
msgid "Configuring SASL"
17129
msgstr ""
17130
17131
#: serverguide/C/mail.xml:215(para)
17132
msgid ""
17133
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17134
"enable Dovecot SASL the <application>dovecot-common</application> package "
17135
"will need to be installed. From a terminal prompt enter the following:"
17136
msgstr ""
17137
17138
#: serverguide/C/mail.xml:221(command)
17139
msgid "sudo apt-get install dovecot-common"
17140
msgstr ""
17141
17142
#: serverguide/C/mail.xml:223(para)
17143
msgid ""
17144
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17145
"In the <emphasis>auth default</emphasis> section uncomment the "
17146
"<emphasis>socket listen</emphasis> option and change the following:"
17147
msgstr ""
17148
17149
#: serverguide/C/mail.xml:227(programlisting)
17150
#, no-wrap
17151
msgid ""
17152
"\n"
17153
" socket listen {\n"
17154
" #master {\n"
17155
" # Master socket provides access to userdb information. It's typically\n"
17156
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17157
" # can find mailbox locations.\n"
17158
" #path = /var/run/dovecot/auth-master\n"
17159
" #mode = 0600\n"
17160
" # Default user/group is the one who started dovecot-auth (root)\n"
17161
" #user = \n"
17162
" #group = \n"
17163
" #}\n"
17164
" client {\n"
17165
" # The client socket is generally safe to export to everyone. Typical "
17166
"use\n"
17167
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17168
" # using it.\n"
17169
" path = /var/spool/postfix/private/auth-client\n"
17170
" mode = 0660\n"
17171
" user = postfix\n"
17172
" group = postfix\n"
17173
" }\n"
17174
" }\n"
17175
msgstr ""
17176
17177
#: serverguide/C/mail.xml:251(para)
17178
msgid ""
17179
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17180
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17181
"add <emphasis>\"login\"</emphasis>:"
17182
msgstr ""
17183
17184
#: serverguide/C/mail.xml:256(programlisting)
17185
#, no-wrap
17186
msgid ""
17187
"\n"
17188
" mechanisms = plain login\n"
17189
msgstr ""
17190
17191
#: serverguide/C/mail.xml:260(para)
17192
msgid ""
17193
"Once you have <application>Dovecot</application> configured restart it with:"
17194
msgstr ""
17195
17196
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17197
msgid "sudo /etc/init.d/dovecot restart"
17198
msgstr ""
17199
17200
#: serverguide/C/mail.xml:269(title)
17201
msgid "Postfix-Dovecot"
17202
msgstr ""
17203
17204
#: serverguide/C/mail.xml:271(para)
17205
msgid ""
17206
"Another option for configuring <application>Postfix</application> for SMTP-"
17207
"AUTH is using the <application>dovecot-postfix</application> package. This "
17208
"package will install <application>Dovecot</application> and configure "
17209
"<application>Postfix</application> to use it for both SASL authentication "
17210
"and as a Mail Delivery Agent (MDA). The package also configures "
17211
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17212
msgstr ""
17213
17214
#: serverguide/C/mail.xml:280(para)
17215
msgid ""
17216
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17217
"server. For example, if you are configuring your server to be a mail "
17218
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17219
"the above commands to configure Postfix for SMTPAUTH."
17220
msgstr ""
17221
17222
#: serverguide/C/mail.xml:287(para)
17223
msgid "To install the package, from a terminal prompt enter:"
17224
msgstr ""
17225
17226
#: serverguide/C/mail.xml:292(command)
17227
msgid "sudo apt-get install dovecot-postfix"
17228
msgstr ""
17229
17230
#: serverguide/C/mail.xml:295(para)
17231
msgid ""
17232
"You should now have a working mail server, but there are a few options that "
17233
"you may wish to further customize. For example, the package uses the "
17234
"certificate and key from the <application>ssl-cert</application> package, "
17235
"and in a production environment you should use a certificate and key "
17236
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17237
"for more details."
17238
msgstr ""
17239
17240
#: serverguide/C/mail.xml:301(para)
17241
msgid ""
17242
"Once you have a customized certificate and key for the host, change the "
17243
"following options in <filename>/etc/postfix/main.cf</filename>:"
17244
msgstr ""
17245
17246
#: serverguide/C/mail.xml:305(programlisting)
17247
#, no-wrap
17248
msgid ""
17249
"\n"
17250
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17251
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17252
msgstr ""
17253
17254
#: serverguide/C/mail.xml:310(para)
17255
msgid "Then restart Postfix:"
17256
msgstr ""
17257
17258
#: serverguide/C/mail.xml:321(para)
17259
msgid ""
17260
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17261
msgstr ""
17262
17263
#: serverguide/C/mail.xml:324(para)
17264
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17265
msgstr ""
17266
17267
#: serverguide/C/mail.xml:329(command)
17268
msgid "telnet mail.example.com 25"
17269
msgstr ""
17270
17271
#: serverguide/C/mail.xml:331(para)
17272
msgid ""
17273
"After you have established the connection to the postfix mail server, type:"
17274
msgstr ""
17275
17276
#: serverguide/C/mail.xml:335(screen)
17277
#, no-wrap
17278
msgid ""
17279
"\n"
17280
"ehlo mail.example.com\n"
17281
msgstr ""
17282
17283
#: serverguide/C/mail.xml:338(para)
17284
msgid ""
17285
"If you see the following lines among others, then everything is working "
17286
"perfectly. Type <command>quit</command> to exit."
17287
msgstr ""
17288
17289
#: serverguide/C/mail.xml:342(programlisting)
17290
#, no-wrap
17291
msgid ""
17292
"\n"
17293
"250-STARTTLS\n"
17294
"250-AUTH LOGIN PLAIN\n"
17295
"250-AUTH=LOGIN PLAIN\n"
17296
"250 8BITMIME\n"
17297
msgstr ""
17298
17299
#: serverguide/C/mail.xml:352(para)
17300
msgid ""
17301
"This section introduces some common ways to determine the cause if problems "
17302
"arise."
17303
msgstr ""
17304
17305
#: serverguide/C/mail.xml:356(title)
17306
msgid "Escaping chroot"
17307
msgstr ""
17308
17309
#: serverguide/C/mail.xml:357(para)
17310
msgid ""
17311
"The Ubuntu <application>postfix</application> package will by default "
17312
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17313
"This can add greater complexity when troubleshooting problems."
17314
msgstr ""
17315
17316
#: serverguide/C/mail.xml:361(para)
17317
msgid ""
17318
"To turn off the chroot operation locate for the following line in the "
17319
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17320
msgstr ""
17321
17322
#: serverguide/C/mail.xml:365(screen)
17323
#, no-wrap
17324
msgid ""
17325
"\n"
17326
"smtp inet n - - - - smtpd\n"
17327
msgstr ""
17328
17329
#: serverguide/C/mail.xml:368(para)
17330
msgid "and modify it as follows:"
17331
msgstr ""
17332
17333
#: serverguide/C/mail.xml:371(screen)
17334
#, no-wrap
17335
msgid ""
17336
"\n"
17337
"smtp inet n - n - - smtpd\n"
17338
msgstr ""
17339
17340
#: serverguide/C/mail.xml:374(para)
17341
msgid ""
17342
"You will then need to restart Postfix to use the new configuration. From a "
17343
"terminal prompt enter:"
17344
msgstr ""
17345
17346
#: serverguide/C/mail.xml:382(title)
17347
msgid "Log Files"
17348
msgstr ""
17349
17350
#: serverguide/C/mail.xml:383(para)
17351
msgid ""
17352
"<application>Postfix</application> sends all log messages to "
17353
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17354
"can sometimes get lost in the normal log output so they are also logged to "
17355
"<filename>/var/log/mail.err</filename> and "
17356
"<filename>/var/log/mail.warn</filename> respectively."
17357
msgstr ""
17358
17359
#: serverguide/C/mail.xml:388(para)
17360
msgid ""
17361
"To see messages entered into the logs in real time you can use the "
17362
"<application>tail -f</application> command:"
17363
msgstr ""
17364
17365
#: serverguide/C/mail.xml:393(command)
17366
msgid "tail -f /var/log/mail.err"
17367
msgstr ""
17368
17369
#: serverguide/C/mail.xml:395(para)
17370
msgid ""
17371
"The amount of detail that is recorded in the logs can be increased. Below "
17372
"are some configuration options for increasing the log level for some of the "
17373
"areas covered above."
17374
msgstr ""
17375
17376
#: serverguide/C/mail.xml:401(para)
17377
msgid ""
17378
"To increase <emphasis>TLS</emphasis> activity logging set the "
17379
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17380
msgstr ""
17381
17382
#: serverguide/C/mail.xml:405(command)
17383
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17384
msgstr ""
17385
17386
#: serverguide/C/mail.xml:409(para)
17387
msgid ""
17388
"If you are having trouble sending or receiving mail from a specific domain "
17389
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17390
msgstr ""
17391
17392
#: serverguide/C/mail.xml:414(command)
17393
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17394
msgstr ""
17395
17396
#: serverguide/C/mail.xml:418(para)
17397
msgid ""
17398
"You can increase the verbosity of any <application>Postfix</application> "
17399
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17400
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17401
"<emphasis>smtp</emphasis> entry:"
17402
msgstr ""
17403
17404
#: serverguide/C/mail.xml:422(programlisting)
17405
#, no-wrap
17406
msgid ""
17407
"\n"
17408
"smtp unix - - - - - smtp -v\n"
17409
msgstr ""
17410
17411
#: serverguide/C/mail.xml:428(para)
17412
msgid ""
17413
"It is important to note that after making one of the logging changes above "
17414
"the <application>Postfix</application> process will need to be reloaded in "
17415
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17416
"reload</command>"
17417
msgstr ""
17418
17419
#: serverguide/C/mail.xml:435(para)
17420
msgid ""
17421
"To increase the amount of information logged when troubleshooting "
17422
"<emphasis>SASL</emphasis> issues you can set the following options in "
17423
"<filename>/etc/dovecot/dovecot.conf</filename>"
17424
msgstr ""
17425
17426
#: serverguide/C/mail.xml:439(programlisting)
17427
#, no-wrap
17428
msgid ""
17429
"\n"
17430
"auth_debug=yes\n"
17431
"auth_debug_passwords=yes\n"
17432
msgstr ""
17433
17434
#: serverguide/C/mail.xml:446(para)
17435
msgid ""
17436
"Just like <application>Postfix</application> if you change a "
17437
"<application>Dovecot</application> configuration the process will need to be "
17438
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17439
msgstr ""
17440
17441
#: serverguide/C/mail.xml:452(para)
17442
msgid ""
17443
"Some of the options above can drastically increase the amount of information "
17444
"sent to the log files. Remember to return the log level back to normal after "
17445
"you have corrected the problem. Then reload the appropriate daemon for the "
17446
"new configuration to take affect."
17447
msgstr ""
17448
17449
#: serverguide/C/mail.xml:460(para)
17450
msgid ""
17451
"Administering a <application>Postfix</application> server can be a very "
17452
"complicated task. At some point you may need to turn to the Ubuntu community "
17453
"for more experienced help."
17454
msgstr ""
17455
17456
#: serverguide/C/mail.xml:464(para)
17457
msgid ""
17458
"A great place to ask for <application>Postfix</application> assistance, and "
17459
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17460
"server</emphasis> IRC channel on <ulink "
17461
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17462
"one of the <ulink "
17463
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17464
msgstr ""
17465
17466
#: serverguide/C/mail.xml:469(para)
17467
msgid ""
17468
"For in depth <application>Postfix</application> information Ubuntu "
17469
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17470
"Book of Postfix</ulink>."
17471
msgstr ""
17472
17473
#: serverguide/C/mail.xml:473(para)
17474
msgid ""
17475
"Finally, the <ulink "
17476
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17477
"also has great documentation on all the different configuration options "
17478
"available."
17479
msgstr ""
17480
17481
#: serverguide/C/mail.xml:477(para)
17482
msgid ""
17483
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17484
"Wiki Postifx</ulink> page has more information."
17485
msgstr ""
17486
17487
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17488
msgid "Exim4"
17489
msgstr ""
17490
17491
#: serverguide/C/mail.xml:486(para)
17492
msgid ""
17493
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17494
"developed at the University of Cambridge for use on Unix systems connected "
17495
"to the Internet. Exim can be installed in place of "
17496
"<application>sendmail</application>, although the configuration of "
17497
"<application>exim</application> is quite different to that of "
17498
"<application>sendmail</application>."
17499
msgstr ""
17500
17501
#: serverguide/C/mail.xml:497(para)
17502
msgid ""
17503
"To install <application>exim4</application>, run the following command: "
17504
"<screen>\n"
17505
"<command>sudo apt-get install exim4</command>\n"
17506
"</screen>"
17507
msgstr ""
17508
17509
#: serverguide/C/mail.xml:506(para)
17510
msgid ""
17511
"To configure <application>Exim4</application>, run the following command:"
17512
msgstr ""
17513
17514
#: serverguide/C/mail.xml:510(command)
17515
msgid "sudo dpkg-reconfigure exim4-config"
17516
msgstr ""
17517
17518
#: serverguide/C/mail.xml:512(para)
17519
msgid ""
17520
"The user interface will be displayed. The user interface lets you configure "
17521
"many parameters. For example, In <application>Exim4</application> the "
17522
"configuration files are split among multiple files. If you wish to have them "
17523
"in one file you can configure accordingly in this user interface."
17524
msgstr ""
17525
17526
#: serverguide/C/mail.xml:520(para)
17527
msgid ""
17528
"All the parameters you configure in the user interface are stored in "
17529
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17530
"re-configure, either you re-run the configuration wizard or manually edit "
17531
"this file using your favorite editor. Once you configure, you can run the "
17532
"following command to generate the master configuration file:"
17533
msgstr ""
17534
17535
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17536
msgid "sudo update-exim4.conf"
17537
msgstr ""
17538
17539
#: serverguide/C/mail.xml:533(para)
17540
msgid ""
17541
"The master configuration file, is generated and it is stored in "
17542
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17543
msgstr ""
17544
17545
#: serverguide/C/mail.xml:539(para)
17546
msgid ""
17547
"At any time, you should not edit the master configuration file, "
17548
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17549
"updated automatically every time you run <command>update-exim4.conf</command>"
17550
msgstr ""
17551
17552
#: serverguide/C/mail.xml:547(para)
17553
msgid ""
17554
"You can run the following command to start <application>Exim4</application> "
17555
"daemon."
17556
msgstr ""
17557
17558
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17559
msgid "sudo /etc/init.d/exim4 start"
17560
msgstr ""
17561
17562
#: serverguide/C/mail.xml:557(para)
17563
msgid ""
17564
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17565
msgstr ""
17566
17567
#: serverguide/C/mail.xml:560(para)
17568
msgid ""
17569
"The first step is to create a certificate for use with TLS. Enter the "
17570
"following into a terminal prompt:"
17571
msgstr ""
17572
17573
#: serverguide/C/mail.xml:564(command)
17574
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17575
msgstr ""
17576
17577
#: serverguide/C/mail.xml:566(para)
17578
msgid ""
17579
"Now Exim4 needs to be configured for TLS by editing "
17580
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17581
"the following:"
17582
msgstr ""
17583
17584
#: serverguide/C/mail.xml:570(programlisting)
17585
#, no-wrap
17586
msgid ""
17587
"\n"
17588
"MAIN_TLS_ENABLE = yes\n"
17589
msgstr ""
17590
17591
#: serverguide/C/mail.xml:573(para)
17592
msgid ""
17593
"Next you need to configure <application>Exim4</application> to use the "
17594
"<application>saslauthd</application> for authentication. Edit "
17595
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17596
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17597
"<emphasis>login_saslauthd_server</emphasis> sections:"
17598
msgstr ""
17599
17600
#: serverguide/C/mail.xml:578(programlisting)
17601
#, no-wrap
17602
msgid ""
17603
"\n"
17604
" plain_saslauthd_server:\n"
17605
" driver = plaintext\n"
17606
" public_name = PLAIN\n"
17607
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17608
" server_set_id = $auth2\n"
17609
" server_prompts = :\n"
17610
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17611
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17612
" .endif\n"
17613
"#\n"
17614
" login_saslauthd_server:\n"
17615
" driver = plaintext\n"
17616
" public_name = LOGIN\n"
17617
" server_prompts = \"Username:: : Password::\"\n"
17618
" # don't send system passwords over unencrypted connections\n"
17619
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
17620
" server_set_id = $auth1\n"
17621
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17622
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17623
" .endif\n"
17624
msgstr ""
17625
17626
#: serverguide/C/mail.xml:600(para)
17627
msgid "Finally, update the Exim4 configuration and restart the service:"
17628
msgstr ""
17629
17630
#: serverguide/C/mail.xml:605(command)
17631
msgid "sudo /etc/init.d/exim4 restart"
17632
msgstr ""
17633
17634
#: serverguide/C/mail.xml:610(para)
17635
msgid ""
17636
"This section provides details on configuring the saslauthd to provide "
17637
"authentication for <application>Exim4</application>."
17638
msgstr ""
17639
17640
#: serverguide/C/mail.xml:613(para)
17641
msgid ""
17642
"The first step is to install the sasl2-bin package. From a terminal prompt "
17643
"enter the following:"
17644
msgstr ""
17645
17646
#: serverguide/C/mail.xml:617(command)
17647
msgid "sudo apt-get install sasl2-bin"
17648
msgstr ""
17649
17650
#: serverguide/C/mail.xml:619(para)
17651
msgid ""
17652
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
17653
"and set START=no to:"
17654
msgstr ""
17655
17656
#: serverguide/C/mail.xml:622(programlisting)
17657
#, no-wrap
17658
msgid ""
17659
"\n"
17660
"START=yes\n"
17661
msgstr ""
17662
17663
#: serverguide/C/mail.xml:625(para)
17664
msgid ""
17665
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
17666
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
17667
"service:"
17668
msgstr ""
17669
17670
#: serverguide/C/mail.xml:630(command)
17671
msgid "sudo adduser Debian-exim sasl"
17672
msgstr ""
17673
17674
#: serverguide/C/mail.xml:632(para)
17675
msgid "Now start the <application>saslauthd</application> service:"
17676
msgstr ""
17677
17678
#: serverguide/C/mail.xml:636(command)
17679
msgid "sudo /etc/init.d/saslauthd start"
17680
msgstr ""
17681
17682
#: serverguide/C/mail.xml:638(para)
17683
msgid ""
17684
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
17685
"and SASL authentication."
17686
msgstr ""
17687
17688
#: serverguide/C/mail.xml:647(para)
17689
msgid ""
17690
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
17691
"information."
17692
msgstr ""
17693
17694
#: serverguide/C/mail.xml:652(para)
17695
msgid ""
17696
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
17697
"server\">Exim4 Book</ulink> available."
17698
msgstr ""
17699
17700
#: serverguide/C/mail.xml:657(para)
17701
msgid ""
17702
"Another resource is the <ulink "
17703
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
17704
"page."
17705
msgstr ""
17706
17707
#: serverguide/C/mail.xml:666(title)
17708
msgid "Dovecot Server"
17709
msgstr ""
17710
17711
#: serverguide/C/mail.xml:667(para)
17712
msgid ""
17713
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
17714
"security primarily in mind. It supports the major mailbox formats: mbox or "
17715
"Maildir. This section explain how to set it up as an imap or pop3 server."
17716
msgstr ""
17717
17718
#: serverguide/C/mail.xml:675(para)
17719
msgid ""
17720
"To install <application>dovecot</application>, run the following command in "
17721
"the command prompt:"
17722
msgstr ""
17723
17724
#: serverguide/C/mail.xml:680(command)
17725
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
17726
msgstr ""
17727
17728
#: serverguide/C/mail.xml:685(para)
17729
msgid ""
17730
"To configure <application>dovecot</application>, you can edit the file "
17731
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
17732
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
17733
"secure). A description of these protocols is beyond the scope of this guide. "
17734
"For further information, refer to the Wikipedia articles on <ulink "
17735
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
17736
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
17737
"link>."
17738
msgstr ""
17739
17740
#: serverguide/C/mail.xml:695(para)
17741
msgid ""
17742
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
17743
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
17744
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
17745
msgstr ""
17746
17747
#: serverguide/C/mail.xml:701(programlisting)
17748
#, no-wrap
17749
msgid ""
17750
"\n"
17751
"protocols = pop3 pop3s imap imaps\n"
17752
msgstr ""
17753
17754
#: serverguide/C/mail.xml:704(para)
17755
msgid ""
17756
"Next, choose the mailbox you would like to use. "
17757
"<application>Dovecot</application> supports <emphasis "
17758
"role=\"strong\">maildir</emphasis> and <emphasis "
17759
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
17760
"mailbox formats. They both have their own benefits and are discussed on "
17761
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
17762
"site</ulink>."
17763
msgstr ""
17764
17765
#: serverguide/C/mail.xml:712(para)
17766
msgid ""
17767
"Once you have chosen your mailbox type, edit the file "
17768
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
17769
msgstr ""
17770
17771
#: serverguide/C/mail.xml:717(programlisting)
17772
#, no-wrap
17773
msgid ""
17774
"\n"
17775
"mail_location = maildir:~/Maildir # (for maildir)\n"
17776
"or\n"
17777
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
17778
msgstr ""
17779
17780
#: serverguide/C/mail.xml:723(para)
17781
msgid ""
17782
"You should configure your Mail Transport Agent (MTA) to transfer the "
17783
"incoming mail to this type of mailbox if it is different from the one you "
17784
"have configured."
17785
msgstr ""
17786
17787
#: serverguide/C/mail.xml:729(para)
17788
msgid ""
17789
"Once you have configured dovecot, restart the "
17790
"<application>dovecot</application> daemon in order to test your setup:"
17791
msgstr ""
17792
17793
#: serverguide/C/mail.xml:738(para)
17794
msgid ""
17795
"If you have enabled imap, or pop3, you can also try to log in with the "
17796
"commands <command>telnet localhost pop3</command> or <command>telnet "
17797
"localhost imap2</command>. If you see something like the following, the "
17798
"installation has been successful:"
17799
msgstr ""
17800
17801
#: serverguide/C/mail.xml:745(programlisting)
17802
#, no-wrap
17803
msgid ""
17804
"\n"
17805
"bhuvan@rainbow:~$ telnet localhost pop3\n"
17806
"Trying 127.0.0.1...\n"
17807
"Connected to localhost.localdomain.\n"
17808
"Escape character is '^]'.\n"
17809
"+OK Dovecot ready.\n"
17810
msgstr ""
17811
17812
#: serverguide/C/mail.xml:754(title)
17813
msgid "Dovecot SSL Configuration"
17814
msgstr ""
17815
17816
#: serverguide/C/mail.xml:755(para)
17817
msgid ""
17818
"To configure <application>dovecot</application> to use SSL, you can edit the "
17819
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
17820
"lines:"
17821
msgstr ""
17822
17823
#: serverguide/C/mail.xml:760(programlisting)
17824
#, no-wrap
17825
msgid ""
17826
"\n"
17827
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
17828
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
17829
"ssl_disable = no\n"
17830
"disable_plaintext_auth = no\n"
17831
msgstr ""
17832
17833
#: serverguide/C/mail.xml:766(para)
17834
msgid ""
17835
"You can get the SSL certificate from a Certificate Issuing Authority or you "
17836
"can create self signed SSL certificate. The latter is a good option for "
17837
"email, because SMTP clients rarely complain about \"self-signed "
17838
"certificates\". Please refer to <xref linkend=\"certificates-and-"
17839
"security\"/> for details about how to create self signed SSL certificate. "
17840
"Once you create the certificate, you will have a key file and a certificate "
17841
"file. Please copy them to the location pointed in the "
17842
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
17843
msgstr ""
17844
17845
#: serverguide/C/mail.xml:781(title)
17846
msgid "Firewall Configuration for an Email Server"
17847
msgstr ""
17848
17849
#: serverguide/C/mail.xml:787(para)
17850
msgid "IMAP - 143"
17851
msgstr ""
17852
17853
#: serverguide/C/mail.xml:788(para)
17854
msgid "IMAPS - 993"
17855
msgstr ""
17856
17857
#: serverguide/C/mail.xml:789(para)
17858
msgid "POP3 - 110"
17859
msgstr ""
17860
17861
#: serverguide/C/mail.xml:790(para)
17862
msgid "POP3S - 995"
17863
msgstr ""
17864
17865
#: serverguide/C/mail.xml:782(para)
17866
msgid ""
17867
"To access your mail server from another computer, you must configure your "
17868
"firewall to allow connections to the server on the necessary ports. "
17869
"<placeholder-1/>"
17870
msgstr ""
17871
17872
#: serverguide/C/mail.xml:799(para)
17873
msgid ""
17874
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
17875
"more information."
17876
msgstr ""
17877
17878
#: serverguide/C/mail.xml:804(para)
17879
msgid ""
17880
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
17881
"Ubuntu Wiki</ulink> page has more details."
17882
msgstr ""
17883
17884
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
17885
msgid "Mailman"
17886
msgstr ""
17887
17888
#: serverguide/C/mail.xml:814(para)
17889
msgid ""
17890
"Mailman is an open source program for managing electronic mail discussions "
17891
"and e-newsletter lists. Many open source mailing lists (including all the "
17892
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
17893
"Mailman as their mailing list software. It is powerful and easy to install "
17894
"and maintain."
17895
msgstr ""
17896
17897
#: serverguide/C/mail.xml:824(para)
17898
msgid ""
17899
"Mailman provides a web interface for the administrators and users, using an "
17900
"external mail server to send and receive emails. It works perfectly with the "
17901
"following mail servers:"
17902
msgstr ""
17903
17904
#: serverguide/C/mail.xml:835(application)
17905
msgid "Exim"
17906
msgstr ""
17907
17908
#: serverguide/C/mail.xml:838(application)
17909
msgid "Sendmail"
17910
msgstr ""
17911
17912
#: serverguide/C/mail.xml:841(application)
17913
msgid "Qmail"
17914
msgstr ""
17915
17916
#: serverguide/C/mail.xml:846(para)
17917
msgid ""
17918
"We will see how to install and configure Mailman with, the Apache web "
17919
"server, and either the Postfix or Exim mail server. If you wish to install "
17920
"Mailman with a different mail server, please refer to the references section."
17921
msgstr ""
17922
17923
#: serverguide/C/mail.xml:853(para)
17924
msgid ""
17925
"You only need to install one mail server and "
17926
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
17927
msgstr ""
17928
17929
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
17930
msgid "Apache2"
17931
msgstr ""
17932
17933
#: serverguide/C/mail.xml:859(para)
17934
msgid ""
17935
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
17936
"installation\">HTTPD Installation</ulink> section for details."
17937
msgstr ""
17938
17939
#: serverguide/C/mail.xml:867(para)
17940
msgid ""
17941
"For instructions on installing and configuring Postfix refer to <xref "
17942
"linkend=\"postfix\"/>"
17943
msgstr ""
17944
17945
#: serverguide/C/mail.xml:873(para)
17946
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
17947
msgstr ""
17948
17949
#: serverguide/C/mail.xml:884(application)
17950
msgid "dc_use_split_config='true'"
17951
msgstr ""
17952
17953
#: serverguide/C/mail.xml:876(para)
17954
msgid ""
17955
"Once exim4 is installed, the configuration files are stored in the "
17956
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
17957
"configuration files are split across different files. You can change this "
17958
"behavior by changing the following variable in the "
17959
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
17960
msgstr ""
17961
17962
#: serverguide/C/mail.xml:891(para)
17963
msgid ""
17964
"To install <application>Mailman</application>, run following command at a "
17965
"terminal prompt:"
17966
msgstr ""
17967
17968
#: serverguide/C/mail.xml:895(command)
17969
msgid "sudo apt-get install mailman"
17970
msgstr ""
17971
17972
#: serverguide/C/mail.xml:897(para)
17973
msgid ""
17974
"It copies the installation files in "
17975
"<application>/var/lib/mailman</application> directory. It installs the CGI "
17976
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
17977
"creates <emphasis>list</emphasis> linux user. It creates the "
17978
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
17979
"this user."
17980
msgstr ""
17981
17982
#: serverguide/C/mail.xml:909(para)
17983
msgid ""
17984
"This section assumes you have successfully installed "
17985
"<application>mailman</application>, <application>apache2</application>, and "
17986
"<application>postfix</application> or <application>exim4</application>. Now "
17987
"you just need to configure them."
17988
msgstr ""
17989
17990
#: serverguide/C/mail.xml:918(para)
17991
msgid ""
17992
"An example Apache configuration file comes with "
17993
"<application>Mailman</application> and is placed in "
17994
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
17995
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
17996
"available</filename>:"
17997
msgstr ""
17998
17999
#: serverguide/C/mail.xml:924(command)
18000
msgid ""
18001
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18002
msgstr ""
18003
18004
#: serverguide/C/mail.xml:926(para)
18005
msgid ""
18006
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18007
"Mailman administration site. Now enable the new configuration and restart "
18008
"Apache:"
18009
msgstr ""
18010
18011
#: serverguide/C/mail.xml:931(command)
18012
msgid "sudo a2ensite mailman.conf"
18013
msgstr ""
18014
18015
#: serverguide/C/mail.xml:934(para)
18016
msgid ""
18017
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18018
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18019
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18020
"can make changes to the <filename>/etc/apache2/sites-"
18021
"available/mailman.conf</filename> file if you wish to change this behavior."
18022
msgstr ""
18023
18024
#: serverguide/C/mail.xml:945(para)
18025
msgid ""
18026
"For <application>Postfix</application> integration, we will associate the "
18027
"domain lists.example.com with the mailing lists. Please replace "
18028
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18029
msgstr ""
18030
18031
#: serverguide/C/mail.xml:949(para)
18032
msgid ""
18033
"You can use the postconf command to add the necessary configuration to "
18034
"<filename>/etc/postfix/main.cf</filename>:"
18035
msgstr ""
18036
18037
#: serverguide/C/mail.xml:953(command)
18038
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18039
msgstr ""
18040
18041
#: serverguide/C/mail.xml:954(command)
18042
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18043
msgstr ""
18044
18045
#: serverguide/C/mail.xml:955(command)
18046
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18047
msgstr ""
18048
18049
#: serverguide/C/mail.xml:957(para)
18050
msgid ""
18051
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18052
"the following transport:"
18053
msgstr ""
18054
18055
#: serverguide/C/mail.xml:960(programlisting)
18056
#, no-wrap
18057
msgid ""
18058
"\n"
18059
"mailman unix - n n - - pipe\n"
18060
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18061
" ${nexthop} ${user}\n"
18062
msgstr ""
18063
18064
#: serverguide/C/mail.xml:965(para)
18065
msgid ""
18066
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18067
"is delivered to a list."
18068
msgstr ""
18069
18070
#: serverguide/C/mail.xml:968(para)
18071
msgid ""
18072
"Associate the domain lists.example.com to the Mailman transport with the "
18073
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18074
msgstr ""
18075
18076
#: serverguide/C/mail.xml:971(programlisting)
18077
#, no-wrap
18078
msgid ""
18079
"\n"
18080
"lists.example.com mailman:\n"
18081
msgstr ""
18082
18083
#: serverguide/C/mail.xml:974(para)
18084
msgid ""
18085
"Now have <application>Postfix</application> build the transport map by "
18086
"entering the following from a terminal prompt:"
18087
msgstr ""
18088
18089
#: serverguide/C/mail.xml:978(command)
18090
msgid "sudo postmap -v /etc/postfix/transport"
18091
msgstr ""
18092
18093
#: serverguide/C/mail.xml:980(para)
18094
msgid "Then restart Postfix to enable the new configurations:"
18095
msgstr ""
18096
18097
#: serverguide/C/mail.xml:989(para)
18098
msgid ""
18099
"Once Exim4 is installed, you can start the Exim server using the following "
18100
"command from a terminal prompt:"
18101
msgstr ""
18102
18103
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18104
msgid "Main"
18105
msgstr ""
18106
18107
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18108
msgid "Transport"
18109
msgstr ""
18110
18111
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18112
msgid "Router"
18113
msgstr ""
18114
18115
#: serverguide/C/mail.xml:996(para)
18116
msgid ""
18117
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18118
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18119
"different types. For details, please refer to the <ulink "
18120
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18121
"add new a configuration file to the following configuration types: "
18122
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18123
"these mini configuration files. So, the order of these configuration files "
18124
"is very important."
18125
msgstr ""
18126
18127
#: serverguide/C/mail.xml:1027(programlisting)
18128
#, no-wrap
18129
msgid ""
18130
"\n"
18131
"# start\n"
18132
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18133
"# directory.\n"
18134
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18135
"# This is normally the same as ~mailman\n"
18136
"MM_HOME=/var/lib/mailman\n"
18137
"#\n"
18138
"# User and group for Mailman, should match your --with-mail-gid\n"
18139
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18140
"MM_UID=list\n"
18141
"MM_GID=list\n"
18142
"#\n"
18143
"# Domains that your lists are in - colon separated list\n"
18144
"# you may wish to add these into local_domains as well\n"
18145
"domainlist mm_domains=hostname.com\n"
18146
"#\n"
18147
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18148
"#\n"
18149
"# These values are derived from the ones above and should not need\n"
18150
"# editing unless you have munged your mailman installation\n"
18151
"#\n"
18152
"# The path of the Mailman mail wrapper script\n"
18153
"MM_WRAP=MM_HOME/mail/mailman\n"
18154
"#\n"
18155
"# The path of the list config file (used as a required file when\n"
18156
"# verifying list addresses)\n"
18157
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18158
"# end\n"
18159
msgstr ""
18160
18161
#: serverguide/C/mail.xml:1021(para)
18162
msgid ""
18163
"All the configuration files belonging to the main type are stored in the "
18164
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18165
"following content to a new file, named <filename>04_exim4-"
18166
"config_mailman</filename>: <placeholder-1/>"
18167
msgstr ""
18168
18169
#: serverguide/C/mail.xml:1067(programlisting)
18170
#, no-wrap
18171
msgid ""
18172
"\n"
18173
" mailman_transport:\n"
18174
" driver = pipe\n"
18175
" command = MM_WRAP \\\n"
18176
" '${if def:local_part_suffix \\\n"
18177
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18178
"\\\n"
18179
" {post}}' \\\n"
18180
" $local_part\n"
18181
" current_directory = MM_HOME\n"
18182
" home_directory = MM_HOME\n"
18183
" user = MM_UID\n"
18184
" group = MM_GID\n"
18185
msgstr ""
18186
18187
#: serverguide/C/mail.xml:1061(para)
18188
msgid ""
18189
"All the configuration files belonging to transport type are stored in the "
18190
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18191
"following content to a new file named <filename> 40_exim4-"
18192
"config_mailman</filename>: <placeholder-1/>"
18193
msgstr ""
18194
18195
#: serverguide/C/mail.xml:1088(programlisting)
18196
#, no-wrap
18197
msgid ""
18198
"\n"
18199
" mailman_router:\n"
18200
" driver = accept\n"
18201
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18202
" local_part_suffix_optional\n"
18203
" local_part_suffix = -bounces : -bounces+* : \\\n"
18204
" -confirm+* : -join : -leave : \\\n"
18205
" -owner : -request : -admin\n"
18206
" transport = mailman_transport\n"
18207
msgstr ""
18208
18209
#: serverguide/C/mail.xml:1084(para)
18210
msgid ""
18211
"All the configuration files belonging to router type are stored in the "
18212
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18213
"following content in to a new file named <filename>101_exim4-"
18214
"config_mailman</filename>: <placeholder-1/>"
18215
msgstr ""
18216
18217
#: serverguide/C/mail.xml:1101(para)
18218
msgid ""
18219
"The order of main and transport configuration files can be in any order. "
18220
"But, the order of router configuration files must be the same. This "
18221
"particular file must appear before the <application>200_exim4-"
18222
"config_primary</application> file. These two configuration files contain "
18223
"same type of information. The first file takes the precedence. For more "
18224
"details, please refer to the references section."
18225
msgstr ""
18226
18227
#: serverguide/C/mail.xml:1114(para)
18228
msgid ""
18229
"Once mailman is installed, you can run it using the following command:"
18230
msgstr ""
18231
18232
#: serverguide/C/mail.xml:1118(command)
18233
msgid "sudo /etc/init.d/mailman start"
18234
msgstr ""
18235
18236
#: serverguide/C/mail.xml:1120(para)
18237
msgid ""
18238
"Once mailman is installed, you should create the default mailing list. Run "
18239
"the following command to create the mailing list:"
18240
msgstr ""
18241
18242
#: serverguide/C/mail.xml:1126(command)
18243
msgid "sudo /usr/sbin/newlist mailman"
18244
msgstr ""
18245
18246
#: serverguide/C/mail.xml:1129(programlisting)
18247
#, no-wrap
18248
msgid ""
18249
"\n"
18250
" Enter the email address of the person running the list: bhuvan at "
18251
"ubuntu.com\n"
18252
" Initial mailman password:\n"
18253
" To finish creating your mailing list, you must edit your "
18254
"<filename>/etc/aliases</filename> (or\n"
18255
" equivalent) file by adding the following lines, and possibly running the\n"
18256
" `newaliases' program:\n"
18257
"\n"
18258
" ## mailman mailing list\n"
18259
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18260
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18261
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18262
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18263
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18264
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18265
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18266
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18267
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18268
"mailman\"\n"
18269
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18270
"mailman\"\n"
18271
"\n"
18272
" Hit enter to notify mailman owner...\n"
18273
"\n"
18274
" # \n"
18275
msgstr ""
18276
18277
#: serverguide/C/mail.xml:1152(para)
18278
msgid ""
18279
"We have configured either Postfix or Exim4 to recognize all emails from "
18280
"mailman. So, it is not mandatory to make any new entries in "
18281
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18282
"configuration files, please ensure that you restart those services before "
18283
"continuing to next section."
18284
msgstr ""
18285
18286
#: serverguide/C/mail.xml:1160(para)
18287
msgid ""
18288
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18289
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18290
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18291
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18292
msgstr ""
18293
18294
#: serverguide/C/mail.xml:1171(title)
18295
msgid "Administration"
18296
msgstr ""
18297
18298
#: serverguide/C/mail.xml:1172(para)
18299
msgid ""
18300
"We assume you have a default installation. The mailman cgi scripts are still "
18301
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18302
"Mailman provides a web based administration facility. To access this page, "
18303
"point your browser to the following url:"
18304
msgstr ""
18305
18306
#: serverguide/C/mail.xml:1180(para)
18307
msgid "http://hostname/cgi-bin/mailman/admin"
18308
msgstr ""
18309
18310
#: serverguide/C/mail.xml:1184(para)
18311
msgid ""
18312
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18313
"screen. If you click the mailing list name, it will ask for your "
18314
"authentication password. If you enter the correct password, you will be able "
18315
"to change administrative settings of this mailing list. You can create a new "
18316
"mailing list using the command line utility "
18317
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18318
"mailing list using the web interface."
18319
msgstr ""
18320
18321
#: serverguide/C/mail.xml:1197(title)
18322
msgid "Users"
18323
msgstr ""
18324
18325
#: serverguide/C/mail.xml:1198(para)
18326
msgid ""
18327
"Mailman provides a web based interface for users. To access this page, point "
18328
"your browser to the following url:"
18329
msgstr ""
18330
18331
#: serverguide/C/mail.xml:1203(para)
18332
msgid "http://hostname/cgi-bin/mailman/listinfo"
18333
msgstr ""
18334
18335
#: serverguide/C/mail.xml:1207(para)
18336
msgid ""
18337
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18338
"screen. If you click the mailing list name, it will display the subscription "
18339
"form. You can enter your email address, name (optional), and password to "
18340
"subscribe. An email invitation will be sent to you. You can follow the "
18341
"instructions in the email to subscribe."
18342
msgstr ""
18343
18344
#: serverguide/C/mail.xml:1219(ulink)
18345
msgid "GNU Mailman - Installation Manual"
18346
msgstr ""
18347
18348
#: serverguide/C/mail.xml:1223(ulink)
18349
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18350
msgstr ""
18351
18352
#: serverguide/C/mail.xml:1226(para)
18353
msgid ""
18354
"Also, see the <ulink "
18355
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18356
"Wiki</ulink> page."
18357
msgstr ""
18358
18359
#: serverguide/C/mail.xml:1232(title)
18360
msgid "Mail Filtering"
18361
msgstr ""
18362
18363
#: serverguide/C/mail.xml:1233(para)
18364
msgid ""
18365
"One of the largest issues with email today is the problem of Unsolicited "
18366
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18367
"and other forms of malware. According to some reports these messages make up "
18368
"the bulk of all email traffic on the Internet."
18369
msgstr ""
18370
18371
#: serverguide/C/mail.xml:1238(para)
18372
msgid ""
18373
"This section will cover integrating <application>Amavisd-new</application>, "
18374
"<application>Spamassassin</application>, and "
18375
"<application>ClamAV</application> with the "
18376
"<application>Postfix</application> Mail Transport Agent (MTA). "
18377
"<application>Postfix</application> can also check email validity by passing "
18378
"it through external content filters. These filters can sometimes determine "
18379
"if a message is spam without needing to process it with more resource "
18380
"intensive applications. Two common filters are <application>dkim-"
18381
"filter</application> and <application>python-policyd-spf</application>."
18382
msgstr ""
18383
18384
#: serverguide/C/mail.xml:1248(para)
18385
msgid ""
18386
"<application>Amavisd-new</application> is a wrapper program that can call "
18387
"any number of content filtering programs for spam detection, antivirus, etc."
18388
msgstr ""
18389
18390
#: serverguide/C/mail.xml:1254(para)
18391
msgid ""
18392
"<application>Spamassassin</application> uses a variety of mechanisms to "
18393
"filter email based on the message content."
18394
msgstr ""
18395
18396
#: serverguide/C/mail.xml:1259(para)
18397
msgid ""
18398
"<application>ClamAV</application> is an open source antivirus application."
18399
msgstr ""
18400
18401
#: serverguide/C/mail.xml:1264(para)
18402
msgid ""
18403
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18404
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18405
msgstr ""
18406
18407
#: serverguide/C/mail.xml:1270(para)
18408
msgid ""
18409
"<application>python-policyd-spf</application> enables Sender Policy "
18410
"Framework (SPF) checking with <application>Postfix</application>."
18411
msgstr ""
18412
18413
#: serverguide/C/mail.xml:1275(para)
18414
msgid "This is how the pieces fit together:"
18415
msgstr ""
18416
18417
#: serverguide/C/mail.xml:1280(para)
18418
msgid "An email message is accepted by <application>Postfix</application>."
18419
msgstr ""
18420
18421
#: serverguide/C/mail.xml:1285(para)
18422
msgid ""
18423
"The message is passed through any external filters <application>dkim-"
18424
"filter</application> and <application>python-policyd-spf</application> in "
18425
"this case."
18426
msgstr ""
18427
18428
#: serverguide/C/mail.xml:1291(para)
18429
msgid "<application>Amavisd-new</application> then processes the message."
18430
msgstr ""
18431
18432
#: serverguide/C/mail.xml:1296(para)
18433
msgid ""
18434
"<application>ClamAV</application> is used to scan the message. If the "
18435
"message contains a virus <application>Postfix</application> will reject the "
18436
"message."
18437
msgstr ""
18438
18439
#: serverguide/C/mail.xml:1302(para)
18440
msgid ""
18441
"Clean messages will then be analyzed by "
18442
"<application>Spamassassin</application> to find out if the message is spam. "
18443
"<application>Spamassassin</application> will then add X-Header lines "
18444
"allowing <application>Amavisd-new</application> to further manipulate the "
18445
"message."
18446
msgstr ""
18447
18448
#: serverguide/C/mail.xml:1309(para)
18449
msgid ""
18450
"For example, if a message has a Spam score of over fifty the message could "
18451
"be automatically dropped from the queue without the recipient ever having to "
18452
"be bothered. Another, way to handle flagged messages is to deliver them to "
18453
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18454
"see fit."
18455
msgstr ""
18456
18457
#: serverguide/C/mail.xml:1316(para)
18458
msgid ""
18459
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18460
"configuring Postfix."
18461
msgstr ""
18462
18463
#: serverguide/C/mail.xml:1319(para)
18464
msgid ""
18465
"To install the rest of the applications enter the following from a terminal "
18466
"prompt:"
18467
msgstr ""
18468
18469
#: serverguide/C/mail.xml:1323(command)
18470
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18471
msgstr ""
18472
18473
#: serverguide/C/mail.xml:1324(command)
18474
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18475
msgstr ""
18476
18477
#: serverguide/C/mail.xml:1326(para)
18478
msgid ""
18479
"There are some optional packages that integrate with "
18480
"<application>Spamassassin</application> for better spam detection:"
18481
msgstr ""
18482
18483
#: serverguide/C/mail.xml:1330(command)
18484
msgid "sudo apt-get install pyzor razor"
18485
msgstr ""
18486
18487
#: serverguide/C/mail.xml:1332(para)
18488
msgid ""
18489
"Along with the main filtering applications compression utilities are needed "
18490
"to process some email attachments:"
18491
msgstr ""
18492
18493
#: serverguide/C/mail.xml:1336(command)
18494
msgid ""
18495
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18496
msgstr ""
18497
18498
#: serverguide/C/mail.xml:1339(para)
18499
msgid ""
18500
"If some packages are not found, check that the "
18501
"<emphasis>multiverse</emphasis> repository is enabled in "
18502
"<filename>/etc/apt/sources.list</filename>"
18503
msgstr ""
18504
18505
#: serverguide/C/mail.xml:1340(para)
18506
msgid ""
18507
"If you make changes to the file, be sure to run <command>sudo apt-get "
18508
"update</command> before trying to install again."
18509
msgstr ""
18510
18511
#: serverguide/C/mail.xml:1345(para)
18512
msgid "Now configure everything to work together and filter email."
18513
msgstr ""
18514
18515
#: serverguide/C/mail.xml:1349(title)
18516
msgid "ClamAV"
18517
msgstr ""
18518
18519
#: serverguide/C/mail.xml:1350(para)
18520
msgid ""
18521
"The default behaviour of <application>ClamAV</application> will fit our "
18522
"needs. For more ClamAV configuration options, check the configuration files "
18523
"in <filename>/etc/clamav</filename>."
18524
msgstr ""
18525
18526
#: serverguide/C/mail.xml:1355(para)
18527
msgid ""
18528
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18529
"group in order for <application>Amavisd-new</application> to have the "
18530
"appropriate access to scan files:"
18531
msgstr ""
18532
18533
#: serverguide/C/mail.xml:1360(command)
18534
msgid "sudo adduser clamav amavis"
18535
msgstr ""
18536
18537
#: serverguide/C/mail.xml:1364(title)
18538
msgid "Spamassassin"
18539
msgstr ""
18540
18541
#: serverguide/C/mail.xml:1365(para)
18542
msgid ""
18543
"Spamassassin automatically detects optional components and will use them if "
18544
"they are present. This means that there is no need to configure "
18545
"<application>pyzor</application> and <application>razor</application>."
18546
msgstr ""
18547
18548
#: serverguide/C/mail.xml:1369(para)
18549
msgid ""
18550
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18551
"<application>Spamassassin</application> daemon. Change "
18552
"<emphasis>ENABLED=0</emphasis> to:"
18553
msgstr ""
18554
18555
#: serverguide/C/mail.xml:1373(programlisting)
18556
#, no-wrap
18557
msgid ""
18558
"\n"
18559
"ENABLED=1\n"
18560
msgstr ""
18561
18562
#: serverguide/C/mail.xml:1376(para)
18563
msgid "Now start the daemon:"
18564
msgstr ""
18565
18566
#: serverguide/C/mail.xml:1380(command)
18567
msgid "sudo /etc/init.d/spamassassin start"
18568
msgstr ""
18569
18570
#: serverguide/C/mail.xml:1384(title)
18571
msgid "Amavisd-new"
18572
msgstr ""
18573
18574
#: serverguide/C/mail.xml:1385(para)
18575
msgid ""
18576
"First activate spam and antivirus detection in <application>Amavisd-"
18577
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18578
"content_filter_mode</filename>:"
18579
msgstr ""
18580
18581
#: serverguide/C/mail.xml:1389(programlisting)
18582
#, no-wrap
18583
msgid ""
18584
"\n"
18585
"use strict;\n"
18586
"\n"
18587
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
18588
"# and to re-enable antivirus checking.\n"
18589
"\n"
18590
"#\n"
18591
"# Default antivirus checking mode\n"
18592
"# Uncomment the two lines below to enable it\n"
18593
"#\n"
18594
"\n"
18595
"@bypass_virus_checks_maps = (\n"
18596
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
18597
"$bypass_virus_checks_re);\n"
18598
"\n"
18599
"\n"
18600
"#\n"
18601
"# Default SPAM checking mode\n"
18602
"# Uncomment the two lines below to enable it\n"
18603
"#\n"
18604
"\n"
18605
"@bypass_spam_checks_maps = (\n"
18606
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
18607
"$bypass_spam_checks_re);\n"
18608
"\n"
18609
"1; # insure a defined return\n"
18610
msgstr ""
18611
18612
#: serverguide/C/mail.xml:1414(para)
18613
msgid ""
18614
"Bouncing spam can be a bad idea as the return address is often faked. "
18615
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
18616
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
18617
"D_BOUNCE, as follows:"
18618
msgstr ""
18619
18620
#: serverguide/C/mail.xml:1420(programlisting)
18621
#, no-wrap
18622
msgid ""
18623
"\n"
18624
"$final_spam_destiny = D_DISCARD;\n"
18625
msgstr ""
18626
18627
#: serverguide/C/mail.xml:1424(para)
18628
msgid ""
18629
"Additionally, you may want to adjust the following options to flag more "
18630
"messages as spam:"
18631
msgstr ""
18632
18633
#: serverguide/C/mail.xml:1428(programlisting)
18634
#, no-wrap
18635
msgid ""
18636
"\n"
18637
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
18638
"level\n"
18639
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
18640
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
18641
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
18642
msgstr ""
18643
18644
#: serverguide/C/mail.xml:1435(para)
18645
msgid ""
18646
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
18647
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
18648
"option. Also, if the server receives mail for multiple domains the "
18649
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
18650
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
18651
msgstr ""
18652
18653
#: serverguide/C/mail.xml:1442(programlisting)
18654
#, no-wrap
18655
msgid ""
18656
"\n"
18657
"$myhostname = 'mail.example.com';\n"
18658
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
18659
msgstr ""
18660
18661
#: serverguide/C/mail.xml:1447(para)
18662
msgid ""
18663
"After configuration <application>Amavisd-new</application> needs to be "
18664
"restarted:"
18665
msgstr ""
18666
18667
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
18668
msgid "sudo /etc/init.d/amavis restart"
18669
msgstr ""
18670
18671
#: serverguide/C/mail.xml:1454(title)
18672
msgid "DKIM Whitelist"
18673
msgstr ""
18674
18675
#: serverguide/C/mail.xml:1456(para)
18676
msgid ""
18677
"<application>Amavisd-new</application> can be configured to automatically "
18678
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
18679
"Keys. There are some pre-configured domains in the "
18680
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
18681
msgstr ""
18682
18683
#: serverguide/C/mail.xml:1462(para)
18684
msgid "There are multiple ways to configure the Whitelist for a domain:"
18685
msgstr ""
18686
18687
#: serverguide/C/mail.xml:1468(para)
18688
msgid ""
18689
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18690
"address from the \"example.com\" domain."
18691
msgstr ""
18692
18693
#: serverguide/C/mail.xml:1473(para)
18694
msgid ""
18695
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18696
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
18697
"have a valid signature."
18698
msgstr ""
18699
18700
#: serverguide/C/mail.xml:1479(para)
18701
msgid ""
18702
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
18703
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
18704
"role=\"italic\">example.com</emphasis> the parent domain."
18705
msgstr ""
18706
18707
#: serverguide/C/mail.xml:1485(para)
18708
msgid ""
18709
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
18710
"that have a valid signature from \"example.com\". This is usually used for "
18711
"discussion groups that sign thier messages."
18712
msgstr ""
18713
18714
#: serverguide/C/mail.xml:1492(para)
18715
msgid ""
18716
"A domain can also have multiple Whitelist configurations. After, editing the "
18717
"file restart <application>amaisd-new</application>:"
18718
msgstr ""
18719
18720
#: serverguide/C/mail.xml:1501(para)
18721
msgid ""
18722
"In this context, once a domain has been added to the Whitelist the message "
18723
"will not receive any anti-virus or spam filtering. This may or may not be "
18724
"the intended behavior you wish for a domain."
18725
msgstr ""
18726
18727
#: serverguide/C/mail.xml:1511(para)
18728
msgid ""
18729
"For <application>Postfix</application> integration, enter the following from "
18730
"a terminal prompt:"
18731
msgstr ""
18732
18733
#: serverguide/C/mail.xml:1515(command)
18734
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
18735
msgstr ""
18736
18737
#: serverguide/C/mail.xml:1517(para)
18738
msgid ""
18739
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
18740
"to the end of the file:"
18741
msgstr ""
18742
18743
#: serverguide/C/mail.xml:1520(programlisting)
18744
#, no-wrap
18745
msgid ""
18746
"\n"
18747
"smtp-amavis unix - - - - 2 smtp\n"
18748
" -o smtp_data_done_timeout=1200\n"
18749
" -o smtp_send_xforward_command=yes\n"
18750
" -o disable_dns_lookups=yes\n"
18751
" -o max_use=20\n"
18752
"\n"
18753
"127.0.0.1:10025 inet n - - - - smtpd\n"
18754
" -o content_filter=\n"
18755
" -o local_recipient_maps=\n"
18756
" -o relay_recipient_maps=\n"
18757
" -o smtpd_restriction_classes=\n"
18758
" -o smtpd_delay_reject=no\n"
18759
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
18760
" -o smtpd_helo_restrictions=\n"
18761
" -o smtpd_sender_restrictions=\n"
18762
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
18763
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
18764
" -o smtpd_end_of_data_restrictions=\n"
18765
" -o mynetworks=127.0.0.0/8\n"
18766
" -o smtpd_error_sleep_time=0\n"
18767
" -o smtpd_soft_error_limit=1001\n"
18768
" -o smtpd_hard_error_limit=1000\n"
18769
" -o smtpd_client_connection_count_limit=0\n"
18770
" -o smtpd_client_connection_rate_limit=0\n"
18771
" -o "
18772
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
18773
msgstr ""
18774
18775
#: serverguide/C/mail.xml:1547(para)
18776
msgid ""
18777
"Also add the following two lines immediately below the "
18778
"<emphasis>\"pickup\"</emphasis> transport service:"
18779
msgstr ""
18780
18781
#: serverguide/C/mail.xml:1550(programlisting)
18782
#, no-wrap
18783
msgid ""
18784
"\n"
18785
" -o content_filter=\n"
18786
" -o receive_override_options=no_header_body_checks\n"
18787
msgstr ""
18788
18789
#: serverguide/C/mail.xml:1554(para)
18790
msgid ""
18791
"This will prevent messages that are generated to report on spam from being "
18792
"classified as spam."
18793
msgstr ""
18794
18795
#: serverguide/C/mail.xml:1557(para)
18796
msgid "Now restart <application>Postfix</application>:"
18797
msgstr ""
18798
18799
#: serverguide/C/mail.xml:1563(para)
18800
msgid "Content filtering with spam and virus detection is now enabled."
18801
msgstr ""
18802
18803
#: serverguide/C/mail.xml:1570(para)
18804
msgid ""
18805
"First, test that the <application>Amavisd-new</application> SMTP is "
18806
"listening:"
18807
msgstr ""
18808
18809
#: serverguide/C/mail.xml:1573(programlisting)
18810
#, no-wrap
18811
msgid ""
18812
"\n"
18813
"telnet localhost 10024\n"
18814
"Trying 127.0.0.1...\n"
18815
"Connected to localhost.\n"
18816
"Escape character is '^]'.\n"
18817
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
18818
"^]\n"
18819
msgstr ""
18820
18821
#: serverguide/C/mail.xml:1581(para)
18822
msgid ""
18823
"In the Header of messages that go through the content filter you should see:"
18824
msgstr ""
18825
18826
#: serverguide/C/mail.xml:1584(programlisting)
18827
#, no-wrap
18828
msgid ""
18829
"\n"
18830
"X-Spam-Level: \n"
18831
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
18832
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
18833
"BAYES_00\n"
18834
"X-Spam-Level: \n"
18835
msgstr ""
18836
18837
#: serverguide/C/mail.xml:1591(para)
18838
msgid ""
18839
"Your output will vary, but the important thing is that there are <emphasis>X-"
18840
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
18841
msgstr ""
18842
18843
#: serverguide/C/mail.xml:1599(para)
18844
msgid ""
18845
"The best way to figure out why something is going wrong is to check the log "
18846
"files."
18847
msgstr ""
18848
18849
#: serverguide/C/mail.xml:1604(para)
18850
msgid ""
18851
"For instructions on <application>Postfix</application> logging see the <xref "
18852
"linkend=\"postfix-troubleshooting\"/> section."
18853
msgstr ""
18854
18855
#: serverguide/C/mail.xml:1610(para)
18856
msgid ""
18857
"<application>Amavisd-new</application> uses "
18858
"<application>Syslog</application> to send messages to "
18859
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
18860
"increased by adding the <emphasis>$log_level</emphasis> option to "
18861
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
18862
"1 to 5."
18863
msgstr ""
18864
18865
#: serverguide/C/mail.xml:1615(programlisting)
18866
#, no-wrap
18867
msgid ""
18868
"\n"
18869
"$log_level = 2;\n"
18870
msgstr ""
18871
18872
#: serverguide/C/mail.xml:1619(para)
18873
msgid ""
18874
"When the <application>Amavisd-new</application> log output is increased "
18875
"<application>Spamassassin</application> log output is also increased."
18876
msgstr ""
18877
18878
#: serverguide/C/mail.xml:1626(para)
18879
msgid ""
18880
"The <application>ClamAV</application> log level can be increased by editing "
18881
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
18882
msgstr ""
18883
18884
#: serverguide/C/mail.xml:1630(programlisting)
18885
#, no-wrap
18886
msgid ""
18887
"\n"
18888
"LogVerbose true\n"
18889
msgstr ""
18890
18891
#: serverguide/C/mail.xml:1633(para)
18892
msgid ""
18893
"By default <application>ClamAV</application> will send log messages to "
18894
"<filename>/var/log/clamav/clamav.log</filename>."
18895
msgstr ""
18896
18897
#: serverguide/C/mail.xml:1639(para)
18898
msgid ""
18899
"After changing an applications log settings remember to restart the service "
18900
"for the new settings to take affect. Also, once the issue you are "
18901
"troubleshooting is resolved it is a good idea to change the log settings "
18902
"back to normal."
18903
msgstr ""
18904
18905
#: serverguide/C/mail.xml:1647(para)
18906
msgid "For more information on filtering mail see the following links:"
18907
msgstr ""
18908
18909
#: serverguide/C/mail.xml:1653(ulink)
18910
msgid "Amavisd-new Documentation"
18911
msgstr ""
18912
18913
#: serverguide/C/mail.xml:1657(para)
18914
msgid ""
18915
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
18916
"Documentation</ulink> and <ulink "
18917
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
18918
msgstr ""
18919
18920
#: serverguide/C/mail.xml:1664(ulink)
18921
msgid "Spamassassin Wiki"
18922
msgstr ""
18923
18924
#: serverguide/C/mail.xml:1669(ulink)
18925
msgid "Pyzor Homepage"
18926
msgstr ""
18927
18928
#: serverguide/C/mail.xml:1674(ulink)
18929
msgid "Razor Homepage"
18930
msgstr ""
18931
18932
#: serverguide/C/mail.xml:1679(ulink)
18933
msgid "DKIM.org"
18934
msgstr ""
18935
18936
#: serverguide/C/mail.xml:1684(ulink)
18937
msgid "Postfix Amavis New"
18938
msgstr ""
18939
18940
#: serverguide/C/mail.xml:1688(para)
18941
msgid ""
18942
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
18943
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
18944
msgstr ""
18945
18946
#: serverguide/C/lamp-applications.xml:13(title)
18947
msgid "LAMP Applications"
18948
msgstr ""
18949
18950
#: serverguide/C/lamp-applications.xml:19(para)
18951
msgid ""
18952
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
18953
"Ubuntu servers. There is a plethora of Open Source applications written "
18954
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
18955
"Content Management Systems, and Management Software such as phpMyAdmin."
18956
msgstr ""
18957
18958
#: serverguide/C/lamp-applications.xml:26(para)
18959
msgid ""
18960
"One advantage of LAMP is the substantial flexibility for different database, "
18961
"web server, and scripting languages. Popular substitutes for MySQL include "
18962
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
18963
"instead of PHP."
18964
msgstr ""
18965
18966
#: serverguide/C/lamp-applications.xml:32(para)
18967
msgid ""
18968
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
18969
"is:"
18970
msgstr ""
18971
18972
#: serverguide/C/lamp-applications.xml:38(para)
18973
msgid "Download an archive containing the application source files."
18974
msgstr ""
18975
18976
#: serverguide/C/lamp-applications.xml:43(para)
18977
msgid ""
18978
"Unpack the archive, usually in a directory accessible to a web server."
18979
msgstr ""
18980
18981
#: serverguide/C/lamp-applications.xml:48(para)
18982
msgid ""
18983
"Depending on where the source was extracted, configure a web browser to "
18984
"serve the files."
18985
msgstr ""
18986
18987
#: serverguide/C/lamp-applications.xml:53(para)
18988
msgid "Configure the application to connect to the database."
18989
msgstr ""
18990
18991
#: serverguide/C/lamp-applications.xml:58(para)
18992
msgid ""
18993
"Run a script, or browse to a page of the application, to install the "
18994
"database needed by the application."
18995
msgstr ""
18996
18997
#: serverguide/C/lamp-applications.xml:63(para)
18998
msgid ""
18999
"Once the steps above, or similar steps, are completed you are ready to begin "
19000
"using the application."
19001
msgstr ""
19002
19003
#: serverguide/C/lamp-applications.xml:69(para)
19004
msgid ""
19005
"A disadvantage of using this approach is that the application files are not "
19006
"placed in the file system in a standard way, which can cause confusion as to "
19007
"where the application is installed. Another larger disadvantage is updating "
19008
"the application. When a new version is released, the same process used to "
19009
"install the application is needed to apply updates."
19010
msgstr ""
19011
19012
#: serverguide/C/lamp-applications.xml:76(para)
19013
msgid ""
19014
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19015
"packaged for Ubuntu, and are available for installation in the same way as "
19016
"non-LAMP applications. Depending on the application some extra configuration "
19017
"and setup steps may be needed, however."
19018
msgstr ""
19019
19020
#: serverguide/C/lamp-applications.xml:82(para)
19021
msgid ""
19022
"This section covers howto install and configure the Wiki applications "
19023
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19024
"and the MySQL management application <application>phpMyAdmin</application>."
19025
msgstr ""
19026
19027
#: serverguide/C/lamp-applications.xml:88(para)
19028
msgid ""
19029
"A Wiki is a website that allows the visitors to easily add, remove and "
19030
"modify available content easily. The ease of interaction and operation makes "
19031
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19032
"also referred to the collaborative software."
19033
msgstr ""
19034
19035
#: serverguide/C/lamp-applications.xml:100(title)
19036
msgid "Moin Moin"
19037
msgstr ""
19038
19039
#: serverguide/C/lamp-applications.xml:102(para)
19040
msgid ""
19041
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19042
"engine, and licensed under the GNU GPL."
19043
msgstr ""
19044
19045
#: serverguide/C/lamp-applications.xml:110(para)
19046
msgid ""
19047
"To install <application>MoinMoin</application>, run the following command in "
19048
"the command prompt:"
19049
msgstr ""
19050
19051
#: serverguide/C/lamp-applications.xml:116(command)
19052
msgid "sudo apt-get install python-moinmoin"
19053
msgstr ""
19054
19055
#: serverguide/C/lamp-applications.xml:119(para)
19056
msgid ""
19057
"You should also install <application>apache2</application> web server. For "
19058
"installing <application>apache2</application> web server, please refer to "
19059
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19060
"linkend=\"httpd\"/> section."
19061
msgstr ""
19062
19063
#: serverguide/C/lamp-applications.xml:130(para)
19064
msgid ""
19065
"For configuring your first Wiki application, please run the following set of "
19066
"commands. Let us assume that you are creating a Wiki named "
19067
"<emphasis>mywiki</emphasis>:"
19068
msgstr ""
19069
19070
#: serverguide/C/lamp-applications.xml:137(command)
19071
msgid "cd /usr/share/moin"
19072
msgstr ""
19073
19074
#: serverguide/C/lamp-applications.xml:138(command)
19075
msgid "sudo mkdir mywiki"
19076
msgstr ""
19077
19078
#: serverguide/C/lamp-applications.xml:139(command)
19079
msgid "sudo cp -R data mywiki"
19080
msgstr ""
19081
19082
#: serverguide/C/lamp-applications.xml:140(command)
19083
msgid "sudo cp -R underlay mywiki"
19084
msgstr ""
19085
19086
#: serverguide/C/lamp-applications.xml:141(command)
19087
msgid "sudo cp server/moin.cgi mywiki"
19088
msgstr ""
19089
19090
#: serverguide/C/lamp-applications.xml:142(command)
19091
msgid "sudo chown -R www-data.www-data mywiki"
19092
msgstr ""
19093
19094
#: serverguide/C/lamp-applications.xml:143(command)
19095
msgid "sudo chmod -R ug+rwX mywiki"
19096
msgstr ""
19097
19098
#: serverguide/C/lamp-applications.xml:144(command)
19099
msgid "sudo chmod -R o-rwx mywiki"
19100
msgstr ""
19101
19102
#: serverguide/C/lamp-applications.xml:147(para)
19103
msgid ""
19104
"Now you should configure <application>MoinMoin</application> to find your "
19105
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19106
"<application>MoinMoin</application>, open "
19107
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19108
msgstr ""
19109
19110
#: serverguide/C/lamp-applications.xml:155(programlisting)
19111
#, no-wrap
19112
msgid "data_dir = '/org/mywiki/data'"
19113
msgstr ""
19114
19115
#: serverguide/C/lamp-applications.xml:157(para)
19116
msgid "to"
19117
msgstr ""
19118
19119
#: serverguide/C/lamp-applications.xml:161(programlisting)
19120
#, no-wrap
19121
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19122
msgstr ""
19123
19124
#: serverguide/C/lamp-applications.xml:163(para)
19125
msgid ""
19126
"Also, below the <emphasis>data_dir</emphasis> option add the "
19127
"<emphasis>data_underlay_dir</emphasis>:"
19128
msgstr ""
19129
19130
#: serverguide/C/lamp-applications.xml:167(programlisting)
19131
#, no-wrap
19132
msgid ""
19133
"\n"
19134
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19135
msgstr ""
19136
19137
#: serverguide/C/lamp-applications.xml:172(para)
19138
msgid ""
19139
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19140
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19141
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19142
"change."
19143
msgstr ""
19144
19145
#: serverguide/C/lamp-applications.xml:181(para)
19146
msgid ""
19147
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19148
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19149
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19150
"<quote>(\"mywiki\", r\".*\")</quote>."
19151
msgstr ""
19152
19153
#: serverguide/C/lamp-applications.xml:189(para)
19154
msgid ""
19155
"Once you have configured <application>MoinMoin</application> to find your "
19156
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19157
"<application>apache2</application> and make it ready for your Wiki "
19158
"application."
19159
msgstr ""
19160
19161
#: serverguide/C/lamp-applications.xml:196(para)
19162
msgid ""
19163
"You should add the following lines in <filename>/etc/apache2/sites-"
19164
"available/default</filename> file inside the <quote><VirtualHost "
19165
"*></quote> tag:"
19166
msgstr ""
19167
19168
#: serverguide/C/lamp-applications.xml:202(programlisting)
19169
#, no-wrap
19170
msgid ""
19171
"\n"
19172
"### moin\n"
19173
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19174
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19175
" <Directory /usr/share/moin/htdocs>\n"
19176
" Order allow,deny\n"
19177
" allow from all\n"
19178
" </Directory>\n"
19179
"### end moin\n"
19180
msgstr ""
19181
19182
#: serverguide/C/lamp-applications.xml:214(para)
19183
msgid ""
19184
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19185
"<emphasis>alias</emphasis> line above, to the "
19186
"<application>moinmoin</application> version installed."
19187
msgstr ""
19188
19189
#: serverguide/C/lamp-applications.xml:220(para)
19190
msgid ""
19191
"Once you configure the <application>apache2</application> web server and "
19192
"make it ready for your Wiki application, you should restart it. You can run "
19193
"the following command to restart the <application>apache2</application> web "
19194
"server:"
19195
msgstr ""
19196
19197
#: serverguide/C/lamp-applications.xml:233(title)
19198
msgid "Verification"
19199
msgstr ""
19200
19201
#: serverguide/C/lamp-applications.xml:235(para)
19202
msgid ""
19203
"You can verify the Wiki application and see if it works by pointing your web "
19204
"browser to the following URL:"
19205
msgstr ""
19206
19207
#: serverguide/C/lamp-applications.xml:239(programlisting)
19208
#, no-wrap
19209
msgid ""
19210
"\n"
19211
"http://localhost/mywiki\n"
19212
msgstr ""
19213
19214
#: serverguide/C/lamp-applications.xml:243(para)
19215
msgid ""
19216
"You can also run the test command by pointing your web browser to the "
19217
"following URL:"
19218
msgstr ""
19219
19220
#: serverguide/C/lamp-applications.xml:248(programlisting)
19221
#, no-wrap
19222
msgid ""
19223
"\n"
19224
"http://localhost/mywiki?action=test\n"
19225
msgstr ""
19226
19227
#: serverguide/C/lamp-applications.xml:252(para)
19228
msgid ""
19229
"For more details, please refer to the <ulink "
19230
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19231
msgstr ""
19232
19233
#: serverguide/C/lamp-applications.xml:263(para)
19234
msgid ""
19235
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19236
"Wiki</ulink>."
19237
msgstr ""
19238
19239
#: serverguide/C/lamp-applications.xml:268(para)
19240
msgid ""
19241
"Also, see the <ulink "
19242
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19243
"MoinMoin</ulink> page."
19244
msgstr ""
19245
19246
#: serverguide/C/lamp-applications.xml:277(title)
19247
msgid "MediaWiki"
19248
msgstr ""
19249
19250
#: serverguide/C/lamp-applications.xml:279(para)
19251
msgid ""
19252
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19253
"either use <application>MySQL</application> or "
19254
"<application>PostgreSQL</application> Database Management System."
19255
msgstr ""
19256
19257
#: serverguide/C/lamp-applications.xml:289(para)
19258
msgid ""
19259
"Before installing <application>MediaWiki</application> you should also "
19260
"install <application>Apache2</application>, the "
19261
"<application>PHP5</application> scripting language and Database a Management "
19262
"System. <application>MySQL</application> or "
19263
"<application>PostgreSQL</application> are the most common, choose one "
19264
"depending on your need. Please refer to those sections in this manual for "
19265
"installation instructions."
19266
msgstr ""
19267
19268
#: serverguide/C/lamp-applications.xml:297(para)
19269
msgid ""
19270
"To install <application>MediaWiki</application>, run the following command "
19271
"in the command prompt:"
19272
msgstr ""
19273
19274
#: serverguide/C/lamp-applications.xml:303(command)
19275
msgid "sudo apt-get install mediawiki php5-gd"
19276
msgstr ""
19277
19278
#: serverguide/C/lamp-applications.xml:306(para)
19279
msgid ""
19280
"For additional <application>MediaWiki</application> functionality see the "
19281
"<application>mediawiki-extensions</application> package."
19282
msgstr ""
19283
19284
#: serverguide/C/lamp-applications.xml:316(para)
19285
msgid ""
19286
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19287
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19288
"directory. You should uncomment the following line in this file to access "
19289
"MediaWiki application."
19290
msgstr ""
19291
19292
#: serverguide/C/lamp-applications.xml:324(screen)
19293
#, no-wrap
19294
msgid ""
19295
"\n"
19296
"# Alias /mediawiki /var/lib/mediawiki\n"
19297
msgstr ""
19298
19299
#: serverguide/C/lamp-applications.xml:328(para)
19300
msgid ""
19301
"After you uncomment the above line, restart Apache server and access "
19302
"MediaWiki using the following url:"
19303
msgstr ""
19304
19305
#: serverguide/C/lamp-applications.xml:333(programlisting)
19306
#, no-wrap
19307
msgid ""
19308
"\n"
19309
"http://localhost/mediawiki/config/index.php\n"
19310
msgstr ""
19311
19312
#: serverguide/C/lamp-applications.xml:338(para)
19313
msgid ""
19314
"Please read the <quote>Checking environment...</quote> section in this page. "
19315
"You should be able to fix many issues by carefully reading this section."
19316
msgstr ""
19317
19318
#: serverguide/C/lamp-applications.xml:345(para)
19319
msgid ""
19320
"Once the configuration is complete, you should copy the "
19321
"<filename>LocalSettings.php</filename> file to "
19322
"<filename>/etc/mediawiki</filename> directory:"
19323
msgstr ""
19324
19325
#: serverguide/C/lamp-applications.xml:352(command)
19326
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19327
msgstr ""
19328
19329
#: serverguide/C/lamp-applications.xml:355(para)
19330
msgid ""
19331
"You may also want to edit "
19332
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19333
msgstr ""
19334
19335
#: serverguide/C/lamp-applications.xml:360(programlisting)
19336
#, no-wrap
19337
msgid ""
19338
"\n"
19339
"ini_set( 'memory_limit', '64M' );\n"
19340
msgstr ""
19341
19342
#: serverguide/C/lamp-applications.xml:367(title)
19343
msgid "Extensions"
19344
msgstr ""
19345
19346
#: serverguide/C/lamp-applications.xml:368(para)
19347
msgid ""
19348
"The extensions add new features and enhancements for the MediaWiki "
19349
"application. The extensions give wiki administrators and end users the "
19350
"ability to customize MediaWiki to their requirements."
19351
msgstr ""
19352
19353
#: serverguide/C/lamp-applications.xml:374(para)
19354
msgid ""
19355
"You can download MediaWiki extensions as an archive file or checkout from "
19356
"the Subversion repository. You should copy it to "
19357
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19358
"also add the following line at the end of file: "
19359
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19360
msgstr ""
19361
19362
#: serverguide/C/lamp-applications.xml:382(programlisting)
19363
#, no-wrap
19364
msgid ""
19365
"\n"
19366
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19367
msgstr ""
19368
19369
#: serverguide/C/lamp-applications.xml:392(para)
19370
msgid ""
19371
"For more details, please refer to the <ulink "
19372
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19373
msgstr ""
19374
19375
#: serverguide/C/lamp-applications.xml:398(para)
19376
msgid ""
19377
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19378
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19379
"new MediaWiki administrators."
19380
msgstr ""
19381
19382
#: serverguide/C/lamp-applications.xml:404(para)
19383
msgid ""
19384
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19385
"Wiki MediaWiki</ulink> page is a good resource."
19386
msgstr ""
19387
19388
#: serverguide/C/lamp-applications.xml:414(title)
19389
msgid "phpMyAdmin"
19390
msgstr ""
19391
19392
#: serverguide/C/lamp-applications.xml:416(para)
19393
msgid ""
19394
"<application>phpMyAdmin</application> is a LAMP application specifically "
19395
"written for administering <application>MySQL</application> servers. Written "
19396
"in <application>PHP</application>, and accessed through a web browser, "
19397
"phpMyAdmin provides a graphical interface for database administration tasks."
19398
msgstr ""
19399
19400
#: serverguide/C/lamp-applications.xml:425(para)
19401
msgid ""
19402
"Before installing <application>phpMyAdmin</application> you will need access "
19403
"to a <application>MySQL</application> database either on the same host as "
19404
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19405
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19406
"enter:"
19407
msgstr ""
19408
19409
#: serverguide/C/lamp-applications.xml:432(command)
19410
msgid "sudo apt-get install phpmyadmin"
19411
msgstr ""
19412
19413
#: serverguide/C/lamp-applications.xml:435(para)
19414
msgid ""
19415
"At the prompt choose which web server to be configured for "
19416
"<application>phpMyAdmin</application>. The rest of this section will use "
19417
"<application>Apache2</application> for the web server."
19418
msgstr ""
19419
19420
#: serverguide/C/lamp-applications.xml:440(para)
19421
msgid ""
19422
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19423
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19424
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19425
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19426
"user if you any setup, and enter the <application>MySQL</application> user's "
19427
"password."
19428
msgstr ""
19429
19430
#: serverguide/C/lamp-applications.xml:447(para)
19431
msgid ""
19432
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19433
"needed, create users, create/destroy databases and tables, etc."
19434
msgstr ""
19435
19436
#: serverguide/C/lamp-applications.xml:455(para)
19437
msgid ""
19438
"The configuration files for <application>phpMyAdmin</application> are "
19439
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19440
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19441
"configuration options that apply globally to "
19442
"<application>phpMyAdmin</application>."
19443
msgstr ""
19444
19445
#: serverguide/C/lamp-applications.xml:461(para)
19446
msgid ""
19447
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19448
"hosted on another server, adjust the following in "
19449
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19450
msgstr ""
19451
19452
#: serverguide/C/lamp-applications.xml:466(programlisting)
19453
#, no-wrap
19454
msgid ""
19455
"\n"
19456
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19457
msgstr ""
19458
19459
#: serverguide/C/lamp-applications.xml:471(para)
19460
msgid ""
19461
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19462
"remote database server name or IP address. Also, be sure that the "
19463
"<application>phpMyAdmin</application> host has permissions to access the "
19464
"remote database."
19465
msgstr ""
19466
19467
#: serverguide/C/lamp-applications.xml:477(para)
19468
msgid ""
19469
"Once configured, log out of <application>phpMyAdmin</application> and back "
19470
"in, and you should be accessing the new server."
19471
msgstr ""
19472
19473
#: serverguide/C/lamp-applications.xml:481(para)
19474
msgid ""
19475
"The <filename>config.header.inc.php</filename> and "
19476
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19477
"header and footer to <application>phpMyAdmin</application>."
19478
msgstr ""
19479
19480
#: serverguide/C/lamp-applications.xml:486(para)
19481
msgid ""
19482
"Another important configuration file is "
19483
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19484
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19485
"configure <application>Apache2</application> to serve the "
19486
"<application>phpMyAdmin</application> site. The file contains directives for "
19487
"loading <application>PHP</application>, directory permissions, etc. For more "
19488
"information on configuring <application>Apache2</application> see <xref "
19489
"linkend=\"httpd\"/>."
19490
msgstr ""
19491
19492
#: serverguide/C/lamp-applications.xml:500(para)
19493
msgid ""
19494
"The <application>phpMyAdmin</application> documentation comes installed with "
19495
"the package and can be accessed from the <emphasis>phpMyAdmin "
19496
"Documentation</emphasis> link (a question mark with a box around it) under "
19497
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19498
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19499
msgstr ""
19500
19501
#: serverguide/C/lamp-applications.xml:507(para)
19502
msgid ""
19503
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19504
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19505
msgstr ""
19506
19507
#: serverguide/C/lamp-applications.xml:512(para)
19508
msgid ""
19509
"A third resource is the <ulink "
19510
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19511
"Wiki</ulink> page."
19512
msgstr ""
19513
19514
#: serverguide/C/introduction.xml:14(para)
19515
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19516
msgstr ""
19517
19518
#: serverguide/C/introduction.xml:15(para)
19519
msgid ""
19520
"Here you can find information on how to install and configure various server "
19521
"applications. It is a step-by-step, task-oriented guide for configuring and "
19522
"customizing your system."
19523
msgstr ""
19524
19525
#: serverguide/C/introduction.xml:19(para)
19526
msgid ""
19527
"This guide assumes you have a basic understanding of your Ubuntu system. "
19528
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19529
"but if you need detailed instructions installing Ubuntu please refer to the "
19530
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19531
"Installation Guide</ulink>."
19532
msgstr ""
19533
19534
#: serverguide/C/introduction.xml:25(para)
19535
msgid ""
19536
"A HTML version of the manual is available online at <ulink "
19537
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19538
"HTML files are also available in the <application>ubuntu-"
19539
"serverguide</application> package. See <xref linkend=\"package-"
19540
"management\"/> for details on installing packages."
19541
msgstr ""
19542
19543
#: serverguide/C/introduction.xml:32(para)
19544
msgid ""
19545
"If you choose to install the <application>ubuntu-serverguide</application> "
19546
"you can view this document from a console by:"
19547
msgstr ""
19548
19549
#: serverguide/C/introduction.xml:36(command)
19550
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19551
msgstr ""
19552
19553
#: serverguide/C/introduction.xml:39(para)
19554
msgid ""
19555
"If you are using a localized version of Ubuntu, replace "
19556
"<emphasis>C</emphasis> with your language localization (e.g. "
19557
"<emphasis>en_GB</emphasis>)."
19558
msgstr ""
19559
19560
#: serverguide/C/introduction.xml:53(title)
19561
msgid "Support"
19562
msgstr ""
19563
19564
#: serverguide/C/introduction.xml:55(para)
19565
msgid ""
19566
"There are a couple of different ways that Ubuntu Server Edition is "
19567
"supported, commercial support and community support. The main commercial "
19568
"support (and development funding) is available from Canonical Ltd. They "
19569
"supply reasonably priced support contracts on a per desktop or per server "
19570
"basis. For more information see the <ulink "
19571
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19572
"page."
19573
msgstr ""
19574
19575
#: serverguide/C/introduction.xml:62(para)
19576
msgid ""
19577
"Community support is also provided by dedicated individuals, and companies, "
19578
"that wish to make Ubuntu the best distribution possible. Support is provided "
19579
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19580
"large amount of information available can be overwhelming, but a good search "
19581
"engine query can usually provide an answer to your questions. See the <ulink "
19582
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19583
"information."
19584
msgstr ""
19585
19586
#: serverguide/C/installation.xml:14(para)
19587
msgid ""
19588
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
19589
"Edition. For more detailed instructions, please refer to the <ulink "
19590
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19591
"Installation Guide</ulink>."
19592
msgstr ""
19593
19594
#: serverguide/C/installation.xml:19(title)
19595
msgid "Preparing to Install"
19596
msgstr ""
19597
19598
#: serverguide/C/installation.xml:20(para)
19599
msgid ""
19600
"This section explains various aspects to consider before starting the "
19601
"installation."
19602
msgstr ""
19603
19604
#: serverguide/C/installation.xml:24(title)
19605
msgid "System Requirements"
19606
msgstr ""
19607
19608
#: serverguide/C/installation.xml:25(para)
19609
msgid ""
19610
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
19611
"x86 and AMD64. The table below lists recommended hardware specifications. "
19612
"Depending on your needs, you might manage with less than this. However, most "
19613
"users risk being frustrated if they ignore these suggestions."
19614
msgstr ""
19615
19616
#: serverguide/C/installation.xml:27(title)
19617
msgid "Recommended Minimum Requirements"
19618
msgstr ""
19619
19620
#: serverguide/C/installation.xml:35(para)
19621
msgid "Install Type"
19622
msgstr ""
19623
19624
#: serverguide/C/installation.xml:36(para)
19625
msgid "RAM"
19626
msgstr ""
19627
19628
#: serverguide/C/installation.xml:37(para)
19629
msgid "Hard Drive Space"
19630
msgstr ""
19631
19632
#: serverguide/C/installation.xml:40(para)
19633
msgid "Base System"
19634
msgstr ""
19635
19636
#: serverguide/C/installation.xml:41(para)
19637
msgid "All Tasks Installed"
19638
msgstr ""
19639
19640
#: serverguide/C/installation.xml:46(para)
19641
msgid "Server"
19642
msgstr ""
19643
19644
#: serverguide/C/installation.xml:47(para)
19645
msgid "128 megabytes"
19646
msgstr ""
19647
19648
#: serverguide/C/installation.xml:48(para)
19649
msgid "500 megabytes"
19650
msgstr ""
19651
19652
#: serverguide/C/installation.xml:49(para)
19653
msgid "1 gigabyte"
19654
msgstr ""
19655
19656
#: serverguide/C/installation.xml:54(para)
19657
msgid ""
19658
"The Server Edition provides a common base for all sorts of server "
19659
"applications. It is a minimalist design providing a platform for the desired "
19660
"services, such as file/print services, web hosting, email hosting, etc."
19661
msgstr ""
19662
19663
#: serverguide/C/installation.xml:60(para)
19664
msgid ""
19665
"The requirements for UEC are slightly different for Front End requirements "
19666
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
19667
"requirements see <xref linkend=\"uec-node-requirements\"/>."
19668
msgstr ""
19669
19670
#: serverguide/C/installation.xml:68(title)
19671
msgid "Server and Desktop Differences"
19672
msgstr ""
19673
19674
#: serverguide/C/installation.xml:69(para)
19675
msgid ""
19676
"There are a few differences between the <emphasis>Ubuntu Server "
19677
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
19678
"should be noted that both editions use the same "
19679
"<application>apt</application> repositories. Making it just as easy to "
19680
"install a <emphasis role=\"italic\">server</emphasis> application on the "
19681
"Desktop Edition as it is on the Server Edition."
19682
msgstr ""
19683
19684
#: serverguide/C/installation.xml:75(para)
19685
msgid ""
19686
"The differences between the two editions are the lack of an X window "
19687
"environment in the Server Edition, the installation process, and different "
19688
"Kernel options."
19689
msgstr ""
19690
19691
#: serverguide/C/installation.xml:82(title)
19692
msgid "Kernel Differences:"
19693
msgstr ""
19694
19695
#: serverguide/C/installation.xml:85(para)
19696
msgid ""
19697
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
19698
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
19699
"Edition."
19700
msgstr ""
19701
19702
#: serverguide/C/installation.xml:91(para)
19703
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
19704
msgstr ""
19705
19706
#: serverguide/C/installation.xml:96(para)
19707
msgid ""
19708
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
19709
"Desktop Edition."
19710
msgstr ""
19711
19712
#: serverguide/C/installation.xml:102(para)
19713
msgid ""
19714
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
19715
"limited by memory addressing space."
19716
msgstr ""
19717
19718
#: serverguide/C/installation.xml:107(para)
19719
msgid ""
19720
"To see all kernel configuration options you can look through "
19721
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
19722
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
19723
"great resource on the options available."
19724
msgstr ""
19725
19726
#: serverguide/C/installation.xml:116(title)
19727
msgid "Backing Up"
19728
msgstr ""
19729
19730
#: serverguide/C/installation.xml:119(para)
19731
msgid ""
19732
"Before installing <application>Ubuntu Server Edition</application> you "
19733
"should make sure all data on the system is backed up. See <xref "
19734
"linkend=\"backups\"/> for backup options."
19735
msgstr ""
19736
19737
#: serverguide/C/installation.xml:123(para)
19738
msgid ""
19739
"If this is not the first time an operating system has been installed on your "
19740
"computer, it is likely you will need to re-partition your disk to make room "
19741
"for Ubuntu."
19742
msgstr ""
19743
19744
#: serverguide/C/installation.xml:127(para)
19745
msgid ""
19746
"Any time you partition your disk, you should be prepared to lose everything "
19747
"on the disk should you make a mistake or something goes wrong during "
19748
"partitioning. The programs used in installation are quite reliable, most "
19749
"have seen years of use, but they also perform destructive actions."
19750
msgstr ""
19751
19752
#: serverguide/C/installation.xml:139(title)
19753
msgid "Installing from CD"
19754
msgstr ""
19755
19756
#: serverguide/C/installation.xml:140(para)
19757
msgid ""
19758
"The basic steps to install Ubuntu Server Edition from CD are the same for "
19759
"installing any operating system from CD. Unlike the <emphasis>Desktop "
19760
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
19761
"a graphical installation program. Instead the Server Edition uses a console "
19762
"menu based process."
19763
msgstr ""
19764
19765
#: serverguide/C/installation.xml:147(para)
19766
msgid ""
19767
"First, download and burn the appropriate ISO file from the <ulink "
19768
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
19769
msgstr ""
19770
19771
#: serverguide/C/installation.xml:153(para)
19772
msgid "Boot the system from the CD-ROM drive."
19773
msgstr ""
19774
19775
#: serverguide/C/installation.xml:158(para)
19776
msgid ""
19777
"At the boot prompt you will be asked to select the language. Afterwards the "
19778
"installation process begins by asking for your keyboard layout."
19779
msgstr ""
19780
19781
#: serverguide/C/installation.xml:164(para)
19782
msgid ""
19783
"From the main boot menu there are some additional options to install Ubuntu "
19784
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
19785
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
19786
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
19787
"will cover the basic Ubuntu Server install."
19788
msgstr ""
19789
19790
#: serverguide/C/installation.xml:172(para)
19791
msgid ""
19792
"The installer then discovers your hardware configuration, and configures the "
19793
"network settings using DHCP. If you do not wish to use DHCP at the next "
19794
"screen choose \"Go Back\", and you have the option to \"Configure the "
19795
"network manually\"."
19796
msgstr ""
19797
19798
#: serverguide/C/installation.xml:179(para)
19799
msgid "Next, the installer asks for the system's hostname and Time Zone."
19800
msgstr ""
19801
19802
#: serverguide/C/installation.xml:184(para)
19803
msgid ""
19804
"You can then choose from several options to configure the hard drive layout. "
19805
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
19806
msgstr ""
19807
19808
#: serverguide/C/installation.xml:190(para)
19809
msgid "The Ubuntu base system is then installed."
19810
msgstr ""
19811
19812
#: serverguide/C/installation.xml:195(para)
19813
msgid ""
19814
"A new user is setup, this user will have <emphasis>root</emphasis> access "
19815
"through the <application>sudo</application> utility."
19816
msgstr ""
19817
19818
#: serverguide/C/installation.xml:201(para)
19819
msgid ""
19820
"After the user is setup, you will be asked to encrypt your <filename "
19821
"role=\"directory\">home</filename> directory."
19822
msgstr ""
19823
19824
#: serverguide/C/installation.xml:207(para)
19825
msgid ""
19826
"The next step in the installation process is to decide how you want to "
19827
"update the system. There are three options:"
19828
msgstr ""
19829
19830
#: serverguide/C/installation.xml:213(para)
19831
msgid ""
19832
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
19833
"log into the machine and manually install updates."
19834
msgstr ""
19835
19836
#: serverguide/C/installation.xml:219(para)
19837
msgid ""
19838
"<emphasis>Install security updates Automatically</emphasis>: will install "
19839
"the <application>unattended-upgrades</application> package, which will "
19840
"install security updates without the intervention of an administrator. For "
19841
"more details see <xref linkend=\"automatic-updates\"/>."
19842
msgstr ""
19843
19844
#: serverguide/C/installation.xml:226(para)
19845
msgid ""
19846
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
19847
"service provided by Canonical to help manage your Ubuntu machines. See the "
19848
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
19849
"site for details."
19850
msgstr ""
19851
19852
#: serverguide/C/installation.xml:235(para)
19853
msgid ""
19854
"You now have the option to install, or not install, several package tasks. "
19855
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
19856
"to launch <application>aptitude</application> to choose specific packages to "
19857
"install. For more information see <xref linkend=\"aptitude\"/>."
19858
msgstr ""
19859
19860
#: serverguide/C/installation.xml:243(para)
19861
msgid "Finally, the last step before rebooting is to set the clock to UTC."
19862
msgstr ""
19863
19864
#: serverguide/C/installation.xml:249(para)
19865
msgid ""
19866
"If at any point during installation you are not satisfied by the default "
19867
"setting, use the \"Go Back\" function at any prompt to be brought to a "
19868
"detailed installation menu that will allow you to modify the default "
19869
"settings."
19870
msgstr ""
19871
19872
#: serverguide/C/installation.xml:254(para)
19873
msgid ""
19874
"At some point during the installation process you may want to read the help "
19875
"screen provided by the installation system. To do this, press F1."
19876
msgstr ""
19877
19878
#: serverguide/C/installation.xml:259(para)
19879
msgid ""
19880
"Once again, for detailed instructions see the <ulink "
19881
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
19882
"Installation Guide</ulink>."
19883
msgstr ""
19884
19885
#: serverguide/C/installation.xml:265(title)
19886
msgid "Package Tasks"
19887
msgstr ""
19888
19889
#: serverguide/C/installation.xml:266(para)
19890
msgid ""
19891
"During the Server Edition installation you have the option of installing "
19892
"additional packages from the CD. The packages are grouped by the type of "
19893
"service they provide."
19894
msgstr ""
19895
19896
#: serverguide/C/installation.xml:272(para)
19897
msgid "Cloud computing: Walrus storage service"
19898
msgstr ""
19899
19900
#: serverguide/C/installation.xml:277(para)
19901
msgid "Cloud computing: all-in-one cluster"
19902
msgstr ""
19903
19904
#: serverguide/C/installation.xml:282(para)
19905
msgid "Cloud computing: Cluster controller"
19906
msgstr ""
19907
19908
#: serverguide/C/installation.xml:287(para)
19909
msgid "Cloud computing: Node controller"
19910
msgstr ""
19911
19912
#: serverguide/C/installation.xml:292(para)
19913
msgid "Cloud computing: Storage controller"
19914
msgstr ""
19915
19916
#: serverguide/C/installation.xml:297(para)
19917
msgid "Cloud computing: top-level cloud controller"
19918
msgstr ""
19919
19920
#: serverguide/C/installation.xml:302(para)
19921
msgid "DNS server: Selects the BIND DNS server and its documentation."
19922
msgstr ""
19923
19924
#: serverguide/C/installation.xml:307(para)
19925
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
19926
msgstr ""
19927
19928
#: serverguide/C/installation.xml:312(para)
19929
msgid ""
19930
"Mail server: This task selects a variety of package useful for a general "
19931
"purpose mail server system."
19932
msgstr ""
19933
19934
#: serverguide/C/installation.xml:317(para)
19935
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
19936
msgstr ""
19937
19938
#: serverguide/C/installation.xml:322(para)
19939
msgid ""
19940
"PostgreSQL database: This task selects client and server packages for the "
19941
"PostgreSQL database."
19942
msgstr ""
19943
19944
#: serverguide/C/installation.xml:327(para)
19945
msgid "Print server: This task sets up your system to be a print server."
19946
msgstr ""
19947
19948
#: serverguide/C/installation.xml:332(para)
19949
msgid ""
19950
"Samba File server: This task sets up your system to be a Samba file server, "
19951
"which is especially suitable in networks with both Windows and Linux systems."
19952
msgstr ""
19953
19954
#: serverguide/C/installation.xml:338(para)
19955
msgid ""
19956
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
19957
"etc."
19958
msgstr ""
19959
19960
#: serverguide/C/installation.xml:343(para)
19961
msgid ""
19962
"Virtual machine host: Includes packages needed to run KVM virtual machines."
19963
msgstr ""
19964
19965
#: serverguide/C/installation.xml:348(para)
19966
msgid ""
19967
"Manually select packages: Executes <application>apptitude</application> "
19968
"allowing you to individually select packages."
19969
msgstr ""
19970
19971
#: serverguide/C/installation.xml:353(para)
19972
msgid ""
19973
"Installing the package groups is accomplished using the "
19974
"<application>tasksel</application> utility. One of the important difference "
19975
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
19976
"installed, a package is also configured to reasonable defaults, eventually "
19977
"prompting you for additional required information. Likewise, when installing "
19978
"a task, the packages are not only installed, but also configured to provided "
19979
"a fully integrated service."
19980
msgstr ""
19981
19982
#: serverguide/C/installation.xml:360(para)
19983
msgid ""
19984
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
19985
"<xref linkend=\"uec\"/>."
19986
msgstr ""
19987
19988
#: serverguide/C/installation.xml:363(para)
19989
msgid ""
19990
"Once the installation process has finished you can view a list of available "
19991
"tasks by entering the following from a terminal prompt:"
19992
msgstr ""
19993
19994
#: serverguide/C/installation.xml:368(command)
19995
msgid "tasksel --list-tasks"
19996
msgstr ""
19997
19998
#: serverguide/C/installation.xml:371(para)
19999
msgid ""
20000
"The output will list tasks from other Ubuntu based distributions such as "
20001
"Kubuntu and Edubuntu. Note that you can also invoke the "
20002
"<command>tasksel</command> command by itself, which will bring up a menu of "
20003
"the different tasks available."
20004
msgstr ""
20005
20006
#: serverguide/C/installation.xml:377(para)
20007
msgid ""
20008
"You can view a list of which packages are installed with each task using the "
20009
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20010
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20011
"following:"
20012
msgstr ""
20013
20014
#: serverguide/C/installation.xml:382(command)
20015
msgid "tasksel --task-packages dns-server"
20016
msgstr ""
20017
20018
#: serverguide/C/installation.xml:384(para)
20019
msgid "The output of the command should list:"
20020
msgstr ""
20021
20022
#: serverguide/C/installation.xml:387(programlisting)
20023
#, no-wrap
20024
msgid ""
20025
"\n"
20026
"bind9-doc \n"
20027
"bind9utils \n"
20028
"bind9\n"
20029
msgstr ""
20030
20031
#: serverguide/C/installation.xml:392(para)
20032
msgid ""
20033
"Also, if you did not install one of the tasks during the installation "
20034
"process, but for example you decide to make your new LAMP server a DNS "
20035
"server as well. Simply insert the installation CD and from a terminal:"
20036
msgstr ""
20037
20038
#: serverguide/C/installation.xml:397(command)
20039
msgid "sudo tasksel install dns-server"
20040
msgstr ""
20041
20042
#: serverguide/C/installation.xml:402(title)
20043
msgid "Upgrading"
20044
msgstr ""
20045
20046
#: serverguide/C/installation.xml:403(para)
20047
msgid ""
20048
"There are several ways to upgrade from one Ubuntu release to another. This "
20049
"section gives an overview of the recommended upgrade method."
20050
msgstr ""
20051
20052
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20053
msgid "do-release-upgrade"
20054
msgstr ""
20055
20056
#: serverguide/C/installation.xml:408(para)
20057
msgid ""
20058
"The recommended way to upgrade a Server Edition installation is to use the "
20059
"<application>do-release-upgrade</application> utility. Part of the "
20060
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20061
"graphical dependencies and is installed by default."
20062
msgstr ""
20063
20064
#: serverguide/C/installation.xml:413(para)
20065
msgid ""
20066
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20067
"upgrade</command>. However, using <application>do-release-"
20068
"upgrade</application> is recommended because it has the ability to handle "
20069
"system configuration changes sometimes needed between releases."
20070
msgstr ""
20071
20072
#: serverguide/C/installation.xml:418(para)
20073
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20074
msgstr ""
20075
20076
#: serverguide/C/installation.xml:424(para)
20077
msgid ""
20078
"It is also possible to use <application>do-release-upgrade</application> to "
20079
"upgrade to a development version of Ubuntu. To accomplish this use the "
20080
"<emphasis>-d</emphasis> switch:"
20081
msgstr ""
20082
20083
#: serverguide/C/installation.xml:429(command)
20084
msgid "do-release-upgrade -d"
20085
msgstr ""
20086
20087
#: serverguide/C/installation.xml:432(para)
20088
msgid ""
20089
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20090
"for production environments."
20091
msgstr ""
20092
20093
#: serverguide/C/installation.xml:439(title)
20094
msgid "Advanced Installation"
20095
msgstr ""
20096
20097
#: serverguide/C/installation.xml:442(title)
20098
msgid "Software RAID"
20099
msgstr ""
20100
20101
#: serverguide/C/installation.xml:444(para)
20102
msgid ""
20103
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20104
"the probability of catastrophic data loss in case of drive failure. RAID is "
20105
"implemented in either software (where the operating system knows about both "
20106
"drives and actively maintains both of them) or hardware (where a special "
20107
"controller makes the OS think there's only one drive and maintains the "
20108
"drives 'invisibly')."
20109
msgstr ""
20110
20111
#: serverguide/C/installation.xml:451(para)
20112
msgid ""
20113
"The RAID software included with current versions of Linux (and Ubuntu) is "
20114
"based on the <application>'mdadm'</application> driver and works very well, "
20115
"better even than many so-called 'hardware' RAID controllers. This section "
20116
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20117
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20118
"another for <emphasis>swap</emphasis>."
20119
msgstr ""
20120
20121
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20122
msgid ""
20123
"Follow the installation steps until you get to the <emphasis>Partition "
20124
"disks</emphasis> step, then:"
20125
msgstr ""
20126
20127
#: serverguide/C/installation.xml:468(para)
20128
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20129
msgstr ""
20130
20131
#: serverguide/C/installation.xml:475(para)
20132
msgid ""
20133
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20134
"partition table on this device?\"</emphasis>."
20135
msgstr ""
20136
20137
#: serverguide/C/installation.xml:479(para)
20138
msgid ""
20139
"Repeat this step for each drive you wish to be part of the RAID array."
20140
msgstr ""
20141
20142
#: serverguide/C/installation.xml:486(para)
20143
msgid ""
20144
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20145
"select <emphasis>\"Create a new partition\"</emphasis>."
20146
msgstr ""
20147
20148
#: serverguide/C/installation.xml:493(para)
20149
msgid ""
20150
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20151
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20152
"size is twice that of RAM. Enter the partition size, then choose "
20153
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20154
msgstr ""
20155
20156
#: serverguide/C/installation.xml:502(para)
20157
msgid ""
20158
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20159
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20160
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20161
"<emphasis>\"Done setting up partition\"</emphasis>."
20162
msgstr ""
20163
20164
#: serverguide/C/installation.xml:511(para)
20165
msgid ""
20166
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20167
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20168
"partition\"</emphasis>."
20169
msgstr ""
20170
20171
#: serverguide/C/installation.xml:519(para)
20172
msgid ""
20173
"Use the rest of the free space on the drive and choose "
20174
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20175
msgstr ""
20176
20177
#: serverguide/C/installation.xml:526(para)
20178
msgid ""
20179
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20180
"at the top, changing it to <emphasis>\"physical volume for "
20181
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20182
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20183
"<emphasis>\"Done setting up partition\"</emphasis>."
20184
msgstr ""
20185
20186
#: serverguide/C/installation.xml:536(para)
20187
msgid "Repeat steps three through eight for the other disk and partitions."
20188
msgstr ""
20189
20190
#: serverguide/C/installation.xml:545(title)
20191
msgid "RAID Configuration"
20192
msgstr ""
20193
20194
#: serverguide/C/installation.xml:547(para)
20195
msgid "With the partitions setup the arrays are ready to be configured:"
20196
msgstr ""
20197
20198
#: serverguide/C/installation.xml:554(para)
20199
msgid ""
20200
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20201
"Software RAID\"</emphasis> at the top."
20202
msgstr ""
20203
20204
#: serverguide/C/installation.xml:561(para)
20205
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20206
msgstr ""
20207
20208
#: serverguide/C/installation.xml:568(para)
20209
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20210
msgstr ""
20211
20212
#: serverguide/C/installation.xml:575(para)
20213
msgid ""
20214
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20215
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20216
msgstr ""
20217
20218
#: serverguide/C/installation.xml:581(para)
20219
msgid ""
20220
"In order to use <emphasis>RAID5</emphasis> you need at least "
20221
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20222
"<emphasis>two</emphasis> drives are required."
20223
msgstr ""
20224
20225
#: serverguide/C/installation.xml:590(para)
20226
msgid ""
20227
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20228
"of hard drives you have, for the array. Then select "
20229
"<emphasis>\"Continue\"</emphasis>."
20230
msgstr ""
20231
20232
#: serverguide/C/installation.xml:598(para)
20233
msgid ""
20234
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20235
"default, then choose <emphasis>\"Continue\"</emphasis>."
20236
msgstr ""
20237
20238
#: serverguide/C/installation.xml:605(para)
20239
msgid ""
20240
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20241
"etc. The numbers will usually match and the different letters correspond to "
20242
"different hard drives."
20243
msgstr ""
20244
20245
#: serverguide/C/installation.xml:610(para)
20246
msgid ""
20247
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20248
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20249
"go to the next step."
20250
msgstr ""
20251
20252
#: serverguide/C/installation.xml:618(para)
20253
msgid ""
20254
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20255
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20256
"and <emphasis>sdb2</emphasis>."
20257
msgstr ""
20258
20259
#: serverguide/C/installation.xml:626(para)
20260
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20261
msgstr ""
20262
20263
#: serverguide/C/installation.xml:636(title)
20264
msgid "Formatting"
20265
msgstr ""
20266
20267
#: serverguide/C/installation.xml:638(para)
20268
msgid ""
20269
"There should now be a list of hard drives and RAID devices. The next step is "
20270
"to format and set the mount point for the RAID devices. Treat the RAID "
20271
"device as a local hard drive, format and mount accordingly."
20272
msgstr ""
20273
20274
#: serverguide/C/installation.xml:646(para)
20275
msgid ""
20276
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20277
"#0\"</emphasis> partition."
20278
msgstr ""
20279
20280
#: serverguide/C/installation.xml:653(para)
20281
msgid ""
20282
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20283
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20284
msgstr ""
20285
20286
#: serverguide/C/installation.xml:661(para)
20287
msgid ""
20288
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20289
"#1\"</emphasis> partition."
20290
msgstr ""
20291
20292
#: serverguide/C/installation.xml:668(para)
20293
msgid ""
20294
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20295
"journaling file system\"</emphasis>."
20296
msgstr ""
20297
20298
#: serverguide/C/installation.xml:675(para)
20299
msgid ""
20300
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20301
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20302
"options as appropriate, then select <emphasis>\"Done setting up "
20303
"partition\"</emphasis>."
20304
msgstr ""
20305
20306
#: serverguide/C/installation.xml:683(para)
20307
msgid ""
20308
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20309
"disk\"</emphasis>."
20310
msgstr ""
20311
20312
#: serverguide/C/installation.xml:690(para)
20313
msgid ""
20314
"If you choose to place the root partition on a RAID array, the installer "
20315
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20316
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20317
msgstr ""
20318
20319
#: serverguide/C/installation.xml:695(para)
20320
msgid "The installation process will then continue normally."
20321
msgstr ""
20322
20323
#: serverguide/C/installation.xml:701(title)
20324
msgid "Degraded RAID"
20325
msgstr ""
20326
20327
#: serverguide/C/installation.xml:703(para)
20328
msgid ""
20329
"At some point in the life of the computer a disk failure event may occur. "
20330
"When this happens, using Software RAID, the operating system will place the "
20331
"array into what is known as a <emphasis>degraded</emphasis> state."
20332
msgstr ""
20333
20334
#: serverguide/C/installation.xml:708(para)
20335
msgid ""
20336
"If the array has become degraded, due to the chance of data corruption, by "
20337
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20338
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20339
"second prompt giving you the option to go ahead and boot the system, or "
20340
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20341
"the desired behavior, especially if the machine is in a remote location. "
20342
"Booting to a degraded array can be configured several ways:"
20343
msgstr ""
20344
20345
#: serverguide/C/installation.xml:719(para)
20346
msgid ""
20347
"The <application>dpkg-reconfigure</application> utility can be used to "
20348
"configure the default behavior, and during the process you will be queried "
20349
"about additional settings related to the array. Such as monitoring, email "
20350
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20351
"following:"
20352
msgstr ""
20353
20354
#: serverguide/C/installation.xml:726(command)
20355
msgid "sudo dpkg-reconfigure mdadm"
20356
msgstr ""
20357
20358
#: serverguide/C/installation.xml:732(para)
20359
msgid ""
20360
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20361
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20362
"The file has the advantage of being able to pre-configure the system's "
20363
"behavior, and can also be manually edited:"
20364
msgstr ""
20365
20366
#: serverguide/C/installation.xml:738(programlisting)
20367
#, no-wrap
20368
msgid ""
20369
"\n"
20370
"BOOT_DEGRADED=true\n"
20371
msgstr ""
20372
20373
#: serverguide/C/installation.xml:743(para)
20374
msgid "The configuration file can be overridden by using a Kernel argument."
20375
msgstr ""
20376
20377
#: serverguide/C/installation.xml:751(para)
20378
msgid ""
20379
"Using a Kernel argument will allow the system to boot to a degraded array as "
20380
"well:"
20381
msgstr ""
20382
20383
#: serverguide/C/installation.xml:757(para)
20384
msgid ""
20385
"When the server is booting press <keycap>Shift</keycap> to open the "
20386
"<application>Grub</application> menu."
20387
msgstr ""
20388
20389
#: serverguide/C/installation.xml:762(para)
20390
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20391
msgstr ""
20392
20393
#: serverguide/C/installation.xml:767(para)
20394
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20395
msgstr ""
20396
20397
#: serverguide/C/installation.xml:772(para)
20398
msgid ""
20399
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20400
"end of the line."
20401
msgstr ""
20402
20403
#: serverguide/C/installation.xml:777(para)
20404
msgid ""
20405
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20406
"the system."
20407
msgstr ""
20408
20409
#: serverguide/C/installation.xml:786(para)
20410
msgid ""
20411
"Once the system has booted you can either repair the array see <xref "
20412
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20413
"another machine due to major hardware failure."
20414
msgstr ""
20415
20416
#: serverguide/C/installation.xml:793(title)
20417
msgid "RAID Maintenance"
20418
msgstr ""
20419
20420
#: serverguide/C/installation.xml:795(para)
20421
msgid ""
20422
"The <application>mdadm</application> utility can be used to view the status "
20423
"of an array, add disks to an array, remove disks, etc:"
20424
msgstr ""
20425
20426
#: serverguide/C/installation.xml:802(para)
20427
msgid "To view the status of an array, from a terminal prompt enter:"
20428
msgstr ""
20429
20430
#: serverguide/C/installation.xml:806(command)
20431
msgid "sudo mdadm -D /dev/md0"
20432
msgstr ""
20433
20434
#: serverguide/C/installation.xml:809(para)
20435
msgid ""
20436
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20437
"display <emphasis>detailed</emphasis> information about the "
20438
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20439
"with the appropriate RAID device."
20440
msgstr ""
20441
20442
#: serverguide/C/installation.xml:815(para)
20443
msgid "To view the status of a disk in an array:"
20444
msgstr ""
20445
20446
#: serverguide/C/installation.xml:819(command)
20447
msgid "sudo mdadm -E /dev/sda1"
20448
msgstr ""
20449
20450
#: serverguide/C/installation.xml:821(para)
20451
msgid ""
20452
"The output if very similar to the <command>mdadm -D</command> command, "
20453
"adjust <filename>/dev/sda1</filename> for each disk."
20454
msgstr ""
20455
20456
#: serverguide/C/installation.xml:826(para)
20457
msgid "If a disk fails and needs to be removed from an array enter:"
20458
msgstr ""
20459
20460
#: serverguide/C/installation.xml:830(command)
20461
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20462
msgstr ""
20463
20464
#: serverguide/C/installation.xml:832(para)
20465
msgid ""
20466
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20467
"the appropriate RAID device and disk."
20468
msgstr ""
20469
20470
#: serverguide/C/installation.xml:837(para)
20471
msgid "Similarly, to add a new disk:"
20472
msgstr ""
20473
20474
#: serverguide/C/installation.xml:841(command)
20475
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20476
msgstr ""
20477
20478
#: serverguide/C/installation.xml:846(para)
20479
msgid ""
20480
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20481
"though there is nothing physically wrong with the drive. It is usually "
20482
"worthwhile to remove the drive from the array then re-add it. This will "
20483
"cause the drive to re-sync with the array. If the drive will not sync with "
20484
"the array, it is a good indication of hardware failure."
20485
msgstr ""
20486
20487
#: serverguide/C/installation.xml:852(para)
20488
msgid ""
20489
"The <filename>/proc/mdstat</filename> file also contains useful information "
20490
"about the system's RAID devices:"
20491
msgstr ""
20492
20493
#: serverguide/C/installation.xml:857(command)
20494
msgid "cat /proc/mdstat"
20495
msgstr ""
20496
20497
#: serverguide/C/installation.xml:858(computeroutput)
20498
#, no-wrap
20499
msgid ""
20500
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20501
"[raid10] \n"
20502
"md0 : active raid1 sda1[0] sdb1[1]\n"
20503
" 10016384 blocks [2/2] [UU]\n"
20504
" \n"
20505
"unused devices: <none>"
20506
msgstr ""
20507
20508
#: serverguide/C/installation.xml:865(para)
20509
msgid ""
20510
"The following command is great for watching the status of a syncing drive:"
20511
msgstr ""
20512
20513
#: serverguide/C/installation.xml:870(command)
20514
msgid "watch -n1 cat /proc/mdstat"
20515
msgstr ""
20516
20517
#: serverguide/C/installation.xml:873(para)
20518
msgid ""
20519
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20520
"<application>watch</application> command."
20521
msgstr ""
20522
20523
#: serverguide/C/installation.xml:877(para)
20524
msgid ""
20525
"If you do need to replace a faulty drive, after the drive has been replaced "
20526
"and synced, <application>grub</application> will need to be installed. To "
20527
"install <application>grub</application> on the new drive, enter the "
20528
"following:"
20529
msgstr ""
20530
20531
#: serverguide/C/installation.xml:883(command)
20532
msgid "sudo grub-install /dev/md0"
20533
msgstr ""
20534
20535
#: serverguide/C/installation.xml:886(para)
20536
msgid ""
20537
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20538
msgstr ""
20539
20540
#: serverguide/C/installation.xml:894(para)
20541
msgid ""
20542
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20543
"can be configured. Please see the following links for more information:"
20544
msgstr ""
20545
20546
#: serverguide/C/installation.xml:901(para)
20547
msgid ""
20548
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20549
"Wiki Articles on RAID</ulink>."
20550
msgstr ""
20551
20552
#: serverguide/C/installation.xml:907(ulink)
20553
msgid "Software RAID HOWTO"
20554
msgstr ""
20555
20556
#: serverguide/C/installation.xml:912(ulink)
20557
msgid "Managing RAID on Linux"
20558
msgstr ""
20559
20560
#: serverguide/C/installation.xml:919(title)
20561
msgid "Logical Volume Manager (LVM)"
20562
msgstr ""
20563
20564
#: serverguide/C/installation.xml:921(para)
20565
msgid ""
20566
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20567
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20568
"hard disks. LVM volumes can be created on both software RAID partitions and "
20569
"standard partitions residing on a single disk. Volumes can also be extended, "
20570
"giving greater flexibility to systems as requirements change."
20571
msgstr ""
20572
20573
#: serverguide/C/installation.xml:930(para)
20574
msgid ""
20575
"A side effect of LVM's power and flexibility is a greater degree of "
20576
"complication. Before diving into the LVM installation process, it is best to "
20577
"get familiar with some terms."
20578
msgstr ""
20579
20580
#: serverguide/C/installation.xml:937(para)
20581
msgid ""
20582
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20583
"Volumes (LV)."
20584
msgstr ""
20585
20586
#: serverguide/C/installation.xml:942(para)
20587
msgid ""
20588
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
20589
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
20590
"which resides the actual EXT3, XFS, JFS, etc filesystem."
20591
msgstr ""
20592
20593
#: serverguide/C/installation.xml:948(para)
20594
msgid ""
20595
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
20596
"RAID partition. The Volume Group can be extended by adding more PVs."
20597
msgstr ""
20598
20599
#: serverguide/C/installation.xml:959(para)
20600
msgid ""
20601
"As an example this section covers installing Ubuntu Server Edition with "
20602
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
20603
"the initial install only one Physical Volume (PV) will be part of the Volume "
20604
"Group (VG). Another PV will be added after install to demonstrate how a VG "
20605
"can be extended."
20606
msgstr ""
20607
20608
#: serverguide/C/installation.xml:965(para)
20609
msgid ""
20610
"There are several installation options for LVM, <emphasis>\"Guided - use the "
20611
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
20612
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
20613
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
20614
"partitions and configure LVM. At this time the only way to configure a "
20615
"system with both LVM and standard partitions, during installation, is to use "
20616
"the Manual approach."
20617
msgstr ""
20618
20619
#: serverguide/C/installation.xml:982(para)
20620
msgid ""
20621
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
20622
"<emphasis>\"Manual\"</emphasis>."
20623
msgstr ""
20624
20625
#: serverguide/C/installation.xml:989(para)
20626
msgid ""
20627
"Select the hard disk and on the next screen choose \"yes\" to "
20628
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
20629
msgstr ""
20630
20631
#: serverguide/C/installation.xml:996(para)
20632
msgid ""
20633
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
20634
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
20635
msgstr ""
20636
20637
#: serverguide/C/installation.xml:1004(para)
20638
msgid ""
20639
"For the LVM <emphasis>/srv</emphasis>, create a new "
20640
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
20641
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
20642
"<emphasis>\"Done setting up the partition\"</emphasis>."
20643
msgstr ""
20644
20645
#: serverguide/C/installation.xml:1012(para)
20646
msgid ""
20647
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
20648
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
20649
"disk."
20650
msgstr ""
20651
20652
#: serverguide/C/installation.xml:1020(para)
20653
msgid ""
20654
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
20655
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
20656
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
20657
"After entering a name, select the partition configured for LVM, and choose "
20658
"<emphasis>\"Continue\"</emphasis>."
20659
msgstr ""
20660
20661
#: serverguide/C/installation.xml:1029(para)
20662
msgid ""
20663
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
20664
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
20665
"volume group, and enter a name for the new LV, for example "
20666
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
20667
"a size, which may be the full partition because it can always be extended "
20668
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
20669
"main <emphasis>\"Partition Disks\"</emphasis> screen."
20670
msgstr ""
20671
20672
#: serverguide/C/installation.xml:1039(para)
20673
msgid ""
20674
"Now add a filesystem to the new LVM. Select the partition under "
20675
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
20676
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
20677
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
20678
"select <emphasis>\"Done setting up the partition\"</emphasis>."
20679
msgstr ""
20680
20681
#: serverguide/C/installation.xml:1048(para)
20682
msgid ""
20683
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20684
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
20685
"the installation."
20686
msgstr ""
20687
20688
#: serverguide/C/installation.xml:1056(para)
20689
msgid "There are some useful utilities to view information about LVM:"
20690
msgstr ""
20691
20692
#: serverguide/C/installation.xml:1061(para)
20693
msgid ""
20694
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
20695
msgstr ""
20696
20697
#: serverguide/C/installation.xml:1062(para)
20698
msgid ""
20699
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
20700
msgstr ""
20701
20702
#: serverguide/C/installation.xml:1063(para)
20703
msgid ""
20704
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
20705
"Physical Volumes."
20706
msgstr ""
20707
20708
#: serverguide/C/installation.xml:1068(title)
20709
msgid "Extending Volume Groups"
20710
msgstr ""
20711
20712
#: serverguide/C/installation.xml:1070(para)
20713
msgid ""
20714
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
20715
"section covers adding a second hard disk, creating a Physical Volume (PV), "
20716
"adding it to the volume group (VG), extending the logical volume <filename "
20717
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
20718
"example assumes a second hard disk has been added to the system. This hard "
20719
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
20720
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
20721
"before issuing the commands below. You could lose some data if you issue "
20722
"those commands on a non-empty disk. In our example we will use the entire "
20723
"disk as a physical volume (you could choose to create partitions and use "
20724
"them as different physical volumes)"
20725
msgstr ""
20726
20727
#: serverguide/C/installation.xml:1082(para)
20728
msgid "First, create the physical volume, in a terminal execute:"
20729
msgstr ""
20730
20731
#: serverguide/C/installation.xml:1087(command)
20732
msgid "sudo pvcreate /dev/sdb"
20733
msgstr ""
20734
20735
#: serverguide/C/installation.xml:1093(para)
20736
msgid "Now extend the Volume Group (VG):"
20737
msgstr ""
20738
20739
#: serverguide/C/installation.xml:1098(command)
20740
msgid "sudo vgextend vg01 /dev/sdb"
20741
msgstr ""
20742
20743
#: serverguide/C/installation.xml:1104(para)
20744
msgid ""
20745
"Use <application>vgdisplay</application> to find out the free physical "
20746
"extents - Free PE / size (the size you can allocate). We will assume a free "
20747
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
20748
"whole free space available. Use your own PE and/or free space."
20749
msgstr ""
20750
20751
#: serverguide/C/installation.xml:1110(para)
20752
msgid ""
20753
"The Logical Volume (LV) can now be extended by different methods, we will "
20754
"only see how to use the PE to extend the LV:"
20755
msgstr ""
20756
20757
#: serverguide/C/installation.xml:1115(command)
20758
msgid "sudo lvextend /dev/vg01/srv -l +511"
20759
msgstr ""
20760
20761
#: serverguide/C/installation.xml:1118(para)
20762
msgid ""
20763
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
20764
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
20765
"Gig, Tera, etc bytes."
20766
msgstr ""
20767
20768
#: serverguide/C/installation.xml:1126(para)
20769
msgid ""
20770
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
20771
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
20772
"pratice to unmount it anyway and check the filesystem, so that you don't "
20773
"mess up the day you want to reduce a logical volume (in that case unmounting "
20774
"first is compulsory)."
20775
msgstr ""
20776
20777
#: serverguide/C/installation.xml:1132(para)
20778
msgid ""
20779
"The following commands are for an <emphasis>EXT3</emphasis> or "
20780
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
20781
"there may be other utilities available."
20782
msgstr ""
20783
20784
#: serverguide/C/installation.xml:1139(command)
20785
msgid "sudo e2fsck -f /dev/vg01/srv"
20786
msgstr ""
20787
20788
#: serverguide/C/installation.xml:1142(para)
20789
msgid ""
20790
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
20791
"forces checking even if the system seems clean."
20792
msgstr ""
20793
20794
#: serverguide/C/installation.xml:1149(para)
20795
msgid "Finally, resize the filesystem:"
20796
msgstr ""
20797
20798
#: serverguide/C/installation.xml:1154(command)
20799
msgid "sudo resize2fs /dev/vg01/srv"
20800
msgstr ""
20801
20802
#: serverguide/C/installation.xml:1160(para)
20803
msgid "Now mount the partition and check its size."
20804
msgstr ""
20805
20806
#: serverguide/C/installation.xml:1165(command)
20807
msgid "mount /dev/vg01/srv /srv && df -h /srv"
20808
msgstr ""
20809
20810
#: serverguide/C/installation.xml:1177(para)
20811
msgid ""
20812
"See the <ulink "
20813
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
20814
"Articles</ulink>."
20815
msgstr ""
20816
20817
#: serverguide/C/installation.xml:1182(para)
20818
msgid ""
20819
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
20820
"HOWTO</ulink> for more information."
20821
msgstr ""
20822
20823
#: serverguide/C/installation.xml:1187(para)
20824
msgid ""
20825
"Another good article is <ulink "
20826
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
20827
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
20828
"linuxdevcenter.com site."
20829
msgstr ""
20830
20831
#: serverguide/C/installation.xml:1194(para)
20832
msgid ""
20833
"For more information on <application>fdisk</application> see the <ulink "
20834
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
20835
"man page</ulink>."
20836
msgstr ""
20837
20838
#: serverguide/C/file-server.xml:13(title)
20839
msgid "File Servers"
20840
msgstr ""
20841
20842
#: serverguide/C/file-server.xml:15(para)
20843
msgid ""
20844
"If you have more than one computer on a single network. At some point you "
20845
"will probably need to share files between them. In this section we cover "
20846
"installing and configuring FTP, NFS, and CUPS."
20847
msgstr ""
20848
20849
#: serverguide/C/file-server.xml:22(title)
20850
msgid "FTP Server"
20851
msgstr ""
20852
20853
#: serverguide/C/file-server.xml:24(para)
20854
msgid ""
20855
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
20856
"files between computers. FTP works on a client/server model. The server "
20857
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
20858
"listens for FTP requests from remote clients. When a request is received, it "
20859
"manages the login and sets up the connection. For the duration of the "
20860
"session it executes any of commands sent by the FTP client."
20861
msgstr ""
20862
20863
#: serverguide/C/file-server.xml:33(para)
20864
msgid "Access to an FTP server can be managed in two ways:"
20865
msgstr ""
20866
20867
#: serverguide/C/file-server.xml:37(para)
20868
msgid "Anonymous"
20869
msgstr ""
20870
20871
#: serverguide/C/file-server.xml:40(para)
20872
msgid "Authenticated"
20873
msgstr ""
20874
20875
#: serverguide/C/file-server.xml:43(para)
20876
msgid ""
20877
"In the Anonymous mode, remote clients can access the FTP server by using the "
20878
"default user account called \"anonymous\" or \"ftp\" and sending an email "
20879
"address as the password. In the Authenticated mode a user must have an "
20880
"account and a password. User access to the FTP server directories and files "
20881
"is dependent on the permissions defined for the account used at login. As a "
20882
"general rule, the FTP daemon will hide the root directory of the FTP server "
20883
"and change it to the FTP Home directory. This hides the rest of the file "
20884
"system from remote sessions."
20885
msgstr ""
20886
20887
#: serverguide/C/file-server.xml:55(title)
20888
msgid "vsftpd - FTP Server Installation"
20889
msgstr ""
20890
20891
#: serverguide/C/file-server.xml:57(para)
20892
msgid ""
20893
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
20894
"and maintain. To install <application>vsftpd</application> you can run the "
20895
"following command:"
20896
msgstr ""
20897
20898
#: serverguide/C/file-server.xml:65(command)
20899
msgid "sudo apt-get install vsftpd"
20900
msgstr ""
20901
20902
#: serverguide/C/file-server.xml:71(title)
20903
msgid "Anonymous FTP Configuration"
20904
msgstr ""
20905
20906
#: serverguide/C/file-server.xml:73(para)
20907
msgid ""
20908
"By default <application>vsftpd</application> is configured to only allow "
20909
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
20910
"created with a home directory of <filename>/home/ftp</filename>. This is the "
20911
"default FTP directory."
20912
msgstr ""
20913
20914
#: serverguide/C/file-server.xml:80(para)
20915
msgid ""
20916
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
20917
"example, simply create a directory in another location and change the "
20918
"<emphasis>ftp</emphasis> user's home directory:"
20919
msgstr ""
20920
20921
#: serverguide/C/file-server.xml:87(command)
20922
msgid "sudo mkdir /srv/ftp"
20923
msgstr ""
20924
20925
#: serverguide/C/file-server.xml:88(command)
20926
msgid "sudo usermod -d /srv/ftp ftp"
20927
msgstr ""
20928
20929
#: serverguide/C/file-server.xml:91(para)
20930
msgid "After making the change restart <application>vsftpd</application>:"
20931
msgstr ""
20932
20933
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
20934
msgid "sudo /etc/init.d/vsftpd restart"
20935
msgstr ""
20936
20937
#: serverguide/C/file-server.xml:99(para)
20938
msgid ""
20939
"Finally, copy any files and directories you would like to make available "
20940
"through anonymous FTP to <filename>/srv/ftp</filename>."
20941
msgstr ""
20942
20943
#: serverguide/C/file-server.xml:106(title)
20944
msgid "User Authenticated FTP Configuration"
20945
msgstr ""
20946
20947
#: serverguide/C/file-server.xml:108(para)
20948
msgid ""
20949
"To configure <application>vsftpd</application> to authenticate system users "
20950
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
20951
msgstr ""
20952
20953
#: serverguide/C/file-server.xml:114(programlisting)
20954
#, no-wrap
20955
msgid ""
20956
"\n"
20957
"local_enable=YES\n"
20958
"write_enable=YES\n"
20959
msgstr ""
20960
20961
#: serverguide/C/file-server.xml:119(para)
20962
msgid "Now restart <application>vsftpd</application>:"
20963
msgstr ""
20964
20965
#: serverguide/C/file-server.xml:127(para)
20966
msgid ""
20967
"Now when system users login to FTP they will start in their "
20968
"<emphasis>home</emphasis> directories where they can download, upload, "
20969
"create directories, etc."
20970
msgstr ""
20971
20972
#: serverguide/C/file-server.xml:133(para)
20973
msgid ""
20974
"Similarly, by default, the anonymous users are not allowed to upload files "
20975
"to FTP server. To change this setting, you should uncomment the following "
20976
"line, and restart <application>vsftpd</application>:"
20977
msgstr ""
20978
20979
#: serverguide/C/file-server.xml:140(programlisting)
20980
#, no-wrap
20981
msgid ""
20982
"\n"
20983
"anon_upload_enable=YES\n"
20984
msgstr ""
20985
20986
#: serverguide/C/file-server.xml:145(para)
20987
msgid ""
20988
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
20989
"not enable anonymous upload on servers accessed directly from the Internet."
20990
msgstr ""
20991
20992
#: serverguide/C/file-server.xml:151(para)
20993
msgid ""
20994
"The configuration file consists of many configuration parameters. The "
20995
"information about each parameter is available in the configuration file. "
20996
"Alternatively, you can refer to the man page, <command>man 5 "
20997
"vsftpd.conf</command> for details of each parameter."
20998
msgstr ""
20999
21000
#: serverguide/C/file-server.xml:162(title)
21001
msgid "Securing FTP"
21002
msgstr ""
21003
21004
#: serverguide/C/file-server.xml:164(para)
21005
msgid ""
21006
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21007
"<application>vsftpd</application> more secure. For example users can be "
21008
"limited to their home directories by uncommenting:"
21009
msgstr ""
21010
21011
#: serverguide/C/file-server.xml:170(programlisting)
21012
#, no-wrap
21013
msgid ""
21014
"\n"
21015
"chroot_local_user=YES\n"
21016
msgstr ""
21017
21018
#: serverguide/C/file-server.xml:174(para)
21019
msgid ""
21020
"You can also limit a specific list of users to just their home directories:"
21021
msgstr ""
21022
21023
#: serverguide/C/file-server.xml:178(programlisting)
21024
#, no-wrap
21025
msgid ""
21026
"\n"
21027
"chroot_list_enable=YES\n"
21028
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21029
msgstr ""
21030
21031
#: serverguide/C/file-server.xml:183(para)
21032
msgid ""
21033
"After uncommenting the above options, create a "
21034
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21035
"per line. Then restart <application>vsftpd</application>:"
21036
msgstr ""
21037
21038
#: serverguide/C/file-server.xml:192(para)
21039
msgid ""
21040
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21041
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21042
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21043
"add them to the list."
21044
msgstr ""
21045
21046
#: serverguide/C/file-server.xml:199(para)
21047
msgid ""
21048
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21049
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21050
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21051
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21052
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21053
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21054
"with a shell may not be ideal for some environments, such as a shared web "
21055
"host."
21056
msgstr ""
21057
21058
#: serverguide/C/file-server.xml:208(para)
21059
msgid ""
21060
"To configure <emphasis>FTPS</emphasis>, edit "
21061
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21062
msgstr ""
21063
21064
#: serverguide/C/file-server.xml:212(programlisting)
21065
#, no-wrap
21066
msgid ""
21067
"\n"
21068
"ssl_enable=Yes\n"
21069
msgstr ""
21070
21071
#: serverguide/C/file-server.xml:216(para)
21072
msgid "Also, notice the certificate and key related options:"
21073
msgstr ""
21074
21075
#: serverguide/C/file-server.xml:220(programlisting)
21076
#, no-wrap
21077
msgid ""
21078
"\n"
21079
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21080
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21081
msgstr ""
21082
21083
#: serverguide/C/file-server.xml:225(para)
21084
msgid ""
21085
"By default these options are set the certificate and key provided by the "
21086
"<application>ssl-cert</application> package. In a production environment "
21087
"these should be replaced with a certificate and key generated for the "
21088
"specific host. For more information on certificates see <xref "
21089
"linkend=\"certificates-and-security\"/>."
21090
msgstr ""
21091
21092
#: serverguide/C/file-server.xml:231(para)
21093
msgid ""
21094
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21095
"be forced to use <emphasis>FTPS</emphasis>:"
21096
msgstr ""
21097
21098
#: serverguide/C/file-server.xml:240(para)
21099
msgid ""
21100
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21101
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21102
"adding the <emphasis>nologin</emphasis> shell:"
21103
msgstr ""
21104
21105
#: serverguide/C/file-server.xml:245(programlisting)
21106
#, no-wrap
21107
msgid ""
21108
"\n"
21109
"# /etc/shells: valid login shells\n"
21110
"/bin/csh\n"
21111
"/bin/sh\n"
21112
"/usr/bin/es\n"
21113
"/usr/bin/ksh\n"
21114
"/bin/ksh\n"
21115
"/usr/bin/rc\n"
21116
"/usr/bin/tcsh\n"
21117
"/bin/tcsh\n"
21118
"/usr/bin/esh\n"
21119
"/bin/dash\n"
21120
"/bin/bash\n"
21121
"/bin/rbash\n"
21122
"/usr/bin/screen\n"
21123
"/usr/sbin/nologin\n"
21124
msgstr ""
21125
21126
#: serverguide/C/file-server.xml:263(para)
21127
msgid ""
21128
"This is necessary because, by default <application>vsftpd</application> uses "
21129
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21130
"configuration file contains:"
21131
msgstr ""
21132
21133
#: serverguide/C/file-server.xml:268(programlisting)
21134
#, no-wrap
21135
msgid ""
21136
"\n"
21137
"auth required pam_shells.so\n"
21138
msgstr ""
21139
21140
#: serverguide/C/file-server.xml:272(para)
21141
msgid ""
21142
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21143
"in the <filename>/etc/shells</filename> file."
21144
msgstr ""
21145
21146
#: serverguide/C/file-server.xml:277(para)
21147
msgid ""
21148
"Most popular FTP clients can be configured connect using FTPS. The "
21149
"<application>lftp</application> command line FTP client has the ability to "
21150
"use FTPS as well."
21151
msgstr ""
21152
21153
#: serverguide/C/file-server.xml:288(para)
21154
msgid ""
21155
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21156
"website</ulink> for more information."
21157
msgstr ""
21158
21159
#: serverguide/C/file-server.xml:293(para)
21160
msgid ""
21161
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21162
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21163
"vsftpd.conf man page</ulink>."
21164
msgstr ""
21165
21166
#: serverguide/C/file-server.xml:299(para)
21167
msgid ""
21168
"The CodeGurus article <ulink "
21169
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21170
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21171
"contrasting FTPS and SFTP."
21172
msgstr ""
21173
21174
#: serverguide/C/file-server.xml:305(para)
21175
msgid ""
21176
"Also, for more information see the <ulink "
21177
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21178
"page."
21179
msgstr ""
21180
21181
#: serverguide/C/file-server.xml:315(title)
21182
msgid "Network File System (NFS)"
21183
msgstr ""
21184
21185
#: serverguide/C/file-server.xml:316(para)
21186
msgid ""
21187
"NFS allows a system to share directories and files with others over a "
21188
"network. By using NFS, users and programs can access files on remote systems "
21189
"almost as if they were local files."
21190
msgstr ""
21191
21192
#: serverguide/C/file-server.xml:322(para)
21193
msgid "Some of the most notable benefits that NFS can provide are:"
21194
msgstr ""
21195
21196
#: serverguide/C/file-server.xml:328(para)
21197
msgid ""
21198
"Local workstations use less disk space because commonly used data can be "
21199
"stored on a single machine and still remain accessible to others over the "
21200
"network."
21201
msgstr ""
21202
21203
#: serverguide/C/file-server.xml:333(para)
21204
msgid ""
21205
"There is no need for users to have separate home directories on every "
21206
"network machine. Home directories could be set up on the NFS server and made "
21207
"available throughout the network."
21208
msgstr ""
21209
21210
#: serverguide/C/file-server.xml:339(para)
21211
msgid ""
21212
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21213
"be used by other machines on the network. This may reduce the number of "
21214
"removable media drives throughout the network."
21215
msgstr ""
21216
21217
#: serverguide/C/file-server.xml:349(para)
21218
msgid ""
21219
"At a terminal prompt enter the following command to install the NFS Server:"
21220
msgstr ""
21221
21222
#: serverguide/C/file-server.xml:355(command)
21223
msgid "sudo apt-get install nfs-kernel-server"
21224
msgstr ""
21225
21226
#: serverguide/C/file-server.xml:361(para)
21227
msgid ""
21228
"You can configure the directories to be exported by adding them to the "
21229
"<filename>/etc/exports</filename> file. For example:"
21230
msgstr ""
21231
21232
#: serverguide/C/file-server.xml:366(screen)
21233
#, no-wrap
21234
msgid ""
21235
"\n"
21236
"/ubuntu *(ro,sync,no_root_squash)\n"
21237
"/home *(rw,sync,no_root_squash)\n"
21238
msgstr ""
21239
21240
#: serverguide/C/file-server.xml:372(para)
21241
msgid ""
21242
"You can replace * with one of the hostname formats. Make the hostname "
21243
"declaration as specific as possible so unwanted systems cannot access the "
21244
"NFS mount."
21245
msgstr ""
21246
21247
#: serverguide/C/file-server.xml:378(para)
21248
msgid ""
21249
"To start the NFS server, you can run the following command at a terminal "
21250
"prompt:"
21251
msgstr ""
21252
21253
#: serverguide/C/file-server.xml:383(command)
21254
msgid "sudo /etc/init.d/nfs-kernel-server start"
21255
msgstr ""
21256
21257
#: serverguide/C/file-server.xml:388(title)
21258
msgid "NFS Client Configuration"
21259
msgstr ""
21260
21261
#: serverguide/C/file-server.xml:389(para)
21262
msgid ""
21263
"Use the <application>mount</application> command to mount a shared NFS "
21264
"directory from another machine, by typing a command line similar to the "
21265
"following at a terminal prompt:"
21266
msgstr ""
21267
21268
#: serverguide/C/file-server.xml:395(command)
21269
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21270
msgstr ""
21271
21272
#: serverguide/C/file-server.xml:399(para)
21273
msgid ""
21274
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21275
"There should be no files or subdirectories in the "
21276
"<filename>/local/ubuntu</filename> directory."
21277
msgstr ""
21278
21279
#: serverguide/C/file-server.xml:406(para)
21280
msgid ""
21281
"An alternate way to mount an NFS share from another machine is to add a line "
21282
"to the <filename>/etc/fstab</filename> file. The line must state the "
21283
"hostname of the NFS server, the directory on the server being exported, and "
21284
"the directory on the local machine where the NFS share is to be mounted."
21285
msgstr ""
21286
21287
#: serverguide/C/file-server.xml:414(para)
21288
msgid ""
21289
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21290
"as follows:"
21291
msgstr ""
21292
21293
#: serverguide/C/file-server.xml:420(programlisting)
21294
#, no-wrap
21295
msgid ""
21296
"\n"
21297
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21298
"rsize=8192,wsize=8192,timeo=14,intr\n"
21299
msgstr ""
21300
21301
#: serverguide/C/file-server.xml:424(para)
21302
msgid ""
21303
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21304
"common</application> package is installed on your client. To install "
21305
"<application>nfs-common</application> enter the following command at the "
21306
"terminal prompt: <screen>\n"
21307
"<command>sudo apt-get install nfs-common</command>\n"
21308
"</screen>"
21309
msgstr ""
21310
21311
#: serverguide/C/file-server.xml:437(ulink)
21312
msgid "Linux NFS faq"
21313
msgstr ""
21314
21315
#: serverguide/C/file-server.xml:439(ulink)
21316
msgid "Ubuntu Wiki NFS Howto"
21317
msgstr ""
21318
21319
#: serverguide/C/file-server.xml:445(title)
21320
msgid "CUPS - Print Server"
21321
msgstr ""
21322
21323
#: serverguide/C/file-server.xml:446(para)
21324
msgid ""
21325
"The primary mechanism for Ubuntu printing and print services is the "
21326
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21327
"printing system is a freely available, portable printing layer which has "
21328
"become the new standard for printing in most Linux distributions."
21329
msgstr ""
21330
21331
#: serverguide/C/file-server.xml:453(para)
21332
msgid ""
21333
"CUPS manages print jobs and queues and provides network printing using the "
21334
"standard Internet Printing Protocol (IPP), while offering support for a very "
21335
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21336
"also supports PostScript Printer Description (PPD) and auto-detection of "
21337
"network printers, and features a simple web-based configuration and "
21338
"administration tool."
21339
msgstr ""
21340
21341
#: serverguide/C/file-server.xml:463(para)
21342
msgid ""
21343
"To install CUPS on your Ubuntu computer, simply use "
21344
"<application>sudo</application> with the <application>apt-get</application> "
21345
"command and give the packages to install as the first parameter. A complete "
21346
"CUPS install has many package dependencies, but they may all be specified on "
21347
"the same command line. Enter the following at a terminal prompt to install "
21348
"CUPS:"
21349
msgstr ""
21350
21351
#: serverguide/C/file-server.xml:468(command)
21352
msgid "sudo apt-get install cups"
21353
msgstr ""
21354
21355
#: serverguide/C/file-server.xml:471(para)
21356
msgid ""
21357
"Upon authenticating with your user password, the packages should be "
21358
"downloaded and installed without error. Upon the conclusion of installation, "
21359
"the CUPS server will be started automatically."
21360
msgstr ""
21361
21362
#: serverguide/C/file-server.xml:476(para)
21363
msgid ""
21364
"For troubleshooting purposes, you can access CUPS server errors via the "
21365
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21366
"error log does not show enough information to troubleshoot any problems you "
21367
"encounter, the verbosity of the CUPS log can be increased by changing the "
21368
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21369
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21370
"everything, from the default of \"info\". If you make this change, remember "
21371
"to change it back once you've solved your problem, to prevent the log file "
21372
"from becoming overly large."
21373
msgstr ""
21374
21375
#: serverguide/C/file-server.xml:489(para)
21376
msgid ""
21377
"The Common UNIX Printing System server's behavior is configured through the "
21378
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21379
"The CUPS configuration file follows the same syntax as the primary "
21380
"configuration file for the Apache HTTP server, so users familiar with "
21381
"editing Apache's configuration file should feel at ease when editing the "
21382
"CUPS configuration file. Some examples of settings you may wish to change "
21383
"initially will be presented here."
21384
msgstr ""
21385
21386
#: serverguide/C/file-server.xml:499(para)
21387
msgid ""
21388
"Prior to editing the configuration file, you should make a copy of the "
21389
"original file and protect it from writing, so you will have the original "
21390
"settings as a reference, and to reuse as necessary."
21391
msgstr ""
21392
21393
#: serverguide/C/file-server.xml:503(para)
21394
msgid ""
21395
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21396
"writing with the following commands, issued at a terminal prompt:"
21397
msgstr ""
21398
21399
#: serverguide/C/file-server.xml:509(command)
21400
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21401
msgstr ""
21402
21403
#: serverguide/C/file-server.xml:510(command)
21404
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21405
msgstr ""
21406
21407
#: serverguide/C/file-server.xml:515(para)
21408
msgid ""
21409
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21410
"address of the designated administrator of the CUPS server, simply edit the "
21411
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21412
"preferred text editor, and add or modify the <emphasis "
21413
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21414
"you are the Administrator for the CUPS server, and your e-mail address is "
21415
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21416
"as such:"
21417
msgstr ""
21418
21419
#: serverguide/C/file-server.xml:526(screen)
21420
#, no-wrap
21421
msgid ""
21422
"\n"
21423
"ServerAdmin bjoy@somebigco.com\n"
21424
msgstr ""
21425
21426
#: serverguide/C/file-server.xml:532(para)
21427
msgid ""
21428
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21429
"server installation listens only on the loopback interface at IP address "
21430
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21431
"listen on an actual network adapter's IP address, you must specify either a "
21432
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21433
"addition of a Listen directive. For example, if your CUPS server resides on "
21434
"a local network at the IP address <emphasis "
21435
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21436
"accessible to the other systems on this subnetwork, you would edit the "
21437
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21438
"such:"
21439
msgstr ""
21440
21441
#: serverguide/C/file-server.xml:546(screen)
21442
#, no-wrap
21443
msgid ""
21444
"\n"
21445
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21446
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21447
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21448
"(IPP)\n"
21449
msgstr ""
21450
21451
#: serverguide/C/file-server.xml:552(para)
21452
msgid ""
21453
"In the example above, you may comment out or remove the reference to the "
21454
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21455
"</application> to listen on that interface, but would rather have it only "
21456
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21457
"listening for all network interfaces for which a certain hostname is bound, "
21458
"including the Loopback, you could create a Listen entry for the hostname "
21459
"<emphasis>socrates</emphasis> as such:"
21460
msgstr ""
21461
21462
#: serverguide/C/file-server.xml:562(screen)
21463
#, no-wrap
21464
msgid ""
21465
"\n"
21466
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21467
msgstr ""
21468
21469
#: serverguide/C/file-server.xml:566(para)
21470
msgid ""
21471
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21472
"instead, as in:"
21473
msgstr ""
21474
21475
#: serverguide/C/file-server.xml:568(screen)
21476
#, no-wrap
21477
msgid ""
21478
"\n"
21479
"Port 631 # Listen on port 631 on all interfaces\n"
21480
msgstr ""
21481
21482
#: serverguide/C/file-server.xml:575(para)
21483
msgid ""
21484
"For more examples of configuration directives in the CUPS server "
21485
"configuration file, view the associated system manual page by entering the "
21486
"following command at a terminal prompt:"
21487
msgstr ""
21488
21489
#: serverguide/C/file-server.xml:582(command)
21490
msgid "man cupsd.conf"
21491
msgstr ""
21492
21493
#: serverguide/C/file-server.xml:586(para)
21494
msgid ""
21495
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21496
"configuration file, you'll need to restart the CUPS server by typing the "
21497
"following command at a terminal prompt:"
21498
msgstr ""
21499
21500
#: serverguide/C/file-server.xml:592(command)
21501
msgid "sudo /etc/init.d/cups restart"
21502
msgstr ""
21503
21504
#: serverguide/C/file-server.xml:598(title)
21505
msgid "Web Interface"
21506
msgstr ""
21507
21508
#: serverguide/C/file-server.xml:600(para)
21509
msgid ""
21510
"CUPS can be configured and monitored using a web interface, which by default "
21511
"is available at <ulink "
21512
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21513
"web interface can be used to perform all printer management tasks."
21514
msgstr ""
21515
21516
#: serverguide/C/file-server.xml:604(para)
21517
msgid ""
21518
"In order to perform administrative tasks via the web interface, you must "
21519
"either have the root account enabled on your server, or authenticate as a "
21520
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21521
"reasons, CUPS won't authenticate a user that doesn't have a password."
21522
msgstr ""
21523
21524
#: serverguide/C/file-server.xml:607(para)
21525
msgid ""
21526
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21527
"at the terminal prompt: <screen>\n"
21528
"<command>sudo usermod -aG lpadmin username</command>\n"
21529
"</screen>"
21530
msgstr ""
21531
21532
#: serverguide/C/file-server.xml:613(para)
21533
msgid ""
21534
"Further documentation is available in the <emphasis "
21535
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21536
msgstr ""
21537
21538
#: serverguide/C/file-server.xml:621(ulink)
21539
msgid "CUPS Website"
21540
msgstr ""
21541
21542
#: serverguide/C/file-server.xml:624(ulink)
21543
msgid "Ubuntu Wiki CUPS page"
21544
msgstr ""
21545
21546
#: serverguide/C/dns.xml:13(title)
21547
msgid "Domain Name Service (DNS)"
21548
msgstr ""
21549
21550
#: serverguide/C/dns.xml:14(para)
21551
msgid ""
21552
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21553
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21554
"alleviates the need to remember IP addresses. Computers that run DNS are "
21555
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21556
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21557
"common program used for maintaining a name server on Linux."
21558
msgstr ""
21559
21560
#: serverguide/C/dns.xml:24(para)
21561
msgid ""
21562
"At a terminal prompt, enter the following command to install "
21563
"<application>dns</application>:"
21564
msgstr ""
21565
21566
#: serverguide/C/dns.xml:28(command)
21567
msgid "sudo apt-get install bind9"
21568
msgstr ""
21569
21570
#: serverguide/C/dns.xml:30(para)
21571
msgid ""
21572
"A very useful package for testing and troubleshooting DNS issues is the "
21573
"dnsutils package. To install <application>dnsutils</application> enter the "
21574
"following:"
21575
msgstr ""
21576
21577
#: serverguide/C/dns.xml:35(command)
21578
msgid "sudo apt-get install dnsutils"
21579
msgstr ""
21580
21581
#: serverguide/C/dns.xml:40(para)
21582
msgid ""
21583
"There a many ways to configure <application>BIND9</application>. Some of the "
21584
"most common configurations are a caching nameserver, primary master, and a "
21585
"as a secondary master."
21586
msgstr ""
21587
21588
#: serverguide/C/dns.xml:46(para)
21589
msgid ""
21590
"When configured as a caching nameserver BIND9 will find the answer to name "
21591
"queries and remember the answer when the domain is queried again."
21592
msgstr ""
21593
21594
#: serverguide/C/dns.xml:52(para)
21595
msgid ""
21596
"As a primary master server BIND9 reads the data for a zone from a file on "
21597
"it's host and is authoritative for that zone."
21598
msgstr ""
21599
21600
#: serverguide/C/dns.xml:57(para)
21601
msgid ""
21602
"In a secondary master configuration BIND9 gets the zone data from another "
21603
"nameserver authoritative for the zone."
21604
msgstr ""
21605
21606
#: serverguide/C/dns.xml:65(para)
21607
msgid ""
21608
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
21609
"directory. The primary configuration file is "
21610
"<filename>/etc/bind/named.conf</filename>."
21611
msgstr ""
21612
21613
#: serverguide/C/dns.xml:72(para)
21614
msgid ""
21615
"The <emphasis>include</emphasis> line specifies the filename which contains "
21616
"the DNS options. The <emphasis>directory</emphasis> line in the "
21617
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
21618
"look for files. All files BIND uses will be relative to this directory."
21619
msgstr ""
21620
21621
#: serverguide/C/dns.xml:80(para)
21622
msgid ""
21623
"The file named <filename>/etc/bind/db.root</filename> describes the root "
21624
"nameservers in the world. The servers change over time, so the "
21625
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
21626
"This is usually done as updates to the <application>bind9</application> "
21627
"package. The <emphasis>zone</emphasis> section defines a master server, and "
21628
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
21629
msgstr ""
21630
21631
#: serverguide/C/dns.xml:90(para)
21632
msgid ""
21633
"It is possible to configure the same server to be a caching name server, "
21634
"primary master, and secondary master. A server can be the Start of Authority "
21635
"(SOA) for one zone, while providing secondary service for another zone. All "
21636
"the while providing caching services for hosts on the local LAN."
21637
msgstr ""
21638
21639
#: serverguide/C/dns.xml:98(title)
21640
msgid "Caching Nameserver"
21641
msgstr ""
21642
21643
#: serverguide/C/dns.xml:99(para)
21644
msgid ""
21645
"The default configuration is setup to act as a caching server. All that is "
21646
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
21647
"uncomment and edit the following in "
21648
"<filename>/etc/bind/named.conf.options</filename>:"
21649
msgstr ""
21650
21651
#: serverguide/C/dns.xml:103(programlisting)
21652
#, no-wrap
21653
msgid ""
21654
"\n"
21655
"forwarders {\n"
21656
" 1.2.3.4;\n"
21657
" 5.6.7.8;\n"
21658
" };\n"
21659
msgstr ""
21660
21661
#: serverguide/C/dns.xml:110(para)
21662
msgid ""
21663
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
21664
"the IP Adresses of actual nameservers."
21665
msgstr ""
21666
21667
#: serverguide/C/dns.xml:114(para)
21668
msgid ""
21669
"Now restart the DNS server, to enable the new configuration. From a terminal "
21670
"prompt:"
21671
msgstr ""
21672
21673
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
21674
msgid "sudo /etc/init.d/bind9 restart"
21675
msgstr ""
21676
21677
#: serverguide/C/dns.xml:120(para)
21678
msgid ""
21679
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
21680
"DNS server."
21681
msgstr ""
21682
21683
#: serverguide/C/dns.xml:125(title)
21684
msgid "Primary Master"
21685
msgstr ""
21686
21687
#: serverguide/C/dns.xml:126(para)
21688
msgid ""
21689
"In this section <application>BIND9</application> will be configured as the "
21690
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
21691
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
21692
"(Fully Qualified Domain Name)."
21693
msgstr ""
21694
21695
#: serverguide/C/dns.xml:132(title)
21696
msgid "Forward Zone File"
21697
msgstr ""
21698
21699
#: serverguide/C/dns.xml:133(para)
21700
msgid ""
21701
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
21702
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
21703
msgstr ""
21704
21705
#: serverguide/C/dns.xml:137(programlisting)
21706
#, no-wrap
21707
msgid ""
21708
"\n"
21709
"zone \"example.com\" {\n"
21710
"\ttype master;\n"
21711
" file \"/etc/bind/db.example.com\";\n"
21712
"};\n"
21713
msgstr ""
21714
21715
#: serverguide/C/dns.xml:143(para)
21716
msgid ""
21717
"Now use an existing zone file as a template to create the "
21718
"<filename>/etc/bind/db.example.com</filename> file:"
21719
msgstr ""
21720
21721
#: serverguide/C/dns.xml:147(command)
21722
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
21723
msgstr ""
21724
21725
#: serverguide/C/dns.xml:149(para)
21726
msgid ""
21727
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
21728
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
21729
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
21730
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
21731
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
21732
"leaving the \".\" at the end."
21733
msgstr ""
21734
21735
#: serverguide/C/dns.xml:155(para)
21736
msgid ""
21737
"Also, create an <emphasis>A record</emphasis> for <emphasis "
21738
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
21739
msgstr ""
21740
21741
#: serverguide/C/dns.xml:159(programlisting)
21742
#, no-wrap
21743
msgid ""
21744
"\n"
21745
";\n"
21746
"; BIND data file for local loopback interface\n"
21747
";\n"
21748
"$TTL 604800\n"
21749
"@ IN SOA ns.example.com. root.example.com. (\n"
21750
" 2 ; Serial\n"
21751
" 604800 ; Refresh\n"
21752
" 86400 ; Retry\n"
21753
" 2419200 ; Expire\n"
21754
" 604800 ) ; Negative Cache TTL\n"
21755
";\n"
21756
"@ IN NS ns.example.com.\n"
21757
"@ IN A 127.0.0.1\n"
21758
"@ IN AAAA ::1\n"
21759
"ns IN A 192.168.1.10\n"
21760
msgstr ""
21761
21762
#: serverguide/C/dns.xml:176(para)
21763
msgid ""
21764
"You must increment the <emphasis>Serial Number</emphasis> every time you "
21765
"make changes to the zone file. If you make multiple changes before "
21766
"restarting BIND9, simply increment the Serial once."
21767
msgstr ""
21768
21769
#: serverguide/C/dns.xml:180(para)
21770
msgid ""
21771
"Now, you can add DNS records to the bottom of the zone file. See <xref "
21772
"linkend=\"dns-record-types\"/> for details."
21773
msgstr ""
21774
21775
#: serverguide/C/dns.xml:184(para)
21776
msgid ""
21777
"Many admins like to use the last date edited as the serial of a zone, such "
21778
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
21779
"<emphasis>ss</emphasis> is the Serial Number)"
21780
msgstr ""
21781
21782
#: serverguide/C/dns.xml:189(para)
21783
msgid ""
21784
"Once you have made a change to the zone file "
21785
"<application>BIND9</application> will need to be restarted for the changes "
21786
"to take effect:"
21787
msgstr ""
21788
21789
#: serverguide/C/dns.xml:198(title)
21790
msgid "Reverse Zone File"
21791
msgstr ""
21792
21793
#: serverguide/C/dns.xml:199(para)
21794
msgid ""
21795
"Now that the zone is setup and resolving names to IP Adresses a "
21796
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
21797
"DNS to resolve an address to a name."
21798
msgstr ""
21799
21800
#: serverguide/C/dns.xml:203(para)
21801
msgid "Edit /etc/bind/named.conf.local and add the following:"
21802
msgstr ""
21803
21804
#: serverguide/C/dns.xml:206(programlisting)
21805
#, no-wrap
21806
msgid ""
21807
"\n"
21808
"zone \"1.168.192.in-addr.arpa\" {\n"
21809
" type master;\n"
21810
" notify no;\n"
21811
" file \"/etc/bind/db.192\";\n"
21812
"};\n"
21813
msgstr ""
21814
21815
#: serverguide/C/dns.xml:214(para)
21816
msgid ""
21817
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
21818
"whatever network you are using. Also, name the zone file "
21819
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
21820
"first octet of your network."
21821
msgstr ""
21822
21823
#: serverguide/C/dns.xml:219(para)
21824
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
21825
msgstr ""
21826
21827
#: serverguide/C/dns.xml:223(command)
21828
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
21829
msgstr ""
21830
21831
#: serverguide/C/dns.xml:225(para)
21832
msgid ""
21833
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
21834
"same options as <filename>/etc/bind/db.example.com</filename>:"
21835
msgstr ""
21836
21837
#: serverguide/C/dns.xml:229(programlisting)
21838
#, no-wrap
21839
msgid ""
21840
"\n"
21841
";\n"
21842
"; BIND reverse data file for local loopback interface\n"
21843
";\n"
21844
"$TTL 604800\n"
21845
"@ IN SOA ns.example.com. root.example.com. (\n"
21846
" 2 ; Serial\n"
21847
" 604800 ; Refresh\n"
21848
" 86400 ; Retry\n"
21849
" 2419200 ; Expire\n"
21850
" 604800 ) ; Negative Cache TTL\n"
21851
";\n"
21852
"@ IN NS ns.\n"
21853
"10 IN PTR ns.example.com.\n"
21854
msgstr ""
21855
21856
#: serverguide/C/dns.xml:244(para)
21857
msgid ""
21858
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
21859
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
21860
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
21861
"create a <emphasis>PTR record</emphasis> in "
21862
"<filename>/etc/bind/db.192</filename>."
21863
msgstr ""
21864
21865
#: serverguide/C/dns.xml:249(para)
21866
msgid ""
21867
"After creating the reverse zone file restart "
21868
"<application>BIND9</application>:"
21869
msgstr ""
21870
21871
#: serverguide/C/dns.xml:258(title)
21872
msgid "Secondary Master"
21873
msgstr ""
21874
21875
#: serverguide/C/dns.xml:259(para)
21876
msgid ""
21877
"Once a <emphasis>Primary Master</emphasis> has been configured a "
21878
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
21879
"availability of the domain should the Primary become unavailable."
21880
msgstr ""
21881
21882
#: serverguide/C/dns.xml:263(para)
21883
msgid ""
21884
"First, on the Primary Master server, the zone transfer needs to be allowed. "
21885
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
21886
"and Reverse zone definitions in "
21887
"<filename>/etc/bind/named.conf.local</filename>:"
21888
msgstr ""
21889
21890
#: serverguide/C/dns.xml:267(programlisting)
21891
#, no-wrap
21892
msgid ""
21893
"\n"
21894
"zone \"example.com\" {\n"
21895
" type master;\n"
21896
"\tfile \"/etc/bind/db.example.com\";\n"
21897
" allow-transfer { 192.168.1.11; };\n"
21898
"};\n"
21899
"\n"
21900
"zone \"1.168.192.in-addr.arpa\" {\n"
21901
" type master;\n"
21902
" notify no;\n"
21903
" file \"/etc/bind/db.192\";\n"
21904
"\tallow-transfer { 192.168.1.11; };\n"
21905
"};\n"
21906
msgstr ""
21907
21908
#: serverguide/C/dns.xml:282(para)
21909
msgid ""
21910
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
21911
"Secondary nameserver."
21912
msgstr ""
21913
21914
#: serverguide/C/dns.xml:286(para)
21915
msgid ""
21916
"Next, on the Secondary Master, install the <application>bind9</application> "
21917
"package the same way as on the Primary. Then edit the "
21918
"<filename>/etc/bind/named.conf.local</filename> and add the following "
21919
"declarations for the Forward and Reverse zones:"
21920
msgstr ""
21921
21922
#: serverguide/C/dns.xml:290(programlisting)
21923
#, no-wrap
21924
msgid ""
21925
"\n"
21926
"zone \"example.com\" {\n"
21927
"\ttype slave;\n"
21928
" file \"/var/cache/bind/db.example.com\";\n"
21929
" masters { 192.168.1.10; };\n"
21930
"}; \n"
21931
" \n"
21932
"zone \"1.168.192.in-addr.arpa\" {\n"
21933
"\ttype slave;\n"
21934
" file \"/var/cache/bind/db.192\";\n"
21935
" masters { 192.168.1.10; };\n"
21936
"};\n"
21937
msgstr ""
21938
21939
#: serverguide/C/dns.xml:304(para)
21940
msgid ""
21941
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
21942
"Primary nameserver."
21943
msgstr ""
21944
21945
#: serverguide/C/dns.xml:308(para)
21946
msgid "Restart <application>BIND9</application> on the Secondary Master:"
21947
msgstr ""
21948
21949
#: serverguide/C/dns.xml:314(para)
21950
msgid ""
21951
"In <filename>/var/log/syslog</filename> you should see something similar to:"
21952
msgstr ""
21953
21954
#: serverguide/C/dns.xml:317(programlisting)
21955
#, no-wrap
21956
msgid ""
21957
"\n"
21958
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
21959
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
21960
msgstr ""
21961
21962
#: serverguide/C/dns.xml:322(para)
21963
msgid ""
21964
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
21965
"on the Primary is larger than the one on the Secondary."
21966
msgstr ""
21967
21968
#: serverguide/C/dns.xml:328(para)
21969
msgid ""
21970
"The default directory for non-authoritative zone files is "
21971
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
21972
"<application>AppArmor</application> to allow the "
21973
"<application>named</application> daemon to write to. For more information on "
21974
"AppArmor see <xref linkend=\"apparmor\"/>."
21975
msgstr ""
21976
21977
#: serverguide/C/dns.xml:339(para)
21978
msgid ""
21979
"This section covers ways to help determine the cause when problems happen "
21980
"with DNS and <application>BIND9</application>."
21981
msgstr ""
21982
21983
#: serverguide/C/dns.xml:345(title)
21984
msgid "resolv.conf"
21985
msgstr ""
21986
21987
#: serverguide/C/dns.xml:346(para)
21988
msgid ""
21989
"The first step in testing <application>BIND9</application> is to add the "
21990
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
21991
"be configured as well as another host to double check things. Simply edit "
21992
"<filename>/etc/resolv.conf</filename> and add the following:"
21993
msgstr ""
21994
21995
#: serverguide/C/dns.xml:351(programlisting)
21996
#, no-wrap
21997
msgid ""
21998
"\n"
21999
"nameserver\t192.168.1.10\n"
22000
"nameserver\t192.168.1.11\n"
22001
msgstr ""
22002
22003
#: serverguide/C/dns.xml:356(para)
22004
msgid ""
22005
"You should also add the IP Address of the Secondary nameserver in case the "
22006
"Primary becomes unavailable."
22007
msgstr ""
22008
22009
#: serverguide/C/dns.xml:362(title)
22010
msgid "dig"
22011
msgstr ""
22012
22013
#: serverguide/C/dns.xml:363(para)
22014
msgid ""
22015
"If you installed the <application>dnsutils</application> package you can "
22016
"test your setup using the DNS lookup utility <application>dig</application>:"
22017
msgstr ""
22018
22019
#: serverguide/C/dns.xml:369(para)
22020
msgid ""
22021
"After installing <application>BIND9</application> use "
22022
"<application>dig</application> against the loopback interface to make sure "
22023
"it is listening on port 53. From a terminal prompt:"
22024
msgstr ""
22025
22026
#: serverguide/C/dns.xml:374(command)
22027
msgid "dig -x 127.0.0.1"
22028
msgstr ""
22029
22030
#: serverguide/C/dns.xml:376(para)
22031
msgid "You should see lines similar to the following in the command output:"
22032
msgstr ""
22033
22034
#: serverguide/C/dns.xml:379(programlisting)
22035
#, no-wrap
22036
msgid ""
22037
"\n"
22038
";; Query time: 1 msec\n"
22039
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22040
msgstr ""
22041
22042
#: serverguide/C/dns.xml:385(para)
22043
msgid ""
22044
"If you have configured <application>BIND9</application> as a "
22045
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22046
"the query time:"
22047
msgstr ""
22048
22049
#: serverguide/C/dns.xml:390(command)
22050
msgid "dig ubuntu.com"
22051
msgstr ""
22052
22053
#: serverguide/C/dns.xml:392(para)
22054
msgid "Note the query time toward the end of the command output:"
22055
msgstr ""
22056
22057
#: serverguide/C/dns.xml:395(programlisting)
22058
#, no-wrap
22059
msgid ""
22060
"\n"
22061
";; Query time: 49 msec\n"
22062
msgstr ""
22063
22064
#: serverguide/C/dns.xml:398(para)
22065
msgid "After a second dig there should be improvement:"
22066
msgstr ""
22067
22068
#: serverguide/C/dns.xml:401(programlisting)
22069
#, no-wrap
22070
msgid ""
22071
"\n"
22072
";; Query time: 1 msec\n"
22073
msgstr ""
22074
22075
#: serverguide/C/dns.xml:408(title)
22076
msgid "ping"
22077
msgstr ""
22078
22079
#: serverguide/C/dns.xml:410(para)
22080
msgid ""
22081
"Now to demonstrate how applications make use of DNS to resolve a host name "
22082
"use the <application>ping</application> utility to send an ICMP echo "
22083
"request. From a terminal prompt enter:"
22084
msgstr ""
22085
22086
#: serverguide/C/dns.xml:416(command)
22087
msgid "ping example.com"
22088
msgstr ""
22089
22090
#: serverguide/C/dns.xml:418(para)
22091
msgid ""
22092
"This tests if the nameserver can resolve the name "
22093
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22094
"should resemble:"
22095
msgstr ""
22096
22097
#: serverguide/C/dns.xml:422(programlisting)
22098
#, no-wrap
22099
msgid ""
22100
"\n"
22101
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22102
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22103
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22104
msgstr ""
22105
22106
#: serverguide/C/dns.xml:429(title)
22107
msgid "named-checkzone"
22108
msgstr ""
22109
22110
#: serverguide/C/dns.xml:430(para)
22111
msgid ""
22112
"A great way to test your zone files is by using the <application>named-"
22113
"checkzone</application> utility installed with the "
22114
"<application>bind9</application> package. This utility allows you to make "
22115
"sure the configuration is correct before restarting "
22116
"<application>BIND9</application> and making the changes live."
22117
msgstr ""
22118
22119
#: serverguide/C/dns.xml:437(para)
22120
msgid ""
22121
"To test our example Forward zone file enter the following from a command "
22122
"prompt:"
22123
msgstr ""
22124
22125
#: serverguide/C/dns.xml:441(command)
22126
msgid "named-checkzone example.com /etc/bind/db.example.com"
22127
msgstr ""
22128
22129
#: serverguide/C/dns.xml:443(para)
22130
msgid ""
22131
"If everything is configured correctly you should see output similar to:"
22132
msgstr ""
22133
22134
#: serverguide/C/dns.xml:446(programlisting)
22135
#, no-wrap
22136
msgid ""
22137
"\n"
22138
"zone example.com/IN: loaded serial 6\n"
22139
"OK\n"
22140
msgstr ""
22141
22142
#: serverguide/C/dns.xml:452(para)
22143
msgid "Similarly, to test the Reverse zone file enter the following:"
22144
msgstr ""
22145
22146
#: serverguide/C/dns.xml:456(command)
22147
msgid "named-checkzone example.com /etc/bind/db.192"
22148
msgstr ""
22149
22150
#: serverguide/C/dns.xml:458(para)
22151
msgid "The output should be similar to:"
22152
msgstr ""
22153
22154
#: serverguide/C/dns.xml:461(programlisting)
22155
#, no-wrap
22156
msgid ""
22157
"\n"
22158
"zone example.com/IN: loaded serial 3\n"
22159
"OK\n"
22160
msgstr ""
22161
22162
#: serverguide/C/dns.xml:468(para)
22163
msgid ""
22164
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22165
"different."
22166
msgstr ""
22167
22168
#: serverguide/C/dns.xml:475(title)
22169
msgid "Logging"
22170
msgstr ""
22171
22172
#: serverguide/C/dns.xml:476(para)
22173
msgid ""
22174
"<application>BIND9</application> has a wide variety of logging configuration "
22175
"options available. There are two main options. The "
22176
"<emphasis>channel</emphasis> option configures where logs go, and the "
22177
"<emphasis>category</emphasis> option determines what information to log."
22178
msgstr ""
22179
22180
#: serverguide/C/dns.xml:480(para)
22181
msgid "If no logging option is configured the default option is:"
22182
msgstr ""
22183
22184
#: serverguide/C/dns.xml:483(programlisting)
22185
#, no-wrap
22186
msgid ""
22187
"\n"
22188
"logging {\n"
22189
" category default { default_syslog; default_debug; };\n"
22190
" category unmatched { null; };\n"
22191
"};\n"
22192
msgstr ""
22193
22194
#: serverguide/C/dns.xml:489(para)
22195
msgid ""
22196
"This section covers configuring <application>BIND9</application> to send "
22197
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22198
"file."
22199
msgstr ""
22200
22201
#: serverguide/C/dns.xml:494(para)
22202
msgid ""
22203
"First, we need to configure a channel to specify which file to send the "
22204
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22205
"the following:"
22206
msgstr ""
22207
22208
#: serverguide/C/dns.xml:498(programlisting)
22209
#, no-wrap
22210
msgid ""
22211
"\n"
22212
"logging {\n"
22213
" channel query.log { \n"
22214
" file \"/var/log/query.log\";\n"
22215
" severity debug 3; \n"
22216
" }; \n"
22217
"};\n"
22218
msgstr ""
22219
22220
#: serverguide/C/dns.xml:508(para)
22221
msgid "Next, configure a category to send all DNS queries to the query file:"
22222
msgstr ""
22223
22224
#: serverguide/C/dns.xml:511(programlisting)
22225
#, no-wrap
22226
msgid ""
22227
"\n"
22228
"logging {\n"
22229
" channel query.log { \n"
22230
" file \"/var/log/query.log\"; \n"
22231
" severity debug 3; \n"
22232
" }; \n"
22233
" <emphasis>category queries { query.log; };</emphasis> \n"
22234
"};\n"
22235
msgstr ""
22236
22237
#: serverguide/C/dns.xml:523(para)
22238
msgid ""
22239
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22240
"level isn't specified level 1 is the default."
22241
msgstr ""
22242
22243
#: serverguide/C/dns.xml:529(para)
22244
msgid ""
22245
"Since the <emphasis>named daemon</emphasis> runs as the "
22246
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22247
"file must be created and the ownership changed:"
22248
msgstr ""
22249
22250
#: serverguide/C/dns.xml:534(command)
22251
msgid "sudo touch /var/log/query.log"
22252
msgstr ""
22253
22254
#: serverguide/C/dns.xml:535(command)
22255
msgid "sudo chown bind /var/log/query.log"
22256
msgstr ""
22257
22258
#: serverguide/C/dns.xml:539(para)
22259
msgid ""
22260
"Before <application>named</application> daemon can write to the new log file "
22261
"the <application>AppArmor</application> profile must be updated. First, edit "
22262
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22263
msgstr ""
22264
22265
#: serverguide/C/dns.xml:543(programlisting)
22266
#, no-wrap
22267
msgid ""
22268
"\n"
22269
"/var/log/query.log w,\n"
22270
msgstr ""
22271
22272
#: serverguide/C/dns.xml:546(para)
22273
msgid "Next, reload the profile:"
22274
msgstr ""
22275
22276
#: serverguide/C/dns.xml:550(command)
22277
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22278
msgstr ""
22279
22280
#: serverguide/C/dns.xml:552(para)
22281
msgid ""
22282
"For more information on <application>AppArmor</application> see <xref "
22283
"linkend=\"apparmor\"/>"
22284
msgstr ""
22285
22286
#: serverguide/C/dns.xml:557(para)
22287
msgid ""
22288
"Now restart <application>BIND9</application> for the changes to take effect:"
22289
msgstr ""
22290
22291
#: serverguide/C/dns.xml:565(para)
22292
msgid ""
22293
"You should see the file <filename>/var/log/query.log</filename> fill with "
22294
"query information. This is a simple example of the "
22295
"<application>BIND9</application> logging options. For coverage of advanced "
22296
"options see <xref linkend=\"dns-more-info\"/>."
22297
msgstr ""
22298
22299
#: serverguide/C/dns.xml:574(title)
22300
msgid "Common Record Types"
22301
msgstr ""
22302
22303
#: serverguide/C/dns.xml:575(para)
22304
msgid "This section covers some of the most common DNS record types."
22305
msgstr ""
22306
22307
#: serverguide/C/dns.xml:580(para)
22308
msgid ""
22309
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22310
msgstr ""
22311
22312
#: serverguide/C/dns.xml:583(programlisting)
22313
#, no-wrap
22314
msgid ""
22315
"\n"
22316
"www IN A 192.168.1.12\n"
22317
msgstr ""
22318
22319
#: serverguide/C/dns.xml:588(para)
22320
msgid ""
22321
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22322
"record. You cannot create a CNAME record pointing to another CNAME record."
22323
msgstr ""
22324
22325
#: serverguide/C/dns.xml:591(programlisting)
22326
#, no-wrap
22327
msgid ""
22328
"\n"
22329
"web IN CNAME www\n"
22330
msgstr ""
22331
22332
#: serverguide/C/dns.xml:596(para)
22333
msgid ""
22334
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22335
"to. Must point to an A record, not a CNAME."
22336
msgstr ""
22337
22338
#: serverguide/C/dns.xml:599(programlisting)
22339
#, no-wrap
22340
msgid ""
22341
"\n"
22342
" IN MX 1 mail.example.com.\n"
22343
"mail IN A 192.168.1.13\n"
22344
msgstr ""
22345
22346
#: serverguide/C/dns.xml:605(para)
22347
msgid ""
22348
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22349
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22350
"Secondary servers are defined."
22351
msgstr ""
22352
22353
#: serverguide/C/dns.xml:609(programlisting)
22354
#, no-wrap
22355
msgid ""
22356
"\n"
22357
" IN NS ns.example.com.\n"
22358
"\tIN NS ns2.example.com.\n"
22359
"ns IN A 192.168.1.10\n"
22360
"ns2\tIN A\t 192.168.1.11\n"
22361
msgstr ""
22362
22363
#: serverguide/C/dns.xml:622(para)
22364
msgid ""
22365
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22366
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22367
msgstr ""
22368
22369
#: serverguide/C/dns.xml:627(para)
22370
msgid ""
22371
"For in depth coverage of <emphasis>DNS</emphasis> and "
22372
"<application>BIND9</application> see <ulink "
22373
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22374
msgstr ""
22375
22376
#: serverguide/C/dns.xml:632(para)
22377
msgid ""
22378
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22379
"BIND</ulink> is a popular book now in it's fifth edition."
22380
msgstr ""
22381
22382
#: serverguide/C/dns.xml:637(para)
22383
msgid ""
22384
"A great place to ask for <application>BIND9</application> assistance, and "
22385
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22386
"server</emphasis> IRC channel on <ulink "
22387
"url=\"http://freenode.net\">freenode</ulink>."
22388
msgstr ""
22389
22390
#: serverguide/C/dns.xml:643(para)
22391
msgid ""
22392
"Also, see the <ulink "
22393
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22394
"HOWTO</ulink> in the Ubuntu Wiki."
22395
msgstr ""
22396
22397
#: serverguide/C/databases.xml:13(title)
22398
msgid "Databases"
22399
msgstr ""
22400
22401
#: serverguide/C/databases.xml:14(para)
22402
msgid "Ubuntu provides two popular database servers. They are:"
22403
msgstr ""
22404
22405
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22406
msgid "PostgreSQL"
22407
msgstr ""
22408
22409
#: serverguide/C/databases.xml:25(para)
22410
msgid ""
22411
"They are available in the main repository. This section explains how to "
22412
"install and configure these database servers."
22413
msgstr ""
22414
22415
#: serverguide/C/databases.xml:32(para)
22416
msgid ""
22417
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22418
"It is intended for mission-critical, heavy-load production systems as well "
22419
"as for embedding into mass-deployed software."
22420
msgstr ""
22421
22422
#: serverguide/C/databases.xml:41(para)
22423
msgid "To install MySQL, run the following command from a terminal prompt:"
22424
msgstr ""
22425
22426
#: serverguide/C/databases.xml:46(command)
22427
msgid "sudo apt-get install mysql-server"
22428
msgstr ""
22429
22430
#: serverguide/C/databases.xml:48(para)
22431
msgid ""
22432
"During the installation process you will be prompted to enter a password for "
22433
"the <application>MySQL</application> root user."
22434
msgstr ""
22435
22436
#: serverguide/C/databases.xml:53(para)
22437
msgid ""
22438
"Once the installation is complete, the MySQL server should be started "
22439
"automatically. You can run the following command from a terminal prompt to "
22440
"check whether the MySQL server is running:"
22441
msgstr ""
22442
22443
#: serverguide/C/databases.xml:61(command)
22444
msgid "sudo netstat -tap | grep mysql"
22445
msgstr ""
22446
22447
#: serverguide/C/databases.xml:70(programlisting)
22448
#, no-wrap
22449
msgid ""
22450
"\n"
22451
"tcp 0 0 localhost:mysql *:* LISTEN "
22452
" 2556/mysqld\n"
22453
msgstr ""
22454
22455
#: serverguide/C/databases.xml:74(para)
22456
msgid ""
22457
"If the server is not running correctly, you can type the following command "
22458
"to start it:"
22459
msgstr ""
22460
22461
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22462
msgid "sudo /etc/init.d/mysql restart"
22463
msgstr ""
22464
22465
#: serverguide/C/databases.xml:85(para)
22466
msgid ""
22467
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22468
"the basic settings -- log file, port number, etc. For example, to configure "
22469
"<application>MySQL</application> to listen for connections from network "
22470
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22471
"server's IP address:"
22472
msgstr ""
22473
22474
#: serverguide/C/databases.xml:91(programlisting)
22475
#, no-wrap
22476
msgid ""
22477
"\n"
22478
"bind-address = 192.168.0.5\n"
22479
msgstr ""
22480
22481
#: serverguide/C/databases.xml:95(para)
22482
msgid "Replace 192.168.0.5 with the appropriate address."
22483
msgstr ""
22484
22485
#: serverguide/C/databases.xml:99(para)
22486
msgid ""
22487
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22488
"<application>mysql</application> daemon will need to be restarted:"
22489
msgstr ""
22490
22491
#: serverguide/C/databases.xml:107(para)
22492
msgid ""
22493
"If you would like to change the "
22494
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22495
"terminal enter:"
22496
msgstr ""
22497
22498
#: serverguide/C/databases.xml:113(command)
22499
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22500
msgstr ""
22501
22502
#: serverguide/C/databases.xml:116(para)
22503
msgid ""
22504
"The <application>mysql</application> daemon will be stopped, and you will be "
22505
"prompted to enter a new password."
22506
msgstr ""
22507
22508
#: serverguide/C/databases.xml:125(para)
22509
msgid ""
22510
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22511
"more information."
22512
msgstr ""
22513
22514
#: serverguide/C/databases.xml:130(para)
22515
msgid ""
22516
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22517
"<application>mysql-doc-5.0</application> package. To install the package "
22518
"enter the following in a terminal:"
22519
msgstr ""
22520
22521
#: serverguide/C/databases.xml:135(command)
22522
msgid "sudo apt-get install mysql-doc-5.0"
22523
msgstr ""
22524
22525
#: serverguide/C/databases.xml:137(para)
22526
msgid ""
22527
"The documentation is in HTML format, to view them enter "
22528
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22529
"chapter/index.html</command> in your browser's address bar."
22530
msgstr ""
22531
22532
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22533
msgid ""
22534
"For general SQL information see <ulink "
22535
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22536
"Special Edition</ulink> by Rafe Colburn."
22537
msgstr ""
22538
22539
#: serverguide/C/databases.xml:149(para)
22540
msgid ""
22541
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22542
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22543
msgstr ""
22544
22545
#: serverguide/C/databases.xml:158(para)
22546
msgid ""
22547
"PostgreSQL is an object-relational database system that has the features of "
22548
"traditional commercial database systems with enhancements to be found in "
22549
"next-generation DBMS systems."
22550
msgstr ""
22551
22552
#: serverguide/C/databases.xml:165(para)
22553
msgid ""
22554
"To install PostgreSQL, run the following command in the command prompt:"
22555
msgstr ""
22556
22557
#: serverguide/C/databases.xml:172(command)
22558
msgid "sudo apt-get install postgresql"
22559
msgstr ""
22560
22561
#: serverguide/C/databases.xml:176(para)
22562
msgid ""
22563
"Once the installation is complete, you should configure the PostgreSQL "
22564
"server based on your needs, although the default configuration is viable."
22565
msgstr ""
22566
22567
#: serverguide/C/databases.xml:184(para)
22568
msgid ""
22569
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22570
"client authentication methods. By default, IDENT authentication method is "
22571
"used for <application>postgres</application> and local users. Please refer "
22572
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22573
"PostgreSQL Administrator's Guide</ulink>."
22574
msgstr ""
22575
22576
#: serverguide/C/databases.xml:191(para)
22577
msgid ""
22578
"The following discussion assumes that you wish to enable TCP/IP connections "
22579
"and use the MD5 method for client authentication. PostgreSQL configuration "
22580
"files are stored in the "
22581
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22582
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22583
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22584
msgstr ""
22585
22586
#: serverguide/C/databases.xml:201(para)
22587
msgid ""
22588
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
22589
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
22590
msgstr ""
22591
22592
#: serverguide/C/databases.xml:208(para)
22593
msgid ""
22594
"To enable TCP/IP connections, edit the file "
22595
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
22596
msgstr ""
22597
22598
#: serverguide/C/databases.xml:210(para)
22599
msgid ""
22600
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
22601
"change it to:"
22602
msgstr ""
22603
22604
#: serverguide/C/databases.xml:213(programlisting)
22605
#, no-wrap
22606
msgid ""
22607
"\n"
22608
"listen_addresses = 'localhost'\n"
22609
msgstr ""
22610
22611
#: serverguide/C/databases.xml:217(para)
22612
msgid ""
22613
"To allow other computers to connect to your "
22614
"<application>PostgreSQL</application> server replace 'localhost' with the "
22615
"<emphasis>IP Address</emphasis> of your server."
22616
msgstr ""
22617
22618
#: serverguide/C/databases.xml:222(para)
22619
msgid ""
22620
"You may also edit all other parameters, if you know what you are doing! For "
22621
"details, refer to the configuration file or to the PostgreSQL documentation."
22622
msgstr ""
22623
22624
#: serverguide/C/databases.xml:227(para)
22625
msgid ""
22626
"Now that we can connect to our <application>PostgreSQL</application> server, "
22627
"the next step is to set a password for the <emphasis>postgres</emphasis> "
22628
"user. Run the following command at a terminal prompt to connect to the "
22629
"default PostgreSQL template database:"
22630
msgstr ""
22631
22632
#: serverguide/C/databases.xml:234(command)
22633
msgid "sudo -u postgres psql template1"
22634
msgstr ""
22635
22636
#: serverguide/C/databases.xml:236(para)
22637
msgid ""
22638
"The above command connects to PostgreSQL database "
22639
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
22640
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
22641
"run the following SQL command at the <application>psql</application> prompt "
22642
"to configure the password for the user <emphasis "
22643
"role=\"italics\">postgres</emphasis>."
22644
msgstr ""
22645
22646
#: serverguide/C/databases.xml:244(command)
22647
msgid "ALTER USER postgres with encrypted password 'your_password';"
22648
msgstr ""
22649
22650
#: serverguide/C/databases.xml:246(para)
22651
msgid ""
22652
"After configuring the password, edit the file "
22653
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
22654
"<emphasis>MD5</emphasis> authentication with the "
22655
"<emphasis>postgres</emphasis> user:"
22656
msgstr ""
22657
22658
#: serverguide/C/databases.xml:252(programlisting)
22659
#, no-wrap
22660
msgid ""
22661
"\n"
22662
"local all postgres md5\n"
22663
msgstr ""
22664
22665
#: serverguide/C/databases.xml:256(para)
22666
msgid ""
22667
"Finally, you should restart the <application>PostgreSQL</application> "
22668
"service to initialize the new configuration. From a terminal prompt enter "
22669
"the following to restart <application>PostgreSQL</application>:"
22670
msgstr ""
22671
22672
#: serverguide/C/databases.xml:262(command)
22673
msgid "sudo /etc/init.d/postgresql-8.4 restart"
22674
msgstr ""
22675
22676
#: serverguide/C/databases.xml:265(para)
22677
msgid ""
22678
"The above configuration is not complete by any means. Please refer <ulink "
22679
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
22680
"Administrator's Guide</ulink> to configure more parameters."
22681
msgstr ""
22682
22683
#: serverguide/C/databases.xml:276(para)
22684
msgid ""
22685
"As mentioned above the <ulink "
22686
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
22687
"Guide</ulink> is an excellent resource. The guide is also available in the "
22688
"<application>postgresql-doc-8.4</application> package. Execute the following "
22689
"in a terminal to install the package:"
22690
msgstr ""
22691
22692
#: serverguide/C/databases.xml:282(command)
22693
msgid "sudo apt-get install postgresql-doc-8.4"
22694
msgstr ""
22695
22696
#: serverguide/C/databases.xml:284(para)
22697
msgid ""
22698
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
22699
"8.4/html/index.html</command> into the address bar of your browser."
22700
msgstr ""
22701
22702
#: serverguide/C/databases.xml:296(para)
22703
msgid ""
22704
"Also, see the <ulink "
22705
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
22706
"Wiki</ulink> page for more information."
22707
msgstr ""
22708
22709
#: serverguide/C/clustering.xml:13(title)
22710
msgid "Clustering"
22711
msgstr ""
22712
22713
#: serverguide/C/clustering.xml:16(title)
22714
msgid "DRBD"
22715
msgstr ""
22716
22717
#: serverguide/C/clustering.xml:18(para)
22718
msgid ""
22719
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
22720
"multiple hosts. The replication is transparent to other applications on the "
22721
"host systems. Any block device hard disks, partitions, RAID devices, logical "
22722
"volumes, etc can be mirrored."
22723
msgstr ""
22724
22725
#: serverguide/C/clustering.xml:24(para)
22726
msgid ""
22727
"To get started using <application>drbd</application>, first install the "
22728
"necessary packages. From a terminal enter:"
22729
msgstr ""
22730
22731
#: serverguide/C/clustering.xml:29(command)
22732
msgid "sudo apt-get install drbd8-utils"
22733
msgstr ""
22734
22735
#: serverguide/C/clustering.xml:33(para)
22736
msgid ""
22737
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
22738
"virtual machine you will need to manually compile the "
22739
"<application>drbd</application> module. It may be easier to install the "
22740
"<application>linux-server</application> package inside the virtual machine."
22741
msgstr ""
22742
22743
#: serverguide/C/clustering.xml:40(para)
22744
msgid ""
22745
"This section covers setting up a <application>drbd</application> to "
22746
"replicate a separate <filename>/srv</filename> partition, with an "
22747
"<application>ext3</application> filesystem between two hosts. The partition "
22748
"size is not particularly relevant, but both partitions need to be the same "
22749
"size."
22750
msgstr ""
22751
22752
#: serverguide/C/clustering.xml:49(para)
22753
msgid ""
22754
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
22755
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
22756
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
22757
"See <xref linkend=\"dns\"/> for details."
22758
msgstr ""
22759
22760
#: serverguide/C/clustering.xml:57(para)
22761
msgid ""
22762
"To configure <application>drbd</application>, on the first host edit "
22763
"<filename>/etc/drbd.conf</filename>:"
22764
msgstr ""
22765
22766
#: serverguide/C/clustering.xml:61(programlisting)
22767
#, no-wrap
22768
msgid ""
22769
"\n"
22770
"global { usage-count no; }\n"
22771
"common { syncer { rate 100M; } }\n"
22772
"resource r0 {\n"
22773
" protocol C;\n"
22774
" startup {\n"
22775
" wfc-timeout 15;\n"
22776
" degr-wfc-timeout 60;\n"
22777
" }\n"
22778
" net {\n"
22779
" cram-hmac-alg sha1;\n"
22780
" shared-secret \"secret\";\n"
22781
" }\n"
22782
" on drbd01 {\n"
22783
" device /dev/drbd0;\n"
22784
" disk /dev/sdb1;\n"
22785
" address 192.168.0.1:7788;\n"
22786
" meta-disk internal;\n"
22787
" }\n"
22788
" on drbd02 {\n"
22789
" device /dev/drbd0;\n"
22790
" disk /dev/sdb1;\n"
22791
" address 192.168.0.2:7788;\n"
22792
" meta-disk internal;\n"
22793
" }\n"
22794
"} \n"
22795
msgstr ""
22796
22797
#: serverguide/C/clustering.xml:90(para)
22798
msgid ""
22799
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
22800
"this example their default values are fine."
22801
msgstr ""
22802
22803
#: serverguide/C/clustering.xml:98(para)
22804
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
22805
msgstr ""
22806
22807
#: serverguide/C/clustering.xml:103(command)
22808
msgid "scp /etc/drbd.conf drbd02:~"
22809
msgstr ""
22810
22811
#: serverguide/C/clustering.xml:109(para)
22812
msgid ""
22813
"And, on <emphasis>drbd02</emphasis> move the file to "
22814
"<filename>/etc</filename>:"
22815
msgstr ""
22816
22817
#: serverguide/C/clustering.xml:114(command)
22818
msgid "sudo mv drbd.conf /etc/"
22819
msgstr ""
22820
22821
#: serverguide/C/clustering.xml:120(para)
22822
msgid ""
22823
"Next, on both hosts, start the <application>drbd</application> daemon:"
22824
msgstr ""
22825
22826
#: serverguide/C/clustering.xml:125(command)
22827
msgid "sudo /etc/init.d/drbd start"
22828
msgstr ""
22829
22830
#: serverguide/C/clustering.xml:131(para)
22831
msgid ""
22832
"Now using the <application>drbdadm</application> utility initialize the meta "
22833
"data storage. On each server execute:"
22834
msgstr ""
22835
22836
#: serverguide/C/clustering.xml:137(command)
22837
msgid "sudo drbdadm create-md r0"
22838
msgstr ""
22839
22840
#: serverguide/C/clustering.xml:143(para)
22841
msgid ""
22842
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
22843
"primary, enter the following:"
22844
msgstr ""
22845
22846
#: serverguide/C/clustering.xml:148(command)
22847
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
22848
msgstr ""
22849
22850
#: serverguide/C/clustering.xml:154(para)
22851
msgid ""
22852
"After executing the above command, the data will start syncing with the "
22853
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
22854
"the following:"
22855
msgstr ""
22856
22857
#: serverguide/C/clustering.xml:160(command)
22858
msgid "watch -n1 cat /proc/drbd"
22859
msgstr ""
22860
22861
#: serverguide/C/clustering.xml:163(para)
22862
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
22863
msgstr ""
22864
22865
#: serverguide/C/clustering.xml:170(para)
22866
msgid ""
22867
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
22868
msgstr ""
22869
22870
#: serverguide/C/clustering.xml:175(command)
22871
msgid "sudo mkfs.ext3 /dev/drbd0"
22872
msgstr ""
22873
22874
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
22875
msgid "sudo mount /dev/drbd0 /srv"
22876
msgstr ""
22877
22878
#: serverguide/C/clustering.xml:186(para)
22879
msgid ""
22880
"To test that the data is actually syncing between the hosts copy some files "
22881
"on the <emphasis>drbd01</emphasis>, the primary, to "
22882
"<filename>/srv</filename>:"
22883
msgstr ""
22884
22885
#: serverguide/C/clustering.xml:195(para)
22886
msgid "Next, unmount <filename>/srv</filename>:"
22887
msgstr ""
22888
22889
#: serverguide/C/clustering.xml:203(para)
22890
msgid ""
22891
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
22892
"<emphasis>secondary</emphasis> role:"
22893
msgstr ""
22894
22895
#: serverguide/C/clustering.xml:208(command)
22896
msgid "sudo drbdadm secondary r0"
22897
msgstr ""
22898
22899
#: serverguide/C/clustering.xml:211(para)
22900
msgid ""
22901
"Now on the <emphasis>secondary</emphasis> server "
22902
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
22903
msgstr ""
22904
22905
#: serverguide/C/clustering.xml:216(command)
22906
msgid "sudo drbdadm primary r0"
22907
msgstr ""
22908
22909
#: serverguide/C/clustering.xml:219(para)
22910
msgid "Lastly, mount the partition:"
22911
msgstr ""
22912
22913
#: serverguide/C/clustering.xml:227(para)
22914
msgid ""
22915
"Using <emphasis>ls</emphasis> you should see "
22916
"<filename>/srv/default</filename> copied from the former "
22917
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
22918
msgstr ""
22919
22920
#: serverguide/C/clustering.xml:238(para)
22921
msgid ""
22922
"For more information on <application>DRBD</application> see the <ulink "
22923
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
22924
msgstr ""
22925
22926
#: serverguide/C/clustering.xml:243(para)
22927
msgid ""
22928
"The <ulink "
22929
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
22930
"bd.conf man page</ulink> contains details on the options not covered in this "
22931
"guide."
22932
msgstr ""
22933
22934
#: serverguide/C/clustering.xml:249(para)
22935
msgid ""
22936
"Also, see the <ulink "
22937
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
22938
"adm man page</ulink>."
22939
msgstr ""
22940
22941
#: serverguide/C/clustering.xml:254(para)
22942
msgid ""
22943
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
22944
"Wiki</ulink> page also has more information."
22945
msgstr ""
22946
22947
#: serverguide/C/chat.xml:13(title)
22948
msgid "Chat Applications"
22949
msgstr ""
22950
22951
#: serverguide/C/chat.xml:19(para)
22952
msgid ""
22953
"In this section, we will discuss how to install and configure a IRC server, "
22954
"<application>ircd-irc2</application>. We will also discuss how to install "
22955
"and configure Jabber, an instance messaging server."
22956
msgstr ""
22957
22958
#: serverguide/C/chat.xml:28(title)
22959
msgid "IRC Server"
22960
msgstr ""
22961
22962
#: serverguide/C/chat.xml:30(para)
22963
msgid ""
22964
"The Ubuntu repository has many Internet Relay Chat servers. This section "
22965
"explains how to install and configure the original IRC server "
22966
"<application>ircd-irc2</application>."
22967
msgstr ""
22968
22969
#: serverguide/C/chat.xml:39(para)
22970
msgid ""
22971
"To install <application>ircd-irc2</application>, run the following command "
22972
"in the command prompt:"
22973
msgstr ""
22974
22975
#: serverguide/C/chat.xml:45(command)
22976
msgid "sudo apt-get install ircd-irc2"
22977
msgstr ""
22978
22979
#: serverguide/C/chat.xml:48(para)
22980
msgid ""
22981
"The configuration files are stored in <filename>/etc/ircd</filename> "
22982
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
22983
"irc2</filename> directory."
22984
msgstr ""
22985
22986
#: serverguide/C/chat.xml:59(para)
22987
msgid ""
22988
"The IRC settings can be done in the configuration file "
22989
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
22990
"this file by editing the following line:"
22991
msgstr ""
22992
22993
#: serverguide/C/chat.xml:64(programlisting)
22994
#, no-wrap
22995
msgid ""
22996
"\n"
22997
"M:irc.localhost::Debian ircd default configuration::000A\n"
22998
msgstr ""
22999
23000
#: serverguide/C/chat.xml:68(para)
23001
msgid ""
23002
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23003
"you set irc.livecipher.com as IRC host name, please make sure "
23004
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23005
"name should not be same as the host name."
23006
msgstr ""
23007
23008
#: serverguide/C/chat.xml:75(para)
23009
msgid ""
23010
"The IRC admin details can be configured by editting the following line:"
23011
msgstr ""
23012
23013
#: serverguide/C/chat.xml:80(programlisting)
23014
#, no-wrap
23015
msgid ""
23016
"\n"
23017
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23018
"Server::IRCnet:\n"
23019
msgstr ""
23020
23021
#: serverguide/C/chat.xml:84(para)
23022
msgid ""
23023
"You should add specific lines to configure the list of IRC ports to listen "
23024
"on, to configure Operator credentials, to configure client authentication, "
23025
"etc. For details, please refer to the example configuration file "
23026
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23027
msgstr ""
23028
23029
#: serverguide/C/chat.xml:92(para)
23030
msgid ""
23031
"The IRC banner to be displayed in the IRC client, when the user connects to "
23032
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23033
msgstr ""
23034
23035
#: serverguide/C/chat.xml:97(para)
23036
msgid ""
23037
"After making necessary changes to the configuration file, you can restart "
23038
"the IRC server using following command:"
23039
msgstr ""
23040
23041
#: serverguide/C/chat.xml:101(programlisting)
23042
#, no-wrap
23043
msgid ""
23044
"\n"
23045
"sudo /etc/init.d/ircd-irc2 restart\n"
23046
msgstr ""
23047
23048
#: serverguide/C/chat.xml:109(para)
23049
msgid ""
23050
"You may also be interested to take a look at other IRC servers available in "
23051
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23052
"<application>ircd-hybrid</application>."
23053
msgstr ""
23054
23055
#: serverguide/C/chat.xml:117(para)
23056
msgid ""
23057
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23058
"FAQ</ulink> for more details about the IRC Server."
23059
msgstr ""
23060
23061
#: serverguide/C/chat.xml:124(para)
23062
msgid ""
23063
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23064
"IRCD</ulink> page has more information."
23065
msgstr ""
23066
23067
#: serverguide/C/chat.xml:132(title)
23068
msgid "Jabber Instant Messaging Server"
23069
msgstr ""
23070
23071
#: serverguide/C/chat.xml:134(para)
23072
msgid ""
23073
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23074
"XMPP, an open standard for instant messaging, and used by many popular "
23075
"applications. This section covers setting up a <emphasis>Jabberd "
23076
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23077
"to providing messaging services to users over the Internet."
23078
msgstr ""
23079
23080
#: serverguide/C/chat.xml:143(para)
23081
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23082
msgstr ""
23083
23084
#: serverguide/C/chat.xml:148(command)
23085
msgid "sudo apt-get install jabberd2"
23086
msgstr ""
23087
23088
#: serverguide/C/chat.xml:155(para)
23089
msgid ""
23090
"A couple of XML configuration files will be used to configure "
23091
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23092
"authentication. This is a very simple form of authentication. However, "
23093
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23094
"Postgresql, etc for for user authentication."
23095
msgstr ""
23096
23097
#: serverguide/C/chat.xml:162(para)
23098
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23099
msgstr ""
23100
23101
#: serverguide/C/chat.xml:166(programlisting)
23102
#, no-wrap
23103
msgid ""
23104
"\n"
23105
" <id>jabber.example.com</id>\n"
23106
msgstr ""
23107
23108
#: serverguide/C/chat.xml:171(para)
23109
msgid ""
23110
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23111
"id, of your server."
23112
msgstr ""
23113
23114
#: serverguide/C/chat.xml:176(para)
23115
msgid "Now in the <storage> section change the <driver> to:"
23116
msgstr ""
23117
23118
#: serverguide/C/chat.xml:180(programlisting)
23119
#, no-wrap
23120
msgid ""
23121
"\n"
23122
" <driver>db</driver>\n"
23123
msgstr ""
23124
23125
#: serverguide/C/chat.xml:184(para)
23126
msgid ""
23127
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23128
"<emphasis><local></emphasis> section change:"
23129
msgstr ""
23130
23131
#: serverguide/C/chat.xml:188(programlisting)
23132
#, no-wrap
23133
msgid ""
23134
"\n"
23135
" <id>jabber.example.com</id>\n"
23136
msgstr ""
23137
23138
#: serverguide/C/chat.xml:192(para)
23139
msgid ""
23140
"And in the <authreg> section adjust the <module> section to:"
23141
msgstr ""
23142
23143
#: serverguide/C/chat.xml:196(programlisting)
23144
#, no-wrap
23145
msgid ""
23146
"\n"
23147
" <module>db</module>\n"
23148
msgstr ""
23149
23150
#: serverguide/C/chat.xml:200(para)
23151
msgid ""
23152
"Finally, restart <application>jabberd2</application> to enable the new "
23153
"settings:"
23154
msgstr ""
23155
23156
#: serverguide/C/chat.xml:205(command)
23157
msgid "sudo /etc/init.d/jabberd2 restart"
23158
msgstr ""
23159
23160
#: serverguide/C/chat.xml:208(para)
23161
msgid ""
23162
"You should now be able to connect to the server using a Jabber client like "
23163
"<application>Pidgin</application> for example."
23164
msgstr ""
23165
23166
#: serverguide/C/chat.xml:213(para)
23167
msgid ""
23168
"The advantage of using Berkeley DB for user data is that after being "
23169
"configured no additional maintenance is required. If you need more control "
23170
"over user accounts and credentials another authentication method is "
23171
"recommended."
23172
msgstr ""
23173
23174
#: serverguide/C/chat.xml:225(para)
23175
msgid ""
23176
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23177
"Site</ulink> contains more details on configuring "
23178
"<application>Jabberd2</application>."
23179
msgstr ""
23180
23181
#: serverguide/C/chat.xml:231(para)
23182
msgid ""
23183
"For more authentication options see the <ulink "
23184
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23185
"Guide</ulink>."
23186
msgstr ""
23187
23188
#: serverguide/C/chat.xml:236(para)
23189
msgid ""
23190
"Also, the <ulink "
23191
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23192
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23193
msgstr ""
23194
23195
#: serverguide/C/backups.xml:13(title)
23196
msgid "Backups"
23197
msgstr ""
23198
23199
#: serverguide/C/backups.xml:14(para)
23200
msgid ""
23201
"There are many ways to backup an Ubuntu installation. The most important "
23202
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23203
"consisting of what to backup, where to back it up to, and how to restore it."
23204
msgstr ""
23205
23206
#: serverguide/C/backups.xml:18(para)
23207
msgid ""
23208
"The following sections discuss various ways of accomplishing these tasks."
23209
msgstr ""
23210
23211
#: serverguide/C/backups.xml:22(title)
23212
msgid "Shell Scripts"
23213
msgstr ""
23214
23215
#: serverguide/C/backups.xml:23(para)
23216
msgid ""
23217
"One of the simplest ways to backup a system is using a <emphasis>shell "
23218
"script</emphasis>. For example, a script can be used to configure which "
23219
"directories to backup, and use those directories as arguments to the "
23220
"<application>tar</application> utility creating an archive file. The archive "
23221
"file can then be moved or copied to another location. The archive can also "
23222
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23223
msgstr ""
23224
23225
#: serverguide/C/backups.xml:29(para)
23226
msgid ""
23227
"The <application>tar</application> utility creates one archive file out of "
23228
"many files or directories. <application>tar</application> can also filter "
23229
"the files through compression utilities reducing the size of the archive "
23230
"file."
23231
msgstr ""
23232
23233
#: serverguide/C/backups.xml:35(title)
23234
msgid "Simple Shell Script"
23235
msgstr ""
23236
23237
#: serverguide/C/backups.xml:36(para)
23238
msgid ""
23239
"The following shell script uses <application>tar</application> to create an "
23240
"archive file on a remotely mounted NFS file system. The archive filename is "
23241
"determined using additional command line utilities."
23242
msgstr ""
23243
23244
#: serverguide/C/backups.xml:40(programlisting)
23245
#, no-wrap
23246
msgid ""
23247
"\n"
23248
"#!/bin/sh\n"
23249
"####################################\n"
23250
"#\n"
23251
"# Backup to NFS mount script.\n"
23252
"#\n"
23253
"####################################\n"
23254
"\n"
23255
"# What to backup. \n"
23256
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23257
"\n"
23258
"# Where to backup to.\n"
23259
"dest=\"/mnt/backup\"\n"
23260
"\n"
23261
"# Create archive filename.\n"
23262
"day=$(date +%A)\n"
23263
"hostname=$(hostname -s)\n"
23264
"archive_file=\"$hostname-$day.tgz\"\n"
23265
"\n"
23266
"# Print start status message.\n"
23267
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23268
"date\n"
23269
"echo\n"
23270
"\n"
23271
"# Backup the files using tar.\n"
23272
"tar czf $dest/$archive_file $backup_files\n"
23273
"\n"
23274
"# Print end status message.\n"
23275
"echo\n"
23276
"echo \"Backup finished\"\n"
23277
"date\n"
23278
"\n"
23279
"# Long listing of files in $dest to check file sizes.\n"
23280
"ls -lh $dest\n"
23281
msgstr ""
23282
23283
#: serverguide/C/backups.xml:77(para)
23284
msgid ""
23285
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23286
"would like to backup. The list should be customized to fit your needs."
23287
msgstr ""
23288
23289
#: serverguide/C/backups.xml:83(para)
23290
msgid ""
23291
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23292
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23293
"day of the week, giving a backup history of seven days. There are other ways "
23294
"to accomplish this including other ways using the "
23295
"<application>date</application> utility."
23296
msgstr ""
23297
23298
#: serverguide/C/backups.xml:90(para)
23299
msgid ""
23300
"<emphasis>$hostname:</emphasis> variable containing the "
23301
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23302
"archive filename gives you the option of placing daily archive files from "
23303
"multiple systems in the same directory."
23304
msgstr ""
23305
23306
#: serverguide/C/backups.xml:97(para)
23307
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23308
msgstr ""
23309
23310
#: serverguide/C/backups.xml:102(para)
23311
msgid ""
23312
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23313
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23314
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23315
"details using <emphasis>NFS</emphasis>."
23316
msgstr ""
23317
23318
#: serverguide/C/backups.xml:109(para)
23319
msgid ""
23320
"<emphasis>status messages:</emphasis> optional messages printed to the "
23321
"console using the <application>echo</application> utility."
23322
msgstr ""
23323
23324
#: serverguide/C/backups.xml:115(para)
23325
msgid ""
23326
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23327
"<application>tar</application> command used to create the archive file."
23328
msgstr ""
23329
23330
#: serverguide/C/backups.xml:121(para)
23331
msgid "<emphasis>c:</emphasis> creates an archive."
23332
msgstr ""
23333
23334
#: serverguide/C/backups.xml:126(para)
23335
msgid ""
23336
"<emphasis>z:</emphasis> filter the archive through the "
23337
"<application>gzip</application> utility compressing the archive."
23338
msgstr ""
23339
23340
#: serverguide/C/backups.xml:131(para)
23341
msgid ""
23342
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23343
"<application>tar</application> output will be sent to STDOUT."
23344
msgstr ""
23345
23346
#: serverguide/C/backups.xml:138(para)
23347
msgid ""
23348
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23349
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23350
"of the destination directory. This is useful for a quick file size check of "
23351
"the archive file. This check should not replace testing the archive file."
23352
msgstr ""
23353
23354
#: serverguide/C/backups.xml:145(para)
23355
msgid ""
23356
"This is a simple example of a backup shell script. There are large amount of "
23357
"options that can be included in a backup script. See <xref linkend=\"backup-"
23358
"shellscript-references\"/> for links to resources providing more in depth "
23359
"shell scripting information."
23360
msgstr ""
23361
23362
#: serverguide/C/backups.xml:152(title)
23363
msgid "Executing the Script"
23364
msgstr ""
23365
23366
#: serverguide/C/backups.xml:154(title)
23367
msgid "Executing from a Terminal"
23368
msgstr ""
23369
23370
#: serverguide/C/backups.xml:155(para)
23371
msgid ""
23372
"The simplest way of executing the above backup script is to copy and paste "
23373
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23374
"from a terminal prompt:"
23375
msgstr ""
23376
23377
#: serverguide/C/backups.xml:160(command)
23378
msgid "sudo bash backup.sh"
23379
msgstr ""
23380
23381
#: serverguide/C/backups.xml:162(para)
23382
msgid ""
23383
"This is a great way to test the script to make sure everything works as "
23384
"expected."
23385
msgstr ""
23386
23387
#: serverguide/C/backups.xml:167(title)
23388
msgid "Executing with cron"
23389
msgstr ""
23390
23391
#: serverguide/C/backups.xml:168(para)
23392
msgid ""
23393
"The <application>cron</application> utility can be used to automate the "
23394
"script execution. The <application>cron</application> daemon allows the "
23395
"execution of scripts, or commands, at a specified time and date."
23396
msgstr ""
23397
23398
#: serverguide/C/backups.xml:172(para)
23399
msgid ""
23400
"<application>cron</application> is configured through entries in a "
23401
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23402
"separated into fields:"
23403
msgstr ""
23404
23405
#: serverguide/C/backups.xml:176(programlisting)
23406
#, no-wrap
23407
msgid ""
23408
"\n"
23409
"# m h dom mon dow command\n"
23410
msgstr ""
23411
23412
#: serverguide/C/backups.xml:181(para)
23413
msgid ""
23414
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23415
msgstr ""
23416
23417
#: serverguide/C/backups.xml:186(para)
23418
msgid ""
23419
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23420
msgstr ""
23421
23422
#: serverguide/C/backups.xml:191(para)
23423
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23424
msgstr ""
23425
23426
#: serverguide/C/backups.xml:196(para)
23427
msgid ""
23428
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23429
msgstr ""
23430
23431
#: serverguide/C/backups.xml:201(para)
23432
msgid ""
23433
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23434
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23435
"valid."
23436
msgstr ""
23437
23438
#: serverguide/C/backups.xml:206(para)
23439
msgid "<emphasis>command:</emphasis> the command to execute."
23440
msgstr ""
23441
23442
#: serverguide/C/backups.xml:211(para)
23443
msgid ""
23444
"To add or change entries in a <filename>crontab</filename> file the "
23445
"<application>crontab -e</application> command should be used. Also, the "
23446
"contents of a <filename>crontab</filename> file can be viewed using the "
23447
"<application>crontab -l</application> command."
23448
msgstr ""
23449
23450
#: serverguide/C/backups.xml:215(para)
23451
msgid ""
23452
"To execute the <application>backup.sh</application> script listed above "
23453
"using <application>cron</application>. Enter the following from a terminal "
23454
"prompt:"
23455
msgstr ""
23456
23457
#: serverguide/C/backups.xml:220(command)
23458
msgid "sudo crontab -e"
23459
msgstr ""
23460
23461
#: serverguide/C/backups.xml:223(para)
23462
msgid ""
23463
"Using <application>sudo</application> with the <application>crontab -"
23464
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23465
"This is necessary if you are backing up directories only the root user has "
23466
"access to."
23467
msgstr ""
23468
23469
#: serverguide/C/backups.xml:228(para)
23470
msgid "Add the following entry to the <filename>crontab</filename> file:"
23471
msgstr ""
23472
23473
#: serverguide/C/backups.xml:231(programlisting)
23474
#, no-wrap
23475
msgid ""
23476
"\n"
23477
"# m h dom mon dow command\n"
23478
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23479
msgstr ""
23480
23481
#: serverguide/C/backups.xml:235(para)
23482
msgid ""
23483
"The <application>backup.sh</application> script will now be executed every "
23484
"day at 12:00 am."
23485
msgstr ""
23486
23487
#: serverguide/C/backups.xml:239(para)
23488
msgid ""
23489
"The <application>backup.sh</application> script will need to be copied to "
23490
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23491
"to execute properly. The script can reside anywhere on the file system "
23492
"simply change the script path appropriately."
23493
msgstr ""
23494
23495
#: serverguide/C/backups.xml:244(para)
23496
msgid ""
23497
"For more in depth <application>crontab</application> options see <xref "
23498
"linkend=\"backup-shellscript-references\"/>."
23499
msgstr ""
23500
23501
#: serverguide/C/backups.xml:250(title)
23502
msgid "Restoring from the Archive"
23503
msgstr ""
23504
23505
#: serverguide/C/backups.xml:251(para)
23506
msgid ""
23507
"Once an archive has been created it is important to test the archive. The "
23508
"archive can be tested by listing the files it contains, but the best test is "
23509
"to <emphasis>restore</emphasis> a file from the archive."
23510
msgstr ""
23511
23512
#: serverguide/C/backups.xml:257(para)
23513
msgid "To see a listing of the archive contents. From a terminal prompt:"
23514
msgstr ""
23515
23516
#: serverguide/C/backups.xml:261(command)
23517
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23518
msgstr ""
23519
23520
#: serverguide/C/backups.xml:265(para)
23521
msgid "To restore a file from the archive to a different directory enter:"
23522
msgstr ""
23523
23524
#: serverguide/C/backups.xml:269(command)
23525
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23526
msgstr ""
23527
23528
#: serverguide/C/backups.xml:271(para)
23529
msgid ""
23530
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23531
"redirects the extracted files to the specified directory. The above example "
23532
"will extract the <filename>/etc/hosts</filename> file to "
23533
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23534
"recreates the directory structure that it contains."
23535
msgstr ""
23536
23537
#: serverguide/C/backups.xml:276(para)
23538
msgid ""
23539
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23540
"the file to restore."
23541
msgstr ""
23542
23543
#: serverguide/C/backups.xml:281(para)
23544
msgid "To restore all files in the archive enter the following:"
23545
msgstr ""
23546
23547
#: serverguide/C/backups.xml:285(command)
23548
msgid "cd /"
23549
msgstr ""
23550
23551
#: serverguide/C/backups.xml:286(command)
23552
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23553
msgstr ""
23554
23555
#: serverguide/C/backups.xml:291(para)
23556
msgid "This will overwrite the files currently on the file system."
23557
msgstr ""
23558
23559
#: serverguide/C/backups.xml:300(para)
23560
msgid ""
23561
"For more information on shell scripting see the <ulink "
23562
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23563
msgstr ""
23564
23565
#: serverguide/C/backups.xml:305(para)
23566
msgid ""
23567
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23568
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23569
"great resource for shell scripting."
23570
msgstr ""
23571
23572
#: serverguide/C/backups.xml:311(para)
23573
msgid ""
23574
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23575
"Wiki Page</ulink> contains details on advanced "
23576
"<application>cron</application> options."
23577
msgstr ""
23578
23579
#: serverguide/C/backups.xml:318(para)
23580
msgid ""
23581
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23582
"tar Manual</ulink> for more <application>tar</application> options."
23583
msgstr ""
23584
23585
#: serverguide/C/backups.xml:324(para)
23586
msgid ""
23587
"The Wikipedia <ulink "
23588
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
23589
"Scheme</ulink> article contains information on other backup rotation schemes."
23590
msgstr ""
23591
23592
#: serverguide/C/backups.xml:330(para)
23593
msgid ""
23594
"The shell script uses <application>tar</application> to create the archive, "
23595
"but there many other command line utilities that can be used. For example:"
23596
msgstr ""
23597
23598
#: serverguide/C/backups.xml:336(para)
23599
msgid ""
23600
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
23601
"files to and from archives."
23602
msgstr ""
23603
23604
#: serverguide/C/backups.xml:341(para)
23605
msgid ""
23606
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
23607
"the <application>coreutils</application> package. A low level utility that "
23608
"can copy data from one format to another"
23609
msgstr ""
23610
23611
#: serverguide/C/backups.xml:347(para)
23612
msgid ""
23613
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
23614
"snap shot utility used to create copies of an entire file system."
23615
msgstr ""
23616
23617
#: serverguide/C/backups.xml:358(title)
23618
msgid "Archive Rotation"
23619
msgstr ""
23620
23621
#: serverguide/C/backups.xml:359(para)
23622
msgid ""
23623
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
23624
"allows for seven different archives. For a server whose data doesn't change "
23625
"often this may be enough. If the server has a large amount of data a more "
23626
"robust rotation scheme should be used."
23627
msgstr ""
23628
23629
#: serverguide/C/backups.xml:365(title)
23630
msgid "Rotating NFS Archives"
23631
msgstr ""
23632
23633
#: serverguide/C/backups.xml:366(para)
23634
msgid ""
23635
"In this section the shell script will be slightly modified to implement a "
23636
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
23637
msgstr ""
23638
23639
#: serverguide/C/backups.xml:372(para)
23640
msgid ""
23641
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
23642
"Friday."
23643
msgstr ""
23644
23645
#: serverguide/C/backups.xml:377(para)
23646
msgid ""
23647
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
23648
"weekly backups a month."
23649
msgstr ""
23650
23651
#: serverguide/C/backups.xml:382(para)
23652
msgid ""
23653
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
23654
"rotating two monthly backups based on if the month is odd or even."
23655
msgstr ""
23656
23657
#: serverguide/C/backups.xml:388(para)
23658
msgid "Here is the new script:"
23659
msgstr ""
23660
23661
#: serverguide/C/backups.xml:391(programlisting)
23662
#, no-wrap
23663
msgid ""
23664
"\n"
23665
"#!/bin/bash\n"
23666
"####################################\n"
23667
"#\n"
23668
"# Backup to NFS mount script with\n"
23669
"# grandfather-father-son rotation.\n"
23670
"#\n"
23671
"####################################\n"
23672
"\n"
23673
"# What to backup. \n"
23674
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23675
"\n"
23676
"# Where to backup to.\n"
23677
"dest=\"/mnt/backup\"\n"
23678
"\n"
23679
"# Setup variables for the archive filename.\n"
23680
"day=$(date +%A)\n"
23681
"hostname=$(hostname -s)\n"
23682
"\n"
23683
"# Find which week of the month 1-4 it is.\n"
23684
"day_num=$(date +%d)\n"
23685
"if (( $day_num <= 7 )); then\n"
23686
" week_file=\"$hostname-week1.tgz\"\n"
23687
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
23688
" week_file=\"$hostname-week2.tgz\"\n"
23689
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
23690
" week_file=\"$hostname-week3.tgz\"\n"
23691
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
23692
" week_file=\"$hostname-week4.tgz\"\n"
23693
"fi\n"
23694
"\n"
23695
"# Find if the Month is odd or even.\n"
23696
"month_num=$(date +%m)\n"
23697
"month=$(expr $month_num % 2)\n"
23698
"if [ $month -eq 0 ]; then\n"
23699
" month_file=\"$hostname-month2.tgz\"\n"
23700
"else\n"
23701
" month_file=\"$hostname-month1.tgz\"\n"
23702
"fi\n"
23703
"\n"
23704
"# Create archive filename.\n"
23705
"if [ $day_num == 1 ]; then\n"
23706
"\tarchive_file=$month_file\n"
23707
"elif [ $day != \"Saturday\" ]; then\n"
23708
" archive_file=\"$hostname-$day.tgz\"\n"
23709
"else \n"
23710
"\tarchive_file=$week_file\n"
23711
"fi\n"
23712
"\n"
23713
"# Print start status message.\n"
23714
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23715
"date\n"
23716
"echo\n"
23717
"\n"
23718
"# Backup the files using tar.\n"
23719
"tar czf $dest/$archive_file $backup_files\n"
23720
"\n"
23721
"# Print end status message.\n"
23722
"echo\n"
23723
"echo \"Backup finished\"\n"
23724
"date\n"
23725
"\n"
23726
"# Long listing of files in $dest to check file sizes.\n"
23727
"ls -lh $dest/\n"
23728
msgstr ""
23729
23730
#: serverguide/C/backups.xml:456(para)
23731
msgid ""
23732
"The script can be executed using the same methods as in <xref "
23733
"linkend=\"backup-executing-shellscript\"/>."
23734
msgstr ""
23735
23736
#: serverguide/C/backups.xml:459(para)
23737
msgid ""
23738
"It is good practice to take backup media off site in case of a disaster. In "
23739
"the shell script example the backup media is another server providing an NFS "
23740
"share. In all likelihood taking the NFS server to another location would not "
23741
"be practical. Depending upon connection speeds it may be an option to copy "
23742
"the archive file over a WAN link to a server in another location."
23743
msgstr ""
23744
23745
#: serverguide/C/backups.xml:465(para)
23746
msgid ""
23747
"Another option is to copy the archive file to an external hard drive which "
23748
"can then be taken off site. Since the price of external hard drives continue "
23749
"to decrease it may be cost affective to use two drives for each archive "
23750
"level. This would allow you to have one external drive attached to the "
23751
"backup server and one in another location."
23752
msgstr ""
23753
23754
#: serverguide/C/backups.xml:472(title)
23755
msgid "Tape Drives"
23756
msgstr ""
23757
23758
#: serverguide/C/backups.xml:473(para)
23759
msgid ""
23760
"A tape drive attached to the server can be used instead of a NFS share. "
23761
"Using a tape drive simplifies archive rotation, and taking the media off "
23762
"site as well."
23763
msgstr ""
23764
23765
#: serverguide/C/backups.xml:477(para)
23766
msgid ""
23767
"When using a tape drive the filename portions of the script aren't needed "
23768
"because the date is sent directly to the tape device. Some commands to "
23769
"manipulate the tape are needed. This is accomplished using "
23770
"<application>mt</application>, a magnetic tape control utility part of the "
23771
"<application>cpio</application> package."
23772
msgstr ""
23773
23774
#: serverguide/C/backups.xml:482(para)
23775
msgid "Here is the shell script modified to use a tape drive:"
23776
msgstr ""
23777
23778
#: serverguide/C/backups.xml:485(programlisting)
23779
#, no-wrap
23780
msgid ""
23781
"\n"
23782
"#!/bin/bash\n"
23783
"####################################\n"
23784
"#\n"
23785
"# Backup to tape drive script.\n"
23786
"#\n"
23787
"####################################\n"
23788
"\n"
23789
"# What to backup. \n"
23790
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23791
"\n"
23792
"# Where to backup to.\n"
23793
"dest=\"/dev/st0\"\n"
23794
"\n"
23795
"# Print start status message.\n"
23796
"echo \"Backing up $backup_files to $dest\"\n"
23797
"date\n"
23798
"echo\n"
23799
"\n"
23800
"# Make sure the tape is rewound.\n"
23801
"mt -f $dest rewind\n"
23802
"\n"
23803
"# Backup the files using tar.\n"
23804
"tar czf $dest $backup_files\n"
23805
"\n"
23806
"# Rewind and eject the tape.\n"
23807
"mt -f $dest rewoffl\n"
23808
"\n"
23809
"# Print end status message.\n"
23810
"echo\n"
23811
"echo \"Backup finished\"\n"
23812
"date\n"
23813
msgstr ""
23814
23815
#: serverguide/C/backups.xml:519(para)
23816
msgid ""
23817
"The default device name for a SCSI tape drive is "
23818
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
23819
"system."
23820
msgstr ""
23821
23822
#: serverguide/C/backups.xml:524(para)
23823
msgid ""
23824
"Restoring from a tape drive is basically the same as restoring from a file. "
23825
"Simply rewind the tape and use the device path instead of a file path. For "
23826
"example to restore the <filename>/etc/hosts</filename> file to "
23827
"<filename>/tmp/etc/hosts</filename>:"
23828
msgstr ""
23829
23830
#: serverguide/C/backups.xml:529(command)
23831
msgid "mt -f /dev/st0 rewind"
23832
msgstr ""
23833
23834
#: serverguide/C/backups.xml:530(command)
23835
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
23836
msgstr ""
23837
23838
#: serverguide/C/backups.xml:535(title)
23839
msgid "Bacula"
23840
msgstr ""
23841
23842
#: serverguide/C/backups.xml:536(para)
23843
msgid ""
23844
"<application>Bacula</application> is a backup program enabling you to "
23845
"backup, restore, and verify data across your network. There are Bacula "
23846
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
23847
"wide solution."
23848
msgstr ""
23849
23850
#: serverguide/C/backups.xml:542(para)
23851
msgid ""
23852
"<application>Bacula</application> is made up of several components and "
23853
"services used to manage which files to backup and where to back them up to:"
23854
msgstr ""
23855
23856
#: serverguide/C/backups.xml:548(para)
23857
msgid ""
23858
"<application>Bacula Director:</application> a service that controls all "
23859
"backup, restore, verify, and archive operations."
23860
msgstr ""
23861
23862
#: serverguide/C/backups.xml:553(para)
23863
msgid ""
23864
"<application>Bacula Console:</application> an application allowing "
23865
"communication with the Director. There are three versions of the Console:"
23866
msgstr ""
23867
23868
#: serverguide/C/backups.xml:558(para)
23869
msgid "Text based command line version."
23870
msgstr ""
23871
23872
#: serverguide/C/backups.xml:559(para)
23873
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
23874
msgstr ""
23875
23876
#: serverguide/C/backups.xml:560(para)
23877
msgid "wxWidgets GUI interface."
23878
msgstr ""
23879
23880
#: serverguide/C/backups.xml:564(para)
23881
msgid ""
23882
"<application>Bacula File:</application> also known as the "
23883
"<application>Bacula Client</application> program. This application is "
23884
"installed on machines to be backed up, and is responsible for the data "
23885
"requested by the Director."
23886
msgstr ""
23887
23888
#: serverguide/C/backups.xml:570(para)
23889
msgid ""
23890
"<application>Bacula Storage:</application> the programs that perform the "
23891
"storage and recovery of data to the physical media."
23892
msgstr ""
23893
23894
#: serverguide/C/backups.xml:575(para)
23895
msgid ""
23896
"<application>Bacula Catalog:</application> is responsible for maintaining "
23897
"the file indexes and volume databases for all files backed up, enabling "
23898
"quick location and restoration of archived files. The Catalog supports three "
23899
"different databases MySQL, PostgreSQL, and SQLite."
23900
msgstr ""
23901
23902
#: serverguide/C/backups.xml:581(para)
23903
msgid ""
23904
"<application>Bacula Monitor:</application> allows the monitoring of the "
23905
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
23906
"available as a GTK+ GUI application."
23907
msgstr ""
23908
23909
#: serverguide/C/backups.xml:587(para)
23910
msgid ""
23911
"These services and applications can be run on multiple servers and clients, "
23912
"or they can be installed on one machine if backing up a single disk or "
23913
"volume."
23914
msgstr ""
23915
23916
#: serverguide/C/backups.xml:594(para)
23917
msgid ""
23918
"There are multiple packages containing the different "
23919
"<application>Bacula</application> components. To install Bacula, from a "
23920
"terminal prompt enter:"
23921
msgstr ""
23922
23923
#: serverguide/C/backups.xml:599(command)
23924
msgid "sudo apt-get install bacula"
23925
msgstr ""
23926
23927
#: serverguide/C/backups.xml:601(para)
23928
msgid ""
23929
"By default installing the <application>bacula</application> package will use "
23930
"a <application>MySQL</application> database for the Catalog. If you want to "
23931
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
23932
"director-sqlite3</application> or <application>bacula-director-"
23933
"pgsql</application> respectively."
23934
msgstr ""
23935
23936
#: serverguide/C/backups.xml:607(para)
23937
msgid ""
23938
"During the install process you will be asked to supply credentials for the "
23939
"database <emphasis>administrator</emphasis> and the "
23940
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
23941
"database administrator will need to have the appropriate rights to create a "
23942
"database, see <xref linkend=\"mysql\"/> for more information."
23943
msgstr ""
23944
23945
#: serverguide/C/backups.xml:617(para)
23946
msgid ""
23947
"<application>Bacula</application> configuration files are formatted based on "
23948
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
23949
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
23950
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
23951
"directory."
23952
msgstr ""
23953
23954
#: serverguide/C/backups.xml:622(para)
23955
msgid ""
23956
"The various <application>Bacula</application> components must authorize "
23957
"themselves to each other. This is accomplished using the "
23958
"<emphasis>password</emphasis> directive. For example, the "
23959
"<emphasis>Storage</emphasis> resource password in the "
23960
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
23961
"<emphasis>Director</emphasis> resource password in "
23962
"<filename>/etc/bacula/bacula-sd.conf</filename>."
23963
msgstr ""
23964
23965
#: serverguide/C/backups.xml:628(para)
23966
msgid ""
23967
"By default the backup job named <emphasis>Client1</emphasis> is configured "
23968
"to archive the <application>Bacula</application> Catalog. If you plan on "
23969
"using the server to backup more than one client you should change the name "
23970
"of this job to something more descriptive. To change the name edit "
23971
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
23972
msgstr ""
23973
23974
#: serverguide/C/backups.xml:633(programlisting)
23975
#, no-wrap
23976
msgid ""
23977
"\n"
23978
"#\n"
23979
"# Define the main nightly save backup job\n"
23980
"# By default, this job will back up to disk in \n"
23981
"Job {\n"
23982
" Name = \"BackupServer\"\n"
23983
" JobDefs = \"DefaultJob\"\n"
23984
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
23985
"}\n"
23986
msgstr ""
23987
23988
#: serverguide/C/backups.xml:644(para)
23989
msgid ""
23990
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
23991
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
23992
"your appropriate hostname, or other descriptive name."
23993
msgstr ""
23994
23995
#: serverguide/C/backups.xml:649(para)
23996
msgid ""
23997
"The <emphasis>Console</emphasis> can be used to query the "
23998
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
23999
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24000
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24001
"the following from a terminal:"
24002
msgstr ""
24003
24004
#: serverguide/C/backups.xml:655(command)
24005
msgid "sudo adduser $username bacula"
24006
msgstr ""
24007
24008
#: serverguide/C/backups.xml:658(para)
24009
msgid ""
24010
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24011
"you are adding the current user to the group you should log out and back in "
24012
"for the new permissions to take effect."
24013
msgstr ""
24014
24015
#: serverguide/C/backups.xml:665(title)
24016
msgid "Localhost Backup"
24017
msgstr ""
24018
24019
#: serverguide/C/backups.xml:666(para)
24020
msgid ""
24021
"This section describes how to backup specified directories on a single host "
24022
"to a local tape drive."
24023
msgstr ""
24024
24025
#: serverguide/C/backups.xml:671(para)
24026
msgid ""
24027
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24028
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24029
msgstr ""
24030
24031
#: serverguide/C/backups.xml:674(programlisting)
24032
#, no-wrap
24033
msgid ""
24034
"\n"
24035
"Device {\n"
24036
" Name = \"Tape Drive\"\n"
24037
" Device Type = tape\n"
24038
" Media Type = DDS-4\n"
24039
" Archive Device = /dev/st0\n"
24040
" Hardware end of medium = No;\n"
24041
" AutomaticMount = yes; # when device opened, read it\n"
24042
" AlwaysOpen = Yes;\n"
24043
" RemovableMedia = yes;\n"
24044
" RandomAccess = no;\n"
24045
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24046
"}\n"
24047
msgstr ""
24048
24049
#: serverguide/C/backups.xml:688(para)
24050
msgid ""
24051
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24052
"Type and Archive Device to match your hardware."
24053
msgstr ""
24054
24055
#: serverguide/C/backups.xml:691(para)
24056
msgid "You could also uncomment one of the other examples in the file."
24057
msgstr ""
24058
24059
#: serverguide/C/backups.xml:696(para)
24060
msgid ""
24061
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24062
"<application>Storage</application> daemon will need to be restarted:"
24063
msgstr ""
24064
24065
#: serverguide/C/backups.xml:701(command)
24066
msgid "sudo /etc/init.d/bacula-sd restart"
24067
msgstr ""
24068
24069
#: serverguide/C/backups.xml:705(para)
24070
msgid ""
24071
"Now add a <emphasis>Storage</emphasis> resource in "
24072
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24073
msgstr ""
24074
24075
#: serverguide/C/backups.xml:708(programlisting)
24076
#, no-wrap
24077
msgid ""
24078
"\n"
24079
"# Definition of \"Tape Drive\" storage device\n"
24080
"Storage {\n"
24081
" Name = TapeDrive\n"
24082
" # Do not use \"localhost\" here \n"
24083
" Address = backupserver # N.B. Use a fully qualified name "
24084
"here\n"
24085
" SDPort = 9103\n"
24086
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24087
" Device = \"Tape Drive\"\n"
24088
" Media Type = tape\n"
24089
"}\n"
24090
msgstr ""
24091
24092
#: serverguide/C/backups.xml:720(para)
24093
msgid ""
24094
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24095
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24096
"to the actual host name."
24097
msgstr ""
24098
24099
#: serverguide/C/backups.xml:724(para)
24100
msgid ""
24101
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24102
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24103
msgstr ""
24104
24105
#: serverguide/C/backups.xml:730(para)
24106
msgid ""
24107
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24108
"directories to backup, by adding:"
24109
msgstr ""
24110
24111
#: serverguide/C/backups.xml:733(programlisting)
24112
#, no-wrap
24113
msgid ""
24114
"\n"
24115
"# LocalhostBacup FileSet.\n"
24116
"FileSet {\n"
24117
" Name = \"LocalhostFiles\"\n"
24118
" Include {\n"
24119
" Options {\n"
24120
" signature = MD5\n"
24121
" compression=GZIP\n"
24122
" }\n"
24123
" File = /etc\n"
24124
" File = /home\n"
24125
" }\n"
24126
"}\n"
24127
msgstr ""
24128
24129
#: serverguide/C/backups.xml:747(para)
24130
msgid ""
24131
"This <emphasis>FileSet</emphasis> will backup the <filename "
24132
"role=\"directory\">/etc</filename> and <filename "
24133
"role=\"directory\">/home</filename> directories. The "
24134
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24135
"create a MD5 signature for each file backed up, and to compress the files "
24136
"using GZIP."
24137
msgstr ""
24138
24139
#: serverguide/C/backups.xml:754(para)
24140
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24141
msgstr ""
24142
24143
#: serverguide/C/backups.xml:757(programlisting)
24144
#, no-wrap
24145
msgid ""
24146
"\n"
24147
"# LocalhostBackup Schedule -- Daily.\n"
24148
"Schedule {\n"
24149
" Name = \"LocalhostDaily\"\n"
24150
" Run = Full daily at 00:01\n"
24151
"}\n"
24152
msgstr ""
24153
24154
#: serverguide/C/backups.xml:764(para)
24155
msgid ""
24156
"The job will run every day at 00:01 or 12:01 am. There are many other "
24157
"scheduling options available."
24158
msgstr ""
24159
24160
#: serverguide/C/backups.xml:769(para)
24161
msgid "Finally create the <emphasis>Job</emphasis>:"
24162
msgstr ""
24163
24164
#: serverguide/C/backups.xml:772(programlisting)
24165
#, no-wrap
24166
msgid ""
24167
"\n"
24168
"# Localhost backup.\n"
24169
"Job {\n"
24170
" Name = \"LocalhostBackup\"\n"
24171
" JobDefs = \"DefaultJob\"\n"
24172
" Enabled = yes\n"
24173
" Level = Full\n"
24174
" FileSet = \"LocalhostFiles\"\n"
24175
" Schedule = \"LocalhostDaily\"\n"
24176
" Storage = TapeDrive\n"
24177
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24178
"} \n"
24179
msgstr ""
24180
24181
#: serverguide/C/backups.xml:785(para)
24182
msgid ""
24183
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24184
"drive."
24185
msgstr ""
24186
24187
#: serverguide/C/backups.xml:790(para)
24188
msgid ""
24189
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24190
"current tape does not have a label <application>Bacula</application> will "
24191
"send an email letting you know. To label a tape using the "
24192
"<application>Console</application> enter the following from a terminal:"
24193
msgstr ""
24194
24195
#: serverguide/C/backups.xml:796(command)
24196
msgid "bconsole"
24197
msgstr ""
24198
24199
#: serverguide/C/backups.xml:800(para)
24200
msgid "At the Bacula Console prompt enter:"
24201
msgstr ""
24202
24203
#: serverguide/C/backups.xml:804(command)
24204
msgid "label"
24205
msgstr ""
24206
24207
#: serverguide/C/backups.xml:808(para)
24208
msgid ""
24209
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24210
msgstr ""
24211
24212
#: serverguide/C/backups.xml:818(userinput)
24213
#, no-wrap
24214
msgid "2"
24215
msgstr ""
24216
24217
#: serverguide/C/backups.xml:812(computeroutput)
24218
#, no-wrap
24219
msgid ""
24220
"\n"
24221
"Automatically selected Catalog: MyCatalog\n"
24222
"Using Catalog \"MyCatalog\"\n"
24223
"The defined Storage resources are:\n"
24224
" 1: File\n"
24225
" 2: TapeDrive\n"
24226
"Select Storage resource (1-2):<placeholder-1/>\n"
24227
msgstr ""
24228
24229
#: serverguide/C/backups.xml:823(para)
24230
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24231
msgstr ""
24232
24233
#: serverguide/C/backups.xml:828(userinput)
24234
#, no-wrap
24235
msgid "Sunday"
24236
msgstr ""
24237
24238
#: serverguide/C/backups.xml:827(computeroutput)
24239
#, no-wrap
24240
msgid ""
24241
"\n"
24242
"Enter new Volume name: <placeholder-1/>\n"
24243
"Defined Pools:\n"
24244
" 1: Default\n"
24245
" 2: Scratch"
24246
msgstr ""
24247
24248
#: serverguide/C/backups.xml:833(para)
24249
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24250
msgstr ""
24251
24252
#: serverguide/C/backups.xml:838(para)
24253
msgid "Now, select the <emphasis>Pool</emphasis>:"
24254
msgstr ""
24255
24256
#: serverguide/C/backups.xml:843(userinput)
24257
#, no-wrap
24258
msgid "1"
24259
msgstr ""
24260
24261
#: serverguide/C/backups.xml:842(computeroutput)
24262
#, no-wrap
24263
msgid ""
24264
"\n"
24265
"Select the Pool (1-2): <placeholder-1/>\n"
24266
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24267
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24268
msgstr ""
24269
24270
#: serverguide/C/backups.xml:850(para)
24271
msgid ""
24272
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24273
"backup the localhost to an attached tape drive."
24274
msgstr ""
24275
24276
#: serverguide/C/backups.xml:858(para)
24277
msgid ""
24278
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24279
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24280
"Manual</ulink>"
24281
msgstr ""
24282
24283
#: serverguide/C/backups.xml:864(para)
24284
msgid ""
24285
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24286
"the latest Bacula news and developments."
24287
msgstr ""
24288
24289
#: serverguide/C/backups.xml:869(para)
24290
msgid ""
24291
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24292
"Ubuntu Wiki</ulink> page."
24293
msgstr ""
24294
24295
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24296
#: serverguide/C/backups.xml:0(None)
24297
msgid "translator-credits"
24298
msgstr ""
Loggerhead is a web-based interface for Breezy
Version: 2.0.1