« back to all changes in this revision
Viewing changes to serverguide/po/nl.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/nl.po
1
# Dutch translation for ubuntu-docs
2
# Copyright (c) (c) 2006 Canonical Ltd, and Rosetta Contributors 2006
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2006.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2009-10-20 04:01+0000\n"
12
"Last-Translator: Launchpad Translations Administrators "
13
"<rosetta@launchpad.net>\n"
14
"Language-Team: Dutch <nl@li.org>\n"
15
"MIME-Version: 1.0\n"
16
"Content-Type: text/plain; charset=UTF-8\n"
17
"Content-Transfer-Encoding: 8bit\n"
18
"X-Launchpad-Export-Date: 2010-04-17 14:52+0000\n"
19
"X-Generator: Launchpad (build Unknown)\n"
20
21
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
22
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
23
msgstr ""
24
"ubuntu-doc@lists.ubuntu.com (Ubuntu-documentatieproject, Engelstalig)"
25
26
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
27
msgid "Ubuntu Server Guide"
28
msgstr ""
29
30
#: serverguide/C/serverguide-C.omf:9(date)
31
msgid "2007-09-30"
32
msgstr "30-09-2007"
33
34
#: serverguide/C/windows-networking.xml:13(title)
35
msgid "Windows Networking"
36
msgstr ""
37
38
#: serverguide/C/windows-networking.xml:15(para)
39
msgid ""
40
"Computer networks are often comprised of diverse systems, and while "
41
"operating a network made up entirely of Ubuntu desktop and server computers "
42
"would certainly be fun, some network environments must consist of both "
43
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
44
"class=\"registered\">Windows</trademark> systems working together in "
45
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
46
"principles and tools used in configuring your Ubuntu Server for sharing "
47
"network resources with Windows computers."
48
msgstr ""
49
50
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
51
msgid "Introduction"
52
msgstr "Inleiding"
53
54
#: serverguide/C/windows-networking.xml:27(para)
55
msgid ""
56
"Successfully networking your Ubuntu system with Windows clients involves "
57
"providing and integrating with services common to Windows environments. Such "
58
"services assist the sharing of data and information about the computers and "
59
"users involved in the network, and may be classified under three major "
60
"categories of functionality:"
61
msgstr ""
62
63
#: serverguide/C/windows-networking.xml:35(para)
64
msgid ""
65
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
66
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
67
"folders, volumes, and the sharing of printers throughout the network."
68
msgstr ""
69
70
#: serverguide/C/windows-networking.xml:41(para)
71
msgid ""
72
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
73
"information about the computers and users of the network with such "
74
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
75
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
76
msgstr ""
77
78
#: serverguide/C/windows-networking.xml:48(para)
79
msgid ""
80
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
81
"the identity of a computer or user of the network and determining the "
82
"information the computer or user is authorized to access using such "
83
"principles and technologies as file permissions, group policies, and the "
84
"Kerberos authentication service."
85
msgstr ""
86
87
#: serverguide/C/windows-networking.xml:56(para)
88
msgid ""
89
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
90
"clients and share network resources among them. One of the principal pieces "
91
"of software your Ubuntu system includes for Windows networking is the Samba "
92
"suite of SMB server applications and tools."
93
msgstr ""
94
95
#: serverguide/C/windows-networking.xml:62(para)
96
msgid ""
97
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
98
"of the common Samba use cases, and how to install and configure the "
99
"necessary packages. Additional detailed documentation and information on "
100
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
101
"website</ulink>."
102
msgstr ""
103
104
#: serverguide/C/windows-networking.xml:70(title)
105
msgid "Samba File Server"
106
msgstr ""
107
108
#: serverguide/C/windows-networking.xml:72(para)
109
msgid ""
110
"One of the most common ways to network Ubuntu and Windows computers is to "
111
"configure Samba as a File Server. This section covers setting up a "
112
"<application>Samba</application> server to share files with Windows clients."
113
msgstr ""
114
115
#: serverguide/C/windows-networking.xml:77(para)
116
msgid ""
117
"The server will be configured to share files with any client on the network "
118
"without prompting for a password. If your environment requires stricter "
119
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
120
msgstr ""
121
122
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
123
msgid "Installation"
124
msgstr ""
125
126
#: serverguide/C/windows-networking.xml:85(para)
127
msgid ""
128
"The first step is to install the <application>samba</application> package. "
129
"From a terminal prompt enter:"
130
msgstr ""
131
132
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
133
msgid "sudo apt-get install samba"
134
msgstr ""
135
136
#: serverguide/C/windows-networking.xml:93(para)
137
msgid ""
138
"That's all there is to it; you are now ready to configure Samba to share "
139
"files."
140
msgstr ""
141
142
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
143
msgid "Configuration"
144
msgstr ""
145
146
#: serverguide/C/windows-networking.xml:101(para)
147
msgid ""
148
"The main Samba configuration file is located in "
149
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
150
"a significant amount of comments in order to document various configuration "
151
"directives."
152
msgstr ""
153
154
#: serverguide/C/windows-networking.xml:106(para)
155
msgid ""
156
"Not all the available options are included in the default configuration "
157
"file. See the <filename>smb.conf</filename><application>man</application> "
158
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
159
"Collection/\">Samba HOWTO Collection</ulink> for more details."
160
msgstr ""
161
162
#: serverguide/C/windows-networking.xml:116(para)
163
msgid ""
164
"First, edit the following key/value pairs in the "
165
"<emphasis>[global]</emphasis> section of "
166
"<filename>/etc/samba/smb.conf</filename>:"
167
msgstr ""
168
169
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
170
#, no-wrap
171
msgid ""
172
"\n"
173
" workgroup = EXAMPLE\n"
174
" ...\n"
175
" security = user\n"
176
msgstr ""
177
178
#: serverguide/C/windows-networking.xml:127(para)
179
msgid ""
180
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
181
"section, and is commented by default. Also, change "
182
"<emphasis>EXAMPLE</emphasis> to better match your environment."
183
msgstr ""
184
185
#: serverguide/C/windows-networking.xml:135(para)
186
msgid ""
187
"Create a new section at the bottom of the file, or uncomment one of the "
188
"examples, for the directory to be shared:"
189
msgstr ""
190
191
#: serverguide/C/windows-networking.xml:139(programlisting)
192
#, no-wrap
193
msgid ""
194
"\n"
195
"[share]\n"
196
" comment = Ubuntu File Server Share\n"
197
" path = /srv/samba/share\n"
198
" browsable = yes\n"
199
" guest ok = yes\n"
200
" read only = no\n"
201
" create mask = 0755\n"
202
msgstr ""
203
204
#: serverguide/C/windows-networking.xml:151(para)
205
msgid ""
206
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
207
"fit your needs."
208
msgstr ""
209
210
#: serverguide/C/windows-networking.xml:156(para)
211
msgid "<emphasis>path:</emphasis> the path to the directory to share."
212
msgstr ""
213
214
#: serverguide/C/windows-networking.xml:159(para)
215
msgid ""
216
"This example uses <filename>/srv/samba/sharename</filename> because, "
217
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
218
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
219
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
220
"specific data should be served. Technically Samba shares can be placed "
221
"anywhere on the filesystem as long as the permissions are correct, but "
222
"adhering to standards is recommended."
223
msgstr ""
224
225
#: serverguide/C/windows-networking.xml:168(para)
226
msgid ""
227
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
228
"directory using <application>Windows Explorer</application>."
229
msgstr ""
230
231
#: serverguide/C/windows-networking.xml:174(para)
232
msgid ""
233
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
234
"without supplying a password."
235
msgstr ""
236
237
#: serverguide/C/windows-networking.xml:179(para)
238
msgid ""
239
"<emphasis>read only:</emphasis> determines if the share is read only or if "
240
"write privileges are granted. Write privileges are allowed only when the "
241
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
242
"is <emphasis>yes</emphasis>, then access to the share is read only."
243
msgstr ""
244
245
#: serverguide/C/windows-networking.xml:184(para)
246
msgid ""
247
"<emphasis>create mask:</emphasis> determines the permissions new files will "
248
"have when created."
249
msgstr ""
250
251
#: serverguide/C/windows-networking.xml:193(para)
252
msgid ""
253
"Now that <application>Samba</application> is configured, the directory needs "
254
"to be created and the permissions changed. From a terminal enter:"
255
msgstr ""
256
257
#: serverguide/C/windows-networking.xml:199(command)
258
msgid "sudo mkdir -p /srv/samba/share"
259
msgstr ""
260
261
#: serverguide/C/windows-networking.xml:200(command)
262
msgid "sudo chown nobody.nogroup /srv/samba/share/"
263
msgstr ""
264
265
#: serverguide/C/windows-networking.xml:204(para)
266
msgid ""
267
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
268
"directory tree if it doesn't exist. Change the share name to fit your "
269
"environment."
270
msgstr ""
271
272
#: serverguide/C/windows-networking.xml:213(para)
273
msgid ""
274
"Finally, restart the <application>samba</application> services to enable the "
275
"new configuration:"
276
msgstr ""
277
278
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
279
msgid "sudo /etc/init.d/samba restart"
280
msgstr "sudo /etc/init.d/samba restart"
281
282
#: serverguide/C/windows-networking.xml:225(para)
283
msgid ""
284
"Once again, the above configuration gives all access to any client on the "
285
"local network. For a more secure configuration see <xref linkend=\"samba-"
286
"fileprint-security\"/>."
287
msgstr ""
288
289
#: serverguide/C/windows-networking.xml:231(para)
290
msgid ""
291
"From a Windows client you should now be able to browse to the Ubuntu file "
292
"server and see the shared directory. To check that everything is working try "
293
"creating a directory from Windows."
294
msgstr ""
295
296
#: serverguide/C/windows-networking.xml:236(para)
297
msgid ""
298
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
299
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
300
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
301
"share actually exists and the permissions are correct."
302
msgstr ""
303
304
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
305
msgid "Resources"
306
msgstr ""
307
308
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
309
msgid ""
310
"For in depth Samba configurations see the <ulink "
311
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
312
"Collection</ulink>"
313
msgstr ""
314
315
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
316
msgid ""
317
"The guide is also available in <ulink "
318
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
319
"format</ulink>."
320
msgstr ""
321
322
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
323
msgid ""
324
"O'Reilly's <ulink "
325
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
326
"another good reference."
327
msgstr ""
328
329
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
330
msgid ""
331
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
332
"</ulink> page."
333
msgstr ""
334
335
#: serverguide/C/windows-networking.xml:274(title)
336
msgid "Samba Print Server"
337
msgstr ""
338
339
#: serverguide/C/windows-networking.xml:276(para)
340
msgid ""
341
"Another common use of Samba is to configure it to share printers installed, "
342
"either locally or over the network, on an Ubuntu server. Similar to <xref "
343
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
344
"any client on the local network to use the installed printers without "
345
"prompting for a username and password."
346
msgstr ""
347
348
#: serverguide/C/windows-networking.xml:282(para)
349
msgid ""
350
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
351
"security\"/>."
352
msgstr ""
353
354
#: serverguide/C/windows-networking.xml:289(para)
355
msgid ""
356
"Before installing and configuring Samba it is best to already have a working "
357
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
358
"for details."
359
msgstr ""
360
361
#: serverguide/C/windows-networking.xml:294(para)
362
msgid ""
363
"To install the <application>samba</application> package, from a terminal "
364
"enter:"
365
msgstr ""
366
367
#: serverguide/C/windows-networking.xml:305(para)
368
msgid ""
369
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
370
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
371
"network, and change <emphasis>security</emphasis> to <emphasis "
372
"role=\"italic\">share</emphasis>:"
373
msgstr ""
374
375
#: serverguide/C/windows-networking.xml:317(para)
376
msgid ""
377
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
378
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
379
msgstr ""
380
381
#: serverguide/C/windows-networking.xml:321(programlisting)
382
#, no-wrap
383
msgid ""
384
"\n"
385
" browsable = yes\n"
386
" guest ok = yes\n"
387
msgstr ""
388
389
#: serverguide/C/windows-networking.xml:326(para)
390
msgid "After editing <filename>smb.conf</filename> restart Samba:"
391
msgstr ""
392
393
#: serverguide/C/windows-networking.xml:334(para)
394
msgid ""
395
"The default Samba configuration will automatically share any printers "
396
"installed. Simply install the printer locally on your Windows clients."
397
msgstr ""
398
399
#: serverguide/C/windows-networking.xml:363(para)
400
msgid ""
401
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
402
"more information on configuring CUPS."
403
msgstr ""
404
405
#: serverguide/C/windows-networking.xml:377(title)
406
msgid "Securing a Samba File and Print Server"
407
msgstr ""
408
409
#: serverguide/C/windows-networking.xml:380(title)
410
msgid "Samba Security Modes"
411
msgstr ""
412
413
#: serverguide/C/windows-networking.xml:382(para)
414
msgid ""
415
"There are two security levels available to the Common Internet Filesystem "
416
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
417
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
418
"allows more flexibility, providing four ways of implementing user-level "
419
"security and one way to implement share-level:"
420
msgstr ""
421
422
#: serverguide/C/windows-networking.xml:391(para)
423
msgid ""
424
"<emphasis>security = user:</emphasis> requires clients to supply a username "
425
"and password to connect to shares. Samba user accounts are separate from "
426
"system accounts, but the <application>libpam-smbpass</application> package "
427
"will sync system users and passwords with the Samba user database."
428
msgstr ""
429
430
#: serverguide/C/windows-networking.xml:398(para)
431
msgid ""
432
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
433
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
434
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
435
"linkend=\"samba-dc\"/> for further information."
436
msgstr ""
437
438
#: serverguide/C/windows-networking.xml:405(para)
439
msgid ""
440
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
441
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
442
"integration\"/> for details."
443
msgstr ""
444
445
#: serverguide/C/windows-networking.xml:411(para)
446
msgid ""
447
"<emphasis>security = server:</emphasis> this mode is left over from before "
448
"Samba could become a member server, and due to some security issues should "
449
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
450
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
451
"of the Samba guide for more details."
452
msgstr ""
453
454
#: serverguide/C/windows-networking.xml:419(para)
455
msgid ""
456
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
457
"without supplying a username and password."
458
msgstr ""
459
460
#: serverguide/C/windows-networking.xml:426(para)
461
msgid ""
462
"The security mode you choose will depend on your environment and what you "
463
"need the Samba server to accomplish."
464
msgstr ""
465
466
#: serverguide/C/windows-networking.xml:432(title)
467
msgid "Security = User"
468
msgstr ""
469
470
#: serverguide/C/windows-networking.xml:434(para)
471
msgid ""
472
"This section will reconfigure the Samba file and print server, from <xref "
473
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
474
"require authentication."
475
msgstr ""
476
477
#: serverguide/C/windows-networking.xml:439(para)
478
msgid ""
479
"First, install the <application>libpam-smbpass</application> package which "
480
"will sync the system users to the Samba user database:"
481
msgstr ""
482
483
#: serverguide/C/windows-networking.xml:445(command)
484
msgid "sudo apt-get install libpam-smbpass"
485
msgstr ""
486
487
#: serverguide/C/windows-networking.xml:449(para)
488
msgid ""
489
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
490
"<application>libpam-smbpass</application> is already installed."
491
msgstr ""
492
493
#: serverguide/C/windows-networking.xml:455(para)
494
msgid ""
495
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
496
"<emphasis>[share]</emphasis> section change:"
497
msgstr ""
498
499
#: serverguide/C/windows-networking.xml:459(programlisting)
500
#, no-wrap
501
msgid ""
502
"\n"
503
" guest ok = no\n"
504
msgstr ""
505
506
#: serverguide/C/windows-networking.xml:463(para)
507
msgid "Finally, restart Samba for the new settings to take effect:"
508
msgstr ""
509
510
#: serverguide/C/windows-networking.xml:471(para)
511
msgid ""
512
"Now when connecting to the shared directories or printers you should be "
513
"prompted for a username and password."
514
msgstr ""
515
516
#: serverguide/C/windows-networking.xml:476(para)
517
msgid ""
518
"If you choose to map a network drive to the share you can check the "
519
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
520
"enter the username and password once, at least until the password changes."
521
msgstr ""
522
523
#: serverguide/C/windows-networking.xml:484(title)
524
msgid "Share Security"
525
msgstr ""
526
527
#: serverguide/C/windows-networking.xml:486(para)
528
msgid ""
529
"There are several options available to increase the security for each "
530
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
531
"this section will cover some common options."
532
msgstr ""
533
534
#: serverguide/C/windows-networking.xml:492(title)
535
msgid "Groups"
536
msgstr ""
537
538
#: serverguide/C/windows-networking.xml:494(para)
539
msgid ""
540
"Groups define a collection of computers or users which have a common level "
541
"of access to particular network resources and offer a level of granularity "
542
"in controlling access to such resources. For example, if a group <emphasis "
543
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
544
"role=\"italic\">freda</emphasis>, <emphasis "
545
"role=\"italic\">danika</emphasis>, and <emphasis "
546
"role=\"italic\">rob</emphasis> and a second group <emphasis "
547
"role=\"italic\">support</emphasis> is defined and consists of users "
548
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
549
"role=\"italic\">jeremy</emphasis>, and <emphasis "
550
"role=\"italic\">vincent</emphasis> then certain network resources configured "
551
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
552
"subsequently enable access by freda, danika, and rob, but not jeremy or "
553
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
554
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
555
"role=\"italic\">support</emphasis> groups, she will be able to access "
556
"resources configured for access by both groups, whereas all other users will "
557
"have only access to resources explicitly allowing the group they are part of."
558
msgstr ""
559
560
#: serverguide/C/windows-networking.xml:508(para)
561
msgid ""
562
"By default Samba looks for the local system groups defined in "
563
"<filename>/etc/group</filename> to determine which users belong to which "
564
"groups. For more information on adding and removing users from groups see "
565
"<xref linkend=\"adding-deleting-users\"/>."
566
msgstr ""
567
568
#: serverguide/C/windows-networking.xml:514(para)
569
msgid ""
570
"When defining groups in the Samba configuration file, "
571
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
572
"preface the group name with an \"@\" symbol. For example, if you wished to "
573
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
574
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
575
"do so by entering the group name as <emphasis "
576
"role=\"bold\">@sysadmin</emphasis>."
577
msgstr ""
578
579
#: serverguide/C/windows-networking.xml:523(title)
580
msgid "File Permissions"
581
msgstr ""
582
583
#: serverguide/C/windows-networking.xml:525(para)
584
msgid ""
585
"File Permissions define the explicit rights a computer or user has to a "
586
"particular directory, file, or set of files. Such permissions may be defined "
587
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
588
"the explicit permissions of a defined file share."
589
msgstr ""
590
591
#: serverguide/C/windows-networking.xml:531(para)
592
msgid ""
593
"For example, if you have defined a Samba share called "
594
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
595
"only</emphasis> permissions to the group of users known as <emphasis "
596
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
597
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
598
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
599
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
600
"under the <emphasis>[share]</emphasis> entry:"
601
msgstr ""
602
603
#: serverguide/C/windows-networking.xml:540(programlisting)
604
#, no-wrap
605
msgid ""
606
"\n"
607
" read list = @qa\n"
608
" write list = @sysadmin, vincent\n"
609
msgstr ""
610
611
#: serverguide/C/windows-networking.xml:545(para)
612
msgid ""
613
"Another possible Samba permission is to declare "
614
"<emphasis>administrative</emphasis> permissions to a particular shared "
615
"resource. Users having administrative permissions may read, write, or modify "
616
"any information contained in the resource the user has been given explicit "
617
"administrative permissions to."
618
msgstr ""
619
620
#: serverguide/C/windows-networking.xml:551(para)
621
msgid ""
622
"For example, if you wanted to give the user <emphasis "
623
"role=\"italic\">melissa</emphasis> administrative permissions to the "
624
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
625
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
626
"under the <emphasis>[share]</emphasis> entry:"
627
msgstr ""
628
629
#: serverguide/C/windows-networking.xml:558(programlisting)
630
#, no-wrap
631
msgid ""
632
"\n"
633
" admin users = melissa\n"
634
msgstr ""
635
636
#: serverguide/C/windows-networking.xml:562(para)
637
msgid ""
638
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
639
"the changes to take effect:"
640
msgstr ""
641
642
#: serverguide/C/windows-networking.xml:571(para)
643
msgid ""
644
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
645
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
646
"<emphasis role=\"italic\">security = share</emphasis>"
647
msgstr ""
648
649
#: serverguide/C/windows-networking.xml:577(para)
650
msgid ""
651
"Now that Samba has been configured to limit which groups have access to the "
652
"shared directory, the filesystem permissions need to be updated."
653
msgstr ""
654
655
#: serverguide/C/windows-networking.xml:582(para)
656
msgid ""
657
"Traditional Linux file permissions do not map well to Windows NT Access "
658
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
659
"providing more fine grained control. For example, to enable ACLs on "
660
"<filename>/srv</filename> an EXT3 filesystem, edit "
661
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
662
msgstr ""
663
664
#: serverguide/C/windows-networking.xml:589(programlisting)
665
#, no-wrap
666
msgid ""
667
"\n"
668
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
669
"0 1\n"
670
msgstr ""
671
672
#: serverguide/C/windows-networking.xml:593(para)
673
msgid "Then remount the partition:"
674
msgstr ""
675
676
#: serverguide/C/windows-networking.xml:598(command)
677
msgid "sudo mount -v -o remount /srv"
678
msgstr ""
679
680
#: serverguide/C/windows-networking.xml:602(para)
681
msgid ""
682
"The above example assumes <filename>/srv</filename> on a separate partition. "
683
"If <filename>/srv</filename>, or wherever you have configured your share "
684
"path, is part of the <filename>/</filename> partition a reboot may be "
685
"required."
686
msgstr ""
687
688
#: serverguide/C/windows-networking.xml:609(para)
689
msgid ""
690
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
691
"group will be given read, write, and execute permissions to "
692
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
693
"will be given read and execute permissions, and the files will be owned by "
694
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
695
msgstr ""
696
697
#: serverguide/C/windows-networking.xml:617(command)
698
msgid "sudo chown -R melissa /srv/samba/share/"
699
msgstr ""
700
701
#: serverguide/C/windows-networking.xml:618(command)
702
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
703
msgstr ""
704
705
#: serverguide/C/windows-networking.xml:619(command)
706
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
707
msgstr ""
708
709
#: serverguide/C/windows-networking.xml:623(para)
710
msgid ""
711
"The <application>setfacl</application> command above gives "
712
"<emphasis>execute</emphasis> permissions to all files in the "
713
"<filename>/srv/samba/share</filename> directory, which you may or may not "
714
"want."
715
msgstr ""
716
717
#: serverguide/C/windows-networking.xml:629(para)
718
msgid ""
719
"Now from a Windows client you should notice the new file permissions are "
720
"implemented. See the <application>acl</application> and "
721
"<application>setfacl</application> man pages for more information on POSIX "
722
"ACLs."
723
msgstr ""
724
725
#: serverguide/C/windows-networking.xml:637(title)
726
msgid "Samba AppArmor Profile"
727
msgstr ""
728
729
#: serverguide/C/windows-networking.xml:639(para)
730
msgid ""
731
"Ubuntu comes with the <application>AppArmor</application> security module, "
732
"which provides mandatory access controls. The default AppArmor profile for "
733
"Samba will need to be adapted to your configuration. For more details on "
734
"using AppArmor see <xref linkend=\"apparmor\"/>."
735
msgstr ""
736
737
#: serverguide/C/windows-networking.xml:645(para)
738
msgid ""
739
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
740
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
741
"of the <application>apparmor-profiles</application> packages. To install the "
742
"package, from a terminal prompt enter:"
743
msgstr ""
744
745
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
746
msgid "sudo apt-get install apparmor-profiles"
747
msgstr ""
748
749
#: serverguide/C/windows-networking.xml:656(para)
750
msgid "This package contains profiles for several other binaries."
751
msgstr ""
752
753
#: serverguide/C/windows-networking.xml:661(para)
754
msgid ""
755
"By default the profiles for <application>smbd</application> and "
756
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
757
"allowing Samba to work without modifying the profile, and only logging "
758
"errors. To place the <application>smbd</application> profile into "
759
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
760
"profile will need to be modified to reflect any directories that are shared."
761
msgstr ""
762
763
#: serverguide/C/windows-networking.xml:668(para)
764
msgid ""
765
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
766
"for <emphasis>[share]</emphasis> from the file server example:"
767
msgstr ""
768
769
#: serverguide/C/windows-networking.xml:673(programlisting)
770
#, no-wrap
771
msgid ""
772
"\n"
773
" /srv/samba/share/ r,\n"
774
" /srv/samba/share/** rwkix,\n"
775
msgstr ""
776
777
#: serverguide/C/windows-networking.xml:678(para)
778
msgid ""
779
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
780
msgstr ""
781
782
#: serverguide/C/windows-networking.xml:683(command)
783
msgid "sudo aa-enforce /usr/sbin/smbd"
784
msgstr ""
785
786
#: serverguide/C/windows-networking.xml:684(command)
787
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
788
msgstr ""
789
790
#: serverguide/C/windows-networking.xml:687(para)
791
msgid ""
792
"You should now be able to read, write, and execute files in the shared "
793
"directory as normal, and the <application>smbd</application> binary will "
794
"have access to only the configured files and directories. Be sure to add "
795
"entries for each directory you configure Samba to share. Also, any errors "
796
"will be logged to <filename>/var/log/syslog</filename>."
797
msgstr ""
798
799
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
800
msgid ""
801
"O'Reilly's <ulink "
802
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
803
"also a good reference."
804
msgstr ""
805
806
#: serverguide/C/windows-networking.xml:718(para)
807
msgid ""
808
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
809
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
810
"security."
811
msgstr ""
812
813
#: serverguide/C/windows-networking.xml:724(para)
814
msgid ""
815
"For more information on Samba and ACLs see the <ulink "
816
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
817
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
818
msgstr ""
819
820
#: serverguide/C/windows-networking.xml:740(title)
821
msgid "Samba as a Domain Controller"
822
msgstr ""
823
824
#: serverguide/C/windows-networking.xml:742(para)
825
msgid ""
826
"Although it cannot act as an Active Directory Primary Domain Controller "
827
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
828
"domain controller. A major advantage of this configuration is the ability to "
829
"centralize user and machine credentials. Samba can also use multiple "
830
"backends to store the user information."
831
msgstr ""
832
833
#: serverguide/C/windows-networking.xml:749(title)
834
msgid "Primary Domain Controller"
835
msgstr ""
836
837
#: serverguide/C/windows-networking.xml:751(para)
838
msgid ""
839
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
840
"using the default smbpasswd backend."
841
msgstr ""
842
843
#: serverguide/C/windows-networking.xml:758(para)
844
msgid ""
845
"First, install Samba, and <application>libpam-smbpass</application> to sync "
846
"the user accounts, by entering the following in a terminal prompt:"
847
msgstr ""
848
849
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
850
msgid "sudo apt-get install samba libpam-smbpass"
851
msgstr ""
852
853
#: serverguide/C/windows-networking.xml:770(para)
854
msgid ""
855
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
856
"The <emphasis>security</emphasis> mode should be set to <emphasis "
857
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
858
"should relate to your organization:"
859
msgstr ""
860
861
#: serverguide/C/windows-networking.xml:785(para)
862
msgid ""
863
"In the commented <quote>Domains</quote> section add or uncomment the "
864
"following:"
865
msgstr ""
866
867
#: serverguide/C/windows-networking.xml:789(programlisting)
868
#, no-wrap
869
msgid ""
870
"\n"
871
" domain logons = yes\n"
872
" logon path = \\\\%N\\%U\\profile\n"
873
" logon drive = H:\n"
874
" logon home = \\\\%N\\%U\n"
875
" logon script = logon.cmd\n"
876
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
877
"/var/lib/samba -s /bin/false %u\n"
878
msgstr ""
879
880
#: serverguide/C/windows-networking.xml:800(para)
881
msgid ""
882
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
883
"Samba to act as a domain controller."
884
msgstr ""
885
886
#: serverguide/C/windows-networking.xml:805(para)
887
msgid ""
888
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
889
"their home directory. It is also possible to configure a "
890
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
891
"directory."
892
msgstr ""
893
894
#: serverguide/C/windows-networking.xml:811(para)
895
msgid ""
896
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
897
msgstr ""
898
899
#: serverguide/C/windows-networking.xml:816(para)
900
msgid ""
901
"<emphasis>logon home:</emphasis> specifies the home directory location."
902
msgstr ""
903
904
#: serverguide/C/windows-networking.xml:821(para)
905
msgid ""
906
"<emphasis>logon script:</emphasis> determines the script to be run locally "
907
"once a user has logged in. The script needs to be placed in the "
908
"<emphasis>[netlogon]</emphasis> share."
909
msgstr ""
910
911
#: serverguide/C/windows-networking.xml:827(para)
912
msgid ""
913
"<emphasis>add machine script:</emphasis> a script that will automatically "
914
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
915
"workstation to join the domain."
916
msgstr ""
917
918
#: serverguide/C/windows-networking.xml:831(para)
919
msgid ""
920
"In this example the <emphasis>machines</emphasis> group will need to be "
921
"created using the <application>addgroup</application> utility see <xref "
922
"linkend=\"adding-deleting-users\"/> for details."
923
msgstr ""
924
925
#: serverguide/C/windows-networking.xml:839(para)
926
msgid ""
927
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
928
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
929
"commented."
930
msgstr ""
931
932
#: serverguide/C/windows-networking.xml:848(para)
933
msgid ""
934
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
935
"role=\"italic\">logon home</emphasis> to be mapped:"
936
msgstr ""
937
938
#: serverguide/C/windows-networking.xml:853(programlisting)
939
#, no-wrap
940
msgid ""
941
"\n"
942
"[homes]\n"
943
" comment = Home Directories\n"
944
" browseable = no\n"
945
" read only = no\n"
946
" create mask = 0700\n"
947
" directory mask = 0700\n"
948
" valid users = %S\n"
949
msgstr ""
950
951
#: serverguide/C/windows-networking.xml:866(para)
952
msgid ""
953
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
954
"share needs to be configured. To enable the share, uncomment:"
955
msgstr ""
956
957
#: serverguide/C/windows-networking.xml:871(programlisting)
958
#, no-wrap
959
msgid ""
960
"\n"
961
"[netlogon]\n"
962
" comment = Network Logon Service\n"
963
" path = /srv/samba/netlogon\n"
964
" guest ok = yes\n"
965
" read only = yes\n"
966
" share modes = no\n"
967
msgstr ""
968
969
#: serverguide/C/windows-networking.xml:881(para)
970
msgid ""
971
"The original <emphasis>netlogon</emphasis> share path is "
972
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
973
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
974
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
975
"location for site-specific data provided by the system."
976
msgstr ""
977
978
#: serverguide/C/windows-networking.xml:892(para)
979
msgid ""
980
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
981
"and an empty (for now) <filename>logon.cmd</filename> script file:"
982
msgstr ""
983
984
#: serverguide/C/windows-networking.xml:898(command)
985
msgid "sudo mkdir -p /srv/samba/netlogon"
986
msgstr ""
987
988
#: serverguide/C/windows-networking.xml:899(command)
989
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
990
msgstr ""
991
992
#: serverguide/C/windows-networking.xml:902(para)
993
msgid ""
994
"You can enter any normal Windows logon script commands in "
995
"<filename>logon.cmd</filename> to customize the client's environment."
996
msgstr ""
997
998
#: serverguide/C/windows-networking.xml:910(para)
999
msgid ""
1000
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1001
"workstation to the domain, a system group needs to be mapped to the Windows "
1002
"<emphasis>Domain Admins</emphasis> group. Using the "
1003
"<application>net</application> utility, from a terminal enter:"
1004
msgstr ""
1005
1006
#: serverguide/C/windows-networking.xml:917(command)
1007
msgid ""
1008
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1009
"type=d"
1010
msgstr ""
1011
1012
#: serverguide/C/windows-networking.xml:921(para)
1013
msgid ""
1014
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1015
"prefer. Also, the user used to join the domain needs to be a member of the "
1016
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1017
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1018
"allows <application>sudo</application> use."
1019
msgstr ""
1020
1021
#: serverguide/C/windows-networking.xml:932(para)
1022
msgid "Finally, restart Samba to enable the new domain controller:"
1023
msgstr ""
1024
1025
#: serverguide/C/windows-networking.xml:943(para)
1026
msgid ""
1027
"You should now be able to join Windows clients to the Domain in the same "
1028
"manner as joining them to an NT4 domain running on a Windows server."
1029
msgstr ""
1030
1031
#: serverguide/C/windows-networking.xml:953(title)
1032
msgid "Backup Domain Controller"
1033
msgstr ""
1034
1035
#: serverguide/C/windows-networking.xml:955(para)
1036
msgid ""
1037
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1038
"Backup Domain Controller (BDC) as well. This will allow clients to "
1039
"authenticate in case the PDC becomes unavailable."
1040
msgstr ""
1041
1042
#: serverguide/C/windows-networking.xml:960(para)
1043
msgid ""
1044
"When configuring Samba as a BDC you need a way to sync account information "
1045
"with the PDC. There are multiple ways of accomplishing this "
1046
"<application>scp</application>, <application>rsync</application>, or by "
1047
"using <application>LDAP</application> as the <emphasis>passdb "
1048
"backend</emphasis>."
1049
msgstr ""
1050
1051
#: serverguide/C/windows-networking.xml:966(para)
1052
msgid ""
1053
"Using LDAP is the most robust way to sync account information, because both "
1054
"domain controllers can use the same information in real time. However, "
1055
"setting up a LDAP server may be overly complicated for a small number of "
1056
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1057
msgstr ""
1058
1059
#: serverguide/C/windows-networking.xml:975(para)
1060
msgid ""
1061
"First, install <application>samba</application> and <application>libpam-"
1062
"smbpass</application>. From a terminal enter:"
1063
msgstr ""
1064
1065
#: serverguide/C/windows-networking.xml:986(para)
1066
msgid ""
1067
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1068
"following in the <emphasis>[global]</emphasis>:"
1069
msgstr ""
1070
1071
#: serverguide/C/windows-networking.xml:999(para)
1072
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1073
msgstr ""
1074
1075
#: serverguide/C/windows-networking.xml:1003(programlisting)
1076
#, no-wrap
1077
msgid ""
1078
"\n"
1079
" domain logons = yes\n"
1080
" domain master = no\n"
1081
msgstr ""
1082
1083
#: serverguide/C/windows-networking.xml:1011(para)
1084
msgid ""
1085
"Make sure a user has rights to read the files in "
1086
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1087
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1088
"files, enter:"
1089
msgstr ""
1090
1091
#: serverguide/C/windows-networking.xml:1017(command)
1092
msgid "sudo chgrp -R admin /var/lib/samba"
1093
msgstr ""
1094
1095
#: serverguide/C/windows-networking.xml:1023(para)
1096
msgid ""
1097
"Next, sync the user accounts, using <application>scp</application> to copy "
1098
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1099
msgstr ""
1100
1101
#: serverguide/C/windows-networking.xml:1029(command)
1102
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1103
msgstr ""
1104
1105
#: serverguide/C/windows-networking.xml:1033(para)
1106
msgid ""
1107
"Replace <emphasis>username</emphasis> with a valid username and "
1108
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1109
msgstr ""
1110
1111
#: serverguide/C/windows-networking.xml:1042(para)
1112
msgid "Finally, restart <application>samba</application>:"
1113
msgstr ""
1114
1115
#: serverguide/C/windows-networking.xml:1053(para)
1116
msgid ""
1117
"You can test that your Backup Domain controller is working by stopping the "
1118
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1119
"the domain."
1120
msgstr ""
1121
1122
#: serverguide/C/windows-networking.xml:1058(para)
1123
msgid ""
1124
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1125
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1126
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1127
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1128
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1129
msgstr ""
1130
1131
#: serverguide/C/windows-networking.xml:1088(para)
1132
msgid ""
1133
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1134
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1135
"up a Primary Domain Controller."
1136
msgstr ""
1137
1138
#: serverguide/C/windows-networking.xml:1094(para)
1139
msgid ""
1140
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1141
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1142
"explains setting up a Backup Domain Controller."
1143
msgstr ""
1144
1145
#: serverguide/C/windows-networking.xml:1109(title)
1146
msgid "Samba Active Directory Integration"
1147
msgstr ""
1148
1149
#: serverguide/C/windows-networking.xml:1112(title)
1150
msgid "Accessing a Samba Share"
1151
msgstr ""
1152
1153
#: serverguide/C/windows-networking.xml:1114(para)
1154
msgid ""
1155
"Another, use for Samba is to integrate into an existing Windows network. "
1156
"Once part of an Active Directory domain, Samba can provide file and print "
1157
"services to AD users."
1158
msgstr ""
1159
1160
#: serverguide/C/windows-networking.xml:1119(para)
1161
msgid ""
1162
"The simplest way to join an AD domain is to use <application>Likewise-"
1163
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1164
"open\"/>."
1165
msgstr ""
1166
1167
#: serverguide/C/windows-networking.xml:1124(para)
1168
msgid ""
1169
"Once part of the domain, enter the following command in the terminal prompt:"
1170
msgstr ""
1171
1172
#: serverguide/C/windows-networking.xml:1129(command)
1173
msgid "sudo apt-get install samba smbfs smbclient"
1174
msgstr ""
1175
1176
#: serverguide/C/windows-networking.xml:1132(para)
1177
msgid ""
1178
"Since the <application>likewise-open</application> and "
1179
"<application>samba</application> packages use separate "
1180
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1181
"<filename role=\"directory\">/var/lib/samba</filename>:"
1182
msgstr ""
1183
1184
#: serverguide/C/windows-networking.xml:1138(command)
1185
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1186
msgstr ""
1187
1188
#: serverguide/C/windows-networking.xml:1139(command)
1189
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1190
msgstr ""
1191
1192
#: serverguide/C/windows-networking.xml:1142(para)
1193
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1194
msgstr ""
1195
1196
#: serverguide/C/windows-networking.xml:1146(programlisting)
1197
#, no-wrap
1198
msgid ""
1199
"\n"
1200
" workgroup = EXAMPLE\n"
1201
" ...\n"
1202
" security = ads\n"
1203
" realm = EXAMPLE.COM\n"
1204
" ...\n"
1205
" idmap backend = lwopen\n"
1206
" idmap uid = 50-9999999999\n"
1207
" idmap gid = 50-9999999999\n"
1208
msgstr ""
1209
1210
#: serverguide/C/windows-networking.xml:1157(para)
1211
msgid ""
1212
"Restart <application>samba</application> for the new settings to take effect:"
1213
msgstr ""
1214
1215
#: serverguide/C/windows-networking.xml:1165(para)
1216
msgid ""
1217
"You should now be able to access any <application>Samba</application> shares "
1218
"from a Windows client. However, be sure to give the appropriate AD users or "
1219
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1220
"security\"/> for more details."
1221
msgstr ""
1222
1223
#: serverguide/C/windows-networking.xml:1173(title)
1224
msgid "Accessing a Windows Share"
1225
msgstr ""
1226
1227
#: serverguide/C/windows-networking.xml:1175(para)
1228
msgid ""
1229
"Now that the Samba server is part of the Active Directory domain you can "
1230
"access any Windows server shares:"
1231
msgstr ""
1232
1233
#: serverguide/C/windows-networking.xml:1182(para)
1234
msgid ""
1235
"To mount a Windows file share enter the following in a terminal prompt:"
1236
msgstr ""
1237
1238
#: serverguide/C/windows-networking.xml:1186(command)
1239
msgid "mount.cifs //fs01.example.com/share mount_point"
1240
msgstr ""
1241
1242
#: serverguide/C/windows-networking.xml:1189(para)
1243
msgid ""
1244
"It is also possible to access shares on computers not part of an AD domain, "
1245
"but a username and password will need to be provided."
1246
msgstr ""
1247
1248
#: serverguide/C/windows-networking.xml:1197(para)
1249
msgid ""
1250
"To mount the share during boot place an entry in "
1251
"<filename>/etc/fstab</filename>, for example:"
1252
msgstr ""
1253
1254
#: serverguide/C/windows-networking.xml:1201(programlisting)
1255
#, no-wrap
1256
msgid ""
1257
"\n"
1258
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1259
"0 0\n"
1260
msgstr ""
1261
1262
#: serverguide/C/windows-networking.xml:1208(para)
1263
msgid ""
1264
"Another way to copy files from a Windows server is to use the "
1265
"<application>smbclient</application> utility. To list the files in a Windows "
1266
"share:"
1267
msgstr ""
1268
1269
#: serverguide/C/windows-networking.xml:1214(command)
1270
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1271
msgstr ""
1272
1273
#: serverguide/C/windows-networking.xml:1220(para)
1274
msgid "To copy a file from the share, enter:"
1275
msgstr ""
1276
1277
#: serverguide/C/windows-networking.xml:1225(command)
1278
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1279
msgstr ""
1280
1281
#: serverguide/C/windows-networking.xml:1228(para)
1282
msgid ""
1283
"This will copy the <filename>file.txt</filename> into the current directory."
1284
msgstr ""
1285
1286
#: serverguide/C/windows-networking.xml:1235(para)
1287
msgid "And to copy a file to the share:"
1288
msgstr ""
1289
1290
#: serverguide/C/windows-networking.xml:1240(command)
1291
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1292
msgstr ""
1293
1294
#: serverguide/C/windows-networking.xml:1243(para)
1295
msgid ""
1296
"This will copy the <filename>/etc/hosts</filename> to "
1297
"<filename>//fs01.example.com/share/hosts</filename>."
1298
msgstr ""
1299
1300
#: serverguide/C/windows-networking.xml:1250(para)
1301
msgid ""
1302
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1303
"<application>smbclient</application> command all at once. This is useful for "
1304
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1305
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1306
"and directory commands, simply execute:"
1307
msgstr ""
1308
1309
#: serverguide/C/windows-networking.xml:1257(command)
1310
msgid "smbclient //fs01.example.com/share -k"
1311
msgstr ""
1312
1313
#: serverguide/C/windows-networking.xml:1264(para)
1314
msgid ""
1315
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1316
"<emphasis>//192.168.0.5/share</emphasis>, "
1317
"<emphasis>username=steve,password=secret</emphasis>, and "
1318
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1319
"file name, and an actual username and password with rights to the share."
1320
msgstr ""
1321
1322
#: serverguide/C/windows-networking.xml:1275(para)
1323
msgid ""
1324
"For more <application>smbclient</application> options see the man page: "
1325
"<command>man smbclient</command>, also available <ulink "
1326
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1327
"line</ulink>."
1328
msgstr ""
1329
1330
#: serverguide/C/windows-networking.xml:1280(para)
1331
msgid ""
1332
"The <application>mount.cifs</application><ulink "
1333
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1334
"an page</ulink> is also useful for more detailed information."
1335
msgstr ""
1336
1337
#: serverguide/C/windows-networking.xml:1293(title)
1338
msgid "Likewise Open"
1339
msgstr ""
1340
1341
#: serverguide/C/windows-networking.xml:1295(para)
1342
msgid ""
1343
"<application>Likewise Open</application> simplifies the necessary "
1344
"configuration needed to authenticate a Linux machine to an Active Directory "
1345
"domain. Based on <application>winbind</application>, the "
1346
"<application>likewise-open</application> package takes the pain out of "
1347
"integrating Ubuntu authentication into an existing Windows network."
1348
msgstr ""
1349
1350
#: serverguide/C/windows-networking.xml:1304(para)
1351
msgid ""
1352
"There are two ways to use Likewise Open, <application>likewise-"
1353
"open</application> the command line utility and <application>likewise-open-"
1354
"gui</application>. This section focuses on the command line utility."
1355
msgstr ""
1356
1357
#: serverguide/C/windows-networking.xml:1309(para)
1358
msgid ""
1359
"To install the <application>likewise-open</application> package, open a "
1360
"terminal prompt and enter:"
1361
msgstr ""
1362
1363
#: serverguide/C/windows-networking.xml:1314(command)
1364
msgid "sudo apt-get install likewise-open"
1365
msgstr ""
1366
1367
#: serverguide/C/windows-networking.xml:1319(title)
1368
msgid "Joining a Domain"
1369
msgstr ""
1370
1371
#: serverguide/C/windows-networking.xml:1321(para)
1372
msgid ""
1373
"The main executable file of the <application>likewise-open</application> "
1374
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1375
"join your computer to the domain. Before you join a domain you will need to "
1376
"make sure you have:"
1377
msgstr ""
1378
1379
#: serverguide/C/windows-networking.xml:1329(para)
1380
msgid ""
1381
"Access to an Active Directory user with appropriate rights to join the "
1382
"domain."
1383
msgstr ""
1384
1385
#: serverguide/C/windows-networking.xml:1334(para)
1386
msgid ""
1387
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1388
"you want to join. If your AD domain does not match a valid domain such as "
1389
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1390
"the form of <emphasis>domainname.local</emphasis>."
1391
msgstr ""
1392
1393
#: serverguide/C/windows-networking.xml:1341(para)
1394
msgid ""
1395
"DNS for the domain setup properly. In a production AD environment this "
1396
"should be the case. Proper Microsoft DNS is needed so that client "
1397
"workstations can determine the Active Directory domain is available."
1398
msgstr ""
1399
1400
#: serverguide/C/windows-networking.xml:1345(para)
1401
msgid ""
1402
"If you don't have a Windows DNS server on your network, see <xref "
1403
"linkend=\"likewise-open-ms-dns\"/> for details."
1404
msgstr ""
1405
1406
#: serverguide/C/windows-networking.xml:1352(para)
1407
msgid "To join a domain, from a terminal prompt enter:"
1408
msgstr ""
1409
1410
#: serverguide/C/windows-networking.xml:1357(command)
1411
msgid "sudo domainjoin-cli join example.com Administrator"
1412
msgstr ""
1413
1414
#: serverguide/C/windows-networking.xml:1361(para)
1415
msgid ""
1416
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1417
"<emphasis>Administrator</emphasis> with the appropriate user name."
1418
msgstr ""
1419
1420
#: serverguide/C/windows-networking.xml:1367(para)
1421
msgid ""
1422
"You will then be prompted for the user's password. If all goes well a "
1423
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1424
msgstr ""
1425
1426
#: serverguide/C/windows-networking.xml:1373(para)
1427
msgid ""
1428
"After joining the domain, it is necessary to reboot before attempting to "
1429
"authenticate against the domain."
1430
msgstr ""
1431
1432
#: serverguide/C/windows-networking.xml:1379(para)
1433
msgid ""
1434
"After successfully joining an Ubuntu machine to an Active Directory domain "
1435
"you can authenticate using any valid AD user. To login you will need to "
1436
"enter the user name as 'domain\\username'. For example to ssh to a server "
1437
"joined to the domain enter:"
1438
msgstr ""
1439
1440
#: serverguide/C/windows-networking.xml:1386(command)
1441
msgid "ssh 'example\\steve'@hostname"
1442
msgstr ""
1443
1444
#: serverguide/C/windows-networking.xml:1390(para)
1445
msgid ""
1446
"If configuring a Desktop the user name will need to be prefixed with "
1447
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1448
msgstr ""
1449
1450
#: serverguide/C/windows-networking.xml:1396(para)
1451
msgid ""
1452
"To make likewise-open use a default domain, you can add the following "
1453
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1454
msgstr ""
1455
1456
#: serverguide/C/windows-networking.xml:1400(programlisting)
1457
#, no-wrap
1458
msgid ""
1459
"\n"
1460
"winbind use default domain = yes\n"
1461
msgstr ""
1462
1463
#: serverguide/C/windows-networking.xml:1404(para)
1464
msgid "Then restart the <application>likewise-open</application> daemons:"
1465
msgstr ""
1466
1467
#: serverguide/C/windows-networking.xml:1409(command)
1468
msgid "sudo /etc/init.d/likewise-open restart"
1469
msgstr ""
1470
1471
#: serverguide/C/windows-networking.xml:1413(para)
1472
msgid ""
1473
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1474
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1475
"using only their username."
1476
msgstr ""
1477
1478
#: serverguide/C/windows-networking.xml:1419(para)
1479
msgid ""
1480
"The <application>domainjoin-cli</application> utility can also be used to "
1481
"leave the domain. From a terminal:"
1482
msgstr ""
1483
1484
#: serverguide/C/windows-networking.xml:1424(command)
1485
msgid "sudo domainjoin-cli leave"
1486
msgstr ""
1487
1488
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1489
msgid "Other Utilities"
1490
msgstr ""
1491
1492
#: serverguide/C/windows-networking.xml:1431(para)
1493
msgid ""
1494
"The <application>likewise-open</application> package comes with a few other "
1495
"utilities that may be useful for gathering information about the Active "
1496
"Directory environment. These utilities are used to join the machine to the "
1497
"domain, and are the same as those available in the <application>samba-"
1498
"common</application> and <application>winbind</application> packages:"
1499
msgstr ""
1500
1501
#: serverguide/C/windows-networking.xml:1440(para)
1502
msgid ""
1503
"<application>lwinet</application>: Returns information about the network and "
1504
"the domain."
1505
msgstr ""
1506
1507
#: serverguide/C/windows-networking.xml:1445(para)
1508
msgid ""
1509
"<application>lwimsg</application>: Allows interaction with the "
1510
"<application>likewise-winbindd</application> daemon."
1511
msgstr ""
1512
1513
#: serverguide/C/windows-networking.xml:1450(para)
1514
msgid ""
1515
"<application>lwiinfo</application>: Displays information about various parts "
1516
"of the Domain."
1517
msgstr ""
1518
1519
#: serverguide/C/windows-networking.xml:1456(para)
1520
msgid "Please refer to each utility's man page specific for details."
1521
msgstr ""
1522
1523
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1524
msgid "Troubleshooting"
1525
msgstr ""
1526
1527
#: serverguide/C/windows-networking.xml:1466(para)
1528
msgid ""
1529
"If the client has trouble joining the domain, double check that the "
1530
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1531
"example:"
1532
msgstr ""
1533
1534
#: serverguide/C/windows-networking.xml:1471(programlisting)
1535
#, no-wrap
1536
msgid ""
1537
"\n"
1538
"nameserver 192.168.0.1\n"
1539
msgstr ""
1540
1541
#: serverguide/C/windows-networking.xml:1476(para)
1542
msgid ""
1543
"For more information when joining a domain, use the <emphasis>--loglevel "
1544
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1545
"<application>domainjoin-cli</application> utility:"
1546
msgstr ""
1547
1548
#: serverguide/C/windows-networking.xml:1482(command)
1549
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1550
msgstr ""
1551
1552
#: serverguide/C/windows-networking.xml:1486(para)
1553
msgid ""
1554
"If an Active Directory user has trouble logging in, check the "
1555
"<filename>/var/log/auth.log</filename> for details."
1556
msgstr ""
1557
1558
#: serverguide/C/windows-networking.xml:1491(para)
1559
msgid ""
1560
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1561
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1562
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1563
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1564
"<emphasis>hosts</emphasis> option. For example:"
1565
msgstr ""
1566
1567
#: serverguide/C/windows-networking.xml:1497(programlisting)
1568
#, no-wrap
1569
msgid ""
1570
"\n"
1571
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1572
msgstr ""
1573
1574
#: serverguide/C/windows-networking.xml:1501(para)
1575
msgid "Change the above to:"
1576
msgstr ""
1577
1578
#: serverguide/C/windows-networking.xml:1505(programlisting)
1579
#, no-wrap
1580
msgid ""
1581
"\n"
1582
"hosts: files dns [NOTFOUND=return]\n"
1583
msgstr ""
1584
1585
#: serverguide/C/windows-networking.xml:1509(para)
1586
msgid "Then restart networking by entering:"
1587
msgstr ""
1588
1589
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1590
msgid "sudo /etc/init.d/networking restart"
1591
msgstr ""
1592
1593
#: serverguide/C/windows-networking.xml:1517(para)
1594
msgid "You should now be able to join the Active Directory domain."
1595
msgstr ""
1596
1597
#: serverguide/C/windows-networking.xml:1525(title)
1598
msgid "Microsoft DNS"
1599
msgstr ""
1600
1601
#: serverguide/C/windows-networking.xml:1527(para)
1602
msgid ""
1603
"The following are instructions for installing DNS on an Active Directory "
1604
"domain controller running Windows Server 2003, but the instructions should "
1605
"be similar for other versions:"
1606
msgstr ""
1607
1608
#: serverguide/C/windows-networking.xml:1536(para)
1609
msgid ""
1610
"Click "
1611
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1612
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1613
"This will open the <application>Server Role Mangement</application> utility."
1614
msgstr ""
1615
1616
#: serverguide/C/windows-networking.xml:1544(para)
1617
msgid "Click <guilabel>Add or remove a role</guilabel>"
1618
msgstr ""
1619
1620
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1621
msgid "Click Next"
1622
msgstr ""
1623
1624
#: serverguide/C/windows-networking.xml:1546(para)
1625
msgid "Select \"DNS Server\""
1626
msgstr ""
1627
1628
#: serverguide/C/windows-networking.xml:1548(para)
1629
msgid "Click Next again to proceed"
1630
msgstr ""
1631
1632
#: serverguide/C/windows-networking.xml:1549(para)
1633
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1634
msgstr ""
1635
1636
#: serverguide/C/windows-networking.xml:1551(para)
1637
msgid ""
1638
"Make sure \"This server maintains the zone\" is selected and click Next."
1639
msgstr ""
1640
1641
#: serverguide/C/windows-networking.xml:1552(para)
1642
msgid "Enter your domain name and click Next"
1643
msgstr ""
1644
1645
#: serverguide/C/windows-networking.xml:1553(para)
1646
msgid "Click Next to \"Allow only secure dynamic updates\""
1647
msgstr ""
1648
1649
#: serverguide/C/windows-networking.xml:1555(para)
1650
msgid ""
1651
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1652
"should not forward queries\" and click Next."
1653
msgstr ""
1654
1655
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1656
msgid "Click Finish"
1657
msgstr ""
1658
1659
#: serverguide/C/windows-networking.xml:1562(para)
1660
msgid ""
1661
"DNS is now installed and can be further configured using the "
1662
"<application>Microsoft Management Console</application> DNS snap-in."
1663
msgstr ""
1664
1665
#: serverguide/C/windows-networking.xml:1570(para)
1666
msgid "Click Start"
1667
msgstr ""
1668
1669
#: serverguide/C/windows-networking.xml:1571(para)
1670
msgid "Control Panel"
1671
msgstr ""
1672
1673
#: serverguide/C/windows-networking.xml:1572(para)
1674
msgid "Network Connections"
1675
msgstr ""
1676
1677
#: serverguide/C/windows-networking.xml:1573(para)
1678
msgid "Right Click \"Local Area Connection\""
1679
msgstr ""
1680
1681
#: serverguide/C/windows-networking.xml:1574(para)
1682
msgid "Click Properties"
1683
msgstr ""
1684
1685
#: serverguide/C/windows-networking.xml:1575(para)
1686
msgid "Double click \"Internet Protocol (TCP/IP)\""
1687
msgstr ""
1688
1689
#: serverguide/C/windows-networking.xml:1576(para)
1690
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1691
msgstr ""
1692
1693
#: serverguide/C/windows-networking.xml:1577(para)
1694
msgid "Click Ok"
1695
msgstr ""
1696
1697
#: serverguide/C/windows-networking.xml:1578(para)
1698
msgid "Click Ok again to save the settings"
1699
msgstr ""
1700
1701
#: serverguide/C/windows-networking.xml:1567(para)
1702
msgid ""
1703
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1704
msgstr ""
1705
1706
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1707
msgid "References"
1708
msgstr ""
1709
1710
#: serverguide/C/windows-networking.xml:1587(para)
1711
msgid ""
1712
"Please refer to the <ulink "
1713
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1714
"further information."
1715
msgstr ""
1716
1717
#: serverguide/C/windows-networking.xml:1591(para)
1718
msgid ""
1719
"For more <application>domainjoin-cli</application> options see the man page: "
1720
"<command>man domainjoin-cli</command>."
1721
msgstr ""
1722
1723
#: serverguide/C/windows-networking.xml:1595(para)
1724
msgid ""
1725
"Also, see the <ulink "
1726
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1727
"LikewiseOpen</ulink> page."
1728
msgstr ""
1729
1730
#: serverguide/C/web-servers.xml:13(title)
1731
msgid "Web Servers"
1732
msgstr ""
1733
1734
#: serverguide/C/web-servers.xml:14(para)
1735
msgid ""
1736
"A Web server is a software responsible for accepting HTTP requests from "
1737
"clients, which are known as Web browsers, and serving them HTTP responses "
1738
"along with optional data contents, which usually are Web pages such as HTML "
1739
"documents and linked objects (images, etc.)."
1740
msgstr ""
1741
1742
#: serverguide/C/web-servers.xml:19(title)
1743
msgid "HTTPD - Apache2 Web Server"
1744
msgstr ""
1745
1746
#: serverguide/C/web-servers.xml:20(para)
1747
msgid ""
1748
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1749
"are used to serve Web Pages requested by client computers. Clients typically "
1750
"request and view Web Pages using Web Browser applications such as "
1751
"<application>Firefox</application>, <application>Opera</application>, or "
1752
"<application>Mozilla</application>."
1753
msgstr ""
1754
1755
#: serverguide/C/web-servers.xml:24(para)
1756
msgid ""
1757
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1758
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1759
"resource. For example, to view the home page of the <ulink "
1760
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1761
"the FQDN. To request specific information about <ulink "
1762
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1763
"enter the FQDN followed by a path."
1764
msgstr ""
1765
1766
#: serverguide/C/web-servers.xml:29(para)
1767
msgid ""
1768
"The most common protocol used to transfer Web pages is the Hyper Text "
1769
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1770
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1771
"protocol for uploading and downloading files, are also supported."
1772
msgstr ""
1773
1774
#: serverguide/C/web-servers.xml:33(para)
1775
msgid ""
1776
"Apache Web Servers are often used in combination with the "
1777
"<application>MySQL</application> database engine, the HyperText Preprocessor "
1778
"(<application>PHP</application>) scripting language, and other popular "
1779
"scripting languages such as <application>Python</application> and "
1780
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
1781
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
1782
"for the development and deployment of Web-based applications."
1783
msgstr ""
1784
1785
#: serverguide/C/web-servers.xml:42(para)
1786
msgid ""
1787
"The <application>Apache2</application> web server is available in Ubuntu "
1788
"Linux. To install Apache2:"
1789
msgstr ""
1790
1791
#: serverguide/C/web-servers.xml:48(para)
1792
msgid "At a terminal prompt enter the following command:"
1793
msgstr ""
1794
1795
#: serverguide/C/web-servers.xml:53(command)
1796
msgid "sudo apt-get install apache2"
1797
msgstr ""
1798
1799
#: serverguide/C/web-servers.xml:63(para)
1800
msgid ""
1801
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
1802
"text configuration files. These <emphasis>directives</emphasis> are "
1803
"separated between the following files and directories:"
1804
msgstr ""
1805
1806
#: serverguide/C/web-servers.xml:71(para)
1807
msgid ""
1808
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
1809
"Contains settings that are <emphasis>global</emphasis> to Apache2."
1810
msgstr ""
1811
1812
#: serverguide/C/web-servers.xml:77(para)
1813
msgid ""
1814
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
1815
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
1816
"serve content may add files, or symlinks, to this directory."
1817
msgstr ""
1818
1819
#: serverguide/C/web-servers.xml:83(para)
1820
msgid ""
1821
"<emphasis>envvars:</emphasis> file where Apache2 "
1822
"<emphasis>environment</emphasis> variables are set."
1823
msgstr ""
1824
1825
#: serverguide/C/web-servers.xml:88(para)
1826
msgid ""
1827
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
1828
"file, named after the <application>httpd</application> daemon. The file can "
1829
"be used for <emphasis>user specific</emphasis> configuration options that "
1830
"globally effect Apache2."
1831
msgstr ""
1832
1833
#: serverguide/C/web-servers.xml:95(para)
1834
msgid ""
1835
"<emphasis>mods-available:</emphasis> this directory contains configuration "
1836
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
1837
"modules will have specific configuration files, however."
1838
msgstr ""
1839
1840
#: serverguide/C/web-servers.xml:101(para)
1841
msgid ""
1842
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
1843
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
1844
"configuration file is symlinked it will be enabled the next time "
1845
"<application>apache2</application> is restarted."
1846
msgstr ""
1847
1848
#: serverguide/C/web-servers.xml:108(para)
1849
msgid ""
1850
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
1851
"TCP ports Apache2 is listening on."
1852
msgstr ""
1853
1854
#: serverguide/C/web-servers.xml:113(para)
1855
msgid ""
1856
"<emphasis>sites-available:</emphasis> this directory has configuration files "
1857
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
1858
"to be configured for multiple sites that have separate configurations."
1859
msgstr ""
1860
1861
#: serverguide/C/web-servers.xml:119(para)
1862
msgid ""
1863
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
1864
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
1865
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
1866
"a configuration file in sites-available is symlinked, the site configured by "
1867
"it will be active once Apache2 is restarted."
1868
msgstr ""
1869
1870
#: serverguide/C/web-servers.xml:127(para)
1871
msgid ""
1872
"In addition, other configuration files may be added using the "
1873
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
1874
"many configuration files. Any directive may be placed in any of these "
1875
"configuration files. Changes to the main configuration files are only "
1876
"recognized by Apache2 when it is started or restarted."
1877
msgstr ""
1878
1879
#: serverguide/C/web-servers.xml:136(para)
1880
msgid ""
1881
"The server also reads a file containing mime document types; the filename is "
1882
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
1883
"<filename>/etc/mime.types</filename> by default."
1884
msgstr ""
1885
1886
#: serverguide/C/web-servers.xml:141(title)
1887
msgid "Basic Settings"
1888
msgstr ""
1889
1890
#: serverguide/C/web-servers.xml:142(para)
1891
msgid ""
1892
"This section explains Apache2 server essential configuration parameters. "
1893
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
1894
"Documentation</ulink> for more details."
1895
msgstr ""
1896
1897
#: serverguide/C/web-servers.xml:150(para)
1898
msgid ""
1899
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
1900
"it is configured with a single default virtual host (using the "
1901
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
1902
"if you have a single site, or used as a template for additional virtual "
1903
"hosts if you have multiple sites. If left alone, the default virtual host "
1904
"will serve as your default site, or the site users will see if the URL they "
1905
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
1906
"your custom sites. To modify the default virtual host, edit the file "
1907
"<filename>/etc/apache2/sites-available/default</filename>."
1908
msgstr ""
1909
1910
#: serverguide/C/web-servers.xml:163(para)
1911
msgid ""
1912
"The directives set for a virtual host only apply to that particular virtual "
1913
"host. If a directive is set server-wide and not defined within the virtual "
1914
"host settings, the default setting is used. For example, you can define a "
1915
"Webmaster email address and not define individual email addresses for each "
1916
"virtual host."
1917
msgstr ""
1918
1919
#: serverguide/C/web-servers.xml:171(para)
1920
msgid ""
1921
"If you wish to configure a new virtual host or site, copy that file into the "
1922
"same directory with a name you choose. For example:"
1923
msgstr ""
1924
1925
#: serverguide/C/web-servers.xml:177(command)
1926
msgid ""
1927
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
1928
"available/mynewsite"
1929
msgstr ""
1930
1931
#: serverguide/C/web-servers.xml:180(para)
1932
msgid ""
1933
"Edit the new file to configure the new site using some of the directives "
1934
"described below."
1935
msgstr ""
1936
1937
#: serverguide/C/web-servers.xml:187(para)
1938
msgid ""
1939
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
1940
"to be advertised for the server's administrator. The default value is "
1941
"webmaster@localhost. This should be changed to an email address that is "
1942
"delivered to you (if you are the server's administrator). If your website "
1943
"has a problem, Apache2 will display an error message containing this email "
1944
"address to report the problem to. Find this directive in your site's "
1945
"configuration file in /etc/apache2/sites-available."
1946
msgstr ""
1947
1948
#: serverguide/C/web-servers.xml:198(para)
1949
msgid ""
1950
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
1951
"the IP address, Apache2 should listen on. If the IP address is not "
1952
"specified, Apache2 will listen on all IP addresses assigned to the machine "
1953
"it runs on. The default value for the Listen directive is 80. Change this to "
1954
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
1955
"that it will not be available to the Internet, to (for example) 81 to change "
1956
"the port that it listens on, or leave it as is for normal operation. This "
1957
"directive can be found and changed in its own file, "
1958
"<filename>/etc/apache2/ports.conf</filename>"
1959
msgstr ""
1960
1961
#: serverguide/C/web-servers.xml:211(para)
1962
msgid ""
1963
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
1964
"FQDN your site should answer to. The default virtual host has no ServerName "
1965
"directive specified, so it will respond to all requests that do not match a "
1966
"ServerName directive in another virtual host. If you have just acquired the "
1967
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
1968
"value of the ServerName directive in your virtual host configuration file "
1969
"should be ubunturocks.com. Add this directive to the new virtual host file "
1970
"you created earlier (<filename>/etc/apache2/sites-"
1971
"available/mynewsite</filename>)."
1972
msgstr ""
1973
1974
#: serverguide/C/web-servers.xml:223(para)
1975
msgid ""
1976
"You may also want your site to respond to www.ubunturocks.com, since many "
1977
"users will assume the www prefix is appropriate. Use the "
1978
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
1979
"wildcards in the ServerAlias directive."
1980
msgstr ""
1981
1982
#: serverguide/C/web-servers.xml:230(para)
1983
msgid ""
1984
"For example, the following configuration will cause your site to respond to "
1985
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
1986
msgstr ""
1987
1988
#: serverguide/C/web-servers.xml:236(programlisting)
1989
#, no-wrap
1990
msgid ""
1991
"\n"
1992
"ServerAlias *.ubunturocks.com\n"
1993
msgstr ""
1994
1995
#: serverguide/C/web-servers.xml:242(para)
1996
msgid ""
1997
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
1998
"should look for the files that make up the site. The default value is "
1999
"/var/www. No site is configured there, but if you uncomment the "
2000
"<emphasis>RedirectMatch</emphasis> directive in "
2001
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2002
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2003
"this value in your site's virtual host file, and remember to create that "
2004
"directory if necessary!"
2005
msgstr ""
2006
2007
#: serverguide/C/web-servers.xml:254(para)
2008
msgid ""
2009
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2010
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2011
"enabled point to \"available\" sites."
2012
msgstr ""
2013
2014
#: serverguide/C/web-servers.xml:260(para)
2015
msgid ""
2016
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2017
"<application>a2ensite</application> utility and restart Apache2:"
2018
msgstr ""
2019
2020
#: serverguide/C/web-servers.xml:266(command)
2021
msgid "sudo a2ensite mynewsite"
2022
msgstr ""
2023
2024
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2025
msgid "sudo /etc/init.d/apache2 restart"
2026
msgstr ""
2027
2028
#: serverguide/C/web-servers.xml:271(para)
2029
msgid ""
2030
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2031
"name for the VirtualHost. One method is to name the file after the "
2032
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2033
msgstr ""
2034
2035
#: serverguide/C/web-servers.xml:278(para)
2036
msgid ""
2037
"Similarly, use the <application>a2dissite</application> utility to disable "
2038
"sites. This is can be useful when troubleshooting configuration problems "
2039
"with multiple VirtualHosts:"
2040
msgstr ""
2041
2042
#: serverguide/C/web-servers.xml:284(command)
2043
msgid "sudo a2dissite mynewsite"
2044
msgstr ""
2045
2046
#: serverguide/C/web-servers.xml:290(title)
2047
msgid "Default Settings"
2048
msgstr ""
2049
2050
#: serverguide/C/web-servers.xml:292(para)
2051
msgid ""
2052
"This section explains configuration of the Apache2 server default settings. "
2053
"For example, if you add a virtual host, the settings you configure for the "
2054
"virtual host take precedence for that virtual host. For a directive not "
2055
"defined within the virtual host settings, the default value is used."
2056
msgstr ""
2057
2058
#: serverguide/C/web-servers.xml:304(para)
2059
msgid ""
2060
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2061
"server when a user requests an index of a directory by specifying a forward "
2062
"slash (/) at the end of the directory name."
2063
msgstr ""
2064
2065
#: serverguide/C/web-servers.xml:311(para)
2066
msgid ""
2067
"For example, when a user requests the page "
2068
"http://www.example.com/this_directory/, he or she will get either the "
2069
"DirectoryIndex page if it exists, a server-generated directory list if it "
2070
"does not and the Indexes option is specified, or a Permission Denied page if "
2071
"neither is true. The server will try to find one of the files listed in the "
2072
"DirectoryIndex directive and will return the first one it finds. If it does "
2073
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2074
"set for that directory, the server will generate and return a list, in HTML "
2075
"format, of the subdirectories and files in the directory. The default value, "
2076
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2077
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2078
"Apache2 finds a file in a requested directory matching any of these names, "
2079
"the first will be displayed."
2080
msgstr ""
2081
2082
#: serverguide/C/web-servers.xml:332(para)
2083
msgid ""
2084
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2085
"file for Apache2 to use for specific error events. For example, if a user "
2086
"requests a resource that does not exist, a 404 error will occur, and per "
2087
"Apache2's default configuration, the file "
2088
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2089
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2090
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2091
"redirects requests to the /error directory to "
2092
"<filename>/usr/share/apache2/error/</filename>."
2093
msgstr ""
2094
2095
#: serverguide/C/web-servers.xml:344(para)
2096
msgid ""
2097
"To see a list of the default ErrorDocument directives, use this command:"
2098
msgstr ""
2099
2100
#: serverguide/C/web-servers.xml:350(command)
2101
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2102
msgstr ""
2103
2104
#: serverguide/C/web-servers.xml:355(para)
2105
msgid ""
2106
"By default, the server writes the transfer log to the file "
2107
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2108
"per-site basis in your virtual host configuration files with the "
2109
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2110
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2111
"specify the file to which errors are logged, via the "
2112
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2113
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2114
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2115
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2116
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2117
"/etc/apache2/apache2.conf</filename> for the default value)."
2118
msgstr ""
2119
2120
#: serverguide/C/web-servers.xml:370(para)
2121
msgid ""
2122
"Some options are specified on a per-directory basis rather than per-server. "
2123
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2124
"is enclosed in XML-like tags, like so:"
2125
msgstr ""
2126
2127
#: serverguide/C/web-servers.xml:376(programlisting)
2128
#, no-wrap
2129
msgid ""
2130
"\n"
2131
"<Directory /var/www/mynewsite>\n"
2132
"...\n"
2133
"</Directory>\n"
2134
msgstr ""
2135
2136
#: serverguide/C/web-servers.xml:382(para)
2137
msgid ""
2138
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2139
"one or more of the following values (among others), separated by spaces:"
2140
msgstr ""
2141
2142
#: serverguide/C/web-servers.xml:394(para)
2143
msgid ""
2144
"Most files should not be executed as CGI scripts. This would be very "
2145
"dangerous. CGI scripts should kept in a directory separate from and outside "
2146
"your DocumentRoot, and only this directory should have the ExecCGI option "
2147
"set. This is the default, and the default location for CGI scripts is "
2148
"<filename>/usr/lib/cgi-bin</filename>."
2149
msgstr ""
2150
2151
#: serverguide/C/web-servers.xml:389(para)
2152
msgid ""
2153
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2154
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2155
msgstr ""
2156
2157
#: serverguide/C/web-servers.xml:405(para)
2158
msgid ""
2159
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2160
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2161
"other files. This is not a common option. See <ulink "
2162
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2163
"HOWTO</ulink> for more information."
2164
msgstr ""
2165
2166
#: serverguide/C/web-servers.xml:414(para)
2167
msgid ""
2168
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2169
"includes, but disable the <emphasis>#exec</emphasis> and "
2170
"<emphasis>#include</emphasis> commands in CGI scripts."
2171
msgstr ""
2172
2173
#: serverguide/C/web-servers.xml:426(para)
2174
msgid ""
2175
"For security reasons, this should usually not be set, and certainly should "
2176
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2177
"per-directory basis only if you are certain you want users to see the entire "
2178
"contents of the directory."
2179
msgstr ""
2180
2181
#: serverguide/C/web-servers.xml:421(para)
2182
msgid ""
2183
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2184
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2185
"index.html) exists in the requested directory. <placeholder-1/>"
2186
msgstr ""
2187
2188
#: serverguide/C/web-servers.xml:436(para)
2189
msgid ""
2190
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2191
"multiviews; this option is disabled by default for security reasons. See the "
2192
"<ulink "
2193
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2194
"Apache2 documentation on this option</ulink>."
2195
msgstr ""
2196
2197
#: serverguide/C/web-servers.xml:444(para)
2198
msgid ""
2199
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2200
"symbolic links if the target file or directory has the same owner as the "
2201
"link."
2202
msgstr ""
2203
2204
#: serverguide/C/web-servers.xml:456(title)
2205
msgid "httpd Settings"
2206
msgstr ""
2207
2208
#: serverguide/C/web-servers.xml:458(para)
2209
msgid ""
2210
"This section explains some basic <application>httpd</application> daemon "
2211
"configuration settings."
2212
msgstr ""
2213
2214
#: serverguide/C/web-servers.xml:462(para)
2215
msgid ""
2216
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2217
"the path to the lockfile used when the server is compiled with either "
2218
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2219
"stored on the local disk. It should be left to the default value unless the "
2220
"logs directory is located on an NFS share. If this is the case, the default "
2221
"value should be changed to a location on the local disk and to a directory "
2222
"that is readable only by root."
2223
msgstr ""
2224
2225
#: serverguide/C/web-servers.xml:471(para)
2226
msgid ""
2227
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2228
"file in which the server records its process ID (pid). This file should only "
2229
"be readable by root. In most cases, it should be left to the default value."
2230
msgstr ""
2231
2232
#: serverguide/C/web-servers.xml:477(para)
2233
msgid ""
2234
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2235
"used by the server to answer requests. This setting determines the server's "
2236
"access. Any files inaccessible to this user will also be inaccessible to "
2237
"your website's visitors. The default value for User is www-data."
2238
msgstr ""
2239
2240
#: serverguide/C/web-servers.xml:484(para)
2241
msgid ""
2242
"Unless you know exactly what you are doing, do not set the User directive to "
2243
"root. Using root as the User will create large security holes for your Web "
2244
"server."
2245
msgstr ""
2246
2247
#: serverguide/C/web-servers.xml:490(para)
2248
msgid ""
2249
"The Group directive is similar to the User directive. Group sets the group "
2250
"under which the server will answer requests. The default group is also www-"
2251
"data."
2252
msgstr ""
2253
2254
#: serverguide/C/web-servers.xml:496(title)
2255
msgid "Apache2 Modules"
2256
msgstr ""
2257
2258
#: serverguide/C/web-servers.xml:498(para)
2259
msgid ""
2260
"Apache2 is a modular server. This implies that only the most basic "
2261
"functionality is included in the core server. Extended features are "
2262
"available through modules which can be loaded into Apache2. By default, a "
2263
"base set of modules is included in the server at compile-time. If the server "
2264
"is compiled to use dynamically loaded modules, then modules can be compiled "
2265
"separately, and added at any time using the LoadModule directive. Otherwise, "
2266
"Apache2 must be recompiled to add or remove modules."
2267
msgstr ""
2268
2269
#: serverguide/C/web-servers.xml:510(para)
2270
msgid ""
2271
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2272
"Configuration directives may be conditionally included on the presence of a "
2273
"particular module by enclosing them in an "
2274
"<emphasis><IfModule></emphasis> block."
2275
msgstr ""
2276
2277
#: serverguide/C/web-servers.xml:517(para)
2278
msgid ""
2279
"You can install additional Apache2 modules and use them with your Web "
2280
"server. For example, run the following command from a terminal prompt to "
2281
"install the <emphasis>MySQL Authentication</emphasis> module:"
2282
msgstr ""
2283
2284
#: serverguide/C/web-servers.xml:524(command)
2285
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2286
msgstr ""
2287
2288
#: serverguide/C/web-servers.xml:527(para)
2289
msgid ""
2290
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2291
"additional modules."
2292
msgstr ""
2293
2294
#: serverguide/C/web-servers.xml:531(para)
2295
msgid ""
2296
"Use the <application>a2enmod</application> utility to enable a module:"
2297
msgstr ""
2298
2299
#: serverguide/C/web-servers.xml:537(command)
2300
msgid "sudo a2enmod auth_mysql"
2301
msgstr ""
2302
2303
#: serverguide/C/web-servers.xml:541(para)
2304
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2305
msgstr ""
2306
2307
#: serverguide/C/web-servers.xml:546(command)
2308
msgid "sudo a2dismod auth_mysql"
2309
msgstr ""
2310
2311
#: serverguide/C/web-servers.xml:553(title)
2312
msgid "HTTPS Configuration"
2313
msgstr ""
2314
2315
#: serverguide/C/web-servers.xml:555(para)
2316
msgid ""
2317
"The <application>mod_ssl</application> module adds an important feature to "
2318
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2319
"browser is communicating using SSL, the https:// prefix is used at the "
2320
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2321
"bar."
2322
msgstr ""
2323
2324
#: serverguide/C/web-servers.xml:564(para)
2325
msgid ""
2326
"The <application>mod_ssl</application> module is available in "
2327
"<application>apache2-common</application> package. Execute the following "
2328
"command from a terminal prompt to enable the "
2329
"<application>mod_ssl</application> module:"
2330
msgstr ""
2331
2332
#: serverguide/C/web-servers.xml:571(command)
2333
msgid "sudo a2enmod ssl"
2334
msgstr ""
2335
2336
#: serverguide/C/web-servers.xml:574(para)
2337
msgid ""
2338
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2339
"available/default-ssl</filename>. In order for "
2340
"<application>Apache2</application> to provide HTTPS, a "
2341
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2342
"needed. The default HTTPS configuration will use a certificate and key "
2343
"generated by the <application>ssl-cert</application> package. They are good "
2344
"for testing, but the auto-generated certificate and key should be replaced "
2345
"by a certificate specific to the site or server. For information on "
2346
"generating a key and obtaining a certificate see <xref "
2347
"linkend=\"certificates-and-security\"/>"
2348
msgstr ""
2349
2350
#: serverguide/C/web-servers.xml:584(para)
2351
msgid ""
2352
"To configure <application>Apache2</application> for HTTPS, enter the "
2353
"following:"
2354
msgstr ""
2355
2356
#: serverguide/C/web-servers.xml:589(command)
2357
msgid "sudo a2ensite default-ssl"
2358
msgstr ""
2359
2360
#: serverguide/C/web-servers.xml:593(para)
2361
msgid ""
2362
"The directories <filename>/etc/ssl/certs</filename> and "
2363
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2364
"install the certificate and key in another directory make sure to change "
2365
"<emphasis>SSLCertificateFile</emphasis> and "
2366
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2367
msgstr ""
2368
2369
#: serverguide/C/web-servers.xml:600(para)
2370
msgid ""
2371
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2372
"settings:"
2373
msgstr ""
2374
2375
#: serverguide/C/web-servers.xml:611(para)
2376
msgid ""
2377
"Depending on how you obtained your certificate you may need to enter a "
2378
"passphrase when <application>Apache2</application> starts."
2379
msgstr ""
2380
2381
#: serverguide/C/web-servers.xml:617(para)
2382
msgid ""
2383
"You can access the secure server pages by typing https://your_hostname/url/ "
2384
"in your browser address bar."
2385
msgstr ""
2386
2387
#: serverguide/C/web-servers.xml:628(para)
2388
msgid ""
2389
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2390
"Documentation</ulink> contains in depth information on Apache2 configuration "
2391
"directives. Also, see the <application>apache2-doc</application> package for "
2392
"the official Apache2 docs."
2393
msgstr ""
2394
2395
#: serverguide/C/web-servers.xml:635(para)
2396
msgid ""
2397
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2398
"Documentation</ulink> site for more SSL related information."
2399
msgstr ""
2400
2401
#: serverguide/C/web-servers.xml:641(para)
2402
msgid ""
2403
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2404
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2405
"configurations."
2406
msgstr ""
2407
2408
#: serverguide/C/web-servers.xml:647(para)
2409
msgid ""
2410
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2411
"server</emphasis> IRC channel on <ulink "
2412
"url=\"http://freenode.net/\">freenode.net</ulink>."
2413
msgstr ""
2414
2415
#: serverguide/C/web-servers.xml:653(para)
2416
msgid ""
2417
"Usually integrated with PHP and MySQL the <ulink "
2418
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2419
"Ubuntu Wiki </ulink> page is a good resource."
2420
msgstr ""
2421
2422
#: serverguide/C/web-servers.xml:664(title)
2423
msgid "PHP5 - Scripting Language"
2424
msgstr ""
2425
2426
#: serverguide/C/web-servers.xml:665(para)
2427
msgid ""
2428
"PHP is a general-purpose scripting language suited for Web development. The "
2429
"PHP script can be embedded into HTML. This section explains how to install "
2430
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2431
msgstr ""
2432
2433
#: serverguide/C/web-servers.xml:669(para)
2434
msgid ""
2435
"This section assumes you have installed and configured Apache2 Web Server "
2436
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2437
"sections in this document to install and configure Apache2 and MySQL "
2438
"respectively."
2439
msgstr ""
2440
2441
#: serverguide/C/web-servers.xml:676(para)
2442
msgid "The PHP5 is available in Ubuntu Linux."
2443
msgstr ""
2444
2445
#: serverguide/C/web-servers.xml:678(para)
2446
msgid ""
2447
"To install PHP5 you can enter the following command in the terminal prompt: "
2448
"<screen>\n"
2449
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2450
"</screen>"
2451
msgstr ""
2452
2453
#: serverguide/C/web-servers.xml:687(para)
2454
msgid ""
2455
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2456
"line you should install <application>php5-cli</application> package. To "
2457
"install <application>php5-cli</application> you can enter the following "
2458
"command in the terminal prompt: <screen>\n"
2459
"<command>sudo apt-get install php5-cli</command>\n"
2460
"</screen>"
2461
msgstr ""
2462
2463
#: serverguide/C/web-servers.xml:696(para)
2464
msgid ""
2465
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2466
"accomplish this, you should install <application>php5-cgi</application> "
2467
"package. You can run the following command in a terminal prompt to install "
2468
"<application>php5-cgi</application> package: <screen>\n"
2469
"<command>sudo apt-get install php5-cgi</command>\n"
2470
"</screen>"
2471
msgstr ""
2472
2473
#: serverguide/C/web-servers.xml:706(para)
2474
msgid ""
2475
"To use <application>MySQL</application> with PHP5 you should install "
2476
"<application>php5-mysql</application> package. To install <application>php5-"
2477
"mysql</application> you can enter the following command in the terminal "
2478
"prompt: <screen>\n"
2479
"<command>sudo apt-get install php5-mysql</command>\n"
2480
"</screen>"
2481
msgstr ""
2482
2483
#: serverguide/C/web-servers.xml:714(para)
2484
msgid ""
2485
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2486
"install <application>php5-pgsql</application> package. To install "
2487
"<application>php5-pgsql</application> you can enter the following command in "
2488
"the terminal prompt: <screen>\n"
2489
"<command>sudo apt-get install php5-pgsql</command>\n"
2490
"</screen>"
2491
msgstr ""
2492
2493
#: serverguide/C/web-servers.xml:727(para)
2494
msgid ""
2495
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2496
"you have installed <application>php5-cli</application> package, you can run "
2497
"PHP5 scripts from your command prompt."
2498
msgstr ""
2499
2500
#: serverguide/C/web-servers.xml:734(para)
2501
msgid ""
2502
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2503
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2504
"when you install the module. Please verify if the files "
2505
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2506
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2507
"not exists, you can enable the module using <command>a2enmod</command> "
2508
"command."
2509
msgstr ""
2510
2511
#: serverguide/C/web-servers.xml:745(para)
2512
msgid ""
2513
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2514
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2515
"following command at a terminal prompt to restart your web server: "
2516
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2517
msgstr ""
2518
2519
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2520
msgid "Testing"
2521
msgstr ""
2522
2523
#: serverguide/C/web-servers.xml:754(para)
2524
msgid ""
2525
"To verify your installation, you can run following PHP5 phpinfo script:"
2526
msgstr ""
2527
2528
#: serverguide/C/web-servers.xml:757(programlisting)
2529
#, no-wrap
2530
msgid ""
2531
"\n"
2532
"<?php\n"
2533
" phpinfo();\n"
2534
"?>\n"
2535
msgstr ""
2536
2537
#: serverguide/C/web-servers.xml:762(para)
2538
msgid ""
2539
"You can save the content in a file <filename>phpinfo.php</filename> and "
2540
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2541
"server. When point your browser to "
2542
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2543
"various PHP5 configuration parameters."
2544
msgstr ""
2545
2546
#: serverguide/C/web-servers.xml:776(para)
2547
msgid ""
2548
"For more in depth information see <ulink "
2549
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2550
msgstr ""
2551
2552
#: serverguide/C/web-servers.xml:781(para)
2553
msgid ""
2554
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2555
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2556
"5</ulink> and the <ulink "
2557
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2558
msgstr ""
2559
2560
#: serverguide/C/web-servers.xml:788(para)
2561
msgid ""
2562
"Also, see the <ulink "
2563
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2564
"Ubuntu Wiki</ulink> page for more information."
2565
msgstr ""
2566
2567
#: serverguide/C/web-servers.xml:799(title)
2568
msgid "Squid - Proxy Server"
2569
msgstr ""
2570
2571
#: serverguide/C/web-servers.xml:800(para)
2572
msgid ""
2573
"Squid is a full-featured web proxy cache server application which provides "
2574
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2575
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2576
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2577
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2578
"caching. Squid also supports a wide variety of caching protocols, such as "
2579
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2580
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2581
"Protocol. (WCCP)"
2582
msgstr ""
2583
2584
#: serverguide/C/web-servers.xml:808(para)
2585
msgid ""
2586
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2587
"and caching server needs, and scales from the branch office to enterprise "
2588
"level networks while providing extensive, granular access control mechanisms "
2589
"and monitoring of critical parameters via the Simple Network Management "
2590
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2591
"Squid proxy, or caching servers, ensure your system is configured with a "
2592
"large amount of physical memory, as Squid maintains an in-memory cache for "
2593
"increased performance."
2594
msgstr ""
2595
2596
#: serverguide/C/web-servers.xml:817(para)
2597
msgid ""
2598
"At a terminal prompt, enter the following command to install the Squid "
2599
"server:"
2600
msgstr ""
2601
2602
#: serverguide/C/web-servers.xml:822(command)
2603
msgid "sudo apt-get install squid"
2604
msgstr ""
2605
2606
#: serverguide/C/web-servers.xml:828(para)
2607
msgid ""
2608
"Squid is configured by editing the directives contained within the "
2609
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2610
"examples illustrate some of the directives which may be modified to affect "
2611
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2612
"see the References section."
2613
msgstr ""
2614
2615
#: serverguide/C/web-servers.xml:834(para)
2616
msgid ""
2617
"Prior to editing the configuration file, you should make a copy of the "
2618
"original file and protect it from writing so you will have the original "
2619
"settings as a reference, and to re-use as necessary."
2620
msgstr ""
2621
2622
#: serverguide/C/web-servers.xml:837(para)
2623
msgid ""
2624
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2625
"writing with the following commands entered at a terminal prompt:"
2626
msgstr ""
2627
2628
#: serverguide/C/web-servers.xml:842(command)
2629
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2630
msgstr ""
2631
2632
#: serverguide/C/web-servers.xml:843(command)
2633
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2634
msgstr ""
2635
2636
#: serverguide/C/web-servers.xml:849(para)
2637
msgid ""
2638
"To set your Squid server to listen on TCP port 8888 instead of the default "
2639
"TCP port 3128, change the http_port directive as such:"
2640
msgstr ""
2641
2642
#: serverguide/C/web-servers.xml:853(programlisting)
2643
#, no-wrap
2644
msgid ""
2645
"\n"
2646
"http_port 8888\n"
2647
msgstr ""
2648
2649
#: serverguide/C/web-servers.xml:858(para)
2650
msgid ""
2651
"Change the visible_hostname directive in order to give the Squid server a "
2652
"specific hostname. This hostname does not necessarily need to be the "
2653
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2654
msgstr ""
2655
2656
#: serverguide/C/web-servers.xml:862(programlisting)
2657
#, no-wrap
2658
msgid ""
2659
"\n"
2660
"visible_hostname weezie\n"
2661
msgstr ""
2662
2663
#: serverguide/C/web-servers.xml:867(para)
2664
msgid ""
2665
"Using Squid's access control, you may configure use of Internet services "
2666
"proxied by Squid to be available only users with certain Internet Protocol "
2667
"(IP) addresses. For example, we will illustrate access by users of the "
2668
"192.168.42.0/24 subnetwork only:"
2669
msgstr ""
2670
2671
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2672
msgid ""
2673
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2674
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2675
msgstr ""
2676
2677
#: serverguide/C/web-servers.xml:875(programlisting)
2678
#, no-wrap
2679
msgid ""
2680
"\n"
2681
"acl fortytwo_network src 192.168.42.0/24\n"
2682
msgstr ""
2683
2684
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2685
msgid ""
2686
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2687
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2688
msgstr ""
2689
2690
#: serverguide/C/web-servers.xml:882(programlisting)
2691
#, no-wrap
2692
msgid ""
2693
"\n"
2694
"http_access allow fortytwo_network\n"
2695
msgstr ""
2696
2697
#: serverguide/C/web-servers.xml:887(para)
2698
msgid ""
2699
"Using the excellent access control features of Squid, you may configure use "
2700
"of Internet services proxied by Squid to be available only during normal "
2701
"business hours. For example, we'll illustrate access by employees of a "
2702
"business which is operating between 9:00AM and 5:00PM, Monday through "
2703
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2704
msgstr ""
2705
2706
#: serverguide/C/web-servers.xml:895(programlisting)
2707
#, no-wrap
2708
msgid ""
2709
"\n"
2710
"acl biz_network src 10.1.42.0/24\n"
2711
"acl biz_hours time M T W T F 9:00-17:00\n"
2712
msgstr ""
2713
2714
#: serverguide/C/web-servers.xml:903(programlisting)
2715
#, no-wrap
2716
msgid ""
2717
"\n"
2718
"http_access allow biz_network biz_hours\n"
2719
msgstr ""
2720
2721
#: serverguide/C/web-servers.xml:910(para)
2722
msgid ""
2723
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2724
"save the file and restart the <application>squid</application> server "
2725
"application to effect the changes using the following command entered at a "
2726
"terminal prompt:"
2727
msgstr ""
2728
2729
#: serverguide/C/web-servers.xml:917(command)
2730
msgid "sudo /etc/init.d/squid restart"
2731
msgstr ""
2732
2733
#: serverguide/C/web-servers.xml:924(ulink)
2734
msgid "Squid Website"
2735
msgstr ""
2736
2737
#: serverguide/C/web-servers.xml:926(para)
2738
msgid ""
2739
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2740
"Squid</ulink> page."
2741
msgstr ""
2742
2743
#: serverguide/C/web-servers.xml:933(title)
2744
msgid "Ruby on Rails"
2745
msgstr ""
2746
2747
#: serverguide/C/web-servers.xml:934(para)
2748
msgid ""
2749
"Ruby on Rails is an open source web framework for developing database backed "
2750
"web applications. It is optimized for sustainable productivity of the "
2751
"programmer since it lets the programmer to write code by favouring "
2752
"convention over configuration."
2753
msgstr ""
2754
2755
#: serverguide/C/web-servers.xml:941(para)
2756
msgid ""
2757
"Before installing <application>Rails</application> you should install "
2758
"<application>Apache</application> and <application>MySQL</application>. To "
2759
"install the <application>Apache</application> package, please refer to <xref "
2760
"linkend=\"httpd\"/>. For instructions on installing "
2761
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
2762
msgstr ""
2763
2764
#: serverguide/C/web-servers.xml:949(para)
2765
msgid ""
2766
"Once you have <application>Apache</application> and "
2767
"<application>MySQL</application> packages installed, you are ready to "
2768
"install <application>Ruby on Rails</application> package."
2769
msgstr ""
2770
2771
#: serverguide/C/web-servers.xml:956(para)
2772
msgid ""
2773
"To install the <application>Ruby</application> base packages and "
2774
"<application>Ruby on Rails</application>, you can enter the following "
2775
"command in the terminal prompt:"
2776
msgstr ""
2777
2778
#: serverguide/C/web-servers.xml:962(command)
2779
msgid "sudo apt-get install rails"
2780
msgstr ""
2781
2782
#: serverguide/C/web-servers.xml:968(para)
2783
msgid ""
2784
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
2785
"configuration file to setup your domains."
2786
msgstr ""
2787
2788
#: serverguide/C/web-servers.xml:972(para)
2789
msgid ""
2790
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
2791
msgstr ""
2792
2793
#: serverguide/C/web-servers.xml:976(programlisting)
2794
#, no-wrap
2795
msgid ""
2796
"\n"
2797
"DocumentRoot /path/to/rails/application/public\n"
2798
msgstr ""
2799
2800
#: serverguide/C/web-servers.xml:979(para)
2801
msgid ""
2802
"Next, change the <Directory \"/path/to/rails/application/public\"> "
2803
"directive:"
2804
msgstr ""
2805
2806
#: serverguide/C/web-servers.xml:983(programlisting)
2807
#, no-wrap
2808
msgid ""
2809
"\n"
2810
"<Directory \"/path/to/rails/application/public\">\n"
2811
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
2812
" AllowOverride All\n"
2813
" Order allow,deny\n"
2814
" allow from all\n"
2815
" AddHandler cgi-script .cgi\n"
2816
"</Directory>\n"
2817
msgstr ""
2818
2819
#: serverguide/C/web-servers.xml:993(para)
2820
msgid ""
2821
"You should also enable the <application>mod_rewrite</application> module for "
2822
"Apache. To enable <application>mod_rewrite</application> module, please "
2823
"enter the following command in a terminal prompt:"
2824
msgstr ""
2825
2826
#: serverguide/C/web-servers.xml:999(command)
2827
msgid "sudo a2enmod rewrite"
2828
msgstr ""
2829
2830
#: serverguide/C/web-servers.xml:1002(para)
2831
msgid ""
2832
"Finally you will need to change the ownership of the "
2833
"<filename>/path/to/rails/application/public</filename> and "
2834
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
2835
"used to run the <application>Apache</application> process:"
2836
msgstr ""
2837
2838
#: serverguide/C/web-servers.xml:1008(command)
2839
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
2840
msgstr ""
2841
2842
#: serverguide/C/web-servers.xml:1009(command)
2843
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
2844
msgstr ""
2845
2846
#: serverguide/C/web-servers.xml:1012(para)
2847
msgid ""
2848
"That's it! Now you have your Server ready for your <application>Ruby on "
2849
"Rails</application> applications."
2850
msgstr ""
2851
2852
#: serverguide/C/web-servers.xml:1021(para)
2853
msgid ""
2854
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
2855
"for more information."
2856
msgstr ""
2857
2858
#: serverguide/C/web-servers.xml:1026(para)
2859
msgid ""
2860
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
2861
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
2862
"resource."
2863
msgstr ""
2864
2865
#: serverguide/C/web-servers.xml:1032(para)
2866
msgid ""
2867
"Another place for more information is the <ulink "
2868
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
2869
"Wiki</ulink> page."
2870
msgstr ""
2871
2872
#: serverguide/C/web-servers.xml:1043(title)
2873
msgid "Apache Tomcat"
2874
msgstr ""
2875
2876
#: serverguide/C/web-servers.xml:1044(para)
2877
msgid ""
2878
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
2879
"JSP (Java Server Pages) web applications."
2880
msgstr ""
2881
2882
#: serverguide/C/web-servers.xml:1046(para)
2883
msgid ""
2884
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
2885
"different ways of running Tomcat. You can install them as a classic unique "
2886
"system-wide instance, that will be started at boot time and will run as the "
2887
"tomcat6 unpriviledged user. But you can also deploy private instances that "
2888
"will run with your own user rights, and that you should start and stop by "
2889
"yourself. This second way is particularly useful in a development server "
2890
"context where multiple users need to test on their own private Tomcat "
2891
"instances."
2892
msgstr ""
2893
2894
#: serverguide/C/web-servers.xml:1056(title)
2895
msgid "System-wide installation"
2896
msgstr ""
2897
2898
#: serverguide/C/web-servers.xml:1057(para)
2899
msgid ""
2900
"To install the <application>Tomcat</application> server, you can enter the "
2901
"following command in the terminal prompt:"
2902
msgstr ""
2903
2904
#: serverguide/C/web-servers.xml:1060(command)
2905
msgid "sudo apt-get install tomcat6"
2906
msgstr ""
2907
2908
#: serverguide/C/web-servers.xml:1062(para)
2909
msgid ""
2910
"This will install a Tomcat server with just a default ROOT webapp that "
2911
"displays a minimal \"It works\" page by default."
2912
msgstr ""
2913
2914
#: serverguide/C/web-servers.xml:1068(para)
2915
msgid ""
2916
"Tomcat configuration files can be found in "
2917
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
2918
"will be described here, please see <ulink "
2919
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
2920
"documentation</ulink> for more."
2921
msgstr ""
2922
2923
#: serverguide/C/web-servers.xml:1074(title)
2924
msgid "Changing default ports"
2925
msgstr ""
2926
2927
#: serverguide/C/web-servers.xml:1075(para)
2928
msgid ""
2929
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
2930
"connector on port 8009. You might want to change those default ports to "
2931
"avoid conflict with another server on the system. This is done by changing "
2932
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
2933
msgstr ""
2934
2935
#: serverguide/C/web-servers.xml:1080(programlisting)
2936
#, no-wrap
2937
msgid ""
2938
"\n"
2939
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
2940
" connectionTimeout=\"20000\" \n"
2941
" redirectPort=\"8443\" />\n"
2942
"...\n"
2943
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
2944
"/>\n"
2945
msgstr ""
2946
2947
#: serverguide/C/web-servers.xml:1089(title)
2948
msgid "Changing JVM used"
2949
msgstr ""
2950
2951
#: serverguide/C/web-servers.xml:1090(para)
2952
msgid ""
2953
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
2954
"then try some other JVMs. If you have various JVMs installed, you can set "
2955
"which should be used by setting JAVA_HOME in "
2956
"<filename>/etc/default/tomcat6</filename>:"
2957
msgstr ""
2958
2959
#: serverguide/C/web-servers.xml:1094(programlisting)
2960
#, no-wrap
2961
msgid ""
2962
"\n"
2963
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
2964
msgstr ""
2965
2966
#: serverguide/C/web-servers.xml:1099(title)
2967
msgid "Declaring users and roles"
2968
msgstr ""
2969
2970
#: serverguide/C/web-servers.xml:1100(para)
2971
msgid ""
2972
"Usernames, passwords and roles (groups) can be defined centrally in a "
2973
"Servlet container. In Tomcat 6.0 this is done in the "
2974
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
2975
msgstr ""
2976
2977
#: serverguide/C/web-servers.xml:1103(programlisting)
2978
#, no-wrap
2979
msgid ""
2980
"\n"
2981
"<role rolename=\"admin\"/>\n"
2982
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
2983
msgstr ""
2984
2985
#: serverguide/C/web-servers.xml:1111(title)
2986
msgid "Using Tomcat standard webapps"
2987
msgstr ""
2988
2989
#: serverguide/C/web-servers.xml:1112(para)
2990
msgid ""
2991
"Tomcat is shipped with webapps that you can install for documentation, "
2992
"administration or demo purposes."
2993
msgstr ""
2994
2995
#: serverguide/C/web-servers.xml:1115(title)
2996
msgid "Tomcat documentation"
2997
msgstr ""
2998
2999
#: serverguide/C/web-servers.xml:1116(para)
3000
msgid ""
3001
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3002
"documentation, packaged as a webapp that you can access by default at "
3003
"http://yourserver:8080/docs. You can install it by entering the following "
3004
"command in the terminal prompt:"
3005
msgstr ""
3006
3007
#: serverguide/C/web-servers.xml:1121(command)
3008
msgid "sudo apt-get install tomcat6-docs"
3009
msgstr ""
3010
3011
#: serverguide/C/web-servers.xml:1125(title)
3012
msgid "Tomcat administration webapps"
3013
msgstr ""
3014
3015
#: serverguide/C/web-servers.xml:1126(para)
3016
msgid ""
3017
"The <application>tomcat6-admin</application> package contains two webapps "
3018
"that can be used to administer the Tomcat server using a web interface. You "
3019
"can install them by entering the following command in the terminal prompt:"
3020
msgstr ""
3021
3022
#: serverguide/C/web-servers.xml:1131(command)
3023
msgid "sudo apt-get install tomcat6-admin"
3024
msgstr ""
3025
3026
#: serverguide/C/web-servers.xml:1133(para)
3027
msgid ""
3028
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3029
"access by default at http://yourserver:8080/manager/html. It is primarily "
3030
"used to get server status and restart webapps."
3031
msgstr ""
3032
3033
#: serverguide/C/web-servers.xml:1136(para)
3034
msgid ""
3035
"Access to the <emphasis>manager</emphasis> application is protected by "
3036
"default: you need to define a user with the role \"manager\" in "
3037
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3038
msgstr ""
3039
3040
#: serverguide/C/web-servers.xml:1140(para)
3041
msgid ""
3042
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3043
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3044
"used to create virtual hosts dynamically."
3045
msgstr ""
3046
3047
#: serverguide/C/web-servers.xml:1144(para)
3048
msgid ""
3049
"Access to the <emphasis>host-manager</emphasis> application is also "
3050
"protected by default: you need to define a user with the role \"admin\" in "
3051
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3052
msgstr ""
3053
3054
#: serverguide/C/web-servers.xml:1149(para)
3055
msgid ""
3056
"For security reasons, the tomcat6 user cannot write to the "
3057
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3058
"these admin webapps (application deployment, virtual host creation) need "
3059
"write access to that directory. If you want to use these features execute "
3060
"the following, to give users in the tomcat6 group the necessary rights:"
3061
msgstr ""
3062
3063
#: serverguide/C/web-servers.xml:1156(command)
3064
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3065
msgstr ""
3066
3067
#: serverguide/C/web-servers.xml:1157(command)
3068
msgid "sudo chmod -R g+w /etc/tomcat6"
3069
msgstr ""
3070
3071
#: serverguide/C/web-servers.xml:1162(title)
3072
msgid "Tomcat examples webapps"
3073
msgstr ""
3074
3075
#: serverguide/C/web-servers.xml:1163(para)
3076
msgid ""
3077
"The <application>tomcat6-examples</application> package contains two webapps "
3078
"that can be used to test or demonstrate Servlets and JSP features, which you "
3079
"can access them by default at http://yourserver:8080/examples. You can "
3080
"install them by entering the following command in the terminal prompt:"
3081
msgstr ""
3082
3083
#: serverguide/C/web-servers.xml:1169(command)
3084
msgid "sudo apt-get install tomcat6-examples"
3085
msgstr ""
3086
3087
#: serverguide/C/web-servers.xml:1175(title)
3088
msgid "Using private instances"
3089
msgstr ""
3090
3091
#: serverguide/C/web-servers.xml:1176(para)
3092
msgid ""
3093
"Tomcat is heavily used in development and testing scenarios where using a "
3094
"single system-wide instance doesn't meet the requirements of multiple users "
3095
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3096
"help deploy your own user-oriented instances, allowing every user on a "
3097
"system to run (without root rights) separate private instances while still "
3098
"using the system-installed libraries."
3099
msgstr ""
3100
3101
#: serverguide/C/web-servers.xml:1183(para)
3102
msgid ""
3103
"It is possible to run the system-wide instance and the private instances in "
3104
"parallel, as long as they do not use the same TCP ports."
3105
msgstr ""
3106
3107
#: serverguide/C/web-servers.xml:1187(title)
3108
msgid "Installing private instance support"
3109
msgstr ""
3110
3111
#: serverguide/C/web-servers.xml:1188(para)
3112
msgid ""
3113
"You can install everything necessary to run private instances by entering "
3114
"the following command in the terminal prompt:"
3115
msgstr ""
3116
3117
#: serverguide/C/web-servers.xml:1191(command)
3118
msgid "sudo apt-get install tomcat6-user"
3119
msgstr ""
3120
3121
#: serverguide/C/web-servers.xml:1195(title)
3122
msgid "Creating a private instance"
3123
msgstr ""
3124
3125
#: serverguide/C/web-servers.xml:1196(para)
3126
msgid ""
3127
"You can create a private instance directory by entering the following "
3128
"command in the terminal prompt:"
3129
msgstr ""
3130
3131
#: serverguide/C/web-servers.xml:1199(command)
3132
msgid "tomcat6-instance-create my-instance"
3133
msgstr ""
3134
3135
#: serverguide/C/web-servers.xml:1201(para)
3136
msgid ""
3137
"This will create a new <filename>my-instance</filename> directory with all "
3138
"the necessary subdirectories and scripts. You can for example install your "
3139
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3140
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3141
"are deployed by default."
3142
msgstr ""
3143
3144
#: serverguide/C/web-servers.xml:1209(title)
3145
msgid "Configuring your private instance"
3146
msgstr ""
3147
3148
#: serverguide/C/web-servers.xml:1210(para)
3149
msgid ""
3150
"You will find the classic Tomcat configuration files for your private "
3151
"instance in the <filename>conf/</filename> subdirectory. You should for "
3152
"example certainly edit the <filename>conf/server.xml</filename> file to "
3153
"change the default ports used by your private Tomcat instance to avoid "
3154
"conflict with other instances that might be running."
3155
msgstr ""
3156
3157
#: serverguide/C/web-servers.xml:1218(title)
3158
msgid "Starting/stopping your private instance"
3159
msgstr ""
3160
3161
#: serverguide/C/web-servers.xml:1219(para)
3162
msgid ""
3163
"You can start your private instance by entering the following command in the "
3164
"terminal prompt (supposing your instance is located in the <filename>my-"
3165
"instance</filename> directory):"
3166
msgstr ""
3167
3168
#: serverguide/C/web-servers.xml:1223(command)
3169
msgid "my-instance/bin/startup.sh"
3170
msgstr ""
3171
3172
#: serverguide/C/web-servers.xml:1225(para)
3173
msgid ""
3174
"You should check the <filename>logs/</filename> subdirectory for any error. "
3175
"If you have a <emphasis>java.net.BindException: Address already in "
3176
"use<null>:8080</emphasis> error, it means that the port you're using "
3177
"is already taken and that you should change it."
3178
msgstr ""
3179
3180
#: serverguide/C/web-servers.xml:1230(para)
3181
msgid ""
3182
"You can stop your instance by entering the following command in the terminal "
3183
"prompt (supposing your instance is located in the <filename>my-"
3184
"instance</filename> directory):"
3185
msgstr ""
3186
3187
#: serverguide/C/web-servers.xml:1234(command)
3188
msgid "my-instance/bin/shutdown.sh"
3189
msgstr ""
3190
3191
#: serverguide/C/web-servers.xml:1243(para)
3192
msgid ""
3193
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3194
"website for more information."
3195
msgstr ""
3196
3197
#: serverguide/C/web-servers.xml:1248(para)
3198
msgid ""
3199
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3200
"Definitive Guide</ulink> is a good resource for building web applications "
3201
"with Tomcat."
3202
msgstr ""
3203
3204
#: serverguide/C/web-servers.xml:1254(para)
3205
msgid ""
3206
"For additional books see the <ulink "
3207
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3208
"page."
3209
msgstr ""
3210
3211
#: serverguide/C/web-servers.xml:1259(para)
3212
msgid ""
3213
"Also, see the<ulink "
3214
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3215
"Tomcat</ulink> page."
3216
msgstr ""
3217
3218
#: serverguide/C/vpn.xml:13(title)
3219
msgid "VPN"
3220
msgstr ""
3221
3222
#: serverguide/C/vpn.xml:15(para)
3223
msgid ""
3224
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3225
"network connection between two or more networks. There are several ways to "
3226
"create a VPN using software as well as dedicated hardware appliances. This "
3227
"chapter will cover installing and configuring "
3228
"<application>OpenVPN</application> to create a VPN between two servers."
3229
msgstr ""
3230
3231
#: serverguide/C/vpn.xml:23(title)
3232
msgid "OpenVPN"
3233
msgstr ""
3234
3235
#: serverguide/C/vpn.xml:25(para)
3236
msgid ""
3237
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3238
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3239
"clients through a bridge interface on the VPN server. This guide will assume "
3240
"that one VPN node, the server in this case, has a bridge interface "
3241
"configured. For more information on setting up a bridge see <xref "
3242
"linkend=\"bridging\"/>."
3243
msgstr ""
3244
3245
#: serverguide/C/vpn.xml:35(para)
3246
msgid "To install <application>openvpn</application> in a terminal enter:"
3247
msgstr ""
3248
3249
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3250
msgid "sudo apt-get install openvpn"
3251
msgstr ""
3252
3253
#: serverguide/C/vpn.xml:45(title)
3254
msgid "Server Certificates"
3255
msgstr ""
3256
3257
#: serverguide/C/vpn.xml:47(para)
3258
msgid ""
3259
"Now that the <application>openvpn</application> package is installed, the "
3260
"certificates for the VPN server need to be created."
3261
msgstr ""
3262
3263
#: serverguide/C/vpn.xml:52(para)
3264
msgid ""
3265
"First, copy the <filename>easy-rsa</filename> directory to "
3266
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3267
"scripts will not be lost when the package is updated. You will also need to "
3268
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3269
"the current user permission to create files. From a terminal enter:"
3270
msgstr ""
3271
3272
#: serverguide/C/vpn.xml:59(command)
3273
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3274
msgstr ""
3275
3276
#: serverguide/C/vpn.xml:60(command)
3277
msgid ""
3278
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3279
"rsa/"
3280
msgstr ""
3281
3282
#: serverguide/C/vpn.xml:61(command)
3283
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3284
msgstr ""
3285
3286
#: serverguide/C/vpn.xml:64(para)
3287
msgid ""
3288
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3289
"following to your environment:"
3290
msgstr ""
3291
3292
#: serverguide/C/vpn.xml:68(programlisting)
3293
#, no-wrap
3294
msgid ""
3295
"\n"
3296
"export KEY_COUNTRY=\"US\"\n"
3297
"export KEY_PROVINCE=\"NC\"\n"
3298
"export KEY_CITY=\"Winston-Salem\"\n"
3299
"export KEY_ORG=\"Example Company\"\n"
3300
"export KEY_EMAIL=\"steve@example.com\"\n"
3301
msgstr ""
3302
3303
#: serverguide/C/vpn.xml:76(para)
3304
msgid "Enter the following to create the server certificates:"
3305
msgstr ""
3306
3307
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3308
msgid "cd /etc/openvpn/easy-rsa/"
3309
msgstr ""
3310
3311
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3312
msgid "source vars"
3313
msgstr ""
3314
3315
#: serverguide/C/vpn.xml:83(command)
3316
msgid "./clean-all"
3317
msgstr ""
3318
3319
#: serverguide/C/vpn.xml:84(command)
3320
msgid "./build-dh"
3321
msgstr ""
3322
3323
#: serverguide/C/vpn.xml:85(command)
3324
msgid "./pkitool --initca"
3325
msgstr ""
3326
3327
#: serverguide/C/vpn.xml:86(command)
3328
msgid "./pkitool --server server"
3329
msgstr ""
3330
3331
#: serverguide/C/vpn.xml:87(command)
3332
msgid "cd keys"
3333
msgstr ""
3334
3335
#: serverguide/C/vpn.xml:88(command)
3336
msgid "openvpn --genkey --secret ta.key"
3337
msgstr ""
3338
3339
#: serverguide/C/vpn.xml:89(command)
3340
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3341
msgstr ""
3342
3343
#: serverguide/C/vpn.xml:94(title)
3344
msgid "Client Certificates"
3345
msgstr ""
3346
3347
#: serverguide/C/vpn.xml:96(para)
3348
msgid ""
3349
"The VPN client will also need a certificate to authenticate itself to the "
3350
"server. To create the certificate, enter the following in a terminal:"
3351
msgstr ""
3352
3353
#: serverguide/C/vpn.xml:104(command)
3354
msgid "./pkitool hostname"
3355
msgstr ""
3356
3357
#: serverguide/C/vpn.xml:108(para)
3358
msgid ""
3359
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3360
"machine connecting to the VPN."
3361
msgstr ""
3362
3363
#: serverguide/C/vpn.xml:113(para)
3364
msgid "Copy the following files to the client:"
3365
msgstr ""
3366
3367
#: serverguide/C/vpn.xml:118(para)
3368
msgid "/etc/openvpn/ca.crt"
3369
msgstr ""
3370
3371
#: serverguide/C/vpn.xml:119(para)
3372
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3373
msgstr ""
3374
3375
#: serverguide/C/vpn.xml:120(para)
3376
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3377
msgstr ""
3378
3379
#: serverguide/C/vpn.xml:121(para)
3380
msgid "/etc/openvpn/ta.key"
3381
msgstr ""
3382
3383
#: serverguide/C/vpn.xml:125(para)
3384
msgid ""
3385
"Remember to adjust the above file names for your client machine's "
3386
"<emphasis>hostname</emphasis>."
3387
msgstr ""
3388
3389
#: serverguide/C/vpn.xml:130(para)
3390
msgid ""
3391
"It is best to use a secure method to copy the certificate and key files. The "
3392
"<application>scp</application> utility is a good choice, but copying the "
3393
"files to removable media then to the client, also works well."
3394
msgstr ""
3395
3396
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3397
msgid "Server Configuration"
3398
msgstr ""
3399
3400
#: serverguide/C/vpn.xml:143(para)
3401
msgid ""
3402
"Now configure the <application>openvpn</application> server by creating "
3403
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3404
"terminal enter:"
3405
msgstr ""
3406
3407
#: serverguide/C/vpn.xml:149(command)
3408
msgid ""
3409
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3410
"/etc/openvpn/"
3411
msgstr ""
3412
3413
#: serverguide/C/vpn.xml:150(command)
3414
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3415
msgstr ""
3416
3417
#: serverguide/C/vpn.xml:153(para)
3418
msgid ""
3419
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3420
"options to:"
3421
msgstr ""
3422
3423
#: serverguide/C/vpn.xml:157(programlisting)
3424
#, no-wrap
3425
msgid ""
3426
"\n"
3427
"local 172.18.100.101\n"
3428
"dev tap0\n"
3429
"up \"/etc/openvpn/up.sh br0\"\n"
3430
"down \"/etc/openvpn/down.sh br0\"\n"
3431
";server 10.8.0.0 255.255.255.0\n"
3432
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3433
"push \"route 172.18.100.1 255.255.255.0\"\n"
3434
"push \"dhcp-option DNS 172.18.100.20\"\n"
3435
"push \"dhcp-option DOMAIN example.com\"\n"
3436
"tls-auth ta.key 0 # This file is secret\n"
3437
"user nobody\n"
3438
"group nogroup\n"
3439
msgstr ""
3440
3441
#: serverguide/C/vpn.xml:174(para)
3442
msgid ""
3443
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3444
msgstr ""
3445
3446
#: serverguide/C/vpn.xml:179(para)
3447
msgid ""
3448
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3449
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3450
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3451
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3452
"to clients."
3453
msgstr ""
3454
3455
#: serverguide/C/vpn.xml:186(para)
3456
msgid ""
3457
"<emphasis>push</emphasis>: are directives to add networking options for "
3458
"clients."
3459
msgstr ""
3460
3461
#: serverguide/C/vpn.xml:191(para)
3462
msgid ""
3463
"<emphasis>user and group</emphasis>: configure which user and group the "
3464
"<application>openvpn</application> daemon executes as."
3465
msgstr ""
3466
3467
#: serverguide/C/vpn.xml:198(para)
3468
msgid ""
3469
"Replace all IP addresses and domain names above with those of your network."
3470
msgstr ""
3471
3472
#: serverguide/C/vpn.xml:203(para)
3473
msgid ""
3474
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3475
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3476
msgstr ""
3477
3478
#: serverguide/C/vpn.xml:207(programlisting)
3479
#, no-wrap
3480
msgid ""
3481
"\n"
3482
"#!/bin/sh\n"
3483
"\n"
3484
"BR=$1\n"
3485
"DEV=$2\n"
3486
"MTU=$3\n"
3487
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3488
"/usr/sbin/brctl addif $BR $DEV\n"
3489
msgstr ""
3490
3491
#: serverguide/C/vpn.xml:217(para)
3492
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3493
msgstr ""
3494
3495
#: serverguide/C/vpn.xml:221(programlisting)
3496
#, no-wrap
3497
msgid ""
3498
"\n"
3499
"#!/bin/sh\n"
3500
"\n"
3501
"BR=$1\n"
3502
"DEV=$2\n"
3503
"\n"
3504
"/usr/sbin/brctl delif $BR $DEV\n"
3505
"/sbin/ifconfig $DEV down\n"
3506
msgstr ""
3507
3508
#: serverguide/C/vpn.xml:231(para)
3509
msgid "Then make them executable:"
3510
msgstr ""
3511
3512
#: serverguide/C/vpn.xml:236(command)
3513
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3514
msgstr ""
3515
3516
#: serverguide/C/vpn.xml:237(command)
3517
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3518
msgstr ""
3519
3520
#: serverguide/C/vpn.xml:240(para)
3521
msgid ""
3522
"After configuring the server, restart <application>openvpn</application> by "
3523
"entering:"
3524
msgstr ""
3525
3526
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3527
msgid "sudo /etc/init.d/openvpn restart"
3528
msgstr ""
3529
3530
#: serverguide/C/vpn.xml:250(title)
3531
msgid "Client Configuration"
3532
msgstr ""
3533
3534
#: serverguide/C/vpn.xml:252(para)
3535
msgid "First, install <application>openvpn</application> on the client:"
3536
msgstr ""
3537
3538
#: serverguide/C/vpn.xml:260(para)
3539
msgid ""
3540
"Then with the server configured and the client certificates copied to the "
3541
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3542
"file by copying the example. In a terminal on the client machine enter:"
3543
msgstr ""
3544
3545
#: serverguide/C/vpn.xml:266(command)
3546
msgid ""
3547
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3548
"/etc/openvpn"
3549
msgstr ""
3550
3551
#: serverguide/C/vpn.xml:269(para)
3552
msgid ""
3553
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3554
"following options:"
3555
msgstr ""
3556
3557
#: serverguide/C/vpn.xml:273(programlisting)
3558
#, no-wrap
3559
msgid ""
3560
"\n"
3561
"dev tap\n"
3562
"remote vpn.example.com 1194\n"
3563
"cert hostname.crt\n"
3564
"key hostname.key\n"
3565
"tls-auth ta.key 1\n"
3566
msgstr ""
3567
3568
#: serverguide/C/vpn.xml:282(para)
3569
msgid ""
3570
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3571
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3572
"key filenames."
3573
msgstr ""
3574
3575
#: serverguide/C/vpn.xml:288(para)
3576
msgid "Finally, restart <application>openvpn</application>:"
3577
msgstr ""
3578
3579
#: serverguide/C/vpn.xml:296(para)
3580
msgid "You should now be able to connect to the remote LAN through the VPN."
3581
msgstr ""
3582
3583
#: serverguide/C/vpn.xml:307(para)
3584
msgid ""
3585
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3586
"additional information."
3587
msgstr ""
3588
3589
#: serverguide/C/vpn.xml:312(para)
3590
msgid ""
3591
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3592
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3593
msgstr ""
3594
3595
#: serverguide/C/vpn.xml:318(para)
3596
msgid ""
3597
"Another source of further information is the <ulink "
3598
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3599
"OpenVPN</ulink> page."
3600
msgstr ""
3601
3602
#: serverguide/C/virtualization.xml:13(title)
3603
msgid "Virtualization"
3604
msgstr ""
3605
3606
#: serverguide/C/virtualization.xml:14(para)
3607
msgid ""
3608
"Virtualization is being adopted in many different environments and "
3609
"situations. If you are a developer, virtualization can provide you with a "
3610
"contained environment where you can safely do almost any sort of development "
3611
"safe from messing up your main working environment. If you are a systems "
3612
"administrator, you can use virtualization to more easily separate your "
3613
"services and move them around based on demand."
3614
msgstr ""
3615
3616
#: serverguide/C/virtualization.xml:20(para)
3617
msgid ""
3618
"The default virtualization technology supported in Ubuntu is "
3619
"<application>KVM</application>, a technology that takes advantage of "
3620
"virtualization extensions built into Intel and AMD hardware. For hardware "
3621
"without virtualization extensions <application>Xen</application> and "
3622
"<application>Qemu</application> are popular solutions."
3623
msgstr ""
3624
3625
#: serverguide/C/virtualization.xml:27(title)
3626
msgid "libvirt"
3627
msgstr ""
3628
3629
#: serverguide/C/virtualization.xml:28(para)
3630
msgid ""
3631
"The <application>libvirt</application> library is used to interface with "
3632
"different virtualization technologies. Before getting started with "
3633
"<application>libvirt</application> it is best to make sure your hardware "
3634
"supports the necessary virtualization extensions for "
3635
"<application>KVM</application>. Enter the following from a terminal prompt:"
3636
msgstr ""
3637
3638
#: serverguide/C/virtualization.xml:35(command)
3639
msgid "kvm-ok"
3640
msgstr ""
3641
3642
#: serverguide/C/virtualization.xml:37(para)
3643
msgid ""
3644
"A message will be printed informing you if your CPU "
3645
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3646
"virtualization."
3647
msgstr ""
3648
3649
#: serverguide/C/virtualization.xml:41(para)
3650
msgid ""
3651
"On most computer whose processor supports virtualization, it is necessary to "
3652
"activate an option in the BIOS to enable it."
3653
msgstr ""
3654
3655
#: serverguide/C/virtualization.xml:47(title)
3656
msgid "Virtual Networking"
3657
msgstr ""
3658
3659
#: serverguide/C/virtualization.xml:49(para)
3660
msgid ""
3661
"There are a few different ways to allow a virtual machine access to the "
3662
"external network. The default virtual network configuration is "
3663
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3664
"traffic is NATed through the host interface to the outside network."
3665
msgstr ""
3666
3667
#: serverguide/C/virtualization.xml:54(para)
3668
msgid ""
3669
"To enable external hosts to directly access services on virtual machines a "
3670
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3671
"interfaces to connect to the outside network through the physical interface, "
3672
"making them appear as normal hosts to the rest of the network. For "
3673
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3674
msgstr ""
3675
3676
#: serverguide/C/virtualization.xml:63(para)
3677
msgid "To install the necessary packages, from a terminal prompt enter:"
3678
msgstr ""
3679
3680
#: serverguide/C/virtualization.xml:67(command)
3681
msgid "sudo apt-get install kvm libvirt-bin"
3682
msgstr ""
3683
3684
#: serverguide/C/virtualization.xml:69(para)
3685
msgid ""
3686
"After installing <application>libvirt-bin</application>, the user used to "
3687
"manage virtual machines will need to be added to the "
3688
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3689
"the advanced networking options."
3690
msgstr ""
3691
3692
#: serverguide/C/virtualization.xml:73(para)
3693
msgid "In a terminal enter:"
3694
msgstr ""
3695
3696
#: serverguide/C/virtualization.xml:77(command)
3697
msgid "sudo adduser $USER libvirtd"
3698
msgstr ""
3699
3700
#: serverguide/C/virtualization.xml:80(para)
3701
msgid ""
3702
"If the user chosen is the current user, you will need to log out and back in "
3703
"for the new group membership to take effect."
3704
msgstr ""
3705
3706
#: serverguide/C/virtualization.xml:84(para)
3707
msgid ""
3708
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3709
"Installing a virtual machine follows the same process as installing the "
3710
"operating system directly on the hardware. You either need a way to automate "
3711
"the installation, or a keyboard and monitor will need to be attached to the "
3712
"physical machine."
3713
msgstr ""
3714
3715
#: serverguide/C/virtualization.xml:89(para)
3716
msgid ""
3717
"In the case of virtual machines a Graphical User Interface (GUI) is "
3718
"analogous to using a physical keyboard and mouse. Instead of installing a "
3719
"GUI the <application>virt-viewer</application> application can be used to "
3720
"connect to a virtual machine's console using <application>VNC</application>. "
3721
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3722
msgstr ""
3723
3724
#: serverguide/C/virtualization.xml:94(para)
3725
msgid ""
3726
"There are several ways to automate the Ubuntu installation process, for "
3727
"example using preseeds, kickstart, etc. Refer to the <ulink "
3728
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3729
"Installation Guide</ulink> for details."
3730
msgstr ""
3731
3732
#: serverguide/C/virtualization.xml:98(para)
3733
msgid ""
3734
"Yet another way to install an Ubuntu virtual machine is to use "
3735
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
3736
"builder</application> allows you to setup advanced partitions, execute "
3737
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
3738
"vmbuilder\"/>"
3739
msgstr ""
3740
3741
#: serverguide/C/virtualization.xml:104(title)
3742
msgid "virt-install"
3743
msgstr ""
3744
3745
#: serverguide/C/virtualization.xml:105(para)
3746
msgid ""
3747
"<application>virt-install</application> is part of the <application>python-"
3748
"virtinst</application> package. To install it, from a terminal prompt enter:"
3749
msgstr ""
3750
3751
#: serverguide/C/virtualization.xml:109(command)
3752
msgid "sudo apt-get install python-virtinst"
3753
msgstr ""
3754
3755
#: serverguide/C/virtualization.xml:111(para)
3756
msgid ""
3757
"There are several options available when using <application>virt-"
3758
"install</application>. For example:"
3759
msgstr ""
3760
3761
#: serverguide/C/virtualization.xml:115(command)
3762
msgid ""
3763
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
3764
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
3765
msgstr ""
3766
3767
#: serverguide/C/virtualization.xml:122(para)
3768
msgid ""
3769
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
3770
"be <emphasis>web_devel</emphasis> in this example."
3771
msgstr ""
3772
3773
#: serverguide/C/virtualization.xml:127(para)
3774
msgid ""
3775
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
3776
"machine will use."
3777
msgstr ""
3778
3779
#: serverguide/C/virtualization.xml:132(para)
3780
msgid ""
3781
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
3782
"disk which can be a file, partition, or logical volume. In this example a "
3783
"file named <filename>web_devel.img</filename>."
3784
msgstr ""
3785
3786
#: serverguide/C/virtualization.xml:138(para)
3787
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
3788
msgstr ""
3789
3790
#: serverguide/C/virtualization.xml:143(para)
3791
msgid ""
3792
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
3793
"file can be either an ISO file or the path to the host's CDROM device."
3794
msgstr ""
3795
3796
#: serverguide/C/virtualization.xml:149(para)
3797
msgid ""
3798
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
3799
"technologies."
3800
msgstr ""
3801
3802
#: serverguide/C/virtualization.xml:154(para)
3803
msgid ""
3804
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
3805
msgstr ""
3806
3807
#: serverguide/C/virtualization.xml:159(para)
3808
msgid ""
3809
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
3810
"virtual machine's console."
3811
msgstr ""
3812
3813
#: serverguide/C/virtualization.xml:164(para)
3814
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
3815
msgstr ""
3816
3817
#: serverguide/C/virtualization.xml:169(para)
3818
msgid ""
3819
"After launching <application>virt-install</application> you can connect to "
3820
"the virtual machine's console either locally using a GUI or with the "
3821
"<application>virt-viewer</application> utility."
3822
msgstr ""
3823
3824
#: serverguide/C/virtualization.xml:175(title)
3825
msgid "virt-clone"
3826
msgstr ""
3827
3828
#: serverguide/C/virtualization.xml:176(para)
3829
msgid ""
3830
"The <application>virt-clone</application> application can be used to copy "
3831
"one virtual machine to another. For example:"
3832
msgstr ""
3833
3834
#: serverguide/C/virtualization.xml:180(command)
3835
msgid ""
3836
"sudo virt-clone -o web_devel -n database_devel -f "
3837
"/path/to/database_devel.img --connect=qemu:///system"
3838
msgstr ""
3839
3840
#: serverguide/C/virtualization.xml:184(para)
3841
msgid "<emphasis>-o:</emphasis> original virtual machine."
3842
msgstr ""
3843
3844
#: serverguide/C/virtualization.xml:189(para)
3845
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
3846
msgstr ""
3847
3848
#: serverguide/C/virtualization.xml:194(para)
3849
msgid ""
3850
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
3851
"be used by the new virtual machine."
3852
msgstr ""
3853
3854
#: serverguide/C/virtualization.xml:199(para)
3855
msgid ""
3856
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
3857
msgstr ""
3858
3859
#: serverguide/C/virtualization.xml:204(para)
3860
msgid ""
3861
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
3862
"help troubleshoot problems with <application>virt-clone</application>."
3863
msgstr ""
3864
3865
#: serverguide/C/virtualization.xml:209(para)
3866
msgid ""
3867
"Replace <emphasis>web_devel</emphasis> and "
3868
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
3869
msgstr ""
3870
3871
#: serverguide/C/virtualization.xml:215(title)
3872
msgid "Virtual Machine Management"
3873
msgstr ""
3874
3875
#: serverguide/C/virtualization.xml:217(title)
3876
msgid "virsh"
3877
msgstr ""
3878
3879
#: serverguide/C/virtualization.xml:218(para)
3880
msgid ""
3881
"There are several utilities available to manage virtual machines and "
3882
"<application>libvirt</application>. The <application>virsh</application> "
3883
"utility can be used from the command line. Some examples:"
3884
msgstr ""
3885
3886
#: serverguide/C/virtualization.xml:224(para)
3887
msgid "To list running virtual machines:"
3888
msgstr ""
3889
3890
#: serverguide/C/virtualization.xml:228(command)
3891
msgid "virsh -c qemu:///system list"
3892
msgstr ""
3893
3894
#: serverguide/C/virtualization.xml:232(para)
3895
msgid "To start a virtual machine:"
3896
msgstr ""
3897
3898
#: serverguide/C/virtualization.xml:236(command)
3899
msgid "virsh -c qemu:///system start web_devel"
3900
msgstr ""
3901
3902
#: serverguide/C/virtualization.xml:240(para)
3903
msgid "Similarly, to start a virtual machine at boot:"
3904
msgstr ""
3905
3906
#: serverguide/C/virtualization.xml:244(command)
3907
msgid "virsh -c qemu:///system autostart web_devel"
3908
msgstr ""
3909
3910
#: serverguide/C/virtualization.xml:248(para)
3911
msgid "Reboot a virtual machine with:"
3912
msgstr ""
3913
3914
#: serverguide/C/virtualization.xml:252(command)
3915
msgid "virsh -c qemu:///system reboot web_devel"
3916
msgstr ""
3917
3918
#: serverguide/C/virtualization.xml:256(para)
3919
msgid ""
3920
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
3921
"order to be restored later. The following will save the virtual machine "
3922
"state into a file named according to the date:"
3923
msgstr ""
3924
3925
#: serverguide/C/virtualization.xml:261(command)
3926
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
3927
msgstr ""
3928
3929
#: serverguide/C/virtualization.xml:263(para)
3930
msgid "Once saved the virtual machine will no longer be running."
3931
msgstr ""
3932
3933
#: serverguide/C/virtualization.xml:268(para)
3934
msgid "A saved virtual machine can be restored using:"
3935
msgstr ""
3936
3937
#: serverguide/C/virtualization.xml:272(command)
3938
msgid "virsh -c qemu:///system restore web_devel-022708.state"
3939
msgstr ""
3940
3941
#: serverguide/C/virtualization.xml:276(para)
3942
msgid "To shutdown a virtual machine do:"
3943
msgstr ""
3944
3945
#: serverguide/C/virtualization.xml:280(command)
3946
msgid "virsh -c qemu:///system shutdown web_devel"
3947
msgstr ""
3948
3949
#: serverguide/C/virtualization.xml:284(para)
3950
msgid "A CDROM device can be mounted in a virtual machine by entering:"
3951
msgstr ""
3952
3953
#: serverguide/C/virtualization.xml:288(command)
3954
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
3955
msgstr ""
3956
3957
#: serverguide/C/virtualization.xml:293(para)
3958
msgid ""
3959
"In the above examples replace <emphasis>web_devel</emphasis> with the "
3960
"appropriate virtual machine name, and <filename>web_devel-"
3961
"022708.state</filename> with a descriptive file name."
3962
msgstr ""
3963
3964
#: serverguide/C/virtualization.xml:300(title)
3965
msgid "Virtual Machine Manager"
3966
msgstr ""
3967
3968
#: serverguide/C/virtualization.xml:301(para)
3969
msgid ""
3970
"The <application>virt-manager</application> package contains a graphical "
3971
"utility to manage local and remote virtual machines. To install virt-manager "
3972
"enter:"
3973
msgstr ""
3974
3975
#: serverguide/C/virtualization.xml:306(command)
3976
msgid "sudo apt-get install virt-manager"
3977
msgstr ""
3978
3979
#: serverguide/C/virtualization.xml:308(para)
3980
msgid ""
3981
"Since <application>virt-manager</application> requires a Graphical User "
3982
"Interface (GUI) environment it is recommended to be installed on a "
3983
"workstation or test machine instead of a production server. To connect to "
3984
"the local <application>libvirt</application> service enter:"
3985
msgstr ""
3986
3987
#: serverguide/C/virtualization.xml:314(command)
3988
msgid "virt-manager -c qemu:///system"
3989
msgstr ""
3990
3991
#: serverguide/C/virtualization.xml:316(para)
3992
msgid ""
3993
"You can connect to the <application>libvirt</application> service running on "
3994
"another host by entering the following in a terminal prompt:"
3995
msgstr ""
3996
3997
#: serverguide/C/virtualization.xml:320(command)
3998
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
3999
msgstr ""
4000
4001
#: serverguide/C/virtualization.xml:323(para)
4002
msgid ""
4003
"The above example assumes that <application>SSH</application> connectivity "
4004
"between the management system and virtnode1.mydomain.com has already been "
4005
"configured, and uses SSH keys for authentication. SSH "
4006
"<emphasis>keys</emphasis> are needed because "
4007
"<application>libvirt</application> sends the password prompt to another "
4008
"process. For details on configuring <application>SSH</application> see <xref "
4009
"linkend=\"openssh-server\"/>"
4010
msgstr ""
4011
4012
#: serverguide/C/virtualization.xml:333(title)
4013
msgid "Virtual Machine Viewer"
4014
msgstr ""
4015
4016
#: serverguide/C/virtualization.xml:334(para)
4017
msgid ""
4018
"The <application>virt-viewer</application> application allows you to connect "
4019
"to a virtual machine's console. <application>virt-viewer</application> does "
4020
"require a Graphical User Interface (GUI) to interface with the virtual "
4021
"machine."
4022
msgstr ""
4023
4024
#: serverguide/C/virtualization.xml:338(para)
4025
msgid ""
4026
"To install <application>virt-viewer</application> from a terminal enter:"
4027
msgstr ""
4028
4029
#: serverguide/C/virtualization.xml:342(command)
4030
msgid "sudo apt-get install virt-viewer"
4031
msgstr ""
4032
4033
#: serverguide/C/virtualization.xml:344(para)
4034
msgid ""
4035
"Once a virtual machine is installed and running you can connect to the "
4036
"virtual machine's console by using:"
4037
msgstr ""
4038
4039
#: serverguide/C/virtualization.xml:348(command)
4040
msgid "virt-viewer -c qemu:///system web_devel"
4041
msgstr ""
4042
4043
#: serverguide/C/virtualization.xml:350(para)
4044
msgid ""
4045
"Similar to <application>virt-manager</application>, <application>virt-"
4046
"viewer</application> can connect to a remote host using "
4047
"<emphasis>SSH</emphasis> with key authentication, as well:"
4048
msgstr ""
4049
4050
#: serverguide/C/virtualization.xml:355(command)
4051
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4052
msgstr ""
4053
4054
#: serverguide/C/virtualization.xml:357(para)
4055
msgid ""
4056
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4057
"appropriate virtual machine name."
4058
msgstr ""
4059
4060
#: serverguide/C/virtualization.xml:360(para)
4061
msgid ""
4062
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4063
"can also setup <application>SSH</application> access to the virtual machine. "
4064
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4065
"more details."
4066
msgstr ""
4067
4068
#: serverguide/C/virtualization.xml:369(para)
4069
msgid ""
4070
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4071
"for more details."
4072
msgstr ""
4073
4074
#: serverguide/C/virtualization.xml:374(para)
4075
msgid ""
4076
"For more information on <application>libvirt</application> see the <ulink "
4077
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4078
msgstr ""
4079
4080
#: serverguide/C/virtualization.xml:379(para)
4081
msgid ""
4082
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4083
"Manager</ulink> site has more information on <application>virt-"
4084
"manager</application> development."
4085
msgstr ""
4086
4087
#: serverguide/C/virtualization.xml:385(para)
4088
msgid ""
4089
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4090
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4091
"technology in Ubuntu."
4092
msgstr ""
4093
4094
#: serverguide/C/virtualization.xml:391(para)
4095
msgid ""
4096
"Another good resource is the <ulink "
4097
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4098
msgstr ""
4099
4100
#: serverguide/C/virtualization.xml:399(title)
4101
msgid "JeOS and vmbuilder"
4102
msgstr ""
4103
4104
#: serverguide/C/virtualization.xml:405(title)
4105
msgid "What is JeOS"
4106
msgstr ""
4107
4108
#: serverguide/C/virtualization.xml:407(para)
4109
msgid ""
4110
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4111
"variant of the Ubuntu Server operating system, configured specifically for "
4112
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4113
"only as an option either:"
4114
msgstr ""
4115
4116
#: serverguide/C/virtualization.xml:414(para)
4117
msgid ""
4118
"While installing from the Server Edition ISO (pressing "
4119
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4120
"installation\", which is the package selection equivalent to JeOS)."
4121
msgstr ""
4122
4123
#: serverguide/C/virtualization.xml:420(para)
4124
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4125
msgstr ""
4126
4127
#: serverguide/C/virtualization.xml:426(para)
4128
msgid ""
4129
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4130
"kernel that only contains the base elements needed to run within a "
4131
"virtualized environment."
4132
msgstr ""
4133
4134
#: serverguide/C/virtualization.xml:431(para)
4135
msgid ""
4136
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4137
"in the latest virtualization products from VMware. This combination of "
4138
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4139
"delivers a highly efficient use of server resources in large virtual "
4140
"deployments."
4141
msgstr ""
4142
4143
#: serverguide/C/virtualization.xml:437(para)
4144
msgid ""
4145
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4146
"can configure their supporting OS exactly as they require. They have the "
4147
"peace of mind that updates, whether for security or enhancement reasons, "
4148
"will be limited to the bare minimum of what is required in their specific "
4149
"environment. In turn, users deploying virtual appliances built on top of "
4150
"JeOS will have to go through fewer updates and therefore less maintenance "
4151
"than they would have had to with a standard full installation of a server."
4152
msgstr ""
4153
4154
#: serverguide/C/virtualization.xml:446(title)
4155
msgid "What is vmbuilder"
4156
msgstr ""
4157
4158
#: serverguide/C/virtualization.xml:448(para)
4159
msgid ""
4160
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4161
"will fetch the various package and build a virtual machine tailored for your "
4162
"needs in about a minute. vmbuilder is a script that automates the process of "
4163
"creating a ready to use Linux based VM. The currently supported hypervisors "
4164
"are KVM and Xen."
4165
msgstr ""
4166
4167
#: serverguide/C/virtualization.xml:454(para)
4168
msgid ""
4169
"You can pass command line options to add extra packages, remove packages, "
4170
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4171
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4172
"a local mirror, you can bootstrap a VM in less than a minute."
4173
msgstr ""
4174
4175
#: serverguide/C/virtualization.xml:460(para)
4176
msgid ""
4177
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4178
"vm-builder</application> started with little emphasis as a hack to help "
4179
"developers test their new code in a virtual machine without having to "
4180
"restart from scratch each time. As a few Ubuntu administrators started to "
4181
"notice this script, a few of them went on improving it and adapting it for "
4182
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4183
"virtualization specialist, not the golf player) decided to rewrite it from "
4184
"scratch for Intrepid as a python script with a few new design goals:"
4185
msgstr ""
4186
4187
#: serverguide/C/virtualization.xml:470(para)
4188
msgid "Develop it so that it can be reused by other distributions."
4189
msgstr ""
4190
4191
#: serverguide/C/virtualization.xml:475(para)
4192
msgid ""
4193
"Use a plugin mechanisms for all virtualization interactions so that others "
4194
"can easily add logic for other virtualization environments."
4195
msgstr ""
4196
4197
#: serverguide/C/virtualization.xml:480(para)
4198
msgid ""
4199
"Provide an easy to maintain web interface as an option to the command line "
4200
"interface."
4201
msgstr ""
4202
4203
#: serverguide/C/virtualization.xml:486(para)
4204
msgid "But the general principles and commands remain the same."
4205
msgstr ""
4206
4207
#: serverguide/C/virtualization.xml:493(title)
4208
msgid "Initial Setup"
4209
msgstr ""
4210
4211
#: serverguide/C/virtualization.xml:495(para)
4212
msgid ""
4213
"It is assumed that you have installed and configured "
4214
"<application>libvirt</application> and <application>KVM</application> "
4215
"locally on the machine you are using. For details on how to perform this, "
4216
"please refer to:"
4217
msgstr ""
4218
4219
#: serverguide/C/virtualization.xml:507(para)
4220
msgid ""
4221
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4222
"page."
4223
msgstr ""
4224
4225
#: serverguide/C/virtualization.xml:513(para)
4226
msgid ""
4227
"We also assume that you know how to use a text based text editor such as "
4228
"nano or vi. If you have not used any of them before, you can get an overview "
4229
"of the various text editors available by reading the <ulink "
4230
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4231
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4232
"principle should remain on other virtualization technologies."
4233
msgstr ""
4234
4235
#: serverguide/C/virtualization.xml:521(title)
4236
msgid "Install vmbuilder"
4237
msgstr ""
4238
4239
#: serverguide/C/virtualization.xml:523(para)
4240
msgid ""
4241
"The name of the package that we need to install is <application>python-vm-"
4242
"builder</application>. In a terminal prompt enter:"
4243
msgstr ""
4244
4245
#: serverguide/C/virtualization.xml:528(command)
4246
msgid "sudo apt-get install python-vm-builder"
4247
msgstr ""
4248
4249
#: serverguide/C/virtualization.xml:532(para)
4250
msgid ""
4251
"If you are running Hardy, you can still perform most of this using the older "
4252
"version of the package named <application>ubuntu-vm-builder</application>, "
4253
"there are only a few changes to the syntax of the tool."
4254
msgstr ""
4255
4256
#: serverguide/C/virtualization.xml:541(title)
4257
msgid "Defining Your Virtual Machine"
4258
msgstr ""
4259
4260
#: serverguide/C/virtualization.xml:543(para)
4261
msgid ""
4262
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4263
"are a few thing to consider:"
4264
msgstr ""
4265
4266
#: serverguide/C/virtualization.xml:549(para)
4267
msgid ""
4268
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4269
"will know how to extend disk size to fit their need, so either plan for a "
4270
"large virtual disk to allow for your appliance to grow, or explain fairly "
4271
"well in your documentation how to allocate more space. It might actually be "
4272
"a good idea to store data on some separate external storage."
4273
msgstr ""
4274
4275
#: serverguide/C/virtualization.xml:556(para)
4276
msgid ""
4277
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4278
"whatever you think is a safe minimum for your appliance."
4279
msgstr ""
4280
4281
#: serverguide/C/virtualization.xml:562(para)
4282
msgid ""
4283
"The <application>vmbuilder</application> command has 2 main parameters: the "
4284
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4285
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4286
"and can be found using the following command:"
4287
msgstr ""
4288
4289
#: serverguide/C/virtualization.xml:568(command)
4290
msgid "vmbuilder --help"
4291
msgstr ""
4292
4293
#: serverguide/C/virtualization.xml:572(title)
4294
msgid "Base Parameters"
4295
msgstr ""
4296
4297
#: serverguide/C/virtualization.xml:574(para)
4298
msgid ""
4299
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4300
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4301
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4302
msgstr ""
4303
4304
#: serverguide/C/virtualization.xml:580(command)
4305
msgid ""
4306
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4307
"libvirt qemu:///system"
4308
msgstr ""
4309
4310
#: serverguide/C/virtualization.xml:583(para)
4311
msgid ""
4312
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4313
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4314
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4315
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4316
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4317
"libvirt</emphasis> tells to inform the local virtualization environment to "
4318
"add the resulting VM to the list of available machines."
4319
msgstr ""
4320
4321
#: serverguide/C/virtualization.xml:591(para)
4322
msgid "Notes:"
4323
msgstr ""
4324
4325
#: serverguide/C/virtualization.xml:597(para)
4326
msgid ""
4327
"Because of the nature of operations performed by vmbuilder, it needs to have "
4328
"root privilege, hence the use of sudo."
4329
msgstr ""
4330
4331
#: serverguide/C/virtualization.xml:602(para)
4332
msgid ""
4333
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4334
"a 64 bit machine (--arch amd64)."
4335
msgstr ""
4336
4337
#: serverguide/C/virtualization.xml:607(para)
4338
msgid ""
4339
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4340
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4341
"use <emphasis>--flavour</emphasis> server instead."
4342
msgstr ""
4343
4344
#: serverguide/C/virtualization.xml:615(title)
4345
msgid "JeOS Installation Parameters"
4346
msgstr ""
4347
4348
#: serverguide/C/virtualization.xml:618(title)
4349
msgid "JeOS Networking"
4350
msgstr ""
4351
4352
#: serverguide/C/virtualization.xml:621(title)
4353
msgid "Assigning a fixed IP address"
4354
msgstr ""
4355
4356
#: serverguide/C/virtualization.xml:623(para)
4357
msgid ""
4358
"As a virtual appliance that may be deployed on various very different "
4359
"networks, it is very difficult to know what the actual network will look "
4360
"like. In order to simplify configuration, it is a good idea to take an "
4361
"approach similar to what network hardware vendors usually do, namely "
4362
"assigning an initial fixed IP address to the appliance in a private class "
4363
"network that you will provide in your documentation. An address in the range "
4364
"192.168.0.0/255 is usually a good choice."
4365
msgstr ""
4366
4367
#: serverguide/C/virtualization.xml:630(para)
4368
msgid "To do this we'll use the following parameters:"
4369
msgstr ""
4370
4371
#: serverguide/C/virtualization.xml:636(para)
4372
msgid ""
4373
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4374
"dhcp if not specified)"
4375
msgstr ""
4376
4377
#: serverguide/C/virtualization.xml:641(para)
4378
msgid ""
4379
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4380
"255.255.255.0)"
4381
msgstr ""
4382
4383
#: serverguide/C/virtualization.xml:646(para)
4384
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4385
msgstr ""
4386
4387
#: serverguide/C/virtualization.xml:651(para)
4388
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4389
msgstr ""
4390
4391
#: serverguide/C/virtualization.xml:656(para)
4392
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4393
msgstr ""
4394
4395
#: serverguide/C/virtualization.xml:661(para)
4396
msgid ""
4397
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4398
msgstr ""
4399
4400
#: serverguide/C/virtualization.xml:667(para)
4401
msgid ""
4402
"We assume for now that default values are good enough, so the resulting "
4403
"invocation becomes:"
4404
msgstr ""
4405
4406
#: serverguide/C/virtualization.xml:672(command)
4407
msgid ""
4408
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4409
"libvirt qemu:///system --ip 192.168.0.100"
4410
msgstr ""
4411
4412
#: serverguide/C/virtualization.xml:677(title)
4413
msgid "Modifying the libvirt Template to use Bridging"
4414
msgstr ""
4415
4416
#: serverguide/C/virtualization.xml:679(para)
4417
msgid ""
4418
"Because our appliance will be likely to need to be accessed by remote hosts, "
4419
"we need to configure libvirt so that the appliance uses bridge networking. "
4420
"To do this we use vmbuilder template mechanism to modify the default one."
4421
msgstr ""
4422
4423
#: serverguide/C/virtualization.xml:684(para)
4424
msgid ""
4425
"In our working directory we create the template hierarchy and copy the "
4426
"default template:"
4427
msgstr ""
4428
4429
#: serverguide/C/virtualization.xml:689(command)
4430
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4431
msgstr ""
4432
4433
#: serverguide/C/virtualization.xml:690(command)
4434
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4435
msgstr ""
4436
4437
#: serverguide/C/virtualization.xml:693(para)
4438
msgid ""
4439
"We can then edit "
4440
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4441
"change:"
4442
msgstr ""
4443
4444
#: serverguide/C/virtualization.xml:697(programlisting)
4445
#, no-wrap
4446
msgid ""
4447
"\n"
4448
" <interface type='network'>\n"
4449
" <source network='default'/>\n"
4450
" </interface>\n"
4451
msgstr ""
4452
4453
#: serverguide/C/virtualization.xml:703(para)
4454
msgid "To:"
4455
msgstr ""
4456
4457
#: serverguide/C/virtualization.xml:707(programlisting)
4458
#, no-wrap
4459
msgid ""
4460
"\n"
4461
" <interface type='bridge'>\n"
4462
" <source bridge='br0'/>\n"
4463
" </interface>\n"
4464
msgstr ""
4465
4466
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4467
msgid "Partitioning"
4468
msgstr ""
4469
4470
#: serverguide/C/virtualization.xml:719(para)
4471
msgid ""
4472
"Partitioning of the virtual appliance will have to take into consideration "
4473
"what you are planning to do with is. Because most appliances want to have a "
4474
"separate storage for data, having a separate <filename>/var</filename> would "
4475
"make sense."
4476
msgstr ""
4477
4478
#: serverguide/C/virtualization.xml:724(para)
4479
msgid ""
4480
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4481
msgstr ""
4482
4483
#: serverguide/C/virtualization.xml:728(programlisting)
4484
#, no-wrap
4485
msgid ""
4486
"\n"
4487
"--part PATH\n"
4488
" Allows you to specify a partition table in a partition file, located at "
4489
"PATH. Each line of the partition file should specify\n"
4490
" (root first):\n"
4491
" mountpoint size\n"
4492
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4493
"disk starts on a\n"
4494
" line with ’---’. ie :\n"
4495
" root 1000\n"
4496
" /opt 1000\n"
4497
" swap 256\n"
4498
" ---\n"
4499
" /var 2000\n"
4500
" /log 1500\n"
4501
msgstr ""
4502
4503
#: serverguide/C/virtualization.xml:743(para)
4504
msgid ""
4505
"In our case we will define a text file name "
4506
"<filename>vmbuilder.partition</filename> which will contain the following:"
4507
msgstr ""
4508
4509
#: serverguide/C/virtualization.xml:747(programlisting)
4510
#, no-wrap
4511
msgid ""
4512
"\n"
4513
"root 8000\n"
4514
"swap 4000\n"
4515
"---\n"
4516
"/var 20000\n"
4517
msgstr ""
4518
4519
#: serverguide/C/virtualization.xml:755(para)
4520
msgid ""
4521
"Note that as we are using virtual disk images, the actual sizes that we put "
4522
"here are maximum sizes for these volumes."
4523
msgstr ""
4524
4525
#: serverguide/C/virtualization.xml:760(para)
4526
msgid "Our command line now looks like:"
4527
msgstr ""
4528
4529
#: serverguide/C/virtualization.xml:765(command)
4530
msgid ""
4531
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4532
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4533
msgstr ""
4534
4535
#: serverguide/C/virtualization.xml:770(para)
4536
msgid ""
4537
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4538
"next line."
4539
msgstr ""
4540
4541
#: serverguide/C/virtualization.xml:777(title)
4542
msgid "User and Password"
4543
msgstr ""
4544
4545
#: serverguide/C/virtualization.xml:779(para)
4546
msgid ""
4547
"Again setting up a virtual appliance, you will need to provide a default "
4548
"user and password that is generic so that you can include it in your "
4549
"documentation. We will see later on in this tutorial how we will provide "
4550
"some security by defining a script that will be run the first time a user "
4551
"actually logs in the appliance, that will, among other things, ask him to "
4552
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4553
"as my user name, and <emphasis>'default'</emphasis> as the password."
4554
msgstr ""
4555
4556
#: serverguide/C/virtualization.xml:787(para)
4557
msgid "To do this we use the following optional parameters:"
4558
msgstr ""
4559
4560
#: serverguide/C/virtualization.xml:793(para)
4561
msgid ""
4562
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4563
"Default: ubuntu."
4564
msgstr ""
4565
4566
#: serverguide/C/virtualization.xml:798(para)
4567
msgid ""
4568
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4569
"added. Default: Ubuntu."
4570
msgstr ""
4571
4572
#: serverguide/C/virtualization.xml:803(para)
4573
msgid ""
4574
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4575
"Default: ubuntu."
4576
msgstr ""
4577
4578
#: serverguide/C/virtualization.xml:809(para)
4579
msgid "Our resulting command line becomes:"
4580
msgstr ""
4581
4582
#: serverguide/C/virtualization.xml:814(command)
4583
msgid ""
4584
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4585
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4586
"user user --name user --pass default"
4587
msgstr ""
4588
4589
#: serverguide/C/virtualization.xml:822(title)
4590
msgid "Installing Required Packages"
4591
msgstr ""
4592
4593
#: serverguide/C/virtualization.xml:824(para)
4594
msgid ""
4595
"In this example we will be installing a package "
4596
"<application>(Limesurvey)</application> that accesses a "
4597
"<application>MySQL</application> database and has a web interface. We will "
4598
"therefore require our OS to provide us with:"
4599
msgstr ""
4600
4601
#: serverguide/C/virtualization.xml:831(para)
4602
msgid "Apache"
4603
msgstr ""
4604
4605
#: serverguide/C/virtualization.xml:832(para)
4606
msgid "PHP"
4607
msgstr ""
4608
4609
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4610
msgid "MySQL"
4611
msgstr ""
4612
4613
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4614
msgid "OpenSSH Server"
4615
msgstr ""
4616
4617
#: serverguide/C/virtualization.xml:835(para)
4618
msgid "Limesurvey (as an example application that we have packaged)"
4619
msgstr ""
4620
4621
#: serverguide/C/virtualization.xml:838(para)
4622
msgid ""
4623
"This is done using vmbuilder by specifying the --addpkg option multiple "
4624
"times:"
4625
msgstr ""
4626
4627
#: serverguide/C/virtualization.xml:842(programlisting)
4628
#, no-wrap
4629
msgid ""
4630
"\n"
4631
"--addpkg PKG\n"
4632
" Install PKG into the guest (can be specfied multiple times)\n"
4633
msgstr ""
4634
4635
#: serverguide/C/virtualization.xml:847(para)
4636
msgid ""
4637
"However, due to the way vmbuilder operates, packages that have to ask "
4638
"questions to the user during the post install phase are not supported and "
4639
"should instead be installed while interactivity can occur. This is the case "
4640
"of Limesurvey, which we will have to install later, once the user logs in."
4641
msgstr ""
4642
4643
#: serverguide/C/virtualization.xml:853(para)
4644
msgid ""
4645
"Other packages that ask simple debconf question, such as <application>mysql-"
4646
"server</application> asking to set a password, the package can be installed "
4647
"immediately, but we will have to reconfigure it the first time the user logs "
4648
"in."
4649
msgstr ""
4650
4651
#: serverguide/C/virtualization.xml:859(para)
4652
msgid ""
4653
"If some packages that we need to install are not in main, we need to enable "
4654
"the additional repositories using --comp and --ppa:"
4655
msgstr ""
4656
4657
#: serverguide/C/virtualization.xml:863(programlisting)
4658
#, no-wrap
4659
msgid ""
4660
"\n"
4661
"--components COMP1,COMP2,...,COMPN\n"
4662
" A comma separated list of distro components to include (e.g. "
4663
"main,universe). This defaults\n"
4664
" to \"main\"\n"
4665
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4666
msgstr ""
4667
4668
#: serverguide/C/virtualization.xml:870(para)
4669
msgid ""
4670
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4671
"PPA (personal package archive) address so that it is added to the VM "
4672
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4673
"to the command line:"
4674
msgstr ""
4675
4676
#: serverguide/C/virtualization.xml:876(command)
4677
msgid ""
4678
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4679
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4680
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4681
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4682
"server --ppa nijaba"
4683
msgstr ""
4684
4685
#: serverguide/C/virtualization.xml:883(title)
4686
msgid "OpenSSH"
4687
msgstr ""
4688
4689
#: serverguide/C/virtualization.xml:885(para)
4690
msgid ""
4691
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4692
"it will allow our admins to access the appliance remotely. However, pushing "
4693
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4694
"security risk as all these server will share the same secret key, making it "
4695
"very easy for hackers to target our appliance with all the tools they need "
4696
"to crack it open in a breeze. As for the user password, we will instead rely "
4697
"on a script that will install OpenSSH the first time a user logs in so that "
4698
"the key generated will be different for each appliance. For this we'll use a "
4699
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4700
"interaction."
4701
msgstr ""
4702
4703
#: serverguide/C/virtualization.xml:897(title)
4704
msgid "Speed Considerations"
4705
msgstr ""
4706
4707
#: serverguide/C/virtualization.xml:900(title)
4708
msgid "Package Caching"
4709
msgstr ""
4710
4711
#: serverguide/C/virtualization.xml:902(para)
4712
msgid ""
4713
"When vmbuilder creates builds your system, it has to go fetch each one of "
4714
"the packages that composes it over the network to one of the official "
4715
"repositories, which, depending on your internet connection speed and the "
4716
"load of the mirror, can have a big impact on the actual build time. In order "
4717
"to reduce this, it is recommended to either have a local repository (which "
4718
"can be created using <application>apt-mirror</application>) or using a "
4719
"caching proxy such as <application>apt-proxy</application>. The later option "
4720
"being much simpler to implement and requiring less disk space, it is the one "
4721
"we will pick in this tutorial. To install it, simply type:"
4722
msgstr ""
4723
4724
#: serverguide/C/virtualization.xml:912(command)
4725
msgid "sudo apt-get install apt-proxy"
4726
msgstr ""
4727
4728
#: serverguide/C/virtualization.xml:915(para)
4729
msgid ""
4730
"Once this is complete, your (empty) proxy is ready for use on "
4731
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
4732
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
4733
"option:"
4734
msgstr ""
4735
4736
#: serverguide/C/virtualization.xml:920(programlisting)
4737
#, no-wrap
4738
msgid ""
4739
"\n"
4740
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
4741
" is http://archive.ubuntu.com/ubuntu for official\n"
4742
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
4743
" otherwise\n"
4744
msgstr ""
4745
4746
#: serverguide/C/virtualization.xml:927(para)
4747
msgid "So we add to the command line:"
4748
msgstr ""
4749
4750
#: serverguide/C/virtualization.xml:932(command)
4751
msgid "--mirror http://mirroraddress:9999/ubuntu"
4752
msgstr ""
4753
4754
#: serverguide/C/virtualization.xml:936(para)
4755
msgid ""
4756
"The mirror address specified here will also be used in the "
4757
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
4758
"is useful to specify here an address that can be resolved by the guest or to "
4759
"plan on reseting this address later on, such as in a <emphasis>--"
4760
"firstboot</emphasis> script."
4761
msgstr ""
4762
4763
#: serverguide/C/virtualization.xml:945(title)
4764
msgid "Install a Local Mirror"
4765
msgstr ""
4766
4767
#: serverguide/C/virtualization.xml:947(para)
4768
msgid ""
4769
"If we are in a larger environment, it may make sense to setup a local mirror "
4770
"of the Ubuntu repositories. The package apt-mirror provides you with a "
4771
"script that will handle the mirroring for you. You should plan on having "
4772
"about 20 gigabyte of free space per supported release and architecture."
4773
msgstr ""
4774
4775
#: serverguide/C/virtualization.xml:953(para)
4776
msgid ""
4777
"By default, <application>apt-mirror</application> uses the configuration "
4778
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
4779
"replicate only the architecture of the local machine. If you would like to "
4780
"support other architectures on your mirror, simply duplicate the lines "
4781
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
4782
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
4783
"archives as well, you will have:"
4784
msgstr ""
4785
4786
#: serverguide/C/virtualization.xml:960(programlisting)
4787
#, no-wrap
4788
msgid ""
4789
"\n"
4790
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4791
"multiverse \n"
4792
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
4793
"multiverse\n"
4794
"\n"
4795
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
4796
"multiverse \n"
4797
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
4798
"universe multiverse \n"
4799
"\n"
4800
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
4801
"universe multiverse \n"
4802
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
4803
"universe multiverse \n"
4804
"\n"
4805
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
4806
"universe multiverse \n"
4807
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
4808
"universe multiverse \n"
4809
"\n"
4810
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4811
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4812
"installer \n"
4813
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
4814
"restricted/debian-installer universe/debian-installer multiverse/debian-"
4815
"installer \n"
4816
msgstr ""
4817
4818
#: serverguide/C/virtualization.xml:977(para)
4819
msgid ""
4820
"Notice that the source packages are not mirrored as they are seldom used "
4821
"compared to the binaries and they do take a lot more space, but they can be "
4822
"easily added to the list."
4823
msgstr ""
4824
4825
#: serverguide/C/virtualization.xml:982(para)
4826
msgid ""
4827
"Once the mirror has finished replicating (and this can be quite long), you "
4828
"need to configure Apache so that your mirror files (in "
4829
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
4830
"default), are published by your Apache server. For more information on "
4831
"Apache see <xref linkend=\"httpd\"/>."
4832
msgstr ""
4833
4834
#: serverguide/C/virtualization.xml:991(title)
4835
msgid "Installing in a RAM Disk"
4836
msgstr ""
4837
4838
#: serverguide/C/virtualization.xml:993(para)
4839
msgid ""
4840
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
4841
"faster than writing to disk. If you have some free memory, letting vmbuilder "
4842
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
4843
"-tmpfs</emphasis> will help you do just that:"
4844
msgstr ""
4845
4846
#: serverguide/C/virtualization.xml:999(programlisting)
4847
#, no-wrap
4848
msgid ""
4849
"\n"
4850
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
4851
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
4852
msgstr ""
4853
4854
#: serverguide/C/virtualization.xml:1004(para)
4855
msgid ""
4856
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
4857
"have 1G of free ram."
4858
msgstr ""
4859
4860
#: serverguide/C/virtualization.xml:1011(title)
4861
msgid "Package the Application"
4862
msgstr ""
4863
4864
#: serverguide/C/virtualization.xml:1013(para)
4865
msgid "Two option are available to us:"
4866
msgstr ""
4867
4868
#: serverguide/C/virtualization.xml:1019(para)
4869
msgid ""
4870
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
4871
"package. Since this is outside of the scope of this tutorial, we will not "
4872
"perform this here and invite the reader to read the documentation on how to "
4873
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
4874
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
4875
"repository for your package so that updates can be conveniently pulled from "
4876
"it. See the <ulink url=\"http://www.debian-"
4877
"administration.org/articles/286\">Debian Administration</ulink> article for "
4878
"a tutorial on this."
4879
msgstr ""
4880
4881
#: serverguide/C/virtualization.xml:1028(para)
4882
msgid ""
4883
"Manually install the application under <filename>/opt</filename> as "
4884
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
4885
"guidelines</ulink>."
4886
msgstr ""
4887
4888
#: serverguide/C/virtualization.xml:1035(para)
4889
msgid ""
4890
"In our case we'll use <application>Limesurvey</application> as example web "
4891
"application for which we wish to provide a virtual appliance. As noted "
4892
"before, we've made a version of the package available in a PPA (Personal "
4893
"Package Archive)."
4894
msgstr ""
4895
4896
#: serverguide/C/virtualization.xml:1042(title)
4897
msgid "Finishing Install"
4898
msgstr ""
4899
4900
#: serverguide/C/virtualization.xml:1045(title)
4901
msgid "First Boot"
4902
msgstr ""
4903
4904
#: serverguide/C/virtualization.xml:1047(para)
4905
msgid ""
4906
"As we mentioned earlier, the first time the machine boots we'll need to "
4907
"install <application>openssh-server</application> so that the key generated "
4908
"for it is unique for each machine. To do this, we'll write a script called "
4909
"<filename>boot.sh</filename> as follows:"
4910
msgstr ""
4911
4912
#: serverguide/C/virtualization.xml:1053(programlisting)
4913
#, no-wrap
4914
msgid ""
4915
"\n"
4916
"# This script will run the first time the virtual machine boots\n"
4917
"# It is ran as root.\n"
4918
"\n"
4919
"apt-get update\n"
4920
"apt-get install -qqy --force-yes openssh-server\n"
4921
msgstr ""
4922
4923
#: serverguide/C/virtualization.xml:1061(para)
4924
msgid ""
4925
"And we add the <command>--firstboot boot.sh</command> option to our command "
4926
"line."
4927
msgstr ""
4928
4929
#: serverguide/C/virtualization.xml:1067(title)
4930
msgid "First Login"
4931
msgstr ""
4932
4933
#: serverguide/C/virtualization.xml:1069(para)
4934
msgid ""
4935
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
4936
"set them up the first time a user logs in using a script named login.sh. "
4937
"We'll also use this script to let the user specify:"
4938
msgstr ""
4939
4940
#: serverguide/C/virtualization.xml:1075(para)
4941
msgid "His own password"
4942
msgstr ""
4943
4944
#: serverguide/C/virtualization.xml:1076(para)
4945
msgid "Define the keyboard and other locale info he wants to use"
4946
msgstr ""
4947
4948
#: serverguide/C/virtualization.xml:1079(para)
4949
msgid "So we'll define <filename>login.sh</filename> as follows:"
4950
msgstr ""
4951
4952
#: serverguide/C/virtualization.xml:1083(programlisting)
4953
#, no-wrap
4954
msgid ""
4955
"\n"
4956
"# This script is ran the first time a user logs in\n"
4957
"\n"
4958
"echo \"Your appliance is about to be finished to be set up.\"\n"
4959
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
4960
"echo \"starting by changing your user password.\"\n"
4961
"\n"
4962
"passwd\n"
4963
"\n"
4964
"#give the opportunity to change the keyboard\n"
4965
"sudo dpkg-reconfigure console-setup\n"
4966
"\n"
4967
"#configure the mysql server root password\n"
4968
"sudo dpkg-reconfigure mysql-server-5.0\n"
4969
"\n"
4970
"#install limesurvey\n"
4971
"sudo apt-get install -qqy --force-yes limesurvey\n"
4972
"\n"
4973
"echo \"Your appliance is now configured. To use it point your\"\n"
4974
"echo \"browser to http://serverip/limesurvey/admin\"\n"
4975
msgstr ""
4976
4977
#: serverguide/C/virtualization.xml:1105(para)
4978
msgid ""
4979
"And we add the <command>--firstlogin login.sh</command> option to our "
4980
"command line."
4981
msgstr ""
4982
4983
#: serverguide/C/virtualization.xml:1112(title)
4984
msgid "Useful Additions"
4985
msgstr ""
4986
4987
#: serverguide/C/virtualization.xml:1115(title)
4988
msgid "Configuring Automatic Updates"
4989
msgstr ""
4990
4991
#: serverguide/C/virtualization.xml:1117(para)
4992
msgid ""
4993
"To have your system be configured to update itself on a regular basis, we "
4994
"will just install <application>unattended-upgrades</application>, so we add "
4995
"the following option to our command line:"
4996
msgstr ""
4997
4998
#: serverguide/C/virtualization.xml:1123(command)
4999
msgid "--addpkg unattended-upgrades"
5000
msgstr ""
5001
5002
#: serverguide/C/virtualization.xml:1126(para)
5003
msgid ""
5004
"As we have put our application package in a PPA, the process will update not "
5005
"only the system, but also the application each time we update the version in "
5006
"the PPA."
5007
msgstr ""
5008
5009
#: serverguide/C/virtualization.xml:1133(title)
5010
msgid "ACPI Event Handling"
5011
msgstr ""
5012
5013
#: serverguide/C/virtualization.xml:1135(para)
5014
msgid ""
5015
"For your virtual machine to be able to handle restart and shutdown events it "
5016
"is being sent, it is a good idea to install the acpid package as well. To do "
5017
"this we just add the following option:"
5018
msgstr ""
5019
5020
#: serverguide/C/virtualization.xml:1141(command)
5021
msgid "--addpkg acpid"
5022
msgstr ""
5023
5024
#: serverguide/C/virtualization.xml:1147(title)
5025
msgid "Final Command"
5026
msgstr ""
5027
5028
#: serverguide/C/virtualization.xml:1149(para)
5029
msgid "Here is the command with all the options discussed above:"
5030
msgstr ""
5031
5032
#: serverguide/C/virtualization.xml:1154(command)
5033
msgid ""
5034
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5035
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5036
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5037
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5038
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5039
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5040
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5041
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5042
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5043
"firstlogin login.sh es"
5044
msgstr ""
5045
5046
#: serverguide/C/virtualization.xml:1169(para)
5047
msgid ""
5048
"If you are interested in learning more, have questions or suggestions, "
5049
"please contact the Ubuntu Server Team at:"
5050
msgstr ""
5051
5052
#: serverguide/C/virtualization.xml:1174(para)
5053
msgid "IRC: #ubuntu-server on freenode"
5054
msgstr ""
5055
5056
#: serverguide/C/virtualization.xml:1179(para)
5057
msgid ""
5058
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5059
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5060
msgstr ""
5061
5062
#: serverguide/C/virtualization.xml:1184(para)
5063
msgid ""
5064
"Also, see the <ulink "
5065
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5066
"Wiki</ulink> page."
5067
msgstr ""
5068
5069
#: serverguide/C/virtualization.xml:1192(title)
5070
msgid "UEC"
5071
msgstr ""
5072
5073
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5074
msgid "Overview"
5075
msgstr ""
5076
5077
#: serverguide/C/virtualization.xml:1197(para)
5078
msgid ""
5079
"This tutorial covers <application>UEC</application> installation from the "
5080
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5081
"with a single system serving as the <emphasis>\"all-in-one "
5082
"controller\"</emphasis>, and one or more nodes attached."
5083
msgstr ""
5084
5085
#: serverguide/C/virtualization.xml:1202(para)
5086
msgid ""
5087
"From this Tutorial you will learn how to install, configure, register and "
5088
"perform several operations on a basic <application>UEC</application> setup "
5089
"that results in a cloud with a one controller <emphasis>\"front-"
5090
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5091
"instances. You will also use examples to help get you started using your own "
5092
"private compute cloud."
5093
msgstr ""
5094
5095
#: serverguide/C/virtualization.xml:1210(title)
5096
msgid "Prerequisites"
5097
msgstr ""
5098
5099
#: serverguide/C/virtualization.xml:1212(para)
5100
msgid ""
5101
"To deploy a minimal cloud infrastructure, you’ll need at least "
5102
"<emphasis>two</emphasis> dedicated systems:"
5103
msgstr ""
5104
5105
#: serverguide/C/virtualization.xml:1218(para)
5106
msgid "A front end."
5107
msgstr ""
5108
5109
#: serverguide/C/virtualization.xml:1223(para)
5110
msgid "One or more node(s)."
5111
msgstr ""
5112
5113
#: serverguide/C/virtualization.xml:1229(para)
5114
msgid ""
5115
"The following are recommendations, rather than fixed requirements. However, "
5116
"our experience in developing this documentation indicated the following "
5117
"suggestions."
5118
msgstr ""
5119
5120
#: serverguide/C/virtualization.xml:1234(title)
5121
msgid "Front End Requirements"
5122
msgstr ""
5123
5124
#: serverguide/C/virtualization.xml:1236(para)
5125
msgid "Use the following table for a system that will run one or more of:"
5126
msgstr ""
5127
5128
#: serverguide/C/virtualization.xml:1241(para)
5129
msgid "Cloud Controller (CLC)"
5130
msgstr ""
5131
5132
#: serverguide/C/virtualization.xml:1242(para)
5133
msgid "Cluster Controller (CC)"
5134
msgstr ""
5135
5136
#: serverguide/C/virtualization.xml:1243(para)
5137
msgid "Walrus (the S3-like storage service)"
5138
msgstr ""
5139
5140
#: serverguide/C/virtualization.xml:1244(para)
5141
msgid "Storage Controller (SC)"
5142
msgstr ""
5143
5144
#: serverguide/C/virtualization.xml:1248(title)
5145
msgid "UEC Front End Requirements"
5146
msgstr ""
5147
5148
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5149
msgid "Hardware"
5150
msgstr ""
5151
5152
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5153
msgid "Minimum"
5154
msgstr ""
5155
5156
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5157
msgid "Suggested"
5158
msgstr ""
5159
5160
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5161
msgid "Notes"
5162
msgstr ""
5163
5164
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5165
msgid "CPU"
5166
msgstr ""
5167
5168
#: serverguide/C/virtualization.xml:1265(para)
5169
msgid "1 GHz"
5170
msgstr ""
5171
5172
#: serverguide/C/virtualization.xml:1266(para)
5173
msgid "2 x 2 GHz"
5174
msgstr ""
5175
5176
#: serverguide/C/virtualization.xml:1267(para)
5177
msgid ""
5178
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5179
"a dual core processor."
5180
msgstr ""
5181
5182
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5183
msgid "Memory"
5184
msgstr ""
5185
5186
#: serverguide/C/virtualization.xml:1271(para)
5187
msgid "512 MB"
5188
msgstr ""
5189
5190
#: serverguide/C/virtualization.xml:1272(para)
5191
msgid "2 GB"
5192
msgstr ""
5193
5194
#: serverguide/C/virtualization.xml:1273(para)
5195
msgid "The Java web front end benefits from lots of available memory."
5196
msgstr ""
5197
5198
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5199
msgid "Disk"
5200
msgstr ""
5201
5202
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5203
msgid "5400 RPM IDE"
5204
msgstr ""
5205
5206
#: serverguide/C/virtualization.xml:1278(para)
5207
msgid "7200 RPM SATA"
5208
msgstr ""
5209
5210
#: serverguide/C/virtualization.xml:1279(para)
5211
msgid ""
5212
"Slower disks will work, but will yield much longer instance startup times."
5213
msgstr ""
5214
5215
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5216
msgid "Disk Space"
5217
msgstr ""
5218
5219
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5220
msgid "40 GB"
5221
msgstr ""
5222
5223
#: serverguide/C/virtualization.xml:1284(para)
5224
msgid "200 GB"
5225
msgstr ""
5226
5227
#: serverguide/C/virtualization.xml:1285(para)
5228
msgid ""
5229
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5230
"does not like to run out of disk space."
5231
msgstr ""
5232
5233
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5234
msgid "Networking"
5235
msgstr ""
5236
5237
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5238
msgid "100 Mbps"
5239
msgstr ""
5240
5241
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5242
msgid "1000 Mbps"
5243
msgstr ""
5244
5245
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5246
msgid ""
5247
"Machine images are hundreds of MB, and need to be copied over the network to "
5248
"nodes."
5249
msgstr ""
5250
5251
#: serverguide/C/virtualization.xml:1299(title)
5252
msgid "Node Requirements"
5253
msgstr ""
5254
5255
#: serverguide/C/virtualization.xml:1301(para)
5256
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5257
msgstr ""
5258
5259
#: serverguide/C/virtualization.xml:1306(para)
5260
msgid "the Node Controller (NC)"
5261
msgstr ""
5262
5263
#: serverguide/C/virtualization.xml:1310(title)
5264
msgid "UEC Node Requirements"
5265
msgstr ""
5266
5267
#: serverguide/C/virtualization.xml:1327(para)
5268
msgid "VT Extensions"
5269
msgstr ""
5270
5271
#: serverguide/C/virtualization.xml:1328(para)
5272
msgid "VT, 64-bit, Multicore"
5273
msgstr ""
5274
5275
#: serverguide/C/virtualization.xml:1329(para)
5276
msgid ""
5277
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5278
"only run 1 VM per CPU core on a Node."
5279
msgstr ""
5280
5281
#: serverguide/C/virtualization.xml:1333(para)
5282
msgid "1 GB"
5283
msgstr ""
5284
5285
#: serverguide/C/virtualization.xml:1334(para)
5286
msgid "4 GB"
5287
msgstr ""
5288
5289
#: serverguide/C/virtualization.xml:1335(para)
5290
msgid "Additional memory means more, and larger guests."
5291
msgstr ""
5292
5293
#: serverguide/C/virtualization.xml:1340(para)
5294
msgid "7200 RPM SATA or SCSI"
5295
msgstr ""
5296
5297
#: serverguide/C/virtualization.xml:1341(para)
5298
msgid ""
5299
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5300
"bottleneck."
5301
msgstr ""
5302
5303
#: serverguide/C/virtualization.xml:1346(para)
5304
msgid "100 GB"
5305
msgstr ""
5306
5307
#: serverguide/C/virtualization.xml:1347(para)
5308
msgid ""
5309
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5310
"space."
5311
msgstr ""
5312
5313
#: serverguide/C/virtualization.xml:1363(title)
5314
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5315
msgstr ""
5316
5317
#: serverguide/C/virtualization.xml:1367(para)
5318
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5319
msgstr ""
5320
5321
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5322
msgid ""
5323
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5324
msgstr ""
5325
5326
#: serverguide/C/virtualization.xml:1377(para)
5327
msgid ""
5328
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5329
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5330
msgstr ""
5331
5332
#: serverguide/C/virtualization.xml:1383(para)
5333
msgid ""
5334
"It will ask two other cloud-specific questions during the course of the "
5335
"install:"
5336
msgstr ""
5337
5338
#: serverguide/C/virtualization.xml:1388(para)
5339
msgid "Name of your cluster."
5340
msgstr ""
5341
5342
#: serverguide/C/virtualization.xml:1391(para)
5343
msgid "e.g. <emphasis>cluster1</emphasis>."
5344
msgstr ""
5345
5346
#: serverguide/C/virtualization.xml:1394(para)
5347
msgid ""
5348
"A range of public IP addresses on the LAN that the cloud can allocate to "
5349
"instances."
5350
msgstr ""
5351
5352
#: serverguide/C/virtualization.xml:1397(para)
5353
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5354
msgstr ""
5355
5356
#: serverguide/C/virtualization.xml:1405(title)
5357
msgid "Installing the Node Controller(s)"
5358
msgstr ""
5359
5360
#: serverguide/C/virtualization.xml:1407(para)
5361
msgid ""
5362
"The node controller install is even simpler. Just make sure that you are "
5363
"connected to the network on which the cloud/cluster controller is already "
5364
"running."
5365
msgstr ""
5366
5367
#: serverguide/C/virtualization.xml:1413(para)
5368
msgid "Boot from the same ISO on the node(s)."
5369
msgstr ""
5370
5371
#: serverguide/C/virtualization.xml:1423(para)
5372
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5373
msgstr ""
5374
5375
#: serverguide/C/virtualization.xml:1428(para)
5376
msgid ""
5377
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5378
"install for you."
5379
msgstr ""
5380
5381
#: serverguide/C/virtualization.xml:1433(para)
5382
msgid "Confirm the partitioning scheme."
5383
msgstr ""
5384
5385
#: serverguide/C/virtualization.xml:1438(para)
5386
msgid ""
5387
"The rest of the installation should proceed uninterrupted; complete the "
5388
"installation and reboot the node."
5389
msgstr ""
5390
5391
#: serverguide/C/virtualization.xml:1446(title)
5392
msgid "Register the Node(s)"
5393
msgstr ""
5394
5395
#: serverguide/C/virtualization.xml:1448(para)
5396
msgid ""
5397
"Nodes are the physical systems within <application>UEC</application> that "
5398
"actually run the virtual machine instances of the cloud."
5399
msgstr ""
5400
5401
#: serverguide/C/virtualization.xml:1452(para)
5402
msgid ""
5403
"Once one or more Ubuntu Server node(s) are installed and running the "
5404
"<application>eucalyptus-nc</application> service, log onto the "
5405
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5406
msgstr ""
5407
5408
#: serverguide/C/virtualization.xml:1458(command)
5409
msgid "sudo euca_conf --no-rsync --discover-nodes"
5410
msgstr ""
5411
5412
#: serverguide/C/virtualization.xml:1461(para)
5413
msgid ""
5414
"This will discover the systems on the network running the "
5415
"<application>eucalyptus-nc</application> service, and the administrator can "
5416
"confirm the registration of each node by its IP address."
5417
msgstr ""
5418
5419
#: serverguide/C/virtualization.xml:1467(para)
5420
msgid ""
5421
"If you get prompted for passwords, or receive errors from scp, you may need "
5422
"to revisit the key synchronization instructions at <ulink "
5423
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5424
"lation</ulink>."
5425
msgstr ""
5426
5427
#: serverguide/C/virtualization.xml:1475(title)
5428
msgid "Obtain Credentials"
5429
msgstr ""
5430
5431
#: serverguide/C/virtualization.xml:1477(para)
5432
msgid ""
5433
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5434
"users of the cloud will need to retrieve their credentials. This can be done "
5435
"either through a web browser, or at the command line."
5436
msgstr ""
5437
5438
#: serverguide/C/virtualization.xml:1483(title)
5439
msgid "From a Web Browser"
5440
msgstr ""
5441
5442
#: serverguide/C/virtualization.xml:1487(para)
5443
msgid ""
5444
"From your web browser (either remotely or on your Ubuntu server) access the "
5445
"following URL:"
5446
msgstr ""
5447
5448
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5449
#, no-wrap
5450
msgid ""
5451
"\n"
5452
"https://<cloud-controller-ip-address>:8443/\n"
5453
msgstr ""
5454
5455
#: serverguide/C/virtualization.xml:1495(para)
5456
msgid ""
5457
"You must use a secure connection, so make sure you use \"https\" not "
5458
"\"http\" in your URL. You will get a security certificate warning. You will "
5459
"have to add an exception to view the page. If you do not accept it you will "
5460
"not be able to view the Eucalyptus configuration page."
5461
msgstr ""
5462
5463
#: serverguide/C/virtualization.xml:1503(para)
5464
msgid ""
5465
"Use username <emphasis>'admin'</emphasis> and password "
5466
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5467
"to change your password)."
5468
msgstr ""
5469
5470
#: serverguide/C/virtualization.xml:1509(para)
5471
msgid ""
5472
"Then follow the on-screen instructions to update the admin password and "
5473
"email address."
5474
msgstr ""
5475
5476
#: serverguide/C/virtualization.xml:1514(para)
5477
msgid ""
5478
"Once the first time configuration process is completed, click the "
5479
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5480
"the screen."
5481
msgstr ""
5482
5483
#: serverguide/C/virtualization.xml:1520(para)
5484
msgid ""
5485
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5486
"certificates."
5487
msgstr ""
5488
5489
#: serverguide/C/virtualization.xml:1525(para)
5490
msgid "Save them to <filename>~/.euca</filename>."
5491
msgstr ""
5492
5493
#: serverguide/C/virtualization.xml:1530(para)
5494
msgid ""
5495
"Unzip the downloaded zip file into a safe location "
5496
"(<filename>~/.euca</filename>)."
5497
msgstr ""
5498
5499
#: serverguide/C/virtualization.xml:1534(command)
5500
msgid "unzip -d ~/.euca mycreds.zip"
5501
msgstr ""
5502
5503
#: serverguide/C/virtualization.xml:1541(title)
5504
msgid "From a Command Line"
5505
msgstr ""
5506
5507
#: serverguide/C/virtualization.xml:1545(para)
5508
msgid ""
5509
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5510
"Controller</emphasis>, you can run:"
5511
msgstr ""
5512
5513
#: serverguide/C/virtualization.xml:1549(command)
5514
msgid "mkdir -p ~/.euca"
5515
msgstr ""
5516
5517
#: serverguide/C/virtualization.xml:1550(command)
5518
msgid "chmod 700 ~/.euca"
5519
msgstr ""
5520
5521
#: serverguide/C/virtualization.xml:1551(command)
5522
msgid "cd ~/.euca"
5523
msgstr ""
5524
5525
#: serverguide/C/virtualization.xml:1552(command)
5526
msgid "sudo euca_conf --get-credentials mycreds.zip"
5527
msgstr ""
5528
5529
#: serverguide/C/virtualization.xml:1553(command)
5530
msgid "unzip mycreds.zip"
5531
msgstr ""
5532
5533
#: serverguide/C/virtualization.xml:1554(command)
5534
msgid "cd -"
5535
msgstr ""
5536
5537
#: serverguide/C/virtualization.xml:1561(title)
5538
msgid "Extracting and Using Your Credentials"
5539
msgstr ""
5540
5541
#: serverguide/C/virtualization.xml:1563(para)
5542
msgid ""
5543
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5544
"certificates."
5545
msgstr ""
5546
5547
#: serverguide/C/virtualization.xml:1569(para)
5548
msgid ""
5549
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5550
"Eucalyptus environment:"
5551
msgstr ""
5552
5553
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5554
msgid ". ~/.euca/eucarc"
5555
msgstr ""
5556
5557
#: serverguide/C/virtualization.xml:1577(para)
5558
msgid ""
5559
"You may additionally wish to add this command to your "
5560
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5561
"set up automatically when you log in. Eucalyptus treats this set of "
5562
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5563
"the holder global privileges across the cloud. As such, they should be "
5564
"protected in the same way that other elevated-priority access is protected "
5565
"(e.g. should not be made visible to the general user population)."
5566
msgstr ""
5567
5568
#: serverguide/C/virtualization.xml:1584(command)
5569
msgid ""
5570
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5571
msgstr ""
5572
5573
#: serverguide/C/virtualization.xml:1588(para)
5574
msgid "Install the required cloud user tools:"
5575
msgstr ""
5576
5577
#: serverguide/C/virtualization.xml:1592(command)
5578
msgid "sudo apt-get install euca2ools"
5579
msgstr ""
5580
5581
#: serverguide/C/virtualization.xml:1596(para)
5582
msgid ""
5583
"To validate that everything is working correctly, get the local cluster "
5584
"availability details:"
5585
msgstr ""
5586
5587
#: serverguide/C/virtualization.xml:1601(command)
5588
msgid "euca-describe-availability-zones verbose"
5589
msgstr ""
5590
5591
#: serverguide/C/virtualization.xml:1602(computeroutput)
5592
#, no-wrap
5593
msgid ""
5594
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5595
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5596
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5597
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5598
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5599
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5600
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5601
msgstr ""
5602
5603
#: serverguide/C/virtualization.xml:1612(para)
5604
msgid "Your output from the above command will vary."
5605
msgstr ""
5606
5607
#: serverguide/C/virtualization.xml:1622(title)
5608
msgid "Running an Image"
5609
msgstr ""
5610
5611
#: serverguide/C/virtualization.xml:1624(para)
5612
msgid "There are multiple ways to instantiate an image in UEC:"
5613
msgstr ""
5614
5615
#: serverguide/C/virtualization.xml:1629(para)
5616
msgid "Use the command line."
5617
msgstr ""
5618
5619
#: serverguide/C/virtualization.xml:1630(para)
5620
msgid ""
5621
"Use one of the UEC compatible management tools such as "
5622
"<emphasis>Landscape</emphasis>."
5623
msgstr ""
5624
5625
#: serverguide/C/virtualization.xml:1632(para)
5626
msgid ""
5627
"Use the <ulink "
5628
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5629
"extension to Firefox."
5630
msgstr ""
5631
5632
#: serverguide/C/virtualization.xml:1638(para)
5633
msgid "Here we will describe the process from the command line:"
5634
msgstr ""
5635
5636
#: serverguide/C/virtualization.xml:1644(para)
5637
msgid ""
5638
"Before running an instance of your image, you should first create a "
5639
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5640
"instance as root, once it boots. The key is stored, so you will only have to "
5641
"do this once."
5642
msgstr ""
5643
5644
#: serverguide/C/virtualization.xml:1648(para)
5645
msgid "Run the following command:"
5646
msgstr ""
5647
5648
#: serverguide/C/virtualization.xml:1651(programlisting)
5649
#, no-wrap
5650
msgid ""
5651
"\n"
5652
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5653
" touch ~/.euca/mykey.priv\n"
5654
" chmod 0600 ~/.euca/mykey.priv\n"
5655
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5656
"fi\n"
5657
msgstr ""
5658
5659
#: serverguide/C/virtualization.xml:1659(para)
5660
msgid ""
5661
"You can call your key whatever you like (in this example, the key is called "
5662
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5663
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5664
"a list of created keys stored in the system."
5665
msgstr ""
5666
5667
#: serverguide/C/virtualization.xml:1666(para)
5668
msgid "You must also allow access to port 22 in your instances:"
5669
msgstr ""
5670
5671
#: serverguide/C/virtualization.xml:1670(command)
5672
msgid "euca-describe-groups"
5673
msgstr ""
5674
5675
#: serverguide/C/virtualization.xml:1671(command)
5676
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5677
msgstr ""
5678
5679
#: serverguide/C/virtualization.xml:1675(para)
5680
msgid "Next, you can create instances of your registered image:"
5681
msgstr ""
5682
5683
#: serverguide/C/virtualization.xml:1679(command)
5684
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5685
msgstr ""
5686
5687
#: serverguide/C/virtualization.xml:1682(para)
5688
msgid ""
5689
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5690
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5691
"on the <emphasis>Store</emphasis> page to see the sample command."
5692
msgstr ""
5693
5694
#: serverguide/C/virtualization.xml:1689(para)
5695
msgid ""
5696
"The first time you run an instance, the system will be setting up caches for "
5697
"the image from which it will be created. This can often take some time the "
5698
"first time an instance is run given that VM images are usually quite large."
5699
msgstr ""
5700
5701
#: serverguide/C/virtualization.xml:1693(para)
5702
msgid "To monitor the state of your instance, run:"
5703
msgstr ""
5704
5705
#: serverguide/C/virtualization.xml:1697(command)
5706
msgid "watch -n5 euca-describe-instances"
5707
msgstr ""
5708
5709
#: serverguide/C/virtualization.xml:1699(para)
5710
msgid ""
5711
"In the output, you should see information about the instance, including its "
5712
"state. While first-time caching is being performed, the instance's state "
5713
"will be <emphasis>'pending'</emphasis>."
5714
msgstr ""
5715
5716
#: serverguide/C/virtualization.xml:1705(para)
5717
msgid ""
5718
"When the instance is fully started, the above state will become "
5719
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5720
"instance in the output, then connect to it:"
5721
msgstr ""
5722
5723
#: serverguide/C/virtualization.xml:1710(command)
5724
msgid ""
5725
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5726
"'{print $4}')"
5727
msgstr ""
5728
5729
#: serverguide/C/virtualization.xml:1711(command)
5730
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
5731
msgstr ""
5732
5733
#: serverguide/C/virtualization.xml:1715(para)
5734
msgid ""
5735
"And when you are done with this instance, exit your SSH connection, then "
5736
"terminate your instance:"
5737
msgstr ""
5738
5739
#: serverguide/C/virtualization.xml:1719(command)
5740
msgid ""
5741
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
5742
"awk '{print $2}')"
5743
msgstr ""
5744
5745
#: serverguide/C/virtualization.xml:1720(command)
5746
msgid "euca-terminate-instances $INSTANCEID"
5747
msgstr ""
5748
5749
#: serverguide/C/virtualization.xml:1727(title)
5750
msgid "Install an Image from the Store"
5751
msgstr ""
5752
5753
#: serverguide/C/virtualization.xml:1729(para)
5754
msgid ""
5755
"The following is by far the simplest way to install an image. However, "
5756
"advanced users may be interested in learning how to <ulink "
5757
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
5758
"own image</ulink>."
5759
msgstr ""
5760
5761
#: serverguide/C/virtualization.xml:1734(para)
5762
msgid ""
5763
"The simplest way to add an image to <application>UEC</application> is to "
5764
"install it from the Image Store on the UEC web interface."
5765
msgstr ""
5766
5767
#: serverguide/C/virtualization.xml:1740(para)
5768
msgid ""
5769
"Access the web interface at the following URL (Make sure you specify https):"
5770
msgstr ""
5771
5772
#: serverguide/C/virtualization.xml:1748(para)
5773
msgid ""
5774
"Enter your login and password (if requested, as you may still be logged in "
5775
"from earlier)."
5776
msgstr ""
5777
5778
#: serverguide/C/virtualization.xml:1753(para)
5779
msgid "Click on the <emphasis>Store</emphasis> tab."
5780
msgstr ""
5781
5782
#: serverguide/C/virtualization.xml:1758(para)
5783
msgid "Browse available images."
5784
msgstr ""
5785
5786
#: serverguide/C/virtualization.xml:1763(para)
5787
msgid "Click on <emphasis>install</emphasis> for the image you want."
5788
msgstr ""
5789
5790
#: serverguide/C/virtualization.xml:1769(para)
5791
msgid ""
5792
"Once the image has been downloaded and installed, you can click on "
5793
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
5794
"button to view the command to execute to instantiate (start) this image. The "
5795
"image will also appear on the list given on the <emphasis>Image</emphasis> "
5796
"tab."
5797
msgstr ""
5798
5799
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
5800
msgid "More Information"
5801
msgstr ""
5802
5803
#: serverguide/C/virtualization.xml:1779(para)
5804
msgid ""
5805
"How to use the <ulink "
5806
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
5807
"Controller</ulink>"
5808
msgstr ""
5809
5810
#: serverguide/C/virtualization.xml:1783(para)
5811
msgid "Controlling eucalyptus services:"
5812
msgstr ""
5813
5814
#: serverguide/C/virtualization.xml:1788(para)
5815
msgid ""
5816
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
5817
msgstr ""
5818
5819
#: serverguide/C/virtualization.xml:1789(para)
5820
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
5821
msgstr ""
5822
5823
#: serverguide/C/virtualization.xml:1792(para)
5824
msgid "Locations of some important files:"
5825
msgstr ""
5826
5827
#: serverguide/C/virtualization.xml:1799(emphasis)
5828
msgid "Log files:"
5829
msgstr ""
5830
5831
#: serverguide/C/virtualization.xml:1802(para)
5832
msgid "/var/log/eucalyptus"
5833
msgstr ""
5834
5835
#: serverguide/C/virtualization.xml:1807(emphasis)
5836
msgid "Configuration files:"
5837
msgstr ""
5838
5839
#: serverguide/C/virtualization.xml:1810(para)
5840
msgid "/etc/eucalyptus"
5841
msgstr ""
5842
5843
#: serverguide/C/virtualization.xml:1815(emphasis)
5844
msgid "Database:"
5845
msgstr ""
5846
5847
#: serverguide/C/virtualization.xml:1818(para)
5848
msgid "/var/lib/eucalyptus/db"
5849
msgstr ""
5850
5851
#: serverguide/C/virtualization.xml:1823(emphasis)
5852
msgid "Keys:"
5853
msgstr ""
5854
5855
#: serverguide/C/virtualization.xml:1826(para)
5856
msgid "/var/lib/eucalyptus"
5857
msgstr ""
5858
5859
#: serverguide/C/virtualization.xml:1827(para)
5860
msgid "/var/lib/eucalyptus/.ssh"
5861
msgstr ""
5862
5863
#: serverguide/C/virtualization.xml:1833(para)
5864
msgid ""
5865
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
5866
"running the client tools."
5867
msgstr ""
5868
5869
#: serverguide/C/virtualization.xml:1844(para)
5870
msgid ""
5871
"For information on loading instances see the <ulink "
5872
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
5873
"page."
5874
msgstr ""
5875
5876
#: serverguide/C/virtualization.xml:1849(para)
5877
msgid ""
5878
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
5879
"documentation, downloads)</ulink>."
5880
msgstr ""
5881
5882
#: serverguide/C/virtualization.xml:1854(para)
5883
msgid ""
5884
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
5885
"(bugs, code)</ulink>."
5886
msgstr ""
5887
5888
#: serverguide/C/virtualization.xml:1859(para)
5889
msgid ""
5890
"<ulink "
5891
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
5892
"ptus Troubleshooting (1.5)</ulink>."
5893
msgstr ""
5894
5895
#: serverguide/C/virtualization.xml:1864(para)
5896
msgid ""
5897
"<ulink url=\"http://support.rightscale.com/2._References/02-"
5898
"Cloud_Infrastructures/Eucalyptus/03-"
5899
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
5900
"RightScale</ulink>."
5901
msgstr ""
5902
5903
#: serverguide/C/virtualization.xml:1870(para)
5904
msgid ""
5905
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
5906
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
5907
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
5908
msgstr ""
5909
5910
#: serverguide/C/virtualization.xml:1879(title)
5911
msgid "Glossary"
5912
msgstr ""
5913
5914
#: serverguide/C/virtualization.xml:1881(para)
5915
msgid ""
5916
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
5917
"unfamiliar to some readers. This page is intended to provide a glossary of "
5918
"such terms and acronyms."
5919
msgstr ""
5920
5921
#: serverguide/C/virtualization.xml:1888(para)
5922
msgid ""
5923
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
5924
"computing resources through virtual machines, provisioned and recollected "
5925
"dynamically."
5926
msgstr ""
5927
5928
#: serverguide/C/virtualization.xml:1894(para)
5929
msgid ""
5930
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
5931
"provides the web UI (an https server on port 8443), and implements the "
5932
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
5933
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
5934
"cloud</application> package."
5935
msgstr ""
5936
5937
#: serverguide/C/virtualization.xml:1901(para)
5938
msgid ""
5939
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
5940
"Cluster Controller. There can be more than one Cluster in an installation of "
5941
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
5942
"floor2, floor2)."
5943
msgstr ""
5944
5945
#: serverguide/C/virtualization.xml:1907(para)
5946
msgid ""
5947
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
5948
"manages collections of node resources. This service is provided by the "
5949
"Ubuntu <application>eucalyptus-cc</application> package."
5950
msgstr ""
5951
5952
#: serverguide/C/virtualization.xml:1913(para)
5953
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
5954
msgstr ""
5955
5956
#: serverguide/C/virtualization.xml:1918(para)
5957
msgid ""
5958
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
5959
"pay-by-the-gigabyte public cloud computing offering."
5960
msgstr ""
5961
5962
#: serverguide/C/virtualization.xml:1923(para)
5963
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
5964
msgstr ""
5965
5966
#: serverguide/C/virtualization.xml:1928(para)
5967
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
5968
msgstr ""
5969
5970
#: serverguide/C/virtualization.xml:1933(para)
5971
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
5972
msgstr ""
5973
5974
#: serverguide/C/virtualization.xml:1938(para)
5975
msgid ""
5976
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
5977
"Linking Your Programs To Useful Systems. An open source project originally "
5978
"from the University of California at Santa Barbara, now supported by "
5979
"Eucalyptus Systems, a Canonical Partner."
5980
msgstr ""
5981
5982
#: serverguide/C/virtualization.xml:1945(para)
5983
msgid ""
5984
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
5985
"the high level Eucalyptus components (cloud, walrus, storage controller, "
5986
"cluster controller)."
5987
msgstr ""
5988
5989
#: serverguide/C/virtualization.xml:1951(para)
5990
msgid ""
5991
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
5992
"running virtual machines, running a node controller. Within Ubuntu, this "
5993
"generally means that the CPU has VT extensions, and can run the KVM "
5994
"hypervisor."
5995
msgstr ""
5996
5997
#: serverguide/C/virtualization.xml:1957(para)
5998
msgid ""
5999
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
6000
"on nodes which host the virtual machines that comprise the cloud. This "
6001
"service is provided by the Ubuntu package <application>eucalyptus-"
6002
"nc</application>."
6003
msgstr ""
6004
6005
#: serverguide/C/virtualization.xml:1963(para)
6006
msgid ""
6007
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6008
"gigabyte persistent storage solution for EC2."
6009
msgstr ""
6010
6011
#: serverguide/C/virtualization.xml:1968(para)
6012
msgid ""
6013
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6014
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6015
"installation can have its own Storage Controller. This component is provided "
6016
"by the <application>eucalyptus-sc</application> package."
6017
msgstr ""
6018
6019
#: serverguide/C/virtualization.xml:1975(para)
6020
msgid ""
6021
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6022
"solution, based on Eucalyptus."
6023
msgstr ""
6024
6025
#: serverguide/C/virtualization.xml:1980(para)
6026
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6027
msgstr ""
6028
6029
#: serverguide/C/virtualization.xml:1985(para)
6030
msgid ""
6031
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6032
"some modern CPUs, allowing for accelerated virtual machine hosting."
6033
msgstr ""
6034
6035
#: serverguide/C/virtualization.xml:1990(para)
6036
msgid ""
6037
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6038
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6039
"put/get abstractions."
6040
msgstr ""
6041
6042
#: serverguide/C/virtualization.xml:2000(title)
6043
msgid "OpenNebula"
6044
msgstr ""
6045
6046
#: serverguide/C/virtualization.xml:2002(para)
6047
msgid ""
6048
"<application>OpenNebula</application> allows virtual machines to be placed "
6049
"and re-placed dynamically on a pool of physical resources. This allows a "
6050
"virtual machine to be hosted from any location available."
6051
msgstr ""
6052
6053
#: serverguide/C/virtualization.xml:2007(para)
6054
msgid ""
6055
"This section will detail configuring an OpenNebula cluster using three "
6056
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6057
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6058
"also need a bridge configured to allow the virtual machines access to the "
6059
"local network. For details see <xref linkend=\"bridging\"/>."
6060
msgstr ""
6061
6062
#: serverguide/C/virtualization.xml:2016(para)
6063
msgid "First, from a terminal on the Front-End enter:"
6064
msgstr ""
6065
6066
#: serverguide/C/virtualization.xml:2021(command)
6067
msgid "sudo apt-get install opennebula"
6068
msgstr ""
6069
6070
#: serverguide/C/virtualization.xml:2024(para)
6071
msgid "On each Compute Node install:"
6072
msgstr ""
6073
6074
#: serverguide/C/virtualization.xml:2029(command)
6075
msgid "sudo apt-get install opennebula-node"
6076
msgstr ""
6077
6078
#: serverguide/C/virtualization.xml:2032(para)
6079
msgid ""
6080
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6081
"to have a password. On each machine execute:"
6082
msgstr ""
6083
6084
#: serverguide/C/virtualization.xml:2037(command)
6085
msgid "sudo passwd oneadmin"
6086
msgstr ""
6087
6088
#: serverguide/C/virtualization.xml:2040(para)
6089
msgid ""
6090
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6091
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6092
msgstr ""
6093
6094
#: serverguide/C/virtualization.xml:2045(command)
6095
msgid ""
6096
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6097
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6098
msgstr ""
6099
6100
#: serverguide/C/virtualization.xml:2046(command)
6101
msgid ""
6102
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6103
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6104
msgstr ""
6105
6106
#: serverguide/C/virtualization.xml:2047(command)
6107
msgid ""
6108
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6109
"/var/lib/one/.ssh/authorized_keys\""
6110
msgstr ""
6111
6112
#: serverguide/C/virtualization.xml:2050(para)
6113
msgid ""
6114
"The SSH key for the Compute Nodes needs to be added to the "
6115
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6116
"accomplish this <application>ssh</application> to each Compute Node as a "
6117
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6118
"session, and execute the following to copy the SSH key from "
6119
"<filename>~/.ssh/known_hosts</filename> to "
6120
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6121
msgstr ""
6122
6123
#: serverguide/C/virtualization.xml:2057(command)
6124
msgid ""
6125
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6126
"/etc/ssh/ssh_known_hosts\""
6127
msgstr ""
6128
6129
#: serverguide/C/virtualization.xml:2058(command)
6130
msgid ""
6131
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6132
"/etc/ssh/ssh_known_hosts\""
6133
msgstr ""
6134
6135
#: serverguide/C/virtualization.xml:2062(para)
6136
msgid ""
6137
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6138
"appropriate host names."
6139
msgstr ""
6140
6141
#: serverguide/C/virtualization.xml:2067(para)
6142
msgid ""
6143
"This allows the <emphasis>oneadmin</emphasis> to use "
6144
"<application>scp</application>, without a password or manual intervention, "
6145
"to deploy an image to the Compute Nodes."
6146
msgstr ""
6147
6148
#: serverguide/C/virtualization.xml:2072(para)
6149
msgid ""
6150
"On the Front-End create a directory to store the VM images, giving the "
6151
"<emphasis>oneadmin</emphasis> user access to the directory:"
6152
msgstr ""
6153
6154
#: serverguide/C/virtualization.xml:2077(command)
6155
msgid "sudo mkdir /var/lib/one/images"
6156
msgstr ""
6157
6158
#: serverguide/C/virtualization.xml:2078(command)
6159
msgid "sudo chown oneadmin /var/lib/one/images/"
6160
msgstr ""
6161
6162
#: serverguide/C/virtualization.xml:2081(para)
6163
msgid ""
6164
"Finally, copy a virtual machine disk file into "
6165
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6166
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6167
"and-vmbuilder\"/> for details."
6168
msgstr ""
6169
6170
#: serverguide/C/virtualization.xml:2090(para)
6171
msgid ""
6172
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6173
"and virtual machines added to the cluster."
6174
msgstr ""
6175
6176
#: serverguide/C/virtualization.xml:2094(para)
6177
msgid "From a terminal prompt enter:"
6178
msgstr ""
6179
6180
#: serverguide/C/virtualization.xml:2099(command)
6181
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6182
msgstr ""
6183
6184
#: serverguide/C/virtualization.xml:2100(command)
6185
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6186
msgstr ""
6187
6188
#: serverguide/C/virtualization.xml:2103(para)
6189
msgid ""
6190
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6191
"<filename>vnet01.template</filename>:"
6192
msgstr ""
6193
6194
#: serverguide/C/virtualization.xml:2107(programlisting)
6195
#, no-wrap
6196
msgid ""
6197
"\n"
6198
"NAME = \"LAN\"\n"
6199
"TYPE = RANGED\n"
6200
"BRIDGE = br0\n"
6201
"NETWORK_SIZE = C\n"
6202
"NETWORK_ADDRESS = 192.168.0.0\n"
6203
msgstr ""
6204
6205
#: serverguide/C/virtualization.xml:2116(para)
6206
msgid ""
6207
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6208
msgstr ""
6209
6210
#: serverguide/C/virtualization.xml:2121(para)
6211
msgid ""
6212
"Using the <application>onevnet</application> utility, add the virtual "
6213
"network to OpenNebula:"
6214
msgstr ""
6215
6216
#: serverguide/C/virtualization.xml:2126(command)
6217
msgid "onevnet create vnet01.template"
6218
msgstr ""
6219
6220
#: serverguide/C/virtualization.xml:2129(para)
6221
msgid ""
6222
"Now create a <emphasis>VM Template</emphasis> file named "
6223
"<filename>vm01.template</filename>:"
6224
msgstr ""
6225
6226
#: serverguide/C/virtualization.xml:2133(programlisting)
6227
#, no-wrap
6228
msgid ""
6229
"\n"
6230
"NAME = vm01\n"
6231
"CPU = 0.5\n"
6232
"MEMORY = 512\n"
6233
"\n"
6234
"OS = [ BOOT = hd ]\n"
6235
"\n"
6236
"DISK = [\n"
6237
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6238
" target = \"hda\",\n"
6239
" readonly = \"no\" ]\n"
6240
"\n"
6241
"NIC = [ NETWORK=\"LAN\" ]\n"
6242
"\n"
6243
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6244
msgstr ""
6245
6246
#: serverguide/C/virtualization.xml:2150(para)
6247
msgid "Start the virtual machine using <application>onevm</application>:"
6248
msgstr ""
6249
6250
#: serverguide/C/virtualization.xml:2155(command)
6251
msgid "onevm submit vm01.template"
6252
msgstr ""
6253
6254
#: serverguide/C/virtualization.xml:2158(para)
6255
msgid ""
6256
"Use the <application>onevm list</application> option to view information "
6257
"about virtual machines. Also, the <application>onevm show vm01</application> "
6258
"option will display more details about a specific virtual machine."
6259
msgstr ""
6260
6261
#: serverguide/C/virtualization.xml:2169(para)
6262
msgid ""
6263
"See the <ulink "
6264
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6265
"> for more information."
6266
msgstr ""
6267
6268
#: serverguide/C/virtualization.xml:2174(para)
6269
msgid ""
6270
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6271
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6272
"url=\"http://freenode.net\">Freenode</ulink>."
6273
msgstr ""
6274
6275
#: serverguide/C/virtualization.xml:2180(para)
6276
msgid ""
6277
"Also, the <ulink "
6278
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6279
"Wiki</ulink> page has more details."
6280
msgstr ""
6281
6282
#: serverguide/C/vcs.xml:13(title)
6283
msgid "Version Control System"
6284
msgstr ""
6285
6286
#: serverguide/C/vcs.xml:14(para)
6287
msgid ""
6288
"Version control is the art of managing changes to information. It has long "
6289
"been a critical tool for programmers, who typically spend their time making "
6290
"small changes to software and then undoing those changes the next day. But "
6291
"the usefulness of version control software extends far beyond the bounds of "
6292
"the software development world. Anywhere you can find people using computers "
6293
"to manage information that changes often, there is room for version control."
6294
msgstr ""
6295
6296
#: serverguide/C/vcs.xml:17(title)
6297
msgid "Bazaar"
6298
msgstr ""
6299
6300
#: serverguide/C/vcs.xml:18(para)
6301
msgid ""
6302
"Bazaar is a new version control system sponsored by Canonical, the "
6303
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6304
"support a central repository model, Bazaar also supports "
6305
"<emphasis>distributed version control</emphasis>, giving people the ability "
6306
"to collaborate more efficiently. In particular, Bazaar is designed to "
6307
"maximize the level of community participation in open source projects."
6308
msgstr ""
6309
6310
#: serverguide/C/vcs.xml:29(para)
6311
msgid ""
6312
"At a terminal prompt, enter the following command to install "
6313
"<application>bzr</application>: <screen>\n"
6314
"<command>sudo apt-get install bzr</command>\n"
6315
"</screen>"
6316
msgstr ""
6317
6318
#: serverguide/C/vcs.xml:40(para)
6319
msgid ""
6320
"To introduce yourself to <application>bzr</application>, use the "
6321
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6322
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6323
"</screen>"
6324
msgstr ""
6325
6326
#: serverguide/C/vcs.xml:49(title)
6327
msgid "Learning Bazaar"
6328
msgstr ""
6329
6330
#: serverguide/C/vcs.xml:50(para)
6331
msgid ""
6332
"Bazaar comes with bundled documentation installed into "
6333
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6334
"is a good place to start. The <application>bzr</application> command also "
6335
"comes with built-in help: <screen>\n"
6336
"<command>$ bzr help</command>\n"
6337
"</screen>"
6338
msgstr ""
6339
6340
#: serverguide/C/vcs.xml:60(para)
6341
msgid ""
6342
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6343
"<command>$ bzr help foo</command>\n"
6344
"</screen>"
6345
msgstr ""
6346
6347
#: serverguide/C/vcs.xml:68(title)
6348
msgid "Launchpad Integration"
6349
msgstr ""
6350
6351
#: serverguide/C/vcs.xml:69(para)
6352
msgid ""
6353
"While highly useful as a stand-alone system, Bazaar has good, optional "
6354
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6355
"the collaborative development system used by Canonical and the broader open "
6356
"source community to manage and extend Ubuntu itself. For information on how "
6357
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6358
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6359
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6360
msgstr ""
6361
6362
#: serverguide/C/vcs.xml:81(title)
6363
msgid "Subversion"
6364
msgstr ""
6365
6366
#: serverguide/C/vcs.xml:82(para)
6367
msgid ""
6368
"Subversion is an open source version control system. Using Subversion, you "
6369
"can record the history of source files and documents. It manages files and "
6370
"directories over time. A tree of files is placed into a central repository. "
6371
"The repository is much like an ordinary file server, except that it "
6372
"remembers every change ever made to files and directories."
6373
msgstr ""
6374
6375
#: serverguide/C/vcs.xml:87(para)
6376
msgid ""
6377
"To access Subversion repository using the HTTP protocol, you must install "
6378
"and configure a web server. Apache2 is proven to work with Subversion. "
6379
"Please refer to the HTTP subsection in the Apache2 section to install and "
6380
"configure Apache2. To access the Subversion repository using the HTTPS "
6381
"protocol, you must install and configure a digital certificate in your "
6382
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6383
"section to install and configure the digital certificate."
6384
msgstr ""
6385
6386
#: serverguide/C/vcs.xml:96(para)
6387
msgid ""
6388
"To install Subversion, run the following command from a terminal prompt:"
6389
msgstr ""
6390
6391
#: serverguide/C/vcs.xml:101(command)
6392
msgid "sudo apt-get install subversion libapache2-svn"
6393
msgstr ""
6394
6395
#: serverguide/C/vcs.xml:108(para)
6396
msgid ""
6397
"This step assumes you have installed above mentioned packages on your "
6398
"system. This section explains how to create a Subversion repository and "
6399
"access the project."
6400
msgstr ""
6401
6402
#: serverguide/C/vcs.xml:111(title)
6403
msgid "Create Subversion Repository"
6404
msgstr ""
6405
6406
#: serverguide/C/vcs.xml:112(para)
6407
msgid ""
6408
"The Subversion repository can be created using the following command from a "
6409
"terminal prompt:"
6410
msgstr ""
6411
6412
#: serverguide/C/vcs.xml:116(command)
6413
msgid "svnadmin create /path/to/repos/project"
6414
msgstr ""
6415
6416
#: serverguide/C/vcs.xml:121(title)
6417
msgid "Importing Files"
6418
msgstr ""
6419
6420
#: serverguide/C/vcs.xml:122(para)
6421
msgid ""
6422
"Once you create the repository you can <emphasis>import</emphasis> files "
6423
"into the repository. To import a directory, enter the following from a "
6424
"terminal prompt: <screen>\n"
6425
"<command>svn import /path/to/import/directory "
6426
"file:///path/to/repos/project</command>\n"
6427
"</screen>"
6428
msgstr ""
6429
6430
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6431
msgid "Access Methods"
6432
msgstr ""
6433
6434
#: serverguide/C/vcs.xml:135(para)
6435
msgid ""
6436
"Subversion repositories can be accessed (checked out) through many different "
6437
"methods --on local disk, or through various network protocols. A repository "
6438
"location, however, is always a URL. The table describes how different URL "
6439
"schemes map to the available access methods."
6440
msgstr ""
6441
6442
#: serverguide/C/vcs.xml:146(para)
6443
msgid "Schema"
6444
msgstr ""
6445
6446
#: serverguide/C/vcs.xml:147(para)
6447
msgid "Access Method"
6448
msgstr ""
6449
6450
#: serverguide/C/vcs.xml:152(para)
6451
msgid "file://"
6452
msgstr ""
6453
6454
#: serverguide/C/vcs.xml:153(para)
6455
msgid "direct repository access (on local disk)"
6456
msgstr ""
6457
6458
#: serverguide/C/vcs.xml:156(para)
6459
msgid "http://"
6460
msgstr ""
6461
6462
#: serverguide/C/vcs.xml:157(para)
6463
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6464
msgstr ""
6465
6466
#: serverguide/C/vcs.xml:160(para)
6467
msgid "https://"
6468
msgstr ""
6469
6470
#: serverguide/C/vcs.xml:161(para)
6471
msgid "Same as http://, but with SSL encryption"
6472
msgstr ""
6473
6474
#: serverguide/C/vcs.xml:164(para)
6475
msgid "svn://"
6476
msgstr ""
6477
6478
#: serverguide/C/vcs.xml:165(para)
6479
msgid "Access via custom protocol to an svnserve server"
6480
msgstr ""
6481
6482
#: serverguide/C/vcs.xml:168(para)
6483
msgid "svn+ssh://"
6484
msgstr ""
6485
6486
#: serverguide/C/vcs.xml:169(para)
6487
msgid "Same as svn://, but through an SSH tunnel"
6488
msgstr ""
6489
6490
#: serverguide/C/vcs.xml:175(para)
6491
msgid ""
6492
"In this section, we will see how to configure Subversion for all these "
6493
"access methods. Here, we cover the basics. For more advanced usage details, "
6494
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6495
msgstr ""
6496
6497
#: serverguide/C/vcs.xml:182(title)
6498
msgid "Direct repository access (file://)"
6499
msgstr ""
6500
6501
#: serverguide/C/vcs.xml:183(para)
6502
msgid ""
6503
"This is the simplest of all access methods. It does not require any "
6504
"Subversion server process to be running. This access method is used to "
6505
"access Subversion from the same machine. The syntax of the command, entered "
6506
"at a terminal prompt, is as follows:"
6507
msgstr ""
6508
6509
#: serverguide/C/vcs.xml:190(command)
6510
msgid "svn co file:///path/to/repos/project"
6511
msgstr ""
6512
6513
#: serverguide/C/vcs.xml:193(para)
6514
msgid "or"
6515
msgstr ""
6516
6517
#: serverguide/C/vcs.xml:196(command)
6518
msgid "svn co file://localhost/path/to/repos/project"
6519
msgstr ""
6520
6521
#: serverguide/C/vcs.xml:200(para)
6522
msgid ""
6523
"If you do not specify the hostname, there are three forward slashes (///) -- "
6524
"two for the protocol (file, in this case) plus the leading slash in the "
6525
"path. If you specify the hostname, you must use two forward slashes (//)."
6526
msgstr ""
6527
6528
#: serverguide/C/vcs.xml:202(para)
6529
msgid ""
6530
"The repository permissions depend on filesystem permissions. If the user has "
6531
"read/write permission, he can checkout from and commit to the repository."
6532
msgstr ""
6533
6534
#: serverguide/C/vcs.xml:205(title)
6535
msgid "Access via WebDAV protocol (http://)"
6536
msgstr ""
6537
6538
#: serverguide/C/vcs.xml:206(para)
6539
msgid ""
6540
"To access the Subversion repository via WebDAV protocol, you must configure "
6541
"your Apache 2 web server. Add the following snippet between the "
6542
"<emphasis><VirtualHost></emphasis> and "
6543
"<emphasis></VirtualHost></emphasis> elements in "
6544
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6545
"VirtualHost file:"
6546
msgstr ""
6547
6548
#: serverguide/C/vcs.xml:212(programlisting)
6549
#, no-wrap
6550
msgid ""
6551
"\n"
6552
" <Location /svn>\n"
6553
" DAV svn\n"
6554
" SVNPath /home/svn\n"
6555
" AuthType Basic\n"
6556
" AuthName \"Your repository name\"\n"
6557
" AuthUserFile /etc/subversion/passwd\n"
6558
" Require valid-user\n"
6559
" </Location> \n"
6560
msgstr ""
6561
6562
#: serverguide/C/vcs.xml:223(para)
6563
msgid ""
6564
"The above configuration snippet assumes that Subversion repositories are "
6565
"created under <filename>/home/svn/</filename> directory using "
6566
"<command>svnadmin</command> command. They can be accessible using "
6567
"<command>http://hostname/svn/repos_name</command> url."
6568
msgstr ""
6569
6570
#: serverguide/C/vcs.xml:229(para)
6571
msgid ""
6572
"To import or commit files to your Subversion repository over HTTP, the "
6573
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6574
"HTTP user is <command>www-data</command>. To change the ownership of the "
6575
"repository files enter the following command from terminal prompt:"
6576
msgstr ""
6577
6578
#: serverguide/C/vcs.xml:238(command)
6579
msgid "sudo chown -R www-data:www-data /path/to/repos"
6580
msgstr ""
6581
6582
#: serverguide/C/vcs.xml:241(para)
6583
msgid ""
6584
"By changing the ownership of repository as <command>www-data</command> you "
6585
"will not be able to import or commit files into the repository by running "
6586
"<command>svn import file:///</command> command as any user other than "
6587
"<command>www-data</command>."
6588
msgstr ""
6589
6590
#: serverguide/C/vcs.xml:250(para)
6591
msgid ""
6592
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6593
"that will contain user authentication details. To create a file issue the "
6594
"following command at a command prompt (which will create the file and add "
6595
"the first user):"
6596
msgstr ""
6597
6598
#: serverguide/C/vcs.xml:256(command)
6599
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6600
msgstr ""
6601
6602
#: serverguide/C/vcs.xml:259(para)
6603
msgid ""
6604
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6605
"option replaces the old file. Instead use this form:"
6606
msgstr ""
6607
6608
#: serverguide/C/vcs.xml:264(command)
6609
msgid "sudo htpasswd /etc/subversion/password user_name"
6610
msgstr ""
6611
6612
#: serverguide/C/vcs.xml:268(para)
6613
msgid ""
6614
"This command will prompt you to enter the password. Once you enter the "
6615
"password, the user is added. Now, to access the repository you can run the "
6616
"following command:"
6617
msgstr ""
6618
6619
#: serverguide/C/vcs.xml:269(command)
6620
msgid "svn co http://servername/svn"
6621
msgstr ""
6622
6623
#: serverguide/C/vcs.xml:271(para)
6624
msgid ""
6625
"The password is transmitted as plain text. If you are worried about password "
6626
"snooping, you are advised to use SSL encryption. For details, please refer "
6627
"next section."
6628
msgstr ""
6629
6630
#: serverguide/C/vcs.xml:277(title)
6631
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6632
msgstr ""
6633
6634
#: serverguide/C/vcs.xml:278(para)
6635
msgid ""
6636
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6637
"(https://) is similar to http:// except that you must install and configure "
6638
"the digital certificate in your Apache2 web server. To use SSL with "
6639
"Subversion add the above Apache2 configuration to "
6640
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6641
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6642
"configuration\"/>."
6643
msgstr ""
6644
6645
#: serverguide/C/vcs.xml:287(para)
6646
msgid ""
6647
"You can install a digital certificate issued by a signing authority. "
6648
"Alternatively, you can install your own self-signed certificate."
6649
msgstr ""
6650
6651
#: serverguide/C/vcs.xml:292(para)
6652
msgid ""
6653
"This step assumes you have installed and configured a digital certificate in "
6654
"your Apache 2 web server. Now, to access the Subversion repository, please "
6655
"refer to the above section! The access methods are exactly the same, except "
6656
"the protocol. You must use https:// to access the Subversion repository."
6657
msgstr ""
6658
6659
#: serverguide/C/vcs.xml:302(title)
6660
msgid "Access via custom protocol (svn://)"
6661
msgstr ""
6662
6663
#: serverguide/C/vcs.xml:303(para)
6664
msgid ""
6665
"Once the Subversion repository is created, you can configure the access "
6666
"control. You can edit the <filename> "
6667
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6668
"access control. For example, to set up authentication, you can uncomment the "
6669
"following lines in the configuration file:"
6670
msgstr ""
6671
6672
#: serverguide/C/vcs.xml:310(programlisting)
6673
#, no-wrap
6674
msgid ""
6675
"# [general]\n"
6676
"# password-db = passwd"
6677
msgstr ""
6678
6679
#: serverguide/C/vcs.xml:313(para)
6680
msgid ""
6681
"After uncommenting the above lines, you can maintain the user list in the "
6682
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6683
"directory and add the new user. The syntax is as follows:"
6684
msgstr ""
6685
6686
#: serverguide/C/vcs.xml:319(programlisting)
6687
#, no-wrap
6688
msgid "username = password"
6689
msgstr ""
6690
6691
#: serverguide/C/vcs.xml:320(para)
6692
msgid "For more details, please refer to the file."
6693
msgstr ""
6694
6695
#: serverguide/C/vcs.xml:324(para)
6696
msgid ""
6697
"Now, to access Subversion via the svn:// custom protocol, either from the "
6698
"same machine or a different machine, you can run svnserver using svnserve "
6699
"command. The syntax is as follows:"
6700
msgstr ""
6701
6702
#: serverguide/C/vcs.xml:329(programlisting)
6703
#, no-wrap
6704
msgid ""
6705
"$ svnserve -d --foreground -r /path/to/repos\n"
6706
"# -d -- daemon mode\n"
6707
"# --foreground -- run in foreground (useful for debugging)\n"
6708
"# -r -- root of directory to serve\n"
6709
"\n"
6710
"For more usage details, please refer to:\n"
6711
"$ svnserve --help"
6712
msgstr ""
6713
6714
#: serverguide/C/vcs.xml:337(para)
6715
msgid ""
6716
"Once you run this command, Subversion starts listening on default port "
6717
"(3690). To access the project repository, you must run the following command "
6718
"from a terminal prompt:"
6719
msgstr ""
6720
6721
#: serverguide/C/vcs.xml:340(command)
6722
msgid "svn co svn://hostname/project project --username user_name"
6723
msgstr ""
6724
6725
#: serverguide/C/vcs.xml:343(para)
6726
msgid ""
6727
"Based on server configuration, it prompts for password. Once you are "
6728
"authenticated, it checks out the code from Subversion repository. To "
6729
"synchronize the project repository with the local copy, you can run the "
6730
"<command>update</command> sub-command. The syntax of the command, entered at "
6731
"a terminal prompt, is as follows:"
6732
msgstr ""
6733
6734
#: serverguide/C/vcs.xml:351(command)
6735
msgid "cd project_dir ; svn update"
6736
msgstr ""
6737
6738
#: serverguide/C/vcs.xml:354(para)
6739
msgid ""
6740
"For more details about using each Subversion sub-command, you can refer to "
6741
"the manual. For example, to learn more about the co (checkout) command, "
6742
"please run the following command from a terminal prompt:"
6743
msgstr ""
6744
6745
#: serverguide/C/vcs.xml:358(command)
6746
msgid "svn co help"
6747
msgstr ""
6748
6749
#: serverguide/C/vcs.xml:362(title)
6750
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
6751
msgstr ""
6752
6753
#: serverguide/C/vcs.xml:363(para)
6754
msgid ""
6755
"The configuration and server process is same as in the svn:// method. For "
6756
"details, please refer to the above section. This step assumes you have "
6757
"followed the above step and started the Subversion server using "
6758
"<application>svnserve</application> command."
6759
msgstr ""
6760
6761
#: serverguide/C/vcs.xml:369(para)
6762
msgid ""
6763
"It is also assumed that the ssh server is running on that machine and that "
6764
"it is allowing incoming connections. To confirm, please try to login to that "
6765
"machine using ssh. If you can login, everything is perfect. If you cannot "
6766
"login, please address it before continuing further."
6767
msgstr ""
6768
6769
#: serverguide/C/vcs.xml:375(para)
6770
msgid ""
6771
"The svn+ssh:// protocol is used to access the Subversion repository using "
6772
"SSL encryption. The data transfer is encrypted using this method. To access "
6773
"the project repository (for example with a checkout), you must use the "
6774
"following command syntax:"
6775
msgstr ""
6776
6777
#: serverguide/C/vcs.xml:382(command)
6778
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
6779
msgstr ""
6780
6781
#: serverguide/C/vcs.xml:386(para)
6782
msgid ""
6783
"You must use the full path (/path/to/repos/project) to access the Subversion "
6784
"repository using this access method."
6785
msgstr ""
6786
6787
#: serverguide/C/vcs.xml:389(para)
6788
msgid ""
6789
"Based on server configuration, it prompts for password. You must enter the "
6790
"password you use to login via ssh. Once you are authenticated, it checks out "
6791
"the code from the Subversion repository."
6792
msgstr ""
6793
6794
#: serverguide/C/vcs.xml:399(title)
6795
msgid "CVS Server"
6796
msgstr ""
6797
6798
#: serverguide/C/vcs.xml:400(para)
6799
msgid ""
6800
"CVS is a version control system. You can use it to record the history of "
6801
"source files."
6802
msgstr ""
6803
6804
#: serverguide/C/vcs.xml:406(para)
6805
msgid ""
6806
"To install <application>CVS</application>, run the following command from a "
6807
"terminal prompt: <screen>\n"
6808
"<command>sudo apt-get install cvs</command>\n"
6809
"</screen> After you install <application>cvs</application>, you should "
6810
"install <application>xinetd</application> to start/stop the cvs server. At "
6811
"the prompt, enter the following command to install "
6812
"<application>xinetd</application>: <screen>\n"
6813
"<command>sudo apt-get install xinetd</command>\n"
6814
"</screen>"
6815
msgstr ""
6816
6817
#: serverguide/C/vcs.xml:439(programlisting)
6818
#, no-wrap
6819
msgid ""
6820
"\n"
6821
"service cvspserver\n"
6822
"{\n"
6823
" port = 2401\n"
6824
" socket_type = stream\n"
6825
" protocol = tcp\n"
6826
" user = root\n"
6827
" wait = no\n"
6828
" type = UNLISTED\n"
6829
" server = /usr/bin/cvs\n"
6830
" server_args = -f --allow-root /var/lib/cvs pserver\n"
6831
" disable = no\n"
6832
"}\n"
6833
msgstr ""
6834
6835
#: serverguide/C/vcs.xml:455(para)
6836
msgid ""
6837
"Be sure to edit the repository if you have changed the default repository "
6838
"(<application>/var/lib/cvs</application>) directory."
6839
msgstr ""
6840
6841
#: serverguide/C/vcs.xml:424(para)
6842
msgid ""
6843
"Once you install cvs, the repository will be automatically initialized. By "
6844
"default, the repository resides under the "
6845
"<application>/var/lib/cvs</application> directory. You can change this path "
6846
"by running following command: <screen>\n"
6847
"<command>cvs -d /your/new/cvs/repo init</command>\n"
6848
"</screen> Once the initial repository is set up, you can configure "
6849
"<application>xinetd</application> to start the CVS server. You can copy the "
6850
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
6851
"<placeholder-1/><placeholder-2/> Once you have configured "
6852
"<application>xinetd</application> you can start the cvs server by running "
6853
"following command: <screen>\n"
6854
"<command>sudo /etc/init.d/xinetd restart</command>\n"
6855
"</screen>"
6856
msgstr ""
6857
6858
#: serverguide/C/vcs.xml:468(para)
6859
msgid ""
6860
"You can confirm that the CVS server is running by issuing the following "
6861
"command:"
6862
msgstr ""
6863
6864
#: serverguide/C/vcs.xml:475(command)
6865
msgid "sudo netstat -tap | grep cvs"
6866
msgstr ""
6867
6868
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
6869
msgid ""
6870
"When you run this command, you should see the following line or something "
6871
"similar:"
6872
msgstr ""
6873
6874
#: serverguide/C/vcs.xml:484(programlisting)
6875
#, no-wrap
6876
msgid ""
6877
"\n"
6878
"tcp 0 0 *:cvspserver *:* LISTEN \n"
6879
msgstr ""
6880
6881
#: serverguide/C/vcs.xml:488(para)
6882
msgid ""
6883
"From here you can continue to add users, add new projects, and manage the "
6884
"CVS server."
6885
msgstr ""
6886
6887
#: serverguide/C/vcs.xml:493(para)
6888
msgid ""
6889
"CVS allows the user to add users independently of the underlying OS "
6890
"installation. Probably the easiest way is to use the Linux Users for CVS, "
6891
"although it has potential security issues. Please refer to the CVS manual "
6892
"for details."
6893
msgstr ""
6894
6895
#: serverguide/C/vcs.xml:503(title)
6896
msgid "Add Projects"
6897
msgstr ""
6898
6899
#: serverguide/C/vcs.xml:515(para)
6900
msgid ""
6901
"You can use the CVSROOT environment variable to store the CVS root "
6902
"directory. Once you export the CVSROOT environment variable, you can avoid "
6903
"using -d option in the above cvs command."
6904
msgstr ""
6905
6906
#: serverguide/C/vcs.xml:527(para)
6907
msgid ""
6908
"When you add a new project, the CVS user you use must have write access to "
6909
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
6910
"the <application>src</application> group has write access to the CVS "
6911
"repository. So, you can add the user to this group, and he can then add and "
6912
"manage projects in the CVS repository."
6913
msgstr ""
6914
6915
#: serverguide/C/vcs.xml:504(para)
6916
msgid ""
6917
"This section explains how to add new project to the CVS repository. Create "
6918
"the directory and add necessary document and source files to the directory. "
6919
"Now, run the following command to add this project to CVS repository: "
6920
"<screen>\n"
6921
"<command>cd your/project</command>\n"
6922
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
6923
"\"Importing my project to CVS repository\" . new_project start</command>\n"
6924
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
6925
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
6926
"purpose in this context, but since CVS requires them, they must be present. "
6927
"<placeholder-2/>"
6928
msgstr ""
6929
6930
#: serverguide/C/vcs.xml:540(ulink)
6931
msgid "Bazaar Home Page"
6932
msgstr ""
6933
6934
#: serverguide/C/vcs.xml:541(ulink)
6935
msgid "Launchpad"
6936
msgstr ""
6937
6938
#: serverguide/C/vcs.xml:542(ulink)
6939
msgid "Subversion Home Page"
6940
msgstr ""
6941
6942
#: serverguide/C/vcs.xml:543(ulink)
6943
msgid "Subversion Book"
6944
msgstr ""
6945
6946
#: serverguide/C/vcs.xml:545(ulink)
6947
msgid "CVS Manual"
6948
msgstr ""
6949
6950
#: serverguide/C/vcs.xml:546(ulink)
6951
msgid "Easy Bazaar Ubuntu Wiki page"
6952
msgstr ""
6953
6954
#: serverguide/C/vcs.xml:547(ulink)
6955
msgid "Ubuntu Wiki Subversion page"
6956
msgstr ""
6957
6958
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
6959
msgid "Credits and License"
6960
msgstr ""
6961
6962
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
6963
msgid ""
6964
"This document is maintained by the Ubuntu documentation team "
6965
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
6966
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
6967
msgstr ""
6968
6969
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
6970
msgid ""
6971
"This document is made available under the Creative Commons ShareAlike 2.5 "
6972
"License (CC-BY-SA)."
6973
msgstr ""
6974
6975
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
6976
msgid ""
6977
"You are free to modify, extend, and improve the Ubuntu documentation source "
6978
"code under the terms of this license. All derivative works must be released "
6979
"under this license."
6980
msgstr ""
6981
6982
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
6983
msgid ""
6984
"This documentation is distributed in the hope that it will be useful, but "
6985
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
6986
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
6987
msgstr ""
6988
6989
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
6990
msgid ""
6991
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
6992
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
6993
msgstr ""
6994
6995
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
6996
msgid "2008"
6997
msgstr ""
6998
6999
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
7000
msgid "Ubuntu Documentation Project"
7001
msgstr ""
7002
7003
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7004
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7005
msgstr ""
7006
7007
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7008
msgid "The Ubuntu Documentation Project"
7009
msgstr ""
7010
7011
#: serverguide/C/serverguide.xml:17(para)
7012
msgid ""
7013
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7014
"information on how to install and configure various server applications on "
7015
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7016
"guide for configuring and customizing your system."
7017
msgstr ""
7018
7019
#: serverguide/C/security.xml:13(title)
7020
msgid "Security"
7021
msgstr ""
7022
7023
#: serverguide/C/security.xml:14(para)
7024
msgid ""
7025
"Security should always be considered when installing, deploying, and using "
7026
"any type of computer system. Although a fresh installation of Ubuntu is "
7027
"relatively safe for immediate use on the Internet, it is important to have a "
7028
"balanced understanding of your systems security posture based on how it will "
7029
"be used after deployment."
7030
msgstr ""
7031
7032
#: serverguide/C/security.xml:17(para)
7033
msgid ""
7034
"This chapter provides an overview of security related topics as they pertain "
7035
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7036
"to protect your server and network from any number of potential security "
7037
"threats."
7038
msgstr ""
7039
7040
#: serverguide/C/security.xml:21(title)
7041
msgid "User Management"
7042
msgstr ""
7043
7044
#: serverguide/C/security.xml:22(para)
7045
msgid ""
7046
"User management is a critical part of maintaining a secure system. "
7047
"Ineffective user and privilege management often lead many systems into being "
7048
"compromised. Therefore, it is important that you understand how you can "
7049
"protect your server through simple and effective user account management "
7050
"techniques."
7051
msgstr ""
7052
7053
#: serverguide/C/security.xml:26(title)
7054
msgid "Where is root?"
7055
msgstr ""
7056
7057
#: serverguide/C/security.xml:27(para)
7058
msgid ""
7059
"Ubuntu developers made a conscientious decision to disable the "
7060
"administrative root account by default in all Ubuntu installations. This "
7061
"does not mean that the root account has been deleted or that it may not be "
7062
"accessed. It merely has been given a password which matches no possible "
7063
"encrypted value, therefore may not log in directly by itself."
7064
msgstr ""
7065
7066
#: serverguide/C/security.xml:30(para)
7067
msgid ""
7068
"Instead, users are encouraged to make use of a tool by the name of "
7069
"<application>sudo</application> to carry out system administrative duties. "
7070
"<application>Sudo</application> allows an authorized user to temporarily "
7071
"elevate their privileges using their own password instead of having to know "
7072
"the password belonging to the root account. This simple yet effective "
7073
"methodology provides accountability for all user actions, and gives the "
7074
"administrator granular control over which actions a user can perform with "
7075
"said privileges."
7076
msgstr ""
7077
7078
#: serverguide/C/security.xml:35(para)
7079
msgid ""
7080
"If for some reason you wish to enable the root account, simply give it a "
7081
"password:"
7082
msgstr ""
7083
7084
#: serverguide/C/security.xml:39(command)
7085
msgid "sudo passwd"
7086
msgstr ""
7087
7088
#: serverguide/C/security.xml:41(para)
7089
msgid ""
7090
"Sudo will prompt you for your password, and then ask you to supply a new "
7091
"password for root as shown below:"
7092
msgstr ""
7093
7094
#: serverguide/C/security.xml:44(userinput)
7095
#, no-wrap
7096
msgid "(enter your own password)"
7097
msgstr ""
7098
7099
#: serverguide/C/security.xml:45(userinput)
7100
#, no-wrap
7101
msgid "(enter a new password for root)"
7102
msgstr ""
7103
7104
#: serverguide/C/security.xml:46(userinput)
7105
#, no-wrap
7106
msgid "(repeat new password for root)"
7107
msgstr ""
7108
7109
#: serverguide/C/security.xml:44(computeroutput)
7110
#, no-wrap
7111
msgid ""
7112
"[sudo] password for username: <placeholder-1/>\n"
7113
"Enter new UNIX password: <placeholder-2/>\n"
7114
"Retype new UNIX password: <placeholder-3/>\n"
7115
"passwd: password updated successfully"
7116
msgstr ""
7117
7118
#: serverguide/C/security.xml:51(para)
7119
msgid "To disable the root account, use the following passwd syntax:"
7120
msgstr ""
7121
7122
#: serverguide/C/security.xml:55(command)
7123
msgid "sudo passwd -l root"
7124
msgstr ""
7125
7126
#: serverguide/C/security.xml:59(para)
7127
msgid ""
7128
"You should read more on <application>Sudo</application> by checking out it's "
7129
"man page:"
7130
msgstr ""
7131
7132
#: serverguide/C/security.xml:63(command)
7133
msgid "man sudo"
7134
msgstr ""
7135
7136
#: serverguide/C/security.xml:67(para)
7137
msgid ""
7138
"By default, the initial user created by the Ubuntu installer is a member of "
7139
"the group \"admin\" which is added to the file "
7140
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7141
"give any other account full root access through "
7142
"<application>sudo</application>, simply add them to the admin group."
7143
msgstr ""
7144
7145
#: serverguide/C/security.xml:73(title)
7146
msgid "Adding and Deleting Users"
7147
msgstr ""
7148
7149
#: serverguide/C/security.xml:74(para)
7150
msgid ""
7151
"The process for managing local users and groups is straight forward and "
7152
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7153
"other Debian based distributions, encourage the use of the \"adduser\" "
7154
"package for account management."
7155
msgstr ""
7156
7157
#: serverguide/C/security.xml:79(para)
7158
msgid ""
7159
"To add a user account, use the following syntax, and follow the prompts to "
7160
"give the account a password and identifiable characteristics such as a full "
7161
"name, phone number, etc."
7162
msgstr ""
7163
7164
#: serverguide/C/security.xml:83(command)
7165
msgid "sudo adduser username"
7166
msgstr ""
7167
7168
#: serverguide/C/security.xml:87(para)
7169
msgid ""
7170
"To delete a user account and its primary group, use the following syntax:"
7171
msgstr ""
7172
7173
#: serverguide/C/security.xml:91(command)
7174
msgid "sudo deluser username"
7175
msgstr ""
7176
7177
#: serverguide/C/security.xml:93(para)
7178
msgid ""
7179
"Deleting an account does not remove their respective home folder. It is up "
7180
"to you whether or not you wish to delete the folder manually or keep it "
7181
"according to your desired retention policies."
7182
msgstr ""
7183
7184
#: serverguide/C/security.xml:96(para)
7185
msgid ""
7186
"Remember, any user added later on with the same UID/GID as the previous "
7187
"owner will now have access to this folder if you have not taken the "
7188
"necessary precautions."
7189
msgstr ""
7190
7191
#: serverguide/C/security.xml:99(para)
7192
msgid ""
7193
"You may want to change these UID/GID values to something more appropriate, "
7194
"such as the root account, and perhaps even relocate the folder to avoid "
7195
"future conflicts:"
7196
msgstr ""
7197
7198
#: serverguide/C/security.xml:103(command)
7199
msgid "sudo chown -R root:root /home/username/"
7200
msgstr ""
7201
7202
#: serverguide/C/security.xml:104(command)
7203
msgid "sudo mkdir /home/archived_users/"
7204
msgstr ""
7205
7206
#: serverguide/C/security.xml:105(command)
7207
msgid "sudo mv /home/username /home/archived_users/"
7208
msgstr ""
7209
7210
#: serverguide/C/security.xml:109(para)
7211
msgid ""
7212
"To temporarily lock or unlock a user account, use the following syntax, "
7213
"respectively:"
7214
msgstr ""
7215
7216
#: serverguide/C/security.xml:113(command)
7217
msgid "sudo passwd -l username"
7218
msgstr ""
7219
7220
#: serverguide/C/security.xml:114(command)
7221
msgid "sudo passwd -u username"
7222
msgstr ""
7223
7224
#: serverguide/C/security.xml:118(para)
7225
msgid ""
7226
"To add or delete a personalized group, use the following syntax, "
7227
"respectively:"
7228
msgstr ""
7229
7230
#: serverguide/C/security.xml:122(command)
7231
msgid "sudo addgroup groupname"
7232
msgstr ""
7233
7234
#: serverguide/C/security.xml:123(command)
7235
msgid "sudo delgroup groupname"
7236
msgstr ""
7237
7238
#: serverguide/C/security.xml:127(para)
7239
msgid "To add a user to a group, use the following syntax:"
7240
msgstr ""
7241
7242
#: serverguide/C/security.xml:131(command)
7243
msgid "sudo adduser username groupname"
7244
msgstr ""
7245
7246
#: serverguide/C/security.xml:138(title)
7247
msgid "User Profile Security"
7248
msgstr ""
7249
7250
#: serverguide/C/security.xml:139(para)
7251
msgid ""
7252
"When a new user is created, the adduser utility creates a brand new home "
7253
"directory named <filename class=\"directory\">/home/username</filename>, "
7254
"respectively. The default profile is modeled after the contents found in the "
7255
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7256
"includes all profile basics."
7257
msgstr ""
7258
7259
#: serverguide/C/security.xml:142(para)
7260
msgid ""
7261
"If your server will be home to multiple users, you should pay close "
7262
"attention to the user home directory permissions to ensure confidentiality. "
7263
"By default, user home directories in Ubuntu are created with world "
7264
"read/execute permissions. This means that all users can browse and access "
7265
"the contents of other users home directories. This may not be suitable for "
7266
"your environment."
7267
msgstr ""
7268
7269
#: serverguide/C/security.xml:147(para)
7270
msgid ""
7271
"To verify your current users home directory permissions, use the following "
7272
"syntax:"
7273
msgstr ""
7274
7275
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7276
msgid "ls -ld /home/username"
7277
msgstr ""
7278
7279
#: serverguide/C/security.xml:153(para)
7280
msgid ""
7281
"The following output shows that the directory <filename "
7282
"class=\"directory\">/home/username</filename> has world readable permissions:"
7283
msgstr ""
7284
7285
#: serverguide/C/security.xml:156(computeroutput)
7286
#, no-wrap
7287
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7288
msgstr ""
7289
7290
#: serverguide/C/security.xml:160(para)
7291
msgid ""
7292
"You can remove the world readable permissions using the following syntax:"
7293
msgstr ""
7294
7295
#: serverguide/C/security.xml:164(command)
7296
msgid "sudo chmod 0750 /home/username"
7297
msgstr ""
7298
7299
#: serverguide/C/security.xml:167(para)
7300
msgid ""
7301
"Some people tend to use the recursive option (-R) indiscriminately which "
7302
"modifies all child folders and files, but this is not necessary, and may "
7303
"yield other undesirable results. The parent directory alone is sufficient "
7304
"for preventing unauthorized access to anything below the parent."
7305
msgstr ""
7306
7307
#: serverguide/C/security.xml:171(para)
7308
msgid ""
7309
"A much more efficient approach to the matter would be to modify the "
7310
"<application>adduser</application> global default permissions when creating "
7311
"user home folders. Simply edit the file "
7312
"<filename>/etc/adduser.conf</filename> and modify the "
7313
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7314
"new home directories will receive the correct permissions."
7315
msgstr ""
7316
7317
#: serverguide/C/security.xml:174(programlisting)
7318
#, no-wrap
7319
msgid ""
7320
"\n"
7321
"DIR_MODE=0750\n"
7322
msgstr ""
7323
7324
#: serverguide/C/security.xml:179(para)
7325
msgid ""
7326
"After correcting the directory permissions using any of the previously "
7327
"mentioned techniques, verify the results using the following syntax:"
7328
msgstr ""
7329
7330
#: serverguide/C/security.xml:185(para)
7331
msgid ""
7332
"The results below show that world readable permissions have been removed:"
7333
msgstr ""
7334
7335
#: serverguide/C/security.xml:188(computeroutput)
7336
#, no-wrap
7337
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7338
msgstr ""
7339
7340
#: serverguide/C/security.xml:195(title)
7341
msgid "Password Policy"
7342
msgstr ""
7343
7344
#: serverguide/C/security.xml:196(para)
7345
msgid ""
7346
"A strong password policy is one of the most important aspects of your "
7347
"security posture. Many successful security breaches involve simple brute "
7348
"force and dictionary attacks against weak passwords. If you intend to offer "
7349
"any form of remote access involving your local password system, make sure "
7350
"you adequately address minimum password complexity requirements, maximum "
7351
"password lifetimes, and frequent audits of your authentication systems."
7352
msgstr ""
7353
7354
#: serverguide/C/security.xml:200(title)
7355
msgid "Minimum Password Length"
7356
msgstr ""
7357
7358
#: serverguide/C/security.xml:201(para)
7359
msgid ""
7360
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7361
"well as some basic entropy checks. These values are controlled in the file "
7362
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7363
msgstr ""
7364
7365
#: serverguide/C/security.xml:204(programlisting)
7366
#, no-wrap
7367
msgid ""
7368
"\n"
7369
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7370
msgstr ""
7371
7372
#: serverguide/C/security.xml:207(para)
7373
msgid ""
7374
"If you would like to adjust the minimum length to 6 characters, change the "
7375
"appropriate variable to min=6. The modification is outlined below."
7376
msgstr ""
7377
7378
#: serverguide/C/security.xml:210(programlisting)
7379
#, no-wrap
7380
msgid ""
7381
"\n"
7382
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7383
msgstr ""
7384
7385
#: serverguide/C/security.xml:214(para)
7386
msgid ""
7387
"The <varname>max=8</varname> variable does not represent the maximum length "
7388
"of a password. It only means that complexity requirements will not be "
7389
"checked on passwords over 8 characters. You may want to look at the "
7390
"<application>libpam-cracklib</application> package for additional password "
7391
"entropy assistance."
7392
msgstr ""
7393
7394
#: serverguide/C/security.xml:220(title)
7395
msgid "Password Expiration"
7396
msgstr ""
7397
7398
#: serverguide/C/security.xml:221(para)
7399
msgid ""
7400
"When creating user accounts, you should make it a policy to have a minimum "
7401
"and maximum password age forcing users to change their passwords when they "
7402
"expire."
7403
msgstr ""
7404
7405
#: serverguide/C/security.xml:226(para)
7406
msgid ""
7407
"To easily view the current status of a user account, use the following "
7408
"syntax:"
7409
msgstr ""
7410
7411
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7412
msgid "sudo chage -l username"
7413
msgstr ""
7414
7415
#: serverguide/C/security.xml:232(para)
7416
msgid ""
7417
"The output below shows interesting facts about the user account, namely that "
7418
"there are no policies applied:"
7419
msgstr ""
7420
7421
#: serverguide/C/security.xml:235(computeroutput)
7422
#, no-wrap
7423
msgid ""
7424
"Last password change : Jan 20, 2008\n"
7425
"Password expires : never\n"
7426
"Password inactive : never\n"
7427
"Account expires : never\n"
7428
"Minimum number of days between password change : 0\n"
7429
"Maximum number of days between password change : 99999\n"
7430
"Number of days of warning before password expires : 7"
7431
msgstr ""
7432
7433
#: serverguide/C/security.xml:245(para)
7434
msgid ""
7435
"To set any of these values, simply use the following syntax, and follow the "
7436
"interactive prompts:"
7437
msgstr ""
7438
7439
#: serverguide/C/security.xml:249(command)
7440
msgid "sudo chage username"
7441
msgstr ""
7442
7443
#: serverguide/C/security.xml:251(para)
7444
msgid ""
7445
"The following is also an example of how you can manually change the explicit "
7446
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7447
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7448
"password expiration, and a warning time period (-W) of 14 days before "
7449
"password expiration."
7450
msgstr ""
7451
7452
#: serverguide/C/security.xml:255(command)
7453
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7454
msgstr ""
7455
7456
#: serverguide/C/security.xml:259(para)
7457
msgid "To verify changes, use the same syntax as mentioned previously:"
7458
msgstr ""
7459
7460
#: serverguide/C/security.xml:265(para)
7461
msgid ""
7462
"The output below shows the new policies that have been established for the "
7463
"account:"
7464
msgstr ""
7465
7466
#: serverguide/C/security.xml:268(computeroutput)
7467
#, no-wrap
7468
msgid ""
7469
"Last password change : Jan 20, 2008\n"
7470
"Password expires : Apr 19, 2008\n"
7471
"Password inactive : May 19, 2008\n"
7472
"Account expires : Jan 31, 2008\n"
7473
"Minimum number of days between password change : 5\n"
7474
"Maximum number of days between password change : 90\n"
7475
"Number of days of warning before password expires : 14"
7476
msgstr ""
7477
7478
#: serverguide/C/security.xml:284(title)
7479
msgid "Other Security Considerations"
7480
msgstr ""
7481
7482
#: serverguide/C/security.xml:285(para)
7483
msgid ""
7484
"Many applications use alternate authentication mechanisms that can be easily "
7485
"overlooked by even experienced system administrators. Therefore, it is "
7486
"important to understand and control how users authenticate and gain access "
7487
"to services and applications on your server."
7488
msgstr ""
7489
7490
#: serverguide/C/security.xml:290(title)
7491
msgid "SSH Access by Disabled Users"
7492
msgstr ""
7493
7494
#: serverguide/C/security.xml:291(para)
7495
msgid ""
7496
"Simply disabling/locking a user account will not prevent a user from logging "
7497
"into your server remotely if they have previously set up RSA public key "
7498
"authentication. They will still be able to gain shell access to the server, "
7499
"without the need for any password. Remember to check the users home "
7500
"directory for files that will allow for this type of authenticated SSH "
7501
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7502
msgstr ""
7503
7504
#: serverguide/C/security.xml:294(para)
7505
msgid ""
7506
"Remove or rename the directory <filename "
7507
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7508
"further SSH authentication capabilities."
7509
msgstr ""
7510
7511
#: serverguide/C/security.xml:297(para)
7512
msgid ""
7513
"Be sure to check for any established SSH connections by the disabled user, "
7514
"as it is possible they may have existing inbound or outbound connections. "
7515
"Kill any that are found."
7516
msgstr ""
7517
7518
#: serverguide/C/security.xml:300(para)
7519
msgid ""
7520
"Restrict SSH access to only user accounts that should have it. For example, "
7521
"you may create a group called \"sshlogin\" and add the group name as the "
7522
"value associated with the <varname>AllowGroups</varname> variable located in "
7523
"the file <filename>/etc/ssh/sshd_config</filename>."
7524
msgstr ""
7525
7526
#: serverguide/C/security.xml:303(programlisting)
7527
#, no-wrap
7528
msgid ""
7529
"\n"
7530
"AllowGroups sshlogin\n"
7531
msgstr ""
7532
7533
#: serverguide/C/security.xml:306(para)
7534
msgid ""
7535
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7536
"SSH service."
7537
msgstr ""
7538
7539
#: serverguide/C/security.xml:310(command)
7540
msgid "sudo adduser username sshlogin"
7541
msgstr ""
7542
7543
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7544
msgid "sudo /etc/init.d/ssh restart"
7545
msgstr ""
7546
7547
#: serverguide/C/security.xml:315(title)
7548
msgid "External User Database Authentication"
7549
msgstr ""
7550
7551
#: serverguide/C/security.xml:316(para)
7552
msgid ""
7553
"Most enterprise networks require centralized authentication and access "
7554
"controls for all system resources. If you have configured your server to "
7555
"authenticate users against external databases, be sure to disable the user "
7556
"accounts both externally and locally, this way you ensure that local "
7557
"fallback authentication is not possible."
7558
msgstr ""
7559
7560
#: serverguide/C/security.xml:325(title)
7561
msgid "Console Security"
7562
msgstr ""
7563
7564
#: serverguide/C/security.xml:326(para)
7565
msgid ""
7566
"As with any other security barrier you put in place to protect your server, "
7567
"it is pretty tough to defend against untold damage caused by someone with "
7568
"physical access to your environment, for example, theft of hard drives, "
7569
"power or service disruption and so on. Therefore, console security should be "
7570
"addressed merely as one component of your overall physical security "
7571
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7572
"very least slow down a determined one, so it is still advisable to perform "
7573
"basic precautions with regard to console security."
7574
msgstr ""
7575
7576
#: serverguide/C/security.xml:329(para)
7577
msgid ""
7578
"The following instructions will help defend your server against issues that "
7579
"could otherwise yield very serious consequences."
7580
msgstr ""
7581
7582
#: serverguide/C/security.xml:334(title)
7583
msgid "Disable Ctrl+Alt+Delete"
7584
msgstr ""
7585
7586
#: serverguide/C/security.xml:335(para)
7587
msgid ""
7588
"First and foremost, anyone that has physical access to the keyboard can "
7589
"simply use the "
7590
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7591
"eycombo> key combination to reboot the server without having to log on. "
7592
"Sure, someone could simply unplug the power source, but you should still "
7593
"prevent the use of this key combination on a production server. This forces "
7594
"an attacker to take more drastic measures to reboot the server, and will "
7595
"prevent accidental reboots at the same time."
7596
msgstr ""
7597
7598
#: serverguide/C/security.xml:340(para)
7599
msgid ""
7600
"To disable the reboot action taken by pressing the "
7601
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7602
"eycombo> key combination, comment out the following line in the file "
7603
"<filename>/etc/init/control-alt-delete.conf</filename>."
7604
msgstr ""
7605
7606
#: serverguide/C/security.xml:343(programlisting)
7607
#, no-wrap
7608
msgid ""
7609
"\n"
7610
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7611
msgstr ""
7612
7613
#: serverguide/C/security.xml:352(title)
7614
msgid "Firewall"
7615
msgstr ""
7616
7617
#: serverguide/C/security.xml:355(para)
7618
msgid ""
7619
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7620
"which is used to manipulate or decide the fate of network traffic headed "
7621
"into or through your server. All modern Linux firewall solutions use this "
7622
"system for packet filtering."
7623
msgstr ""
7624
7625
#: serverguide/C/security.xml:360(para)
7626
msgid ""
7627
"The kernel's packet filtering system would be of little use to "
7628
"administrators without a userspace interface to manage it. This is the "
7629
"purpose of iptables. When a packet reaches your server, it will be handed "
7630
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7631
"based on the rules supplied to it from userspace via iptables. Thus, "
7632
"iptables is all you need to manage your firewall if you're familiar with it, "
7633
"but many frontends are available to simplify the task."
7634
msgstr ""
7635
7636
#: serverguide/C/security.xml:370(title)
7637
msgid "ufw - Uncomplicated Firewall"
7638
msgstr ""
7639
7640
#: serverguide/C/security.xml:371(para)
7641
msgid ""
7642
"The default firewall configuration tool for Ubuntu is "
7643
"<application>ufw</application>. Developed to ease iptables firewall "
7644
"configuration, <application>ufw</application> provides a user friendly way "
7645
"to create an IPv4 or IPv6 host-based firewall."
7646
msgstr ""
7647
7648
#: serverguide/C/security.xml:375(para)
7649
msgid ""
7650
"<application>ufw</application> by default is initially disabled. From the "
7651
"<application>ufw</application> man page:"
7652
msgstr ""
7653
7654
#: serverguide/C/security.xml:379(quote)
7655
msgid ""
7656
"ufw is not intended to provide complete firewall functionality via its "
7657
"command interface, but instead provides an easy way to add or remove simple "
7658
"rules. It is currently mainly used for host-based firewalls."
7659
msgstr ""
7660
7661
#: serverguide/C/security.xml:383(para)
7662
msgid ""
7663
"The following are some examples of how to use <application>ufw</application>:"
7664
msgstr ""
7665
7666
#: serverguide/C/security.xml:388(para)
7667
msgid ""
7668
"First, <application>ufw</application> needs to be enabled. From a terminal "
7669
"prompt enter:"
7670
msgstr ""
7671
7672
#: serverguide/C/security.xml:392(command)
7673
msgid "sudo ufw enable"
7674
msgstr ""
7675
7676
#: serverguide/C/security.xml:396(para)
7677
msgid "To open a port (ssh in this example):"
7678
msgstr ""
7679
7680
#: serverguide/C/security.xml:400(command)
7681
msgid "sudo ufw allow 22"
7682
msgstr ""
7683
7684
#: serverguide/C/security.xml:404(para)
7685
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7686
msgstr ""
7687
7688
#: serverguide/C/security.xml:408(command)
7689
msgid "sudo ufw insert 1 allow 80"
7690
msgstr ""
7691
7692
#: serverguide/C/security.xml:412(para)
7693
msgid "Similarly, to close an opened port:"
7694
msgstr ""
7695
7696
#: serverguide/C/security.xml:416(command)
7697
msgid "sudo ufw deny 22"
7698
msgstr ""
7699
7700
#: serverguide/C/security.xml:420(para)
7701
msgid "To remove a rule, use delete followed by the rule:"
7702
msgstr ""
7703
7704
#: serverguide/C/security.xml:424(command)
7705
msgid "sudo ufw delete deny 22"
7706
msgstr ""
7707
7708
#: serverguide/C/security.xml:428(para)
7709
msgid ""
7710
"It is also possible to allow access from specific hosts or networks to a "
7711
"port. The following example allows ssh access from host 192.168.0.2 to any "
7712
"ip address on this host:"
7713
msgstr ""
7714
7715
#: serverguide/C/security.xml:433(command)
7716
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7717
msgstr ""
7718
7719
#: serverguide/C/security.xml:435(para)
7720
msgid ""
7721
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7722
"subnet."
7723
msgstr ""
7724
7725
#: serverguide/C/security.xml:441(para)
7726
msgid ""
7727
"Adding the <emphasis>--dry-run</emphasis> option to a "
7728
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
7729
"apply them. For example, the following is what would be applied if opening "
7730
"the HTTP port:"
7731
msgstr ""
7732
7733
#: serverguide/C/security.xml:447(command)
7734
msgid "sudo ufw --dry-run allow http"
7735
msgstr ""
7736
7737
#: serverguide/C/security.xml:451(computeroutput)
7738
#, no-wrap
7739
msgid ""
7740
"*filter\n"
7741
":ufw-user-input - [0:0]\n"
7742
":ufw-user-output - [0:0]\n"
7743
":ufw-user-forward - [0:0]\n"
7744
":ufw-user-limit - [0:0]\n"
7745
":ufw-user-limit-accept - [0:0]\n"
7746
"### RULES ###\n"
7747
"\n"
7748
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
7749
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
7750
"\n"
7751
"### END RULES ###\n"
7752
"-A ufw-user-input -j RETURN\n"
7753
"-A ufw-user-output -j RETURN\n"
7754
"-A ufw-user-forward -j RETURN\n"
7755
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
7756
"LIMIT]: \"\n"
7757
"-A ufw-user-limit -j REJECT\n"
7758
"-A ufw-user-limit-accept -j ACCEPT\n"
7759
"COMMIT\n"
7760
"Rules updated"
7761
msgstr ""
7762
7763
#: serverguide/C/security.xml:475(para)
7764
msgid "<application>ufw</application> can be disabled by:"
7765
msgstr ""
7766
7767
#: serverguide/C/security.xml:479(command)
7768
msgid "sudo ufw disable"
7769
msgstr ""
7770
7771
#: serverguide/C/security.xml:483(para)
7772
msgid "To see the firewall status, enter:"
7773
msgstr ""
7774
7775
#: serverguide/C/security.xml:487(command)
7776
msgid "sudo ufw status"
7777
msgstr ""
7778
7779
#: serverguide/C/security.xml:491(para)
7780
msgid "And for more verbose status information use:"
7781
msgstr ""
7782
7783
#: serverguide/C/security.xml:495(command)
7784
msgid "sudo ufw status verbose"
7785
msgstr ""
7786
7787
#: serverguide/C/security.xml:499(para)
7788
msgid "To view the <emphasis>numbered</emphasis> format:"
7789
msgstr ""
7790
7791
#: serverguide/C/security.xml:503(command)
7792
msgid "sudo ufw status numbered"
7793
msgstr ""
7794
7795
#: serverguide/C/security.xml:508(para)
7796
msgid ""
7797
"If the port you want to open or close is defined in "
7798
"<filename>/etc/services</filename>, you can use the port name instead of the "
7799
"number. In the above examples, replace <emphasis>22</emphasis> with "
7800
"<emphasis>ssh</emphasis>."
7801
msgstr ""
7802
7803
#: serverguide/C/security.xml:514(para)
7804
msgid ""
7805
"This is a quick introduction to using <application>ufw</application>. Please "
7806
"refer to the <application>ufw</application> man page for more information."
7807
msgstr ""
7808
7809
#: serverguide/C/security.xml:520(title)
7810
msgid "ufw Application Integration"
7811
msgstr ""
7812
7813
#: serverguide/C/security.xml:522(para)
7814
msgid ""
7815
"Applications that open ports can include an <application>ufw</application> "
7816
"profile, which details the ports needed for the application to function "
7817
"properly. The profiles are kept in <filename "
7818
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
7819
"the default ports have been changed."
7820
msgstr ""
7821
7822
#: serverguide/C/security.xml:531(para)
7823
msgid ""
7824
"To view which applications have installed a profile, enter the following in "
7825
"a terminal:"
7826
msgstr ""
7827
7828
#: serverguide/C/security.xml:536(command)
7829
msgid "sudo ufw app list"
7830
msgstr ""
7831
7832
#: serverguide/C/security.xml:542(para)
7833
msgid ""
7834
"Similar to allowing traffic to a port, using an application profile is "
7835
"accomplished by entering:"
7836
msgstr ""
7837
7838
#: serverguide/C/security.xml:547(command)
7839
msgid "sudo ufw allow Samba"
7840
msgstr ""
7841
7842
#: serverguide/C/security.xml:553(para)
7843
msgid "An extended syntax is available as well:"
7844
msgstr ""
7845
7846
#: serverguide/C/security.xml:558(command)
7847
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
7848
msgstr ""
7849
7850
#: serverguide/C/security.xml:561(para)
7851
msgid ""
7852
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
7853
"with the application profile you are using and the IP range for your network."
7854
msgstr ""
7855
7856
#: serverguide/C/security.xml:567(para)
7857
msgid ""
7858
"There is no need to specify the <emphasis>protocol</emphasis> for the "
7859
"application, because that information is detailed in the profile. Also, note "
7860
"that the <emphasis>app</emphasis> name replaces the "
7861
"<emphasis>port</emphasis> number."
7862
msgstr ""
7863
7864
#: serverguide/C/security.xml:576(para)
7865
msgid ""
7866
"To view details about which ports, protocols, etc are defined for an "
7867
"application, enter:"
7868
msgstr ""
7869
7870
#: serverguide/C/security.xml:581(command)
7871
msgid "sudo ufw app info Samba"
7872
msgstr ""
7873
7874
#: serverguide/C/security.xml:587(para)
7875
msgid ""
7876
"Not all applications that require opening a network port come with "
7877
"<application>ufw</application> profiles, but if you have profiled an "
7878
"application and want the file to be included with the package, please file a "
7879
"bug against the package in <ulink "
7880
"url=\"https://launchpad.net/\">Launchpad</ulink>."
7881
msgstr ""
7882
7883
#: serverguide/C/security.xml:596(title)
7884
msgid "IP Masquerading"
7885
msgstr ""
7886
7887
#: serverguide/C/security.xml:597(para)
7888
msgid ""
7889
"The purpose of IP Masquerading is to allow machines with private, non-"
7890
"routable IP addresses on your network to access the Internet through the "
7891
"machine doing the masquerading. Traffic from your private network destined "
7892
"for the Internet must be manipulated for replies to be routable back to the "
7893
"machine that made the request. To do this, the kernel must modify the "
7894
"<emphasis>source</emphasis> IP address of each packet so that replies will "
7895
"be routed back to it, rather than to the private IP address that made the "
7896
"request, which is impossible over the Internet. Linux uses "
7897
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
7898
"connections belong to which machines and reroute each return packet "
7899
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
7900
"having originated from your Ubuntu gateway machine. This process is referred "
7901
"to in Microsoft documentation as Internet Connection Sharing."
7902
msgstr ""
7903
7904
#: serverguide/C/security.xml:613(title)
7905
msgid "ufw Masquerading"
7906
msgstr ""
7907
7908
#: serverguide/C/security.xml:614(para)
7909
msgid ""
7910
"IP Masquerading can be achieved using custom <application>ufw</application> "
7911
"rules. This is possible because the current back-end for "
7912
"<application>ufw</application> is <application>iptables-"
7913
"restore</application> with the rules files located in "
7914
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
7915
"legacy iptables rules used without <application>ufw</application>, and rules "
7916
"that are more network gateway or bridge related."
7917
msgstr ""
7918
7919
#: serverguide/C/security.xml:620(para)
7920
msgid ""
7921
"The rules are split into two different files, rules that should be executed "
7922
"before <application>ufw</application> command line rules, and rules that are "
7923
"executed after <application>ufw</application> command line rules."
7924
msgstr ""
7925
7926
#: serverguide/C/security.xml:626(para)
7927
msgid ""
7928
"First, packet forwarding needs to be enabled in "
7929
"<application>ufw</application>. Two configuration files will need to be "
7930
"adjusted, in <filename>/etc/default/ufw</filename> change the "
7931
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
7932
msgstr ""
7933
7934
#: serverguide/C/security.xml:630(programlisting)
7935
#, no-wrap
7936
msgid ""
7937
"\n"
7938
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
7939
msgstr ""
7940
7941
#: serverguide/C/security.xml:633(para)
7942
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
7943
msgstr ""
7944
7945
#: serverguide/C/security.xml:636(programlisting)
7946
#, no-wrap
7947
msgid ""
7948
"\n"
7949
"net/ipv4/ip_forward=1\n"
7950
msgstr ""
7951
7952
#: serverguide/C/security.xml:639(para)
7953
msgid "Similarly, for IPv6 forwarding uncomment:"
7954
msgstr ""
7955
7956
#: serverguide/C/security.xml:642(programlisting)
7957
#, no-wrap
7958
msgid ""
7959
"\n"
7960
"net/ipv6/conf/default/forwarding=1\n"
7961
msgstr ""
7962
7963
#: serverguide/C/security.xml:647(para)
7964
msgid ""
7965
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
7966
"file. The default rules only configure the <emphasis>filter</emphasis> "
7967
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
7968
"need to be configured. Add the following to the top of the file just after "
7969
"the header comments:"
7970
msgstr ""
7971
7972
#: serverguide/C/security.xml:652(programlisting)
7973
#, no-wrap
7974
msgid ""
7975
"\n"
7976
"# nat Table rules\n"
7977
"*nat\n"
7978
":POSTROUTING ACCEPT [0:0]\n"
7979
"\n"
7980
"# Forward traffic from eth1 through eth0.\n"
7981
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
7982
"\n"
7983
"# don't delete the 'COMMIT' line or these nat table rules won't be "
7984
"processed\n"
7985
"COMMIT\n"
7986
msgstr ""
7987
7988
#: serverguide/C/security.xml:663(para)
7989
msgid ""
7990
"The comments are not strictly necessary, but it is considered good practice "
7991
"to document your configuration. Also, when modifying any of the "
7992
"<emphasis>rules</emphasis> files in <filename "
7993
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
7994
"line for each table modified:"
7995
msgstr ""
7996
7997
#: serverguide/C/security.xml:669(programlisting)
7998
#, no-wrap
7999
msgid ""
8000
"\n"
8001
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8002
"COMMIT\n"
8003
msgstr ""
8004
8005
#: serverguide/C/security.xml:674(para)
8006
msgid ""
8007
"For each <emphasis>Table</emphasis> a corresponding "
8008
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8009
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8010
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8011
"<emphasis>mangle</emphasis> tables."
8012
msgstr ""
8013
8014
#: serverguide/C/security.xml:681(para)
8015
msgid ""
8016
"In the above example replace <emphasis>eth0</emphasis>, "
8017
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8018
"appropriate interfaces and IP range for your network."
8019
msgstr ""
8020
8021
#: serverguide/C/security.xml:689(para)
8022
msgid ""
8023
"Finally, disable and re-enable <application>ufw</application> to apply the "
8024
"changes:"
8025
msgstr ""
8026
8027
#: serverguide/C/security.xml:693(command)
8028
msgid "sudo ufw disable && sudo ufw enable"
8029
msgstr ""
8030
8031
#: serverguide/C/security.xml:697(para)
8032
msgid ""
8033
"IP Masquerading should now be enabled. You can also add any additional "
8034
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8035
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8036
"forward</emphasis> chain."
8037
msgstr ""
8038
8039
#: serverguide/C/security.xml:704(title)
8040
msgid "iptables Masquerading"
8041
msgstr ""
8042
8043
#: serverguide/C/security.xml:705(para)
8044
msgid ""
8045
"<application>iptables</application> can also be used to enable masquerading."
8046
msgstr ""
8047
8048
#: serverguide/C/security.xml:710(para)
8049
msgid ""
8050
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8051
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8052
"uncomment the following line"
8053
msgstr ""
8054
8055
#: serverguide/C/security.xml:714(programlisting)
8056
#, no-wrap
8057
msgid ""
8058
"\n"
8059
"net.ipv4.ip_forward=1\n"
8060
msgstr ""
8061
8062
#: serverguide/C/security.xml:717(para)
8063
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8064
msgstr ""
8065
8066
#: serverguide/C/security.xml:720(programlisting)
8067
#, no-wrap
8068
msgid ""
8069
"\n"
8070
"net.ipv6.conf.default.forwarding=1\n"
8071
msgstr ""
8072
8073
#: serverguide/C/security.xml:725(para)
8074
msgid ""
8075
"Next, execute the <application>sysctl</application> command to enable the "
8076
"new settings in the configuration file:"
8077
msgstr ""
8078
8079
#: serverguide/C/security.xml:729(command)
8080
msgid "sudo sysctl -p"
8081
msgstr ""
8082
8083
#: serverguide/C/security.xml:733(para)
8084
msgid ""
8085
"IP Masquerading can now be accomplished with a single iptables rule, which "
8086
"may differ slightly based on your network configuration:"
8087
msgstr ""
8088
8089
#: serverguide/C/security.xml:736(screen)
8090
#, no-wrap
8091
msgid ""
8092
"\n"
8093
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8094
msgstr ""
8095
8096
#: serverguide/C/security.xml:739(para)
8097
msgid ""
8098
"The above command assumes that your private address space is 192.168.0.0/16 "
8099
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8100
"follows:"
8101
msgstr ""
8102
8103
#: serverguide/C/security.xml:744(para)
8104
msgid "-t nat -- the rule is to go into the nat table"
8105
msgstr ""
8106
8107
#: serverguide/C/security.xml:745(para)
8108
msgid ""
8109
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8110
msgstr ""
8111
8112
#: serverguide/C/security.xml:746(para)
8113
msgid ""
8114
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8115
"specified address space"
8116
msgstr ""
8117
8118
#: serverguide/C/security.xml:747(para)
8119
msgid ""
8120
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8121
"specified network device"
8122
msgstr ""
8123
8124
#: serverguide/C/security.xml:749(para)
8125
msgid ""
8126
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8127
"MASQUERADE target to be manipulated as described above"
8128
msgstr ""
8129
8130
#: serverguide/C/security.xml:757(para)
8131
msgid ""
8132
"Also, each chain in the filter table (the default table, and where most or "
8133
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8134
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8135
"you may have set the policies to DROP or REJECT, in which case your "
8136
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8137
"above rule to work:"
8138
msgstr ""
8139
8140
#: serverguide/C/security.xml:764(screen)
8141
#, no-wrap
8142
msgid ""
8143
"\n"
8144
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8145
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8146
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8147
msgstr ""
8148
8149
#: serverguide/C/security.xml:768(para)
8150
msgid ""
8151
"The above commands will allow all connections from your local network to the "
8152
"Internet and all traffic related to those connections to return to the "
8153
"machine that initiated them."
8154
msgstr ""
8155
8156
#: serverguide/C/security.xml:775(para)
8157
msgid ""
8158
"If you want masquerading to be enabled on reboot, which you probably do, "
8159
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8160
"example add the first command with no filtering:"
8161
msgstr ""
8162
8163
#: serverguide/C/security.xml:779(screen)
8164
#, no-wrap
8165
msgid ""
8166
"\n"
8167
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8168
msgstr ""
8169
8170
#: serverguide/C/security.xml:787(title)
8171
msgid "Logs"
8172
msgstr ""
8173
8174
#: serverguide/C/security.xml:788(para)
8175
msgid ""
8176
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8177
"firewall rules, and noticing unusual activity on your network. You must "
8178
"include logging rules in your firewall for them to be generated, though, and "
8179
"logging rules must come before any applicable terminating rule (a rule with "
8180
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8181
"REJECT)."
8182
msgstr ""
8183
8184
#: serverguide/C/security.xml:795(para)
8185
msgid ""
8186
"If you are using <application>ufw</application>, you can turn on logging by "
8187
"entering the following in a terminal:"
8188
msgstr ""
8189
8190
#: serverguide/C/security.xml:799(command)
8191
msgid "sudo ufw logging on"
8192
msgstr ""
8193
8194
#: serverguide/C/security.xml:801(para)
8195
msgid ""
8196
"To turn logging off in <application>ufw</application>, simply replace "
8197
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8198
"role=\"italic\">off</emphasis> in the above command."
8199
msgstr ""
8200
8201
#: serverguide/C/security.xml:804(para)
8202
msgid ""
8203
"If using <application>iptables</application> instead of "
8204
"<application>ufw</application>, enter:"
8205
msgstr ""
8206
8207
#: serverguide/C/security.xml:807(screen)
8208
#, no-wrap
8209
msgid ""
8210
"\n"
8211
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8212
"prefix \"NEW_HTTP_CONN: \"\n"
8213
msgstr ""
8214
8215
#: serverguide/C/security.xml:810(para)
8216
msgid ""
8217
"A request on port 80 from the local machine, then, would generate a log in "
8218
"dmesg that looks like this:"
8219
msgstr ""
8220
8221
#: serverguide/C/security.xml:815(programlisting)
8222
#, no-wrap
8223
msgid ""
8224
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8225
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8226
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8227
"WINDOW=32767 RES=0x00 SYN URGP=0"
8228
msgstr ""
8229
8230
#: serverguide/C/security.xml:817(para)
8231
msgid ""
8232
"The above log will also appear in <filename>/var/log/messages</filename>, "
8233
"<filename>/var/log/syslog</filename>, and "
8234
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8235
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8236
"and configuring <application>ulogd</application> and using the ULOG target "
8237
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8238
"server that listens for logging instructions from the kernel specifically "
8239
"for firewalls, and can log to any file you like, or even to a "
8240
"<application>PostgreSQL</application> or <application>MySQL</application> "
8241
"database. Making sense of your firewall logs can be simplified by using a "
8242
"log analyzing tool such as <application>fwanalog</application>, "
8243
"<application> fwlogwatch</application>, or <application>lire</application>."
8244
msgstr ""
8245
8246
#: serverguide/C/security.xml:832(title)
8247
msgid "Other Tools"
8248
msgstr ""
8249
8250
#: serverguide/C/security.xml:833(para)
8251
msgid ""
8252
"There are many tools available to help you construct a complete firewall "
8253
"without intimate knowledge of iptables. For the GUI-inclined:"
8254
msgstr ""
8255
8256
#: serverguide/C/security.xml:839(para)
8257
msgid ""
8258
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8259
"popular and easy to use."
8260
msgstr ""
8261
8262
#: serverguide/C/security.xml:844(para)
8263
msgid ""
8264
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8265
"and will look familiar to an administrator who has used a commercial "
8266
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8267
msgstr ""
8268
8269
#: serverguide/C/security.xml:850(para)
8270
msgid ""
8271
"If you prefer a command-line tool with plain-text configuration files:"
8272
msgstr ""
8273
8274
#: serverguide/C/security.xml:855(para)
8275
msgid ""
8276
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8277
"powerful solution to help you configure an advanced firewall for any network."
8278
msgstr ""
8279
8280
#: serverguide/C/security.xml:861(para)
8281
msgid ""
8282
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8283
"a working firewall \"out of the box\" with zero configuration, and will "
8284
"allow you to easily set up a more advanced firewall by editing simple, well-"
8285
"documented configuration files."
8286
msgstr ""
8287
8288
#: serverguide/C/security.xml:868(para)
8289
msgid ""
8290
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8291
"designed to be a desktop firewall application. It is made up of a server "
8292
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8293
"like many popular interactive firewall applications for Windows."
8294
msgstr ""
8295
8296
#: serverguide/C/security.xml:880(para)
8297
msgid ""
8298
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8299
"Firewall</ulink> wiki page contains information on the development of "
8300
"<application>ufw</application>."
8301
msgstr ""
8302
8303
#: serverguide/C/security.xml:886(para)
8304
msgid ""
8305
"Also, the <application>ufw</application> manual page contains some very "
8306
"useful information: <command>man ufw</command>."
8307
msgstr ""
8308
8309
#: serverguide/C/security.xml:891(para)
8310
msgid ""
8311
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8312
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8313
"on using <application>iptables</application>."
8314
msgstr ""
8315
8316
#: serverguide/C/security.xml:897(para)
8317
msgid ""
8318
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8319
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8320
msgstr ""
8321
8322
#: serverguide/C/security.xml:903(para)
8323
msgid ""
8324
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8325
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8326
msgstr ""
8327
8328
#: serverguide/C/security.xml:911(title)
8329
msgid "AppArmor"
8330
msgstr ""
8331
8332
#: serverguide/C/security.xml:912(para)
8333
msgid ""
8334
"<application>AppArmor</application> is a Linux Security Module "
8335
"implementation of name-based mandatory access controls. AppArmor confines "
8336
"individual programs to a set of listed files and posix 1003.1e draft "
8337
"capabilities."
8338
msgstr ""
8339
8340
#: serverguide/C/security.xml:916(para)
8341
msgid ""
8342
"<application>AppArmor</application> is installed and loaded by default. It "
8343
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8344
"and permissions the application requires. Some packages will install their "
8345
"own profiles, and additional profiles can be found in the "
8346
"<application>apparmor-profiles</application> package."
8347
msgstr ""
8348
8349
#: serverguide/C/security.xml:921(para)
8350
msgid ""
8351
"To install the <application>apparmor-profiles</application> package from a "
8352
"terminal prompt:"
8353
msgstr ""
8354
8355
#: serverguide/C/security.xml:927(para)
8356
msgid "AppArmor profiles have two modes of execution:"
8357
msgstr ""
8358
8359
#: serverguide/C/security.xml:932(para)
8360
msgid ""
8361
"Complaining/Learning: profile violations are permitted and logged. Useful "
8362
"for testing and developing new profiles."
8363
msgstr ""
8364
8365
#: serverguide/C/security.xml:937(para)
8366
msgid ""
8367
"Enforced/Confined: enforces profile policy as well as logging the violation."
8368
msgstr ""
8369
8370
#: serverguide/C/security.xml:943(title)
8371
msgid "Using AppArmor"
8372
msgstr ""
8373
8374
#: serverguide/C/security.xml:944(para)
8375
msgid ""
8376
"The <application>apparmor-utils</application> package contains command line "
8377
"utilities that you can use to change the <application>AppArmor</application> "
8378
"execution mode, find the status of a profile, create new profiles, etc."
8379
msgstr ""
8380
8381
#: serverguide/C/security.xml:950(para)
8382
msgid ""
8383
"<application>apparmor_status</application> is used to view the current "
8384
"status of AppArmor profiles."
8385
msgstr ""
8386
8387
#: serverguide/C/security.xml:954(command)
8388
msgid "sudo apparmor_status"
8389
msgstr ""
8390
8391
#: serverguide/C/security.xml:958(para)
8392
msgid ""
8393
"<application>aa-complain</application> places a profile into "
8394
"<emphasis>complain</emphasis> mode."
8395
msgstr ""
8396
8397
#: serverguide/C/security.xml:962(command)
8398
msgid "sudo aa-complain /path/to/bin"
8399
msgstr ""
8400
8401
#: serverguide/C/security.xml:966(para)
8402
msgid ""
8403
"<application>aa-enforce</application> places a profile into "
8404
"<emphasis>enforce</emphasis> mode."
8405
msgstr ""
8406
8407
#: serverguide/C/security.xml:970(command)
8408
msgid "sudo aa-enforce /path/to/bin"
8409
msgstr ""
8410
8411
#: serverguide/C/security.xml:974(para)
8412
msgid ""
8413
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8414
"profiles are located. It can be used to manipulate the "
8415
"<emphasis>mode</emphasis> of all profiles."
8416
msgstr ""
8417
8418
#: serverguide/C/security.xml:978(para)
8419
msgid "Enter the following to place all profiles into complain mode:"
8420
msgstr ""
8421
8422
#: serverguide/C/security.xml:982(command)
8423
msgid "sudo aa-complain /etc/apparmor.d/*"
8424
msgstr ""
8425
8426
#: serverguide/C/security.xml:984(para)
8427
msgid "To place all profiles in enforce mode:"
8428
msgstr ""
8429
8430
#: serverguide/C/security.xml:988(command)
8431
msgid "sudo aa-enforce /etc/apparmor.d/*"
8432
msgstr ""
8433
8434
#: serverguide/C/security.xml:992(para)
8435
msgid ""
8436
"<application>apparmor_parser</application> is used to load a profile into "
8437
"the kernel. It can also be used to reload a currently loaded profile using "
8438
"the <emphasis>-r</emphasis> option. To load a profile:"
8439
msgstr ""
8440
8441
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8442
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8443
msgstr ""
8444
8445
#: serverguide/C/security.xml:999(para)
8446
msgid "To reload a profile:"
8447
msgstr ""
8448
8449
#: serverguide/C/security.xml:1003(command)
8450
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8451
msgstr ""
8452
8453
#: serverguide/C/security.xml:1007(para)
8454
msgid ""
8455
"<filename>/etc/init.d/apparmor</filename> can be used to "
8456
"<emphasis>reload</emphasis> all profiles:"
8457
msgstr ""
8458
8459
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8460
msgid "sudo /etc/init.d/apparmor reload"
8461
msgstr ""
8462
8463
#: serverguide/C/security.xml:1015(para)
8464
msgid ""
8465
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8466
"with the <application>apparmor_parser -R</application> option to "
8467
"<emphasis>disable</emphasis> a profile."
8468
msgstr ""
8469
8470
#: serverguide/C/security.xml:1020(command)
8471
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8472
msgstr ""
8473
8474
#: serverguide/C/security.xml:1021(command)
8475
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8476
msgstr ""
8477
8478
#: serverguide/C/security.xml:1023(para)
8479
msgid ""
8480
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8481
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8482
"load the profile using the <emphasis>-a</emphasis> option."
8483
msgstr ""
8484
8485
#: serverguide/C/security.xml:1028(command)
8486
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8487
msgstr ""
8488
8489
#: serverguide/C/security.xml:1033(para)
8490
msgid ""
8491
"<application>AppArmor</application> can be disabled, and the kernel module "
8492
"unloaded by entering the following:"
8493
msgstr ""
8494
8495
#: serverguide/C/security.xml:1037(command)
8496
msgid "sudo /etc/init.d/apparmor stop"
8497
msgstr ""
8498
8499
#: serverguide/C/security.xml:1038(command)
8500
msgid "sudo update-rc.d -f apparmor remove"
8501
msgstr ""
8502
8503
#: serverguide/C/security.xml:1042(para)
8504
msgid "To re-enable <application>AppArmor</application> enter:"
8505
msgstr ""
8506
8507
#: serverguide/C/security.xml:1046(command)
8508
msgid "sudo /etc/init.d/apparmor start"
8509
msgstr ""
8510
8511
#: serverguide/C/security.xml:1047(command)
8512
msgid "sudo update-rc.d apparmor defaults"
8513
msgstr ""
8514
8515
#: serverguide/C/security.xml:1052(para)
8516
msgid ""
8517
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8518
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8519
"the actual executable file path. For example for the "
8520
"<application>ping</application> command use <filename>/bin/ping</filename>"
8521
msgstr ""
8522
8523
#: serverguide/C/security.xml:1060(title)
8524
msgid "Profiles"
8525
msgstr ""
8526
8527
#: serverguide/C/security.xml:1061(para)
8528
msgid ""
8529
"<application>AppArmor</application> profiles are simple text files located "
8530
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8531
"path to the executable they profile replacing the \"/\" with \".\". For "
8532
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8533
"profile for the <filename>/bin/ping</filename> command."
8534
msgstr ""
8535
8536
#: serverguide/C/security.xml:1067(para)
8537
msgid "There are two main type of rules used in profiles:"
8538
msgstr ""
8539
8540
#: serverguide/C/security.xml:1072(para)
8541
msgid ""
8542
"<emphasis>Path entries:</emphasis> which detail which files an application "
8543
"can access in the file system."
8544
msgstr ""
8545
8546
#: serverguide/C/security.xml:1077(para)
8547
msgid ""
8548
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8549
"confined process is allowed to use."
8550
msgstr ""
8551
8552
#: serverguide/C/security.xml:1082(para)
8553
msgid ""
8554
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8555
msgstr ""
8556
8557
#: serverguide/C/security.xml:1085(programlisting)
8558
#, no-wrap
8559
msgid ""
8560
"\n"
8561
"#include <tunables/global>\n"
8562
"/bin/ping flags=(complain) {\n"
8563
" #include <abstractions/base>\n"
8564
" #include <abstractions/consoles>\n"
8565
" #include <abstractions/nameservice>\n"
8566
"\n"
8567
" capability net_raw,\n"
8568
" capability setuid,\n"
8569
" network inet raw,\n"
8570
" \n"
8571
" /bin/ping mixr,\n"
8572
" /etc/modules.conf r,\n"
8573
"}\n"
8574
msgstr ""
8575
8576
#: serverguide/C/security.xml:1102(para)
8577
msgid ""
8578
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8579
"from other files. This allows statements pertaining to multiple applications "
8580
"to be placed in a common file."
8581
msgstr ""
8582
8583
#: serverguide/C/security.xml:1108(para)
8584
msgid ""
8585
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8586
"program, also setting the mode to <emphasis>complain</emphasis>."
8587
msgstr ""
8588
8589
#: serverguide/C/security.xml:1114(para)
8590
msgid ""
8591
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8592
"the CAP_NET_RAW Posix.1e capability."
8593
msgstr ""
8594
8595
#: serverguide/C/security.xml:1119(para)
8596
msgid ""
8597
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8598
"execute access to the file."
8599
msgstr ""
8600
8601
#: serverguide/C/security.xml:1125(para)
8602
msgid ""
8603
"After editing a profile file the profile must be reloaded. See <xref "
8604
"linkend=\"apparmor-usage\"/> for details."
8605
msgstr ""
8606
8607
#: serverguide/C/security.xml:1130(title)
8608
msgid "Creating a Profile"
8609
msgstr ""
8610
8611
#: serverguide/C/security.xml:1133(para)
8612
msgid ""
8613
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8614
"application should be exercised. The test plan should be divided into small "
8615
"test cases. Each test case should have a small description and list the "
8616
"steps to follow."
8617
msgstr ""
8618
8619
#: serverguide/C/security.xml:1137(para)
8620
msgid "Some standard test cases are:"
8621
msgstr ""
8622
8623
#: serverguide/C/security.xml:1142(para)
8624
msgid "Starting the program."
8625
msgstr ""
8626
8627
#: serverguide/C/security.xml:1147(para)
8628
msgid "Stopping the program."
8629
msgstr ""
8630
8631
#: serverguide/C/security.xml:1152(para)
8632
msgid "Reloading the program."
8633
msgstr ""
8634
8635
#: serverguide/C/security.xml:1157(para)
8636
msgid "Testing all the commands supported by the init script."
8637
msgstr ""
8638
8639
#: serverguide/C/security.xml:1164(para)
8640
msgid ""
8641
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8642
"genprof</application> to generate a new profile. From a terminal:"
8643
msgstr ""
8644
8645
#: serverguide/C/security.xml:1169(command)
8646
msgid "sudo aa-genprof executable"
8647
msgstr ""
8648
8649
#: serverguide/C/security.xml:1171(para)
8650
msgid "For example:"
8651
msgstr ""
8652
8653
#: serverguide/C/security.xml:1175(command)
8654
msgid "sudo aa-genprof slapd"
8655
msgstr ""
8656
8657
#: serverguide/C/security.xml:1179(para)
8658
msgid ""
8659
"To get your new profile included in the <application>apparmor-"
8660
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8661
"against the <ulink "
8662
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8663
"/ulink> package:"
8664
msgstr ""
8665
8666
#: serverguide/C/security.xml:1186(para)
8667
msgid "Include your test plan and test cases."
8668
msgstr ""
8669
8670
#: serverguide/C/security.xml:1191(para)
8671
msgid "Attach your new profile to the bug."
8672
msgstr ""
8673
8674
#: serverguide/C/security.xml:1200(title)
8675
msgid "Updating Profiles"
8676
msgstr ""
8677
8678
#: serverguide/C/security.xml:1201(para)
8679
msgid ""
8680
"When the program is misbehaving, audit messages are sent to the log files. "
8681
"The program <application>aa-logprof</application> can be used to scan log "
8682
"files for <application>AppArmor</application> audit messages, review them "
8683
"and update the profiles. From a terminal:"
8684
msgstr ""
8685
8686
#: serverguide/C/security.xml:1206(command)
8687
msgid "sudo aa-logprof"
8688
msgstr ""
8689
8690
#: serverguide/C/security.xml:1214(para)
8691
msgid ""
8692
"See the <ulink "
8693
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8694
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8695
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8696
"configuration options."
8697
msgstr ""
8698
8699
#: serverguide/C/security.xml:1221(para)
8700
msgid ""
8701
"For details using AppArmor with other Ubuntu releases see the <ulink "
8702
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8703
"Wiki</ulink> page."
8704
msgstr ""
8705
8706
#: serverguide/C/security.xml:1229(para)
8707
msgid ""
8708
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8709
"page is another introduction to AppArmor."
8710
msgstr ""
8711
8712
#: serverguide/C/security.xml:1236(para)
8713
msgid ""
8714
"A great place to ask for <application>AppArmor</application> assistance, and "
8715
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8716
"server</emphasis> IRC channel on <ulink "
8717
"url=\"http://freenode.net\">freenode</ulink>."
8718
msgstr ""
8719
8720
#: serverguide/C/security.xml:1246(title)
8721
msgid "Certificates"
8722
msgstr ""
8723
8724
#: serverguide/C/security.xml:1247(para)
8725
msgid ""
8726
"One of the most common forms of cryptography today is <emphasis>public-"
8727
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8728
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
8729
"system works by <emphasis>encrypting</emphasis> information using the public "
8730
"key. The information can then only be <emphasis>decrypted</emphasis> using "
8731
"the private key."
8732
msgstr ""
8733
8734
#: serverguide/C/security.xml:1253(para)
8735
msgid ""
8736
"A common use for public-key cryptography is encrypting application traffic "
8737
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
8738
"connection. For example, configuring Apache to provide "
8739
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
8740
"encrypt traffic using a protocol that does not itself provide encryption."
8741
msgstr ""
8742
8743
#: serverguide/C/security.xml:1258(para)
8744
msgid ""
8745
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
8746
"<emphasis>public key</emphasis> and other information about a server and the "
8747
"organization who is responsible for it. Certificates can be digitally signed "
8748
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
8749
"third party that has confirmed that the information contained in the "
8750
"certificate is accurate."
8751
msgstr ""
8752
8753
#: serverguide/C/security.xml:1265(title)
8754
msgid "Types of Certificates"
8755
msgstr ""
8756
8757
#: serverguide/C/security.xml:1266(para)
8758
msgid ""
8759
"To set up a secure server using public-key cryptography, in most cases, you "
8760
"send your certificate request (including your public key), proof of your "
8761
"company's identity, and payment to a CA. The CA verifies the certificate "
8762
"request and your identity, and then sends back a certificate for your secure "
8763
"server. Alternatively, you can create your own <emphasis>self-"
8764
"signed</emphasis> certificate."
8765
msgstr ""
8766
8767
#: serverguide/C/security.xml:1276(para)
8768
msgid ""
8769
"Note, that self-signed certificates should not be used in most production "
8770
"environments."
8771
msgstr ""
8772
8773
#: serverguide/C/security.xml:1280(para)
8774
msgid ""
8775
"Continuing the HTTPS example, a CA-signed certificate provides two important "
8776
"capabilities that a self-signed certificate does not:"
8777
msgstr ""
8778
8779
#: serverguide/C/security.xml:1287(para)
8780
msgid ""
8781
"Browsers (usually) automatically recognize the certificate and allow a "
8782
"secure connection to be made without prompting the user."
8783
msgstr ""
8784
8785
#: serverguide/C/security.xml:1294(para)
8786
msgid ""
8787
"When a CA issues a signed certificate, it is guaranteeing the identity of "
8788
"the organization that is providing the web pages to the browser."
8789
msgstr ""
8790
8791
#: serverguide/C/security.xml:1302(para)
8792
msgid ""
8793
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
8794
"certificates they automatically accept. If a browser encounters a "
8795
"certificate whose authorizing CA is not in the list, the browser asks the "
8796
"user to either accept or decline the connection. Also, other applications "
8797
"may generate an error message when using a self-singed certificate."
8798
msgstr ""
8799
8800
#: serverguide/C/security.xml:1310(para)
8801
msgid ""
8802
"The process of getting a certificate from a CA is fairly easy. A quick "
8803
"overview is as follows:"
8804
msgstr ""
8805
8806
#: serverguide/C/security.xml:1317(para)
8807
msgid "Create a private and public encryption key pair."
8808
msgstr ""
8809
8810
#: serverguide/C/security.xml:1320(para)
8811
msgid ""
8812
"Create a certificate request based on the public key. The certificate "
8813
"request contains information about your server and the company hosting it."
8814
msgstr ""
8815
8816
#: serverguide/C/security.xml:1325(para)
8817
msgid ""
8818
"Send the certificate request, along with documents proving your identity, to "
8819
"a CA. We cannot tell you which certificate authority to choose. Your "
8820
"decision may be based on your past experiences, or on the experiences of "
8821
"your friends or colleagues, or purely on monetary factors."
8822
msgstr ""
8823
8824
#: serverguide/C/security.xml:1331(para)
8825
msgid ""
8826
"Once you have decided upon a CA, you need to follow the instructions they "
8827
"provide on how to obtain a certificate from them."
8828
msgstr ""
8829
8830
#: serverguide/C/security.xml:1336(para)
8831
msgid ""
8832
"When the CA is satisfied that you are indeed who you claim to be, they send "
8833
"you a digital certificate."
8834
msgstr ""
8835
8836
#: serverguide/C/security.xml:1340(para)
8837
msgid ""
8838
"Install this certificate on your secure server, and configure the "
8839
"appropriate applications to use the certificate."
8840
msgstr ""
8841
8842
#: serverguide/C/security.xml:1349(title)
8843
msgid "Generating a Certificate Signing Request (CSR)"
8844
msgstr ""
8845
8846
#: serverguide/C/security.xml:1351(para)
8847
msgid ""
8848
"Whether you are getting a certificate from a CA or generating your own self-"
8849
"signed certificate, the first step is to generate a key."
8850
msgstr ""
8851
8852
#: serverguide/C/security.xml:1356(para)
8853
msgid ""
8854
"If the certificate will be used by service daemons, such as Apache, Postfix, "
8855
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
8856
"passphrase allows the services to start without manual intervention, usually "
8857
"the preferred way to start a daemon."
8858
msgstr ""
8859
8860
#: serverguide/C/security.xml:1362(para)
8861
msgid ""
8862
"This section will cover generating a key with a passphrase, and one without. "
8863
"The non-passphrase key will then be used to generate a certificate that can "
8864
"be used with various service daemons."
8865
msgstr ""
8866
8867
#: serverguide/C/security.xml:1368(para)
8868
msgid ""
8869
"Running your secure service without a passphrase is convenient because you "
8870
"will not need to enter the passphrase every time you start your secure "
8871
"service. But it is insecure and a compromise of the key means a compromise "
8872
"of the server as well."
8873
msgstr ""
8874
8875
#: serverguide/C/security.xml:1375(para)
8876
msgid ""
8877
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
8878
"Request (CSR) run the following command from a terminal prompt:"
8879
msgstr ""
8880
8881
#: serverguide/C/security.xml:1381(command)
8882
msgid "openssl genrsa -des3 -out server.key 1024"
8883
msgstr ""
8884
8885
#: serverguide/C/security.xml:1384(programlisting)
8886
#, no-wrap
8887
msgid ""
8888
"\n"
8889
"Generating RSA private key, 1024 bit long modulus\n"
8890
".....................++++++\n"
8891
".................++++++\n"
8892
"unable to write 'random state'\n"
8893
"e is 65537 (0x10001)\n"
8894
"Enter pass phrase for server.key:\n"
8895
msgstr ""
8896
8897
#: serverguide/C/security.xml:1393(para)
8898
msgid ""
8899
"You can now enter your passphrase. For best security, it should at least "
8900
"contain eight characters. The minimum length when specifying -des3 is four "
8901
"characters. It should include numbers and/or punctuation and not be a word "
8902
"in a dictionary. Also remember that your passphrase is case-sensitive."
8903
msgstr ""
8904
8905
#: serverguide/C/security.xml:1401(para)
8906
msgid ""
8907
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
8908
"server key is generated and stored in the <filename>server.key</filename> "
8909
"file."
8910
msgstr ""
8911
8912
#: serverguide/C/security.xml:1407(para)
8913
msgid ""
8914
"Now create the insecure key, the one without a passphrase, and shuffle the "
8915
"key names:"
8916
msgstr ""
8917
8918
#: serverguide/C/security.xml:1413(command)
8919
msgid "openssl rsa -in server.key -out server.key.insecure"
8920
msgstr ""
8921
8922
#: serverguide/C/security.xml:1414(command)
8923
msgid "mv server.key server.key.secure"
8924
msgstr ""
8925
8926
#: serverguide/C/security.xml:1415(command)
8927
msgid "mv server.key.insecure server.key"
8928
msgstr ""
8929
8930
#: serverguide/C/security.xml:1418(para)
8931
msgid ""
8932
"The insecure key is now named <filename>server.key</filename>, and you can "
8933
"use this file to generate the CSR without passphrase."
8934
msgstr ""
8935
8936
#: serverguide/C/security.xml:1423(para)
8937
msgid "To create the CSR, run the following command at a terminal prompt:"
8938
msgstr ""
8939
8940
#: serverguide/C/security.xml:1428(command)
8941
msgid "openssl req -new -key server.key -out server.csr"
8942
msgstr ""
8943
8944
#: serverguide/C/security.xml:1431(para)
8945
msgid ""
8946
"It will prompt you enter the passphrase. If you enter the correct "
8947
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
8948
"etc. Once you enter all these details, your CSR will be created and it will "
8949
"be stored in the <filename>server.csr</filename> file."
8950
msgstr ""
8951
8952
#: serverguide/C/security.xml:1439(para)
8953
msgid ""
8954
"You can now submit this CSR file to a CA for processing. The CA will use "
8955
"this CSR file and issue the certificate. On the other hand, you can create "
8956
"self-signed certificate using this CSR."
8957
msgstr ""
8958
8959
#: serverguide/C/security.xml:1447(title)
8960
msgid "Creating a Self-Signed Certificate"
8961
msgstr ""
8962
8963
#: serverguide/C/security.xml:1448(para)
8964
msgid ""
8965
"To create the self-signed certificate, run the following command at a "
8966
"terminal prompt:"
8967
msgstr ""
8968
8969
#: serverguide/C/security.xml:1453(command)
8970
msgid ""
8971
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
8972
"server.crt"
8973
msgstr ""
8974
8975
#: serverguide/C/security.xml:1456(para)
8976
msgid ""
8977
"The above command will prompt you to enter the passphrase. Once you enter "
8978
"the correct passphrase, your certificate will be created and it will be "
8979
"stored in the <filename>server.crt</filename> file."
8980
msgstr ""
8981
8982
#: serverguide/C/security.xml:1461(para)
8983
msgid ""
8984
"If your secure server is to be used in a production environment, you "
8985
"probably need a CA-signed certificate. It is not recommended to use self-"
8986
"signed certificate."
8987
msgstr ""
8988
8989
#: serverguide/C/security.xml:1469(title)
8990
msgid "Installing the Certificate"
8991
msgstr ""
8992
8993
#: serverguide/C/security.xml:1471(para)
8994
msgid ""
8995
"You can install the key file <filename>server.key</filename> and certificate "
8996
"file <filename>server.crt</filename>, or the certificate file issued by your "
8997
"CA, by running following commands at a terminal prompt:"
8998
msgstr ""
8999
9000
#: serverguide/C/security.xml:1477(command)
9001
msgid "sudo cp server.crt /etc/ssl/certs"
9002
msgstr ""
9003
9004
#: serverguide/C/security.xml:1478(command)
9005
msgid "sudo cp server.key /etc/ssl/private"
9006
msgstr ""
9007
9008
#: serverguide/C/security.xml:1480(para)
9009
msgid ""
9010
"Now simply configure any applications, with the ability to use public-key "
9011
"cryptography, to use the <emphasis>certificate</emphasis> and "
9012
"<emphasis>key</emphasis> files. For example, "
9013
"<application>Apache</application> can provide HTTPS, "
9014
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9015
msgstr ""
9016
9017
#: serverguide/C/security.xml:1487(title)
9018
msgid "Certification Authority"
9019
msgstr ""
9020
9021
#: serverguide/C/security.xml:1489(para)
9022
msgid ""
9023
"If the services on your network require more than a few self-signed "
9024
"certificates it may be worth the additional effort to setup your own "
9025
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9026
"certificates signed by your own CA, allows the various services using the "
9027
"certificates to easily trust other services using certificates issued from "
9028
"the same CA."
9029
msgstr ""
9030
9031
#: serverguide/C/security.xml:1499(para)
9032
msgid ""
9033
"First, create the directories to hold the CA certificate and related files:"
9034
msgstr ""
9035
9036
#: serverguide/C/security.xml:1504(command)
9037
msgid "sudo mkdir /etc/ssl/CA"
9038
msgstr ""
9039
9040
#: serverguide/C/security.xml:1505(command)
9041
msgid "sudo mkdir /etc/ssl/newcerts"
9042
msgstr ""
9043
9044
#: serverguide/C/security.xml:1511(para)
9045
msgid ""
9046
"The CA needs a few additional files to operate, one to keep track of the "
9047
"last serial number used by the CA, each certificate must have a unique "
9048
"serial number, and another file to record which certificates have been "
9049
"issued:"
9050
msgstr ""
9051
9052
#: serverguide/C/security.xml:1518(command)
9053
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9054
msgstr ""
9055
9056
#: serverguide/C/security.xml:1519(command)
9057
msgid "sudo touch /etc/ssl/CA/index.txt"
9058
msgstr ""
9059
9060
#: serverguide/C/security.xml:1525(para)
9061
msgid ""
9062
"The third file is a CA configuration file. Though not strictly necessary, it "
9063
"is very convenient when issuing multiple certificates. Edit "
9064
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9065
"]</emphasis> change:"
9066
msgstr ""
9067
9068
#: serverguide/C/security.xml:1531(programlisting)
9069
#, no-wrap
9070
msgid ""
9071
"\n"
9072
"dir = /etc/ssl/ # Where everything is kept\n"
9073
"database = $dir/CA/index.txt # database index file.\n"
9074
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9075
"serial = $dir/CA/serial # The current serial number\n"
9076
"private_key = $dir/private/cakey.pem# The private key\n"
9077
msgstr ""
9078
9079
#: serverguide/C/security.xml:1542(para)
9080
msgid "Next, create the self-singed root certificate:"
9081
msgstr ""
9082
9083
#: serverguide/C/security.xml:1547(command)
9084
msgid ""
9085
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9086
"days 3650"
9087
msgstr ""
9088
9089
#: serverguide/C/security.xml:1550(para)
9090
msgid "You will then be asked to enter the details about the certificate."
9091
msgstr ""
9092
9093
#: serverguide/C/security.xml:1557(para)
9094
msgid "Now install the root certificate and key:"
9095
msgstr ""
9096
9097
#: serverguide/C/security.xml:1562(command)
9098
msgid "sudo mv cakey.pem /etc/ssl/private/"
9099
msgstr ""
9100
9101
#: serverguide/C/security.xml:1563(command)
9102
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9103
msgstr ""
9104
9105
#: serverguide/C/security.xml:1569(para)
9106
msgid ""
9107
"You are now ready to start signing certificates. The first item needed is a "
9108
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9109
"for details. Once you have a CSR, enter the following to generate a "
9110
"certificate signed by the CA:"
9111
msgstr ""
9112
9113
#: serverguide/C/security.xml:1576(command)
9114
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9115
msgstr ""
9116
9117
#: serverguide/C/security.xml:1579(para)
9118
msgid ""
9119
"After entering the password for the CA key, you will be prompted to sign the "
9120
"certificate, and again to commit the new certificate. You should then see a "
9121
"somewhat large amount of output related to the certificate creation."
9122
msgstr ""
9123
9124
#: serverguide/C/security.xml:1588(para)
9125
msgid ""
9126
"There should now be a new file, "
9127
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9128
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9129
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9130
"file named after the hostname of the server where the certificate will be "
9131
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9132
"descriptive name."
9133
msgstr ""
9134
9135
#: serverguide/C/security.xml:1596(para)
9136
msgid ""
9137
"Subsequent certificates will be named <filename>02.pem</filename>, "
9138
"<filename>03.pem</filename>, etc."
9139
msgstr ""
9140
9141
#: serverguide/C/security.xml:1601(para)
9142
msgid ""
9143
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9144
"name."
9145
msgstr ""
9146
9147
#: serverguide/C/security.xml:1609(para)
9148
msgid ""
9149
"Finally, copy the new certificate to the host that needs it, and configure "
9150
"the appropriate applications to use it. The default location to install "
9151
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9152
"enables multiple services to use the same certificate without overly "
9153
"complicated file permissions."
9154
msgstr ""
9155
9156
#: serverguide/C/security.xml:1615(para)
9157
msgid ""
9158
"For applications that can be configured to use a CA certificate, you should "
9159
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9160
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9161
"server."
9162
msgstr ""
9163
9164
#: serverguide/C/security.xml:1629(para)
9165
msgid ""
9166
"For more detailed instructions on using cryptography see the <ulink "
9167
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9168
"Certificates HOWTO</ulink> by tlpd.org"
9169
msgstr ""
9170
9171
#: serverguide/C/security.xml:1635(para)
9172
msgid ""
9173
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9174
"of Certificate Authorities."
9175
msgstr ""
9176
9177
#: serverguide/C/security.xml:1640(para)
9178
msgid ""
9179
"The Wikipedia <ulink "
9180
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9181
"information regarding HTTPS."
9182
msgstr ""
9183
9184
#: serverguide/C/security.xml:1645(para)
9185
msgid ""
9186
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9187
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9188
msgstr ""
9189
9190
#: serverguide/C/security.xml:1650(para)
9191
msgid ""
9192
"Also, O'Reilly's <ulink "
9193
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9194
"OpenSSL</ulink> is a good in depth reference."
9195
msgstr ""
9196
9197
#: serverguide/C/security.xml:1659(title)
9198
msgid "eCryptfs"
9199
msgstr ""
9200
9201
#: serverguide/C/security.xml:1661(para)
9202
msgid ""
9203
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9204
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9205
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9206
"filesystem, partition type, etc."
9207
msgstr ""
9208
9209
#: serverguide/C/security.xml:1667(para)
9210
msgid ""
9211
"During installation there is an option to encrypt the <filename "
9212
"role=\"directory\">/home</filename> partition. This will automatically "
9213
"configure everything needed to encrypt and mount the partition."
9214
msgstr ""
9215
9216
#: serverguide/C/security.xml:1672(para)
9217
msgid ""
9218
"As an example, this section will cover configuring <filename "
9219
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9220
msgstr ""
9221
9222
#: serverguide/C/security.xml:1677(title)
9223
msgid "Using eCryptfs"
9224
msgstr ""
9225
9226
#: serverguide/C/security.xml:1679(para)
9227
msgid "First, install the necessary packages. From a terminal prompt enter:"
9228
msgstr ""
9229
9230
#: serverguide/C/security.xml:1684(command)
9231
msgid "sudo apt-get install ecryptfs-utils"
9232
msgstr ""
9233
9234
#: serverguide/C/security.xml:1687(para)
9235
msgid "Now mount the partition to be encrypted:"
9236
msgstr ""
9237
9238
#: serverguide/C/security.xml:1692(command)
9239
msgid "sudo mount -t ecryptfs /srv /srv"
9240
msgstr ""
9241
9242
#: serverguide/C/security.xml:1695(para)
9243
msgid ""
9244
"You will then be prompted for some details on how "
9245
"<application>ecryptfs</application> should encrypt the data."
9246
msgstr ""
9247
9248
#: serverguide/C/security.xml:1699(para)
9249
msgid ""
9250
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9251
"copy the <filename>/etc/default</filename> folder to "
9252
"<filename>/srv</filename>:"
9253
msgstr ""
9254
9255
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9256
msgid "sudo cp -r /etc/default /srv"
9257
msgstr ""
9258
9259
#: serverguide/C/security.xml:1708(para)
9260
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9261
msgstr ""
9262
9263
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9264
msgid "sudo umount /srv"
9265
msgstr ""
9266
9267
#: serverguide/C/security.xml:1714(command)
9268
msgid "cat /srv/default/cron"
9269
msgstr ""
9270
9271
#: serverguide/C/security.xml:1717(para)
9272
msgid ""
9273
"Remounting <filename>/srv</filename> using "
9274
"<application>ecryptfs</application> will make the data viewable once again."
9275
msgstr ""
9276
9277
#: serverguide/C/security.xml:1723(title)
9278
msgid "Automatically Mounting Encrypted Partitions"
9279
msgstr ""
9280
9281
#: serverguide/C/security.xml:1725(para)
9282
msgid ""
9283
"There are a couple of ways to automatically mount an "
9284
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9285
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9286
"mount options, along with a passphrase file residing on a USB key."
9287
msgstr ""
9288
9289
#: serverguide/C/security.xml:1731(para)
9290
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9291
msgstr ""
9292
9293
#: serverguide/C/security.xml:1735(programlisting)
9294
#, no-wrap
9295
msgid ""
9296
"\n"
9297
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9298
"ecryptfs_sig=5826dd62cf81c615\n"
9299
"ecryptfs_cipher=aes\n"
9300
"ecryptfs_key_bytes=16\n"
9301
"ecryptfs_passthrough=n\n"
9302
"ecryptfs_enable_filename_crypto=n\n"
9303
msgstr ""
9304
9305
#: serverguide/C/security.xml:1745(para)
9306
msgid ""
9307
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9308
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9309
msgstr ""
9310
9311
#: serverguide/C/security.xml:1750(para)
9312
msgid ""
9313
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9314
"file:"
9315
msgstr ""
9316
9317
#: serverguide/C/security.xml:1754(programlisting)
9318
#, no-wrap
9319
msgid ""
9320
"\n"
9321
"passphrase_passwd=[secrets]\n"
9322
msgstr ""
9323
9324
#: serverguide/C/security.xml:1758(para)
9325
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9326
msgstr ""
9327
9328
#: serverguide/C/security.xml:1762(programlisting)
9329
#, no-wrap
9330
msgid ""
9331
"\n"
9332
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9333
"/srv /srv ecryptfs defaults 0 0\n"
9334
msgstr ""
9335
9336
#: serverguide/C/security.xml:1767(para)
9337
msgid "Make sure the USB drive is mounted before the encrypted partition."
9338
msgstr ""
9339
9340
#: serverguide/C/security.xml:1771(para)
9341
msgid ""
9342
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9343
"ecryptfs."
9344
msgstr ""
9345
9346
#: serverguide/C/security.xml:1779(para)
9347
msgid ""
9348
"The <application>ecryptfs-utils</application> package includes several other "
9349
"useful utilities:"
9350
msgstr ""
9351
9352
#: serverguide/C/security.xml:1785(para)
9353
msgid ""
9354
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9355
"<filename>~/Private</filename> directory to contain encrypted information. "
9356
"This utility can be run by unprivileged users to keep data private from "
9357
"other users on the system."
9358
msgstr ""
9359
9360
#: serverguide/C/security.xml:1792(para)
9361
msgid ""
9362
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9363
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9364
"directory."
9365
msgstr ""
9366
9367
#: serverguide/C/security.xml:1798(para)
9368
msgid ""
9369
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9370
"kernel keyring."
9371
msgstr ""
9372
9373
#: serverguide/C/security.xml:1803(para)
9374
msgid ""
9375
"<emphasis>ecryptfs-manager:</emphasis> manages "
9376
"<application>eCryptfs</application> objects such as keys."
9377
msgstr ""
9378
9379
#: serverguide/C/security.xml:1808(para)
9380
msgid ""
9381
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9382
"<application>ecryptfs</application> meta information for a file."
9383
msgstr ""
9384
9385
#: serverguide/C/security.xml:1821(para)
9386
msgid ""
9387
"For more information on eCryptfs see the <ulink "
9388
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9389
msgstr ""
9390
9391
#: serverguide/C/security.xml:1826(para)
9392
msgid ""
9393
"There is also a <ulink "
9394
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9395
"article covering eCryptfs."
9396
msgstr ""
9397
9398
#: serverguide/C/security.xml:1831(para)
9399
msgid ""
9400
"Also, for more <application>ecryptfs</application> options see the <ulink "
9401
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9402
"yptfs man page</ulink>."
9403
msgstr ""
9404
9405
#: serverguide/C/security.xml:1837(para)
9406
msgid ""
9407
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9408
"Ubuntu Wiki</ulink> page also has more details."
9409
msgstr ""
9410
9411
#: serverguide/C/reporting-bugs.xml:13(title)
9412
msgid "Appendix"
9413
msgstr ""
9414
9415
#: serverguide/C/reporting-bugs.xml:16(title)
9416
msgid "Reporting Bugs in Ubuntu Server Edition"
9417
msgstr ""
9418
9419
#: serverguide/C/reporting-bugs.xml:18(para)
9420
msgid ""
9421
"While the Ubuntu Project attempts to release software with as few bugs as "
9422
"possible, they do occur. You can help fix these bugs by reporting ones that "
9423
"you find to the project. The Ubuntu Project uses <ulink "
9424
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9425
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9426
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9427
"account</ulink>."
9428
msgstr ""
9429
9430
#: serverguide/C/reporting-bugs.xml:30(title)
9431
msgid "Reporting Bugs With ubuntu-bug"
9432
msgstr ""
9433
9434
#: serverguide/C/reporting-bugs.xml:32(para)
9435
msgid ""
9436
"The preferred way to report a bug is with the <application>ubuntu-"
9437
"bug</application> command. The ubuntu-bug tool gathers information about the "
9438
"system useful to developers in diagnosing the reported problem that will "
9439
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9440
"need to be filed against a specific software package, thus the name of the "
9441
"package that the bug occurs in needs to be given to ubuntu-bug:"
9442
msgstr ""
9443
9444
#: serverguide/C/reporting-bugs.xml:43(command)
9445
msgid "ubuntu-bug PACKAGENAME"
9446
msgstr ""
9447
9448
#: serverguide/C/reporting-bugs.xml:46(para)
9449
msgid ""
9450
"For example, to file a bug against the openssh-server package, you would do:"
9451
msgstr ""
9452
9453
#: serverguide/C/reporting-bugs.xml:51(command)
9454
msgid "ubuntu-bug openssh-server"
9455
msgstr ""
9456
9457
#: serverguide/C/reporting-bugs.xml:54(para)
9458
msgid ""
9459
"You can specify either a binary package or the source package for ubuntu-"
9460
"bug. Again using openssh-server as an example, you could also generate the "
9461
"report against the source package for openssh-server, openssh:"
9462
msgstr ""
9463
9464
#: serverguide/C/reporting-bugs.xml:62(command)
9465
msgid "ubuntu-bug openssh"
9466
msgstr ""
9467
9468
#: serverguide/C/reporting-bugs.xml:66(para)
9469
msgid ""
9470
"See <xref linkend=\"package-management\"/> for more information about "
9471
"packages in Ubuntu."
9472
msgstr ""
9473
9474
#: serverguide/C/reporting-bugs.xml:72(para)
9475
msgid ""
9476
"The ubuntu-bug command will gather information about the system in question, "
9477
"possibly including information specific to the specified package, and then "
9478
"ask you what you would like to do with collected information:"
9479
msgstr ""
9480
9481
#: serverguide/C/reporting-bugs.xml:80(command)
9482
msgid "ubuntu-bug postgresql"
9483
msgstr ""
9484
9485
#: serverguide/C/reporting-bugs.xml:79(screen)
9486
#, no-wrap
9487
msgid ""
9488
"\n"
9489
"<placeholder-1/>\n"
9490
"\n"
9491
"*** Collecting problem information\n"
9492
"\n"
9493
"The collected information can be sent to the developers to improve the\n"
9494
"application. This might take a few minutes.\n"
9495
"..........\n"
9496
"\n"
9497
"*** Send problem report to the developers?\n"
9498
"\n"
9499
"After the problem report has been sent, please fill out the form in the\n"
9500
"automatically opened web browser.\n"
9501
"\n"
9502
"What would you like to do? Your options are:\n"
9503
" S: Send report (1.7 KiB)\n"
9504
" V: View report\n"
9505
" K: Keep report file for sending later or copying to somewhere else\n"
9506
" C: Cancel\n"
9507
"Please choose (S/V/K/C):\n"
9508
msgstr ""
9509
9510
#: serverguide/C/reporting-bugs.xml:101(para)
9511
msgid "The options available are:"
9512
msgstr ""
9513
9514
#: serverguide/C/reporting-bugs.xml:108(para)
9515
msgid ""
9516
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9517
"the collected information to Launchpad as part of the the process of filing "
9518
"a bug report. You will be given the opportunity to describe the situation "
9519
"that led up to the occurrance of the bug."
9520
msgstr ""
9521
9522
#: serverguide/C/reporting-bugs.xml:115(screen)
9523
#, no-wrap
9524
msgid ""
9525
"\n"
9526
"*** Uploading problem information\n"
9527
"\n"
9528
"The collected information is being sent to the bug tracking system.\n"
9529
"This might take a few minutes.\n"
9530
"91%\n"
9531
"\n"
9532
"*** To continue, you must visit the following URL:\n"
9533
"\n"
9534
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9535
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9536
"\n"
9537
"You can launch a browser now, or copy this URL into a browser on another\n"
9538
"computer.\n"
9539
"\n"
9540
"Choices:\n"
9541
" 1: Launch a browser now\n"
9542
" C: Cancel\n"
9543
"Please choose (1/C):\n"
9544
msgstr ""
9545
9546
#: serverguide/C/reporting-bugs.xml:135(para)
9547
msgid ""
9548
"If you choose to start a browser, by default the text based web browser "
9549
"<application>w3m</application> will be used to finish filing the bug report. "
9550
"Alternately, you can copy the given URL to a currently running web browser."
9551
msgstr ""
9552
9553
#: serverguide/C/reporting-bugs.xml:144(para)
9554
msgid ""
9555
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9556
"the collected information to be displayed to the terminal for review."
9557
msgstr ""
9558
9559
#: serverguide/C/reporting-bugs.xml:150(screen)
9560
#, no-wrap
9561
msgid ""
9562
"\n"
9563
"Package: postgresql 8.4.2-2\n"
9564
"PackageArchitecture: all\n"
9565
"Tags: lucid\n"
9566
"ProblemType: Bug\n"
9567
"ProcEnviron:\n"
9568
" LANG=en_US.UTF-8\n"
9569
" SHELL=/bin/bash\n"
9570
"Uname: Linux 2.6.32-16-server x86_64\n"
9571
"Dependencies:\n"
9572
" adduser 3.112ubuntu1\n"
9573
" base-files 5.0.0ubuntu10\n"
9574
" base-passwd 3.5.22\n"
9575
" coreutils 7.4-2ubuntu2\n"
9576
"...\n"
9577
msgstr ""
9578
9579
#: serverguide/C/reporting-bugs.xml:167(para)
9580
msgid ""
9581
"After viewing the report, you will be brought back to the same menu asking "
9582
"what you would like to do with the report."
9583
msgstr ""
9584
9585
#: serverguide/C/reporting-bugs.xml:174(para)
9586
msgid ""
9587
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9588
"File causes the gathered information to be written to a file. This file can "
9589
"then be used to later file a bug report or transferred to a different Ubuntu "
9590
"system for reporting. To submit the report file, simply give it as an "
9591
"argument to the ubuntu-bug command:"
9592
msgstr ""
9593
9594
#: serverguide/C/reporting-bugs.xml:189(userinput)
9595
#, no-wrap
9596
msgid "k"
9597
msgstr ""
9598
9599
#: serverguide/C/reporting-bugs.xml:192(command)
9600
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9601
msgstr ""
9602
9603
#: serverguide/C/reporting-bugs.xml:183(screen)
9604
#, no-wrap
9605
msgid ""
9606
"\n"
9607
"What would you like to do? Your options are:\n"
9608
" S: Send report (1.7 KiB)\n"
9609
" V: View report\n"
9610
" K: Keep report file for sending later or copying to somewhere else\n"
9611
" C: Cancel\n"
9612
"Please choose (S/V/K/C): <placeholder-1/>\n"
9613
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9614
"\n"
9615
"<placeholder-2/>\n"
9616
"\n"
9617
"*** Send problem report to the developers?\n"
9618
"...\n"
9619
msgstr ""
9620
9621
#: serverguide/C/reporting-bugs.xml:200(para)
9622
msgid ""
9623
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9624
"collected information to be discarded."
9625
msgstr ""
9626
9627
#: serverguide/C/reporting-bugs.xml:210(title)
9628
msgid "Reporting Application Crashes"
9629
msgstr ""
9630
9631
#: serverguide/C/reporting-bugs.xml:212(para)
9632
msgid ""
9633
"The software package that provides the ubuntu-bug utility, "
9634
"<application>apport</application>, can be configured to trigger when "
9635
"applications crash. This is disabled by default, as capturing a crash can be "
9636
"resource intensive depending on how much memory the application that crashed "
9637
"was using as apport captures and processes the core dump."
9638
msgstr ""
9639
9640
#: serverguide/C/reporting-bugs.xml:221(para)
9641
msgid ""
9642
"Configuring apport to capture information about crashing applications "
9643
"requires a couple of steps. First, <application>gdb</application> needs to "
9644
"be installed; it is not installed by default in Ubuntu Server Edition."
9645
msgstr ""
9646
9647
#: serverguide/C/reporting-bugs.xml:229(command)
9648
msgid "sudo apt-get install gdb"
9649
msgstr ""
9650
9651
#: serverguide/C/reporting-bugs.xml:232(para)
9652
msgid ""
9653
"See <xref linkend=\"package-management\"/> for more information about "
9654
"managing packages in Ubuntu."
9655
msgstr ""
9656
9657
#: serverguide/C/reporting-bugs.xml:237(para)
9658
msgid ""
9659
"Once you have ensured that gdb is installed, open the file "
9660
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9661
"<emphasis>enabled</emphasis> setting to be <emphasis "
9662
"role=\"bold\">1</emphasis> like so:"
9663
msgstr ""
9664
9665
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9666
#, no-wrap
9667
msgid ""
9668
"\n"
9669
"# set this to 0 to disable apport, or to 1 to enable it\n"
9670
"# you can temporarily override this with\n"
9671
"# sudo service apport start force_start=1\n"
9672
"enabled=<userinput>1</userinput>\n"
9673
"\n"
9674
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9675
"maxsize=209715200\n"
9676
msgstr ""
9677
9678
#: serverguide/C/reporting-bugs.xml:254(para)
9679
msgid ""
9680
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9681
"start the apport service:"
9682
msgstr ""
9683
9684
#: serverguide/C/reporting-bugs.xml:261(command)
9685
msgid "sudo start apport"
9686
msgstr ""
9687
9688
#: serverguide/C/reporting-bugs.xml:264(para)
9689
msgid ""
9690
"After an application crashes, use the <application>apport-cli</application> "
9691
"command to search for the existing saved crash report information:"
9692
msgstr ""
9693
9694
#: serverguide/C/reporting-bugs.xml:271(command)
9695
msgid "apport-cli"
9696
msgstr ""
9697
9698
#: serverguide/C/reporting-bugs.xml:270(screen)
9699
#, no-wrap
9700
msgid ""
9701
"\n"
9702
"<placeholder-1/>\n"
9703
"\n"
9704
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
9705
"\n"
9706
"If you were not doing anything confidential (entering passwords or other\n"
9707
"private information), you can help to improve the application by\n"
9708
"reporting\n"
9709
"the problem.\n"
9710
"\n"
9711
"What would you like to do? Your options are:\n"
9712
" R: Report Problem...\n"
9713
" I: Cancel and ignore future crashes of this program version\n"
9714
" C: Cancel\n"
9715
"Please choose (R/I/C):\n"
9716
msgstr ""
9717
9718
#: serverguide/C/reporting-bugs.xml:287(para)
9719
msgid ""
9720
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
9721
"steps as when using ubuntu-bug. One important difference is that a crash "
9722
"report will be marked as private when filed on Launchpad, meaning that it "
9723
"will be visible to only a limited set of bug triagers. These triagers will "
9724
"review the gathered data for private information before making the bug "
9725
"report publicly visible."
9726
msgstr ""
9727
9728
#: serverguide/C/reporting-bugs.xml:307(para)
9729
msgid ""
9730
"See the <ulink "
9731
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
9732
"Bugs</ulink> Ubuntu wiki page."
9733
msgstr ""
9734
9735
#: serverguide/C/reporting-bugs.xml:313(para)
9736
msgid ""
9737
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
9738
"has some useful information. Though some of it pertains to using a GUI."
9739
msgstr ""
9740
9741
#: serverguide/C/remote-administration.xml:13(title)
9742
msgid "Remote Administration"
9743
msgstr ""
9744
9745
#: serverguide/C/remote-administration.xml:14(para)
9746
msgid ""
9747
"There are many ways to remotely administer a Linux server. This chapter will "
9748
"cover one of the most popular <application>SSH</application> as well as "
9749
"<application>eBox</application>, a web based administration framework."
9750
msgstr ""
9751
9752
#: serverguide/C/remote-administration.xml:23(para)
9753
msgid ""
9754
"This section of the Ubuntu Server Guide introduces a powerful collection of "
9755
"tools for the remote control of networked computers and transfer of data "
9756
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
9757
"also learn about some of the configuration settings possible with the "
9758
"OpenSSH server application and how to change them on your Ubuntu system."
9759
msgstr ""
9760
9761
#: serverguide/C/remote-administration.xml:30(para)
9762
msgid ""
9763
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
9764
"family of tools for remotely controlling a computer or transferring files "
9765
"between computers. Traditional tools used to accomplish these functions, "
9766
"such as <application>telnet</application> or <application>rcp</application>, "
9767
"are insecure and transmit the user's password in cleartext when used. "
9768
"OpenSSH provides a server daemon and client tools to facilitate secure, "
9769
"encrypted remote control and file transfer operations, effectively replacing "
9770
"the legacy tools."
9771
msgstr ""
9772
9773
#: serverguide/C/remote-administration.xml:39(para)
9774
msgid ""
9775
"The OpenSSH server component, <application>sshd</application>, listens "
9776
"continuously for client connections from any of the client tools. When a "
9777
"connection request occurs, <application>sshd</application> sets up the "
9778
"correct connection depending on the type of client tool connecting. For "
9779
"example, if the remote computer is connecting with the "
9780
"<application>ssh</application> client application, the OpenSSH server sets "
9781
"up a remote control session after authentication. If a remote user connects "
9782
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
9783
"daemon initiates a secure copy of files between the server and client after "
9784
"authentication. OpenSSH can use many authentication methods, including plain "
9785
"password, public key, and <application>Kerberos</application> tickets."
9786
msgstr ""
9787
9788
#: serverguide/C/remote-administration.xml:53(para)
9789
msgid ""
9790
"Installation of the OpenSSH client and server applications is simple. To "
9791
"install the OpenSSH client applications on your Ubuntu system, use this "
9792
"command at a terminal prompt:"
9793
msgstr ""
9794
9795
#: serverguide/C/remote-administration.xml:59(command)
9796
msgid "sudo apt-get install openssh-client"
9797
msgstr ""
9798
9799
#: serverguide/C/remote-administration.xml:61(para)
9800
msgid ""
9801
"To install the OpenSSH server application, and related support files, use "
9802
"this command at a terminal prompt:"
9803
msgstr ""
9804
9805
#: serverguide/C/remote-administration.xml:66(command)
9806
msgid "sudo apt-get install openssh-server"
9807
msgstr ""
9808
9809
#: serverguide/C/remote-administration.xml:68(para)
9810
msgid ""
9811
"The <application>openssh-server</application> package can also be selected "
9812
"to install during the Server Edition installation process."
9813
msgstr ""
9814
9815
#: serverguide/C/remote-administration.xml:75(para)
9816
msgid ""
9817
"You may configure the default behavior of the OpenSSH server application, "
9818
"<application>sshd</application>, by editing the file "
9819
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
9820
"configuration directives used in this file, you may view the appropriate "
9821
"manual page with the following command, issued at a terminal prompt:"
9822
msgstr ""
9823
9824
#: serverguide/C/remote-administration.xml:83(command)
9825
msgid "man sshd_config"
9826
msgstr ""
9827
9828
#: serverguide/C/remote-administration.xml:85(para)
9829
msgid ""
9830
"There are many directives in the <application>sshd</application> "
9831
"configuration file controlling such things as communication settings and "
9832
"authentication modes. The following are examples of configuration directives "
9833
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
9834
"file."
9835
msgstr ""
9836
9837
#: serverguide/C/remote-administration.xml:92(para)
9838
msgid ""
9839
"Prior to editing the configuration file, you should make a copy of the "
9840
"original file and protect it from writing so you will have the original "
9841
"settings as a reference and to reuse as necessary."
9842
msgstr ""
9843
9844
#: serverguide/C/remote-administration.xml:96(para)
9845
msgid ""
9846
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
9847
"writing with the following commands, issued at a terminal prompt:"
9848
msgstr ""
9849
9850
#: serverguide/C/remote-administration.xml:101(command)
9851
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
9852
msgstr ""
9853
9854
#: serverguide/C/remote-administration.xml:102(command)
9855
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
9856
msgstr ""
9857
9858
#: serverguide/C/remote-administration.xml:104(para)
9859
msgid ""
9860
"The following are examples of configuration directives you may change:"
9861
msgstr ""
9862
9863
#: serverguide/C/remote-administration.xml:109(para)
9864
msgid ""
9865
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
9866
"port 22, change the Port directive as such:"
9867
msgstr ""
9868
9869
#: serverguide/C/remote-administration.xml:113(para)
9870
msgid "Port 2222"
9871
msgstr ""
9872
9873
#: serverguide/C/remote-administration.xml:118(para)
9874
msgid ""
9875
"To have <application>sshd</application> allow public key-based login "
9876
"credentials, simply add or modify the line:"
9877
msgstr ""
9878
9879
#: serverguide/C/remote-administration.xml:122(para)
9880
msgid "PubkeyAuthentication yes"
9881
msgstr ""
9882
9883
#: serverguide/C/remote-administration.xml:125(para)
9884
msgid ""
9885
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
9886
"present, ensure the line is not commented out."
9887
msgstr ""
9888
9889
#: serverguide/C/remote-administration.xml:131(para)
9890
msgid ""
9891
"To make your OpenSSH server display the contents of the "
9892
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
9893
"or modify the line:"
9894
msgstr ""
9895
9896
#: serverguide/C/remote-administration.xml:136(para)
9897
msgid "Banner /etc/issue.net"
9898
msgstr ""
9899
9900
#: serverguide/C/remote-administration.xml:139(para)
9901
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
9902
msgstr ""
9903
9904
#: serverguide/C/remote-administration.xml:144(para)
9905
msgid ""
9906
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
9907
"save the file, and restart the <application>sshd</application> server "
9908
"application to effect the changes using the following command at a terminal "
9909
"prompt:"
9910
msgstr ""
9911
9912
#: serverguide/C/remote-administration.xml:153(para)
9913
msgid ""
9914
"Many other configuration directives for <application>sshd</application> are "
9915
"available for changing the server application's behavior to fit your needs. "
9916
"Be advised, however, if your only method of access to a server is "
9917
"<application>ssh</application>, and you make a mistake in configuring "
9918
"<application>sshd</application> via the "
9919
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
9920
"out of the server upon restarting it, or that the "
9921
"<application>sshd</application> server refuses to start due to an incorrect "
9922
"configuration directive, so be extra careful when editing this file on a "
9923
"remote server."
9924
msgstr ""
9925
9926
#: serverguide/C/remote-administration.xml:168(title)
9927
msgid "SSH Keys"
9928
msgstr ""
9929
9930
#: serverguide/C/remote-administration.xml:169(para)
9931
msgid ""
9932
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
9933
"the need of a password. SSH key authentication uses two keys a "
9934
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
9935
msgstr ""
9936
9937
#: serverguide/C/remote-administration.xml:173(para)
9938
msgid "To generate the keys, from a terminal prompt enter:"
9939
msgstr ""
9940
9941
#: serverguide/C/remote-administration.xml:177(command)
9942
msgid "ssh-keygen -t dsa"
9943
msgstr ""
9944
9945
#: serverguide/C/remote-administration.xml:179(para)
9946
msgid ""
9947
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
9948
"identity of the user. During the process you will be prompted for a "
9949
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
9950
"key."
9951
msgstr ""
9952
9953
#: serverguide/C/remote-administration.xml:183(para)
9954
msgid ""
9955
"By default the <emphasis>public</emphasis> key is saved in the file "
9956
"<filename>~/.ssh/id_dsa.pub</filename>, while "
9957
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
9958
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
9959
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
9960
msgstr ""
9961
9962
#: serverguide/C/remote-administration.xml:189(command)
9963
msgid "ssh-copy-id username@remotehost"
9964
msgstr ""
9965
9966
#: serverguide/C/remote-administration.xml:191(para)
9967
msgid ""
9968
"Finally, double check the permissions on the "
9969
"<filename>authorized_keys</filename> file, only the authenticated user "
9970
"should have read and write permissions. If the permissions are not correct "
9971
"change them by:"
9972
msgstr ""
9973
9974
#: serverguide/C/remote-administration.xml:196(command)
9975
msgid "chmod 600 .ssh/authorized_keys"
9976
msgstr ""
9977
9978
#: serverguide/C/remote-administration.xml:198(para)
9979
msgid ""
9980
"You should now be able to SSH to the host without being prompted for a "
9981
"password."
9982
msgstr ""
9983
9984
#: serverguide/C/remote-administration.xml:207(para)
9985
msgid ""
9986
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
9987
"page."
9988
msgstr ""
9989
9990
#: serverguide/C/remote-administration.xml:213(ulink)
9991
msgid "OpenSSH Website"
9992
msgstr ""
9993
9994
#: serverguide/C/remote-administration.xml:218(ulink)
9995
msgid "Advanced OpenSSH Wiki Page"
9996
msgstr ""
9997
9998
#: serverguide/C/remote-administration.xml:226(title)
9999
msgid "eBox"
10000
msgstr ""
10001
10002
#: serverguide/C/remote-administration.xml:227(para)
10003
msgid ""
10004
"<application>eBox</application> is a web framework used to manage server "
10005
"application configuration. The modular design of eBox allows you to pick and "
10006
"choose which services you want to configure using eBox."
10007
msgstr ""
10008
10009
#: serverguide/C/remote-administration.xml:234(para)
10010
msgid ""
10011
"The different <application>eBox</application> modules are split into "
10012
"different packages, allowing you to only install those necessary. One way to "
10013
"view the available packages is to enter the following from a terminal:"
10014
msgstr ""
10015
10016
#: serverguide/C/remote-administration.xml:240(command)
10017
msgid "apt-cache rdepends ebox | uniq"
10018
msgstr ""
10019
10020
#: serverguide/C/remote-administration.xml:242(para)
10021
msgid ""
10022
"To install the <application>ebox</application> package, which contains the "
10023
"default modules, enter the following:"
10024
msgstr ""
10025
10026
#: serverguide/C/remote-administration.xml:247(command)
10027
msgid "sudo apt-get install ebox"
10028
msgstr ""
10029
10030
#: serverguide/C/remote-administration.xml:250(para)
10031
msgid ""
10032
"During the installation you will be asked to supply a password for the ebox "
10033
"user. After installing eBox the web interface can be accessed from: "
10034
"<emphasis>https://yourserver/ebox</emphasis>."
10035
msgstr ""
10036
10037
#: serverguide/C/remote-administration.xml:259(para)
10038
msgid ""
10039
"An important thing to remember when using <application>eBox</application> is "
10040
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10041
"button that implements the new configuration. After clicking the Change "
10042
"button most, but not all, modules will then need to be "
10043
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10044
"<quote>Save changes</quote> link in the top right hand corner."
10045
msgstr ""
10046
10047
#: serverguide/C/remote-administration.xml:267(para)
10048
msgid ""
10049
"Once you make a change that requires a Save, the link will change from green "
10050
"to red."
10051
msgstr ""
10052
10053
#: serverguide/C/remote-administration.xml:273(title)
10054
msgid "eBox Modules"
10055
msgstr ""
10056
10057
#: serverguide/C/remote-administration.xml:274(para)
10058
msgid ""
10059
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10060
"new module is installed it will not be automatically enabled."
10061
msgstr ""
10062
10063
#: serverguide/C/remote-administration.xml:278(para)
10064
msgid ""
10065
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10066
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10067
"which modules you would like to enable and click the <quote>Save</quote> "
10068
"link."
10069
msgstr ""
10070
10071
#: serverguide/C/remote-administration.xml:284(title)
10072
msgid "Default Modules"
10073
msgstr ""
10074
10075
#: serverguide/C/remote-administration.xml:285(para)
10076
msgid ""
10077
"This section provides a quick summary of the default "
10078
"<application>eBox</application> modules."
10079
msgstr ""
10080
10081
#: serverguide/C/remote-administration.xml:291(para)
10082
msgid ""
10083
"<emphasis>System:</emphasis> contains options allowing configuration of "
10084
"general eBox items."
10085
msgstr ""
10086
10087
#: serverguide/C/remote-administration.xml:297(para)
10088
msgid ""
10089
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10090
"and contains a change password form."
10091
msgstr ""
10092
10093
#: serverguide/C/remote-administration.xml:303(para)
10094
msgid ""
10095
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10096
"about disk usage."
10097
msgstr ""
10098
10099
#: serverguide/C/remote-administration.xml:309(para)
10100
msgid ""
10101
"<emphasis>Backup:</emphasis> is used to backup "
10102
"<application>eBox</application> configuration information, and the "
10103
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10104
"information not included in the <emphasis>Configuration</emphasis> option "
10105
"such as log files."
10106
msgstr ""
10107
10108
#: serverguide/C/remote-administration.xml:317(para)
10109
msgid ""
10110
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10111
msgstr ""
10112
10113
#: serverguide/C/remote-administration.xml:322(para)
10114
msgid ""
10115
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10116
"when reporting bugs to the eBox developers."
10117
msgstr ""
10118
10119
#: serverguide/C/remote-administration.xml:330(para)
10120
msgid ""
10121
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10122
"queried depending on the purge time configured."
10123
msgstr ""
10124
10125
#: serverguide/C/remote-administration.xml:336(para)
10126
msgid ""
10127
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10128
"through rss, jabber, and log file."
10129
msgstr ""
10130
10131
#: serverguide/C/remote-administration.xml:343(emphasis)
10132
msgid "Available Events:"
10133
msgstr ""
10134
10135
#: serverguide/C/remote-administration.xml:347(para)
10136
msgid ""
10137
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10138
"drops below a configured percentage, 10% by default."
10139
msgstr ""
10140
10141
#: serverguide/C/remote-administration.xml:353(para)
10142
msgid ""
10143
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10144
"has logged something."
10145
msgstr ""
10146
10147
#: serverguide/C/remote-administration.xml:359(para)
10148
msgid ""
10149
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10150
"any issues arise."
10151
msgstr ""
10152
10153
#: serverguide/C/remote-administration.xml:365(para)
10154
msgid ""
10155
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10156
"times in a short time period."
10157
msgstr ""
10158
10159
#: serverguide/C/remote-administration.xml:371(para)
10160
msgid ""
10161
"<emphasis>State:</emphasis> alerts on the state of "
10162
"<application>eBox</application>, either up or down."
10163
msgstr ""
10164
10165
#: serverguide/C/remote-administration.xml:380(emphasis)
10166
msgid "Dispatchers:"
10167
msgstr ""
10168
10169
#: serverguide/C/remote-administration.xml:384(para)
10170
msgid ""
10171
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10172
"<application>eBox</application> log file "
10173
"<filename>/var/log/ebox/ebox.log</filename>."
10174
msgstr ""
10175
10176
#: serverguide/C/remote-administration.xml:391(para)
10177
msgid ""
10178
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10179
"configure it by clicking on the <quote>Configure</quote> icon."
10180
msgstr ""
10181
10182
#: serverguide/C/remote-administration.xml:397(para)
10183
msgid ""
10184
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10185
"subscribe to the link in order to view event alerts."
10186
msgstr ""
10187
10188
#: serverguide/C/remote-administration.xml:410(title)
10189
msgid "Additional Modules"
10190
msgstr ""
10191
10192
#: serverguide/C/remote-administration.xml:411(para)
10193
msgid ""
10194
"Here is a quick description of other available "
10195
"<application>eBox</application> modules:"
10196
msgstr ""
10197
10198
#: serverguide/C/remote-administration.xml:416(para)
10199
msgid ""
10200
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10201
"options through eBox."
10202
msgstr ""
10203
10204
#: serverguide/C/remote-administration.xml:422(para)
10205
msgid ""
10206
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10207
msgstr ""
10208
10209
#: serverguide/C/remote-administration.xml:427(para)
10210
msgid ""
10211
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10212
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10213
msgstr ""
10214
10215
#: serverguide/C/remote-administration.xml:433(para)
10216
msgid ""
10217
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10218
"server."
10219
msgstr ""
10220
10221
#: serverguide/C/remote-administration.xml:438(para)
10222
msgid ""
10223
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10224
"server configuration options."
10225
msgstr ""
10226
10227
#: serverguide/C/remote-administration.xml:444(para)
10228
msgid ""
10229
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10230
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10231
"group of IPs."
10232
msgstr ""
10233
10234
#: serverguide/C/remote-administration.xml:451(para)
10235
msgid ""
10236
"<emphasis>Services:</emphasis> displays configuration information for "
10237
"services that are available to the network."
10238
msgstr ""
10239
10240
#: serverguide/C/remote-administration.xml:457(para)
10241
msgid ""
10242
"<emphasis>Squid:</emphasis> configuration options for the "
10243
"<application>Squid</application> proxy server."
10244
msgstr ""
10245
10246
#: serverguide/C/remote-administration.xml:463(para)
10247
msgid ""
10248
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10249
msgstr ""
10250
10251
#: serverguide/C/remote-administration.xml:468(para)
10252
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10253
msgstr ""
10254
10255
#: serverguide/C/remote-administration.xml:473(para)
10256
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10257
msgstr ""
10258
10259
#: serverguide/C/remote-administration.xml:478(para)
10260
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10261
msgstr ""
10262
10263
#: serverguide/C/remote-administration.xml:483(para)
10264
msgid ""
10265
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10266
"Network application."
10267
msgstr ""
10268
10269
#: serverguide/C/remote-administration.xml:494(para)
10270
msgid ""
10271
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10272
"Wiki</ulink> page has more details."
10273
msgstr ""
10274
10275
#: serverguide/C/remote-administration.xml:499(para)
10276
msgid ""
10277
"For more information also see the <ulink url=\"http://ebox-"
10278
"platform.com/\">eBox Home Page</ulink>."
10279
msgstr ""
10280
10281
#: serverguide/C/package-management.xml:13(title)
10282
msgid "Package Management"
10283
msgstr ""
10284
10285
#: serverguide/C/package-management.xml:14(para)
10286
msgid ""
10287
"Ubuntu features a comprehensive package management system for the "
10288
"installation, upgrade, configuration, and removal of software. In addition "
10289
"to providing access to an organized base of over 24,000 software packages "
10290
"for your Ubuntu computer, the package management facilities also feature "
10291
"dependency resolution capabilities and software update checking."
10292
msgstr ""
10293
10294
#: serverguide/C/package-management.xml:16(para)
10295
msgid ""
10296
"Several tools are available for interacting with Ubuntu's package management "
10297
"system, from simple command-line utilities which may be easily automated by "
10298
"system administrators, to a simple graphical interface which is easy to use "
10299
"by those new to Ubuntu."
10300
msgstr ""
10301
10302
#: serverguide/C/package-management.xml:21(para)
10303
msgid ""
10304
"Ubuntu's package management system is derived from the same system used by "
10305
"the Debian GNU/Linux distribution. The package files contain all of the "
10306
"necessary files, meta-data, and instructions to implement a particular "
10307
"functionality or software application on your Ubuntu computer."
10308
msgstr ""
10309
10310
#: serverguide/C/package-management.xml:24(para)
10311
msgid ""
10312
"Debian package files typically have the extension '.deb', and typically "
10313
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10314
"collections of packages found on various media, such as CD-ROM discs, or "
10315
"online. Packages are normally of the pre-compiled binary format; thus "
10316
"installation is quick and requires no compiling of software."
10317
msgstr ""
10318
10319
#: serverguide/C/package-management.xml:27(para)
10320
msgid ""
10321
"Many complex packages use the concept of <emphasis "
10322
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10323
"packages required by the principal package in order to function properly. "
10324
"For example, the speech synthesis package "
10325
"<application>Festival</application> depends upon the package "
10326
"<application>libasound2</application>, which is a package supplying the "
10327
"<application>ALSA</application> sound library needed for audio playback. In "
10328
"order for <application>Festival</application> to function, it and all of its "
10329
"dependencies must be installed. The software management tools in Ubuntu will "
10330
"do this automatically."
10331
msgstr ""
10332
10333
#: serverguide/C/package-management.xml:32(title)
10334
msgid "dpkg"
10335
msgstr ""
10336
10337
#: serverguide/C/package-management.xml:34(para)
10338
msgid ""
10339
"<application>dpkg</application> is a package manager for "
10340
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10341
"packages, but unlike other package management system's it can not "
10342
"automatically download and install packages and their dependencies. This "
10343
"section covers using <application>dpkg</application> to manage locally "
10344
"installed packages:"
10345
msgstr ""
10346
10347
#: serverguide/C/package-management.xml:43(para)
10348
msgid ""
10349
"To list all packages installed on the system, from a terminal prompt enter:"
10350
msgstr ""
10351
10352
#: serverguide/C/package-management.xml:48(command)
10353
msgid "dpkg -l"
10354
msgstr ""
10355
10356
#: serverguide/C/package-management.xml:54(para)
10357
msgid ""
10358
"Depending on the amount of packages on your system, this can generate a "
10359
"large amount of output. Pipe the output through "
10360
"<application>grep</application> to see if a specific package is installed:"
10361
msgstr ""
10362
10363
#: serverguide/C/package-management.xml:60(command)
10364
msgid "dpkg -l | grep apache2"
10365
msgstr ""
10366
10367
#: serverguide/C/package-management.xml:63(para)
10368
msgid ""
10369
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10370
"package name, or other regular expression."
10371
msgstr ""
10372
10373
#: serverguide/C/package-management.xml:70(para)
10374
msgid ""
10375
"To list the files installed by a package, in this case the "
10376
"<application>ufw</application> package, enter:"
10377
msgstr ""
10378
10379
#: serverguide/C/package-management.xml:75(command)
10380
msgid "dpkg -L ufw"
10381
msgstr ""
10382
10383
#: serverguide/C/package-management.xml:81(para)
10384
msgid ""
10385
"If you are not sure which package installed a file, <application>dpkg -"
10386
"S</application> may be able to tell you. For example:"
10387
msgstr ""
10388
10389
#: serverguide/C/package-management.xml:87(command)
10390
msgid "dpkg -S /etc/host.conf"
10391
msgstr ""
10392
10393
#: serverguide/C/package-management.xml:88(computeroutput)
10394
#, no-wrap
10395
msgid "base-files: /etc/host.conf"
10396
msgstr ""
10397
10398
#: serverguide/C/package-management.xml:91(para)
10399
msgid ""
10400
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10401
"<application>base-files</application> package."
10402
msgstr ""
10403
10404
#: serverguide/C/package-management.xml:96(para)
10405
msgid ""
10406
"Many files are automatically generated during the package install process, "
10407
"and even though they are on the filesystem <command>dpkg -S</command> may "
10408
"not know which package they belong to."
10409
msgstr ""
10410
10411
#: serverguide/C/package-management.xml:105(para)
10412
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10413
msgstr ""
10414
10415
#: serverguide/C/package-management.xml:110(command)
10416
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10417
msgstr ""
10418
10419
#: serverguide/C/package-management.xml:113(para)
10420
msgid ""
10421
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10422
"the local .deb file."
10423
msgstr ""
10424
10425
#: serverguide/C/package-management.xml:120(para)
10426
msgid "Uninstalling a package can be accomplished by:"
10427
msgstr ""
10428
10429
#: serverguide/C/package-management.xml:125(command)
10430
msgid "sudo dpkg -r zip"
10431
msgstr ""
10432
10433
#: serverguide/C/package-management.xml:129(para)
10434
msgid ""
10435
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10436
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10437
"manager that handles dependencies, to ensure that the system is in a "
10438
"consistent state. For example using <command>dpkg -r</command> you can "
10439
"remove the <application>zip</application> package, but any packages that "
10440
"depend on it will still be installed and may no longer function correctly."
10441
msgstr ""
10442
10443
#: serverguide/C/package-management.xml:140(para)
10444
msgid ""
10445
"For more <application>dpkg</application> options see the man page: "
10446
"<command>man dpkg</command>."
10447
msgstr ""
10448
10449
#: serverguide/C/package-management.xml:146(title)
10450
msgid "Apt-Get"
10451
msgstr ""
10452
10453
#: serverguide/C/package-management.xml:147(para)
10454
msgid ""
10455
"The <application>apt-get</application> command is a powerful command-line "
10456
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10457
"(APT) performing such functions as installation of new software packages, "
10458
"upgrade of existing software packages, updating of the package list index, "
10459
"and even upgrading the entire Ubuntu system."
10460
msgstr ""
10461
10462
#: serverguide/C/package-management.xml:150(para)
10463
msgid ""
10464
"Being a simple command-line tool, <application>apt-get</application> has "
10465
"numerous advantages over other package management tools available in Ubuntu "
10466
"for server administrators. Some of these advantages include ease of use over "
10467
"simple terminal connections (SSH) and the ability to be used in system "
10468
"administration scripts, which can in turn be automated by the "
10469
"<application>cron</application> scheduling utility."
10470
msgstr ""
10471
10472
#: serverguide/C/package-management.xml:157(para)
10473
msgid ""
10474
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10475
"packages using the <application>apt-get</application> tool is quite simple. "
10476
"For example, to install the network scanner <emphasis "
10477
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10478
"<command>sudo apt-get install nmap</command>\n"
10479
"</screen>"
10480
msgstr ""
10481
10482
#: serverguide/C/package-management.xml:165(para)
10483
msgid ""
10484
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10485
"packages is also a straightforward and simple process. To remove the nmap "
10486
"package installed in the previous example, type the following: <screen>\n"
10487
"<command>sudo apt-get remove nmap</command>\n"
10488
"</screen>"
10489
msgstr ""
10490
10491
#: serverguide/C/package-management.xml:172(para)
10492
msgid ""
10493
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10494
"multiple packages to be installed or removed, separated by spaces."
10495
msgstr ""
10496
10497
#: serverguide/C/package-management.xml:175(para)
10498
msgid ""
10499
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10500
"remove</command> will remove the package configuration files as well. This "
10501
"may or may not be the desired effect so use with caution."
10502
msgstr ""
10503
10504
#: serverguide/C/package-management.xml:181(para)
10505
msgid ""
10506
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10507
"index is essentially a database of available packages from the repositories "
10508
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10509
"the local package index with the latest changes made in repositories, type "
10510
"the following: <screen>\n"
10511
"<command>sudo apt-get update</command>\n"
10512
"</screen>"
10513
msgstr ""
10514
10515
#: serverguide/C/package-management.xml:189(para)
10516
msgid ""
10517
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10518
"versions of packages currently installed on your computer may become "
10519
"available from the package repositories (for example security updates). To "
10520
"upgrade your system, first update your package index as outlined above, and "
10521
"then type: <screen>\n"
10522
"<command>sudo apt-get upgrade</command>\n"
10523
"</screen>"
10524
msgstr ""
10525
10526
#: serverguide/C/package-management.xml:195(para)
10527
msgid ""
10528
"For information on upgrading to a new Ubuntu release see <xref "
10529
"linkend=\"installing-upgrading\"/>."
10530
msgstr ""
10531
10532
#: serverguide/C/package-management.xml:153(para)
10533
msgid ""
10534
"Some examples of popular uses for the <application>apt-get</application> "
10535
"utility: <placeholder-1/>"
10536
msgstr ""
10537
10538
#: serverguide/C/package-management.xml:201(para)
10539
msgid ""
10540
"Actions of the <application>apt-get</application> command, such as "
10541
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10542
"log file."
10543
msgstr ""
10544
10545
#: serverguide/C/package-management.xml:204(para)
10546
msgid ""
10547
"For further information about the use of <application>APT</application>, "
10548
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10549
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10550
"help</screen>"
10551
msgstr ""
10552
10553
#: serverguide/C/package-management.xml:208(title)
10554
msgid "Aptitude"
10555
msgstr ""
10556
10557
#: serverguide/C/package-management.xml:209(para)
10558
msgid ""
10559
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10560
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10561
"the common package management functions, such as installation, removal, and "
10562
"upgrade, are performed in <application>Aptitude</application> with single-"
10563
"key commands, which are typically lowercase letters."
10564
msgstr ""
10565
10566
#: serverguide/C/package-management.xml:212(para)
10567
msgid ""
10568
"<application>Aptitude</application> is best suited for use in a non-"
10569
"graphical terminal environment to ensure proper functioning of the command "
10570
"keys. You may start <application>Aptitude</application> as a normal user "
10571
"with the following command at a terminal prompt: <screen>\n"
10572
"<command>sudo aptitude</command>\n"
10573
"</screen>"
10574
msgstr ""
10575
10576
#: serverguide/C/package-management.xml:219(para)
10577
msgid ""
10578
"When <application>Aptitude</application> starts, you will see a menu bar at "
10579
"the top of the screen and two panes below the menu bar. The top pane "
10580
"contains package categories, such as <emphasis role=\"italics\">New "
10581
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10582
"Packages</emphasis>. The bottom pane contains information related to the "
10583
"packages and package categories."
10584
msgstr ""
10585
10586
#: serverguide/C/package-management.xml:222(para)
10587
msgid ""
10588
"Using <application>Aptitude</application> for package management is "
10589
"relatively straightforward, and the user interface makes common tasks simple "
10590
"to perform. The following are examples of common package management "
10591
"functions as performed in <application>Aptitude</application>:"
10592
msgstr ""
10593
10594
#: serverguide/C/package-management.xml:226(para)
10595
msgid ""
10596
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10597
"locate the package via the Not Installed Packages package category, for "
10598
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10599
"key, and highlight the package you wish to install. After highlighting the "
10600
"package you wish to install, press the <keycap>+</keycap> key, and the "
10601
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10602
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10603
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10604
"again, and you will be prompted to become root to complete the installation. "
10605
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10606
"your user password to become root. Finally, press <keycap>g</keycap> once "
10607
"more and you'll be prompted to download the package. Press "
10608
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10609
"prompt, and downloading and installation of the package will commence."
10610
msgstr ""
10611
10612
#: serverguide/C/package-management.xml:230(para)
10613
msgid ""
10614
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10615
"locate the package via the Installed Packages package category, for example, "
10616
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10617
"highlight the package you wish to remove. After highlighting the package you "
10618
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10619
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10620
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10621
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10622
"prompted to become root to complete the installation. Press "
10623
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10624
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10625
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10626
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10627
"the package will commence."
10628
msgstr ""
10629
10630
#: serverguide/C/package-management.xml:234(para)
10631
msgid ""
10632
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10633
"package index, simply press the <keycap>u</keycap> key and you will be "
10634
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10635
"which will result in a Password: prompt. Enter your user password to become "
10636
"root. Updating of the package index will commence. Press "
10637
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10638
"presented to complete the process."
10639
msgstr ""
10640
10641
#: serverguide/C/package-management.xml:238(para)
10642
msgid ""
10643
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10644
"perform the update of the package index as detailed above, and then press "
10645
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10646
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10647
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10648
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10649
"result in a Password: prompt. Enter your user password to become root. "
10650
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10651
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10652
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10653
"will commence."
10654
msgstr ""
10655
10656
#: serverguide/C/package-management.xml:245(para)
10657
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10658
msgstr ""
10659
10660
#: serverguide/C/package-management.xml:250(para)
10661
msgid ""
10662
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10663
"configuration remains on system"
10664
msgstr ""
10665
10666
#: serverguide/C/package-management.xml:254(para)
10667
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10668
msgstr ""
10669
10670
#: serverguide/C/package-management.xml:258(para)
10671
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10672
msgstr ""
10673
10674
#: serverguide/C/package-management.xml:262(para)
10675
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10676
msgstr ""
10677
10678
#: serverguide/C/package-management.xml:266(para)
10679
msgid ""
10680
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10681
"configured"
10682
msgstr ""
10683
10684
#: serverguide/C/package-management.xml:270(para)
10685
msgid ""
10686
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10687
"and requires fix"
10688
msgstr ""
10689
10690
#: serverguide/C/package-management.xml:274(para)
10691
msgid ""
10692
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10693
"requires fix"
10694
msgstr ""
10695
10696
#: serverguide/C/package-management.xml:242(para)
10697
msgid ""
10698
"The first column of information displayed in the package list in the top "
10699
"pane, when actually viewing packages lists the current state of the package, "
10700
"and uses the following key to describe the state of the package: "
10701
"<placeholder-1/>"
10702
msgstr ""
10703
10704
#: serverguide/C/package-management.xml:280(para)
10705
msgid ""
10706
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
10707
"wish to exit. Many other functions are available from the Aptitude menu by "
10708
"pressing the <keycap>F10</keycap> key."
10709
msgstr ""
10710
10711
#: serverguide/C/package-management.xml:285(title)
10712
msgid "Automatic Updates"
10713
msgstr ""
10714
10715
#: serverguide/C/package-management.xml:287(para)
10716
msgid ""
10717
"The <application>unattended-upgrades</application> package can be used to "
10718
"automatically install updated packages, and can be configured to update all "
10719
"packages or just install security updates. First, install the package by "
10720
"entering the following in a terminal:"
10721
msgstr ""
10722
10723
#: serverguide/C/package-management.xml:293(command)
10724
msgid "sudo apt-get install unattended-upgrades"
10725
msgstr ""
10726
10727
#: serverguide/C/package-management.xml:296(para)
10728
msgid ""
10729
"To configure <application>unattended-upgrades</application>, edit "
10730
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
10731
"the following to fit your needs:"
10732
msgstr ""
10733
10734
#: serverguide/C/package-management.xml:301(programlisting)
10735
#, no-wrap
10736
msgid ""
10737
"\n"
10738
"Unattended-Upgrade::Allowed-Origins {\n"
10739
" \"Ubuntu lucid-security\";\n"
10740
"// \"Ubuntu lucid-updates\";\n"
10741
"};\n"
10742
msgstr ""
10743
10744
#: serverguide/C/package-management.xml:308(para)
10745
msgid ""
10746
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
10747
"will not be automatically updated. To blacklist a package, add it to the "
10748
"list:"
10749
msgstr ""
10750
10751
#: serverguide/C/package-management.xml:313(programlisting)
10752
#, no-wrap
10753
msgid ""
10754
"\n"
10755
"Unattended-Upgrade::Package-Blacklist {\n"
10756
"// \"vim\";\n"
10757
"// \"libc6\";\n"
10758
"// \"libc6-dev\";\n"
10759
"// \"libc6-i686\";\n"
10760
"};\n"
10761
msgstr ""
10762
10763
#: serverguide/C/package-management.xml:323(para)
10764
msgid ""
10765
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
10766
"whatever follows \"//\" will not be evaluated."
10767
msgstr ""
10768
10769
#: serverguide/C/package-management.xml:328(para)
10770
msgid ""
10771
"To enable automatic updates, edit "
10772
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
10773
"<application>apt</application> configuration options:"
10774
msgstr ""
10775
10776
#: serverguide/C/package-management.xml:332(programlisting)
10777
#, no-wrap
10778
msgid ""
10779
"\n"
10780
"APT::Periodic::Update-Package-Lists \"1\";\n"
10781
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
10782
"APT::Periodic::AutocleanInterval \"7\";\n"
10783
"APT::Periodic::Unattended-Upgrade \"1\";\n"
10784
msgstr ""
10785
10786
#: serverguide/C/package-management.xml:339(para)
10787
msgid ""
10788
"The above configuration updates the package list, downloads, and installs "
10789
"available upgrades every day. The local download archive is cleaned every "
10790
"week."
10791
msgstr ""
10792
10793
#: serverguide/C/package-management.xml:345(para)
10794
msgid ""
10795
"You can read more about <application>apt</application> Periodic "
10796
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
10797
"header."
10798
msgstr ""
10799
10800
#: serverguide/C/package-management.xml:350(para)
10801
msgid ""
10802
"The results of <application>unattended-upgrades</application> will be logged "
10803
"to <filename>/var/log/unattended-upgrades</filename>."
10804
msgstr ""
10805
10806
#: serverguide/C/package-management.xml:355(title)
10807
msgid "Notifications"
10808
msgstr ""
10809
10810
#: serverguide/C/package-management.xml:357(para)
10811
msgid ""
10812
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
10813
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
10814
"<application>unattended-upgrades</application> to email an administrator "
10815
"detailing any packages that need upgrading or have problems."
10816
msgstr ""
10817
10818
#: serverguide/C/package-management.xml:362(para)
10819
msgid ""
10820
"Another useful package is <application>apticron</application>. "
10821
"<application>apticron</application> will configure a "
10822
"<application>cron</application> job to email an administrator information "
10823
"about any packages on the system that have updates available, as well as a "
10824
"summary of changes in each package."
10825
msgstr ""
10826
10827
#: serverguide/C/package-management.xml:368(para)
10828
msgid ""
10829
"To install the <application>apticron</application> package, in a terminal "
10830
"enter:"
10831
msgstr ""
10832
10833
#: serverguide/C/package-management.xml:373(command)
10834
msgid "sudo apt-get install apticron"
10835
msgstr ""
10836
10837
#: serverguide/C/package-management.xml:376(para)
10838
msgid ""
10839
"Once the package is installed edit "
10840
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
10841
"and other options:"
10842
msgstr ""
10843
10844
#: serverguide/C/package-management.xml:380(programlisting)
10845
#, no-wrap
10846
msgid ""
10847
"\n"
10848
"EMAIL=\"root@example.com\"\n"
10849
msgstr ""
10850
10851
#: serverguide/C/package-management.xml:389(para)
10852
msgid ""
10853
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
10854
"system repositories is stored in the /etc/apt/sources.list configuration "
10855
"file. An example of this file is referenced here, along with information on "
10856
"adding or removing repository references from the file."
10857
msgstr ""
10858
10859
#: serverguide/C/package-management.xml:395(para)
10860
msgid ""
10861
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
10862
"typical <filename>/etc/apt/sources.list</filename> file."
10863
msgstr ""
10864
10865
#: serverguide/C/package-management.xml:399(para)
10866
msgid ""
10867
"You may edit the file to enable repositories or disable them. For example, "
10868
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
10869
"operations occur, simply comment out the appropriate line for the CD-ROM, "
10870
"which appears at the top of the file:"
10871
msgstr ""
10872
10873
#: serverguide/C/package-management.xml:404(screen)
10874
#, no-wrap
10875
msgid ""
10876
"\n"
10877
"# no more prompting for CD-ROM please\n"
10878
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
10879
"main restricted\n"
10880
msgstr ""
10881
10882
#: serverguide/C/package-management.xml:410(title)
10883
msgid "Extra Repositories"
10884
msgstr ""
10885
10886
#: serverguide/C/package-management.xml:411(para)
10887
msgid ""
10888
"In addition to the officially supported package repositories available for "
10889
"Ubuntu, there exist additional community-maintained repositories which add "
10890
"thousands more potential packages for installation. Two of the most popular "
10891
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
10892
"repositories. These repositories are not officially supported by Ubuntu, but "
10893
"because they are maintained by the community they generally provide packages "
10894
"which are safe for use with your Ubuntu computer."
10895
msgstr ""
10896
10897
#: serverguide/C/package-management.xml:414(para)
10898
msgid ""
10899
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
10900
"licensing issues that prevent them from being distributed with a free "
10901
"operating system, and they may be illegal in your locality."
10902
msgstr ""
10903
10904
#: serverguide/C/package-management.xml:416(para)
10905
msgid ""
10906
"Be advised that neither the <emphasis>Universe</emphasis> or "
10907
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
10908
"packages. In particular, there may not be security updates for these "
10909
"packages."
10910
msgstr ""
10911
10912
#: serverguide/C/package-management.xml:420(para)
10913
msgid ""
10914
"Many other package sources are available, sometimes even offering only one "
10915
"package, as in the case of package sources provided by the developer of a "
10916
"single application. You should always be very careful and cautious when "
10917
"using non-standard package sources, however. Research the source and "
10918
"packages carefully before performing any installation, as some package "
10919
"sources and their packages could render your system unstable or non-"
10920
"functional in some respects."
10921
msgstr ""
10922
10923
#: serverguide/C/package-management.xml:423(para)
10924
msgid ""
10925
"By default, the <emphasis>Universe</emphasis> and "
10926
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
10927
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
10928
"comment the following lines:"
10929
msgstr ""
10930
10931
#: serverguide/C/package-management.xml:430(programlisting)
10932
#, no-wrap
10933
msgid ""
10934
"\n"
10935
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10936
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
10937
"\n"
10938
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10939
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
10940
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10941
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
10942
"\n"
10943
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10944
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
10945
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10946
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
10947
"\n"
10948
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
10949
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
10950
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10951
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
10952
msgstr ""
10953
10954
#: serverguide/C/package-management.xml:456(para)
10955
msgid ""
10956
"Most of the material covered in this chapter is available in "
10957
"<application>man</application> pages, many of which are available online."
10958
msgstr ""
10959
10960
#: serverguide/C/package-management.xml:463(para)
10961
msgid ""
10962
"The <ulink "
10963
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
10964
"re</ulink> Ubuntu wiki page has more information."
10965
msgstr ""
10966
10967
#: serverguide/C/package-management.xml:468(para)
10968
msgid ""
10969
"For more <application>dpkg</application> details see the <ulink "
10970
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
10971
"man page</ulink>."
10972
msgstr ""
10973
10974
#: serverguide/C/package-management.xml:474(para)
10975
msgid ""
10976
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
10977
"HOWTO</ulink> and <ulink "
10978
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
10979
"get man page</ulink> contain useful information regarding <application>apt-"
10980
"get</application> usage."
10981
msgstr ""
10982
10983
#: serverguide/C/package-management.xml:481(para)
10984
msgid ""
10985
"See the <ulink "
10986
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
10987
"de man page</ulink> for more <application>aptitude</application> options."
10988
msgstr ""
10989
10990
#: serverguide/C/package-management.xml:487(para)
10991
msgid ""
10992
"The <ulink "
10993
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
10994
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
10995
"adding repositories."
10996
msgstr ""
10997
10998
#: serverguide/C/other-apps.xml:13(title)
10999
msgid "Other Useful Applications"
11000
msgstr ""
11001
11002
#: serverguide/C/other-apps.xml:15(para)
11003
msgid ""
11004
"There are many very useful applications developed by the Ubuntu Server Team, "
11005
"and others that are well integrated with Ubuntu Server Edition, that might "
11006
"not be well known. This chapter will showcase some useful applications that "
11007
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11008
"easier."
11009
msgstr ""
11010
11011
#: serverguide/C/other-apps.xml:23(title)
11012
msgid "pam_motd"
11013
msgstr ""
11014
11015
#: serverguide/C/other-apps.xml:25(para)
11016
msgid ""
11017
"When logging into an Ubuntu server you may have noticed the informative "
11018
"Message Of The Day (MOTD). This information is obtained and displayed using "
11019
"a couple of packages:"
11020
msgstr ""
11021
11022
#: serverguide/C/other-apps.xml:32(para)
11023
msgid ""
11024
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11025
"<application>landscape-client</application>, which can be used to manage "
11026
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11027
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11028
"utility which is used to gather the information displayed in the MOTD."
11029
msgstr ""
11030
11031
#: serverguide/C/other-apps.xml:40(para)
11032
msgid ""
11033
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11034
"the MOTD via <application>pam_motd</application> module."
11035
msgstr ""
11036
11037
#: serverguide/C/other-apps.xml:46(para)
11038
msgid ""
11039
"<application>pam_motd</application> executes the scripts in "
11040
"<filename>/etc/update-motd.d</filename> in order based on the number "
11041
"prepended to the script. The output of the scripts is written to "
11042
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11043
"concatenated with <filename>/etc/motd.tail</filename>."
11044
msgstr ""
11045
11046
#: serverguide/C/other-apps.xml:52(para)
11047
msgid ""
11048
"You can add your own dynamic information to the MOTD. For example, to add "
11049
"local weather information:"
11050
msgstr ""
11051
11052
#: serverguide/C/other-apps.xml:58(para)
11053
msgid "First, install the <application>weather-util</application> package:"
11054
msgstr ""
11055
11056
#: serverguide/C/other-apps.xml:63(command)
11057
msgid "sudo apt-get install weather-util"
11058
msgstr ""
11059
11060
#: serverguide/C/other-apps.xml:68(para)
11061
msgid ""
11062
"The <application>weather</application> utility uses METAR data from the "
11063
"National Oceanic and Atmospheric Administration and forecasts from the "
11064
"National Weather Service. In order to find local information you will need "
11065
"the 4-character ICAO location indicator. This can be determined by browsing "
11066
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11067
"Weather Service</ulink> site."
11068
msgstr ""
11069
11070
#: serverguide/C/other-apps.xml:75(para)
11071
msgid ""
11072
"Although the National Weather Service is a United States government agency "
11073
"there are weather stations available world wide. However, local weather "
11074
"information for all locations outside the U.S. may not be available."
11075
msgstr ""
11076
11077
#: serverguide/C/other-apps.xml:81(para)
11078
msgid ""
11079
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11080
"script to use <application>weather</application> with your local ICAO "
11081
"indicator:"
11082
msgstr ""
11083
11084
#: serverguide/C/other-apps.xml:86(programlisting)
11085
#, no-wrap
11086
msgid ""
11087
"\n"
11088
"#!/bin/sh\n"
11089
"#\n"
11090
"#\n"
11091
"# Prints the local weather information for the MOTD.\n"
11092
"#\n"
11093
"#\n"
11094
"\n"
11095
"# Replace KINT with your local weather station.\n"
11096
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11097
"\n"
11098
"echo\n"
11099
"weather -i KINT\n"
11100
"echo\n"
11101
"\n"
11102
msgstr ""
11103
11104
#: serverguide/C/other-apps.xml:104(para)
11105
msgid "Make the script executable:"
11106
msgstr ""
11107
11108
#: serverguide/C/other-apps.xml:109(command)
11109
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11110
msgstr ""
11111
11112
#: serverguide/C/other-apps.xml:113(para)
11113
msgid ""
11114
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11115
"weather</filename>:"
11116
msgstr ""
11117
11118
#: serverguide/C/other-apps.xml:118(command)
11119
msgid ""
11120
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11121
msgstr ""
11122
11123
#: serverguide/C/other-apps.xml:122(para)
11124
msgid "Finally, exit the server and re-login to view the new MOTD."
11125
msgstr ""
11126
11127
#: serverguide/C/other-apps.xml:128(para)
11128
msgid ""
11129
"You should now be greeted with some useful information, and some information "
11130
"about the local weather that may not be quite so useful. Hopefully the "
11131
"<application>local-weather</application> example demonstrates the "
11132
"flexibility of <application>pam_motd</application>."
11133
msgstr ""
11134
11135
#: serverguide/C/other-apps.xml:136(title)
11136
msgid "etckeeper"
11137
msgstr ""
11138
11139
#: serverguide/C/other-apps.xml:138(para)
11140
msgid ""
11141
"<application>etckeeper</application> allows the contents of <filename "
11142
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11143
"System (VCS) repository. It hooks into <application>apt</application> to "
11144
"automatically commit changes to <filename>/etc</filename> when packages are "
11145
"installed or upgraded. Placing <filename>/etc</filename> under version "
11146
"control is considered an industry best practice, and the goal of "
11147
"<application>etckeeper</application> is to make this process as painless as "
11148
"possible."
11149
msgstr ""
11150
11151
#: serverguide/C/other-apps.xml:146(para)
11152
msgid ""
11153
"Install <application>etckeeper</application> by entering the following in a "
11154
"terminal:"
11155
msgstr ""
11156
11157
#: serverguide/C/other-apps.xml:151(command)
11158
msgid "sudo apt-get install etckeeper"
11159
msgstr ""
11160
11161
#: serverguide/C/other-apps.xml:154(para)
11162
msgid ""
11163
"The main configuration file, "
11164
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11165
"main option is which VCS to use. By default "
11166
"<application>etckeeper</application> is configured to use "
11167
"<application>bzr</application> for version control. The repository is "
11168
"automatically initialized (and committed for the first time) during package "
11169
"installation. It is possible to undo this by entering the following command:"
11170
msgstr ""
11171
11172
#: serverguide/C/other-apps.xml:164(command)
11173
msgid "sudo etckeeper uninit"
11174
msgstr ""
11175
11176
#: serverguide/C/other-apps.xml:167(para)
11177
msgid ""
11178
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11179
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11180
"It will also automatically commit changes before and after package "
11181
"installation. For a more precise tracking of changes, it is recommended to "
11182
"commit your changes manually, together with a commit message, using:"
11183
msgstr ""
11184
11185
#: serverguide/C/other-apps.xml:176(command)
11186
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11187
msgstr ""
11188
11189
#: serverguide/C/other-apps.xml:179(para)
11190
msgid ""
11191
"Using the VCS commands you can view log information about files in "
11192
"<filename>/etc</filename>:"
11193
msgstr ""
11194
11195
#: serverguide/C/other-apps.xml:184(command)
11196
msgid "sudo bzr log /etc/passwd"
11197
msgstr ""
11198
11199
#: serverguide/C/other-apps.xml:187(para)
11200
msgid ""
11201
"To demonstrate the integration with the package management system, install "
11202
"<application>postfix</application>:"
11203
msgstr ""
11204
11205
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11206
msgid "sudo apt-get install postfix"
11207
msgstr ""
11208
11209
#: serverguide/C/other-apps.xml:195(para)
11210
msgid ""
11211
"When the installation is finished, all the "
11212
"<application>postfix</application> configuration files should be committed "
11213
"to the repository:"
11214
msgstr ""
11215
11216
#: serverguide/C/other-apps.xml:201(computeroutput)
11217
#, no-wrap
11218
msgid ""
11219
"Committing to: /etc/\n"
11220
"added aliases.db\n"
11221
"modified group\n"
11222
"modified group-\n"
11223
"modified gshadow\n"
11224
"modified gshadow-\n"
11225
"modified passwd\n"
11226
"modified passwd-\n"
11227
"added postfix\n"
11228
"added resolvconf\n"
11229
"added rsyslog.d\n"
11230
"modified shadow\n"
11231
"modified shadow-\n"
11232
"added init.d/postfix\n"
11233
"added network/if-down.d/postfix\n"
11234
"added network/if-up.d/postfix\n"
11235
"added postfix/dynamicmaps.cf\n"
11236
"added postfix/main.cf\n"
11237
"added postfix/master.cf\n"
11238
"added postfix/post-install\n"
11239
"added postfix/postfix-files\n"
11240
"added postfix/postfix-script\n"
11241
"added postfix/sasl\n"
11242
"added ppp/ip-down.d\n"
11243
"added ppp/ip-down.d/postfix\n"
11244
"added ppp/ip-up.d/postfix\n"
11245
"added rc0.d/K20postfix\n"
11246
"added rc1.d/K20postfix\n"
11247
"added rc2.d/S20postfix\n"
11248
"added rc3.d/S20postfix\n"
11249
"added rc4.d/S20postfix\n"
11250
"added rc5.d/S20postfix\n"
11251
"added rc6.d/K20postfix\n"
11252
"added resolvconf/update-libc.d\n"
11253
"added resolvconf/update-libc.d/postfix\n"
11254
"added rsyslog.d/postfix.conf\n"
11255
"added ufw/applications.d/postfix\n"
11256
"Committed revision 2."
11257
msgstr ""
11258
11259
#: serverguide/C/other-apps.xml:241(para)
11260
msgid ""
11261
"For an example of how <application>etckeeper</application> tracks manual "
11262
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11263
"<application>bzr</application> you can see which files have been modified:"
11264
msgstr ""
11265
11266
#: serverguide/C/other-apps.xml:247(command)
11267
msgid "sudo bzr status /etc/"
11268
msgstr ""
11269
11270
#: serverguide/C/other-apps.xml:248(computeroutput)
11271
#, no-wrap
11272
msgid ""
11273
"modified:\n"
11274
" hosts"
11275
msgstr ""
11276
11277
#: serverguide/C/other-apps.xml:252(para)
11278
msgid "Now commit the changes:"
11279
msgstr ""
11280
11281
#: serverguide/C/other-apps.xml:257(command)
11282
msgid "sudo etckeeper commit \"new host\""
11283
msgstr ""
11284
11285
#: serverguide/C/other-apps.xml:260(para)
11286
msgid ""
11287
"For more information on <application>bzr</application> see <xref "
11288
"linkend=\"bazaar\"/>."
11289
msgstr ""
11290
11291
#: serverguide/C/other-apps.xml:266(title)
11292
msgid "Byobu"
11293
msgstr ""
11294
11295
#: serverguide/C/other-apps.xml:268(para)
11296
msgid ""
11297
"One of the most useful applications for any system administrator is "
11298
"<application>screen</application>. It allows the execution of multiple "
11299
"shells in one terminal. To make some of the advanced "
11300
"<application>screen</application> features more user friendly, and provide "
11301
"some useful information about the system, the "
11302
"<application>byobu</application> package was created."
11303
msgstr ""
11304
11305
#: serverguide/C/other-apps.xml:275(para)
11306
msgid ""
11307
"When executing <application>byobu</application> pressing the "
11308
"<emphasis>F9</emphasis> key will bring up the "
11309
"<application>Configuration</application> menu. This menu will allow you to:"
11310
msgstr ""
11311
11312
#: serverguide/C/other-apps.xml:281(para)
11313
msgid "View the Help menu"
11314
msgstr ""
11315
11316
#: serverguide/C/other-apps.xml:282(para)
11317
msgid "Change Byobu's background color"
11318
msgstr ""
11319
11320
#: serverguide/C/other-apps.xml:283(para)
11321
msgid "Change Byobu's foreground color"
11322
msgstr ""
11323
11324
#: serverguide/C/other-apps.xml:284(para)
11325
msgid "Toggle status notifications"
11326
msgstr ""
11327
11328
#: serverguide/C/other-apps.xml:285(para)
11329
msgid "Change the key binding set"
11330
msgstr ""
11331
11332
#: serverguide/C/other-apps.xml:286(para)
11333
msgid "Change the escape sequence"
11334
msgstr ""
11335
11336
#: serverguide/C/other-apps.xml:287(para)
11337
msgid "Create new windows"
11338
msgstr ""
11339
11340
#: serverguide/C/other-apps.xml:288(para)
11341
msgid "Manage the default windows"
11342
msgstr ""
11343
11344
#: serverguide/C/other-apps.xml:289(para)
11345
msgid "Byobu currently does not launch at login (toggle on)"
11346
msgstr ""
11347
11348
#: serverguide/C/other-apps.xml:292(para)
11349
msgid ""
11350
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11351
"sequence, new window, change window, etc. There are two key binding sets to "
11352
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11353
"keys</emphasis>. If you wish to use the original key bindings choose the "
11354
"<emphasis>none</emphasis> set."
11355
msgstr ""
11356
11357
#: serverguide/C/other-apps.xml:298(para)
11358
msgid ""
11359
"<application>byobu</application> provides a menu which displays the Ubuntu "
11360
"release, processor information, memory information, and the time and date. "
11361
"The effect is similar to a desktop menu."
11362
msgstr ""
11363
11364
#: serverguide/C/other-apps.xml:303(para)
11365
msgid ""
11366
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11367
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11368
"executed any time a terminal is opened. Changes made to "
11369
"<application>byobu</application> are on a per user basis, and will not "
11370
"affect other users on the system."
11371
msgstr ""
11372
11373
#: serverguide/C/other-apps.xml:309(para)
11374
msgid ""
11375
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11376
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11377
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11378
"commands. Here is a quick list of movement commands:"
11379
msgstr ""
11380
11381
#: serverguide/C/other-apps.xml:316(para)
11382
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11383
msgstr ""
11384
11385
#: serverguide/C/other-apps.xml:317(para)
11386
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11387
msgstr ""
11388
11389
#: serverguide/C/other-apps.xml:318(para)
11390
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11391
msgstr ""
11392
11393
#: serverguide/C/other-apps.xml:319(para)
11394
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11395
msgstr ""
11396
11397
#: serverguide/C/other-apps.xml:320(para)
11398
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11399
msgstr ""
11400
11401
#: serverguide/C/other-apps.xml:321(para)
11402
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11403
msgstr ""
11404
11405
#: serverguide/C/other-apps.xml:322(para)
11406
msgid ""
11407
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11408
"the buffer)"
11409
msgstr ""
11410
11411
#: serverguide/C/other-apps.xml:323(para)
11412
msgid "<emphasis>/</emphasis> - Search forward"
11413
msgstr ""
11414
11415
#: serverguide/C/other-apps.xml:324(para)
11416
msgid "<emphasis>?</emphasis> - Search backward"
11417
msgstr ""
11418
11419
#: serverguide/C/other-apps.xml:325(para)
11420
msgid ""
11421
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11422
msgstr ""
11423
11424
#: serverguide/C/other-apps.xml:334(para)
11425
msgid ""
11426
"See the <ulink "
11427
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11428
"update-motd man page</ulink> for more options available to "
11429
"<application>update-motd</application>."
11430
msgstr ""
11431
11432
#: serverguide/C/other-apps.xml:340(para)
11433
msgid ""
11434
"The Debian Package of the Day <ulink "
11435
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11436
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11437
"details about using the <application>weather</application>utility."
11438
msgstr ""
11439
11440
#: serverguide/C/other-apps.xml:347(para)
11441
msgid ""
11442
"See the <ulink "
11443
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11444
"more details on using <application>etckeeper</application>."
11445
msgstr ""
11446
11447
#: serverguide/C/other-apps.xml:353(para)
11448
msgid ""
11449
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11450
"Ubuntu Wiki</ulink> page."
11451
msgstr ""
11452
11453
#: serverguide/C/other-apps.xml:358(para)
11454
msgid ""
11455
"For the latest news and information about <application>bzr</application> see "
11456
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11457
msgstr ""
11458
11459
#: serverguide/C/other-apps.xml:363(para)
11460
msgid ""
11461
"For more information on <application>screen</application> see the <ulink "
11462
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11463
msgstr ""
11464
11465
#: serverguide/C/other-apps.xml:368(para)
11466
msgid ""
11467
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11468
"screen</ulink> page."
11469
msgstr ""
11470
11471
#: serverguide/C/other-apps.xml:373(para)
11472
msgid ""
11473
"Also, see the <application>byobu</application><ulink "
11474
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11475
"information."
11476
msgstr ""
11477
11478
#: serverguide/C/network-config.xml:14(para)
11479
msgid ""
11480
"Networks consist of two or more devices, such as computer systems, printers, "
11481
"and related equipment which are connected by either physical cabling or "
11482
"wireless links for the purpose of sharing and distributing information among "
11483
"the connected devices."
11484
msgstr ""
11485
11486
#: serverguide/C/network-config.xml:20(para)
11487
msgid ""
11488
"This section provides general and specific information pertaining to "
11489
"networking, including an overview of network concepts and detailed "
11490
"discussion of popular network protocols."
11491
msgstr ""
11492
11493
#: serverguide/C/network-config.xml:27(title)
11494
msgid "Network Configuration"
11495
msgstr ""
11496
11497
#: serverguide/C/network-config.xml:28(para)
11498
msgid ""
11499
"Ubuntu ships with a number of graphical utilities to configure your network "
11500
"devices. This document is geared toward server administrators and will focus "
11501
"on managing your network on the command line."
11502
msgstr ""
11503
11504
#: serverguide/C/network-config.xml:35(title)
11505
msgid "Ethernet Interfaces"
11506
msgstr ""
11507
11508
#: serverguide/C/network-config.xml:36(para)
11509
msgid ""
11510
"Ethernet interfaces are identified by the system using the naming convention "
11511
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11512
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11513
"interface is typically identified as <emphasis "
11514
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11515
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11516
"order."
11517
msgstr ""
11518
11519
#: serverguide/C/network-config.xml:46(title)
11520
msgid "Identify Ethernet Interfaces"
11521
msgstr ""
11522
11523
#: serverguide/C/network-config.xml:47(para)
11524
msgid ""
11525
"To quickly identify all available Ethernet interfaces, you can use the "
11526
"<application>ifconfig</application> command as shown below."
11527
msgstr ""
11528
11529
#: serverguide/C/network-config.xml:52(userinput)
11530
#, no-wrap
11531
msgid "ifconfig -a | grep eth"
11532
msgstr ""
11533
11534
#: serverguide/C/network-config.xml:51(screen)
11535
#, no-wrap
11536
msgid ""
11537
"\n"
11538
"<placeholder-1/>\n"
11539
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11540
msgstr ""
11541
11542
#: serverguide/C/network-config.xml:55(para)
11543
msgid ""
11544
"Another application that can help identify all network interfaces available "
11545
"to your system is the <application>lshw</application> command. In the "
11546
"example below, <application>lshw</application> shows a single Ethernet "
11547
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11548
"along with bus information, driver details and all supported capabilities."
11549
msgstr ""
11550
11551
#: serverguide/C/network-config.xml:62(userinput)
11552
#, no-wrap
11553
msgid "sudo lshw -class network"
11554
msgstr ""
11555
11556
#: serverguide/C/network-config.xml:61(screen)
11557
#, no-wrap
11558
msgid ""
11559
"\n"
11560
"<placeholder-1/>\n"
11561
" *-network\n"
11562
" description: Ethernet interface\n"
11563
" product: BCM4401-B0 100Base-TX\n"
11564
" vendor: Broadcom Corporation\n"
11565
" physical id: 0\n"
11566
" bus info: pci@0000:03:00.0\n"
11567
" logical name: eth0\n"
11568
" version: 02\n"
11569
" serial: 00:15:c5:4a:16:5a\n"
11570
" size: 10MB/s\n"
11571
" capacity: 100MB/s\n"
11572
" width: 32 bits\n"
11573
" clock: 33MHz\n"
11574
" capabilities: (snipped for brevity)\n"
11575
" configuration: (snipped for brevity)\n"
11576
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11577
msgstr ""
11578
11579
#: serverguide/C/network-config.xml:83(title)
11580
msgid "Ethernet Interface Logical Names"
11581
msgstr ""
11582
11583
#: serverguide/C/network-config.xml:84(para)
11584
msgid ""
11585
"Interface logical names are configured in the file "
11586
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11587
"like control which interface receives a particular logical name, find the "
11588
"line matching the interfaces physical MAC address and modify the value of "
11589
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11590
"Reboot the system to commit your changes."
11591
msgstr ""
11592
11593
#: serverguide/C/network-config.xml:92(programlisting)
11594
#, no-wrap
11595
msgid ""
11596
"\n"
11597
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11598
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11599
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11600
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11601
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11602
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11603
msgstr ""
11604
11605
#: serverguide/C/network-config.xml:99(title)
11606
msgid "Ethernet Interface Settings"
11607
msgstr ""
11608
11609
#: serverguide/C/network-config.xml:100(para)
11610
msgid ""
11611
"<application>ethtool</application> is a program that displays and changes "
11612
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11613
"and Wake-on-LAN. It is not installed by default, but is available for "
11614
"installation in the repositories."
11615
msgstr ""
11616
11617
#: serverguide/C/network-config.xml:106(userinput)
11618
#, no-wrap
11619
msgid "sudo apt-get install ethtool"
11620
msgstr ""
11621
11622
#: serverguide/C/network-config.xml:108(para)
11623
msgid ""
11624
"The following is an example of how to view supported features and configured "
11625
"settings of an Ethernet interface."
11626
msgstr ""
11627
11628
#: serverguide/C/network-config.xml:113(userinput)
11629
#, no-wrap
11630
msgid "sudo ethtool eth0"
11631
msgstr ""
11632
11633
#: serverguide/C/network-config.xml:112(screen)
11634
#, no-wrap
11635
msgid ""
11636
"\n"
11637
"<placeholder-1/>\n"
11638
"Settings for eth0:\n"
11639
" Supported ports: [ TP ]\n"
11640
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11641
" 100baseT/Half 100baseT/Full \n"
11642
" 1000baseT/Half 1000baseT/Full \n"
11643
" Supports auto-negotiation: Yes\n"
11644
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11645
" 100baseT/Half 100baseT/Full \n"
11646
" 1000baseT/Half 1000baseT/Full \n"
11647
" Advertised auto-negotiation: Yes\n"
11648
" Speed: 1000Mb/s\n"
11649
" Duplex: Full\n"
11650
" Port: Twisted Pair\n"
11651
" PHYAD: 1\n"
11652
" Transceiver: internal\n"
11653
" Auto-negotiation: on\n"
11654
" Supports Wake-on: g\n"
11655
" Wake-on: d\n"
11656
" Current message level: 0x000000ff (255)\n"
11657
" Link detected: yes\n"
11658
msgstr ""
11659
11660
#: serverguide/C/network-config.xml:135(para)
11661
msgid ""
11662
"Changes made with the <application>ethtool</application> command are "
11663
"temporary and will be lost after a reboot. If you would like to retain "
11664
"settings, simply add the desired <application>ethtool</application> command "
11665
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11666
"configuration file <filename>/etc/network/interfaces</filename>."
11667
msgstr ""
11668
11669
#: serverguide/C/network-config.xml:141(para)
11670
msgid ""
11671
"The following is an example of how the interface identified as <emphasis "
11672
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11673
"speed of 1000Mb/s running in full duplex mode."
11674
msgstr ""
11675
11676
#: serverguide/C/network-config.xml:145(programlisting)
11677
#, no-wrap
11678
msgid ""
11679
"\n"
11680
"auto eth0\n"
11681
"iface eth0 inet static\n"
11682
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11683
msgstr ""
11684
11685
#: serverguide/C/network-config.xml:151(para)
11686
msgid ""
11687
"Although the example above shows the interface configured to use the "
11688
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11689
"other methods as well, such as DHCP. The example is meant to demonstrate "
11690
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11691
"statement in relation to the rest of the interface configuration."
11692
msgstr ""
11693
11694
#: serverguide/C/network-config.xml:163(title)
11695
msgid "IP Addressing"
11696
msgstr ""
11697
11698
#: serverguide/C/network-config.xml:164(para)
11699
msgid ""
11700
"The following section describes the process of configuring your systems IP "
11701
"address and default gateway needed for communicating on a local area network "
11702
"and the Internet."
11703
msgstr ""
11704
11705
#: serverguide/C/network-config.xml:171(title)
11706
msgid "Temporary IP Address Assignment"
11707
msgstr ""
11708
11709
#: serverguide/C/network-config.xml:172(para)
11710
msgid ""
11711
"For temporary network configurations, you can use standard commands such as "
11712
"<application>ip</application>, <application>ifconfig</application> and "
11713
"<application>route</application>, which are also found on most other "
11714
"GNU/Linux operating systems. These commands allow you to configure settings "
11715
"which take effect immediately, however they are not persistent and will be "
11716
"lost after a reboot."
11717
msgstr ""
11718
11719
#: serverguide/C/network-config.xml:180(para)
11720
msgid ""
11721
"To temporarily configure an IP address, you can use the "
11722
"<application>ifconfig</application> command in the following manner. Just "
11723
"modify the IP address and subnet mask to match your network requirements."
11724
msgstr ""
11725
11726
#: serverguide/C/network-config.xml:186(userinput)
11727
#, no-wrap
11728
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
11729
msgstr ""
11730
11731
#: serverguide/C/network-config.xml:188(para)
11732
msgid ""
11733
"To verify the IP address configuration of <application>eth0</application>, "
11734
"you can use the <application>ifconfig</application> command in the following "
11735
"manner."
11736
msgstr ""
11737
11738
#: serverguide/C/network-config.xml:193(userinput)
11739
#, no-wrap
11740
msgid "ifconfig eth0"
11741
msgstr ""
11742
11743
#: serverguide/C/network-config.xml:192(screen)
11744
#, no-wrap
11745
msgid ""
11746
"\n"
11747
"<placeholder-1/>\n"
11748
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
11749
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
11750
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
11751
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
11752
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
11753
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
11754
" collisions:0 txqueuelen:1000 \n"
11755
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
11756
" Interrupt:16 \n"
11757
msgstr ""
11758
11759
#: serverguide/C/network-config.xml:204(para)
11760
msgid ""
11761
"To configure a default gateway, you can use the "
11762
"<application>route</application> command in the following manner. Modify the "
11763
"default gateway address to match your network requirements."
11764
msgstr ""
11765
11766
#: serverguide/C/network-config.xml:210(userinput)
11767
#, no-wrap
11768
msgid "sudo route add default gw 10.0.0.1 eth0"
11769
msgstr ""
11770
11771
#: serverguide/C/network-config.xml:212(para)
11772
msgid ""
11773
"To verify your default gateway configuration, you can use the "
11774
"<application>route</application> command in the following manner."
11775
msgstr ""
11776
11777
#: serverguide/C/network-config.xml:217(userinput)
11778
#, no-wrap
11779
msgid "route -n"
11780
msgstr ""
11781
11782
#: serverguide/C/network-config.xml:216(screen)
11783
#, no-wrap
11784
msgid ""
11785
"\n"
11786
"<placeholder-1/>\n"
11787
"Kernel IP routing table\n"
11788
"Destination Gateway Genmask Flags Metric Ref Use "
11789
"Iface\n"
11790
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
11791
"eth0\n"
11792
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
11793
"eth0\n"
11794
msgstr ""
11795
11796
#: serverguide/C/network-config.xml:223(para)
11797
msgid ""
11798
"If you require DNS for your temporary network configuration, you can add DNS "
11799
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
11800
"example below shows how to enter two DNS servers to "
11801
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
11802
"appropriate for your network. A more lengthy description of DNS client "
11803
"configuration is in a following section."
11804
msgstr ""
11805
11806
#: serverguide/C/network-config.xml:230(programlisting)
11807
#, no-wrap
11808
msgid ""
11809
"\n"
11810
"nameserver 8.8.8.8\n"
11811
"nameserver 8.8.4.4\n"
11812
msgstr ""
11813
11814
#: serverguide/C/network-config.xml:234(para)
11815
msgid ""
11816
"If you no longer need this configuration and wish to purge all IP "
11817
"configuration from an interface, you can use the "
11818
"<application>ip</application> command with the flush option as shown below."
11819
msgstr ""
11820
11821
#: serverguide/C/network-config.xml:240(userinput)
11822
#, no-wrap
11823
msgid "ip addr flush eth0"
11824
msgstr ""
11825
11826
#: serverguide/C/network-config.xml:243(para)
11827
msgid ""
11828
"Flushing the IP configuration using the <application>ip</application> "
11829
"command does not clear the contents of "
11830
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
11831
"entries manually."
11832
msgstr ""
11833
11834
#: serverguide/C/network-config.xml:251(title)
11835
msgid "Dynamic IP Address Assignment (DHCP Client)"
11836
msgstr ""
11837
11838
#: serverguide/C/network-config.xml:252(para)
11839
msgid ""
11840
"To configure your server to use DHCP for dynamic address assignment, add the "
11841
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
11842
"statement for the appropriate interface in the file "
11843
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11844
"are configuring your first Ethernet interface identified as <emphasis "
11845
"role=\"italic\">eth0</emphasis>."
11846
msgstr ""
11847
11848
#: serverguide/C/network-config.xml:259(programlisting)
11849
#, no-wrap
11850
msgid ""
11851
"\n"
11852
"auto eth0\n"
11853
"iface eth0 inet dhcp\n"
11854
msgstr ""
11855
11856
#: serverguide/C/network-config.xml:263(para)
11857
msgid ""
11858
"By adding an interface configuration as shown above, you can manually enable "
11859
"the interface through the <application>ifup</application> command which "
11860
"initiates the DHCP process via <application>dhclient</application>."
11861
msgstr ""
11862
11863
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
11864
#, no-wrap
11865
msgid "sudo ifup eth0"
11866
msgstr ""
11867
11868
#: serverguide/C/network-config.xml:271(para)
11869
msgid ""
11870
"To manually disable the interface, you can use the "
11871
"<application>ifdown</application> command, which in turn will initiate the "
11872
"DHCP release process and shut down the interface."
11873
msgstr ""
11874
11875
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
11876
#, no-wrap
11877
msgid "sudo ifdown eth0"
11878
msgstr ""
11879
11880
#: serverguide/C/network-config.xml:282(title)
11881
msgid "Static IP Address Assignment"
11882
msgstr ""
11883
11884
#: serverguide/C/network-config.xml:283(para)
11885
msgid ""
11886
"To configure your system to use a static IP address assignment, add the "
11887
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
11888
"family statement for the appropriate interface in the file "
11889
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
11890
"are configuring your first Ethernet interface identified as <emphasis "
11891
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
11892
"role=\"italic\">address</emphasis>, <emphasis "
11893
"role=\"italic\">netmask</emphasis>, and <emphasis "
11894
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
11895
"network."
11896
msgstr ""
11897
11898
#: serverguide/C/network-config.xml:292(programlisting)
11899
#, no-wrap
11900
msgid ""
11901
"\n"
11902
"auto eth0\n"
11903
"iface eth0 inet static\n"
11904
"address 10.0.0.100\n"
11905
"netmask 255.255.255.0\n"
11906
"gateway 10.0.0.1\n"
11907
msgstr ""
11908
11909
#: serverguide/C/network-config.xml:299(para)
11910
msgid ""
11911
"By adding an interface configuration as shown above, you can manually enable "
11912
"the interface through the <application>ifup</application> command."
11913
msgstr ""
11914
11915
#: serverguide/C/network-config.xml:306(para)
11916
msgid ""
11917
"To manually disable the interface, you can use the "
11918
"<application>ifdown</application> command."
11919
msgstr ""
11920
11921
#: serverguide/C/network-config.xml:316(title)
11922
msgid "Loopback Interface"
11923
msgstr ""
11924
11925
#: serverguide/C/network-config.xml:317(para)
11926
msgid ""
11927
"The loopback interface is identified by the system as <emphasis "
11928
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
11929
"can be viewed using the ifconfig command."
11930
msgstr ""
11931
11932
#: serverguide/C/network-config.xml:322(userinput)
11933
#, no-wrap
11934
msgid "ifconfig lo"
11935
msgstr ""
11936
11937
#: serverguide/C/network-config.xml:321(screen)
11938
#, no-wrap
11939
msgid ""
11940
"\n"
11941
"<placeholder-1/>\n"
11942
"lo Link encap:Local Loopback \n"
11943
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
11944
" inet6 addr: ::1/128 Scope:Host\n"
11945
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
11946
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
11947
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
11948
" collisions:0 txqueuelen:0 \n"
11949
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
11950
msgstr ""
11951
11952
#: serverguide/C/network-config.xml:332(para)
11953
msgid ""
11954
"By default, there should be two lines in "
11955
"<filename>/etc/network/interfaces</filename> responsible for automatically "
11956
"configuring your loopback interface. It is recommended that you keep the "
11957
"default settings unless you have a specific purpose for changing them. An "
11958
"example of the two default lines are shown below."
11959
msgstr ""
11960
11961
#: serverguide/C/network-config.xml:338(programlisting)
11962
#, no-wrap
11963
msgid ""
11964
"\n"
11965
"auto lo\n"
11966
"iface lo inet loopback\n"
11967
msgstr ""
11968
11969
#: serverguide/C/network-config.xml:347(title)
11970
msgid "Name Resolution"
11971
msgstr ""
11972
11973
#: serverguide/C/network-config.xml:348(para)
11974
msgid ""
11975
"Name resolution as it relates to IP networking is the process of mapping IP "
11976
"addresses to hostnames, making it easier to identify resources on a network. "
11977
"The following section will explain how to properly configure your system for "
11978
"name resolution using DNS and static hostname records."
11979
msgstr ""
11980
11981
#: serverguide/C/network-config.xml:356(title)
11982
msgid "DNS Client Configuration"
11983
msgstr ""
11984
11985
#: serverguide/C/network-config.xml:357(para)
11986
msgid ""
11987
"To configure your system to use DNS for name resolution, add the IP "
11988
"addresses of the DNS servers that are appropriate for your network in the "
11989
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
11990
"suffix search-lists to match your network domain names."
11991
msgstr ""
11992
11993
#: serverguide/C/network-config.xml:362(para)
11994
msgid ""
11995
"Below is an example of a typical configuration of "
11996
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
11997
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
11998
msgstr ""
11999
12000
#: serverguide/C/network-config.xml:367(programlisting)
12001
#, no-wrap
12002
msgid ""
12003
"\n"
12004
"search example.com\n"
12005
"nameserver 8.8.8.8\n"
12006
"nameserver 8.8.4.4\n"
12007
msgstr ""
12008
12009
#: serverguide/C/network-config.xml:372(para)
12010
msgid ""
12011
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12012
"multiple domain names so that DNS queries will be appended in the order in "
12013
"which they are entered. For example, your network may have multiple sub-"
12014
"domains to search; a parent domain of <emphasis "
12015
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12016
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12017
"role=\"italic\">dev.example.com</emphasis>."
12018
msgstr ""
12019
12020
#: serverguide/C/network-config.xml:380(para)
12021
msgid ""
12022
"If you have multiple domains you wish to search, your configuration might "
12023
"look like the following."
12024
msgstr ""
12025
12026
#: serverguide/C/network-config.xml:383(programlisting)
12027
#, no-wrap
12028
msgid ""
12029
"\n"
12030
"search example.com sales.example.com dev.example.com\n"
12031
"nameserver 8.8.8.8\n"
12032
"nameserver 8.8.4.4\n"
12033
msgstr ""
12034
12035
#: serverguide/C/network-config.xml:388(para)
12036
msgid ""
12037
"If you try to ping a host with the name of <emphasis "
12038
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12039
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12040
msgstr ""
12041
12042
#: serverguide/C/network-config.xml:394(para)
12043
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12044
msgstr ""
12045
12046
#: serverguide/C/network-config.xml:399(para)
12047
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12048
msgstr ""
12049
12050
#: serverguide/C/network-config.xml:404(para)
12051
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12052
msgstr ""
12053
12054
#: serverguide/C/network-config.xml:409(para)
12055
msgid ""
12056
"If no matches are found, the DNS server will provide a result of <emphasis "
12057
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12058
msgstr ""
12059
12060
#: serverguide/C/network-config.xml:416(title)
12061
msgid "Static Hostnames"
12062
msgstr ""
12063
12064
#: serverguide/C/network-config.xml:417(para)
12065
msgid ""
12066
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12067
"file <filename>/etc/hosts</filename>. Entries in the "
12068
"<filename>hosts</filename> file will have precedence over DNS by default. "
12069
"This means that if your system tries to resolve a hostname and it matches an "
12070
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12071
"some configurations, especially when Internet access is not required, "
12072
"servers that communicate with a limited number of resources can be "
12073
"conveniently set to use static hostnames instead of DNS."
12074
msgstr ""
12075
12076
#: serverguide/C/network-config.xml:424(para)
12077
msgid ""
12078
"The following is an example of a <filename>hosts</filename> file where a "
12079
"number of local servers have been identified by simple hostnames, aliases "
12080
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12081
msgstr ""
12082
12083
#: serverguide/C/network-config.xml:428(programlisting)
12084
#, no-wrap
12085
msgid ""
12086
"\n"
12087
"127.0.0.1\tlocalhost\n"
12088
"127.0.1.1\tubuntu-server\n"
12089
"10.0.0.11\tserver1 vpn server1.example.com\n"
12090
"10.0.0.12\tserver2 mail server2.example.com\n"
12091
"10.0.0.13\tserver3 www server3.example.com\n"
12092
"10.0.0.14\tserver4 file server4.example.com\n"
12093
msgstr ""
12094
12095
#: serverguide/C/network-config.xml:437(para)
12096
msgid ""
12097
"In the above example, notice that each of the servers have been given "
12098
"aliases in addition to their proper names and FQDN's. <emphasis "
12099
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12100
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12101
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12102
"role=\"italic\">server3</emphasis> as <emphasis "
12103
"role=\"italic\">www</emphasis>, and <emphasis "
12104
"role=\"italic\">server4</emphasis> as <emphasis "
12105
"role=\"italic\">file</emphasis>."
12106
msgstr ""
12107
12108
#: serverguide/C/network-config.xml:449(title)
12109
msgid "Name Service Switch Configuration"
12110
msgstr ""
12111
12112
#: serverguide/C/network-config.xml:450(para)
12113
msgid ""
12114
"The order in which your system selects a method of resolving hostnames to IP "
12115
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12116
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12117
"section, typically static hostnames defined in the systems "
12118
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12119
"from DNS. The following is an example of the line responsible for this order "
12120
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12121
msgstr ""
12122
12123
#: serverguide/C/network-config.xml:458(programlisting)
12124
#, no-wrap
12125
msgid ""
12126
"\n"
12127
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12128
msgstr ""
12129
12130
#: serverguide/C/network-config.xml:464(para)
12131
msgid ""
12132
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12133
"hostnames located in <filename>/etc/hosts</filename>."
12134
msgstr ""
12135
12136
#: serverguide/C/network-config.xml:470(para)
12137
msgid ""
12138
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12139
"name using Multicast DNS."
12140
msgstr ""
12141
12142
#: serverguide/C/network-config.xml:475(para)
12143
msgid ""
12144
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12145
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12146
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12147
"authoritative and that the system should not try to continue hunting for an "
12148
"answer."
12149
msgstr ""
12150
12151
#: serverguide/C/network-config.xml:483(para)
12152
msgid ""
12153
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12154
msgstr ""
12155
12156
#: serverguide/C/network-config.xml:488(para)
12157
msgid ""
12158
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12159
msgstr ""
12160
12161
#: serverguide/C/network-config.xml:494(para)
12162
msgid ""
12163
"To modify the order of the above mentioned name resolution methods, you can "
12164
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12165
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12166
"versus Multicast DNS, you can change the string in "
12167
"<filename>/etc/nsswitch.conf</filename> as shown below."
12168
msgstr ""
12169
12170
#: serverguide/C/network-config.xml:501(programlisting)
12171
#, no-wrap
12172
msgid ""
12173
"\n"
12174
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12175
msgstr ""
12176
12177
#: serverguide/C/network-config.xml:508(title)
12178
msgid "Bridging"
12179
msgstr ""
12180
12181
#: serverguide/C/network-config.xml:510(para)
12182
msgid ""
12183
"Bridging multiple interfaces is a more advanced configuration, but is very "
12184
"useful in multiple scenarios. One scenario is setting up a bridge with "
12185
"multiple network interfaces, then using a firewall to filter traffic between "
12186
"two network segments. Another scenario is using bridge on a system with one "
12187
"interface to allow virtual machines direct access to the outside network. "
12188
"The following example covers the latter scenario."
12189
msgstr ""
12190
12191
#: serverguide/C/network-config.xml:517(para)
12192
msgid ""
12193
"Before configuring a bridge you will need to install the <application>bridge-"
12194
"utils</application> package. To install the package, in a terminal enter:"
12195
msgstr ""
12196
12197
#: serverguide/C/network-config.xml:523(command)
12198
msgid "sudo apt-get install bridge-utils"
12199
msgstr ""
12200
12201
#: serverguide/C/network-config.xml:526(para)
12202
msgid ""
12203
"Next, configure the bridge by editing "
12204
"<filename>/etc/network/interfaces</filename>:"
12205
msgstr ""
12206
12207
#: serverguide/C/network-config.xml:530(programlisting)
12208
#, no-wrap
12209
msgid ""
12210
"\n"
12211
"auto lo\n"
12212
"iface lo inet loopback\n"
12213
"\n"
12214
"auto br0\n"
12215
"iface br0 inet static\n"
12216
" address 192.168.0.10\n"
12217
" network 192.168.0.0\n"
12218
" netmask 255.255.255.0\n"
12219
" broadcast 192.168.0.255\n"
12220
" gateway 192.168.0.1\n"
12221
" bridge_ports eth0\n"
12222
" bridge_fd 9\n"
12223
" bridge_hello 2\n"
12224
" bridge_maxage 12\n"
12225
" bridge_stp off\n"
12226
msgstr ""
12227
12228
#: serverguide/C/network-config.xml:549(para)
12229
msgid "Enter the appropriate values for your physical interface and network."
12230
msgstr ""
12231
12232
#: serverguide/C/network-config.xml:554(para)
12233
msgid "Now restart networking to enable the bridge interface:"
12234
msgstr ""
12235
12236
#: serverguide/C/network-config.xml:561(para)
12237
msgid ""
12238
"The new bridge interface should now be up and running. The "
12239
"<application>brctl</application> provides useful information about the state "
12240
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12241
"<command>man brctl</command> for more information."
12242
msgstr ""
12243
12244
#: serverguide/C/network-config.xml:577(para)
12245
msgid ""
12246
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12247
"Network page</ulink> has links to articles covering more advanced network "
12248
"configuration."
12249
msgstr ""
12250
12251
#: serverguide/C/network-config.xml:583(para)
12252
msgid ""
12253
"The <ulink "
12254
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12255
"nterfaces man page</ulink> has details on more options for "
12256
"<filename>/etc/network/interfaces</filename>."
12257
msgstr ""
12258
12259
#: serverguide/C/network-config.xml:589(para)
12260
msgid ""
12261
"The <ulink "
12262
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12263
"lient man page</ulink> has details on more options for configuring DHCP "
12264
"client settings."
12265
msgstr ""
12266
12267
#: serverguide/C/network-config.xml:595(para)
12268
msgid ""
12269
"For more information on DNS client configuration see the <ulink "
12270
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12271
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12272
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12273
"Administrator's Guide</ulink> is a good source of resolver and name service "
12274
"configuration information."
12275
msgstr ""
12276
12277
#: serverguide/C/network-config.xml:603(para)
12278
msgid ""
12279
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12280
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12281
"man page</ulink> and the Linux Foundation's <ulink "
12282
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12283
msgstr ""
12284
12285
#: serverguide/C/network-config.xml:614(title)
12286
msgid "TCP/IP"
12287
msgstr ""
12288
12289
#: serverguide/C/network-config.xml:615(para)
12290
msgid ""
12291
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12292
"standard set of protocols developed in the late 1970s by the Defense "
12293
"Advanced Research Projects Agency (DARPA) as a means of communication "
12294
"between different types of computers and computer networks. TCP/IP is the "
12295
"driving force of the Internet, and thus it is the most popular set of "
12296
"network protocols on Earth."
12297
msgstr ""
12298
12299
#: serverguide/C/network-config.xml:623(title)
12300
msgid "TCP/IP Introduction"
12301
msgstr ""
12302
12303
#: serverguide/C/network-config.xml:624(para)
12304
msgid ""
12305
"The two protocol components of TCP/IP deal with different aspects of "
12306
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12307
"TCP/IP is a connectionless protocol which deals only with network packet "
12308
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12309
"basic unit of networking information. The IP Datagram consists of a header "
12310
"followed by a message. The <emphasis> Transmission Control "
12311
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12312
"establish connections which may be used to exchange data streams. TCP also "
12313
"guarantees that the data between connections is delivered and that it "
12314
"arrives at one network host in the same order as sent from another network "
12315
"host."
12316
msgstr ""
12317
12318
#: serverguide/C/network-config.xml:637(title)
12319
msgid "TCP/IP Configuration"
12320
msgstr ""
12321
12322
#: serverguide/C/network-config.xml:638(para)
12323
msgid ""
12324
"The TCP/IP protocol configuration consists of several elements which must be "
12325
"set by editing the appropriate configuration files, or deploying solutions "
12326
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12327
"can be configured to provide the proper TCP/IP configuration settings to "
12328
"network clients automatically. These configuration values must be set "
12329
"correctly in order to facilitate the proper network operation of your Ubuntu "
12330
"system."
12331
msgstr ""
12332
12333
#: serverguide/C/network-config.xml:650(para)
12334
msgid ""
12335
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12336
"identifying string expressed as four decimal numbers ranging from zero (0) "
12337
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12338
"four numbers representing eight (8) bits of the address for a total length "
12339
"of thirty-two (32) bits for the whole address. This format is called "
12340
"<emphasis>dotted quad notation</emphasis>."
12341
msgstr ""
12342
12343
#: serverguide/C/network-config.xml:660(para)
12344
msgid ""
12345
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12346
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12347
"separate the portions of an IP address significant to the network from the "
12348
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12349
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12350
"three bytes of the IP address and allows the last byte of the IP address to "
12351
"remain available for specifying hosts on the subnetwork."
12352
msgstr ""
12353
12354
#: serverguide/C/network-config.xml:671(para)
12355
msgid ""
12356
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12357
"represents the bytes comprising the network portion of an IP address. For "
12358
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12359
"network address, where twelve (12) represents the first byte of the IP "
12360
"address, (the network part) and zeroes (0) in all of the remaining three "
12361
"bytes to represent the potential host values. A network host using the "
12362
"private IP address 192.168.1.100 would in turn use a Network Address of "
12363
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12364
"network and a zero (0) for all the possible hosts on the network."
12365
msgstr ""
12366
12367
#: serverguide/C/network-config.xml:684(para)
12368
msgid ""
12369
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12370
"is an IP address which allows network data to be sent simultaneously to all "
12371
"hosts on a given subnetwork rather than specifying a particular host. The "
12372
"standard general broadcast address for IP networks is 255.255.255.255, but "
12373
"this broadcast address cannot be used to send a broadcast message to every "
12374
"host on the Internet because routers block it. A more appropriate broadcast "
12375
"address is set to match a specific subnetwork. For example, on the private "
12376
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12377
"Broadcast messages are typically produced by network protocols such as the "
12378
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12379
msgstr ""
12380
12381
#: serverguide/C/network-config.xml:697(para)
12382
msgid ""
12383
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12384
"IP address through which a particular network, or host on a network, may be "
12385
"reached. If one network host wishes to communicate with another network "
12386
"host, and that host is not located on the same network, then a "
12387
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12388
"Address will be that of a router on the same network, which will in turn "
12389
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12390
"value of the Gateway Address setting must be correct, or your system will "
12391
"not be able to reach any hosts beyond those on the same network."
12392
msgstr ""
12393
12394
#: serverguide/C/network-config.xml:708(para)
12395
msgid ""
12396
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12397
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12398
"resolve network hostnames into IP addresses. There are three levels of "
12399
"Nameserver Addresses, which may be specified in order of precedence: The "
12400
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12401
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12402
"your system to be able to resolve network hostnames into their corresponding "
12403
"IP addresses, you must specify valid Nameserver Addresses which you are "
12404
"authorized to use in your system's TCP/IP configuration. In many cases these "
12405
"addresses can and will be provided by your network service provider, but "
12406
"many free and publicly accessible nameservers are available for use, such as "
12407
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12408
msgstr ""
12409
12410
#: serverguide/C/network-config.xml:722(para)
12411
msgid ""
12412
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12413
"Address are typically specified via the appropriate directives in the file "
12414
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12415
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12416
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12417
"system manual page for <filename>interfaces</filename> or "
12418
"<filename>resolv.conf</filename> respectively, with the following commands "
12419
"typed at a terminal prompt:"
12420
msgstr ""
12421
12422
#: serverguide/C/network-config.xml:729(para)
12423
msgid ""
12424
"Access the system manual page for <filename>interfaces</filename> with the "
12425
"following command:"
12426
msgstr ""
12427
12428
#: serverguide/C/network-config.xml:734(command)
12429
msgid "man interfaces"
12430
msgstr ""
12431
12432
#: serverguide/C/network-config.xml:737(para)
12433
msgid ""
12434
"Access the system manual page for <filename>resolv.conf</filename> with the "
12435
"following command:"
12436
msgstr ""
12437
12438
#: serverguide/C/network-config.xml:741(command)
12439
msgid "man resolv.conf"
12440
msgstr ""
12441
12442
#: serverguide/C/network-config.xml:646(para)
12443
msgid ""
12444
"The common configuration elements of TCP/IP and their purposes are as "
12445
"follows: <placeholder-1/>"
12446
msgstr ""
12447
12448
#: serverguide/C/network-config.xml:748(title)
12449
msgid "IP Routing"
12450
msgstr ""
12451
12452
#: serverguide/C/network-config.xml:749(para)
12453
msgid ""
12454
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12455
"network along which network data may be sent. Routing uses a set of "
12456
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12457
"packets from their source to the destination, often via many intermediary "
12458
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12459
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12460
"<emphasis>Dynamic Routing.</emphasis>"
12461
msgstr ""
12462
12463
#: serverguide/C/network-config.xml:758(para)
12464
msgid ""
12465
"Static routing involves manually adding IP routes to the system's routing "
12466
"table, and this is usually done by manipulating the routing table with the "
12467
"<application>route</application> command. Static routing enjoys many "
12468
"advantages over dynamic routing, such as simplicity of implementation on "
12469
"smaller networks, predictability (the routing table is always computed in "
12470
"advance, and thus the route is precisely the same each time it is used), and "
12471
"low overhead on other routers and network links due to the lack of a dynamic "
12472
"routing protocol. However, static routing does present some disadvantages as "
12473
"well. For example, static routing is limited to small networks and does not "
12474
"scale well. Static routing also fails completely to adapt to network outages "
12475
"and failures along the route due to the fixed nature of the route."
12476
msgstr ""
12477
12478
#: serverguide/C/network-config.xml:768(para)
12479
msgid ""
12480
"Dynamic routing depends on large networks with multiple possible IP routes "
12481
"from a source to a destination and makes use of special routing protocols, "
12482
"such as the Router Information Protocol (RIP), which handle the automatic "
12483
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12484
"routing has several advantages over static routing, such as superior "
12485
"scalability and the ability to adapt to failures and outages along network "
12486
"routes. Additionally, there is less manual configuration of the routing "
12487
"tables, since routers learn from one another about their existence and "
12488
"available routes. This trait also eliminates the possibility of introducing "
12489
"mistakes in the routing tables via human error. Dynamic routing is not "
12490
"perfect, however, and presents disadvantages such as heightened complexity "
12491
"and additional network overhead from router communications, which does not "
12492
"immediately benefit the end users, but still consumes network bandwidth."
12493
msgstr ""
12494
12495
#: serverguide/C/network-config.xml:782(title)
12496
msgid "TCP and UDP"
12497
msgstr ""
12498
12499
#: serverguide/C/network-config.xml:783(para)
12500
msgid ""
12501
"TCP is a connection-based protocol, offering error correction and guaranteed "
12502
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12503
"Flow control determines when the flow of a data stream needs to be stopped, "
12504
"and previously sent data packets should to be re-sent due to problems such "
12505
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12506
"accurate delivery of the data. TCP is typically used in the exchange of "
12507
"important information such as database transactions."
12508
msgstr ""
12509
12510
#: serverguide/C/network-config.xml:791(para)
12511
msgid ""
12512
"The User Datagram Protocol (UDP), on the other hand, is a "
12513
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12514
"transmission of important data because it lacks flow control or any other "
12515
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12516
"applications as audio and video streaming, where it is considerably faster "
12517
"than TCP due to the lack of error correction and flow control, and where the "
12518
"loss of a few packets is not generally catastrophic."
12519
msgstr ""
12520
12521
#: serverguide/C/network-config.xml:801(title)
12522
msgid "ICMP"
12523
msgstr ""
12524
12525
#: serverguide/C/network-config.xml:802(para)
12526
msgid ""
12527
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12528
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12529
"supports network packets containing control, error, and informational "
12530
"messages. ICMP is used by such network applications as the "
12531
"<application>ping</application> utility, which can determine the "
12532
"availability of a network host or device. Examples of some error messages "
12533
"returned by ICMP which are useful to both network hosts and devices such as "
12534
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12535
"<emphasis>Time Exceeded</emphasis>."
12536
msgstr ""
12537
12538
#: serverguide/C/network-config.xml:812(title)
12539
msgid "Daemons"
12540
msgstr ""
12541
12542
#: serverguide/C/network-config.xml:813(para)
12543
msgid ""
12544
"Daemons are special system applications which typically execute continuously "
12545
"in the background and await requests for the functions they provide from "
12546
"other applications. Many daemons are network-centric; that is, a large "
12547
"number of daemons executing in the background on an Ubuntu system may "
12548
"provide network-related functionality. Some examples of such network daemons "
12549
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12550
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12551
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12552
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12553
"Daemon</emphasis> (imapd), which provides E-Mail services."
12554
msgstr ""
12555
12556
#: serverguide/C/network-config.xml:828(para)
12557
msgid ""
12558
"There are man pages for <ulink "
12559
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12560
"nk> and <ulink "
12561
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12562
"that contain more useful information."
12563
msgstr ""
12564
12565
#: serverguide/C/network-config.xml:834(para)
12566
msgid ""
12567
"Also, see the <ulink "
12568
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12569
"and Technical Overview</ulink> IBM Redbook."
12570
msgstr ""
12571
12572
#: serverguide/C/network-config.xml:840(para)
12573
msgid ""
12574
"Another resource is O'Reilly's <ulink "
12575
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12576
"Administration</ulink>."
12577
msgstr ""
12578
12579
#: serverguide/C/network-config.xml:849(title)
12580
msgid "Dynamic Host Configuration Protocol (DHCP)"
12581
msgstr ""
12582
12583
#: serverguide/C/network-config.xml:850(para)
12584
msgid ""
12585
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12586
"enables host computers to be automatically assigned settings from a server "
12587
"as opposed to manually configuring each network host. Computers configured "
12588
"to be DHCP clients have no control over the settings they receive from the "
12589
"DHCP server, and the configuration is transparent to the computer's user."
12590
msgstr ""
12591
12592
#: serverguide/C/network-config.xml:857(para)
12593
msgid ""
12594
"The most common settings provided by a DHCP server to DHCP clients include:"
12595
msgstr ""
12596
12597
#: serverguide/C/network-config.xml:862(para)
12598
msgid "IP-Address and Netmask"
12599
msgstr ""
12600
12601
#: serverguide/C/network-config.xml:865(para)
12602
msgid "DNS"
12603
msgstr ""
12604
12605
#: serverguide/C/network-config.xml:868(para)
12606
msgid "WINS"
12607
msgstr ""
12608
12609
#: serverguide/C/network-config.xml:871(para)
12610
msgid ""
12611
"However, a DHCP server can also supply configuration properties such as:"
12612
msgstr ""
12613
12614
#: serverguide/C/network-config.xml:876(para)
12615
msgid "Host Name"
12616
msgstr ""
12617
12618
#: serverguide/C/network-config.xml:879(para)
12619
msgid "Domain Name"
12620
msgstr ""
12621
12622
#: serverguide/C/network-config.xml:882(para)
12623
msgid "Default Gateway"
12624
msgstr ""
12625
12626
#: serverguide/C/network-config.xml:885(para)
12627
msgid "Time Server"
12628
msgstr ""
12629
12630
#: serverguide/C/network-config.xml:888(para)
12631
msgid "Print Server"
12632
msgstr ""
12633
12634
#: serverguide/C/network-config.xml:891(para)
12635
msgid ""
12636
"The advantage of using DHCP is that changes to the network, for example a "
12637
"change in the address of the DNS server, need only be changed at the DHCP "
12638
"server, and all network hosts will be reconfigured the next time their DHCP "
12639
"clients poll the DHCP server. As an added advantage, it is also easier to "
12640
"integrate new computers into the network, as there is no need to check for "
12641
"the availability of an IP address. Conflicts in IP address allocation are "
12642
"also reduced."
12643
msgstr ""
12644
12645
#: serverguide/C/network-config.xml:899(para)
12646
msgid "A DHCP server can provide configuration settings using two methods:"
12647
msgstr ""
12648
12649
#: serverguide/C/network-config.xml:904(term)
12650
msgid "MAC Address"
12651
msgstr ""
12652
12653
#: serverguide/C/network-config.xml:906(para)
12654
msgid ""
12655
"This method entails using DHCP to identify the unique hardware address of "
12656
"each network card connected to the network and then continually supplying a "
12657
"constant configuration each time the DHCP client makes a request to the DHCP "
12658
"server using that network device."
12659
msgstr ""
12660
12661
#: serverguide/C/network-config.xml:915(term)
12662
msgid "Address Pool"
12663
msgstr ""
12664
12665
#: serverguide/C/network-config.xml:917(para)
12666
msgid ""
12667
"This method entails defining a pool (sometimes also called a range or scope) "
12668
"of IP addresses from which DHCP clients are supplied their configuration "
12669
"properties dynamically and on a \"first come, first served\" basis. When a "
12670
"DHCP client is no longer on the network for a specified period, the "
12671
"configuration is expired and released back to the address pool for use by "
12672
"other DHCP Clients."
12673
msgstr ""
12674
12675
#: serverguide/C/network-config.xml:928(para)
12676
msgid ""
12677
"Ubuntu is shipped with both DHCP server and client. The server is "
12678
"<application>dhcpd</application> (dynamic host configuration protocol "
12679
"daemon). The client provided with Ubuntu is "
12680
"<application>dhclient</application> and should be installed on all computers "
12681
"required to be automatically configured. Both programs are easy to install "
12682
"and configure and will be automatically started at system boot."
12683
msgstr ""
12684
12685
#: serverguide/C/network-config.xml:938(para)
12686
msgid ""
12687
"At a terminal prompt, enter the following command to install "
12688
"<application>dhcpd</application>:"
12689
msgstr ""
12690
12691
#: serverguide/C/network-config.xml:943(command)
12692
msgid "sudo apt-get install dhcp3-server"
12693
msgstr ""
12694
12695
#: serverguide/C/network-config.xml:945(para)
12696
msgid ""
12697
"You will probably need to change the default configuration by editing "
12698
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12699
msgstr ""
12700
12701
#: serverguide/C/network-config.xml:949(para)
12702
msgid ""
12703
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
12704
"dhcpd should listen to. By default it listens to eth0."
12705
msgstr ""
12706
12707
#: serverguide/C/network-config.xml:953(para)
12708
msgid ""
12709
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
12710
"messages."
12711
msgstr ""
12712
12713
#: serverguide/C/network-config.xml:960(para)
12714
msgid ""
12715
"The error message the installation ends with might be a little confusing, "
12716
"but the following steps will help you configure the service:"
12717
msgstr ""
12718
12719
#: serverguide/C/network-config.xml:964(para)
12720
msgid ""
12721
"Most commonly, what you want to do is assign an IP address randomly. This "
12722
"can be done with settings as follows:"
12723
msgstr ""
12724
12725
#: serverguide/C/network-config.xml:968(programlisting)
12726
#, no-wrap
12727
msgid ""
12728
"\n"
12729
"# Sample /etc/dhcpd.conf\n"
12730
"# (add your comments here) \n"
12731
"default-lease-time 600;\n"
12732
"max-lease-time 7200;\n"
12733
"option subnet-mask 255.255.255.0;\n"
12734
"option broadcast-address 192.168.1.255;\n"
12735
"option routers 192.168.1.254;\n"
12736
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
12737
"option domain-name \"mydomain.example\";\n"
12738
"\n"
12739
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
12740
"range 192.168.1.10 192.168.1.100;\n"
12741
"range 192.168.1.150 192.168.1.200;\n"
12742
"} \n"
12743
msgstr ""
12744
12745
#: serverguide/C/network-config.xml:984(para)
12746
msgid ""
12747
"This will result in the DHCP server giving a client an IP address from the "
12748
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
12749
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
12750
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
12751
"server will also \"advise\" the client that it should use 255.255.255.0 as "
12752
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
12753
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
12754
msgstr ""
12755
12756
#: serverguide/C/network-config.xml:993(para)
12757
msgid ""
12758
"If you need to specify a WINS server for your Windows clients, you will need "
12759
"to include the netbios-name-servers option, e.g."
12760
msgstr ""
12761
12762
#: serverguide/C/network-config.xml:997(programlisting)
12763
#, no-wrap
12764
msgid ""
12765
"\n"
12766
"option netbios-name-servers 192.168.1.1; \n"
12767
msgstr ""
12768
12769
#: serverguide/C/network-config.xml:1000(para)
12770
msgid ""
12771
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
12772
"be found <ulink "
12773
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
12774
msgstr ""
12775
12776
#: serverguide/C/network-config.xml:1010(para)
12777
msgid ""
12778
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
12779
"server Ubuntu Wiki</ulink> page has more information."
12780
msgstr ""
12781
12782
#: serverguide/C/network-config.xml:1015(para)
12783
msgid ""
12784
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
12785
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
12786
"hcpd.conf man page</ulink>."
12787
msgstr ""
12788
12789
#: serverguide/C/network-config.xml:1021(para)
12790
msgid ""
12791
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
12792
"FAQ</ulink>"
12793
msgstr ""
12794
12795
#: serverguide/C/network-config.xml:1031(title)
12796
msgid "Time Synchronisation with NTP"
12797
msgstr ""
12798
12799
#: serverguide/C/network-config.xml:1032(para)
12800
msgid ""
12801
"This page describes methods for keeping your computer's time accurate. This "
12802
"is useful for servers, but is not necessary (or desirable) for desktop "
12803
"machines."
12804
msgstr ""
12805
12806
#: serverguide/C/network-config.xml:1035(para)
12807
msgid ""
12808
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
12809
"client requests the current time from a server, and uses it to set its own "
12810
"clock."
12811
msgstr ""
12812
12813
#: serverguide/C/network-config.xml:1038(para)
12814
msgid ""
12815
"Behind this simple description, there is a lot of complexity - there are "
12816
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
12817
"clocks (often via GPS), and tier two and three servers spreading the load of "
12818
"actually handling requests across the Internet. Also the client software is "
12819
"a lot more complex than you might think - it has to factor out communication "
12820
"delays, and adjust the time in a way that does not upset all the other "
12821
"processes that run on the server. But luckily all that complexity is hidden "
12822
"from you!"
12823
msgstr ""
12824
12825
#: serverguide/C/network-config.xml:1041(para)
12826
msgid ""
12827
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
12828
msgstr ""
12829
12830
#: serverguide/C/network-config.xml:1046(title)
12831
msgid "ntpdate"
12832
msgstr ""
12833
12834
#: serverguide/C/network-config.xml:1047(para)
12835
msgid ""
12836
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
12837
"set up your time according to Ubuntu's NTP server. However, a server's clock "
12838
"is likely to drift considerably between reboots, so it makes sense to "
12839
"correct the time occasionally. The easiest way to do this is to get cron to "
12840
"run ntpdate every day. With your favorite editor, as root, create a file "
12841
"<code>/etc/cron.daily/ntpdate</code> containing:"
12842
msgstr ""
12843
12844
#: serverguide/C/network-config.xml:1052(screen)
12845
#, no-wrap
12846
msgid "ntpdate ntp.ubuntu.com\n"
12847
msgstr ""
12848
12849
#: serverguide/C/network-config.xml:1054(para)
12850
msgid ""
12851
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
12852
msgstr ""
12853
12854
#: serverguide/C/network-config.xml:1057(screen)
12855
#, no-wrap
12856
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
12857
msgstr ""
12858
12859
#: serverguide/C/network-config.xml:1061(title)
12860
msgid "ntpd"
12861
msgstr ""
12862
12863
#: serverguide/C/network-config.xml:1062(para)
12864
msgid ""
12865
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
12866
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
12867
"calculates the drift of your system clock and continuously adjusts it, so "
12868
"there are no large corrections that could lead to inconsistent logs for "
12869
"instance. The cost is a little processing power and memory, but for a modern "
12870
"server this is negligible."
12871
msgstr ""
12872
12873
#: serverguide/C/network-config.xml:1065(para)
12874
msgid "To set up ntpd:"
12875
msgstr ""
12876
12877
#: serverguide/C/network-config.xml:1066(screen)
12878
#, no-wrap
12879
msgid "sudo apt-get install ntp\n"
12880
msgstr ""
12881
12882
#: serverguide/C/network-config.xml:1071(title)
12883
msgid "Changing Time Servers"
12884
msgstr ""
12885
12886
#: serverguide/C/network-config.xml:1072(para)
12887
msgid ""
12888
"In both cases above, your system will use Ubuntu's NTP server at "
12889
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
12890
"use several servers to increase accuracy and resilience, and you may want to "
12891
"use time servers that are geographically closer to you. to do this for "
12892
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
12893
msgstr ""
12894
12895
#: serverguide/C/network-config.xml:1079(screen)
12896
#, no-wrap
12897
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
12898
msgstr ""
12899
12900
#: serverguide/C/network-config.xml:1081(para)
12901
msgid ""
12902
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
12903
"lines:"
12904
msgstr ""
12905
12906
#: serverguide/C/network-config.xml:1086(screen)
12907
#, no-wrap
12908
msgid ""
12909
"server ntp.ubuntu.com\n"
12910
"server pool.ntp.org\n"
12911
msgstr ""
12912
12913
#: serverguide/C/network-config.xml:1089(para)
12914
msgid ""
12915
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
12916
"really good idea which uses round-robin DNS to return an NTP server from a "
12917
"pool, spreading the load between several different servers. Even better, "
12918
"they have pools for different regions - for instance, if you are in New "
12919
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
12920
"<code>pool.ntp.org</code> . Look at <ulink "
12921
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
12922
"details."
12923
msgstr ""
12924
12925
#: serverguide/C/network-config.xml:1100(para)
12926
msgid ""
12927
"You can also Google for NTP servers in your region, and add these to your "
12928
"configuration. To test that a server works, just type <code>sudo ntpdate "
12929
"ntp.server.name</code> and see what happens."
12930
msgstr ""
12931
12932
#: serverguide/C/network-config.xml:1111(para)
12933
msgid ""
12934
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
12935
"Time</ulink> wiki page for more information."
12936
msgstr ""
12937
12938
#: serverguide/C/network-config.xml:1117(ulink)
12939
msgid "NTP Support"
12940
msgstr ""
12941
12942
#: serverguide/C/network-config.xml:1122(ulink)
12943
msgid "The NTP FAQ and HOWTO"
12944
msgstr ""
12945
12946
#: serverguide/C/network-auth.xml:13(title)
12947
msgid "Network Authentication"
12948
msgstr ""
12949
12950
#: serverguide/C/network-auth.xml:15(para)
12951
msgid "This section explains various Network Authentication protocols."
12952
msgstr ""
12953
12954
#: serverguide/C/network-auth.xml:19(title)
12955
msgid "OpenLDAP Server"
12956
msgstr ""
12957
12958
#: serverguide/C/network-auth.xml:20(para)
12959
msgid ""
12960
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
12961
"simplified version of the X.500 protocol. The directory setup in this "
12962
"section will be used for authentication. Nevertheless, LDAP can be used in "
12963
"numerous ways: authentication, shared directory (for mail clients), address "
12964
"book, etc."
12965
msgstr ""
12966
12967
#: serverguide/C/network-auth.xml:28(para)
12968
msgid ""
12969
"To describe LDAP quickly, all information is stored in a tree structure. "
12970
"With <application>OpenLDAP</application> you have freedom to determine the "
12971
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
12972
"We will begin with a basic tree containing two nodes below the root:"
12973
msgstr ""
12974
12975
#: serverguide/C/network-auth.xml:37(para)
12976
msgid "\"People\" node where your users will be stored"
12977
msgstr ""
12978
12979
#: serverguide/C/network-auth.xml:40(para)
12980
msgid "\"Groups\" node where your groups will be stored"
12981
msgstr ""
12982
12983
#: serverguide/C/network-auth.xml:44(para)
12984
msgid ""
12985
"Before beginning, you should determine what the root of your LDAP directory "
12986
"will be. By default, your tree will be determined by your Fully Qualified "
12987
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
12988
"example), your root node will be dc=example,dc=com."
12989
msgstr ""
12990
12991
#: serverguide/C/network-auth.xml:54(para)
12992
msgid ""
12993
"First, install the <application>OpenLDAP</application> server daemon "
12994
"<application>slapd</application> and <application>ldap-utils</application>, "
12995
"a package containing LDAP management utilities:"
12996
msgstr ""
12997
12998
#: serverguide/C/network-auth.xml:60(command)
12999
msgid "sudo apt-get install slapd ldap-utils"
13000
msgstr ""
13001
13002
#: serverguide/C/network-auth.xml:63(para)
13003
msgid ""
13004
"By default <application>slapd</application> is configured with minimal "
13005
"options needed to run the <application>slapd</application> daemon."
13006
msgstr ""
13007
13008
#: serverguide/C/network-auth.xml:68(para)
13009
msgid ""
13010
"The configuration example in the following sections will match the domain "
13011
"name of the server. For example, if the machine's Fully Qualified Domain "
13012
"Name (FQDN) is ldap.example.com, the default suffix will be "
13013
"<emphasis>dc=example,dc=com</emphasis>."
13014
msgstr ""
13015
13016
#: serverguide/C/network-auth.xml:76(title)
13017
msgid "Populating LDAP"
13018
msgstr ""
13019
13020
#: serverguide/C/network-auth.xml:78(para)
13021
msgid ""
13022
"<application>OpenLDAP</application> uses a separate directory which contains "
13023
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13024
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13025
"<application>slapd</application> daemon, allowing the modification of schema "
13026
"definitions, indexes, ACLs, etc without stopping the service."
13027
msgstr ""
13028
13029
#: serverguide/C/network-auth.xml:86(para)
13030
msgid ""
13031
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13032
"configuration and will need additional configuration options in order to "
13033
"populate the frontend directory. The frontend will be populated with a "
13034
"\"classical\" scheme that will be compatible with address book applications "
13035
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13036
"various applications, such as web applications, email Mail Transfer Agent "
13037
"(MTA) applications, etc."
13038
msgstr ""
13039
13040
#: serverguide/C/network-auth.xml:95(para)
13041
msgid ""
13042
"For external applications to authenticate using LDAP they will each need to "
13043
"be specifically configured to do so. Refer to the individual application "
13044
"documentation for details."
13045
msgstr ""
13046
13047
#: serverguide/C/network-auth.xml:103(para)
13048
msgid ""
13049
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13050
"examples to match your LDAP configuration."
13051
msgstr ""
13052
13053
#: serverguide/C/network-auth.xml:108(para)
13054
msgid ""
13055
"First, some additional schema files need to be loaded. In a terminal enter:"
13056
msgstr ""
13057
13058
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13059
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13060
msgstr ""
13061
13062
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13063
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13064
msgstr ""
13065
13066
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13067
msgid ""
13068
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13069
msgstr ""
13070
13071
#: serverguide/C/network-auth.xml:118(para)
13072
msgid ""
13073
"Next, copy the following example LDIF file, naming it "
13074
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13075
msgstr ""
13076
13077
#: serverguide/C/network-auth.xml:123(programlisting)
13078
#, no-wrap
13079
msgid ""
13080
"\n"
13081
"# Load dynamic backend modules\n"
13082
"dn: cn=module,cn=config\n"
13083
"objectClass: olcModuleList\n"
13084
"cn: module\n"
13085
"olcModulepath: /usr/lib/ldap\n"
13086
"olcModuleload: back_hdb\n"
13087
"\n"
13088
"# Database settings\n"
13089
"dn: olcDatabase=hdb,cn=config\n"
13090
"objectClass: olcDatabaseConfig\n"
13091
"objectClass: olcHdbConfig\n"
13092
"olcDatabase: {1}hdb\n"
13093
"olcSuffix: dc=example,dc=com\n"
13094
"olcDbDirectory: /var/lib/ldap\n"
13095
"olcRootDN: cn=admin,dc=example,dc=com\n"
13096
"olcRootPW: secret\n"
13097
"olcDbConfig: set_cachesize 0 2097152 0\n"
13098
"olcDbConfig: set_lk_max_objects 1500\n"
13099
"olcDbConfig: set_lk_max_locks 1500\n"
13100
"olcDbConfig: set_lk_max_lockers 1500\n"
13101
"olcDbIndex: objectClass eq\n"
13102
"olcLastMod: TRUE\n"
13103
"olcDbCheckpoint: 512 30\n"
13104
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13105
"by anonymous auth by self write by * none\n"
13106
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13107
"olcAccess: to dn.base=\"\" by * read\n"
13108
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13109
"\n"
13110
msgstr ""
13111
13112
#: serverguide/C/network-auth.xml:155(para)
13113
msgid ""
13114
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13115
msgstr ""
13116
13117
#: serverguide/C/network-auth.xml:160(para)
13118
msgid "Now add the LDIF to the directory:"
13119
msgstr ""
13120
13121
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13122
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13123
msgstr ""
13124
13125
#: serverguide/C/network-auth.xml:168(para)
13126
msgid ""
13127
"The frontend directory is now ready to be populated. Create a "
13128
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13129
msgstr ""
13130
13131
#: serverguide/C/network-auth.xml:173(programlisting)
13132
#, no-wrap
13133
msgid ""
13134
"\n"
13135
"# Create top-level object in domain\n"
13136
"dn: dc=example,dc=com\n"
13137
"objectClass: top\n"
13138
"objectClass: dcObject\n"
13139
"objectclass: organization\n"
13140
"o: Example Organization\n"
13141
"dc: Example\n"
13142
"description: LDAP Example \n"
13143
"\n"
13144
"# Admin user.\n"
13145
"dn: cn=admin,dc=example,dc=com\n"
13146
"objectClass: simpleSecurityObject\n"
13147
"objectClass: organizationalRole\n"
13148
"cn: admin\n"
13149
"description: LDAP administrator\n"
13150
"userPassword: secret\n"
13151
"\n"
13152
"dn: ou=people,dc=example,dc=com\n"
13153
"objectClass: organizationalUnit\n"
13154
"ou: people\n"
13155
"\n"
13156
"dn: ou=groups,dc=example,dc=com\n"
13157
"objectClass: organizationalUnit\n"
13158
"ou: groups\n"
13159
"\n"
13160
"dn: uid=john,ou=people,dc=example,dc=com\n"
13161
"objectClass: inetOrgPerson\n"
13162
"objectClass: posixAccount\n"
13163
"objectClass: shadowAccount\n"
13164
"uid: john\n"
13165
"sn: Doe\n"
13166
"givenName: John\n"
13167
"cn: John Doe\n"
13168
"displayName: John Doe\n"
13169
"uidNumber: 1000\n"
13170
"gidNumber: 10000\n"
13171
"userPassword: password\n"
13172
"gecos: John Doe\n"
13173
"loginShell: /bin/bash\n"
13174
"homeDirectory: /home/john\n"
13175
"shadowExpire: -1\n"
13176
"shadowFlag: 0\n"
13177
"shadowWarning: 7\n"
13178
"shadowMin: 8\n"
13179
"shadowMax: 999999\n"
13180
"shadowLastChange: 10877\n"
13181
"mail: john.doe@example.com\n"
13182
"postalCode: 31000\n"
13183
"l: Toulouse\n"
13184
"o: Example\n"
13185
"mobile: +33 (0)6 xx xx xx xx\n"
13186
"homePhone: +33 (0)5 xx xx xx xx\n"
13187
"title: System Administrator\n"
13188
"postalAddress: \n"
13189
"initials: JD\n"
13190
"\n"
13191
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13192
"objectClass: posixGroup\n"
13193
"cn: example\n"
13194
"gidNumber: 10000\n"
13195
msgstr ""
13196
13197
#: serverguide/C/network-auth.xml:236(para)
13198
msgid ""
13199
"In this example the directory structure, a user, and a group have been "
13200
"setup. In other examples you might see the <emphasis>objectClass: "
13201
"top</emphasis> added in every entry, but that is the default behaviour so "
13202
"you do not have to add it explicitly."
13203
msgstr ""
13204
13205
#: serverguide/C/network-auth.xml:243(para)
13206
msgid "Add the entries to the LDAP directory:"
13207
msgstr ""
13208
13209
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13210
msgid ""
13211
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13212
msgstr ""
13213
13214
#: serverguide/C/network-auth.xml:252(para)
13215
msgid ""
13216
"We can check that the content has been correctly added with the "
13217
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13218
"directory:"
13219
msgstr ""
13220
13221
#: serverguide/C/network-auth.xml:258(command)
13222
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13223
msgstr ""
13224
13225
#: serverguide/C/network-auth.xml:259(computeroutput)
13226
#, no-wrap
13227
msgid ""
13228
"\n"
13229
"dn: uid=john,ou=people,dc=example,dc=com\n"
13230
"cn: John Doe\n"
13231
"sn: Doe\n"
13232
"givenName: John\n"
13233
msgstr ""
13234
13235
#: serverguide/C/network-auth.xml:267(para)
13236
msgid "Just a quick explanation:"
13237
msgstr ""
13238
13239
#: serverguide/C/network-auth.xml:273(para)
13240
msgid ""
13241
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13242
"the default."
13243
msgstr ""
13244
13245
#: serverguide/C/network-auth.xml:279(para)
13246
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13247
msgstr ""
13248
13249
#: serverguide/C/network-auth.xml:287(title)
13250
msgid "Further Configuration"
13251
msgstr ""
13252
13253
#: serverguide/C/network-auth.xml:290(para)
13254
msgid ""
13255
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13256
"utilities in the <application>ldap-utils</application> package. For example:"
13257
msgstr ""
13258
13259
#: serverguide/C/network-auth.xml:298(para)
13260
msgid ""
13261
"Use <application>ldapsearch</application> to view the tree, entering the "
13262
"admin password set during installation or reconfiguration:"
13263
msgstr ""
13264
13265
#: serverguide/C/network-auth.xml:304(command)
13266
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13267
msgstr ""
13268
13269
#: serverguide/C/network-auth.xml:308(computeroutput)
13270
#, no-wrap
13271
msgid ""
13272
"\n"
13273
"SASL/EXTERNAL authentication started\n"
13274
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13275
"SASL SSF: 0\n"
13276
"dn: cn=config\n"
13277
"\n"
13278
"dn: cn=module{0},cn=config\n"
13279
"\n"
13280
"dn: cn=schema,cn=config\n"
13281
"\n"
13282
"dn: cn={0}core,cn=schema,cn=config\n"
13283
"\n"
13284
"dn: cn={1}cosine,cn=schema,cn=config\n"
13285
"\n"
13286
"dn: cn={2}nis,cn=schema,cn=config\n"
13287
"\n"
13288
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13289
"\n"
13290
"dn: olcDatabase={-1}frontend,cn=config\n"
13291
"\n"
13292
"dn: olcDatabase={0}config,cn=config\n"
13293
"\n"
13294
"dn: olcDatabase={1}hdb,cn=config\n"
13295
msgstr ""
13296
13297
#: serverguide/C/network-auth.xml:334(para)
13298
msgid ""
13299
"The output above is the current configuration options for the "
13300
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13301
msgstr ""
13302
13303
#: serverguide/C/network-auth.xml:342(para)
13304
msgid ""
13305
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13306
"another attribute to the index list using "
13307
"<application>ldapmodify</application>:"
13308
msgstr ""
13309
13310
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13311
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13312
msgstr ""
13313
13314
#: serverguide/C/network-auth.xml:356(userinput)
13315
#, no-wrap
13316
msgid ""
13317
"dn: olcDatabase={1}hdb,cn=config\n"
13318
"add: olcDbIndex\n"
13319
"olcDbIndex: uidNumber eq"
13320
msgstr ""
13321
13322
#: serverguide/C/network-auth.xml:352(computeroutput)
13323
#, no-wrap
13324
msgid ""
13325
"\n"
13326
"SASL/EXTERNAL authentication started\n"
13327
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13328
"SASL SSF: 0\n"
13329
"<placeholder-1/>\n"
13330
"\n"
13331
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13332
msgstr ""
13333
13334
#: serverguide/C/network-auth.xml:364(para)
13335
msgid ""
13336
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13337
"exit the utility."
13338
msgstr ""
13339
13340
#: serverguide/C/network-auth.xml:371(para)
13341
msgid ""
13342
"<application>ldapmodify</application> can also read the changes from a file. "
13343
"Copy and paste the following into a file named "
13344
"<filename>uid_index.ldif</filename>:"
13345
msgstr ""
13346
13347
#: serverguide/C/network-auth.xml:376(programlisting)
13348
#, no-wrap
13349
msgid ""
13350
"\n"
13351
"dn: olcDatabase={1}hdb,cn=config\n"
13352
"add: olcDbIndex\n"
13353
"olcDbIndex: uid eq,pres,sub\n"
13354
msgstr ""
13355
13356
#: serverguide/C/network-auth.xml:382(para)
13357
msgid "Then execute <application>ldapmodify</application>:"
13358
msgstr ""
13359
13360
#: serverguide/C/network-auth.xml:387(command)
13361
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13362
msgstr ""
13363
13364
#: serverguide/C/network-auth.xml:391(computeroutput)
13365
#, no-wrap
13366
msgid ""
13367
"\n"
13368
"SASL/EXTERNAL authentication started\n"
13369
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13370
"SASL SSF: 0\n"
13371
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13372
msgstr ""
13373
13374
#: serverguide/C/network-auth.xml:399(para)
13375
msgid "The file method is very useful for large changes."
13376
msgstr ""
13377
13378
#: serverguide/C/network-auth.xml:406(para)
13379
msgid ""
13380
"Adding additional <emphasis>schemas</emphasis> to "
13381
"<application>slapd</application> requires the schema to be converted to LDIF "
13382
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13383
"directory contains some schema files already converted to LDIF format as "
13384
"demonstrated in the previous section. Fortunately, the "
13385
"<application>slapd</application> program can be used to automate the "
13386
"conversion. The following example will add the "
13387
"<emphasis>dyngoup.schema</emphasis>:"
13388
msgstr ""
13389
13390
#: serverguide/C/network-auth.xml:416(para)
13391
msgid ""
13392
"First, create a conversion <filename>schema_convert.conf</filename> file "
13393
"containing the following lines:"
13394
msgstr ""
13395
13396
#: serverguide/C/network-auth.xml:421(programlisting)
13397
#, no-wrap
13398
msgid ""
13399
"\n"
13400
"include /etc/ldap/schema/core.schema\n"
13401
"include /etc/ldap/schema/collective.schema\n"
13402
"include /etc/ldap/schema/corba.schema\n"
13403
"include /etc/ldap/schema/cosine.schema\n"
13404
"include /etc/ldap/schema/duaconf.schema\n"
13405
"include /etc/ldap/schema/dyngroup.schema\n"
13406
"include /etc/ldap/schema/inetorgperson.schema\n"
13407
"include /etc/ldap/schema/java.schema\n"
13408
"include /etc/ldap/schema/misc.schema\n"
13409
"include /etc/ldap/schema/nis.schema\n"
13410
"include /etc/ldap/schema/openldap.schema\n"
13411
"include /etc/ldap/schema/ppolicy.schema\n"
13412
msgstr ""
13413
13414
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13415
msgid "Next, create a temporary directory to hold the output:"
13416
msgstr ""
13417
13418
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13419
msgid "mkdir /tmp/ldif_output"
13420
msgstr ""
13421
13422
#: serverguide/C/network-auth.xml:450(para)
13423
msgid ""
13424
"Now using <application>slapcat</application> convert the schema files to "
13425
"LDIF:"
13426
msgstr ""
13427
13428
#: serverguide/C/network-auth.xml:455(command)
13429
msgid ""
13430
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13431
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13432
msgstr ""
13433
13434
#: serverguide/C/network-auth.xml:458(para)
13435
msgid ""
13436
"Adjust the configuration file name and temporary directory names if yours "
13437
"are different. Also, it may be worthwhile to keep the "
13438
"<filename>ldif_output</filename> directory around in case you want to add "
13439
"additional schemas in the future."
13440
msgstr ""
13441
13442
#: serverguide/C/network-auth.xml:467(para)
13443
msgid ""
13444
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13445
"following attributes:"
13446
msgstr ""
13447
13448
#: serverguide/C/network-auth.xml:471(programlisting)
13449
#, no-wrap
13450
msgid ""
13451
"\n"
13452
"dn: cn=dyngroup,cn=schema,cn=config\n"
13453
"...\n"
13454
"cn: dyngroup\n"
13455
msgstr ""
13456
13457
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13458
msgid "And remove the following lines from the bottom of the file:"
13459
msgstr ""
13460
13461
#: serverguide/C/network-auth.xml:481(programlisting)
13462
#, no-wrap
13463
msgid ""
13464
"\n"
13465
"structuralObjectClass: olcSchemaConfig\n"
13466
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13467
"creatorsName: cn=config\n"
13468
"createTimestamp: 20080826021140Z\n"
13469
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13470
"modifiersName: cn=config\n"
13471
"modifyTimestamp: 20080826021140Z\n"
13472
msgstr ""
13473
13474
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13475
msgid ""
13476
"The attribute values will vary, just be sure the attributes are removed."
13477
msgstr ""
13478
13479
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13480
msgid ""
13481
"Finally, using the <application>ldapadd</application> utility, add the new "
13482
"schema to the directory:"
13483
msgstr ""
13484
13485
#: serverguide/C/network-auth.xml:506(command)
13486
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13487
msgstr ""
13488
13489
#: serverguide/C/network-auth.xml:512(para)
13490
msgid ""
13491
"There should now be a <emphasis>dn: "
13492
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13493
msgstr ""
13494
13495
#: serverguide/C/network-auth.xml:522(title)
13496
msgid "LDAP Replication"
13497
msgstr ""
13498
13499
#: serverguide/C/network-auth.xml:524(para)
13500
msgid ""
13501
"LDAP often quickly becomes a highly critical service to the network. "
13502
"Multiple systems will come to depend on LDAP for authentication, "
13503
"authorization, configuration, etc. It is a good idea to setup a redundant "
13504
"system through replication."
13505
msgstr ""
13506
13507
#: serverguide/C/network-auth.xml:530(para)
13508
msgid ""
13509
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13510
"Syncrepl allows the changes to be synced using a "
13511
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13512
"provider sends directory changes to consumers."
13513
msgstr ""
13514
13515
#: serverguide/C/network-auth.xml:537(title)
13516
msgid "Provider Configuration"
13517
msgstr ""
13518
13519
#: serverguide/C/network-auth.xml:539(para)
13520
msgid ""
13521
"The following is an example of a <emphasis>Single-Master</emphasis> "
13522
"configuration. In this configuration one OpenLDAP server is configured as a "
13523
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13524
msgstr ""
13525
13526
#: serverguide/C/network-auth.xml:547(para)
13527
msgid ""
13528
"First, configure the provider server. Copy the following to a file named "
13529
"<filename>provider_sync.ldif</filename>:"
13530
msgstr ""
13531
13532
#: serverguide/C/network-auth.xml:552(programlisting)
13533
#, no-wrap
13534
msgid ""
13535
"\n"
13536
"# Add indexes to the frontend db.\n"
13537
"dn: olcDatabase={1}hdb,cn=config\n"
13538
"changetype: modify\n"
13539
"add: olcDbIndex\n"
13540
"olcDbIndex: entryCSN eq\n"
13541
"-\n"
13542
"add: olcDbIndex\n"
13543
"olcDbIndex: entryUUID eq\n"
13544
"\n"
13545
"#Load the syncprov and accesslog modules.\n"
13546
"dn: cn=module{0},cn=config\n"
13547
"changetype: modify\n"
13548
"add: olcModuleLoad\n"
13549
"olcModuleLoad: syncprov\n"
13550
"-\n"
13551
"add: olcModuleLoad\n"
13552
"olcModuleLoad: accesslog\n"
13553
"\n"
13554
"# Accesslog database definitions\n"
13555
"dn: olcDatabase={2}hdb,cn=config\n"
13556
"objectClass: olcDatabaseConfig\n"
13557
"objectClass: olcHdbConfig\n"
13558
"olcDatabase: {2}hdb\n"
13559
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13560
"olcSuffix: cn=accesslog\n"
13561
"olcRootDN: cn=admin,dc=example,dc=com\n"
13562
"olcDbIndex: default eq\n"
13563
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13564
"\n"
13565
"# Accesslog db syncprov.\n"
13566
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13567
"changetype: add\n"
13568
"objectClass: olcOverlayConfig\n"
13569
"objectClass: olcSyncProvConfig\n"
13570
"olcOverlay: syncprov\n"
13571
"olcSpNoPresent: TRUE\n"
13572
"olcSpReloadHint: TRUE\n"
13573
"\n"
13574
"# syncrepl Provider for primary db\n"
13575
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13576
"changetype: add\n"
13577
"objectClass: olcOverlayConfig\n"
13578
"objectClass: olcSyncProvConfig\n"
13579
"olcOverlay: syncprov\n"
13580
"olcSpNoPresent: TRUE\n"
13581
"\n"
13582
"# accesslog overlay definitions for primary db\n"
13583
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13584
"objectClass: olcOverlayConfig\n"
13585
"objectClass: olcAccessLogConfig\n"
13586
"olcOverlay: accesslog\n"
13587
"olcAccessLogDB: cn=accesslog\n"
13588
"olcAccessLogOps: writes\n"
13589
"olcAccessLogSuccess: TRUE\n"
13590
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13591
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13592
msgstr ""
13593
13594
#: serverguide/C/network-auth.xml:614(para)
13595
msgid ""
13596
"The <application>AppArmor</application> profile for "
13597
"<application>slapd</application> will need to be adjusted for the accesslog "
13598
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13599
"adding:"
13600
msgstr ""
13601
13602
#: serverguide/C/network-auth.xml:619(programlisting)
13603
#, no-wrap
13604
msgid ""
13605
"\n"
13606
" /var/lib/ldap/accesslog/ r,\n"
13607
" /var/lib/ldap/accesslog/** rwk,\n"
13608
msgstr ""
13609
13610
#: serverguide/C/network-auth.xml:624(para)
13611
msgid ""
13612
"Then create the directory, reload the <application>apparmor</application> "
13613
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13614
msgstr ""
13615
13616
#: serverguide/C/network-auth.xml:630(command)
13617
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13618
msgstr ""
13619
13620
#: serverguide/C/network-auth.xml:631(command)
13621
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13622
msgstr ""
13623
13624
#: serverguide/C/network-auth.xml:636(para)
13625
msgid ""
13626
"Using the <emphasis>-u openldap</emphasis> option with the "
13627
"<application>sudo</application> commands above removes the need to adjust "
13628
"permissions for the new directory later."
13629
msgstr ""
13630
13631
#: serverguide/C/network-auth.xml:645(para)
13632
msgid ""
13633
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13634
"directory:"
13635
msgstr ""
13636
13637
#: serverguide/C/network-auth.xml:649(programlisting)
13638
#, no-wrap
13639
msgid ""
13640
"\n"
13641
"olcRootDN: cn=admin,dc=example,dc=com\n"
13642
msgstr ""
13643
13644
#: serverguide/C/network-auth.xml:657(para)
13645
msgid ""
13646
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13647
msgstr ""
13648
13649
#: serverguide/C/network-auth.xml:662(command)
13650
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13651
msgstr ""
13652
13653
#: serverguide/C/network-auth.xml:669(para)
13654
msgid "Restart <application>slapd</application>:"
13655
msgstr ""
13656
13657
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13658
msgid "sudo /etc/init.d/slapd restart"
13659
msgstr ""
13660
13661
#: serverguide/C/network-auth.xml:680(para)
13662
msgid ""
13663
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13664
"to configure a <emphasis>Consumer</emphasis> server."
13665
msgstr ""
13666
13667
#: serverguide/C/network-auth.xml:687(title)
13668
msgid "Consumer Configuration"
13669
msgstr ""
13670
13671
#: serverguide/C/network-auth.xml:692(para)
13672
msgid ""
13673
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13674
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13675
"configuration steps."
13676
msgstr ""
13677
13678
#: serverguide/C/network-auth.xml:697(para)
13679
msgid "Add the additional schema files:"
13680
msgstr ""
13681
13682
#: serverguide/C/network-auth.xml:707(para)
13683
msgid ""
13684
"Also, create, or copy from the provider server, the "
13685
"<filename>backend.example.com.ldif</filename>"
13686
msgstr ""
13687
13688
#: serverguide/C/network-auth.xml:711(programlisting)
13689
#, no-wrap
13690
msgid ""
13691
"\n"
13692
"# Load dynamic backend modules\n"
13693
"dn: cn=module,cn=config\n"
13694
"objectClass: olcModuleList\n"
13695
"cn: module\n"
13696
"olcModulepath: /usr/lib/ldap\n"
13697
"olcModuleload: back_hdb\n"
13698
"\n"
13699
"# Database settings\n"
13700
"dn: olcDatabase=hdb,cn=config\n"
13701
"objectClass: olcDatabaseConfig\n"
13702
"objectClass: olcHdbConfig\n"
13703
"olcDatabase: {1}hdb\n"
13704
"olcSuffix: dc=example,dc=com\n"
13705
"olcDbDirectory: /var/lib/ldap\n"
13706
"olcRootDN: cn=admin,dc=example,dc=com\n"
13707
"olcRootPW: secret\n"
13708
"olcDbConfig: set_cachesize 0 2097152 0\n"
13709
"olcDbConfig: set_lk_max_objects 1500\n"
13710
"olcDbConfig: set_lk_max_locks 1500\n"
13711
"olcDbConfig: set_lk_max_lockers 1500\n"
13712
"olcDbIndex: objectClass eq\n"
13713
"olcLastMod: TRUE\n"
13714
"olcDbCheckpoint: 512 30\n"
13715
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13716
"by anonymous auth by self write by * none\n"
13717
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13718
"olcAccess: to dn.base=\"\" by * read\n"
13719
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13720
msgstr ""
13721
13722
#: serverguide/C/network-auth.xml:741(para)
13723
msgid "And add the LDIF by entering:"
13724
msgstr ""
13725
13726
#: serverguide/C/network-auth.xml:752(para)
13727
msgid ""
13728
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
13729
"listed above, and add it:"
13730
msgstr ""
13731
13732
#: serverguide/C/network-auth.xml:760(para)
13733
msgid ""
13734
"The two severs should now have the same configuration except for the "
13735
"<emphasis>Syncrepl</emphasis> options."
13736
msgstr ""
13737
13738
#: serverguide/C/network-auth.xml:768(para)
13739
msgid ""
13740
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
13741
msgstr ""
13742
13743
#: serverguide/C/network-auth.xml:772(programlisting)
13744
#, no-wrap
13745
msgid ""
13746
"\n"
13747
"#Load the syncprov module.\n"
13748
"dn: cn=module{0},cn=config\n"
13749
"changetype: modify\n"
13750
"add: olcModuleLoad\n"
13751
"olcModuleLoad: syncprov\n"
13752
"\n"
13753
"# syncrepl specific indices\n"
13754
"dn: olcDatabase={1}hdb,cn=config\n"
13755
"changetype: modify\n"
13756
"add: olcDbIndex\n"
13757
"olcDbIndex: entryUUID eq\n"
13758
"-\n"
13759
"add: olcSyncRepl\n"
13760
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
13761
"binddn=\"cn=admin,dc=example,dc=com\" \n"
13762
" credentials=secret searchbase=\"dc=example,dc=com\" "
13763
"logbase=\"cn=accesslog\" \n"
13764
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
13765
"schemachecking=on \n"
13766
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
13767
"-\n"
13768
"add: olcUpdateRef\n"
13769
"olcUpdateRef: ldap://ldap01.example.com\n"
13770
msgstr ""
13771
13772
#: serverguide/C/network-auth.xml:795(para)
13773
msgid "You will probably want to change the following attributes:"
13774
msgstr ""
13775
13776
#: serverguide/C/network-auth.xml:800(para)
13777
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
13778
msgstr ""
13779
13780
#: serverguide/C/network-auth.xml:801(emphasis)
13781
msgid "binddn"
13782
msgstr ""
13783
13784
#: serverguide/C/network-auth.xml:802(emphasis)
13785
msgid "credentials"
13786
msgstr ""
13787
13788
#: serverguide/C/network-auth.xml:803(emphasis)
13789
msgid "searchbase"
13790
msgstr ""
13791
13792
#: serverguide/C/network-auth.xml:804(emphasis)
13793
msgid "olcUpdateRef:"
13794
msgstr ""
13795
13796
#: serverguide/C/network-auth.xml:810(para)
13797
msgid "Add the LDIF file to the configuration tree:"
13798
msgstr ""
13799
13800
#: serverguide/C/network-auth.xml:815(command)
13801
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
13802
msgstr ""
13803
13804
#: serverguide/C/network-auth.xml:821(para)
13805
msgid ""
13806
"The frontend database should now sync between servers. You can add "
13807
"additional servers using the steps above as the need arises."
13808
msgstr ""
13809
13810
#: serverguide/C/network-auth.xml:831(programlisting)
13811
#, no-wrap
13812
msgid "127.0.0.1\tldap01.example.com ldap01"
13813
msgstr ""
13814
13815
#: serverguide/C/network-auth.xml:827(para)
13816
msgid ""
13817
"The <application>slapd</application> daemon will send log information to "
13818
"<filename>/var/log/syslog</filename> by default. So if all does "
13819
"<emphasis>not</emphasis> go well check there for errors and other "
13820
"troubleshooting information. Also, be sure that each server knows it's Fully "
13821
"Qualified Domain Name (FQDN). This is configured in "
13822
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
13823
msgstr ""
13824
13825
#: serverguide/C/network-auth.xml:839(title)
13826
msgid "Setting up ACL"
13827
msgstr ""
13828
13829
#: serverguide/C/network-auth.xml:841(para)
13830
msgid ""
13831
"Authentication requires access to the password field, that should be not "
13832
"accessible by default. Also, in order for users to change their own "
13833
"password, using <command>passwd</command> or other utilities, "
13834
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
13835
"authenticated."
13836
msgstr ""
13837
13838
#: serverguide/C/network-auth.xml:848(para)
13839
msgid ""
13840
"To view the Access Control List (ACL), use the "
13841
"<application>ldapsearch</application> utility:"
13842
msgstr ""
13843
13844
#: serverguide/C/network-auth.xml:853(command)
13845
msgid ""
13846
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
13847
"olcAccess"
13848
msgstr ""
13849
13850
#: serverguide/C/network-auth.xml:857(computeroutput)
13851
#, no-wrap
13852
msgid ""
13853
"Enter LDAP Password: \n"
13854
"dn: olcDatabase={1}hdb,cn=config\n"
13855
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
13856
"dn=\"cn=admin,dc=exampl\n"
13857
" e,dc=com\" write by anonymous auth by self write by * none\n"
13858
"olcAccess: {1}to dn.base=\"\" by * read\n"
13859
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13860
msgstr ""
13861
13862
#: serverguide/C/network-auth.xml:869(title)
13863
msgid "TLS and SSL"
13864
msgstr ""
13865
13866
#: serverguide/C/network-auth.xml:871(para)
13867
msgid ""
13868
"When authenticating to an OpenLDAP server it is best to do so using an "
13869
"encrypted session. This can be accomplished using Transport Layer Security "
13870
"(TLS) and/or Secure Sockets Layer (SSL)."
13871
msgstr ""
13872
13873
#: serverguide/C/network-auth.xml:876(para)
13874
msgid ""
13875
"The first step in the process is to obtain or create a "
13876
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
13877
"is compiled using the <application>gnutls</application> library, the "
13878
"<application>certtool</application> utility will be used to create "
13879
"certificates."
13880
msgstr ""
13881
13882
#: serverguide/C/network-auth.xml:885(para)
13883
msgid ""
13884
"First, install <application>gnutls-bin</application> by entering the "
13885
"following in a terminal:"
13886
msgstr ""
13887
13888
#: serverguide/C/network-auth.xml:890(command)
13889
msgid "sudo apt-get install gnutls-bin"
13890
msgstr ""
13891
13892
#: serverguide/C/network-auth.xml:896(para)
13893
msgid ""
13894
"Next, create a private key for the <emphasis>Certificate "
13895
"Authority</emphasis> (CA):"
13896
msgstr ""
13897
13898
#: serverguide/C/network-auth.xml:901(command)
13899
msgid ""
13900
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
13901
msgstr ""
13902
13903
#: serverguide/C/network-auth.xml:907(para)
13904
msgid ""
13905
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
13906
"CA certificate containing:"
13907
msgstr ""
13908
13909
#: serverguide/C/network-auth.xml:911(programlisting)
13910
#, no-wrap
13911
msgid ""
13912
"\n"
13913
"cn = Example Company\n"
13914
"ca\n"
13915
"cert_signing_key\n"
13916
msgstr ""
13917
13918
#: serverguide/C/network-auth.xml:920(para)
13919
msgid "Now create the self-signed CA certificate:"
13920
msgstr ""
13921
13922
#: serverguide/C/network-auth.xml:925(command)
13923
msgid ""
13924
"sudo certtool --generate-self-signed --load-privkey "
13925
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
13926
"/etc/ssl/certs/cacert.pem"
13927
msgstr ""
13928
13929
#: serverguide/C/network-auth.xml:932(para)
13930
msgid "Make a private key for the server:"
13931
msgstr ""
13932
13933
#: serverguide/C/network-auth.xml:937(command)
13934
msgid ""
13935
"sudo sh -c \"certtool --generate-privkey > "
13936
"/etc/ssl/private/ldap01_slapd_key.pem\""
13937
msgstr ""
13938
13939
#: serverguide/C/network-auth.xml:941(para)
13940
msgid ""
13941
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
13942
"hostname. Naming the certificate and key for the host and service that will "
13943
"be using them will help keep filenames and paths straight."
13944
msgstr ""
13945
13946
#: serverguide/C/network-auth.xml:950(para)
13947
msgid ""
13948
"To sign the server's certificate with the CA, create the "
13949
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
13950
msgstr ""
13951
13952
#: serverguide/C/network-auth.xml:954(programlisting)
13953
#, no-wrap
13954
msgid ""
13955
"\n"
13956
"organization = Example Company\n"
13957
"cn = ldap01.example.com\n"
13958
"tls_www_server\n"
13959
"encryption_key\n"
13960
"signing_key\n"
13961
msgstr ""
13962
13963
#: serverguide/C/network-auth.xml:965(para)
13964
msgid "Create the server's certificate:"
13965
msgstr ""
13966
13967
#: serverguide/C/network-auth.xml:970(command)
13968
msgid ""
13969
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
13970
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
13971
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
13972
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
13973
msgstr ""
13974
13975
#: serverguide/C/network-auth.xml:978(para)
13976
msgid ""
13977
"Once you have a certificate, key, and CA cert installed, use "
13978
"<application>ldapmodify</application> to add the new configuration options:"
13979
msgstr ""
13980
13981
#: serverguide/C/network-auth.xml:989(userinput)
13982
#, no-wrap
13983
msgid ""
13984
"dn: cn=config\n"
13985
"add: olcTLSCACertificateFile\n"
13986
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
13987
"-\n"
13988
"add: olcTLSCertificateFile\n"
13989
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
13990
"-\n"
13991
"add: olcTLSCertificateKeyFile\n"
13992
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
13993
msgstr ""
13994
13995
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
13996
#, no-wrap
13997
msgid ""
13998
"Enter LDAP Password:\n"
13999
"<placeholder-1/>\n"
14000
"\n"
14001
"modifying entry \"cn=config\"\n"
14002
msgstr ""
14003
14004
#: serverguide/C/network-auth.xml:1004(para)
14005
msgid ""
14006
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14007
"<filename>ldap01_slapd_key.pem</filename>, and "
14008
"<filename>cacert.pem</filename> names if yours are different."
14009
msgstr ""
14010
14011
#: serverguide/C/network-auth.xml:1010(para)
14012
msgid ""
14013
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14014
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14015
msgstr ""
14016
14017
#: serverguide/C/network-auth.xml:1014(programlisting)
14018
#, no-wrap
14019
msgid ""
14020
"\n"
14021
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14022
msgstr ""
14023
14024
#: serverguide/C/network-auth.xml:1018(para)
14025
msgid ""
14026
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14027
msgstr ""
14028
14029
#: serverguide/C/network-auth.xml:1023(command)
14030
msgid "sudo adduser openldap ssl-cert"
14031
msgstr ""
14032
14033
#: serverguide/C/network-auth.xml:1024(command)
14034
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14035
msgstr ""
14036
14037
#: serverguide/C/network-auth.xml:1025(command)
14038
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14039
msgstr ""
14040
14041
#: serverguide/C/network-auth.xml:1029(para)
14042
msgid ""
14043
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14044
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14045
"adjust the commands appropriately."
14046
msgstr ""
14047
14048
#: serverguide/C/network-auth.xml:1035(para)
14049
msgid "Finally, restart <application>slapd</application>:"
14050
msgstr ""
14051
14052
#: serverguide/C/network-auth.xml:1043(para)
14053
msgid ""
14054
"The <application>slapd</application> daemon should now be listening for "
14055
"LDAPS connections and be able to use STARTTLS during authentication."
14056
msgstr ""
14057
14058
#: serverguide/C/network-auth.xml:1049(para)
14059
msgid ""
14060
"If you run into troubles with the server not starting, check the "
14061
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14062
"it is likely there is a configuration problem. Check that the certificate is "
14063
"signed by the authority from in the files configured, and that the ssl-cert "
14064
"group has read permissions on the private key."
14065
msgstr ""
14066
14067
#: serverguide/C/network-auth.xml:1061(title)
14068
msgid "TLS Replication"
14069
msgstr ""
14070
14071
#: serverguide/C/network-auth.xml:1063(para)
14072
msgid ""
14073
"If you have setup <application>Syncrepl</application> between servers, it is "
14074
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14075
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14076
"linkend=\"openldap-server-replication\"/>."
14077
msgstr ""
14078
14079
#: serverguide/C/network-auth.xml:1069(para)
14080
msgid ""
14081
"Assuming you have followed the above instructions and created a CA "
14082
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14083
"server. Follow the following instructions to create a certificate and key "
14084
"for the <emphasis>Consumer</emphasis> server."
14085
msgstr ""
14086
14087
#: serverguide/C/network-auth.xml:1078(para)
14088
msgid "Create a new key for the Consumer server:"
14089
msgstr ""
14090
14091
#: serverguide/C/network-auth.xml:1083(command)
14092
msgid "mkdir ldap02-ssl"
14093
msgstr ""
14094
14095
#: serverguide/C/network-auth.xml:1084(command)
14096
msgid "cd ldap02-ssl"
14097
msgstr ""
14098
14099
#: serverguide/C/network-auth.xml:1085(command)
14100
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14101
msgstr ""
14102
14103
#: serverguide/C/network-auth.xml:1089(para)
14104
msgid ""
14105
"Creating a new directory is not strictly necessary, but it will help keep "
14106
"things organized and make it easier to copy the files to the Consumer server."
14107
msgstr ""
14108
14109
#: serverguide/C/network-auth.xml:1098(para)
14110
msgid ""
14111
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14112
"server, changing the attributes to match your locality and server:"
14113
msgstr ""
14114
14115
#: serverguide/C/network-auth.xml:1103(programlisting)
14116
#, no-wrap
14117
msgid ""
14118
"\n"
14119
"country = US\n"
14120
"state = North Carolina\n"
14121
"locality = Winston-Salem\n"
14122
"organization = Example Company\n"
14123
"cn = ldap02.salem.edu\n"
14124
"tls_www_client\n"
14125
"encryption_key\n"
14126
"signing_key\n"
14127
msgstr ""
14128
14129
#: serverguide/C/network-auth.xml:1117(para)
14130
msgid "Create the certificate:"
14131
msgstr ""
14132
14133
#: serverguide/C/network-auth.xml:1122(command)
14134
msgid ""
14135
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14136
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14137
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14138
"ldap02_slapd_cert.pem"
14139
msgstr ""
14140
14141
#: serverguide/C/network-auth.xml:1130(para)
14142
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14143
msgstr ""
14144
14145
#: serverguide/C/network-auth.xml:1135(command)
14146
msgid "cp /etc/ssl/certs/cacert.pem ."
14147
msgstr ""
14148
14149
#: serverguide/C/network-auth.xml:1141(para)
14150
msgid ""
14151
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14152
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14153
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14154
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14155
"<filename>/etc/ssl/private</filename>."
14156
msgstr ""
14157
14158
#: serverguide/C/network-auth.xml:1150(para)
14159
msgid ""
14160
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14161
"by entering:"
14162
msgstr ""
14163
14164
#: serverguide/C/network-auth.xml:1160(userinput)
14165
#, no-wrap
14166
msgid ""
14167
"dn: cn=config\n"
14168
"add: olcTLSCACertificateFile\n"
14169
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14170
"-\n"
14171
"add: olcTLSCertificateFile\n"
14172
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14173
"-\n"
14174
"add: olcTLSCertificateKeyFile\n"
14175
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14176
msgstr ""
14177
14178
#: serverguide/C/network-auth.xml:1177(para)
14179
msgid ""
14180
"As with the Provider you can now edit "
14181
"<filename>/etc/default/slapd</filename> and add the "
14182
"<emphasis>ldaps:///</emphasis> parameter to the "
14183
"<emphasis>SLAPD_SERVICES</emphasis> option."
14184
msgstr ""
14185
14186
#: serverguide/C/network-auth.xml:1185(para)
14187
msgid ""
14188
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14189
"modify the <emphasis>Consumer</emphasis> server's "
14190
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14191
msgstr ""
14192
14193
#: serverguide/C/network-auth.xml:1198(userinput)
14194
#, no-wrap
14195
msgid ""
14196
"\n"
14197
"dn: olcDatabase={1}hdb,cn=config\n"
14198
"replace: olcSyncrepl\n"
14199
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14200
"binddn=\"cn=ad\n"
14201
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14202
"logbas\n"
14203
" e=\"cn=accesslog\" "
14204
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14205
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14206
"starttls=yes"
14207
msgstr ""
14208
14209
#: serverguide/C/network-auth.xml:1195(computeroutput)
14210
#, no-wrap
14211
msgid ""
14212
"SASL/EXTERNAL authentication started\n"
14213
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14214
"SASL SSF: 0\n"
14215
"<placeholder-1/>\n"
14216
"\n"
14217
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14218
msgstr ""
14219
14220
#: serverguide/C/network-auth.xml:1210(para)
14221
msgid ""
14222
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14223
"(FQDN) in the certificate, you may have to edit "
14224
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14225
msgstr ""
14226
14227
#: serverguide/C/network-auth.xml:1215(programlisting)
14228
#, no-wrap
14229
msgid ""
14230
"\n"
14231
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14232
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14233
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14234
msgstr ""
14235
14236
#: serverguide/C/network-auth.xml:1222(para)
14237
msgid ""
14238
"Finally, restart <application>slapd</application> on each of the servers:"
14239
msgstr ""
14240
14241
#: serverguide/C/network-auth.xml:1235(title)
14242
msgid "LDAP Authentication"
14243
msgstr ""
14244
14245
#: serverguide/C/network-auth.xml:1237(para)
14246
msgid ""
14247
"Once you have a working LDAP server, the <application>auth-client-"
14248
"config</application> and <application>libnss-ldap</application> packages "
14249
"take the pain out of configuring an Ubuntu client to authenticate using "
14250
"LDAP. To install the packages from, a terminal prompt enter:"
14251
msgstr ""
14252
14253
#: serverguide/C/network-auth.xml:1244(command)
14254
msgid "sudo apt-get install libnss-ldap"
14255
msgstr ""
14256
14257
#: serverguide/C/network-auth.xml:1247(para)
14258
msgid ""
14259
"During the install a menu dialog will ask you connection details about your "
14260
"LDAP server."
14261
msgstr ""
14262
14263
#: serverguide/C/network-auth.xml:1251(para)
14264
msgid ""
14265
"If you make a mistake when entering your information you can execute the "
14266
"dialog again using:"
14267
msgstr ""
14268
14269
#: serverguide/C/network-auth.xml:1256(command)
14270
msgid "sudo dpkg-reconfigure ldap-auth-config"
14271
msgstr ""
14272
14273
#: serverguide/C/network-auth.xml:1259(para)
14274
msgid ""
14275
"The results of the dialog can be seen in "
14276
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14277
"covered in the menu edit this file accordingly."
14278
msgstr ""
14279
14280
#: serverguide/C/network-auth.xml:1264(para)
14281
msgid ""
14282
"Now that <application>libnss-ldap</application> is configured enable the "
14283
"<application>auth-client-config</application> LDAP profile by entering:"
14284
msgstr ""
14285
14286
#: serverguide/C/network-auth.xml:1270(command)
14287
msgid "sudo auth-client-config -t nss -p lac_ldap"
14288
msgstr ""
14289
14290
#: serverguide/C/network-auth.xml:1275(para)
14291
msgid ""
14292
"<emphasis>-t:</emphasis> only modifies "
14293
"<filename>/etc/nsswitch.conf</filename>."
14294
msgstr ""
14295
14296
#: serverguide/C/network-auth.xml:1280(para)
14297
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14298
msgstr ""
14299
14300
#: serverguide/C/network-auth.xml:1285(para)
14301
msgid ""
14302
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14303
"config</application> profile that is part of the <application>ldap-auth-"
14304
"config</application> package."
14305
msgstr ""
14306
14307
#: serverguide/C/network-auth.xml:1292(para)
14308
msgid ""
14309
"Using the <application>pam-auth-update</application> utility, configure the "
14310
"system to use LDAP for authentication:"
14311
msgstr ""
14312
14313
#: serverguide/C/network-auth.xml:1297(command)
14314
msgid "sudo pam-auth-update"
14315
msgstr ""
14316
14317
#: serverguide/C/network-auth.xml:1300(para)
14318
msgid ""
14319
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14320
"any other authentication mechanisms you need."
14321
msgstr ""
14322
14323
#: serverguide/C/network-auth.xml:1304(para)
14324
msgid ""
14325
"You should now be able to login using user credentials stored in the LDAP "
14326
"directory."
14327
msgstr ""
14328
14329
#: serverguide/C/network-auth.xml:1309(para)
14330
msgid ""
14331
"If you are going to use LDAP to store Samba users you will need to configure "
14332
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14333
"for details."
14334
msgstr ""
14335
14336
#: serverguide/C/network-auth.xml:1317(title)
14337
msgid "User and Group Management"
14338
msgstr ""
14339
14340
#: serverguide/C/network-auth.xml:1319(para)
14341
msgid ""
14342
"The <application>ldap-utils</application> package comes with multiple "
14343
"utilities to manage the directory, but the long string of options needed, "
14344
"can make them a burden to use. The <application>ldapscripts</application> "
14345
"package contains configurable scripts to easily manage LDAP users and groups."
14346
msgstr ""
14347
14348
#: serverguide/C/network-auth.xml:1325(para)
14349
msgid "To install the package, from a terminal enter:"
14350
msgstr ""
14351
14352
#: serverguide/C/network-auth.xml:1330(command)
14353
msgid "sudo apt-get install ldapscripts"
14354
msgstr ""
14355
14356
#: serverguide/C/network-auth.xml:1333(para)
14357
msgid ""
14358
"Next, edit the config file "
14359
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14360
"changing the following to match your environment:"
14361
msgstr ""
14362
14363
#: serverguide/C/network-auth.xml:1338(programlisting)
14364
#, no-wrap
14365
msgid ""
14366
"\n"
14367
"SERVER=localhost\n"
14368
"BINDDN='cn=admin,dc=example,dc=com'\n"
14369
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14370
"SUFFIX='dc=example,dc=com'\n"
14371
"GSUFFIX='ou=Groups'\n"
14372
"USUFFIX='ou=People'\n"
14373
"MSUFFIX='ou=Computers'\n"
14374
"GIDSTART=10000\n"
14375
"UIDSTART=10000\n"
14376
"MIDSTART=10000\n"
14377
msgstr ""
14378
14379
#: serverguide/C/network-auth.xml:1351(para)
14380
msgid ""
14381
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14382
"authenticated access to the directory:"
14383
msgstr ""
14384
14385
#: serverguide/C/network-auth.xml:1356(command)
14386
msgid ""
14387
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14388
msgstr ""
14389
14390
#: serverguide/C/network-auth.xml:1357(command)
14391
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14392
msgstr ""
14393
14394
#: serverguide/C/network-auth.xml:1361(para)
14395
msgid ""
14396
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14397
"user."
14398
msgstr ""
14399
14400
#: serverguide/C/network-auth.xml:1366(para)
14401
msgid ""
14402
"The <application>ldapscripts</application> are now ready to help manage your "
14403
"directory. The following are some examples of how to use the scripts:"
14404
msgstr ""
14405
14406
#: serverguide/C/network-auth.xml:1373(para)
14407
msgid "Create a new user:"
14408
msgstr ""
14409
14410
#: serverguide/C/network-auth.xml:1377(command)
14411
msgid "sudo ldapadduser george example"
14412
msgstr ""
14413
14414
#: serverguide/C/network-auth.xml:1379(para)
14415
msgid ""
14416
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14417
"and set the user's primary group (gid) to <emphasis "
14418
"role=\"italic\">example</emphasis>"
14419
msgstr ""
14420
14421
#: serverguide/C/network-auth.xml:1385(para)
14422
msgid "Change a user's password:"
14423
msgstr ""
14424
14425
#: serverguide/C/network-auth.xml:1389(command)
14426
msgid "sudo ldapsetpasswd george"
14427
msgstr ""
14428
14429
#: serverguide/C/network-auth.xml:1390(computeroutput)
14430
#, no-wrap
14431
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14432
msgstr ""
14433
14434
#: serverguide/C/network-auth.xml:1391(userinput)
14435
#, no-wrap
14436
msgid "New Password: "
14437
msgstr ""
14438
14439
#: serverguide/C/network-auth.xml:1392(userinput)
14440
#, no-wrap
14441
msgid "New Password (verify): "
14442
msgstr ""
14443
14444
#: serverguide/C/network-auth.xml:1396(para)
14445
msgid "Delete a user:"
14446
msgstr ""
14447
14448
#: serverguide/C/network-auth.xml:1400(command)
14449
msgid "sudo ldapdeleteuser george"
14450
msgstr ""
14451
14452
#: serverguide/C/network-auth.xml:1405(para)
14453
msgid "Add a group:"
14454
msgstr ""
14455
14456
#: serverguide/C/network-auth.xml:1409(command)
14457
msgid "sudo ldapaddgroup qa"
14458
msgstr ""
14459
14460
#: serverguide/C/network-auth.xml:1413(para)
14461
msgid "Delete a group:"
14462
msgstr ""
14463
14464
#: serverguide/C/network-auth.xml:1417(command)
14465
msgid "sudo ldapdeletegroup qa"
14466
msgstr ""
14467
14468
#: serverguide/C/network-auth.xml:1421(para)
14469
msgid "Add a user to a group:"
14470
msgstr ""
14471
14472
#: serverguide/C/network-auth.xml:1425(command)
14473
msgid "sudo ldapaddusertogroup george qa"
14474
msgstr ""
14475
14476
#: serverguide/C/network-auth.xml:1427(para)
14477
msgid ""
14478
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14479
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14480
"role=\"italic\">george</emphasis>."
14481
msgstr ""
14482
14483
#: serverguide/C/network-auth.xml:1433(para)
14484
msgid "Remove a user from a group:"
14485
msgstr ""
14486
14487
#: serverguide/C/network-auth.xml:1437(command)
14488
msgid "sudo ldapdeleteuserfromgroup george qa"
14489
msgstr ""
14490
14491
#: serverguide/C/network-auth.xml:1439(para)
14492
msgid ""
14493
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14494
"<emphasis role=\"italic\">qa</emphasis> group."
14495
msgstr ""
14496
14497
#: serverguide/C/network-auth.xml:1445(para)
14498
msgid ""
14499
"The <application>ldapmodifyuser</application> script allows you to add, "
14500
"remove, or replace a user's attributes. The script uses the same syntax as "
14501
"the <application>ldapmodify</application> utility. For example:"
14502
msgstr ""
14503
14504
#: serverguide/C/network-auth.xml:1450(command)
14505
msgid "sudo ldapmodifyuser george"
14506
msgstr ""
14507
14508
#: serverguide/C/network-auth.xml:1451(computeroutput)
14509
#, no-wrap
14510
msgid ""
14511
"# About to modify the following entry :\n"
14512
"dn: uid=george,ou=People,dc=example,dc=com\n"
14513
"objectClass: account\n"
14514
"objectClass: posixAccount\n"
14515
"cn: george\n"
14516
"uid: george\n"
14517
"uidNumber: 1001\n"
14518
"gidNumber: 1001\n"
14519
"homeDirectory: /home/george\n"
14520
"loginShell: /bin/bash\n"
14521
"gecos: george\n"
14522
"description: User account\n"
14523
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14524
"\n"
14525
"# Enter your modifications here, end with CTRL-D.\n"
14526
"dn: uid=george,ou=People,dc=example,dc=com"
14527
msgstr ""
14528
14529
#: serverguide/C/network-auth.xml:1467(userinput)
14530
#, no-wrap
14531
msgid ""
14532
"replace: gecos\n"
14533
"gecos: George Carlin"
14534
msgstr ""
14535
14536
#: serverguide/C/network-auth.xml:1470(para)
14537
msgid ""
14538
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14539
"Carlin</quote>."
14540
msgstr ""
14541
14542
#: serverguide/C/network-auth.xml:1475(para)
14543
msgid ""
14544
"Another great feature of <application>ldapscripts</application>, is the "
14545
"template system. Templates allow you to customize the attributes of user, "
14546
"group, and machine objectes. For example, to enable the "
14547
"<emphasis>user</emphasis> template edit "
14548
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14549
msgstr ""
14550
14551
#: serverguide/C/network-auth.xml:1482(programlisting)
14552
#, no-wrap
14553
msgid ""
14554
"\n"
14555
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14556
msgstr ""
14557
14558
#: serverguide/C/network-auth.xml:1486(para)
14559
msgid ""
14560
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14561
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14562
"<filename>ldapadduser.template.sample</filename> file to "
14563
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14564
msgstr ""
14565
14566
#: serverguide/C/network-auth.xml:1493(command)
14567
msgid ""
14568
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14569
"/etc/ldapscripts/ldapadduser.template"
14570
msgstr ""
14571
14572
#: serverguide/C/network-auth.xml:1496(para)
14573
msgid ""
14574
"Edit the new template to add the desired attributes. The following will "
14575
"create new user's as with an <emphasis>objectClass</emphasis> of "
14576
"<emphasis>inetOrgPerson</emphasis>:"
14577
msgstr ""
14578
14579
#: serverguide/C/network-auth.xml:1501(programlisting)
14580
#, no-wrap
14581
msgid ""
14582
"\n"
14583
"dn: uid=<user>,<usuffix>,<suffix>\n"
14584
"objectClass: inetOrgPerson\n"
14585
"objectClass: posixAccount\n"
14586
"cn: <user>\n"
14587
"sn: <ask>\n"
14588
"uid: <user>\n"
14589
"uidNumber: <uid>\n"
14590
"gidNumber: <gid>\n"
14591
"homeDirectory: <home>\n"
14592
"loginShell: <shell>\n"
14593
"gecos: <user>\n"
14594
"description: User account\n"
14595
"title: Employee\n"
14596
msgstr ""
14597
14598
#: serverguide/C/network-auth.xml:1517(para)
14599
msgid ""
14600
"Notice the <emphasis><ask></emphasis> option used for the "
14601
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14602
"<application>ldapadduser</application> to prompt you for the attribute value "
14603
"during user creation."
14604
msgstr ""
14605
14606
#: serverguide/C/network-auth.xml:1525(para)
14607
msgid ""
14608
"There are more useful scripts in the package, to see a full list enter: "
14609
"<command>dpkg -L ldapscripts | grep bin</command>"
14610
msgstr ""
14611
14612
#: serverguide/C/network-auth.xml:1534(para)
14613
msgid ""
14614
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14615
"Ubuntu Wiki</ulink> page has more details."
14616
msgstr ""
14617
14618
#: serverguide/C/network-auth.xml:1539(para)
14619
msgid ""
14620
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14621
"Home Page</ulink>"
14622
msgstr ""
14623
14624
#: serverguide/C/network-auth.xml:1544(para)
14625
msgid ""
14626
"Though starting to show it's age, a great source for in depth LDAP "
14627
"information is O'Reilly's <ulink "
14628
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14629
"Administration</ulink>"
14630
msgstr ""
14631
14632
#: serverguide/C/network-auth.xml:1550(para)
14633
msgid ""
14634
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14635
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14636
"newer versions of OpenLDAP."
14637
msgstr ""
14638
14639
#: serverguide/C/network-auth.xml:1556(para)
14640
msgid ""
14641
"For more information on <application>auth-client-config</application> see "
14642
"the man page: <command>man auth-client-config</command>."
14643
msgstr ""
14644
14645
#: serverguide/C/network-auth.xml:1561(para)
14646
msgid ""
14647
"For more details regarding the <application>ldapscripts</application> "
14648
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14649
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14650
msgstr ""
14651
14652
#: serverguide/C/network-auth.xml:1571(title)
14653
msgid "Samba and LDAP"
14654
msgstr ""
14655
14656
#: serverguide/C/network-auth.xml:1573(para)
14657
msgid ""
14658
"This section covers configuring Samba to use LDAP for user, group, and "
14659
"machine account information and authentication. The assumption is, you "
14660
"already have a working OpenLDAP directory installed and the server is "
14661
"configured to use it for authentication. See <xref linkend=\"openldap-"
14662
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14663
"setting up OpenLDAP. For more information on installing and configuring "
14664
"Samba see <xref linkend=\"windows-networking\"/>."
14665
msgstr ""
14666
14667
#: serverguide/C/network-auth.xml:1583(para)
14668
msgid ""
14669
"There are three packages needed when integrating Samba with LDAP. "
14670
"<application>samba</application>, <application>samba-doc</application>, and "
14671
"<application>smbldap-tools</application> packages . To install the packages, "
14672
"from a terminal enter:"
14673
msgstr ""
14674
14675
#: serverguide/C/network-auth.xml:1589(command)
14676
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14677
msgstr ""
14678
14679
#: serverguide/C/network-auth.xml:1592(para)
14680
msgid ""
14681
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14682
"needed, but unless you have another package or custom scripts, a method of "
14683
"managing users, groups, and computer accounts is needed."
14684
msgstr ""
14685
14686
#: serverguide/C/network-auth.xml:1599(title)
14687
msgid "OpenLDAP Configuration"
14688
msgstr ""
14689
14690
#: serverguide/C/network-auth.xml:1601(para)
14691
msgid ""
14692
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14693
"the user objects in the directory will need additional attributes. This "
14694
"section assumes you want Samba to be configured as a Windows NT domain "
14695
"controller, and will add the necessary LDAP objects and attributes."
14696
msgstr ""
14697
14698
#: serverguide/C/network-auth.xml:1609(para)
14699
msgid ""
14700
"The Samba attributes are defined in the <filename>samba.schema</filename> "
14701
"file which is part of the <application>samba-doc</application> package. The "
14702
"schema file needs to be unzipped and copied to "
14703
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
14704
msgstr ""
14705
14706
#: serverguide/C/network-auth.xml:1616(command)
14707
msgid ""
14708
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
14709
"/etc/ldap/schema/"
14710
msgstr ""
14711
14712
#: serverguide/C/network-auth.xml:1617(command)
14713
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
14714
msgstr ""
14715
14716
#: serverguide/C/network-auth.xml:1623(para)
14717
msgid ""
14718
"The <emphasis>samba</emphasis> schema needs to be added to the "
14719
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
14720
"<application>slapd</application> is also detailed in <xref "
14721
"linkend=\"openldap-configuration\"/>."
14722
msgstr ""
14723
14724
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
14725
msgid ""
14726
"First, create a configuration file named "
14727
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
14728
"containing the following lines:"
14729
msgstr ""
14730
14731
#: serverguide/C/network-auth.xml:1636(programlisting)
14732
#, no-wrap
14733
msgid ""
14734
"\n"
14735
"include /etc/ldap/schema/core.schema\n"
14736
"include /etc/ldap/schema/collective.schema\n"
14737
"include /etc/ldap/schema/corba.schema\n"
14738
"include /etc/ldap/schema/cosine.schema\n"
14739
"include /etc/ldap/schema/duaconf.schema\n"
14740
"include /etc/ldap/schema/dyngroup.schema\n"
14741
"include /etc/ldap/schema/inetorgperson.schema\n"
14742
"include /etc/ldap/schema/java.schema\n"
14743
"include /etc/ldap/schema/misc.schema\n"
14744
"include /etc/ldap/schema/nis.schema\n"
14745
"include /etc/ldap/schema/openldap.schema\n"
14746
"include /etc/ldap/schema/ppolicy.schema\n"
14747
"include /etc/ldap/schema/samba.schema\n"
14748
msgstr ""
14749
14750
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
14751
msgid ""
14752
"Now use <application>slapcat</application> to convert the schema files:"
14753
msgstr ""
14754
14755
#: serverguide/C/network-auth.xml:1671(command)
14756
msgid ""
14757
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
14758
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
14759
msgstr ""
14760
14761
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
14762
msgid ""
14763
"Change the above file and path names to match your own if they are different."
14764
msgstr ""
14765
14766
#: serverguide/C/network-auth.xml:1681(para)
14767
msgid ""
14768
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
14769
"the following attributes:"
14770
msgstr ""
14771
14772
#: serverguide/C/network-auth.xml:1685(programlisting)
14773
#, no-wrap
14774
msgid ""
14775
"\n"
14776
"dn: cn=samba,cn=schema,cn=config\n"
14777
"...\n"
14778
"cn: samba\n"
14779
msgstr ""
14780
14781
#: serverguide/C/network-auth.xml:1695(programlisting)
14782
#, no-wrap
14783
msgid ""
14784
"\n"
14785
"structuralObjectClass: olcSchemaConfig\n"
14786
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
14787
"creatorsName: cn=config\n"
14788
"createTimestamp: 20080827045234Z\n"
14789
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
14790
"modifiersName: cn=config\n"
14791
"modifyTimestamp: 20080827045234Z\n"
14792
msgstr ""
14793
14794
#: serverguide/C/network-auth.xml:1720(command)
14795
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
14796
msgstr ""
14797
14798
#: serverguide/C/network-auth.xml:1726(para)
14799
msgid ""
14800
"There should now be a <emphasis>dn: "
14801
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
14802
"sequential schema, entry in the cn=config tree."
14803
msgstr ""
14804
14805
#: serverguide/C/network-auth.xml:1734(para)
14806
msgid ""
14807
"Copy and paste the following into a file named "
14808
"<filename>samba_indexes.ldif</filename>:"
14809
msgstr ""
14810
14811
#: serverguide/C/network-auth.xml:1738(programlisting)
14812
#, no-wrap
14813
msgid ""
14814
"\n"
14815
"dn: olcDatabase={1}hdb,cn=config\n"
14816
"changetype: modify\n"
14817
"add: olcDbIndex\n"
14818
"olcDbIndex: uidNumber eq\n"
14819
"olcDbIndex: gidNumber eq\n"
14820
"olcDbIndex: loginShell eq\n"
14821
"olcDbIndex: uid eq,pres,sub\n"
14822
"olcDbIndex: memberUid eq,pres,sub\n"
14823
"olcDbIndex: uniqueMember eq,pres\n"
14824
"olcDbIndex: sambaSID eq\n"
14825
"olcDbIndex: sambaPrimaryGroupSID eq\n"
14826
"olcDbIndex: sambaGroupType eq\n"
14827
"olcDbIndex: sambaSIDList eq\n"
14828
"olcDbIndex: sambaDomainName eq\n"
14829
"olcDbIndex: default sub\n"
14830
msgstr ""
14831
14832
#: serverguide/C/network-auth.xml:1756(para)
14833
msgid ""
14834
"Using the <application>ldapmodify</application> utility load the new indexes:"
14835
msgstr ""
14836
14837
#: serverguide/C/network-auth.xml:1761(command)
14838
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
14839
msgstr ""
14840
14841
#: serverguide/C/network-auth.xml:1763(para)
14842
msgid ""
14843
"If all went well you should see the new indexes using "
14844
"<application>ldapsearch</application>:"
14845
msgstr ""
14846
14847
#: serverguide/C/network-auth.xml:1768(command)
14848
msgid ""
14849
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
14850
msgstr ""
14851
14852
#: serverguide/C/network-auth.xml:1774(para)
14853
msgid ""
14854
"Next, configure the <application>smbldap-tools</application> package to "
14855
"match your environment. The package comes with a configuration script that "
14856
"will ask questions about the needed options. To run the script enter:"
14857
msgstr ""
14858
14859
#: serverguide/C/network-auth.xml:1780(command)
14860
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
14861
msgstr ""
14862
14863
#: serverguide/C/network-auth.xml:1781(command)
14864
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
14865
msgstr ""
14866
14867
#: serverguide/C/network-auth.xml:1784(para)
14868
msgid ""
14869
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
14870
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
14871
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
14872
"configure script, so if you made any mistakes while executing the script it "
14873
"may be simpler to edit the file appropriately."
14874
msgstr ""
14875
14876
#: serverguide/C/network-auth.xml:1794(para)
14877
msgid ""
14878
"The <application>smbldap-populate</application> script will add the "
14879
"necessary users, groups, and LDAP objects required for Samba. It is a good "
14880
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
14881
"<application>slapcat</application> before executing the command:"
14882
msgstr ""
14883
14884
#: serverguide/C/network-auth.xml:1801(command)
14885
msgid "sudo slapcat -l backup.ldif"
14886
msgstr ""
14887
14888
#: serverguide/C/network-auth.xml:1807(para)
14889
msgid ""
14890
"Once you have a current backup execute <application>smbldap-"
14891
"populate</application> by entering:"
14892
msgstr ""
14893
14894
#: serverguide/C/network-auth.xml:1812(command)
14895
msgid "sudo smbldap-populate"
14896
msgstr ""
14897
14898
#: serverguide/C/network-auth.xml:1816(para)
14899
msgid ""
14900
"You can create an LDIF file containing the new Samba objects by executing "
14901
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
14902
"look over the changes making sure everything is correct."
14903
msgstr ""
14904
14905
#: serverguide/C/network-auth.xml:1824(para)
14906
msgid ""
14907
"Your LDAP directory now has the necessary domain information to authenticate "
14908
"Samba users."
14909
msgstr ""
14910
14911
#: serverguide/C/network-auth.xml:1830(title)
14912
msgid "Samba Configuration"
14913
msgstr ""
14914
14915
#: serverguide/C/network-auth.xml:1832(para)
14916
msgid ""
14917
"There a multiple ways to configure Samba for details on some common "
14918
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
14919
"Samba to use LDAP, edit the main Samba configuration file "
14920
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
14921
"backend</emphasis> option and adding the following:"
14922
msgstr ""
14923
14924
#: serverguide/C/network-auth.xml:1838(programlisting)
14925
#, no-wrap
14926
msgid ""
14927
"\n"
14928
"# passdb backend = tdbsam\n"
14929
"\n"
14930
"# LDAP Settings\n"
14931
" passdb backend = ldapsam:ldap://hostname\n"
14932
" ldap suffix = dc=example,dc=com\n"
14933
" ldap user suffix = ou=People\n"
14934
" ldap group suffix = ou=Groups\n"
14935
" ldap machine suffix = ou=Computers\n"
14936
" ldap idmap suffix = ou=Idmap\n"
14937
" ldap admin dn = cn=admin,dc=example,dc=com\n"
14938
" ldap ssl = start tls\n"
14939
" ldap passwd sync = yes\n"
14940
"...\n"
14941
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
14942
msgstr ""
14943
14944
#: serverguide/C/network-auth.xml:1855(para)
14945
msgid "Restart <application>samba</application> to enable the new settings:"
14946
msgstr ""
14947
14948
#: serverguide/C/network-auth.xml:1863(para)
14949
msgid ""
14950
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
14951
"enter:"
14952
msgstr ""
14953
14954
#: serverguide/C/network-auth.xml:1868(command)
14955
msgid "sudo smbpasswd -w secret"
14956
msgstr ""
14957
14958
#: serverguide/C/network-auth.xml:1872(para)
14959
msgid ""
14960
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
14961
"password."
14962
msgstr ""
14963
14964
#: serverguide/C/network-auth.xml:1877(para)
14965
msgid ""
14966
"If you currently have users in LDAP, and you want them to authenticate using "
14967
"Samba, they will need some Samba attributes defined in the "
14968
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
14969
"users using the <application>smbpasswd</application> utility, replacing "
14970
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
14971
msgstr ""
14972
14973
#: serverguide/C/network-auth.xml:1885(command)
14974
msgid "sudo smbpasswd -a username"
14975
msgstr ""
14976
14977
#: serverguide/C/network-auth.xml:1888(para)
14978
msgid "You will then be asked to enter the user's password."
14979
msgstr ""
14980
14981
#: serverguide/C/network-auth.xml:1892(para)
14982
msgid ""
14983
"To add new user, group, and machine accounts use the utilities from the "
14984
"<application>smbldap-tools</application> package. Here are some examples:"
14985
msgstr ""
14986
14987
#: serverguide/C/network-auth.xml:1899(para)
14988
msgid ""
14989
"To add a new user to LDAP with Samba attributes enter the following, "
14990
"replacing username with an actual username:"
14991
msgstr ""
14992
14993
#: serverguide/C/network-auth.xml:1903(command)
14994
msgid "sudo smbldap-useradd -a -P username"
14995
msgstr ""
14996
14997
#: serverguide/C/network-auth.xml:1905(para)
14998
msgid ""
14999
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
15000
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
15001
"passwd</application> utility after the user is created allowing you to enter "
15002
"a password for the user."
15003
msgstr ""
15004
15005
#: serverguide/C/network-auth.xml:1911(para)
15006
msgid "To remove a user from the directory enter:"
15007
msgstr ""
15008
15009
#: serverguide/C/network-auth.xml:1915(command)
15010
msgid "sudo smbldap-userdel username"
15011
msgstr ""
15012
15013
#: serverguide/C/network-auth.xml:1917(para)
15014
msgid ""
15015
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15016
"r</emphasis> option to remove the user's home directory."
15017
msgstr ""
15018
15019
#: serverguide/C/network-auth.xml:1922(para)
15020
msgid ""
15021
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15022
"groupname with an appropriate group:"
15023
msgstr ""
15024
15025
#: serverguide/C/network-auth.xml:1926(command)
15026
msgid "sudo smbldap-groupadd -a groupname"
15027
msgstr ""
15028
15029
#: serverguide/C/network-auth.xml:1928(para)
15030
msgid ""
15031
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15032
"a</emphasis> adds the Samba attributes."
15033
msgstr ""
15034
15035
#: serverguide/C/network-auth.xml:1933(para)
15036
msgid ""
15037
"To add a user to a group use <application>smbldap-groupmod</application>:"
15038
msgstr ""
15039
15040
#: serverguide/C/network-auth.xml:1937(command)
15041
msgid "sudo smbldap-groupmod -m username groupname"
15042
msgstr ""
15043
15044
#: serverguide/C/network-auth.xml:1939(para)
15045
msgid ""
15046
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15047
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15048
"listing them in <emphasis>comma separated</emphasis> format."
15049
msgstr ""
15050
15051
#: serverguide/C/network-auth.xml:1945(para)
15052
msgid ""
15053
"<application>smbldap-groupmod</application> can also be used to remove a "
15054
"user from a group:"
15055
msgstr ""
15056
15057
#: serverguide/C/network-auth.xml:1949(command)
15058
msgid "sudo smbldap-groupmod -x username groupname"
15059
msgstr ""
15060
15061
#: serverguide/C/network-auth.xml:1953(para)
15062
msgid ""
15063
"Additionally, the <application>smbldap-useradd</application> utility can add "
15064
"Samba machine accounts:"
15065
msgstr ""
15066
15067
#: serverguide/C/network-auth.xml:1957(command)
15068
msgid "sudo smbldap-useradd -t 0 -w username"
15069
msgstr ""
15070
15071
#: serverguide/C/network-auth.xml:1959(para)
15072
msgid ""
15073
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15074
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15075
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15076
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15077
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15078
"<application>smbldap-useradd</application>."
15079
msgstr ""
15080
15081
#: serverguide/C/network-auth.xml:1968(para)
15082
msgid ""
15083
"There are more useful utilities and options in the <application>smbldap-"
15084
"tools</application> package. The man page for each utility provides more "
15085
"details."
15086
msgstr ""
15087
15088
#: serverguide/C/network-auth.xml:1979(para)
15089
msgid ""
15090
"There are multiple places where LDAP and Samba is documented in the <ulink "
15091
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15092
"Collection</ulink>."
15093
msgstr ""
15094
15095
#: serverguide/C/network-auth.xml:1985(para)
15096
msgid ""
15097
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15098
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15099
msgstr ""
15100
15101
#: serverguide/C/network-auth.xml:1991(para)
15102
msgid ""
15103
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15104
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15105
msgstr ""
15106
15107
#: serverguide/C/network-auth.xml:1997(para)
15108
msgid ""
15109
"Again, for more information on <application>smbldap-tools</application> see "
15110
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15111
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15112
msgstr ""
15113
15114
#: serverguide/C/network-auth.xml:2004(para)
15115
msgid ""
15116
"Also, there is a list of <ulink "
15117
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15118
"wiki</ulink> articles with more information."
15119
msgstr ""
15120
15121
#: serverguide/C/network-auth.xml:2013(title)
15122
msgid "Kerberos"
15123
msgstr "Kerberos"
15124
15125
#: serverguide/C/network-auth.xml:2015(para)
15126
msgid ""
15127
"<application>Kerberos</application> is a network authentication system based "
15128
"on the principal of a trusted third party. The other two parties being the "
15129
"user and the service the user wishes to authenticate to. Not all services "
15130
"and applications can use Kerberos, but for those that can, it brings the "
15131
"network environment one step closer to being Single Sign On (SSO)."
15132
msgstr ""
15133
15134
#: serverguide/C/network-auth.xml:2021(para)
15135
msgid ""
15136
"This section covers installation and configuration of a Kerberos server, and "
15137
"some example client configurations."
15138
msgstr ""
15139
15140
#: serverguide/C/network-auth.xml:2028(para)
15141
msgid ""
15142
"If you are new to Kerberos there are a few terms that are good to understand "
15143
"before setting up a Kerberos server. Most of the terms will relate to things "
15144
"you may be familiar with in other environments:"
15145
msgstr ""
15146
15147
#: serverguide/C/network-auth.xml:2035(para)
15148
msgid ""
15149
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15150
"by servers need to be defined as Kerberos Principals."
15151
msgstr ""
15152
15153
#: serverguide/C/network-auth.xml:2040(para)
15154
msgid ""
15155
"<emphasis>Instances:</emphasis> are used for service principals and special "
15156
"administrative principals."
15157
msgstr ""
15158
15159
#: serverguide/C/network-auth.xml:2045(para)
15160
msgid ""
15161
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15162
"Kerberos installation. Usually the DNS domain converted to uppercase "
15163
"(EXAMPLE.COM)."
15164
msgstr ""
15165
15166
#: serverguide/C/network-auth.xml:2051(para)
15167
msgid ""
15168
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15169
"a database of all principals, the authentication server, and the ticket "
15170
"granting server. For each realm there must be at least one KDC."
15171
msgstr ""
15172
15173
#: serverguide/C/network-auth.xml:2057(para)
15174
msgid ""
15175
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15176
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15177
"password which is known only to the user and the KDC."
15178
msgstr ""
15179
15180
#: serverguide/C/network-auth.xml:2063(para)
15181
msgid ""
15182
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15183
"clients upon request."
15184
msgstr ""
15185
15186
#: serverguide/C/network-auth.xml:2068(para)
15187
msgid ""
15188
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15189
"One principal being a user and the other a service requested by the user. "
15190
"Tickets establish an encryption key used for secure communication during the "
15191
"authenticated session."
15192
msgstr ""
15193
15194
#: serverguide/C/network-auth.xml:2074(para)
15195
msgid ""
15196
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15197
"principal database and contain the encryption key for a service or host."
15198
msgstr ""
15199
15200
#: serverguide/C/network-auth.xml:2081(para)
15201
msgid ""
15202
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15203
"redundancy, which contains a database of Principals. When a user principal "
15204
"logs into a workstation, configured for Kerberos authentication, the KDC "
15205
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15206
"match, the user is authenticated and can then request tickets for Kerberized "
15207
"services from the Ticket Granting Server (TGS). The service tickets allow "
15208
"the user to authenticate to the service without entering another username "
15209
"and password."
15210
msgstr ""
15211
15212
#: serverguide/C/network-auth.xml:2090(title)
15213
msgid "Kerberos Server"
15214
msgstr ""
15215
15216
#: serverguide/C/network-auth.xml:2094(para)
15217
msgid ""
15218
"Before installing the Kerberos server a properly configured DNS server is "
15219
"needed for your domain. Since the Kerberos Realm by convention matches the "
15220
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15221
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15222
msgstr ""
15223
15224
#: serverguide/C/network-auth.xml:2100(para)
15225
msgid ""
15226
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15227
"between a client machine and the server differs by more than five minutes "
15228
"(by default), the workstation will not be able to authenticate. To correct "
15229
"the problem all hosts should have their time synchronized using the "
15230
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15231
"NTP see <xref linkend=\"NTP\"/>."
15232
msgstr ""
15233
15234
#: serverguide/C/network-auth.xml:2107(para)
15235
msgid ""
15236
"The first step in installing a Kerberos Realm is to install the "
15237
"<application>krb5-kdc</application> and <application>krb5-admin-"
15238
"server</application> packages. From a terminal enter:"
15239
msgstr ""
15240
15241
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15242
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15243
msgstr ""
15244
15245
#: serverguide/C/network-auth.xml:2116(para)
15246
msgid ""
15247
"You will be asked at the end of the install to supply a name for the "
15248
"Kerberos and Admin servers, which may or may not be the same server, for the "
15249
"realm."
15250
msgstr ""
15251
15252
#: serverguide/C/network-auth.xml:2121(para)
15253
msgid ""
15254
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15255
"utility:"
15256
msgstr ""
15257
15258
#: serverguide/C/network-auth.xml:2126(command)
15259
msgid "sudo krb5_newrealm"
15260
msgstr ""
15261
15262
#: serverguide/C/network-auth.xml:2133(para)
15263
msgid ""
15264
"The questions asked during installation are used to configure the "
15265
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15266
"Distribution Center (KDC) settings simply edit the file and restart the "
15267
"<application>krb5-kdc</application> daemon."
15268
msgstr ""
15269
15270
#: serverguide/C/network-auth.xml:2141(para)
15271
msgid ""
15272
"Now that the KDC running an admin user is needed. It is recommended to use a "
15273
"different username from your everyday username. Using the "
15274
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15275
msgstr ""
15276
15277
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15278
msgid "sudo kadmin.local"
15279
msgstr ""
15280
15281
#: serverguide/C/network-auth.xml:2148(computeroutput)
15282
#, no-wrap
15283
msgid ""
15284
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15285
"kadmin.local:"
15286
msgstr ""
15287
15288
#: serverguide/C/network-auth.xml:2149(userinput)
15289
#, no-wrap
15290
msgid " addprinc steve/admin"
15291
msgstr ""
15292
15293
#: serverguide/C/network-auth.xml:2150(computeroutput)
15294
#, no-wrap
15295
msgid ""
15296
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15297
"policy\n"
15298
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15299
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15300
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15301
"kadmin.local:"
15302
msgstr ""
15303
15304
#: serverguide/C/network-auth.xml:2154(userinput)
15305
#, no-wrap
15306
msgid " quit"
15307
msgstr ""
15308
15309
#: serverguide/C/network-auth.xml:2157(para)
15310
msgid ""
15311
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15312
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15313
"is an <emphasis>Instance</emphasis>, and <emphasis "
15314
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15315
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15316
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15317
"rights."
15318
msgstr ""
15319
15320
#: serverguide/C/network-auth.xml:2165(para)
15321
msgid ""
15322
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15323
"your Realm and admin username."
15324
msgstr ""
15325
15326
#: serverguide/C/network-auth.xml:2173(para)
15327
msgid ""
15328
"Next, the new admin user needs to have the appropriate Access Control List "
15329
"(ACL) permissions. The permissions are configured in the "
15330
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15331
msgstr ""
15332
15333
#: serverguide/C/network-auth.xml:2178(programlisting)
15334
#, no-wrap
15335
msgid ""
15336
"\n"
15337
"steve/admin@EXAMPLE.COM *\n"
15338
msgstr ""
15339
15340
#: serverguide/C/network-auth.xml:2182(para)
15341
msgid ""
15342
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15343
"any operation on all principals in the realm."
15344
msgstr ""
15345
15346
#: serverguide/C/network-auth.xml:2189(para)
15347
msgid ""
15348
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15349
"to take affect:"
15350
msgstr ""
15351
15352
#: serverguide/C/network-auth.xml:2194(command)
15353
msgid "sudo /etc/init.d/krb5-admin-server restart"
15354
msgstr ""
15355
15356
#: serverguide/C/network-auth.xml:2200(para)
15357
msgid ""
15358
"The new user principal can be tested using the <application>kinit "
15359
"utility</application>:"
15360
msgstr ""
15361
15362
#: serverguide/C/network-auth.xml:2205(command)
15363
msgid "kinit steve/admin"
15364
msgstr ""
15365
15366
#: serverguide/C/network-auth.xml:2206(computeroutput)
15367
#, no-wrap
15368
msgid "steve/admin@EXAMPLE.COM's Password:"
15369
msgstr ""
15370
15371
#: serverguide/C/network-auth.xml:2209(para)
15372
msgid ""
15373
"After entering the password, use the <application>klist</application> "
15374
"utility to view information about the Ticket Granting Ticket (TGT):"
15375
msgstr ""
15376
15377
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15378
msgid "klist"
15379
msgstr ""
15380
15381
#: serverguide/C/network-auth.xml:2216(computeroutput)
15382
#, no-wrap
15383
msgid ""
15384
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15385
" Principal: steve/admin@EXAMPLE.COM\n"
15386
"\n"
15387
" Issued Expires Principal\n"
15388
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15389
msgstr ""
15390
15391
#: serverguide/C/network-auth.xml:2223(para)
15392
msgid ""
15393
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15394
"the KDC. For example:"
15395
msgstr ""
15396
15397
#: serverguide/C/network-auth.xml:2227(programlisting)
15398
#, no-wrap
15399
msgid ""
15400
"\n"
15401
"192.168.0.1 kdc01.example.com kdc01\n"
15402
msgstr ""
15403
15404
#: serverguide/C/network-auth.xml:2231(para)
15405
msgid ""
15406
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15407
msgstr ""
15408
15409
#: serverguide/C/network-auth.xml:2238(para)
15410
msgid ""
15411
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15412
"are needed. Add the following to "
15413
"<filename>/etc/named/db.example.com</filename>:"
15414
msgstr ""
15415
15416
#: serverguide/C/network-auth.xml:2243(programlisting)
15417
#, no-wrap
15418
msgid ""
15419
"\n"
15420
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15421
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15422
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15423
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15424
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15425
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15426
msgstr ""
15427
15428
#: serverguide/C/network-auth.xml:2253(para)
15429
msgid ""
15430
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15431
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15432
"KDC."
15433
msgstr ""
15434
15435
#: serverguide/C/network-auth.xml:2259(para)
15436
msgid ""
15437
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15438
msgstr ""
15439
15440
#: serverguide/C/network-auth.xml:2266(para)
15441
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15442
msgstr ""
15443
15444
#: serverguide/C/network-auth.xml:2273(title)
15445
msgid "Secondary KDC"
15446
msgstr ""
15447
15448
#: serverguide/C/network-auth.xml:2275(para)
15449
msgid ""
15450
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15451
"practice to have a Secondary KDC in case the primary becomes unavailable."
15452
msgstr ""
15453
15454
#: serverguide/C/network-auth.xml:2283(para)
15455
msgid ""
15456
"First, install the packages, and when asked for the Kerberos and Admin "
15457
"server names enter the name of the Primary KDC:"
15458
msgstr ""
15459
15460
#: serverguide/C/network-auth.xml:2294(para)
15461
msgid ""
15462
"Once you have the packages installed, create the Secondary KDC's host "
15463
"principal. From a terminal prompt, enter:"
15464
msgstr ""
15465
15466
#: serverguide/C/network-auth.xml:2299(command)
15467
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15468
msgstr ""
15469
15470
#: serverguide/C/network-auth.xml:2303(para)
15471
msgid ""
15472
"After, issuing any <application>kadmin</application> commands you will be "
15473
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15474
"password."
15475
msgstr ""
15476
15477
#: serverguide/C/network-auth.xml:2312(para)
15478
msgid "Extract the <emphasis>keytab</emphasis> file:"
15479
msgstr ""
15480
15481
#: serverguide/C/network-auth.xml:2317(command)
15482
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15483
msgstr ""
15484
15485
#: serverguide/C/network-auth.xml:2323(para)
15486
msgid ""
15487
"There should now be a <filename>keytab.kdc02</filename> in the current "
15488
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15489
msgstr ""
15490
15491
#: serverguide/C/network-auth.xml:2329(command)
15492
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15493
msgstr ""
15494
15495
#: serverguide/C/network-auth.xml:2333(para)
15496
msgid ""
15497
"If the path to the <filename>keytab.kdc02</filename> file is different "
15498
"adjust accordingly."
15499
msgstr ""
15500
15501
#: serverguide/C/network-auth.xml:2338(para)
15502
msgid ""
15503
"Also, you can list the principals in a Keytab file, which can be useful when "
15504
"troubleshooting, using the <application>klist</application> utility:"
15505
msgstr ""
15506
15507
#: serverguide/C/network-auth.xml:2344(command)
15508
msgid "sudo klist -k /etc/krb5.keytab"
15509
msgstr ""
15510
15511
#: serverguide/C/network-auth.xml:2350(para)
15512
msgid ""
15513
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15514
"that lists all KDCs for the Realm. For example, on both primary and "
15515
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15516
msgstr ""
15517
15518
#: serverguide/C/network-auth.xml:2355(programlisting)
15519
#, no-wrap
15520
msgid ""
15521
"\n"
15522
"host/kdc01.example.com@EXAMPLE.COM\n"
15523
"host/kdc02.example.com@EXAMPLE.COM\n"
15524
msgstr ""
15525
15526
#: serverguide/C/network-auth.xml:2363(para)
15527
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15528
msgstr ""
15529
15530
#: serverguide/C/network-auth.xml:2368(command)
15531
msgid "sudo kdb5_util -s create"
15532
msgstr ""
15533
15534
#: serverguide/C/network-auth.xml:2374(para)
15535
msgid ""
15536
"Now start the <application>kpropd</application> daemon, which listens for "
15537
"connections from the <application>kprop</application> utility. "
15538
"<application>kprop</application> is used to transfer dump files:"
15539
msgstr ""
15540
15541
#: serverguide/C/network-auth.xml:2381(command)
15542
msgid "sudo kpropd -S"
15543
msgstr ""
15544
15545
#: serverguide/C/network-auth.xml:2387(para)
15546
msgid ""
15547
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15548
"of the principal database:"
15549
msgstr ""
15550
15551
#: serverguide/C/network-auth.xml:2392(command)
15552
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15553
msgstr ""
15554
15555
#: serverguide/C/network-auth.xml:2398(para)
15556
msgid ""
15557
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15558
"<filename>/etc/krb5.keytab</filename>:"
15559
msgstr ""
15560
15561
#: serverguide/C/network-auth.xml:2403(command)
15562
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15563
msgstr ""
15564
15565
#: serverguide/C/network-auth.xml:2404(command)
15566
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15567
msgstr ""
15568
15569
#: serverguide/C/network-auth.xml:2408(para)
15570
msgid ""
15571
"Make sure there is a <emphasis>host</emphasis> for "
15572
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15573
msgstr ""
15574
15575
#: serverguide/C/network-auth.xml:2416(para)
15576
msgid ""
15577
"Using the <application>kprop</application> utility push the database to the "
15578
"Secondary KDC:"
15579
msgstr ""
15580
15581
#: serverguide/C/network-auth.xml:2421(command)
15582
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15583
msgstr ""
15584
15585
#: serverguide/C/network-auth.xml:2425(para)
15586
msgid ""
15587
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15588
"worked. If there is an error message check "
15589
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15590
"information."
15591
msgstr ""
15592
15593
#: serverguide/C/network-auth.xml:2431(para)
15594
msgid ""
15595
"You may also want to create a <application>cron</application> job to "
15596
"periodically update the database on the Secondary KDC. For example, the "
15597
"following will push the database every hour:"
15598
msgstr ""
15599
15600
#: serverguide/C/network-auth.xml:2436(programlisting)
15601
#, no-wrap
15602
msgid ""
15603
"\n"
15604
"# m h dom mon dow command\n"
15605
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15606
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15607
msgstr ""
15608
15609
#: serverguide/C/network-auth.xml:2444(para)
15610
msgid ""
15611
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15612
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15613
msgstr ""
15614
15615
#: serverguide/C/network-auth.xml:2450(command)
15616
msgid "sudo kdb5_util stash"
15617
msgstr ""
15618
15619
#: serverguide/C/network-auth.xml:2456(para)
15620
msgid ""
15621
"Finally, start the <application>krb5-kdc</application> daemon on the "
15622
"Secondary KDC:"
15623
msgstr ""
15624
15625
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15626
msgid "sudo /etc/init.d/krb5-kdc start"
15627
msgstr ""
15628
15629
#: serverguide/C/network-auth.xml:2467(para)
15630
msgid ""
15631
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15632
"for the Realm. You can test this by stopping the <application>krb5-"
15633
"kdc</application> daemon on the Primary KDC, then use "
15634
"<application>kinit</application> to request a ticket. If all goes well you "
15635
"should receive a ticket from the Secondary KDC."
15636
msgstr ""
15637
15638
#: serverguide/C/network-auth.xml:2475(title)
15639
msgid "Kerberos Linux Client"
15640
msgstr ""
15641
15642
#: serverguide/C/network-auth.xml:2477(para)
15643
msgid ""
15644
"This section covers configuring a Linux system as a "
15645
"<application>Kerberos</application> client. This will allow access to any "
15646
"kerberized services once a user has successfully logged into the system."
15647
msgstr ""
15648
15649
#: serverguide/C/network-auth.xml:2485(para)
15650
msgid ""
15651
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15652
"user</application> and <application>libpam-krb5</application> packages are "
15653
"needed, along with a few others that are not strictly necessary but make "
15654
"life easier. To install the packages enter the following in a terminal "
15655
"prompt:"
15656
msgstr ""
15657
15658
#: serverguide/C/network-auth.xml:2492(command)
15659
msgid ""
15660
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15661
msgstr ""
15662
15663
#: serverguide/C/network-auth.xml:2495(para)
15664
msgid ""
15665
"The <application>auth-client-config</application> package allows simple "
15666
"configuration of PAM for authentication from multiple sources, and the "
15667
"<application>libpam-ccreds</application> will cache authentication "
15668
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15669
"is unavailable. This package is also useful for laptops that may "
15670
"authenticate using Kerberos while on the corporate network, but will need to "
15671
"be accessed off the network as well."
15672
msgstr ""
15673
15674
#: serverguide/C/network-auth.xml:2506(para)
15675
msgid "To configure the client in a terminal enter:"
15676
msgstr ""
15677
15678
#: serverguide/C/network-auth.xml:2511(command)
15679
msgid "sudo dpkg-reconfigure krb5-config"
15680
msgstr ""
15681
15682
#: serverguide/C/network-auth.xml:2514(para)
15683
msgid ""
15684
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15685
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15686
"records, the menu will prompt you for the hostname of the Key Distribution "
15687
"Center (KDC) and Realm Administration server."
15688
msgstr ""
15689
15690
#: serverguide/C/network-auth.xml:2520(para)
15691
msgid ""
15692
"The <application>dpkg-reconfigure</application> adds entries to the "
15693
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15694
"entries similar to the following:"
15695
msgstr ""
15696
15697
#: serverguide/C/network-auth.xml:2525(programlisting)
15698
#, no-wrap
15699
msgid ""
15700
"\n"
15701
"[libdefaults]\n"
15702
" default_realm = EXAMPLE.COM\n"
15703
"...\n"
15704
"[realms]\n"
15705
" EXAMPLE.COM = } \n"
15706
" kdc = 192.168.0.1 \n"
15707
" admin_server = 192.168.0.1\n"
15708
" }\n"
15709
msgstr ""
15710
15711
#: serverguide/C/network-auth.xml:2536(para)
15712
msgid ""
15713
"You can test the configuration by requesting a ticket using the "
15714
"<application>kinit</application> utility. For example:"
15715
msgstr ""
15716
15717
#: serverguide/C/network-auth.xml:2541(command)
15718
msgid "kinit steve@EXAMPLE.COM"
15719
msgstr ""
15720
15721
#: serverguide/C/network-auth.xml:2542(computeroutput)
15722
#, no-wrap
15723
msgid "Password for steve@EXAMPLE.COM:"
15724
msgstr ""
15725
15726
#: serverguide/C/network-auth.xml:2545(para)
15727
msgid ""
15728
"When a ticket has been granted, the details can be viewed using "
15729
"<application>klist</application>:"
15730
msgstr ""
15731
15732
#: serverguide/C/network-auth.xml:2551(computeroutput)
15733
#, no-wrap
15734
msgid ""
15735
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
15736
"Default principal: steve@EXAMPLE.COM\n"
15737
"\n"
15738
"Valid starting Expires Service principal\n"
15739
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
15740
" renew until 07/25/08 05:18:57\n"
15741
"\n"
15742
"\n"
15743
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
15744
"klist: You have no tickets cached"
15745
msgstr ""
15746
15747
#: serverguide/C/network-auth.xml:2563(para)
15748
msgid ""
15749
"Next, use the <application>auth-client-config</application> to configure the "
15750
"<application>libpam-krb5</application> module to request a ticket during "
15751
"login:"
15752
msgstr ""
15753
15754
#: serverguide/C/network-auth.xml:2569(command)
15755
msgid "sudo auth-client-config -a -p kerberos_example"
15756
msgstr ""
15757
15758
#: serverguide/C/network-auth.xml:2572(para)
15759
msgid ""
15760
"You will should now receive a ticket upon successful login authentication."
15761
msgstr ""
15762
15763
#: serverguide/C/network-auth.xml:2583(para)
15764
msgid ""
15765
"For more information on Kerberos see the <ulink "
15766
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
15767
msgstr ""
15768
15769
#: serverguide/C/network-auth.xml:2588(para)
15770
msgid ""
15771
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
15772
"Kerberos</ulink> page has more details."
15773
msgstr ""
15774
15775
#: serverguide/C/network-auth.xml:2593(para)
15776
msgid ""
15777
"O'Reilly's <ulink "
15778
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
15779
"Guide</ulink> is a great reference when setting up Kerberos."
15780
msgstr ""
15781
15782
#: serverguide/C/network-auth.xml:2599(para)
15783
msgid ""
15784
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
15785
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
15786
"Kerberos questions."
15787
msgstr ""
15788
15789
#: serverguide/C/network-auth.xml:2609(title)
15790
msgid "Kerberos and LDAP"
15791
msgstr ""
15792
15793
#: serverguide/C/network-auth.xml:2611(para)
15794
msgid ""
15795
"Replicating a Kerberos principal database between two servers can be "
15796
"complicated, and adds an additional user database to your network. "
15797
"Fortunately, MIT Kerberos can be configured to use an "
15798
"<application>LDAP</application> directory as a principal database. This "
15799
"section covers configuring a primary and secondary kerberos server to use "
15800
"<application>OpenLDAP</application> for the principal database."
15801
msgstr ""
15802
15803
#: serverguide/C/network-auth.xml:2619(title)
15804
msgid "Configuring OpenLDAP"
15805
msgstr ""
15806
15807
#: serverguide/C/network-auth.xml:2621(para)
15808
msgid ""
15809
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
15810
"<application>OpenLDAP</application> server that has network connectivity to "
15811
"the Primary and Secondary KDCs. The rest of this section assumes that you "
15812
"also have LDAP replication configured between at least two servers. For "
15813
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
15814
msgstr ""
15815
15816
#: serverguide/C/network-auth.xml:2628(para)
15817
msgid ""
15818
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
15819
"that traffic between the KDC and LDAP server is encrypted. See <xref "
15820
"linkend=\"openldap-tls\"/> for details."
15821
msgstr ""
15822
15823
#: serverguide/C/network-auth.xml:2635(para)
15824
msgid ""
15825
"To load the schema into LDAP, on the LDAP server install the "
15826
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
15827
msgstr ""
15828
15829
#: serverguide/C/network-auth.xml:2641(command)
15830
msgid "sudo apt-get install krb5-kdc-ldap"
15831
msgstr ""
15832
15833
#: serverguide/C/network-auth.xml:2646(para)
15834
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
15835
msgstr ""
15836
15837
#: serverguide/C/network-auth.xml:2651(command)
15838
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
15839
msgstr ""
15840
15841
#: serverguide/C/network-auth.xml:2652(command)
15842
msgid ""
15843
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
15844
msgstr ""
15845
15846
#: serverguide/C/network-auth.xml:2658(para)
15847
msgid ""
15848
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
15849
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
15850
"<application>slapd</application> is also detailed in <xref "
15851
"linkend=\"openldap-configuration\"/>."
15852
msgstr ""
15853
15854
#: serverguide/C/network-auth.xml:2671(programlisting)
15855
#, no-wrap
15856
msgid ""
15857
"\n"
15858
"include /etc/ldap/schema/core.schema\n"
15859
"include /etc/ldap/schema/collective.schema\n"
15860
"include /etc/ldap/schema/corba.schema\n"
15861
"include /etc/ldap/schema/cosine.schema\n"
15862
"include /etc/ldap/schema/duaconf.schema\n"
15863
"include /etc/ldap/schema/dyngroup.schema\n"
15864
"include /etc/ldap/schema/inetorgperson.schema\n"
15865
"include /etc/ldap/schema/java.schema\n"
15866
"include /etc/ldap/schema/misc.schema\n"
15867
"include /etc/ldap/schema/nis.schema\n"
15868
"include /etc/ldap/schema/openldap.schema\n"
15869
"include /etc/ldap/schema/ppolicy.schema\n"
15870
"include /etc/ldap/schema/kerberos.schema\n"
15871
msgstr ""
15872
15873
#: serverguide/C/network-auth.xml:2691(para)
15874
msgid "Create a temporary directory to hold the LDIF files:"
15875
msgstr ""
15876
15877
#: serverguide/C/network-auth.xml:2706(command)
15878
msgid ""
15879
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
15880
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
15881
msgstr ""
15882
15883
#: serverguide/C/network-auth.xml:2716(para)
15884
msgid ""
15885
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
15886
"changing the following attributes:"
15887
msgstr ""
15888
15889
#: serverguide/C/network-auth.xml:2720(programlisting)
15890
#, no-wrap
15891
msgid ""
15892
"\n"
15893
"dn: cn=kerberos,cn=schema,cn=config\n"
15894
"...\n"
15895
"cn: kerberos\n"
15896
msgstr ""
15897
15898
#: serverguide/C/network-auth.xml:2726(para)
15899
msgid "And remove the following lines from the end of the file:"
15900
msgstr ""
15901
15902
#: serverguide/C/network-auth.xml:2730(programlisting)
15903
#, no-wrap
15904
msgid ""
15905
"\n"
15906
"structuralObjectClass: olcSchemaConfig\n"
15907
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
15908
"creatorsName: cn=config\n"
15909
"createTimestamp: 20090111203515Z\n"
15910
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
15911
"modifiersName: cn=config\n"
15912
"modifyTimestamp: 20090111203515Z\n"
15913
msgstr ""
15914
15915
#: serverguide/C/network-auth.xml:2749(para)
15916
msgid "Load the new schema with <application>ldapadd</application>:"
15917
msgstr ""
15918
15919
#: serverguide/C/network-auth.xml:2754(command)
15920
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
15921
msgstr ""
15922
15923
#: serverguide/C/network-auth.xml:2760(para)
15924
msgid ""
15925
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
15926
msgstr ""
15927
15928
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
15929
msgid "ldapmodify -x -D cn=admin,cn=config -W"
15930
msgstr ""
15931
15932
#: serverguide/C/network-auth.xml:2767(userinput)
15933
#, no-wrap
15934
msgid ""
15935
"dn: olcDatabase={1}hdb,cn=config\n"
15936
"add: olcDbIndex\n"
15937
"olcDbIndex: krbPrincipalName eq,pres,sub"
15938
msgstr ""
15939
15940
#: serverguide/C/network-auth.xml:2766(computeroutput)
15941
#, no-wrap
15942
msgid ""
15943
"Enter LDAP Password:\n"
15944
"<placeholder-1/>\n"
15945
"\n"
15946
"modifying entry \"olcDatabase={1}hdb,cn=config\""
15947
msgstr ""
15948
15949
#: serverguide/C/network-auth.xml:2777(para)
15950
msgid "Finally, update the Access Control Lists (ACL):"
15951
msgstr ""
15952
15953
#: serverguide/C/network-auth.xml:2784(userinput)
15954
#, no-wrap
15955
msgid ""
15956
"dn: olcDatabase={1}hdb,cn=config\n"
15957
"replace: olcAccess\n"
15958
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
15959
"dn=\"cn=admin,dc=exampl\n"
15960
" e,dc=com\" write by anonymous auth by self write by * none\n"
15961
"-\n"
15962
"add: olcAccess\n"
15963
"olcAccess: to dn.base=\"\" by * read\n"
15964
"-\n"
15965
"add: olcAccess\n"
15966
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
15967
msgstr ""
15968
15969
#: serverguide/C/network-auth.xml:2783(computeroutput)
15970
#, no-wrap
15971
msgid ""
15972
"Enter LDAP Password: \n"
15973
"<placeholder-1/>\n"
15974
"\n"
15975
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
15976
msgstr ""
15977
15978
#: serverguide/C/network-auth.xml:2804(para)
15979
msgid ""
15980
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
15981
"database."
15982
msgstr ""
15983
15984
#: serverguide/C/network-auth.xml:2810(title)
15985
msgid "Primary KDC Configuration"
15986
msgstr ""
15987
15988
#: serverguide/C/network-auth.xml:2812(para)
15989
msgid ""
15990
"With <application>OpenLDAP</application> configured it is time to configure "
15991
"the KDC."
15992
msgstr ""
15993
15994
#: serverguide/C/network-auth.xml:2818(para)
15995
msgid "First, install the necessary packages, from a terminal enter:"
15996
msgstr ""
15997
15998
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
15999
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
16000
msgstr ""
16001
16002
#: serverguide/C/network-auth.xml:2829(para)
16003
msgid ""
16004
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16005
"under the appropriate sections:"
16006
msgstr ""
16007
16008
#: serverguide/C/network-auth.xml:2833(programlisting)
16009
#, no-wrap
16010
msgid ""
16011
"\n"
16012
"[libdefaults]\n"
16013
" default_realm = EXAMPLE.COM\n"
16014
"\n"
16015
"...\n"
16016
"\n"
16017
"[realms]\n"
16018
" EXAMPLE.COM = {\n"
16019
" kdc = kdc01.example.com\n"
16020
" kdc = kdc02.example.com\n"
16021
" admin_server = kdc01.example.com\n"
16022
" admin_server = kdc02.example.com\n"
16023
" default_domain = example.com\n"
16024
" database_module = openldap_ldapconf\n"
16025
" }\n"
16026
"\n"
16027
"...\n"
16028
"\n"
16029
"[domain_realm]\n"
16030
" .example.com = EXAMPLE.COM\n"
16031
"\n"
16032
"\n"
16033
"...\n"
16034
"\n"
16035
"[dbdefaults]\n"
16036
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16037
"\n"
16038
"[dbmodules]\n"
16039
" openldap_ldapconf = {\n"
16040
" db_library = kldap\n"
16041
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16042
"\n"
16043
" # this object needs to have read rights on\n"
16044
" # the realm container, principal container and realm sub-"
16045
"trees\n"
16046
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16047
"\n"
16048
" # this object needs to have read and write rights on\n"
16049
" # the realm container, principal container and realm sub-"
16050
"trees\n"
16051
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16052
" ldap_servers = ldaps://ldap01.example.com "
16053
"ldaps://ldap02.example.com\n"
16054
" ldap_conns_per_server = 5\n"
16055
" }\n"
16056
msgstr ""
16057
16058
#: serverguide/C/network-auth.xml:2878(para)
16059
msgid ""
16060
"Change <emphasis>example.com</emphasis>, "
16061
"<emphasis>dc=example,dc=com</emphasis>, "
16062
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16063
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16064
"object, and LDAP server for your network."
16065
msgstr ""
16066
16067
#: serverguide/C/network-auth.xml:2887(para)
16068
msgid ""
16069
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16070
"the realm:"
16071
msgstr ""
16072
16073
#: serverguide/C/network-auth.xml:2892(command)
16074
msgid ""
16075
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16076
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16077
msgstr ""
16078
16079
#: serverguide/C/network-auth.xml:2898(para)
16080
msgid ""
16081
"Create a stash of the password used to bind to the LDAP server. This "
16082
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16083
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16084
"<filename>/etc/krb5.conf</filename>:"
16085
msgstr ""
16086
16087
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16088
msgid ""
16089
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16090
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16091
msgstr ""
16092
16093
#: serverguide/C/network-auth.xml:2910(para)
16094
msgid "Copy the CA certificate from the LDAP server:"
16095
msgstr ""
16096
16097
#: serverguide/C/network-auth.xml:2915(command)
16098
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16099
msgstr ""
16100
16101
#: serverguide/C/network-auth.xml:2916(command)
16102
msgid "sudo cp cacert.pem /etc/ssl/certs"
16103
msgstr ""
16104
16105
#: serverguide/C/network-auth.xml:2919(para)
16106
msgid ""
16107
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16108
msgstr ""
16109
16110
#: serverguide/C/network-auth.xml:2923(programlisting)
16111
#, no-wrap
16112
msgid ""
16113
"\n"
16114
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16115
msgstr ""
16116
16117
#: serverguide/C/network-auth.xml:2928(para)
16118
msgid ""
16119
"The certificate will also need to be copied to the Secondary KDC, to allow "
16120
"the connection to the LDAP servers using LDAPS."
16121
msgstr ""
16122
16123
#: serverguide/C/network-auth.xml:2937(para)
16124
msgid ""
16125
"You can now add Kerberos principals to the LDAP database, and they will be "
16126
"copied to any other LDAP servers configured for replication. To add a "
16127
"principal using the <application>kadmin.local</application> utility enter:"
16128
msgstr ""
16129
16130
#: serverguide/C/network-auth.xml:2945(userinput)
16131
#, no-wrap
16132
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16133
msgstr ""
16134
16135
#: serverguide/C/network-auth.xml:2944(computeroutput)
16136
#, no-wrap
16137
msgid ""
16138
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16139
"kadmin.local: <placeholder-1/>\n"
16140
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16141
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16142
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16143
"Principal \"steve@EXAMPLE.COM\" created."
16144
msgstr ""
16145
16146
#: serverguide/C/network-auth.xml:2952(para)
16147
msgid ""
16148
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16149
"krbExtraData attributes added to the "
16150
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16151
"the <application>kinit</application> and <application>klist</application> "
16152
"utilities to test that the user is indeed issued a ticket."
16153
msgstr ""
16154
16155
#: serverguide/C/network-auth.xml:2959(para)
16156
msgid ""
16157
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16158
"option is needed to add the Kerberos attributes. Otherwise a new "
16159
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16160
msgstr ""
16161
16162
#: serverguide/C/network-auth.xml:2967(title)
16163
msgid "Secondary KDC Configuration"
16164
msgstr ""
16165
16166
#: serverguide/C/network-auth.xml:2969(para)
16167
msgid ""
16168
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16169
"one using the normal Kerberos database."
16170
msgstr ""
16171
16172
#: serverguide/C/network-auth.xml:2975(para)
16173
msgid "First, install the necessary packages. In a terminal enter:"
16174
msgstr ""
16175
16176
#: serverguide/C/network-auth.xml:2986(para)
16177
msgid ""
16178
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16179
msgstr ""
16180
16181
#: serverguide/C/network-auth.xml:2990(programlisting)
16182
#, no-wrap
16183
msgid ""
16184
"\n"
16185
"[libdefaults]\n"
16186
" default_realm = EXAMPLE.COM\n"
16187
"\n"
16188
"...\n"
16189
"\n"
16190
"[realms]\n"
16191
" EXAMPLE.COM = {\n"
16192
" kdc = kdc01.example.com\n"
16193
" kdc = kdc02.example.com\n"
16194
" admin_server = kdc01.example.com\n"
16195
" admin_server = kdc02.example.com\n"
16196
" default_domain = example.com\n"
16197
" database_module = openldap_ldapconf\n"
16198
" }\n"
16199
"\n"
16200
"...\n"
16201
"\n"
16202
"[domain_realm]\n"
16203
" .example.com = EXAMPLE.COM\n"
16204
"\n"
16205
"...\n"
16206
"\n"
16207
"[dbdefaults]\n"
16208
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16209
"\n"
16210
"[dbmodules]\n"
16211
" openldap_ldapconf = {\n"
16212
" db_library = kldap\n"
16213
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16214
"\n"
16215
" # this object needs to have read rights on\n"
16216
" # the realm container, principal container and realm sub-"
16217
"trees\n"
16218
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16219
"\n"
16220
" # this object needs to have read and write rights on\n"
16221
" # the realm container, principal container and realm sub-"
16222
"trees\n"
16223
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16224
" ldap_servers = ldaps://ldap01.example.com "
16225
"ldaps://ldap02.example.com\n"
16226
" ldap_conns_per_server = 5\n"
16227
" }\n"
16228
msgstr ""
16229
16230
#: serverguide/C/network-auth.xml:3037(para)
16231
msgid "Create the stash for the LDAP bind password:"
16232
msgstr ""
16233
16234
#: serverguide/C/network-auth.xml:3048(para)
16235
msgid ""
16236
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16237
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16238
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16239
"encrypted connection such as <application>scp</application>, or on physical "
16240
"media."
16241
msgstr ""
16242
16243
#: serverguide/C/network-auth.xml:3055(command)
16244
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16245
msgstr ""
16246
16247
#: serverguide/C/network-auth.xml:3056(command)
16248
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16249
msgstr ""
16250
16251
#: serverguide/C/network-auth.xml:3060(para)
16252
msgid ""
16253
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16254
msgstr ""
16255
16256
#: serverguide/C/network-auth.xml:3068(para)
16257
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16258
msgstr ""
16259
16260
#: serverguide/C/network-auth.xml:3079(para)
16261
msgid ""
16262
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16263
"you should be able to continue to authenticate users if one LDAP server, one "
16264
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16265
msgstr ""
16266
16267
#: serverguide/C/network-auth.xml:3091(para)
16268
msgid ""
16269
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16270
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16271
"Guide</ulink> has some additional details."
16272
msgstr ""
16273
16274
#: serverguide/C/network-auth.xml:3097(para)
16275
msgid ""
16276
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16277
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16278
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16279
"5.6</ulink> and the <ulink "
16280
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16281
"\">kdb5_ldap_util man page</ulink>."
16282
msgstr ""
16283
16284
#: serverguide/C/network-auth.xml:3105(para)
16285
msgid ""
16286
"Another useful link is the <ulink "
16287
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16288
"b5.conf man page</ulink>."
16289
msgstr ""
16290
16291
#: serverguide/C/network-auth.xml:3110(para)
16292
msgid ""
16293
"Also, see the <ulink "
16294
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16295
"and LDAP</ulink> Ubuntu wiki page."
16296
msgstr ""
16297
16298
#: serverguide/C/monitoring.xml:13(title)
16299
msgid "Monitoring"
16300
msgstr ""
16301
16302
#: serverguide/C/monitoring.xml:17(para)
16303
msgid ""
16304
"The monitoring of essential servers and services is an important part of "
16305
"system administration. Most network services are monitored for performance, "
16306
"availability, or both. This section will cover installation and "
16307
"configuration of <application>Nagios</application> for availability "
16308
"monitoring, and <application>Munin</application> for performance monitoring."
16309
msgstr ""
16310
16311
#: serverguide/C/monitoring.xml:24(para)
16312
msgid ""
16313
"The examples in this section will use two servers with hostnames "
16314
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16315
"<emphasis>Server01</emphasis> will be configured with "
16316
"<application>Nagios</application> to monitor services on itself and "
16317
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16318
"<application>munin</application> package to gather information from the "
16319
"network. Using the <application>munin-node</application> package, "
16320
"<emphasis>server02</emphasis> will be configured to send information to "
16321
"<emphasis>server01</emphasis>."
16322
msgstr ""
16323
16324
#: serverguide/C/monitoring.xml:33(para)
16325
msgid ""
16326
"Hopefully these simple examples will allow you to monitor additional servers "
16327
"and services on your network."
16328
msgstr ""
16329
16330
#: serverguide/C/monitoring.xml:39(title)
16331
msgid "Nagios"
16332
msgstr ""
16333
16334
#: serverguide/C/monitoring.xml:44(para)
16335
msgid ""
16336
"First, on <emphasis>server01</emphasis> install the "
16337
"<application>nagios</application> package. In a terminal enter:"
16338
msgstr ""
16339
16340
#: serverguide/C/monitoring.xml:50(command)
16341
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16342
msgstr ""
16343
16344
#: serverguide/C/monitoring.xml:53(para)
16345
msgid ""
16346
"You will be asked to enter a password for the "
16347
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16348
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16349
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16350
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16351
"of the <application>apache2-utils</application> package."
16352
msgstr ""
16353
16354
#: serverguide/C/monitoring.xml:60(para)
16355
msgid ""
16356
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16357
"user enter:"
16358
msgstr ""
16359
16360
#: serverguide/C/monitoring.xml:65(command)
16361
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16362
msgstr ""
16363
16364
#: serverguide/C/monitoring.xml:68(para)
16365
msgid "To add a user:"
16366
msgstr ""
16367
16368
#: serverguide/C/monitoring.xml:73(command)
16369
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16370
msgstr ""
16371
16372
#: serverguide/C/monitoring.xml:76(para)
16373
msgid ""
16374
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16375
"server</application> package. From a terminal on server02 enter:"
16376
msgstr ""
16377
16378
#: serverguide/C/monitoring.xml:82(command)
16379
msgid "sudo apt-get install nagios-nrpe-server"
16380
msgstr ""
16381
16382
#: serverguide/C/monitoring.xml:86(para)
16383
msgid ""
16384
"<application>NRPE</application> allows you to execute local checks on remote "
16385
"hosts. There are other ways of accomplishing this through other Nagios "
16386
"plugins as well as other checks."
16387
msgstr ""
16388
16389
#: serverguide/C/monitoring.xml:94(title)
16390
msgid "Configuration Overview"
16391
msgstr ""
16392
16393
#: serverguide/C/monitoring.xml:96(para)
16394
msgid ""
16395
"There are a couple of directories containing "
16396
"<application>Nagios</application> configuration and check files."
16397
msgstr ""
16398
16399
#: serverguide/C/monitoring.xml:102(para)
16400
msgid ""
16401
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16402
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16403
"etc."
16404
msgstr ""
16405
16406
#: serverguide/C/monitoring.xml:108(para)
16407
msgid ""
16408
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16409
"service checks."
16410
msgstr ""
16411
16412
#: serverguide/C/monitoring.xml:113(para)
16413
msgid ""
16414
"<filename>/etc/nagios</filename>: on the remote host contains the "
16415
"<application>nagios-nrpe-server</application> configuration files."
16416
msgstr ""
16417
16418
#: serverguide/C/monitoring.xml:118(para)
16419
msgid ""
16420
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16421
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16422
msgstr ""
16423
16424
#: serverguide/C/monitoring.xml:123(para)
16425
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16426
msgstr ""
16427
16428
#: serverguide/C/monitoring.xml:129(para)
16429
msgid ""
16430
"There are a plethora of checks <application>Nagios</application> can be "
16431
"configured to execute for any given host. For this example Nagios will be "
16432
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16433
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16434
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16435
msgstr ""
16436
16437
#: serverguide/C/monitoring.xml:136(para)
16438
msgid ""
16439
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16440
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16441
msgstr ""
16442
16443
#: serverguide/C/monitoring.xml:141(para)
16444
msgid ""
16445
"Additionally, there are some terms that once explained will hopefully make "
16446
"understanding Nagios configuration easier:"
16447
msgstr ""
16448
16449
#: serverguide/C/monitoring.xml:147(para)
16450
msgid ""
16451
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16452
"is being monitored."
16453
msgstr ""
16454
16455
#: serverguide/C/monitoring.xml:152(para)
16456
msgid ""
16457
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16458
"could group all web servers, file server, etc."
16459
msgstr ""
16460
16461
#: serverguide/C/monitoring.xml:157(para)
16462
msgid ""
16463
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16464
"as HTTP, DNS, NFS, etc."
16465
msgstr ""
16466
16467
#: serverguide/C/monitoring.xml:162(para)
16468
msgid ""
16469
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16470
"together. This is useful for grouping multiple HTTP for example."
16471
msgstr ""
16472
16473
#: serverguide/C/monitoring.xml:168(para)
16474
msgid ""
16475
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16476
"place. Nagios can be configured to send emails, SMS messages, etc."
16477
msgstr ""
16478
16479
#: serverguide/C/monitoring.xml:174(para)
16480
msgid ""
16481
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16482
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16483
"will also <application>ping</application> check the "
16484
"<emphasis>gateway</emphasis>."
16485
msgstr ""
16486
16487
#: serverguide/C/monitoring.xml:179(para)
16488
msgid ""
16489
"Large Nagios installations can be quite complex to configure. It is usually "
16490
"best to start small, one or two hosts, get things configured the way you "
16491
"like then expand."
16492
msgstr ""
16493
16494
#: serverguide/C/monitoring.xml:194(para)
16495
msgid ""
16496
"First, create a <emphasis>host</emphasis> configuration file for "
16497
"<emphasis>server02</emphasis>. In a terminal enter:"
16498
msgstr ""
16499
16500
#: serverguide/C/monitoring.xml:199(command)
16501
msgid ""
16502
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16503
"/etc/nagios3/conf.d/server02.cfg"
16504
msgstr ""
16505
16506
#: serverguide/C/monitoring.xml:203(para)
16507
msgid ""
16508
"In the above and following command examples, replace "
16509
"<emphasis>\"server01\"</emphasis>, "
16510
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16511
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16512
"your servers."
16513
msgstr ""
16514
16515
#: serverguide/C/monitoring.xml:212(para)
16516
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16517
msgstr ""
16518
16519
#: serverguide/C/monitoring.xml:216(programlisting)
16520
#, no-wrap
16521
msgid ""
16522
"\n"
16523
"define host{\n"
16524
" use generic-host ; Name of host "
16525
"template to use\n"
16526
" host_name server02\n"
16527
" alias Server 02\n"
16528
" address 172.18.100.101\n"
16529
"}\n"
16530
"\n"
16531
"# check DNS service.\n"
16532
"define service {\n"
16533
" use generic-service\n"
16534
" host_name server02\n"
16535
" service_description DNS\n"
16536
" check_command check_dns!172.18.100.101\n"
16537
"}\n"
16538
msgstr ""
16539
16540
#: serverguide/C/monitoring.xml:236(para)
16541
msgid ""
16542
"Restart the <application>nagios</application> daemon to enable the new "
16543
"configuration:"
16544
msgstr ""
16545
16546
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16547
msgid "sudo /etc/init.d/nagios3 restart"
16548
msgstr ""
16549
16550
#: serverguide/C/monitoring.xml:251(para)
16551
msgid ""
16552
"Now add a service definition for the MySQL check by adding the following to "
16553
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16554
msgstr ""
16555
16556
#: serverguide/C/monitoring.xml:255(programlisting)
16557
#, no-wrap
16558
msgid ""
16559
"\n"
16560
"# check MySQL servers.\n"
16561
"define service {\n"
16562
" hostgroup_name mysql-servers\n"
16563
" service_description MySQL\n"
16564
" check_command "
16565
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16566
" use generic-service\n"
16567
" notification_interval 0 ; set > 0 if you want to be "
16568
"renotified\n"
16569
"}\n"
16570
msgstr ""
16571
16572
#: serverguide/C/monitoring.xml:269(para)
16573
msgid ""
16574
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16575
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16576
msgstr ""
16577
16578
#: serverguide/C/monitoring.xml:274(programlisting)
16579
#, no-wrap
16580
msgid ""
16581
"\n"
16582
"# MySQL hostgroup.\n"
16583
"define hostgroup {\n"
16584
" hostgroup_name mysql-servers\n"
16585
" alias MySQL servers\n"
16586
" members localhost, server02\n"
16587
" }\n"
16588
msgstr ""
16589
16590
#: serverguide/C/monitoring.xml:286(para)
16591
msgid ""
16592
"The Nagios check needs to authenticate to MySQL. To add a "
16593
"<emphasis>nagios</emphasis> user to MySQL enter:"
16594
msgstr ""
16595
16596
#: serverguide/C/monitoring.xml:291(command)
16597
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16598
msgstr ""
16599
16600
#: serverguide/C/monitoring.xml:295(para)
16601
msgid ""
16602
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16603
"<emphasis>mysql-servers</emphasis> hostgroup."
16604
msgstr ""
16605
16606
#: serverguide/C/monitoring.xml:303(para)
16607
msgid ""
16608
"Restart <application>nagios</application> to start checking the MySQL "
16609
"servers."
16610
msgstr ""
16611
16612
#: serverguide/C/monitoring.xml:318(para)
16613
msgid ""
16614
"Lastly configure NRPE to check the disk space on "
16615
"<emphasis>server02</emphasis>."
16616
msgstr ""
16617
16618
#: serverguide/C/monitoring.xml:322(para)
16619
msgid ""
16620
"On <emphasis>server01</emphasis> add the service check to "
16621
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16622
msgstr ""
16623
16624
#: serverguide/C/monitoring.xml:327(programlisting)
16625
#, no-wrap
16626
msgid ""
16627
"\n"
16628
"# NRPE disk check.\n"
16629
"define service {\n"
16630
" use generic-service\n"
16631
" host_name server02\n"
16632
" service_description nrpe-disk\n"
16633
" check_command "
16634
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16635
"}\n"
16636
msgstr ""
16637
16638
#: serverguide/C/monitoring.xml:340(para)
16639
msgid ""
16640
"Now on <emphasis>server02</emphasis> edit "
16641
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16642
msgstr ""
16643
16644
#: serverguide/C/monitoring.xml:344(programlisting)
16645
#, no-wrap
16646
msgid ""
16647
"\n"
16648
"allowed_hosts=172.18.100.100\n"
16649
msgstr ""
16650
16651
#: serverguide/C/monitoring.xml:348(para)
16652
msgid "And below in the command definition area add:"
16653
msgstr ""
16654
16655
#: serverguide/C/monitoring.xml:352(programlisting)
16656
#, no-wrap
16657
msgid ""
16658
"\n"
16659
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16660
"e\n"
16661
msgstr ""
16662
16663
#: serverguide/C/monitoring.xml:359(para)
16664
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16665
msgstr ""
16666
16667
#: serverguide/C/monitoring.xml:364(command)
16668
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16669
msgstr ""
16670
16671
#: serverguide/C/monitoring.xml:370(para)
16672
msgid ""
16673
"Also, on <emphasis>server01</emphasis> restart "
16674
"<application>nagios</application>:"
16675
msgstr ""
16676
16677
#: serverguide/C/monitoring.xml:383(para)
16678
msgid ""
16679
"You should now be able to see the host and service checks in the Nagios CGI "
16680
"files. To access them point a browser to http://server01/nagios3. You will "
16681
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
16682
"password."
16683
msgstr ""
16684
16685
#: serverguide/C/monitoring.xml:393(para)
16686
msgid ""
16687
"This section has just scratched the surface of Nagios' features. The "
16688
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
16689
"plugins</application> contain many more service checks."
16690
msgstr ""
16691
16692
#: serverguide/C/monitoring.xml:400(para)
16693
msgid ""
16694
"For more information see <ulink "
16695
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
16696
msgstr ""
16697
16698
#: serverguide/C/monitoring.xml:405(para)
16699
msgid ""
16700
"Specifically the <ulink "
16701
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
16702
"site."
16703
msgstr ""
16704
16705
#: serverguide/C/monitoring.xml:410(para)
16706
msgid ""
16707
"There is also a list of <ulink "
16708
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
16709
"Nagios and network monitoring:"
16710
msgstr ""
16711
16712
#: serverguide/C/monitoring.xml:416(para)
16713
msgid ""
16714
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
16715
"Wiki</ulink> page also has more details."
16716
msgstr ""
16717
16718
#: serverguide/C/monitoring.xml:425(title)
16719
msgid "Munin"
16720
msgstr ""
16721
16722
#: serverguide/C/monitoring.xml:430(para)
16723
msgid ""
16724
"Before installing <application>Munin</application> on "
16725
"<emphasis>server01</emphasis><application>apache2</application> will need to "
16726
"be installed. The default configuration is fine for running a "
16727
"<application>munin</application> server. For more information see <xref "
16728
"linkend=\"httpd\"/>."
16729
msgstr ""
16730
16731
#: serverguide/C/monitoring.xml:436(para)
16732
msgid ""
16733
"First, on <emphasis>server01</emphasis> install "
16734
"<application>munin</application>. In a terminal enter:"
16735
msgstr ""
16736
16737
#: serverguide/C/monitoring.xml:441(command)
16738
msgid "sudo apt-get install munin"
16739
msgstr ""
16740
16741
#: serverguide/C/monitoring.xml:444(para)
16742
msgid ""
16743
"Now on <emphasis>server02</emphasis> install the <application>munin-"
16744
"node</application> package:"
16745
msgstr ""
16746
16747
#: serverguide/C/monitoring.xml:449(command)
16748
msgid "sudo apt-get install munin-node"
16749
msgstr ""
16750
16751
#: serverguide/C/monitoring.xml:456(para)
16752
msgid ""
16753
"On <emphasis>server01</emphasis> edit the "
16754
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
16755
"<emphasis>server02</emphasis>:"
16756
msgstr ""
16757
16758
#: serverguide/C/monitoring.xml:461(programlisting)
16759
#, no-wrap
16760
msgid ""
16761
"\n"
16762
"## First our \"normal\" host.\n"
16763
"[server02]\n"
16764
" address 172.18.100.101\n"
16765
msgstr ""
16766
16767
#: serverguide/C/monitoring.xml:468(para)
16768
msgid ""
16769
"Replace <emphasis>server02</emphasis> and "
16770
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
16771
"for your server."
16772
msgstr ""
16773
16774
#: serverguide/C/monitoring.xml:474(para)
16775
msgid ""
16776
"Next, configure <application>munin-node</application> on "
16777
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
16778
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
16779
msgstr ""
16780
16781
#: serverguide/C/monitoring.xml:479(programlisting)
16782
#, no-wrap
16783
msgid ""
16784
"\n"
16785
"allow ^172\\.18\\.100\\.100$\n"
16786
msgstr ""
16787
16788
#: serverguide/C/monitoring.xml:484(para)
16789
msgid ""
16790
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
16791
"<application>munin</application> server."
16792
msgstr ""
16793
16794
#: serverguide/C/monitoring.xml:489(para)
16795
msgid ""
16796
"Now restart <application>munin-node</application> on "
16797
"<emphasis>server02</emphasis> for the changes to take effect:"
16798
msgstr ""
16799
16800
#: serverguide/C/monitoring.xml:494(command)
16801
msgid "sudo /etc/init.d/munin-node restart"
16802
msgstr ""
16803
16804
#: serverguide/C/monitoring.xml:497(para)
16805
msgid ""
16806
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
16807
"you should see links to nice graphs displaying information from the standard "
16808
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
16809
msgstr ""
16810
16811
#: serverguide/C/monitoring.xml:503(para)
16812
msgid ""
16813
"Since this is a new install it may take some time for the graphs to display "
16814
"anything useful."
16815
msgstr ""
16816
16817
#: serverguide/C/monitoring.xml:510(title)
16818
msgid "Additional Plugins"
16819
msgstr ""
16820
16821
#: serverguide/C/monitoring.xml:512(para)
16822
msgid ""
16823
"The <application>munin-plugins-extra</application> package contains "
16824
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
16825
"install the package, from a terminal enter:"
16826
msgstr ""
16827
16828
#: serverguide/C/monitoring.xml:518(command)
16829
msgid "sudo apt-get install munin-plugins-extra"
16830
msgstr ""
16831
16832
#: serverguide/C/monitoring.xml:521(para)
16833
msgid "Be sure to install the package on both the server and node machines."
16834
msgstr ""
16835
16836
#: serverguide/C/monitoring.xml:531(para)
16837
msgid ""
16838
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
16839
"website for more details."
16840
msgstr ""
16841
16842
#: serverguide/C/monitoring.xml:536(para)
16843
msgid ""
16844
"Specifically the <ulink "
16845
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
16846
"Documentation</ulink> page includes information on additional plugins, "
16847
"writing plugins, etc."
16848
msgstr ""
16849
16850
#: serverguide/C/monitoring.xml:542(para)
16851
msgid ""
16852
"Also, there is a book in German by Open Source Press: <ulink "
16853
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
16854
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
16855
msgstr ""
16856
16857
#: serverguide/C/monitoring.xml:548(para)
16858
msgid ""
16859
"Another resource is the <ulink "
16860
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
16861
"page."
16862
msgstr ""
16863
16864
#: serverguide/C/mail.xml:13(title)
16865
msgid "Email Services"
16866
msgstr ""
16867
16868
#: serverguide/C/mail.xml:14(para)
16869
msgid ""
16870
"The process of getting an email from one person to another over a network or "
16871
"the Internet involves many systems working together. Each of these systems "
16872
"must be correctly configured for the process to work. The sender uses a "
16873
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
16874
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
16875
"the last of which will hand it off to a <emphasis>Mail Delivery "
16876
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
16877
"it will be retrieved by the recipient's email client, usually via a POP3 or "
16878
"IMAP server."
16879
msgstr ""
16880
16881
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
16882
msgid "Postfix"
16883
msgstr ""
16884
16885
#: serverguide/C/mail.xml:25(para)
16886
msgid ""
16887
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
16888
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
16889
"compatible with the MTA <application>sendmail</application>. This section "
16890
"explains how to install and configure <application>postfix</application>. It "
16891
"also explains how to set it up as an SMTP server using a secure connection "
16892
"(for sending emails securely)."
16893
msgstr ""
16894
16895
#: serverguide/C/mail.xml:34(para)
16896
msgid ""
16897
"This guide does not cover setting up Postfix <emphasis>Virtual "
16898
"Domains</emphasis>, for information on Virtual Domains and other advanced "
16899
"configurations see <xref linkend=\"postfix-references\"/>."
16900
msgstr ""
16901
16902
#: serverguide/C/mail.xml:41(para)
16903
msgid ""
16904
"To install <application>postfix</application> run the following command:"
16905
msgstr ""
16906
16907
#: serverguide/C/mail.xml:47(para)
16908
msgid ""
16909
"Simply press return when the installation process asks questions, the "
16910
"configuration will be done in greater detail in the next stage."
16911
msgstr ""
16912
16913
#: serverguide/C/mail.xml:52(title)
16914
msgid "Basic Configuration"
16915
msgstr ""
16916
16917
#: serverguide/C/mail.xml:53(para)
16918
msgid ""
16919
"To configure <application>postfix</application>, run the following command:"
16920
msgstr ""
16921
16922
#: serverguide/C/mail.xml:57(command)
16923
msgid "sudo dpkg-reconfigure postfix"
16924
msgstr ""
16925
16926
#: serverguide/C/mail.xml:63(para)
16927
msgid "Internet Site"
16928
msgstr ""
16929
16930
#: serverguide/C/mail.xml:64(para)
16931
msgid "mail.example.com"
16932
msgstr ""
16933
16934
#: serverguide/C/mail.xml:65(para)
16935
msgid "steve"
16936
msgstr ""
16937
16938
#: serverguide/C/mail.xml:66(para)
16939
msgid "mail.example.com, localhost.localdomain, localhost"
16940
msgstr ""
16941
16942
#: serverguide/C/mail.xml:67(para)
16943
msgid "No"
16944
msgstr ""
16945
16946
#: serverguide/C/mail.xml:68(para)
16947
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
16948
msgstr ""
16949
16950
#: serverguide/C/mail.xml:69(para)
16951
msgid "0"
16952
msgstr ""
16953
16954
#: serverguide/C/mail.xml:70(para)
16955
msgid "+"
16956
msgstr ""
16957
16958
#: serverguide/C/mail.xml:71(para)
16959
msgid "all"
16960
msgstr ""
16961
16962
#: serverguide/C/mail.xml:59(para)
16963
msgid ""
16964
"The user interface will be displayed. On each screen, select the following "
16965
"values: <placeholder-1/>"
16966
msgstr ""
16967
16968
#: serverguide/C/mail.xml:75(para)
16969
msgid ""
16970
"Replace mail.example.com with the domain for which you'll accept email, "
16971
"192.168.0.0/24 with the actual network and class range of your mail server, "
16972
"and steve with the appropriate username."
16973
msgstr ""
16974
16975
#: serverguide/C/mail.xml:81(para)
16976
msgid ""
16977
"Now is a good time to decide which mailbox format you want to use. By "
16978
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
16979
"mailbox format. Rather than editing the configuration file directly, you can "
16980
"use the <command>postconf</command> command to configure all "
16981
"<application>postfix</application> parameters. The configuration parameters "
16982
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
16983
"you wish to re-configure a particular parameter, you can either run the "
16984
"command or change it manually in the file."
16985
msgstr ""
16986
16987
#: serverguide/C/mail.xml:92(para)
16988
msgid ""
16989
"To configure the mailbox format for <emphasis "
16990
"role=\"strong\">Maildir:</emphasis>"
16991
msgstr ""
16992
16993
#: serverguide/C/mail.xml:97(command)
16994
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
16995
msgstr ""
16996
16997
#: serverguide/C/mail.xml:100(para)
16998
msgid ""
16999
"This will place new mail in /home/<emphasis "
17000
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
17001
"your Mail Delivery Agent (MDA) to use the same path."
17002
msgstr ""
17003
17004
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17005
msgid "SMTP Authentication"
17006
msgstr ""
17007
17008
#: serverguide/C/mail.xml:110(para)
17009
msgid ""
17010
"SMTP-AUTH allows a client to identify itself through an authentication "
17011
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17012
"the authentication process. Once authenticated the SMTP server will allow "
17013
"the client to relay mail."
17014
msgstr ""
17015
17016
#: serverguide/C/mail.xml:117(para)
17017
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17018
msgstr ""
17019
17020
#: serverguide/C/mail.xml:120(screen)
17021
#, no-wrap
17022
msgid ""
17023
"\n"
17024
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17025
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17026
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17027
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17028
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17029
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17030
"sudo postconf -e 'smtpd_recipient_restrictions = "
17031
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17032
"sudo postconf -e 'inet_interfaces = all'\n"
17033
msgstr ""
17034
17035
#: serverguide/C/mail.xml:131(para)
17036
msgid ""
17037
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17038
"the Postfix queue directory."
17039
msgstr ""
17040
17041
#: serverguide/C/mail.xml:137(para)
17042
msgid ""
17043
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17044
"and-security\"/> for details. This example also uses a Certificate Authority "
17045
"(CA). For information on generating a CA certificate see <xref "
17046
"linkend=\"certificate-authority\"/>."
17047
msgstr ""
17048
17049
#: serverguide/C/mail.xml:143(para)
17050
msgid ""
17051
"You can get the digital certificate from a certificate authority. But unlike "
17052
"web clients, SMTP clients rarely complain about \"self-signed "
17053
"certificates\", so alternatively, you can create the certificate yourself. "
17054
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17055
"details."
17056
msgstr ""
17057
17058
#: serverguide/C/mail.xml:155(para)
17059
msgid ""
17060
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17061
"both incoming and outgoing mail:"
17062
msgstr ""
17063
17064
#: serverguide/C/mail.xml:158(screen)
17065
#, no-wrap
17066
msgid ""
17067
"\n"
17068
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17069
"sudo postconf -e 'smtp_use_tls = yes'\n"
17070
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17071
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17072
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17073
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17074
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17075
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17076
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17077
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17078
"sudo postconf -e 'myhostname = mail.example.com'\n"
17079
msgstr ""
17080
17081
#: serverguide/C/mail.xml:173(para)
17082
msgid ""
17083
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17084
"the certificate enter:"
17085
msgstr ""
17086
17087
#: serverguide/C/mail.xml:177(command)
17088
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17089
msgstr ""
17090
17091
#: serverguide/C/mail.xml:180(para)
17092
msgid ""
17093
"Again, for more details about certificates see <xref linkend=\"certificates-"
17094
"and-security\"/>."
17095
msgstr ""
17096
17097
#: serverguide/C/mail.xml:186(para)
17098
msgid ""
17099
"After running all the commands, <application>Postfix</application> is "
17100
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17101
"TLS encryption."
17102
msgstr ""
17103
17104
#: serverguide/C/mail.xml:191(para)
17105
msgid ""
17106
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17107
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17108
msgstr ""
17109
17110
#: serverguide/C/mail.xml:195(para)
17111
msgid ""
17112
"The postfix initial configuration is complete. Run the following command to "
17113
"restart the postfix daemon:"
17114
msgstr ""
17115
17116
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17117
msgid "sudo /etc/init.d/postfix restart"
17118
msgstr ""
17119
17120
#: serverguide/C/mail.xml:204(para)
17121
msgid ""
17122
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17123
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17124
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17125
"However it is still necessary to set up SASL authentication before you can "
17126
"use SMTP-AUTH."
17127
msgstr ""
17128
17129
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17130
msgid "Configuring SASL"
17131
msgstr ""
17132
17133
#: serverguide/C/mail.xml:215(para)
17134
msgid ""
17135
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17136
"enable Dovecot SASL the <application>dovecot-common</application> package "
17137
"will need to be installed. From a terminal prompt enter the following:"
17138
msgstr ""
17139
17140
#: serverguide/C/mail.xml:221(command)
17141
msgid "sudo apt-get install dovecot-common"
17142
msgstr ""
17143
17144
#: serverguide/C/mail.xml:223(para)
17145
msgid ""
17146
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17147
"In the <emphasis>auth default</emphasis> section uncomment the "
17148
"<emphasis>socket listen</emphasis> option and change the following:"
17149
msgstr ""
17150
17151
#: serverguide/C/mail.xml:227(programlisting)
17152
#, no-wrap
17153
msgid ""
17154
"\n"
17155
" socket listen {\n"
17156
" #master {\n"
17157
" # Master socket provides access to userdb information. It's typically\n"
17158
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17159
" # can find mailbox locations.\n"
17160
" #path = /var/run/dovecot/auth-master\n"
17161
" #mode = 0600\n"
17162
" # Default user/group is the one who started dovecot-auth (root)\n"
17163
" #user = \n"
17164
" #group = \n"
17165
" #}\n"
17166
" client {\n"
17167
" # The client socket is generally safe to export to everyone. Typical "
17168
"use\n"
17169
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17170
" # using it.\n"
17171
" path = /var/spool/postfix/private/auth-client\n"
17172
" mode = 0660\n"
17173
" user = postfix\n"
17174
" group = postfix\n"
17175
" }\n"
17176
" }\n"
17177
msgstr ""
17178
17179
#: serverguide/C/mail.xml:251(para)
17180
msgid ""
17181
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17182
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17183
"add <emphasis>\"login\"</emphasis>:"
17184
msgstr ""
17185
17186
#: serverguide/C/mail.xml:256(programlisting)
17187
#, no-wrap
17188
msgid ""
17189
"\n"
17190
" mechanisms = plain login\n"
17191
msgstr ""
17192
17193
#: serverguide/C/mail.xml:260(para)
17194
msgid ""
17195
"Once you have <application>Dovecot</application> configured restart it with:"
17196
msgstr ""
17197
17198
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17199
msgid "sudo /etc/init.d/dovecot restart"
17200
msgstr ""
17201
17202
#: serverguide/C/mail.xml:269(title)
17203
msgid "Postfix-Dovecot"
17204
msgstr ""
17205
17206
#: serverguide/C/mail.xml:271(para)
17207
msgid ""
17208
"Another option for configuring <application>Postfix</application> for SMTP-"
17209
"AUTH is using the <application>dovecot-postfix</application> package. This "
17210
"package will install <application>Dovecot</application> and configure "
17211
"<application>Postfix</application> to use it for both SASL authentication "
17212
"and as a Mail Delivery Agent (MDA). The package also configures "
17213
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17214
msgstr ""
17215
17216
#: serverguide/C/mail.xml:280(para)
17217
msgid ""
17218
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17219
"server. For example, if you are configuring your server to be a mail "
17220
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17221
"the above commands to configure Postfix for SMTPAUTH."
17222
msgstr ""
17223
17224
#: serverguide/C/mail.xml:287(para)
17225
msgid "To install the package, from a terminal prompt enter:"
17226
msgstr ""
17227
17228
#: serverguide/C/mail.xml:292(command)
17229
msgid "sudo apt-get install dovecot-postfix"
17230
msgstr ""
17231
17232
#: serverguide/C/mail.xml:295(para)
17233
msgid ""
17234
"You should now have a working mail server, but there are a few options that "
17235
"you may wish to further customize. For example, the package uses the "
17236
"certificate and key from the <application>ssl-cert</application> package, "
17237
"and in a production environment you should use a certificate and key "
17238
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17239
"for more details."
17240
msgstr ""
17241
17242
#: serverguide/C/mail.xml:301(para)
17243
msgid ""
17244
"Once you have a customized certificate and key for the host, change the "
17245
"following options in <filename>/etc/postfix/main.cf</filename>:"
17246
msgstr ""
17247
17248
#: serverguide/C/mail.xml:305(programlisting)
17249
#, no-wrap
17250
msgid ""
17251
"\n"
17252
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17253
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17254
msgstr ""
17255
17256
#: serverguide/C/mail.xml:310(para)
17257
msgid "Then restart Postfix:"
17258
msgstr ""
17259
17260
#: serverguide/C/mail.xml:321(para)
17261
msgid ""
17262
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17263
msgstr ""
17264
17265
#: serverguide/C/mail.xml:324(para)
17266
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17267
msgstr ""
17268
17269
#: serverguide/C/mail.xml:329(command)
17270
msgid "telnet mail.example.com 25"
17271
msgstr ""
17272
17273
#: serverguide/C/mail.xml:331(para)
17274
msgid ""
17275
"After you have established the connection to the postfix mail server, type:"
17276
msgstr ""
17277
17278
#: serverguide/C/mail.xml:335(screen)
17279
#, no-wrap
17280
msgid ""
17281
"\n"
17282
"ehlo mail.example.com\n"
17283
msgstr ""
17284
17285
#: serverguide/C/mail.xml:338(para)
17286
msgid ""
17287
"If you see the following lines among others, then everything is working "
17288
"perfectly. Type <command>quit</command> to exit."
17289
msgstr ""
17290
17291
#: serverguide/C/mail.xml:342(programlisting)
17292
#, no-wrap
17293
msgid ""
17294
"\n"
17295
"250-STARTTLS\n"
17296
"250-AUTH LOGIN PLAIN\n"
17297
"250-AUTH=LOGIN PLAIN\n"
17298
"250 8BITMIME\n"
17299
msgstr ""
17300
17301
#: serverguide/C/mail.xml:352(para)
17302
msgid ""
17303
"This section introduces some common ways to determine the cause if problems "
17304
"arise."
17305
msgstr ""
17306
17307
#: serverguide/C/mail.xml:356(title)
17308
msgid "Escaping chroot"
17309
msgstr ""
17310
17311
#: serverguide/C/mail.xml:357(para)
17312
msgid ""
17313
"The Ubuntu <application>postfix</application> package will by default "
17314
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17315
"This can add greater complexity when troubleshooting problems."
17316
msgstr ""
17317
17318
#: serverguide/C/mail.xml:361(para)
17319
msgid ""
17320
"To turn off the chroot operation locate for the following line in the "
17321
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17322
msgstr ""
17323
17324
#: serverguide/C/mail.xml:365(screen)
17325
#, no-wrap
17326
msgid ""
17327
"\n"
17328
"smtp inet n - - - - smtpd\n"
17329
msgstr ""
17330
17331
#: serverguide/C/mail.xml:368(para)
17332
msgid "and modify it as follows:"
17333
msgstr ""
17334
17335
#: serverguide/C/mail.xml:371(screen)
17336
#, no-wrap
17337
msgid ""
17338
"\n"
17339
"smtp inet n - n - - smtpd\n"
17340
msgstr ""
17341
17342
#: serverguide/C/mail.xml:374(para)
17343
msgid ""
17344
"You will then need to restart Postfix to use the new configuration. From a "
17345
"terminal prompt enter:"
17346
msgstr ""
17347
17348
#: serverguide/C/mail.xml:382(title)
17349
msgid "Log Files"
17350
msgstr ""
17351
17352
#: serverguide/C/mail.xml:383(para)
17353
msgid ""
17354
"<application>Postfix</application> sends all log messages to "
17355
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17356
"can sometimes get lost in the normal log output so they are also logged to "
17357
"<filename>/var/log/mail.err</filename> and "
17358
"<filename>/var/log/mail.warn</filename> respectively."
17359
msgstr ""
17360
17361
#: serverguide/C/mail.xml:388(para)
17362
msgid ""
17363
"To see messages entered into the logs in real time you can use the "
17364
"<application>tail -f</application> command:"
17365
msgstr ""
17366
17367
#: serverguide/C/mail.xml:393(command)
17368
msgid "tail -f /var/log/mail.err"
17369
msgstr ""
17370
17371
#: serverguide/C/mail.xml:395(para)
17372
msgid ""
17373
"The amount of detail that is recorded in the logs can be increased. Below "
17374
"are some configuration options for increasing the log level for some of the "
17375
"areas covered above."
17376
msgstr ""
17377
17378
#: serverguide/C/mail.xml:401(para)
17379
msgid ""
17380
"To increase <emphasis>TLS</emphasis> activity logging set the "
17381
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17382
msgstr ""
17383
17384
#: serverguide/C/mail.xml:405(command)
17385
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17386
msgstr ""
17387
17388
#: serverguide/C/mail.xml:409(para)
17389
msgid ""
17390
"If you are having trouble sending or receiving mail from a specific domain "
17391
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17392
msgstr ""
17393
17394
#: serverguide/C/mail.xml:414(command)
17395
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17396
msgstr ""
17397
17398
#: serverguide/C/mail.xml:418(para)
17399
msgid ""
17400
"You can increase the verbosity of any <application>Postfix</application> "
17401
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17402
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17403
"<emphasis>smtp</emphasis> entry:"
17404
msgstr ""
17405
17406
#: serverguide/C/mail.xml:422(programlisting)
17407
#, no-wrap
17408
msgid ""
17409
"\n"
17410
"smtp unix - - - - - smtp -v\n"
17411
msgstr ""
17412
17413
#: serverguide/C/mail.xml:428(para)
17414
msgid ""
17415
"It is important to note that after making one of the logging changes above "
17416
"the <application>Postfix</application> process will need to be reloaded in "
17417
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17418
"reload</command>"
17419
msgstr ""
17420
17421
#: serverguide/C/mail.xml:435(para)
17422
msgid ""
17423
"To increase the amount of information logged when troubleshooting "
17424
"<emphasis>SASL</emphasis> issues you can set the following options in "
17425
"<filename>/etc/dovecot/dovecot.conf</filename>"
17426
msgstr ""
17427
17428
#: serverguide/C/mail.xml:439(programlisting)
17429
#, no-wrap
17430
msgid ""
17431
"\n"
17432
"auth_debug=yes\n"
17433
"auth_debug_passwords=yes\n"
17434
msgstr ""
17435
17436
#: serverguide/C/mail.xml:446(para)
17437
msgid ""
17438
"Just like <application>Postfix</application> if you change a "
17439
"<application>Dovecot</application> configuration the process will need to be "
17440
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17441
msgstr ""
17442
17443
#: serverguide/C/mail.xml:452(para)
17444
msgid ""
17445
"Some of the options above can drastically increase the amount of information "
17446
"sent to the log files. Remember to return the log level back to normal after "
17447
"you have corrected the problem. Then reload the appropriate daemon for the "
17448
"new configuration to take affect."
17449
msgstr ""
17450
17451
#: serverguide/C/mail.xml:460(para)
17452
msgid ""
17453
"Administering a <application>Postfix</application> server can be a very "
17454
"complicated task. At some point you may need to turn to the Ubuntu community "
17455
"for more experienced help."
17456
msgstr ""
17457
17458
#: serverguide/C/mail.xml:464(para)
17459
msgid ""
17460
"A great place to ask for <application>Postfix</application> assistance, and "
17461
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17462
"server</emphasis> IRC channel on <ulink "
17463
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17464
"one of the <ulink "
17465
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17466
msgstr ""
17467
17468
#: serverguide/C/mail.xml:469(para)
17469
msgid ""
17470
"For in depth <application>Postfix</application> information Ubuntu "
17471
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17472
"Book of Postfix</ulink>."
17473
msgstr ""
17474
17475
#: serverguide/C/mail.xml:473(para)
17476
msgid ""
17477
"Finally, the <ulink "
17478
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17479
"also has great documentation on all the different configuration options "
17480
"available."
17481
msgstr ""
17482
17483
#: serverguide/C/mail.xml:477(para)
17484
msgid ""
17485
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17486
"Wiki Postifx</ulink> page has more information."
17487
msgstr ""
17488
17489
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17490
msgid "Exim4"
17491
msgstr ""
17492
17493
#: serverguide/C/mail.xml:486(para)
17494
msgid ""
17495
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17496
"developed at the University of Cambridge for use on Unix systems connected "
17497
"to the Internet. Exim can be installed in place of "
17498
"<application>sendmail</application>, although the configuration of "
17499
"<application>exim</application> is quite different to that of "
17500
"<application>sendmail</application>."
17501
msgstr ""
17502
17503
#: serverguide/C/mail.xml:497(para)
17504
msgid ""
17505
"To install <application>exim4</application>, run the following command: "
17506
"<screen>\n"
17507
"<command>sudo apt-get install exim4</command>\n"
17508
"</screen>"
17509
msgstr ""
17510
17511
#: serverguide/C/mail.xml:506(para)
17512
msgid ""
17513
"To configure <application>Exim4</application>, run the following command:"
17514
msgstr ""
17515
17516
#: serverguide/C/mail.xml:510(command)
17517
msgid "sudo dpkg-reconfigure exim4-config"
17518
msgstr ""
17519
17520
#: serverguide/C/mail.xml:512(para)
17521
msgid ""
17522
"The user interface will be displayed. The user interface lets you configure "
17523
"many parameters. For example, In <application>Exim4</application> the "
17524
"configuration files are split among multiple files. If you wish to have them "
17525
"in one file you can configure accordingly in this user interface."
17526
msgstr ""
17527
17528
#: serverguide/C/mail.xml:520(para)
17529
msgid ""
17530
"All the parameters you configure in the user interface are stored in "
17531
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17532
"re-configure, either you re-run the configuration wizard or manually edit "
17533
"this file using your favorite editor. Once you configure, you can run the "
17534
"following command to generate the master configuration file:"
17535
msgstr ""
17536
17537
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17538
msgid "sudo update-exim4.conf"
17539
msgstr ""
17540
17541
#: serverguide/C/mail.xml:533(para)
17542
msgid ""
17543
"The master configuration file, is generated and it is stored in "
17544
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17545
msgstr ""
17546
17547
#: serverguide/C/mail.xml:539(para)
17548
msgid ""
17549
"At any time, you should not edit the master configuration file, "
17550
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17551
"updated automatically every time you run <command>update-exim4.conf</command>"
17552
msgstr ""
17553
17554
#: serverguide/C/mail.xml:547(para)
17555
msgid ""
17556
"You can run the following command to start <application>Exim4</application> "
17557
"daemon."
17558
msgstr ""
17559
17560
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17561
msgid "sudo /etc/init.d/exim4 start"
17562
msgstr ""
17563
17564
#: serverguide/C/mail.xml:557(para)
17565
msgid ""
17566
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17567
msgstr ""
17568
17569
#: serverguide/C/mail.xml:560(para)
17570
msgid ""
17571
"The first step is to create a certificate for use with TLS. Enter the "
17572
"following into a terminal prompt:"
17573
msgstr ""
17574
17575
#: serverguide/C/mail.xml:564(command)
17576
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17577
msgstr ""
17578
17579
#: serverguide/C/mail.xml:566(para)
17580
msgid ""
17581
"Now Exim4 needs to be configured for TLS by editing "
17582
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17583
"the following:"
17584
msgstr ""
17585
17586
#: serverguide/C/mail.xml:570(programlisting)
17587
#, no-wrap
17588
msgid ""
17589
"\n"
17590
"MAIN_TLS_ENABLE = yes\n"
17591
msgstr ""
17592
17593
#: serverguide/C/mail.xml:573(para)
17594
msgid ""
17595
"Next you need to configure <application>Exim4</application> to use the "
17596
"<application>saslauthd</application> for authentication. Edit "
17597
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17598
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17599
"<emphasis>login_saslauthd_server</emphasis> sections:"
17600
msgstr ""
17601
17602
#: serverguide/C/mail.xml:578(programlisting)
17603
#, no-wrap
17604
msgid ""
17605
"\n"
17606
" plain_saslauthd_server:\n"
17607
" driver = plaintext\n"
17608
" public_name = PLAIN\n"
17609
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17610
" server_set_id = $auth2\n"
17611
" server_prompts = :\n"
17612
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17613
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17614
" .endif\n"
17615
"#\n"
17616
" login_saslauthd_server:\n"
17617
" driver = plaintext\n"
17618
" public_name = LOGIN\n"
17619
" server_prompts = \"Username:: : Password::\"\n"
17620
" # don't send system passwords over unencrypted connections\n"
17621
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
17622
" server_set_id = $auth1\n"
17623
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17624
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17625
" .endif\n"
17626
msgstr ""
17627
17628
#: serverguide/C/mail.xml:600(para)
17629
msgid "Finally, update the Exim4 configuration and restart the service:"
17630
msgstr ""
17631
17632
#: serverguide/C/mail.xml:605(command)
17633
msgid "sudo /etc/init.d/exim4 restart"
17634
msgstr ""
17635
17636
#: serverguide/C/mail.xml:610(para)
17637
msgid ""
17638
"This section provides details on configuring the saslauthd to provide "
17639
"authentication for <application>Exim4</application>."
17640
msgstr ""
17641
17642
#: serverguide/C/mail.xml:613(para)
17643
msgid ""
17644
"The first step is to install the sasl2-bin package. From a terminal prompt "
17645
"enter the following:"
17646
msgstr ""
17647
17648
#: serverguide/C/mail.xml:617(command)
17649
msgid "sudo apt-get install sasl2-bin"
17650
msgstr ""
17651
17652
#: serverguide/C/mail.xml:619(para)
17653
msgid ""
17654
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
17655
"and set START=no to:"
17656
msgstr ""
17657
17658
#: serverguide/C/mail.xml:622(programlisting)
17659
#, no-wrap
17660
msgid ""
17661
"\n"
17662
"START=yes\n"
17663
msgstr ""
17664
17665
#: serverguide/C/mail.xml:625(para)
17666
msgid ""
17667
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
17668
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
17669
"service:"
17670
msgstr ""
17671
17672
#: serverguide/C/mail.xml:630(command)
17673
msgid "sudo adduser Debian-exim sasl"
17674
msgstr ""
17675
17676
#: serverguide/C/mail.xml:632(para)
17677
msgid "Now start the <application>saslauthd</application> service:"
17678
msgstr ""
17679
17680
#: serverguide/C/mail.xml:636(command)
17681
msgid "sudo /etc/init.d/saslauthd start"
17682
msgstr ""
17683
17684
#: serverguide/C/mail.xml:638(para)
17685
msgid ""
17686
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
17687
"and SASL authentication."
17688
msgstr ""
17689
17690
#: serverguide/C/mail.xml:647(para)
17691
msgid ""
17692
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
17693
"information."
17694
msgstr ""
17695
17696
#: serverguide/C/mail.xml:652(para)
17697
msgid ""
17698
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
17699
"server\">Exim4 Book</ulink> available."
17700
msgstr ""
17701
17702
#: serverguide/C/mail.xml:657(para)
17703
msgid ""
17704
"Another resource is the <ulink "
17705
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
17706
"page."
17707
msgstr ""
17708
17709
#: serverguide/C/mail.xml:666(title)
17710
msgid "Dovecot Server"
17711
msgstr ""
17712
17713
#: serverguide/C/mail.xml:667(para)
17714
msgid ""
17715
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
17716
"security primarily in mind. It supports the major mailbox formats: mbox or "
17717
"Maildir. This section explain how to set it up as an imap or pop3 server."
17718
msgstr ""
17719
17720
#: serverguide/C/mail.xml:675(para)
17721
msgid ""
17722
"To install <application>dovecot</application>, run the following command in "
17723
"the command prompt:"
17724
msgstr ""
17725
17726
#: serverguide/C/mail.xml:680(command)
17727
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
17728
msgstr ""
17729
17730
#: serverguide/C/mail.xml:685(para)
17731
msgid ""
17732
"To configure <application>dovecot</application>, you can edit the file "
17733
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
17734
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
17735
"secure). A description of these protocols is beyond the scope of this guide. "
17736
"For further information, refer to the Wikipedia articles on <ulink "
17737
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
17738
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
17739
"link>."
17740
msgstr ""
17741
17742
#: serverguide/C/mail.xml:695(para)
17743
msgid ""
17744
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
17745
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
17746
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
17747
msgstr ""
17748
17749
#: serverguide/C/mail.xml:701(programlisting)
17750
#, no-wrap
17751
msgid ""
17752
"\n"
17753
"protocols = pop3 pop3s imap imaps\n"
17754
msgstr ""
17755
17756
#: serverguide/C/mail.xml:704(para)
17757
msgid ""
17758
"Next, choose the mailbox you would like to use. "
17759
"<application>Dovecot</application> supports <emphasis "
17760
"role=\"strong\">maildir</emphasis> and <emphasis "
17761
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
17762
"mailbox formats. They both have their own benefits and are discussed on "
17763
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
17764
"site</ulink>."
17765
msgstr ""
17766
17767
#: serverguide/C/mail.xml:712(para)
17768
msgid ""
17769
"Once you have chosen your mailbox type, edit the file "
17770
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
17771
msgstr ""
17772
17773
#: serverguide/C/mail.xml:717(programlisting)
17774
#, no-wrap
17775
msgid ""
17776
"\n"
17777
"mail_location = maildir:~/Maildir # (for maildir)\n"
17778
"or\n"
17779
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
17780
msgstr ""
17781
17782
#: serverguide/C/mail.xml:723(para)
17783
msgid ""
17784
"You should configure your Mail Transport Agent (MTA) to transfer the "
17785
"incoming mail to this type of mailbox if it is different from the one you "
17786
"have configured."
17787
msgstr ""
17788
17789
#: serverguide/C/mail.xml:729(para)
17790
msgid ""
17791
"Once you have configured dovecot, restart the "
17792
"<application>dovecot</application> daemon in order to test your setup:"
17793
msgstr ""
17794
17795
#: serverguide/C/mail.xml:738(para)
17796
msgid ""
17797
"If you have enabled imap, or pop3, you can also try to log in with the "
17798
"commands <command>telnet localhost pop3</command> or <command>telnet "
17799
"localhost imap2</command>. If you see something like the following, the "
17800
"installation has been successful:"
17801
msgstr ""
17802
17803
#: serverguide/C/mail.xml:745(programlisting)
17804
#, no-wrap
17805
msgid ""
17806
"\n"
17807
"bhuvan@rainbow:~$ telnet localhost pop3\n"
17808
"Trying 127.0.0.1...\n"
17809
"Connected to localhost.localdomain.\n"
17810
"Escape character is '^]'.\n"
17811
"+OK Dovecot ready.\n"
17812
msgstr ""
17813
17814
#: serverguide/C/mail.xml:754(title)
17815
msgid "Dovecot SSL Configuration"
17816
msgstr ""
17817
17818
#: serverguide/C/mail.xml:755(para)
17819
msgid ""
17820
"To configure <application>dovecot</application> to use SSL, you can edit the "
17821
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
17822
"lines:"
17823
msgstr ""
17824
17825
#: serverguide/C/mail.xml:760(programlisting)
17826
#, no-wrap
17827
msgid ""
17828
"\n"
17829
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
17830
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
17831
"ssl_disable = no\n"
17832
"disable_plaintext_auth = no\n"
17833
msgstr ""
17834
17835
#: serverguide/C/mail.xml:766(para)
17836
msgid ""
17837
"You can get the SSL certificate from a Certificate Issuing Authority or you "
17838
"can create self signed SSL certificate. The latter is a good option for "
17839
"email, because SMTP clients rarely complain about \"self-signed "
17840
"certificates\". Please refer to <xref linkend=\"certificates-and-"
17841
"security\"/> for details about how to create self signed SSL certificate. "
17842
"Once you create the certificate, you will have a key file and a certificate "
17843
"file. Please copy them to the location pointed in the "
17844
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
17845
msgstr ""
17846
17847
#: serverguide/C/mail.xml:781(title)
17848
msgid "Firewall Configuration for an Email Server"
17849
msgstr ""
17850
17851
#: serverguide/C/mail.xml:787(para)
17852
msgid "IMAP - 143"
17853
msgstr ""
17854
17855
#: serverguide/C/mail.xml:788(para)
17856
msgid "IMAPS - 993"
17857
msgstr ""
17858
17859
#: serverguide/C/mail.xml:789(para)
17860
msgid "POP3 - 110"
17861
msgstr ""
17862
17863
#: serverguide/C/mail.xml:790(para)
17864
msgid "POP3S - 995"
17865
msgstr ""
17866
17867
#: serverguide/C/mail.xml:782(para)
17868
msgid ""
17869
"To access your mail server from another computer, you must configure your "
17870
"firewall to allow connections to the server on the necessary ports. "
17871
"<placeholder-1/>"
17872
msgstr ""
17873
17874
#: serverguide/C/mail.xml:799(para)
17875
msgid ""
17876
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
17877
"more information."
17878
msgstr ""
17879
17880
#: serverguide/C/mail.xml:804(para)
17881
msgid ""
17882
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
17883
"Ubuntu Wiki</ulink> page has more details."
17884
msgstr ""
17885
17886
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
17887
msgid "Mailman"
17888
msgstr ""
17889
17890
#: serverguide/C/mail.xml:814(para)
17891
msgid ""
17892
"Mailman is an open source program for managing electronic mail discussions "
17893
"and e-newsletter lists. Many open source mailing lists (including all the "
17894
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
17895
"Mailman as their mailing list software. It is powerful and easy to install "
17896
"and maintain."
17897
msgstr ""
17898
17899
#: serverguide/C/mail.xml:824(para)
17900
msgid ""
17901
"Mailman provides a web interface for the administrators and users, using an "
17902
"external mail server to send and receive emails. It works perfectly with the "
17903
"following mail servers:"
17904
msgstr ""
17905
17906
#: serverguide/C/mail.xml:835(application)
17907
msgid "Exim"
17908
msgstr ""
17909
17910
#: serverguide/C/mail.xml:838(application)
17911
msgid "Sendmail"
17912
msgstr ""
17913
17914
#: serverguide/C/mail.xml:841(application)
17915
msgid "Qmail"
17916
msgstr ""
17917
17918
#: serverguide/C/mail.xml:846(para)
17919
msgid ""
17920
"We will see how to install and configure Mailman with, the Apache web "
17921
"server, and either the Postfix or Exim mail server. If you wish to install "
17922
"Mailman with a different mail server, please refer to the references section."
17923
msgstr ""
17924
17925
#: serverguide/C/mail.xml:853(para)
17926
msgid ""
17927
"You only need to install one mail server and "
17928
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
17929
msgstr ""
17930
17931
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
17932
msgid "Apache2"
17933
msgstr ""
17934
17935
#: serverguide/C/mail.xml:859(para)
17936
msgid ""
17937
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
17938
"installation\">HTTPD Installation</ulink> section for details."
17939
msgstr ""
17940
17941
#: serverguide/C/mail.xml:867(para)
17942
msgid ""
17943
"For instructions on installing and configuring Postfix refer to <xref "
17944
"linkend=\"postfix\"/>"
17945
msgstr ""
17946
17947
#: serverguide/C/mail.xml:873(para)
17948
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
17949
msgstr ""
17950
17951
#: serverguide/C/mail.xml:884(application)
17952
msgid "dc_use_split_config='true'"
17953
msgstr ""
17954
17955
#: serverguide/C/mail.xml:876(para)
17956
msgid ""
17957
"Once exim4 is installed, the configuration files are stored in the "
17958
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
17959
"configuration files are split across different files. You can change this "
17960
"behavior by changing the following variable in the "
17961
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
17962
msgstr ""
17963
17964
#: serverguide/C/mail.xml:891(para)
17965
msgid ""
17966
"To install <application>Mailman</application>, run following command at a "
17967
"terminal prompt:"
17968
msgstr ""
17969
17970
#: serverguide/C/mail.xml:895(command)
17971
msgid "sudo apt-get install mailman"
17972
msgstr ""
17973
17974
#: serverguide/C/mail.xml:897(para)
17975
msgid ""
17976
"It copies the installation files in "
17977
"<application>/var/lib/mailman</application> directory. It installs the CGI "
17978
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
17979
"creates <emphasis>list</emphasis> linux user. It creates the "
17980
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
17981
"this user."
17982
msgstr ""
17983
17984
#: serverguide/C/mail.xml:909(para)
17985
msgid ""
17986
"This section assumes you have successfully installed "
17987
"<application>mailman</application>, <application>apache2</application>, and "
17988
"<application>postfix</application> or <application>exim4</application>. Now "
17989
"you just need to configure them."
17990
msgstr ""
17991
17992
#: serverguide/C/mail.xml:918(para)
17993
msgid ""
17994
"An example Apache configuration file comes with "
17995
"<application>Mailman</application> and is placed in "
17996
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
17997
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
17998
"available</filename>:"
17999
msgstr ""
18000
18001
#: serverguide/C/mail.xml:924(command)
18002
msgid ""
18003
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18004
msgstr ""
18005
18006
#: serverguide/C/mail.xml:926(para)
18007
msgid ""
18008
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18009
"Mailman administration site. Now enable the new configuration and restart "
18010
"Apache:"
18011
msgstr ""
18012
18013
#: serverguide/C/mail.xml:931(command)
18014
msgid "sudo a2ensite mailman.conf"
18015
msgstr ""
18016
18017
#: serverguide/C/mail.xml:934(para)
18018
msgid ""
18019
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18020
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18021
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18022
"can make changes to the <filename>/etc/apache2/sites-"
18023
"available/mailman.conf</filename> file if you wish to change this behavior."
18024
msgstr ""
18025
18026
#: serverguide/C/mail.xml:945(para)
18027
msgid ""
18028
"For <application>Postfix</application> integration, we will associate the "
18029
"domain lists.example.com with the mailing lists. Please replace "
18030
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18031
msgstr ""
18032
18033
#: serverguide/C/mail.xml:949(para)
18034
msgid ""
18035
"You can use the postconf command to add the necessary configuration to "
18036
"<filename>/etc/postfix/main.cf</filename>:"
18037
msgstr ""
18038
18039
#: serverguide/C/mail.xml:953(command)
18040
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18041
msgstr ""
18042
18043
#: serverguide/C/mail.xml:954(command)
18044
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18045
msgstr ""
18046
18047
#: serverguide/C/mail.xml:955(command)
18048
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18049
msgstr ""
18050
18051
#: serverguide/C/mail.xml:957(para)
18052
msgid ""
18053
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18054
"the following transport:"
18055
msgstr ""
18056
18057
#: serverguide/C/mail.xml:960(programlisting)
18058
#, no-wrap
18059
msgid ""
18060
"\n"
18061
"mailman unix - n n - - pipe\n"
18062
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18063
" ${nexthop} ${user}\n"
18064
msgstr ""
18065
18066
#: serverguide/C/mail.xml:965(para)
18067
msgid ""
18068
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18069
"is delivered to a list."
18070
msgstr ""
18071
18072
#: serverguide/C/mail.xml:968(para)
18073
msgid ""
18074
"Associate the domain lists.example.com to the Mailman transport with the "
18075
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18076
msgstr ""
18077
18078
#: serverguide/C/mail.xml:971(programlisting)
18079
#, no-wrap
18080
msgid ""
18081
"\n"
18082
"lists.example.com mailman:\n"
18083
msgstr ""
18084
18085
#: serverguide/C/mail.xml:974(para)
18086
msgid ""
18087
"Now have <application>Postfix</application> build the transport map by "
18088
"entering the following from a terminal prompt:"
18089
msgstr ""
18090
18091
#: serverguide/C/mail.xml:978(command)
18092
msgid "sudo postmap -v /etc/postfix/transport"
18093
msgstr ""
18094
18095
#: serverguide/C/mail.xml:980(para)
18096
msgid "Then restart Postfix to enable the new configurations:"
18097
msgstr ""
18098
18099
#: serverguide/C/mail.xml:989(para)
18100
msgid ""
18101
"Once Exim4 is installed, you can start the Exim server using the following "
18102
"command from a terminal prompt:"
18103
msgstr ""
18104
18105
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18106
msgid "Main"
18107
msgstr ""
18108
18109
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18110
msgid "Transport"
18111
msgstr ""
18112
18113
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18114
msgid "Router"
18115
msgstr ""
18116
18117
#: serverguide/C/mail.xml:996(para)
18118
msgid ""
18119
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18120
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18121
"different types. For details, please refer to the <ulink "
18122
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18123
"add new a configuration file to the following configuration types: "
18124
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18125
"these mini configuration files. So, the order of these configuration files "
18126
"is very important."
18127
msgstr ""
18128
18129
#: serverguide/C/mail.xml:1027(programlisting)
18130
#, no-wrap
18131
msgid ""
18132
"\n"
18133
"# start\n"
18134
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18135
"# directory.\n"
18136
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18137
"# This is normally the same as ~mailman\n"
18138
"MM_HOME=/var/lib/mailman\n"
18139
"#\n"
18140
"# User and group for Mailman, should match your --with-mail-gid\n"
18141
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18142
"MM_UID=list\n"
18143
"MM_GID=list\n"
18144
"#\n"
18145
"# Domains that your lists are in - colon separated list\n"
18146
"# you may wish to add these into local_domains as well\n"
18147
"domainlist mm_domains=hostname.com\n"
18148
"#\n"
18149
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18150
"#\n"
18151
"# These values are derived from the ones above and should not need\n"
18152
"# editing unless you have munged your mailman installation\n"
18153
"#\n"
18154
"# The path of the Mailman mail wrapper script\n"
18155
"MM_WRAP=MM_HOME/mail/mailman\n"
18156
"#\n"
18157
"# The path of the list config file (used as a required file when\n"
18158
"# verifying list addresses)\n"
18159
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18160
"# end\n"
18161
msgstr ""
18162
18163
#: serverguide/C/mail.xml:1021(para)
18164
msgid ""
18165
"All the configuration files belonging to the main type are stored in the "
18166
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18167
"following content to a new file, named <filename>04_exim4-"
18168
"config_mailman</filename>: <placeholder-1/>"
18169
msgstr ""
18170
18171
#: serverguide/C/mail.xml:1067(programlisting)
18172
#, no-wrap
18173
msgid ""
18174
"\n"
18175
" mailman_transport:\n"
18176
" driver = pipe\n"
18177
" command = MM_WRAP \\\n"
18178
" '${if def:local_part_suffix \\\n"
18179
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18180
"\\\n"
18181
" {post}}' \\\n"
18182
" $local_part\n"
18183
" current_directory = MM_HOME\n"
18184
" home_directory = MM_HOME\n"
18185
" user = MM_UID\n"
18186
" group = MM_GID\n"
18187
msgstr ""
18188
18189
#: serverguide/C/mail.xml:1061(para)
18190
msgid ""
18191
"All the configuration files belonging to transport type are stored in the "
18192
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18193
"following content to a new file named <filename> 40_exim4-"
18194
"config_mailman</filename>: <placeholder-1/>"
18195
msgstr ""
18196
18197
#: serverguide/C/mail.xml:1088(programlisting)
18198
#, no-wrap
18199
msgid ""
18200
"\n"
18201
" mailman_router:\n"
18202
" driver = accept\n"
18203
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18204
" local_part_suffix_optional\n"
18205
" local_part_suffix = -bounces : -bounces+* : \\\n"
18206
" -confirm+* : -join : -leave : \\\n"
18207
" -owner : -request : -admin\n"
18208
" transport = mailman_transport\n"
18209
msgstr ""
18210
18211
#: serverguide/C/mail.xml:1084(para)
18212
msgid ""
18213
"All the configuration files belonging to router type are stored in the "
18214
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18215
"following content in to a new file named <filename>101_exim4-"
18216
"config_mailman</filename>: <placeholder-1/>"
18217
msgstr ""
18218
18219
#: serverguide/C/mail.xml:1101(para)
18220
msgid ""
18221
"The order of main and transport configuration files can be in any order. "
18222
"But, the order of router configuration files must be the same. This "
18223
"particular file must appear before the <application>200_exim4-"
18224
"config_primary</application> file. These two configuration files contain "
18225
"same type of information. The first file takes the precedence. For more "
18226
"details, please refer to the references section."
18227
msgstr ""
18228
18229
#: serverguide/C/mail.xml:1114(para)
18230
msgid ""
18231
"Once mailman is installed, you can run it using the following command:"
18232
msgstr ""
18233
18234
#: serverguide/C/mail.xml:1118(command)
18235
msgid "sudo /etc/init.d/mailman start"
18236
msgstr ""
18237
18238
#: serverguide/C/mail.xml:1120(para)
18239
msgid ""
18240
"Once mailman is installed, you should create the default mailing list. Run "
18241
"the following command to create the mailing list:"
18242
msgstr ""
18243
18244
#: serverguide/C/mail.xml:1126(command)
18245
msgid "sudo /usr/sbin/newlist mailman"
18246
msgstr ""
18247
18248
#: serverguide/C/mail.xml:1129(programlisting)
18249
#, no-wrap
18250
msgid ""
18251
"\n"
18252
" Enter the email address of the person running the list: bhuvan at "
18253
"ubuntu.com\n"
18254
" Initial mailman password:\n"
18255
" To finish creating your mailing list, you must edit your "
18256
"<filename>/etc/aliases</filename> (or\n"
18257
" equivalent) file by adding the following lines, and possibly running the\n"
18258
" `newaliases' program:\n"
18259
"\n"
18260
" ## mailman mailing list\n"
18261
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18262
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18263
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18264
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18265
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18266
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18267
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18268
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18269
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18270
"mailman\"\n"
18271
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18272
"mailman\"\n"
18273
"\n"
18274
" Hit enter to notify mailman owner...\n"
18275
"\n"
18276
" # \n"
18277
msgstr ""
18278
18279
#: serverguide/C/mail.xml:1152(para)
18280
msgid ""
18281
"We have configured either Postfix or Exim4 to recognize all emails from "
18282
"mailman. So, it is not mandatory to make any new entries in "
18283
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18284
"configuration files, please ensure that you restart those services before "
18285
"continuing to next section."
18286
msgstr ""
18287
18288
#: serverguide/C/mail.xml:1160(para)
18289
msgid ""
18290
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18291
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18292
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18293
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18294
msgstr ""
18295
18296
#: serverguide/C/mail.xml:1171(title)
18297
msgid "Administration"
18298
msgstr ""
18299
18300
#: serverguide/C/mail.xml:1172(para)
18301
msgid ""
18302
"We assume you have a default installation. The mailman cgi scripts are still "
18303
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18304
"Mailman provides a web based administration facility. To access this page, "
18305
"point your browser to the following url:"
18306
msgstr ""
18307
18308
#: serverguide/C/mail.xml:1180(para)
18309
msgid "http://hostname/cgi-bin/mailman/admin"
18310
msgstr ""
18311
18312
#: serverguide/C/mail.xml:1184(para)
18313
msgid ""
18314
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18315
"screen. If you click the mailing list name, it will ask for your "
18316
"authentication password. If you enter the correct password, you will be able "
18317
"to change administrative settings of this mailing list. You can create a new "
18318
"mailing list using the command line utility "
18319
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18320
"mailing list using the web interface."
18321
msgstr ""
18322
18323
#: serverguide/C/mail.xml:1197(title)
18324
msgid "Users"
18325
msgstr ""
18326
18327
#: serverguide/C/mail.xml:1198(para)
18328
msgid ""
18329
"Mailman provides a web based interface for users. To access this page, point "
18330
"your browser to the following url:"
18331
msgstr ""
18332
18333
#: serverguide/C/mail.xml:1203(para)
18334
msgid "http://hostname/cgi-bin/mailman/listinfo"
18335
msgstr ""
18336
18337
#: serverguide/C/mail.xml:1207(para)
18338
msgid ""
18339
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18340
"screen. If you click the mailing list name, it will display the subscription "
18341
"form. You can enter your email address, name (optional), and password to "
18342
"subscribe. An email invitation will be sent to you. You can follow the "
18343
"instructions in the email to subscribe."
18344
msgstr ""
18345
18346
#: serverguide/C/mail.xml:1219(ulink)
18347
msgid "GNU Mailman - Installation Manual"
18348
msgstr ""
18349
18350
#: serverguide/C/mail.xml:1223(ulink)
18351
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18352
msgstr ""
18353
18354
#: serverguide/C/mail.xml:1226(para)
18355
msgid ""
18356
"Also, see the <ulink "
18357
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18358
"Wiki</ulink> page."
18359
msgstr ""
18360
18361
#: serverguide/C/mail.xml:1232(title)
18362
msgid "Mail Filtering"
18363
msgstr ""
18364
18365
#: serverguide/C/mail.xml:1233(para)
18366
msgid ""
18367
"One of the largest issues with email today is the problem of Unsolicited "
18368
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18369
"and other forms of malware. According to some reports these messages make up "
18370
"the bulk of all email traffic on the Internet."
18371
msgstr ""
18372
18373
#: serverguide/C/mail.xml:1238(para)
18374
msgid ""
18375
"This section will cover integrating <application>Amavisd-new</application>, "
18376
"<application>Spamassassin</application>, and "
18377
"<application>ClamAV</application> with the "
18378
"<application>Postfix</application> Mail Transport Agent (MTA). "
18379
"<application>Postfix</application> can also check email validity by passing "
18380
"it through external content filters. These filters can sometimes determine "
18381
"if a message is spam without needing to process it with more resource "
18382
"intensive applications. Two common filters are <application>dkim-"
18383
"filter</application> and <application>python-policyd-spf</application>."
18384
msgstr ""
18385
18386
#: serverguide/C/mail.xml:1248(para)
18387
msgid ""
18388
"<application>Amavisd-new</application> is a wrapper program that can call "
18389
"any number of content filtering programs for spam detection, antivirus, etc."
18390
msgstr ""
18391
18392
#: serverguide/C/mail.xml:1254(para)
18393
msgid ""
18394
"<application>Spamassassin</application> uses a variety of mechanisms to "
18395
"filter email based on the message content."
18396
msgstr ""
18397
18398
#: serverguide/C/mail.xml:1259(para)
18399
msgid ""
18400
"<application>ClamAV</application> is an open source antivirus application."
18401
msgstr ""
18402
18403
#: serverguide/C/mail.xml:1264(para)
18404
msgid ""
18405
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18406
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18407
msgstr ""
18408
18409
#: serverguide/C/mail.xml:1270(para)
18410
msgid ""
18411
"<application>python-policyd-spf</application> enables Sender Policy "
18412
"Framework (SPF) checking with <application>Postfix</application>."
18413
msgstr ""
18414
18415
#: serverguide/C/mail.xml:1275(para)
18416
msgid "This is how the pieces fit together:"
18417
msgstr ""
18418
18419
#: serverguide/C/mail.xml:1280(para)
18420
msgid "An email message is accepted by <application>Postfix</application>."
18421
msgstr ""
18422
18423
#: serverguide/C/mail.xml:1285(para)
18424
msgid ""
18425
"The message is passed through any external filters <application>dkim-"
18426
"filter</application> and <application>python-policyd-spf</application> in "
18427
"this case."
18428
msgstr ""
18429
18430
#: serverguide/C/mail.xml:1291(para)
18431
msgid "<application>Amavisd-new</application> then processes the message."
18432
msgstr ""
18433
18434
#: serverguide/C/mail.xml:1296(para)
18435
msgid ""
18436
"<application>ClamAV</application> is used to scan the message. If the "
18437
"message contains a virus <application>Postfix</application> will reject the "
18438
"message."
18439
msgstr ""
18440
18441
#: serverguide/C/mail.xml:1302(para)
18442
msgid ""
18443
"Clean messages will then be analyzed by "
18444
"<application>Spamassassin</application> to find out if the message is spam. "
18445
"<application>Spamassassin</application> will then add X-Header lines "
18446
"allowing <application>Amavisd-new</application> to further manipulate the "
18447
"message."
18448
msgstr ""
18449
18450
#: serverguide/C/mail.xml:1309(para)
18451
msgid ""
18452
"For example, if a message has a Spam score of over fifty the message could "
18453
"be automatically dropped from the queue without the recipient ever having to "
18454
"be bothered. Another, way to handle flagged messages is to deliver them to "
18455
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18456
"see fit."
18457
msgstr ""
18458
18459
#: serverguide/C/mail.xml:1316(para)
18460
msgid ""
18461
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18462
"configuring Postfix."
18463
msgstr ""
18464
18465
#: serverguide/C/mail.xml:1319(para)
18466
msgid ""
18467
"To install the rest of the applications enter the following from a terminal "
18468
"prompt:"
18469
msgstr ""
18470
18471
#: serverguide/C/mail.xml:1323(command)
18472
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18473
msgstr ""
18474
18475
#: serverguide/C/mail.xml:1324(command)
18476
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18477
msgstr ""
18478
18479
#: serverguide/C/mail.xml:1326(para)
18480
msgid ""
18481
"There are some optional packages that integrate with "
18482
"<application>Spamassassin</application> for better spam detection:"
18483
msgstr ""
18484
18485
#: serverguide/C/mail.xml:1330(command)
18486
msgid "sudo apt-get install pyzor razor"
18487
msgstr ""
18488
18489
#: serverguide/C/mail.xml:1332(para)
18490
msgid ""
18491
"Along with the main filtering applications compression utilities are needed "
18492
"to process some email attachments:"
18493
msgstr ""
18494
18495
#: serverguide/C/mail.xml:1336(command)
18496
msgid ""
18497
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18498
msgstr ""
18499
18500
#: serverguide/C/mail.xml:1339(para)
18501
msgid ""
18502
"If some packages are not found, check that the "
18503
"<emphasis>multiverse</emphasis> repository is enabled in "
18504
"<filename>/etc/apt/sources.list</filename>"
18505
msgstr ""
18506
18507
#: serverguide/C/mail.xml:1340(para)
18508
msgid ""
18509
"If you make changes to the file, be sure to run <command>sudo apt-get "
18510
"update</command> before trying to install again."
18511
msgstr ""
18512
18513
#: serverguide/C/mail.xml:1345(para)
18514
msgid "Now configure everything to work together and filter email."
18515
msgstr ""
18516
18517
#: serverguide/C/mail.xml:1349(title)
18518
msgid "ClamAV"
18519
msgstr ""
18520
18521
#: serverguide/C/mail.xml:1350(para)
18522
msgid ""
18523
"The default behaviour of <application>ClamAV</application> will fit our "
18524
"needs. For more ClamAV configuration options, check the configuration files "
18525
"in <filename>/etc/clamav</filename>."
18526
msgstr ""
18527
18528
#: serverguide/C/mail.xml:1355(para)
18529
msgid ""
18530
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18531
"group in order for <application>Amavisd-new</application> to have the "
18532
"appropriate access to scan files:"
18533
msgstr ""
18534
18535
#: serverguide/C/mail.xml:1360(command)
18536
msgid "sudo adduser clamav amavis"
18537
msgstr ""
18538
18539
#: serverguide/C/mail.xml:1364(title)
18540
msgid "Spamassassin"
18541
msgstr ""
18542
18543
#: serverguide/C/mail.xml:1365(para)
18544
msgid ""
18545
"Spamassassin automatically detects optional components and will use them if "
18546
"they are present. This means that there is no need to configure "
18547
"<application>pyzor</application> and <application>razor</application>."
18548
msgstr ""
18549
18550
#: serverguide/C/mail.xml:1369(para)
18551
msgid ""
18552
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18553
"<application>Spamassassin</application> daemon. Change "
18554
"<emphasis>ENABLED=0</emphasis> to:"
18555
msgstr ""
18556
18557
#: serverguide/C/mail.xml:1373(programlisting)
18558
#, no-wrap
18559
msgid ""
18560
"\n"
18561
"ENABLED=1\n"
18562
msgstr ""
18563
18564
#: serverguide/C/mail.xml:1376(para)
18565
msgid "Now start the daemon:"
18566
msgstr ""
18567
18568
#: serverguide/C/mail.xml:1380(command)
18569
msgid "sudo /etc/init.d/spamassassin start"
18570
msgstr ""
18571
18572
#: serverguide/C/mail.xml:1384(title)
18573
msgid "Amavisd-new"
18574
msgstr ""
18575
18576
#: serverguide/C/mail.xml:1385(para)
18577
msgid ""
18578
"First activate spam and antivirus detection in <application>Amavisd-"
18579
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18580
"content_filter_mode</filename>:"
18581
msgstr ""
18582
18583
#: serverguide/C/mail.xml:1389(programlisting)
18584
#, no-wrap
18585
msgid ""
18586
"\n"
18587
"use strict;\n"
18588
"\n"
18589
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
18590
"# and to re-enable antivirus checking.\n"
18591
"\n"
18592
"#\n"
18593
"# Default antivirus checking mode\n"
18594
"# Uncomment the two lines below to enable it\n"
18595
"#\n"
18596
"\n"
18597
"@bypass_virus_checks_maps = (\n"
18598
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
18599
"$bypass_virus_checks_re);\n"
18600
"\n"
18601
"\n"
18602
"#\n"
18603
"# Default SPAM checking mode\n"
18604
"# Uncomment the two lines below to enable it\n"
18605
"#\n"
18606
"\n"
18607
"@bypass_spam_checks_maps = (\n"
18608
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
18609
"$bypass_spam_checks_re);\n"
18610
"\n"
18611
"1; # insure a defined return\n"
18612
msgstr ""
18613
18614
#: serverguide/C/mail.xml:1414(para)
18615
msgid ""
18616
"Bouncing spam can be a bad idea as the return address is often faked. "
18617
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
18618
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
18619
"D_BOUNCE, as follows:"
18620
msgstr ""
18621
18622
#: serverguide/C/mail.xml:1420(programlisting)
18623
#, no-wrap
18624
msgid ""
18625
"\n"
18626
"$final_spam_destiny = D_DISCARD;\n"
18627
msgstr ""
18628
18629
#: serverguide/C/mail.xml:1424(para)
18630
msgid ""
18631
"Additionally, you may want to adjust the following options to flag more "
18632
"messages as spam:"
18633
msgstr ""
18634
18635
#: serverguide/C/mail.xml:1428(programlisting)
18636
#, no-wrap
18637
msgid ""
18638
"\n"
18639
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
18640
"level\n"
18641
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
18642
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
18643
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
18644
msgstr ""
18645
18646
#: serverguide/C/mail.xml:1435(para)
18647
msgid ""
18648
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
18649
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
18650
"option. Also, if the server receives mail for multiple domains the "
18651
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
18652
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
18653
msgstr ""
18654
18655
#: serverguide/C/mail.xml:1442(programlisting)
18656
#, no-wrap
18657
msgid ""
18658
"\n"
18659
"$myhostname = 'mail.example.com';\n"
18660
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
18661
msgstr ""
18662
18663
#: serverguide/C/mail.xml:1447(para)
18664
msgid ""
18665
"After configuration <application>Amavisd-new</application> needs to be "
18666
"restarted:"
18667
msgstr ""
18668
18669
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
18670
msgid "sudo /etc/init.d/amavis restart"
18671
msgstr ""
18672
18673
#: serverguide/C/mail.xml:1454(title)
18674
msgid "DKIM Whitelist"
18675
msgstr ""
18676
18677
#: serverguide/C/mail.xml:1456(para)
18678
msgid ""
18679
"<application>Amavisd-new</application> can be configured to automatically "
18680
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
18681
"Keys. There are some pre-configured domains in the "
18682
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
18683
msgstr ""
18684
18685
#: serverguide/C/mail.xml:1462(para)
18686
msgid "There are multiple ways to configure the Whitelist for a domain:"
18687
msgstr ""
18688
18689
#: serverguide/C/mail.xml:1468(para)
18690
msgid ""
18691
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18692
"address from the \"example.com\" domain."
18693
msgstr ""
18694
18695
#: serverguide/C/mail.xml:1473(para)
18696
msgid ""
18697
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18698
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
18699
"have a valid signature."
18700
msgstr ""
18701
18702
#: serverguide/C/mail.xml:1479(para)
18703
msgid ""
18704
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
18705
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
18706
"role=\"italic\">example.com</emphasis> the parent domain."
18707
msgstr ""
18708
18709
#: serverguide/C/mail.xml:1485(para)
18710
msgid ""
18711
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
18712
"that have a valid signature from \"example.com\". This is usually used for "
18713
"discussion groups that sign thier messages."
18714
msgstr ""
18715
18716
#: serverguide/C/mail.xml:1492(para)
18717
msgid ""
18718
"A domain can also have multiple Whitelist configurations. After, editing the "
18719
"file restart <application>amaisd-new</application>:"
18720
msgstr ""
18721
18722
#: serverguide/C/mail.xml:1501(para)
18723
msgid ""
18724
"In this context, once a domain has been added to the Whitelist the message "
18725
"will not receive any anti-virus or spam filtering. This may or may not be "
18726
"the intended behavior you wish for a domain."
18727
msgstr ""
18728
18729
#: serverguide/C/mail.xml:1511(para)
18730
msgid ""
18731
"For <application>Postfix</application> integration, enter the following from "
18732
"a terminal prompt:"
18733
msgstr ""
18734
18735
#: serverguide/C/mail.xml:1515(command)
18736
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
18737
msgstr ""
18738
18739
#: serverguide/C/mail.xml:1517(para)
18740
msgid ""
18741
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
18742
"to the end of the file:"
18743
msgstr ""
18744
18745
#: serverguide/C/mail.xml:1520(programlisting)
18746
#, no-wrap
18747
msgid ""
18748
"\n"
18749
"smtp-amavis unix - - - - 2 smtp\n"
18750
" -o smtp_data_done_timeout=1200\n"
18751
" -o smtp_send_xforward_command=yes\n"
18752
" -o disable_dns_lookups=yes\n"
18753
" -o max_use=20\n"
18754
"\n"
18755
"127.0.0.1:10025 inet n - - - - smtpd\n"
18756
" -o content_filter=\n"
18757
" -o local_recipient_maps=\n"
18758
" -o relay_recipient_maps=\n"
18759
" -o smtpd_restriction_classes=\n"
18760
" -o smtpd_delay_reject=no\n"
18761
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
18762
" -o smtpd_helo_restrictions=\n"
18763
" -o smtpd_sender_restrictions=\n"
18764
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
18765
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
18766
" -o smtpd_end_of_data_restrictions=\n"
18767
" -o mynetworks=127.0.0.0/8\n"
18768
" -o smtpd_error_sleep_time=0\n"
18769
" -o smtpd_soft_error_limit=1001\n"
18770
" -o smtpd_hard_error_limit=1000\n"
18771
" -o smtpd_client_connection_count_limit=0\n"
18772
" -o smtpd_client_connection_rate_limit=0\n"
18773
" -o "
18774
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
18775
msgstr ""
18776
18777
#: serverguide/C/mail.xml:1547(para)
18778
msgid ""
18779
"Also add the following two lines immediately below the "
18780
"<emphasis>\"pickup\"</emphasis> transport service:"
18781
msgstr ""
18782
18783
#: serverguide/C/mail.xml:1550(programlisting)
18784
#, no-wrap
18785
msgid ""
18786
"\n"
18787
" -o content_filter=\n"
18788
" -o receive_override_options=no_header_body_checks\n"
18789
msgstr ""
18790
18791
#: serverguide/C/mail.xml:1554(para)
18792
msgid ""
18793
"This will prevent messages that are generated to report on spam from being "
18794
"classified as spam."
18795
msgstr ""
18796
18797
#: serverguide/C/mail.xml:1557(para)
18798
msgid "Now restart <application>Postfix</application>:"
18799
msgstr ""
18800
18801
#: serverguide/C/mail.xml:1563(para)
18802
msgid "Content filtering with spam and virus detection is now enabled."
18803
msgstr ""
18804
18805
#: serverguide/C/mail.xml:1570(para)
18806
msgid ""
18807
"First, test that the <application>Amavisd-new</application> SMTP is "
18808
"listening:"
18809
msgstr ""
18810
18811
#: serverguide/C/mail.xml:1573(programlisting)
18812
#, no-wrap
18813
msgid ""
18814
"\n"
18815
"telnet localhost 10024\n"
18816
"Trying 127.0.0.1...\n"
18817
"Connected to localhost.\n"
18818
"Escape character is '^]'.\n"
18819
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
18820
"^]\n"
18821
msgstr ""
18822
18823
#: serverguide/C/mail.xml:1581(para)
18824
msgid ""
18825
"In the Header of messages that go through the content filter you should see:"
18826
msgstr ""
18827
18828
#: serverguide/C/mail.xml:1584(programlisting)
18829
#, no-wrap
18830
msgid ""
18831
"\n"
18832
"X-Spam-Level: \n"
18833
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
18834
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
18835
"BAYES_00\n"
18836
"X-Spam-Level: \n"
18837
msgstr ""
18838
18839
#: serverguide/C/mail.xml:1591(para)
18840
msgid ""
18841
"Your output will vary, but the important thing is that there are <emphasis>X-"
18842
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
18843
msgstr ""
18844
18845
#: serverguide/C/mail.xml:1599(para)
18846
msgid ""
18847
"The best way to figure out why something is going wrong is to check the log "
18848
"files."
18849
msgstr ""
18850
18851
#: serverguide/C/mail.xml:1604(para)
18852
msgid ""
18853
"For instructions on <application>Postfix</application> logging see the <xref "
18854
"linkend=\"postfix-troubleshooting\"/> section."
18855
msgstr ""
18856
18857
#: serverguide/C/mail.xml:1610(para)
18858
msgid ""
18859
"<application>Amavisd-new</application> uses "
18860
"<application>Syslog</application> to send messages to "
18861
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
18862
"increased by adding the <emphasis>$log_level</emphasis> option to "
18863
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
18864
"1 to 5."
18865
msgstr ""
18866
18867
#: serverguide/C/mail.xml:1615(programlisting)
18868
#, no-wrap
18869
msgid ""
18870
"\n"
18871
"$log_level = 2;\n"
18872
msgstr ""
18873
18874
#: serverguide/C/mail.xml:1619(para)
18875
msgid ""
18876
"When the <application>Amavisd-new</application> log output is increased "
18877
"<application>Spamassassin</application> log output is also increased."
18878
msgstr ""
18879
18880
#: serverguide/C/mail.xml:1626(para)
18881
msgid ""
18882
"The <application>ClamAV</application> log level can be increased by editing "
18883
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
18884
msgstr ""
18885
18886
#: serverguide/C/mail.xml:1630(programlisting)
18887
#, no-wrap
18888
msgid ""
18889
"\n"
18890
"LogVerbose true\n"
18891
msgstr ""
18892
18893
#: serverguide/C/mail.xml:1633(para)
18894
msgid ""
18895
"By default <application>ClamAV</application> will send log messages to "
18896
"<filename>/var/log/clamav/clamav.log</filename>."
18897
msgstr ""
18898
18899
#: serverguide/C/mail.xml:1639(para)
18900
msgid ""
18901
"After changing an applications log settings remember to restart the service "
18902
"for the new settings to take affect. Also, once the issue you are "
18903
"troubleshooting is resolved it is a good idea to change the log settings "
18904
"back to normal."
18905
msgstr ""
18906
18907
#: serverguide/C/mail.xml:1647(para)
18908
msgid "For more information on filtering mail see the following links:"
18909
msgstr ""
18910
18911
#: serverguide/C/mail.xml:1653(ulink)
18912
msgid "Amavisd-new Documentation"
18913
msgstr ""
18914
18915
#: serverguide/C/mail.xml:1657(para)
18916
msgid ""
18917
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
18918
"Documentation</ulink> and <ulink "
18919
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
18920
msgstr ""
18921
18922
#: serverguide/C/mail.xml:1664(ulink)
18923
msgid "Spamassassin Wiki"
18924
msgstr ""
18925
18926
#: serverguide/C/mail.xml:1669(ulink)
18927
msgid "Pyzor Homepage"
18928
msgstr ""
18929
18930
#: serverguide/C/mail.xml:1674(ulink)
18931
msgid "Razor Homepage"
18932
msgstr ""
18933
18934
#: serverguide/C/mail.xml:1679(ulink)
18935
msgid "DKIM.org"
18936
msgstr ""
18937
18938
#: serverguide/C/mail.xml:1684(ulink)
18939
msgid "Postfix Amavis New"
18940
msgstr ""
18941
18942
#: serverguide/C/mail.xml:1688(para)
18943
msgid ""
18944
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
18945
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
18946
msgstr ""
18947
18948
#: serverguide/C/lamp-applications.xml:13(title)
18949
msgid "LAMP Applications"
18950
msgstr ""
18951
18952
#: serverguide/C/lamp-applications.xml:19(para)
18953
msgid ""
18954
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
18955
"Ubuntu servers. There is a plethora of Open Source applications written "
18956
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
18957
"Content Management Systems, and Management Software such as phpMyAdmin."
18958
msgstr ""
18959
18960
#: serverguide/C/lamp-applications.xml:26(para)
18961
msgid ""
18962
"One advantage of LAMP is the substantial flexibility for different database, "
18963
"web server, and scripting languages. Popular substitutes for MySQL include "
18964
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
18965
"instead of PHP."
18966
msgstr ""
18967
18968
#: serverguide/C/lamp-applications.xml:32(para)
18969
msgid ""
18970
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
18971
"is:"
18972
msgstr ""
18973
18974
#: serverguide/C/lamp-applications.xml:38(para)
18975
msgid "Download an archive containing the application source files."
18976
msgstr ""
18977
18978
#: serverguide/C/lamp-applications.xml:43(para)
18979
msgid ""
18980
"Unpack the archive, usually in a directory accessible to a web server."
18981
msgstr ""
18982
18983
#: serverguide/C/lamp-applications.xml:48(para)
18984
msgid ""
18985
"Depending on where the source was extracted, configure a web browser to "
18986
"serve the files."
18987
msgstr ""
18988
18989
#: serverguide/C/lamp-applications.xml:53(para)
18990
msgid "Configure the application to connect to the database."
18991
msgstr ""
18992
18993
#: serverguide/C/lamp-applications.xml:58(para)
18994
msgid ""
18995
"Run a script, or browse to a page of the application, to install the "
18996
"database needed by the application."
18997
msgstr ""
18998
18999
#: serverguide/C/lamp-applications.xml:63(para)
19000
msgid ""
19001
"Once the steps above, or similar steps, are completed you are ready to begin "
19002
"using the application."
19003
msgstr ""
19004
19005
#: serverguide/C/lamp-applications.xml:69(para)
19006
msgid ""
19007
"A disadvantage of using this approach is that the application files are not "
19008
"placed in the file system in a standard way, which can cause confusion as to "
19009
"where the application is installed. Another larger disadvantage is updating "
19010
"the application. When a new version is released, the same process used to "
19011
"install the application is needed to apply updates."
19012
msgstr ""
19013
19014
#: serverguide/C/lamp-applications.xml:76(para)
19015
msgid ""
19016
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19017
"packaged for Ubuntu, and are available for installation in the same way as "
19018
"non-LAMP applications. Depending on the application some extra configuration "
19019
"and setup steps may be needed, however."
19020
msgstr ""
19021
19022
#: serverguide/C/lamp-applications.xml:82(para)
19023
msgid ""
19024
"This section covers howto install and configure the Wiki applications "
19025
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19026
"and the MySQL management application <application>phpMyAdmin</application>."
19027
msgstr ""
19028
19029
#: serverguide/C/lamp-applications.xml:88(para)
19030
msgid ""
19031
"A Wiki is a website that allows the visitors to easily add, remove and "
19032
"modify available content easily. The ease of interaction and operation makes "
19033
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19034
"also referred to the collaborative software."
19035
msgstr ""
19036
19037
#: serverguide/C/lamp-applications.xml:100(title)
19038
msgid "Moin Moin"
19039
msgstr ""
19040
19041
#: serverguide/C/lamp-applications.xml:102(para)
19042
msgid ""
19043
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19044
"engine, and licensed under the GNU GPL."
19045
msgstr ""
19046
19047
#: serverguide/C/lamp-applications.xml:110(para)
19048
msgid ""
19049
"To install <application>MoinMoin</application>, run the following command in "
19050
"the command prompt:"
19051
msgstr ""
19052
19053
#: serverguide/C/lamp-applications.xml:116(command)
19054
msgid "sudo apt-get install python-moinmoin"
19055
msgstr ""
19056
19057
#: serverguide/C/lamp-applications.xml:119(para)
19058
msgid ""
19059
"You should also install <application>apache2</application> web server. For "
19060
"installing <application>apache2</application> web server, please refer to "
19061
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19062
"linkend=\"httpd\"/> section."
19063
msgstr ""
19064
19065
#: serverguide/C/lamp-applications.xml:130(para)
19066
msgid ""
19067
"For configuring your first Wiki application, please run the following set of "
19068
"commands. Let us assume that you are creating a Wiki named "
19069
"<emphasis>mywiki</emphasis>:"
19070
msgstr ""
19071
19072
#: serverguide/C/lamp-applications.xml:137(command)
19073
msgid "cd /usr/share/moin"
19074
msgstr ""
19075
19076
#: serverguide/C/lamp-applications.xml:138(command)
19077
msgid "sudo mkdir mywiki"
19078
msgstr ""
19079
19080
#: serverguide/C/lamp-applications.xml:139(command)
19081
msgid "sudo cp -R data mywiki"
19082
msgstr ""
19083
19084
#: serverguide/C/lamp-applications.xml:140(command)
19085
msgid "sudo cp -R underlay mywiki"
19086
msgstr ""
19087
19088
#: serverguide/C/lamp-applications.xml:141(command)
19089
msgid "sudo cp server/moin.cgi mywiki"
19090
msgstr ""
19091
19092
#: serverguide/C/lamp-applications.xml:142(command)
19093
msgid "sudo chown -R www-data.www-data mywiki"
19094
msgstr ""
19095
19096
#: serverguide/C/lamp-applications.xml:143(command)
19097
msgid "sudo chmod -R ug+rwX mywiki"
19098
msgstr ""
19099
19100
#: serverguide/C/lamp-applications.xml:144(command)
19101
msgid "sudo chmod -R o-rwx mywiki"
19102
msgstr ""
19103
19104
#: serverguide/C/lamp-applications.xml:147(para)
19105
msgid ""
19106
"Now you should configure <application>MoinMoin</application> to find your "
19107
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19108
"<application>MoinMoin</application>, open "
19109
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19110
msgstr ""
19111
19112
#: serverguide/C/lamp-applications.xml:155(programlisting)
19113
#, no-wrap
19114
msgid "data_dir = '/org/mywiki/data'"
19115
msgstr ""
19116
19117
#: serverguide/C/lamp-applications.xml:157(para)
19118
msgid "to"
19119
msgstr ""
19120
19121
#: serverguide/C/lamp-applications.xml:161(programlisting)
19122
#, no-wrap
19123
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19124
msgstr ""
19125
19126
#: serverguide/C/lamp-applications.xml:163(para)
19127
msgid ""
19128
"Also, below the <emphasis>data_dir</emphasis> option add the "
19129
"<emphasis>data_underlay_dir</emphasis>:"
19130
msgstr ""
19131
19132
#: serverguide/C/lamp-applications.xml:167(programlisting)
19133
#, no-wrap
19134
msgid ""
19135
"\n"
19136
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19137
msgstr ""
19138
19139
#: serverguide/C/lamp-applications.xml:172(para)
19140
msgid ""
19141
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19142
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19143
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19144
"change."
19145
msgstr ""
19146
19147
#: serverguide/C/lamp-applications.xml:181(para)
19148
msgid ""
19149
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19150
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19151
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19152
"<quote>(\"mywiki\", r\".*\")</quote>."
19153
msgstr ""
19154
19155
#: serverguide/C/lamp-applications.xml:189(para)
19156
msgid ""
19157
"Once you have configured <application>MoinMoin</application> to find your "
19158
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19159
"<application>apache2</application> and make it ready for your Wiki "
19160
"application."
19161
msgstr ""
19162
19163
#: serverguide/C/lamp-applications.xml:196(para)
19164
msgid ""
19165
"You should add the following lines in <filename>/etc/apache2/sites-"
19166
"available/default</filename> file inside the <quote><VirtualHost "
19167
"*></quote> tag:"
19168
msgstr ""
19169
19170
#: serverguide/C/lamp-applications.xml:202(programlisting)
19171
#, no-wrap
19172
msgid ""
19173
"\n"
19174
"### moin\n"
19175
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19176
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19177
" <Directory /usr/share/moin/htdocs>\n"
19178
" Order allow,deny\n"
19179
" allow from all\n"
19180
" </Directory>\n"
19181
"### end moin\n"
19182
msgstr ""
19183
19184
#: serverguide/C/lamp-applications.xml:214(para)
19185
msgid ""
19186
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19187
"<emphasis>alias</emphasis> line above, to the "
19188
"<application>moinmoin</application> version installed."
19189
msgstr ""
19190
19191
#: serverguide/C/lamp-applications.xml:220(para)
19192
msgid ""
19193
"Once you configure the <application>apache2</application> web server and "
19194
"make it ready for your Wiki application, you should restart it. You can run "
19195
"the following command to restart the <application>apache2</application> web "
19196
"server:"
19197
msgstr ""
19198
19199
#: serverguide/C/lamp-applications.xml:233(title)
19200
msgid "Verification"
19201
msgstr ""
19202
19203
#: serverguide/C/lamp-applications.xml:235(para)
19204
msgid ""
19205
"You can verify the Wiki application and see if it works by pointing your web "
19206
"browser to the following URL:"
19207
msgstr ""
19208
19209
#: serverguide/C/lamp-applications.xml:239(programlisting)
19210
#, no-wrap
19211
msgid ""
19212
"\n"
19213
"http://localhost/mywiki\n"
19214
msgstr ""
19215
19216
#: serverguide/C/lamp-applications.xml:243(para)
19217
msgid ""
19218
"You can also run the test command by pointing your web browser to the "
19219
"following URL:"
19220
msgstr ""
19221
19222
#: serverguide/C/lamp-applications.xml:248(programlisting)
19223
#, no-wrap
19224
msgid ""
19225
"\n"
19226
"http://localhost/mywiki?action=test\n"
19227
msgstr ""
19228
19229
#: serverguide/C/lamp-applications.xml:252(para)
19230
msgid ""
19231
"For more details, please refer to the <ulink "
19232
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19233
msgstr ""
19234
19235
#: serverguide/C/lamp-applications.xml:263(para)
19236
msgid ""
19237
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19238
"Wiki</ulink>."
19239
msgstr ""
19240
19241
#: serverguide/C/lamp-applications.xml:268(para)
19242
msgid ""
19243
"Also, see the <ulink "
19244
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19245
"MoinMoin</ulink> page."
19246
msgstr ""
19247
19248
#: serverguide/C/lamp-applications.xml:277(title)
19249
msgid "MediaWiki"
19250
msgstr ""
19251
19252
#: serverguide/C/lamp-applications.xml:279(para)
19253
msgid ""
19254
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19255
"either use <application>MySQL</application> or "
19256
"<application>PostgreSQL</application> Database Management System."
19257
msgstr ""
19258
19259
#: serverguide/C/lamp-applications.xml:289(para)
19260
msgid ""
19261
"Before installing <application>MediaWiki</application> you should also "
19262
"install <application>Apache2</application>, the "
19263
"<application>PHP5</application> scripting language and Database a Management "
19264
"System. <application>MySQL</application> or "
19265
"<application>PostgreSQL</application> are the most common, choose one "
19266
"depending on your need. Please refer to those sections in this manual for "
19267
"installation instructions."
19268
msgstr ""
19269
19270
#: serverguide/C/lamp-applications.xml:297(para)
19271
msgid ""
19272
"To install <application>MediaWiki</application>, run the following command "
19273
"in the command prompt:"
19274
msgstr ""
19275
19276
#: serverguide/C/lamp-applications.xml:303(command)
19277
msgid "sudo apt-get install mediawiki php5-gd"
19278
msgstr ""
19279
19280
#: serverguide/C/lamp-applications.xml:306(para)
19281
msgid ""
19282
"For additional <application>MediaWiki</application> functionality see the "
19283
"<application>mediawiki-extensions</application> package."
19284
msgstr ""
19285
19286
#: serverguide/C/lamp-applications.xml:316(para)
19287
msgid ""
19288
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19289
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19290
"directory. You should uncomment the following line in this file to access "
19291
"MediaWiki application."
19292
msgstr ""
19293
19294
#: serverguide/C/lamp-applications.xml:324(screen)
19295
#, no-wrap
19296
msgid ""
19297
"\n"
19298
"# Alias /mediawiki /var/lib/mediawiki\n"
19299
msgstr ""
19300
19301
#: serverguide/C/lamp-applications.xml:328(para)
19302
msgid ""
19303
"After you uncomment the above line, restart Apache server and access "
19304
"MediaWiki using the following url:"
19305
msgstr ""
19306
19307
#: serverguide/C/lamp-applications.xml:333(programlisting)
19308
#, no-wrap
19309
msgid ""
19310
"\n"
19311
"http://localhost/mediawiki/config/index.php\n"
19312
msgstr ""
19313
19314
#: serverguide/C/lamp-applications.xml:338(para)
19315
msgid ""
19316
"Please read the <quote>Checking environment...</quote> section in this page. "
19317
"You should be able to fix many issues by carefully reading this section."
19318
msgstr ""
19319
19320
#: serverguide/C/lamp-applications.xml:345(para)
19321
msgid ""
19322
"Once the configuration is complete, you should copy the "
19323
"<filename>LocalSettings.php</filename> file to "
19324
"<filename>/etc/mediawiki</filename> directory:"
19325
msgstr ""
19326
19327
#: serverguide/C/lamp-applications.xml:352(command)
19328
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19329
msgstr ""
19330
19331
#: serverguide/C/lamp-applications.xml:355(para)
19332
msgid ""
19333
"You may also want to edit "
19334
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19335
msgstr ""
19336
19337
#: serverguide/C/lamp-applications.xml:360(programlisting)
19338
#, no-wrap
19339
msgid ""
19340
"\n"
19341
"ini_set( 'memory_limit', '64M' );\n"
19342
msgstr ""
19343
19344
#: serverguide/C/lamp-applications.xml:367(title)
19345
msgid "Extensions"
19346
msgstr ""
19347
19348
#: serverguide/C/lamp-applications.xml:368(para)
19349
msgid ""
19350
"The extensions add new features and enhancements for the MediaWiki "
19351
"application. The extensions give wiki administrators and end users the "
19352
"ability to customize MediaWiki to their requirements."
19353
msgstr ""
19354
19355
#: serverguide/C/lamp-applications.xml:374(para)
19356
msgid ""
19357
"You can download MediaWiki extensions as an archive file or checkout from "
19358
"the Subversion repository. You should copy it to "
19359
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19360
"also add the following line at the end of file: "
19361
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19362
msgstr ""
19363
19364
#: serverguide/C/lamp-applications.xml:382(programlisting)
19365
#, no-wrap
19366
msgid ""
19367
"\n"
19368
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19369
msgstr ""
19370
19371
#: serverguide/C/lamp-applications.xml:392(para)
19372
msgid ""
19373
"For more details, please refer to the <ulink "
19374
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19375
msgstr ""
19376
19377
#: serverguide/C/lamp-applications.xml:398(para)
19378
msgid ""
19379
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19380
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19381
"new MediaWiki administrators."
19382
msgstr ""
19383
19384
#: serverguide/C/lamp-applications.xml:404(para)
19385
msgid ""
19386
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19387
"Wiki MediaWiki</ulink> page is a good resource."
19388
msgstr ""
19389
19390
#: serverguide/C/lamp-applications.xml:414(title)
19391
msgid "phpMyAdmin"
19392
msgstr ""
19393
19394
#: serverguide/C/lamp-applications.xml:416(para)
19395
msgid ""
19396
"<application>phpMyAdmin</application> is a LAMP application specifically "
19397
"written for administering <application>MySQL</application> servers. Written "
19398
"in <application>PHP</application>, and accessed through a web browser, "
19399
"phpMyAdmin provides a graphical interface for database administration tasks."
19400
msgstr ""
19401
19402
#: serverguide/C/lamp-applications.xml:425(para)
19403
msgid ""
19404
"Before installing <application>phpMyAdmin</application> you will need access "
19405
"to a <application>MySQL</application> database either on the same host as "
19406
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19407
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19408
"enter:"
19409
msgstr ""
19410
19411
#: serverguide/C/lamp-applications.xml:432(command)
19412
msgid "sudo apt-get install phpmyadmin"
19413
msgstr ""
19414
19415
#: serverguide/C/lamp-applications.xml:435(para)
19416
msgid ""
19417
"At the prompt choose which web server to be configured for "
19418
"<application>phpMyAdmin</application>. The rest of this section will use "
19419
"<application>Apache2</application> for the web server."
19420
msgstr ""
19421
19422
#: serverguide/C/lamp-applications.xml:440(para)
19423
msgid ""
19424
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19425
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19426
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19427
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19428
"user if you any setup, and enter the <application>MySQL</application> user's "
19429
"password."
19430
msgstr ""
19431
19432
#: serverguide/C/lamp-applications.xml:447(para)
19433
msgid ""
19434
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19435
"needed, create users, create/destroy databases and tables, etc."
19436
msgstr ""
19437
19438
#: serverguide/C/lamp-applications.xml:455(para)
19439
msgid ""
19440
"The configuration files for <application>phpMyAdmin</application> are "
19441
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19442
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19443
"configuration options that apply globally to "
19444
"<application>phpMyAdmin</application>."
19445
msgstr ""
19446
19447
#: serverguide/C/lamp-applications.xml:461(para)
19448
msgid ""
19449
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19450
"hosted on another server, adjust the following in "
19451
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19452
msgstr ""
19453
19454
#: serverguide/C/lamp-applications.xml:466(programlisting)
19455
#, no-wrap
19456
msgid ""
19457
"\n"
19458
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19459
msgstr ""
19460
19461
#: serverguide/C/lamp-applications.xml:471(para)
19462
msgid ""
19463
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19464
"remote database server name or IP address. Also, be sure that the "
19465
"<application>phpMyAdmin</application> host has permissions to access the "
19466
"remote database."
19467
msgstr ""
19468
19469
#: serverguide/C/lamp-applications.xml:477(para)
19470
msgid ""
19471
"Once configured, log out of <application>phpMyAdmin</application> and back "
19472
"in, and you should be accessing the new server."
19473
msgstr ""
19474
19475
#: serverguide/C/lamp-applications.xml:481(para)
19476
msgid ""
19477
"The <filename>config.header.inc.php</filename> and "
19478
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19479
"header and footer to <application>phpMyAdmin</application>."
19480
msgstr ""
19481
19482
#: serverguide/C/lamp-applications.xml:486(para)
19483
msgid ""
19484
"Another important configuration file is "
19485
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19486
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19487
"configure <application>Apache2</application> to serve the "
19488
"<application>phpMyAdmin</application> site. The file contains directives for "
19489
"loading <application>PHP</application>, directory permissions, etc. For more "
19490
"information on configuring <application>Apache2</application> see <xref "
19491
"linkend=\"httpd\"/>."
19492
msgstr ""
19493
19494
#: serverguide/C/lamp-applications.xml:500(para)
19495
msgid ""
19496
"The <application>phpMyAdmin</application> documentation comes installed with "
19497
"the package and can be accessed from the <emphasis>phpMyAdmin "
19498
"Documentation</emphasis> link (a question mark with a box around it) under "
19499
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19500
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19501
msgstr ""
19502
19503
#: serverguide/C/lamp-applications.xml:507(para)
19504
msgid ""
19505
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19506
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19507
msgstr ""
19508
19509
#: serverguide/C/lamp-applications.xml:512(para)
19510
msgid ""
19511
"A third resource is the <ulink "
19512
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19513
"Wiki</ulink> page."
19514
msgstr ""
19515
19516
#: serverguide/C/introduction.xml:14(para)
19517
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19518
msgstr ""
19519
19520
#: serverguide/C/introduction.xml:15(para)
19521
msgid ""
19522
"Here you can find information on how to install and configure various server "
19523
"applications. It is a step-by-step, task-oriented guide for configuring and "
19524
"customizing your system."
19525
msgstr ""
19526
19527
#: serverguide/C/introduction.xml:19(para)
19528
msgid ""
19529
"This guide assumes you have a basic understanding of your Ubuntu system. "
19530
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19531
"but if you need detailed instructions installing Ubuntu please refer to the "
19532
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19533
"Installation Guide</ulink>."
19534
msgstr ""
19535
19536
#: serverguide/C/introduction.xml:25(para)
19537
msgid ""
19538
"A HTML version of the manual is available online at <ulink "
19539
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19540
"HTML files are also available in the <application>ubuntu-"
19541
"serverguide</application> package. See <xref linkend=\"package-"
19542
"management\"/> for details on installing packages."
19543
msgstr ""
19544
19545
#: serverguide/C/introduction.xml:32(para)
19546
msgid ""
19547
"If you choose to install the <application>ubuntu-serverguide</application> "
19548
"you can view this document from a console by:"
19549
msgstr ""
19550
19551
#: serverguide/C/introduction.xml:36(command)
19552
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19553
msgstr ""
19554
19555
#: serverguide/C/introduction.xml:39(para)
19556
msgid ""
19557
"If you are using a localized version of Ubuntu, replace "
19558
"<emphasis>C</emphasis> with your language localization (e.g. "
19559
"<emphasis>en_GB</emphasis>)."
19560
msgstr ""
19561
19562
#: serverguide/C/introduction.xml:53(title)
19563
msgid "Support"
19564
msgstr ""
19565
19566
#: serverguide/C/introduction.xml:55(para)
19567
msgid ""
19568
"There are a couple of different ways that Ubuntu Server Edition is "
19569
"supported, commercial support and community support. The main commercial "
19570
"support (and development funding) is available from Canonical Ltd. They "
19571
"supply reasonably priced support contracts on a per desktop or per server "
19572
"basis. For more information see the <ulink "
19573
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19574
"page."
19575
msgstr ""
19576
19577
#: serverguide/C/introduction.xml:62(para)
19578
msgid ""
19579
"Community support is also provided by dedicated individuals, and companies, "
19580
"that wish to make Ubuntu the best distribution possible. Support is provided "
19581
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19582
"large amount of information available can be overwhelming, but a good search "
19583
"engine query can usually provide an answer to your questions. See the <ulink "
19584
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19585
"information."
19586
msgstr ""
19587
19588
#: serverguide/C/installation.xml:14(para)
19589
msgid ""
19590
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
19591
"Edition. For more detailed instructions, please refer to the <ulink "
19592
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19593
"Installation Guide</ulink>."
19594
msgstr ""
19595
19596
#: serverguide/C/installation.xml:19(title)
19597
msgid "Preparing to Install"
19598
msgstr ""
19599
19600
#: serverguide/C/installation.xml:20(para)
19601
msgid ""
19602
"This section explains various aspects to consider before starting the "
19603
"installation."
19604
msgstr ""
19605
19606
#: serverguide/C/installation.xml:24(title)
19607
msgid "System Requirements"
19608
msgstr ""
19609
19610
#: serverguide/C/installation.xml:25(para)
19611
msgid ""
19612
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
19613
"x86 and AMD64. The table below lists recommended hardware specifications. "
19614
"Depending on your needs, you might manage with less than this. However, most "
19615
"users risk being frustrated if they ignore these suggestions."
19616
msgstr ""
19617
19618
#: serverguide/C/installation.xml:27(title)
19619
msgid "Recommended Minimum Requirements"
19620
msgstr ""
19621
19622
#: serverguide/C/installation.xml:35(para)
19623
msgid "Install Type"
19624
msgstr ""
19625
19626
#: serverguide/C/installation.xml:36(para)
19627
msgid "RAM"
19628
msgstr ""
19629
19630
#: serverguide/C/installation.xml:37(para)
19631
msgid "Hard Drive Space"
19632
msgstr ""
19633
19634
#: serverguide/C/installation.xml:40(para)
19635
msgid "Base System"
19636
msgstr ""
19637
19638
#: serverguide/C/installation.xml:41(para)
19639
msgid "All Tasks Installed"
19640
msgstr ""
19641
19642
#: serverguide/C/installation.xml:46(para)
19643
msgid "Server"
19644
msgstr "Server"
19645
19646
#: serverguide/C/installation.xml:47(para)
19647
msgid "128 megabytes"
19648
msgstr ""
19649
19650
#: serverguide/C/installation.xml:48(para)
19651
msgid "500 megabytes"
19652
msgstr ""
19653
19654
#: serverguide/C/installation.xml:49(para)
19655
msgid "1 gigabyte"
19656
msgstr ""
19657
19658
#: serverguide/C/installation.xml:54(para)
19659
msgid ""
19660
"The Server Edition provides a common base for all sorts of server "
19661
"applications. It is a minimalist design providing a platform for the desired "
19662
"services, such as file/print services, web hosting, email hosting, etc."
19663
msgstr ""
19664
19665
#: serverguide/C/installation.xml:60(para)
19666
msgid ""
19667
"The requirements for UEC are slightly different for Front End requirements "
19668
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
19669
"requirements see <xref linkend=\"uec-node-requirements\"/>."
19670
msgstr ""
19671
19672
#: serverguide/C/installation.xml:68(title)
19673
msgid "Server and Desktop Differences"
19674
msgstr ""
19675
19676
#: serverguide/C/installation.xml:69(para)
19677
msgid ""
19678
"There are a few differences between the <emphasis>Ubuntu Server "
19679
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
19680
"should be noted that both editions use the same "
19681
"<application>apt</application> repositories. Making it just as easy to "
19682
"install a <emphasis role=\"italic\">server</emphasis> application on the "
19683
"Desktop Edition as it is on the Server Edition."
19684
msgstr ""
19685
19686
#: serverguide/C/installation.xml:75(para)
19687
msgid ""
19688
"The differences between the two editions are the lack of an X window "
19689
"environment in the Server Edition, the installation process, and different "
19690
"Kernel options."
19691
msgstr ""
19692
19693
#: serverguide/C/installation.xml:82(title)
19694
msgid "Kernel Differences:"
19695
msgstr ""
19696
19697
#: serverguide/C/installation.xml:85(para)
19698
msgid ""
19699
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
19700
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
19701
"Edition."
19702
msgstr ""
19703
19704
#: serverguide/C/installation.xml:91(para)
19705
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
19706
msgstr ""
19707
19708
#: serverguide/C/installation.xml:96(para)
19709
msgid ""
19710
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
19711
"Desktop Edition."
19712
msgstr ""
19713
19714
#: serverguide/C/installation.xml:102(para)
19715
msgid ""
19716
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
19717
"limited by memory addressing space."
19718
msgstr ""
19719
19720
#: serverguide/C/installation.xml:107(para)
19721
msgid ""
19722
"To see all kernel configuration options you can look through "
19723
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
19724
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
19725
"great resource on the options available."
19726
msgstr ""
19727
19728
#: serverguide/C/installation.xml:116(title)
19729
msgid "Backing Up"
19730
msgstr ""
19731
19732
#: serverguide/C/installation.xml:119(para)
19733
msgid ""
19734
"Before installing <application>Ubuntu Server Edition</application> you "
19735
"should make sure all data on the system is backed up. See <xref "
19736
"linkend=\"backups\"/> for backup options."
19737
msgstr ""
19738
19739
#: serverguide/C/installation.xml:123(para)
19740
msgid ""
19741
"If this is not the first time an operating system has been installed on your "
19742
"computer, it is likely you will need to re-partition your disk to make room "
19743
"for Ubuntu."
19744
msgstr ""
19745
19746
#: serverguide/C/installation.xml:127(para)
19747
msgid ""
19748
"Any time you partition your disk, you should be prepared to lose everything "
19749
"on the disk should you make a mistake or something goes wrong during "
19750
"partitioning. The programs used in installation are quite reliable, most "
19751
"have seen years of use, but they also perform destructive actions."
19752
msgstr ""
19753
19754
#: serverguide/C/installation.xml:139(title)
19755
msgid "Installing from CD"
19756
msgstr ""
19757
19758
#: serverguide/C/installation.xml:140(para)
19759
msgid ""
19760
"The basic steps to install Ubuntu Server Edition from CD are the same for "
19761
"installing any operating system from CD. Unlike the <emphasis>Desktop "
19762
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
19763
"a graphical installation program. Instead the Server Edition uses a console "
19764
"menu based process."
19765
msgstr ""
19766
19767
#: serverguide/C/installation.xml:147(para)
19768
msgid ""
19769
"First, download and burn the appropriate ISO file from the <ulink "
19770
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
19771
msgstr ""
19772
19773
#: serverguide/C/installation.xml:153(para)
19774
msgid "Boot the system from the CD-ROM drive."
19775
msgstr ""
19776
19777
#: serverguide/C/installation.xml:158(para)
19778
msgid ""
19779
"At the boot prompt you will be asked to select the language. Afterwards the "
19780
"installation process begins by asking for your keyboard layout."
19781
msgstr ""
19782
19783
#: serverguide/C/installation.xml:164(para)
19784
msgid ""
19785
"From the main boot menu there are some additional options to install Ubuntu "
19786
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
19787
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
19788
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
19789
"will cover the basic Ubuntu Server install."
19790
msgstr ""
19791
19792
#: serverguide/C/installation.xml:172(para)
19793
msgid ""
19794
"The installer then discovers your hardware configuration, and configures the "
19795
"network settings using DHCP. If you do not wish to use DHCP at the next "
19796
"screen choose \"Go Back\", and you have the option to \"Configure the "
19797
"network manually\"."
19798
msgstr ""
19799
19800
#: serverguide/C/installation.xml:179(para)
19801
msgid "Next, the installer asks for the system's hostname and Time Zone."
19802
msgstr ""
19803
19804
#: serverguide/C/installation.xml:184(para)
19805
msgid ""
19806
"You can then choose from several options to configure the hard drive layout. "
19807
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
19808
msgstr ""
19809
19810
#: serverguide/C/installation.xml:190(para)
19811
msgid "The Ubuntu base system is then installed."
19812
msgstr ""
19813
19814
#: serverguide/C/installation.xml:195(para)
19815
msgid ""
19816
"A new user is setup, this user will have <emphasis>root</emphasis> access "
19817
"through the <application>sudo</application> utility."
19818
msgstr ""
19819
19820
#: serverguide/C/installation.xml:201(para)
19821
msgid ""
19822
"After the user is setup, you will be asked to encrypt your <filename "
19823
"role=\"directory\">home</filename> directory."
19824
msgstr ""
19825
19826
#: serverguide/C/installation.xml:207(para)
19827
msgid ""
19828
"The next step in the installation process is to decide how you want to "
19829
"update the system. There are three options:"
19830
msgstr ""
19831
19832
#: serverguide/C/installation.xml:213(para)
19833
msgid ""
19834
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
19835
"log into the machine and manually install updates."
19836
msgstr ""
19837
19838
#: serverguide/C/installation.xml:219(para)
19839
msgid ""
19840
"<emphasis>Install security updates Automatically</emphasis>: will install "
19841
"the <application>unattended-upgrades</application> package, which will "
19842
"install security updates without the intervention of an administrator. For "
19843
"more details see <xref linkend=\"automatic-updates\"/>."
19844
msgstr ""
19845
19846
#: serverguide/C/installation.xml:226(para)
19847
msgid ""
19848
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
19849
"service provided by Canonical to help manage your Ubuntu machines. See the "
19850
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
19851
"site for details."
19852
msgstr ""
19853
19854
#: serverguide/C/installation.xml:235(para)
19855
msgid ""
19856
"You now have the option to install, or not install, several package tasks. "
19857
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
19858
"to launch <application>aptitude</application> to choose specific packages to "
19859
"install. For more information see <xref linkend=\"aptitude\"/>."
19860
msgstr ""
19861
19862
#: serverguide/C/installation.xml:243(para)
19863
msgid "Finally, the last step before rebooting is to set the clock to UTC."
19864
msgstr ""
19865
19866
#: serverguide/C/installation.xml:249(para)
19867
msgid ""
19868
"If at any point during installation you are not satisfied by the default "
19869
"setting, use the \"Go Back\" function at any prompt to be brought to a "
19870
"detailed installation menu that will allow you to modify the default "
19871
"settings."
19872
msgstr ""
19873
19874
#: serverguide/C/installation.xml:254(para)
19875
msgid ""
19876
"At some point during the installation process you may want to read the help "
19877
"screen provided by the installation system. To do this, press F1."
19878
msgstr ""
19879
19880
#: serverguide/C/installation.xml:259(para)
19881
msgid ""
19882
"Once again, for detailed instructions see the <ulink "
19883
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
19884
"Installation Guide</ulink>."
19885
msgstr ""
19886
19887
#: serverguide/C/installation.xml:265(title)
19888
msgid "Package Tasks"
19889
msgstr ""
19890
19891
#: serverguide/C/installation.xml:266(para)
19892
msgid ""
19893
"During the Server Edition installation you have the option of installing "
19894
"additional packages from the CD. The packages are grouped by the type of "
19895
"service they provide."
19896
msgstr ""
19897
19898
#: serverguide/C/installation.xml:272(para)
19899
msgid "Cloud computing: Walrus storage service"
19900
msgstr ""
19901
19902
#: serverguide/C/installation.xml:277(para)
19903
msgid "Cloud computing: all-in-one cluster"
19904
msgstr ""
19905
19906
#: serverguide/C/installation.xml:282(para)
19907
msgid "Cloud computing: Cluster controller"
19908
msgstr ""
19909
19910
#: serverguide/C/installation.xml:287(para)
19911
msgid "Cloud computing: Node controller"
19912
msgstr ""
19913
19914
#: serverguide/C/installation.xml:292(para)
19915
msgid "Cloud computing: Storage controller"
19916
msgstr ""
19917
19918
#: serverguide/C/installation.xml:297(para)
19919
msgid "Cloud computing: top-level cloud controller"
19920
msgstr ""
19921
19922
#: serverguide/C/installation.xml:302(para)
19923
msgid "DNS server: Selects the BIND DNS server and its documentation."
19924
msgstr ""
19925
19926
#: serverguide/C/installation.xml:307(para)
19927
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
19928
msgstr ""
19929
19930
#: serverguide/C/installation.xml:312(para)
19931
msgid ""
19932
"Mail server: This task selects a variety of package useful for a general "
19933
"purpose mail server system."
19934
msgstr ""
19935
19936
#: serverguide/C/installation.xml:317(para)
19937
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
19938
msgstr ""
19939
19940
#: serverguide/C/installation.xml:322(para)
19941
msgid ""
19942
"PostgreSQL database: This task selects client and server packages for the "
19943
"PostgreSQL database."
19944
msgstr ""
19945
19946
#: serverguide/C/installation.xml:327(para)
19947
msgid "Print server: This task sets up your system to be a print server."
19948
msgstr ""
19949
19950
#: serverguide/C/installation.xml:332(para)
19951
msgid ""
19952
"Samba File server: This task sets up your system to be a Samba file server, "
19953
"which is especially suitable in networks with both Windows and Linux systems."
19954
msgstr ""
19955
19956
#: serverguide/C/installation.xml:338(para)
19957
msgid ""
19958
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
19959
"etc."
19960
msgstr ""
19961
19962
#: serverguide/C/installation.xml:343(para)
19963
msgid ""
19964
"Virtual machine host: Includes packages needed to run KVM virtual machines."
19965
msgstr ""
19966
19967
#: serverguide/C/installation.xml:348(para)
19968
msgid ""
19969
"Manually select packages: Executes <application>apptitude</application> "
19970
"allowing you to individually select packages."
19971
msgstr ""
19972
19973
#: serverguide/C/installation.xml:353(para)
19974
msgid ""
19975
"Installing the package groups is accomplished using the "
19976
"<application>tasksel</application> utility. One of the important difference "
19977
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
19978
"installed, a package is also configured to reasonable defaults, eventually "
19979
"prompting you for additional required information. Likewise, when installing "
19980
"a task, the packages are not only installed, but also configured to provided "
19981
"a fully integrated service."
19982
msgstr ""
19983
19984
#: serverguide/C/installation.xml:360(para)
19985
msgid ""
19986
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
19987
"<xref linkend=\"uec\"/>."
19988
msgstr ""
19989
19990
#: serverguide/C/installation.xml:363(para)
19991
msgid ""
19992
"Once the installation process has finished you can view a list of available "
19993
"tasks by entering the following from a terminal prompt:"
19994
msgstr ""
19995
19996
#: serverguide/C/installation.xml:368(command)
19997
msgid "tasksel --list-tasks"
19998
msgstr ""
19999
20000
#: serverguide/C/installation.xml:371(para)
20001
msgid ""
20002
"The output will list tasks from other Ubuntu based distributions such as "
20003
"Kubuntu and Edubuntu. Note that you can also invoke the "
20004
"<command>tasksel</command> command by itself, which will bring up a menu of "
20005
"the different tasks available."
20006
msgstr ""
20007
20008
#: serverguide/C/installation.xml:377(para)
20009
msgid ""
20010
"You can view a list of which packages are installed with each task using the "
20011
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20012
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20013
"following:"
20014
msgstr ""
20015
20016
#: serverguide/C/installation.xml:382(command)
20017
msgid "tasksel --task-packages dns-server"
20018
msgstr ""
20019
20020
#: serverguide/C/installation.xml:384(para)
20021
msgid "The output of the command should list:"
20022
msgstr ""
20023
20024
#: serverguide/C/installation.xml:387(programlisting)
20025
#, no-wrap
20026
msgid ""
20027
"\n"
20028
"bind9-doc \n"
20029
"bind9utils \n"
20030
"bind9\n"
20031
msgstr ""
20032
20033
#: serverguide/C/installation.xml:392(para)
20034
msgid ""
20035
"Also, if you did not install one of the tasks during the installation "
20036
"process, but for example you decide to make your new LAMP server a DNS "
20037
"server as well. Simply insert the installation CD and from a terminal:"
20038
msgstr ""
20039
20040
#: serverguide/C/installation.xml:397(command)
20041
msgid "sudo tasksel install dns-server"
20042
msgstr ""
20043
20044
#: serverguide/C/installation.xml:402(title)
20045
msgid "Upgrading"
20046
msgstr ""
20047
20048
#: serverguide/C/installation.xml:403(para)
20049
msgid ""
20050
"There are several ways to upgrade from one Ubuntu release to another. This "
20051
"section gives an overview of the recommended upgrade method."
20052
msgstr ""
20053
20054
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20055
msgid "do-release-upgrade"
20056
msgstr ""
20057
20058
#: serverguide/C/installation.xml:408(para)
20059
msgid ""
20060
"The recommended way to upgrade a Server Edition installation is to use the "
20061
"<application>do-release-upgrade</application> utility. Part of the "
20062
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20063
"graphical dependencies and is installed by default."
20064
msgstr ""
20065
20066
#: serverguide/C/installation.xml:413(para)
20067
msgid ""
20068
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20069
"upgrade</command>. However, using <application>do-release-"
20070
"upgrade</application> is recommended because it has the ability to handle "
20071
"system configuration changes sometimes needed between releases."
20072
msgstr ""
20073
20074
#: serverguide/C/installation.xml:418(para)
20075
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20076
msgstr ""
20077
20078
#: serverguide/C/installation.xml:424(para)
20079
msgid ""
20080
"It is also possible to use <application>do-release-upgrade</application> to "
20081
"upgrade to a development version of Ubuntu. To accomplish this use the "
20082
"<emphasis>-d</emphasis> switch:"
20083
msgstr ""
20084
20085
#: serverguide/C/installation.xml:429(command)
20086
msgid "do-release-upgrade -d"
20087
msgstr ""
20088
20089
#: serverguide/C/installation.xml:432(para)
20090
msgid ""
20091
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20092
"for production environments."
20093
msgstr ""
20094
20095
#: serverguide/C/installation.xml:439(title)
20096
msgid "Advanced Installation"
20097
msgstr ""
20098
20099
#: serverguide/C/installation.xml:442(title)
20100
msgid "Software RAID"
20101
msgstr ""
20102
20103
#: serverguide/C/installation.xml:444(para)
20104
msgid ""
20105
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20106
"the probability of catastrophic data loss in case of drive failure. RAID is "
20107
"implemented in either software (where the operating system knows about both "
20108
"drives and actively maintains both of them) or hardware (where a special "
20109
"controller makes the OS think there's only one drive and maintains the "
20110
"drives 'invisibly')."
20111
msgstr ""
20112
20113
#: serverguide/C/installation.xml:451(para)
20114
msgid ""
20115
"The RAID software included with current versions of Linux (and Ubuntu) is "
20116
"based on the <application>'mdadm'</application> driver and works very well, "
20117
"better even than many so-called 'hardware' RAID controllers. This section "
20118
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20119
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20120
"another for <emphasis>swap</emphasis>."
20121
msgstr ""
20122
20123
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20124
msgid ""
20125
"Follow the installation steps until you get to the <emphasis>Partition "
20126
"disks</emphasis> step, then:"
20127
msgstr ""
20128
20129
#: serverguide/C/installation.xml:468(para)
20130
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20131
msgstr ""
20132
20133
#: serverguide/C/installation.xml:475(para)
20134
msgid ""
20135
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20136
"partition table on this device?\"</emphasis>."
20137
msgstr ""
20138
20139
#: serverguide/C/installation.xml:479(para)
20140
msgid ""
20141
"Repeat this step for each drive you wish to be part of the RAID array."
20142
msgstr ""
20143
20144
#: serverguide/C/installation.xml:486(para)
20145
msgid ""
20146
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20147
"select <emphasis>\"Create a new partition\"</emphasis>."
20148
msgstr ""
20149
20150
#: serverguide/C/installation.xml:493(para)
20151
msgid ""
20152
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20153
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20154
"size is twice that of RAM. Enter the partition size, then choose "
20155
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20156
msgstr ""
20157
20158
#: serverguide/C/installation.xml:502(para)
20159
msgid ""
20160
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20161
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20162
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20163
"<emphasis>\"Done setting up partition\"</emphasis>."
20164
msgstr ""
20165
20166
#: serverguide/C/installation.xml:511(para)
20167
msgid ""
20168
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20169
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20170
"partition\"</emphasis>."
20171
msgstr ""
20172
20173
#: serverguide/C/installation.xml:519(para)
20174
msgid ""
20175
"Use the rest of the free space on the drive and choose "
20176
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20177
msgstr ""
20178
20179
#: serverguide/C/installation.xml:526(para)
20180
msgid ""
20181
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20182
"at the top, changing it to <emphasis>\"physical volume for "
20183
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20184
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20185
"<emphasis>\"Done setting up partition\"</emphasis>."
20186
msgstr ""
20187
20188
#: serverguide/C/installation.xml:536(para)
20189
msgid "Repeat steps three through eight for the other disk and partitions."
20190
msgstr ""
20191
20192
#: serverguide/C/installation.xml:545(title)
20193
msgid "RAID Configuration"
20194
msgstr ""
20195
20196
#: serverguide/C/installation.xml:547(para)
20197
msgid "With the partitions setup the arrays are ready to be configured:"
20198
msgstr ""
20199
20200
#: serverguide/C/installation.xml:554(para)
20201
msgid ""
20202
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20203
"Software RAID\"</emphasis> at the top."
20204
msgstr ""
20205
20206
#: serverguide/C/installation.xml:561(para)
20207
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20208
msgstr ""
20209
20210
#: serverguide/C/installation.xml:568(para)
20211
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20212
msgstr ""
20213
20214
#: serverguide/C/installation.xml:575(para)
20215
msgid ""
20216
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20217
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20218
msgstr ""
20219
20220
#: serverguide/C/installation.xml:581(para)
20221
msgid ""
20222
"In order to use <emphasis>RAID5</emphasis> you need at least "
20223
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20224
"<emphasis>two</emphasis> drives are required."
20225
msgstr ""
20226
20227
#: serverguide/C/installation.xml:590(para)
20228
msgid ""
20229
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20230
"of hard drives you have, for the array. Then select "
20231
"<emphasis>\"Continue\"</emphasis>."
20232
msgstr ""
20233
20234
#: serverguide/C/installation.xml:598(para)
20235
msgid ""
20236
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20237
"default, then choose <emphasis>\"Continue\"</emphasis>."
20238
msgstr ""
20239
20240
#: serverguide/C/installation.xml:605(para)
20241
msgid ""
20242
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20243
"etc. The numbers will usually match and the different letters correspond to "
20244
"different hard drives."
20245
msgstr ""
20246
20247
#: serverguide/C/installation.xml:610(para)
20248
msgid ""
20249
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20250
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20251
"go to the next step."
20252
msgstr ""
20253
20254
#: serverguide/C/installation.xml:618(para)
20255
msgid ""
20256
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20257
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20258
"and <emphasis>sdb2</emphasis>."
20259
msgstr ""
20260
20261
#: serverguide/C/installation.xml:626(para)
20262
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20263
msgstr ""
20264
20265
#: serverguide/C/installation.xml:636(title)
20266
msgid "Formatting"
20267
msgstr ""
20268
20269
#: serverguide/C/installation.xml:638(para)
20270
msgid ""
20271
"There should now be a list of hard drives and RAID devices. The next step is "
20272
"to format and set the mount point for the RAID devices. Treat the RAID "
20273
"device as a local hard drive, format and mount accordingly."
20274
msgstr ""
20275
20276
#: serverguide/C/installation.xml:646(para)
20277
msgid ""
20278
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20279
"#0\"</emphasis> partition."
20280
msgstr ""
20281
20282
#: serverguide/C/installation.xml:653(para)
20283
msgid ""
20284
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20285
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20286
msgstr ""
20287
20288
#: serverguide/C/installation.xml:661(para)
20289
msgid ""
20290
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20291
"#1\"</emphasis> partition."
20292
msgstr ""
20293
20294
#: serverguide/C/installation.xml:668(para)
20295
msgid ""
20296
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20297
"journaling file system\"</emphasis>."
20298
msgstr ""
20299
20300
#: serverguide/C/installation.xml:675(para)
20301
msgid ""
20302
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20303
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20304
"options as appropriate, then select <emphasis>\"Done setting up "
20305
"partition\"</emphasis>."
20306
msgstr ""
20307
20308
#: serverguide/C/installation.xml:683(para)
20309
msgid ""
20310
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20311
"disk\"</emphasis>."
20312
msgstr ""
20313
20314
#: serverguide/C/installation.xml:690(para)
20315
msgid ""
20316
"If you choose to place the root partition on a RAID array, the installer "
20317
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20318
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20319
msgstr ""
20320
20321
#: serverguide/C/installation.xml:695(para)
20322
msgid "The installation process will then continue normally."
20323
msgstr ""
20324
20325
#: serverguide/C/installation.xml:701(title)
20326
msgid "Degraded RAID"
20327
msgstr ""
20328
20329
#: serverguide/C/installation.xml:703(para)
20330
msgid ""
20331
"At some point in the life of the computer a disk failure event may occur. "
20332
"When this happens, using Software RAID, the operating system will place the "
20333
"array into what is known as a <emphasis>degraded</emphasis> state."
20334
msgstr ""
20335
20336
#: serverguide/C/installation.xml:708(para)
20337
msgid ""
20338
"If the array has become degraded, due to the chance of data corruption, by "
20339
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20340
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20341
"second prompt giving you the option to go ahead and boot the system, or "
20342
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20343
"the desired behavior, especially if the machine is in a remote location. "
20344
"Booting to a degraded array can be configured several ways:"
20345
msgstr ""
20346
20347
#: serverguide/C/installation.xml:719(para)
20348
msgid ""
20349
"The <application>dpkg-reconfigure</application> utility can be used to "
20350
"configure the default behavior, and during the process you will be queried "
20351
"about additional settings related to the array. Such as monitoring, email "
20352
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20353
"following:"
20354
msgstr ""
20355
20356
#: serverguide/C/installation.xml:726(command)
20357
msgid "sudo dpkg-reconfigure mdadm"
20358
msgstr ""
20359
20360
#: serverguide/C/installation.xml:732(para)
20361
msgid ""
20362
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20363
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20364
"The file has the advantage of being able to pre-configure the system's "
20365
"behavior, and can also be manually edited:"
20366
msgstr ""
20367
20368
#: serverguide/C/installation.xml:738(programlisting)
20369
#, no-wrap
20370
msgid ""
20371
"\n"
20372
"BOOT_DEGRADED=true\n"
20373
msgstr ""
20374
20375
#: serverguide/C/installation.xml:743(para)
20376
msgid "The configuration file can be overridden by using a Kernel argument."
20377
msgstr ""
20378
20379
#: serverguide/C/installation.xml:751(para)
20380
msgid ""
20381
"Using a Kernel argument will allow the system to boot to a degraded array as "
20382
"well:"
20383
msgstr ""
20384
20385
#: serverguide/C/installation.xml:757(para)
20386
msgid ""
20387
"When the server is booting press <keycap>Shift</keycap> to open the "
20388
"<application>Grub</application> menu."
20389
msgstr ""
20390
20391
#: serverguide/C/installation.xml:762(para)
20392
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20393
msgstr ""
20394
20395
#: serverguide/C/installation.xml:767(para)
20396
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20397
msgstr ""
20398
20399
#: serverguide/C/installation.xml:772(para)
20400
msgid ""
20401
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20402
"end of the line."
20403
msgstr ""
20404
20405
#: serverguide/C/installation.xml:777(para)
20406
msgid ""
20407
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20408
"the system."
20409
msgstr ""
20410
20411
#: serverguide/C/installation.xml:786(para)
20412
msgid ""
20413
"Once the system has booted you can either repair the array see <xref "
20414
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20415
"another machine due to major hardware failure."
20416
msgstr ""
20417
20418
#: serverguide/C/installation.xml:793(title)
20419
msgid "RAID Maintenance"
20420
msgstr ""
20421
20422
#: serverguide/C/installation.xml:795(para)
20423
msgid ""
20424
"The <application>mdadm</application> utility can be used to view the status "
20425
"of an array, add disks to an array, remove disks, etc:"
20426
msgstr ""
20427
20428
#: serverguide/C/installation.xml:802(para)
20429
msgid "To view the status of an array, from a terminal prompt enter:"
20430
msgstr ""
20431
20432
#: serverguide/C/installation.xml:806(command)
20433
msgid "sudo mdadm -D /dev/md0"
20434
msgstr ""
20435
20436
#: serverguide/C/installation.xml:809(para)
20437
msgid ""
20438
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20439
"display <emphasis>detailed</emphasis> information about the "
20440
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20441
"with the appropriate RAID device."
20442
msgstr ""
20443
20444
#: serverguide/C/installation.xml:815(para)
20445
msgid "To view the status of a disk in an array:"
20446
msgstr ""
20447
20448
#: serverguide/C/installation.xml:819(command)
20449
msgid "sudo mdadm -E /dev/sda1"
20450
msgstr ""
20451
20452
#: serverguide/C/installation.xml:821(para)
20453
msgid ""
20454
"The output if very similar to the <command>mdadm -D</command> command, "
20455
"adjust <filename>/dev/sda1</filename> for each disk."
20456
msgstr ""
20457
20458
#: serverguide/C/installation.xml:826(para)
20459
msgid "If a disk fails and needs to be removed from an array enter:"
20460
msgstr ""
20461
20462
#: serverguide/C/installation.xml:830(command)
20463
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20464
msgstr ""
20465
20466
#: serverguide/C/installation.xml:832(para)
20467
msgid ""
20468
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20469
"the appropriate RAID device and disk."
20470
msgstr ""
20471
20472
#: serverguide/C/installation.xml:837(para)
20473
msgid "Similarly, to add a new disk:"
20474
msgstr ""
20475
20476
#: serverguide/C/installation.xml:841(command)
20477
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20478
msgstr ""
20479
20480
#: serverguide/C/installation.xml:846(para)
20481
msgid ""
20482
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20483
"though there is nothing physically wrong with the drive. It is usually "
20484
"worthwhile to remove the drive from the array then re-add it. This will "
20485
"cause the drive to re-sync with the array. If the drive will not sync with "
20486
"the array, it is a good indication of hardware failure."
20487
msgstr ""
20488
20489
#: serverguide/C/installation.xml:852(para)
20490
msgid ""
20491
"The <filename>/proc/mdstat</filename> file also contains useful information "
20492
"about the system's RAID devices:"
20493
msgstr ""
20494
20495
#: serverguide/C/installation.xml:857(command)
20496
msgid "cat /proc/mdstat"
20497
msgstr ""
20498
20499
#: serverguide/C/installation.xml:858(computeroutput)
20500
#, no-wrap
20501
msgid ""
20502
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20503
"[raid10] \n"
20504
"md0 : active raid1 sda1[0] sdb1[1]\n"
20505
" 10016384 blocks [2/2] [UU]\n"
20506
" \n"
20507
"unused devices: <none>"
20508
msgstr ""
20509
20510
#: serverguide/C/installation.xml:865(para)
20511
msgid ""
20512
"The following command is great for watching the status of a syncing drive:"
20513
msgstr ""
20514
20515
#: serverguide/C/installation.xml:870(command)
20516
msgid "watch -n1 cat /proc/mdstat"
20517
msgstr ""
20518
20519
#: serverguide/C/installation.xml:873(para)
20520
msgid ""
20521
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20522
"<application>watch</application> command."
20523
msgstr ""
20524
20525
#: serverguide/C/installation.xml:877(para)
20526
msgid ""
20527
"If you do need to replace a faulty drive, after the drive has been replaced "
20528
"and synced, <application>grub</application> will need to be installed. To "
20529
"install <application>grub</application> on the new drive, enter the "
20530
"following:"
20531
msgstr ""
20532
20533
#: serverguide/C/installation.xml:883(command)
20534
msgid "sudo grub-install /dev/md0"
20535
msgstr ""
20536
20537
#: serverguide/C/installation.xml:886(para)
20538
msgid ""
20539
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20540
msgstr ""
20541
20542
#: serverguide/C/installation.xml:894(para)
20543
msgid ""
20544
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20545
"can be configured. Please see the following links for more information:"
20546
msgstr ""
20547
20548
#: serverguide/C/installation.xml:901(para)
20549
msgid ""
20550
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20551
"Wiki Articles on RAID</ulink>."
20552
msgstr ""
20553
20554
#: serverguide/C/installation.xml:907(ulink)
20555
msgid "Software RAID HOWTO"
20556
msgstr ""
20557
20558
#: serverguide/C/installation.xml:912(ulink)
20559
msgid "Managing RAID on Linux"
20560
msgstr ""
20561
20562
#: serverguide/C/installation.xml:919(title)
20563
msgid "Logical Volume Manager (LVM)"
20564
msgstr ""
20565
20566
#: serverguide/C/installation.xml:921(para)
20567
msgid ""
20568
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20569
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20570
"hard disks. LVM volumes can be created on both software RAID partitions and "
20571
"standard partitions residing on a single disk. Volumes can also be extended, "
20572
"giving greater flexibility to systems as requirements change."
20573
msgstr ""
20574
20575
#: serverguide/C/installation.xml:930(para)
20576
msgid ""
20577
"A side effect of LVM's power and flexibility is a greater degree of "
20578
"complication. Before diving into the LVM installation process, it is best to "
20579
"get familiar with some terms."
20580
msgstr ""
20581
20582
#: serverguide/C/installation.xml:937(para)
20583
msgid ""
20584
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20585
"Volumes (LV)."
20586
msgstr ""
20587
20588
#: serverguide/C/installation.xml:942(para)
20589
msgid ""
20590
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
20591
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
20592
"which resides the actual EXT3, XFS, JFS, etc filesystem."
20593
msgstr ""
20594
20595
#: serverguide/C/installation.xml:948(para)
20596
msgid ""
20597
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
20598
"RAID partition. The Volume Group can be extended by adding more PVs."
20599
msgstr ""
20600
20601
#: serverguide/C/installation.xml:959(para)
20602
msgid ""
20603
"As an example this section covers installing Ubuntu Server Edition with "
20604
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
20605
"the initial install only one Physical Volume (PV) will be part of the Volume "
20606
"Group (VG). Another PV will be added after install to demonstrate how a VG "
20607
"can be extended."
20608
msgstr ""
20609
20610
#: serverguide/C/installation.xml:965(para)
20611
msgid ""
20612
"There are several installation options for LVM, <emphasis>\"Guided - use the "
20613
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
20614
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
20615
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
20616
"partitions and configure LVM. At this time the only way to configure a "
20617
"system with both LVM and standard partitions, during installation, is to use "
20618
"the Manual approach."
20619
msgstr ""
20620
20621
#: serverguide/C/installation.xml:982(para)
20622
msgid ""
20623
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
20624
"<emphasis>\"Manual\"</emphasis>."
20625
msgstr ""
20626
20627
#: serverguide/C/installation.xml:989(para)
20628
msgid ""
20629
"Select the hard disk and on the next screen choose \"yes\" to "
20630
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
20631
msgstr ""
20632
20633
#: serverguide/C/installation.xml:996(para)
20634
msgid ""
20635
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
20636
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
20637
msgstr ""
20638
20639
#: serverguide/C/installation.xml:1004(para)
20640
msgid ""
20641
"For the LVM <emphasis>/srv</emphasis>, create a new "
20642
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
20643
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
20644
"<emphasis>\"Done setting up the partition\"</emphasis>."
20645
msgstr ""
20646
20647
#: serverguide/C/installation.xml:1012(para)
20648
msgid ""
20649
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
20650
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
20651
"disk."
20652
msgstr ""
20653
20654
#: serverguide/C/installation.xml:1020(para)
20655
msgid ""
20656
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
20657
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
20658
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
20659
"After entering a name, select the partition configured for LVM, and choose "
20660
"<emphasis>\"Continue\"</emphasis>."
20661
msgstr ""
20662
20663
#: serverguide/C/installation.xml:1029(para)
20664
msgid ""
20665
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
20666
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
20667
"volume group, and enter a name for the new LV, for example "
20668
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
20669
"a size, which may be the full partition because it can always be extended "
20670
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
20671
"main <emphasis>\"Partition Disks\"</emphasis> screen."
20672
msgstr ""
20673
20674
#: serverguide/C/installation.xml:1039(para)
20675
msgid ""
20676
"Now add a filesystem to the new LVM. Select the partition under "
20677
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
20678
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
20679
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
20680
"select <emphasis>\"Done setting up the partition\"</emphasis>."
20681
msgstr ""
20682
20683
#: serverguide/C/installation.xml:1048(para)
20684
msgid ""
20685
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20686
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
20687
"the installation."
20688
msgstr ""
20689
20690
#: serverguide/C/installation.xml:1056(para)
20691
msgid "There are some useful utilities to view information about LVM:"
20692
msgstr ""
20693
20694
#: serverguide/C/installation.xml:1061(para)
20695
msgid ""
20696
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
20697
msgstr ""
20698
20699
#: serverguide/C/installation.xml:1062(para)
20700
msgid ""
20701
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
20702
msgstr ""
20703
20704
#: serverguide/C/installation.xml:1063(para)
20705
msgid ""
20706
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
20707
"Physical Volumes."
20708
msgstr ""
20709
20710
#: serverguide/C/installation.xml:1068(title)
20711
msgid "Extending Volume Groups"
20712
msgstr ""
20713
20714
#: serverguide/C/installation.xml:1070(para)
20715
msgid ""
20716
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
20717
"section covers adding a second hard disk, creating a Physical Volume (PV), "
20718
"adding it to the volume group (VG), extending the logical volume <filename "
20719
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
20720
"example assumes a second hard disk has been added to the system. This hard "
20721
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
20722
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
20723
"before issuing the commands below. You could lose some data if you issue "
20724
"those commands on a non-empty disk. In our example we will use the entire "
20725
"disk as a physical volume (you could choose to create partitions and use "
20726
"them as different physical volumes)"
20727
msgstr ""
20728
20729
#: serverguide/C/installation.xml:1082(para)
20730
msgid "First, create the physical volume, in a terminal execute:"
20731
msgstr ""
20732
20733
#: serverguide/C/installation.xml:1087(command)
20734
msgid "sudo pvcreate /dev/sdb"
20735
msgstr ""
20736
20737
#: serverguide/C/installation.xml:1093(para)
20738
msgid "Now extend the Volume Group (VG):"
20739
msgstr ""
20740
20741
#: serverguide/C/installation.xml:1098(command)
20742
msgid "sudo vgextend vg01 /dev/sdb"
20743
msgstr ""
20744
20745
#: serverguide/C/installation.xml:1104(para)
20746
msgid ""
20747
"Use <application>vgdisplay</application> to find out the free physical "
20748
"extents - Free PE / size (the size you can allocate). We will assume a free "
20749
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
20750
"whole free space available. Use your own PE and/or free space."
20751
msgstr ""
20752
20753
#: serverguide/C/installation.xml:1110(para)
20754
msgid ""
20755
"The Logical Volume (LV) can now be extended by different methods, we will "
20756
"only see how to use the PE to extend the LV:"
20757
msgstr ""
20758
20759
#: serverguide/C/installation.xml:1115(command)
20760
msgid "sudo lvextend /dev/vg01/srv -l +511"
20761
msgstr ""
20762
20763
#: serverguide/C/installation.xml:1118(para)
20764
msgid ""
20765
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
20766
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
20767
"Gig, Tera, etc bytes."
20768
msgstr ""
20769
20770
#: serverguide/C/installation.xml:1126(para)
20771
msgid ""
20772
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
20773
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
20774
"pratice to unmount it anyway and check the filesystem, so that you don't "
20775
"mess up the day you want to reduce a logical volume (in that case unmounting "
20776
"first is compulsory)."
20777
msgstr ""
20778
20779
#: serverguide/C/installation.xml:1132(para)
20780
msgid ""
20781
"The following commands are for an <emphasis>EXT3</emphasis> or "
20782
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
20783
"there may be other utilities available."
20784
msgstr ""
20785
20786
#: serverguide/C/installation.xml:1139(command)
20787
msgid "sudo e2fsck -f /dev/vg01/srv"
20788
msgstr ""
20789
20790
#: serverguide/C/installation.xml:1142(para)
20791
msgid ""
20792
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
20793
"forces checking even if the system seems clean."
20794
msgstr ""
20795
20796
#: serverguide/C/installation.xml:1149(para)
20797
msgid "Finally, resize the filesystem:"
20798
msgstr ""
20799
20800
#: serverguide/C/installation.xml:1154(command)
20801
msgid "sudo resize2fs /dev/vg01/srv"
20802
msgstr ""
20803
20804
#: serverguide/C/installation.xml:1160(para)
20805
msgid "Now mount the partition and check its size."
20806
msgstr ""
20807
20808
#: serverguide/C/installation.xml:1165(command)
20809
msgid "mount /dev/vg01/srv /srv && df -h /srv"
20810
msgstr ""
20811
20812
#: serverguide/C/installation.xml:1177(para)
20813
msgid ""
20814
"See the <ulink "
20815
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
20816
"Articles</ulink>."
20817
msgstr ""
20818
20819
#: serverguide/C/installation.xml:1182(para)
20820
msgid ""
20821
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
20822
"HOWTO</ulink> for more information."
20823
msgstr ""
20824
20825
#: serverguide/C/installation.xml:1187(para)
20826
msgid ""
20827
"Another good article is <ulink "
20828
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
20829
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
20830
"linuxdevcenter.com site."
20831
msgstr ""
20832
20833
#: serverguide/C/installation.xml:1194(para)
20834
msgid ""
20835
"For more information on <application>fdisk</application> see the <ulink "
20836
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
20837
"man page</ulink>."
20838
msgstr ""
20839
20840
#: serverguide/C/file-server.xml:13(title)
20841
msgid "File Servers"
20842
msgstr ""
20843
20844
#: serverguide/C/file-server.xml:15(para)
20845
msgid ""
20846
"If you have more than one computer on a single network. At some point you "
20847
"will probably need to share files between them. In this section we cover "
20848
"installing and configuring FTP, NFS, and CUPS."
20849
msgstr ""
20850
20851
#: serverguide/C/file-server.xml:22(title)
20852
msgid "FTP Server"
20853
msgstr ""
20854
20855
#: serverguide/C/file-server.xml:24(para)
20856
msgid ""
20857
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
20858
"files between computers. FTP works on a client/server model. The server "
20859
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
20860
"listens for FTP requests from remote clients. When a request is received, it "
20861
"manages the login and sets up the connection. For the duration of the "
20862
"session it executes any of commands sent by the FTP client."
20863
msgstr ""
20864
20865
#: serverguide/C/file-server.xml:33(para)
20866
msgid "Access to an FTP server can be managed in two ways:"
20867
msgstr ""
20868
20869
#: serverguide/C/file-server.xml:37(para)
20870
msgid "Anonymous"
20871
msgstr ""
20872
20873
#: serverguide/C/file-server.xml:40(para)
20874
msgid "Authenticated"
20875
msgstr ""
20876
20877
#: serverguide/C/file-server.xml:43(para)
20878
msgid ""
20879
"In the Anonymous mode, remote clients can access the FTP server by using the "
20880
"default user account called \"anonymous\" or \"ftp\" and sending an email "
20881
"address as the password. In the Authenticated mode a user must have an "
20882
"account and a password. User access to the FTP server directories and files "
20883
"is dependent on the permissions defined for the account used at login. As a "
20884
"general rule, the FTP daemon will hide the root directory of the FTP server "
20885
"and change it to the FTP Home directory. This hides the rest of the file "
20886
"system from remote sessions."
20887
msgstr ""
20888
20889
#: serverguide/C/file-server.xml:55(title)
20890
msgid "vsftpd - FTP Server Installation"
20891
msgstr ""
20892
20893
#: serverguide/C/file-server.xml:57(para)
20894
msgid ""
20895
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
20896
"and maintain. To install <application>vsftpd</application> you can run the "
20897
"following command:"
20898
msgstr ""
20899
20900
#: serverguide/C/file-server.xml:65(command)
20901
msgid "sudo apt-get install vsftpd"
20902
msgstr ""
20903
20904
#: serverguide/C/file-server.xml:71(title)
20905
msgid "Anonymous FTP Configuration"
20906
msgstr ""
20907
20908
#: serverguide/C/file-server.xml:73(para)
20909
msgid ""
20910
"By default <application>vsftpd</application> is configured to only allow "
20911
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
20912
"created with a home directory of <filename>/home/ftp</filename>. This is the "
20913
"default FTP directory."
20914
msgstr ""
20915
20916
#: serverguide/C/file-server.xml:80(para)
20917
msgid ""
20918
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
20919
"example, simply create a directory in another location and change the "
20920
"<emphasis>ftp</emphasis> user's home directory:"
20921
msgstr ""
20922
20923
#: serverguide/C/file-server.xml:87(command)
20924
msgid "sudo mkdir /srv/ftp"
20925
msgstr ""
20926
20927
#: serverguide/C/file-server.xml:88(command)
20928
msgid "sudo usermod -d /srv/ftp ftp"
20929
msgstr ""
20930
20931
#: serverguide/C/file-server.xml:91(para)
20932
msgid "After making the change restart <application>vsftpd</application>:"
20933
msgstr ""
20934
20935
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
20936
msgid "sudo /etc/init.d/vsftpd restart"
20937
msgstr ""
20938
20939
#: serverguide/C/file-server.xml:99(para)
20940
msgid ""
20941
"Finally, copy any files and directories you would like to make available "
20942
"through anonymous FTP to <filename>/srv/ftp</filename>."
20943
msgstr ""
20944
20945
#: serverguide/C/file-server.xml:106(title)
20946
msgid "User Authenticated FTP Configuration"
20947
msgstr ""
20948
20949
#: serverguide/C/file-server.xml:108(para)
20950
msgid ""
20951
"To configure <application>vsftpd</application> to authenticate system users "
20952
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
20953
msgstr ""
20954
20955
#: serverguide/C/file-server.xml:114(programlisting)
20956
#, no-wrap
20957
msgid ""
20958
"\n"
20959
"local_enable=YES\n"
20960
"write_enable=YES\n"
20961
msgstr ""
20962
20963
#: serverguide/C/file-server.xml:119(para)
20964
msgid "Now restart <application>vsftpd</application>:"
20965
msgstr ""
20966
20967
#: serverguide/C/file-server.xml:127(para)
20968
msgid ""
20969
"Now when system users login to FTP they will start in their "
20970
"<emphasis>home</emphasis> directories where they can download, upload, "
20971
"create directories, etc."
20972
msgstr ""
20973
20974
#: serverguide/C/file-server.xml:133(para)
20975
msgid ""
20976
"Similarly, by default, the anonymous users are not allowed to upload files "
20977
"to FTP server. To change this setting, you should uncomment the following "
20978
"line, and restart <application>vsftpd</application>:"
20979
msgstr ""
20980
20981
#: serverguide/C/file-server.xml:140(programlisting)
20982
#, no-wrap
20983
msgid ""
20984
"\n"
20985
"anon_upload_enable=YES\n"
20986
msgstr ""
20987
20988
#: serverguide/C/file-server.xml:145(para)
20989
msgid ""
20990
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
20991
"not enable anonymous upload on servers accessed directly from the Internet."
20992
msgstr ""
20993
20994
#: serverguide/C/file-server.xml:151(para)
20995
msgid ""
20996
"The configuration file consists of many configuration parameters. The "
20997
"information about each parameter is available in the configuration file. "
20998
"Alternatively, you can refer to the man page, <command>man 5 "
20999
"vsftpd.conf</command> for details of each parameter."
21000
msgstr ""
21001
21002
#: serverguide/C/file-server.xml:162(title)
21003
msgid "Securing FTP"
21004
msgstr ""
21005
21006
#: serverguide/C/file-server.xml:164(para)
21007
msgid ""
21008
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21009
"<application>vsftpd</application> more secure. For example users can be "
21010
"limited to their home directories by uncommenting:"
21011
msgstr ""
21012
21013
#: serverguide/C/file-server.xml:170(programlisting)
21014
#, no-wrap
21015
msgid ""
21016
"\n"
21017
"chroot_local_user=YES\n"
21018
msgstr ""
21019
21020
#: serverguide/C/file-server.xml:174(para)
21021
msgid ""
21022
"You can also limit a specific list of users to just their home directories:"
21023
msgstr ""
21024
21025
#: serverguide/C/file-server.xml:178(programlisting)
21026
#, no-wrap
21027
msgid ""
21028
"\n"
21029
"chroot_list_enable=YES\n"
21030
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21031
msgstr ""
21032
21033
#: serverguide/C/file-server.xml:183(para)
21034
msgid ""
21035
"After uncommenting the above options, create a "
21036
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21037
"per line. Then restart <application>vsftpd</application>:"
21038
msgstr ""
21039
21040
#: serverguide/C/file-server.xml:192(para)
21041
msgid ""
21042
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21043
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21044
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21045
"add them to the list."
21046
msgstr ""
21047
21048
#: serverguide/C/file-server.xml:199(para)
21049
msgid ""
21050
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21051
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21052
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21053
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21054
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21055
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21056
"with a shell may not be ideal for some environments, such as a shared web "
21057
"host."
21058
msgstr ""
21059
21060
#: serverguide/C/file-server.xml:208(para)
21061
msgid ""
21062
"To configure <emphasis>FTPS</emphasis>, edit "
21063
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21064
msgstr ""
21065
21066
#: serverguide/C/file-server.xml:212(programlisting)
21067
#, no-wrap
21068
msgid ""
21069
"\n"
21070
"ssl_enable=Yes\n"
21071
msgstr ""
21072
21073
#: serverguide/C/file-server.xml:216(para)
21074
msgid "Also, notice the certificate and key related options:"
21075
msgstr ""
21076
21077
#: serverguide/C/file-server.xml:220(programlisting)
21078
#, no-wrap
21079
msgid ""
21080
"\n"
21081
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21082
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21083
msgstr ""
21084
21085
#: serverguide/C/file-server.xml:225(para)
21086
msgid ""
21087
"By default these options are set the certificate and key provided by the "
21088
"<application>ssl-cert</application> package. In a production environment "
21089
"these should be replaced with a certificate and key generated for the "
21090
"specific host. For more information on certificates see <xref "
21091
"linkend=\"certificates-and-security\"/>."
21092
msgstr ""
21093
21094
#: serverguide/C/file-server.xml:231(para)
21095
msgid ""
21096
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21097
"be forced to use <emphasis>FTPS</emphasis>:"
21098
msgstr ""
21099
21100
#: serverguide/C/file-server.xml:240(para)
21101
msgid ""
21102
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21103
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21104
"adding the <emphasis>nologin</emphasis> shell:"
21105
msgstr ""
21106
21107
#: serverguide/C/file-server.xml:245(programlisting)
21108
#, no-wrap
21109
msgid ""
21110
"\n"
21111
"# /etc/shells: valid login shells\n"
21112
"/bin/csh\n"
21113
"/bin/sh\n"
21114
"/usr/bin/es\n"
21115
"/usr/bin/ksh\n"
21116
"/bin/ksh\n"
21117
"/usr/bin/rc\n"
21118
"/usr/bin/tcsh\n"
21119
"/bin/tcsh\n"
21120
"/usr/bin/esh\n"
21121
"/bin/dash\n"
21122
"/bin/bash\n"
21123
"/bin/rbash\n"
21124
"/usr/bin/screen\n"
21125
"/usr/sbin/nologin\n"
21126
msgstr ""
21127
21128
#: serverguide/C/file-server.xml:263(para)
21129
msgid ""
21130
"This is necessary because, by default <application>vsftpd</application> uses "
21131
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21132
"configuration file contains:"
21133
msgstr ""
21134
21135
#: serverguide/C/file-server.xml:268(programlisting)
21136
#, no-wrap
21137
msgid ""
21138
"\n"
21139
"auth required pam_shells.so\n"
21140
msgstr ""
21141
21142
#: serverguide/C/file-server.xml:272(para)
21143
msgid ""
21144
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21145
"in the <filename>/etc/shells</filename> file."
21146
msgstr ""
21147
21148
#: serverguide/C/file-server.xml:277(para)
21149
msgid ""
21150
"Most popular FTP clients can be configured connect using FTPS. The "
21151
"<application>lftp</application> command line FTP client has the ability to "
21152
"use FTPS as well."
21153
msgstr ""
21154
21155
#: serverguide/C/file-server.xml:288(para)
21156
msgid ""
21157
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21158
"website</ulink> for more information."
21159
msgstr ""
21160
21161
#: serverguide/C/file-server.xml:293(para)
21162
msgid ""
21163
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21164
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21165
"vsftpd.conf man page</ulink>."
21166
msgstr ""
21167
21168
#: serverguide/C/file-server.xml:299(para)
21169
msgid ""
21170
"The CodeGurus article <ulink "
21171
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21172
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21173
"contrasting FTPS and SFTP."
21174
msgstr ""
21175
21176
#: serverguide/C/file-server.xml:305(para)
21177
msgid ""
21178
"Also, for more information see the <ulink "
21179
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21180
"page."
21181
msgstr ""
21182
21183
#: serverguide/C/file-server.xml:315(title)
21184
msgid "Network File System (NFS)"
21185
msgstr ""
21186
21187
#: serverguide/C/file-server.xml:316(para)
21188
msgid ""
21189
"NFS allows a system to share directories and files with others over a "
21190
"network. By using NFS, users and programs can access files on remote systems "
21191
"almost as if they were local files."
21192
msgstr ""
21193
21194
#: serverguide/C/file-server.xml:322(para)
21195
msgid "Some of the most notable benefits that NFS can provide are:"
21196
msgstr ""
21197
21198
#: serverguide/C/file-server.xml:328(para)
21199
msgid ""
21200
"Local workstations use less disk space because commonly used data can be "
21201
"stored on a single machine and still remain accessible to others over the "
21202
"network."
21203
msgstr ""
21204
21205
#: serverguide/C/file-server.xml:333(para)
21206
msgid ""
21207
"There is no need for users to have separate home directories on every "
21208
"network machine. Home directories could be set up on the NFS server and made "
21209
"available throughout the network."
21210
msgstr ""
21211
21212
#: serverguide/C/file-server.xml:339(para)
21213
msgid ""
21214
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21215
"be used by other machines on the network. This may reduce the number of "
21216
"removable media drives throughout the network."
21217
msgstr ""
21218
21219
#: serverguide/C/file-server.xml:349(para)
21220
msgid ""
21221
"At a terminal prompt enter the following command to install the NFS Server:"
21222
msgstr ""
21223
21224
#: serverguide/C/file-server.xml:355(command)
21225
msgid "sudo apt-get install nfs-kernel-server"
21226
msgstr ""
21227
21228
#: serverguide/C/file-server.xml:361(para)
21229
msgid ""
21230
"You can configure the directories to be exported by adding them to the "
21231
"<filename>/etc/exports</filename> file. For example:"
21232
msgstr ""
21233
21234
#: serverguide/C/file-server.xml:366(screen)
21235
#, no-wrap
21236
msgid ""
21237
"\n"
21238
"/ubuntu *(ro,sync,no_root_squash)\n"
21239
"/home *(rw,sync,no_root_squash)\n"
21240
msgstr ""
21241
21242
#: serverguide/C/file-server.xml:372(para)
21243
msgid ""
21244
"You can replace * with one of the hostname formats. Make the hostname "
21245
"declaration as specific as possible so unwanted systems cannot access the "
21246
"NFS mount."
21247
msgstr ""
21248
21249
#: serverguide/C/file-server.xml:378(para)
21250
msgid ""
21251
"To start the NFS server, you can run the following command at a terminal "
21252
"prompt:"
21253
msgstr ""
21254
21255
#: serverguide/C/file-server.xml:383(command)
21256
msgid "sudo /etc/init.d/nfs-kernel-server start"
21257
msgstr ""
21258
21259
#: serverguide/C/file-server.xml:388(title)
21260
msgid "NFS Client Configuration"
21261
msgstr ""
21262
21263
#: serverguide/C/file-server.xml:389(para)
21264
msgid ""
21265
"Use the <application>mount</application> command to mount a shared NFS "
21266
"directory from another machine, by typing a command line similar to the "
21267
"following at a terminal prompt:"
21268
msgstr ""
21269
21270
#: serverguide/C/file-server.xml:395(command)
21271
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21272
msgstr ""
21273
21274
#: serverguide/C/file-server.xml:399(para)
21275
msgid ""
21276
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21277
"There should be no files or subdirectories in the "
21278
"<filename>/local/ubuntu</filename> directory."
21279
msgstr ""
21280
21281
#: serverguide/C/file-server.xml:406(para)
21282
msgid ""
21283
"An alternate way to mount an NFS share from another machine is to add a line "
21284
"to the <filename>/etc/fstab</filename> file. The line must state the "
21285
"hostname of the NFS server, the directory on the server being exported, and "
21286
"the directory on the local machine where the NFS share is to be mounted."
21287
msgstr ""
21288
21289
#: serverguide/C/file-server.xml:414(para)
21290
msgid ""
21291
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21292
"as follows:"
21293
msgstr ""
21294
21295
#: serverguide/C/file-server.xml:420(programlisting)
21296
#, no-wrap
21297
msgid ""
21298
"\n"
21299
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21300
"rsize=8192,wsize=8192,timeo=14,intr\n"
21301
msgstr ""
21302
21303
#: serverguide/C/file-server.xml:424(para)
21304
msgid ""
21305
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21306
"common</application> package is installed on your client. To install "
21307
"<application>nfs-common</application> enter the following command at the "
21308
"terminal prompt: <screen>\n"
21309
"<command>sudo apt-get install nfs-common</command>\n"
21310
"</screen>"
21311
msgstr ""
21312
21313
#: serverguide/C/file-server.xml:437(ulink)
21314
msgid "Linux NFS faq"
21315
msgstr ""
21316
21317
#: serverguide/C/file-server.xml:439(ulink)
21318
msgid "Ubuntu Wiki NFS Howto"
21319
msgstr ""
21320
21321
#: serverguide/C/file-server.xml:445(title)
21322
msgid "CUPS - Print Server"
21323
msgstr ""
21324
21325
#: serverguide/C/file-server.xml:446(para)
21326
msgid ""
21327
"The primary mechanism for Ubuntu printing and print services is the "
21328
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21329
"printing system is a freely available, portable printing layer which has "
21330
"become the new standard for printing in most Linux distributions."
21331
msgstr ""
21332
21333
#: serverguide/C/file-server.xml:453(para)
21334
msgid ""
21335
"CUPS manages print jobs and queues and provides network printing using the "
21336
"standard Internet Printing Protocol (IPP), while offering support for a very "
21337
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21338
"also supports PostScript Printer Description (PPD) and auto-detection of "
21339
"network printers, and features a simple web-based configuration and "
21340
"administration tool."
21341
msgstr ""
21342
21343
#: serverguide/C/file-server.xml:463(para)
21344
msgid ""
21345
"To install CUPS on your Ubuntu computer, simply use "
21346
"<application>sudo</application> with the <application>apt-get</application> "
21347
"command and give the packages to install as the first parameter. A complete "
21348
"CUPS install has many package dependencies, but they may all be specified on "
21349
"the same command line. Enter the following at a terminal prompt to install "
21350
"CUPS:"
21351
msgstr ""
21352
21353
#: serverguide/C/file-server.xml:468(command)
21354
msgid "sudo apt-get install cups"
21355
msgstr ""
21356
21357
#: serverguide/C/file-server.xml:471(para)
21358
msgid ""
21359
"Upon authenticating with your user password, the packages should be "
21360
"downloaded and installed without error. Upon the conclusion of installation, "
21361
"the CUPS server will be started automatically."
21362
msgstr ""
21363
21364
#: serverguide/C/file-server.xml:476(para)
21365
msgid ""
21366
"For troubleshooting purposes, you can access CUPS server errors via the "
21367
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21368
"error log does not show enough information to troubleshoot any problems you "
21369
"encounter, the verbosity of the CUPS log can be increased by changing the "
21370
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21371
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21372
"everything, from the default of \"info\". If you make this change, remember "
21373
"to change it back once you've solved your problem, to prevent the log file "
21374
"from becoming overly large."
21375
msgstr ""
21376
21377
#: serverguide/C/file-server.xml:489(para)
21378
msgid ""
21379
"The Common UNIX Printing System server's behavior is configured through the "
21380
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21381
"The CUPS configuration file follows the same syntax as the primary "
21382
"configuration file for the Apache HTTP server, so users familiar with "
21383
"editing Apache's configuration file should feel at ease when editing the "
21384
"CUPS configuration file. Some examples of settings you may wish to change "
21385
"initially will be presented here."
21386
msgstr ""
21387
21388
#: serverguide/C/file-server.xml:499(para)
21389
msgid ""
21390
"Prior to editing the configuration file, you should make a copy of the "
21391
"original file and protect it from writing, so you will have the original "
21392
"settings as a reference, and to reuse as necessary."
21393
msgstr ""
21394
21395
#: serverguide/C/file-server.xml:503(para)
21396
msgid ""
21397
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21398
"writing with the following commands, issued at a terminal prompt:"
21399
msgstr ""
21400
21401
#: serverguide/C/file-server.xml:509(command)
21402
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21403
msgstr ""
21404
21405
#: serverguide/C/file-server.xml:510(command)
21406
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21407
msgstr ""
21408
21409
#: serverguide/C/file-server.xml:515(para)
21410
msgid ""
21411
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21412
"address of the designated administrator of the CUPS server, simply edit the "
21413
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21414
"preferred text editor, and add or modify the <emphasis "
21415
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21416
"you are the Administrator for the CUPS server, and your e-mail address is "
21417
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21418
"as such:"
21419
msgstr ""
21420
21421
#: serverguide/C/file-server.xml:526(screen)
21422
#, no-wrap
21423
msgid ""
21424
"\n"
21425
"ServerAdmin bjoy@somebigco.com\n"
21426
msgstr ""
21427
21428
#: serverguide/C/file-server.xml:532(para)
21429
msgid ""
21430
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21431
"server installation listens only on the loopback interface at IP address "
21432
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21433
"listen on an actual network adapter's IP address, you must specify either a "
21434
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21435
"addition of a Listen directive. For example, if your CUPS server resides on "
21436
"a local network at the IP address <emphasis "
21437
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21438
"accessible to the other systems on this subnetwork, you would edit the "
21439
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21440
"such:"
21441
msgstr ""
21442
21443
#: serverguide/C/file-server.xml:546(screen)
21444
#, no-wrap
21445
msgid ""
21446
"\n"
21447
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21448
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21449
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21450
"(IPP)\n"
21451
msgstr ""
21452
21453
#: serverguide/C/file-server.xml:552(para)
21454
msgid ""
21455
"In the example above, you may comment out or remove the reference to the "
21456
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21457
"</application> to listen on that interface, but would rather have it only "
21458
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21459
"listening for all network interfaces for which a certain hostname is bound, "
21460
"including the Loopback, you could create a Listen entry for the hostname "
21461
"<emphasis>socrates</emphasis> as such:"
21462
msgstr ""
21463
21464
#: serverguide/C/file-server.xml:562(screen)
21465
#, no-wrap
21466
msgid ""
21467
"\n"
21468
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21469
msgstr ""
21470
21471
#: serverguide/C/file-server.xml:566(para)
21472
msgid ""
21473
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21474
"instead, as in:"
21475
msgstr ""
21476
21477
#: serverguide/C/file-server.xml:568(screen)
21478
#, no-wrap
21479
msgid ""
21480
"\n"
21481
"Port 631 # Listen on port 631 on all interfaces\n"
21482
msgstr ""
21483
21484
#: serverguide/C/file-server.xml:575(para)
21485
msgid ""
21486
"For more examples of configuration directives in the CUPS server "
21487
"configuration file, view the associated system manual page by entering the "
21488
"following command at a terminal prompt:"
21489
msgstr ""
21490
21491
#: serverguide/C/file-server.xml:582(command)
21492
msgid "man cupsd.conf"
21493
msgstr ""
21494
21495
#: serverguide/C/file-server.xml:586(para)
21496
msgid ""
21497
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21498
"configuration file, you'll need to restart the CUPS server by typing the "
21499
"following command at a terminal prompt:"
21500
msgstr ""
21501
21502
#: serverguide/C/file-server.xml:592(command)
21503
msgid "sudo /etc/init.d/cups restart"
21504
msgstr ""
21505
21506
#: serverguide/C/file-server.xml:598(title)
21507
msgid "Web Interface"
21508
msgstr ""
21509
21510
#: serverguide/C/file-server.xml:600(para)
21511
msgid ""
21512
"CUPS can be configured and monitored using a web interface, which by default "
21513
"is available at <ulink "
21514
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21515
"web interface can be used to perform all printer management tasks."
21516
msgstr ""
21517
21518
#: serverguide/C/file-server.xml:604(para)
21519
msgid ""
21520
"In order to perform administrative tasks via the web interface, you must "
21521
"either have the root account enabled on your server, or authenticate as a "
21522
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21523
"reasons, CUPS won't authenticate a user that doesn't have a password."
21524
msgstr ""
21525
21526
#: serverguide/C/file-server.xml:607(para)
21527
msgid ""
21528
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21529
"at the terminal prompt: <screen>\n"
21530
"<command>sudo usermod -aG lpadmin username</command>\n"
21531
"</screen>"
21532
msgstr ""
21533
21534
#: serverguide/C/file-server.xml:613(para)
21535
msgid ""
21536
"Further documentation is available in the <emphasis "
21537
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21538
msgstr ""
21539
21540
#: serverguide/C/file-server.xml:621(ulink)
21541
msgid "CUPS Website"
21542
msgstr ""
21543
21544
#: serverguide/C/file-server.xml:624(ulink)
21545
msgid "Ubuntu Wiki CUPS page"
21546
msgstr ""
21547
21548
#: serverguide/C/dns.xml:13(title)
21549
msgid "Domain Name Service (DNS)"
21550
msgstr ""
21551
21552
#: serverguide/C/dns.xml:14(para)
21553
msgid ""
21554
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21555
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21556
"alleviates the need to remember IP addresses. Computers that run DNS are "
21557
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21558
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21559
"common program used for maintaining a name server on Linux."
21560
msgstr ""
21561
21562
#: serverguide/C/dns.xml:24(para)
21563
msgid ""
21564
"At a terminal prompt, enter the following command to install "
21565
"<application>dns</application>:"
21566
msgstr ""
21567
21568
#: serverguide/C/dns.xml:28(command)
21569
msgid "sudo apt-get install bind9"
21570
msgstr ""
21571
21572
#: serverguide/C/dns.xml:30(para)
21573
msgid ""
21574
"A very useful package for testing and troubleshooting DNS issues is the "
21575
"dnsutils package. To install <application>dnsutils</application> enter the "
21576
"following:"
21577
msgstr ""
21578
21579
#: serverguide/C/dns.xml:35(command)
21580
msgid "sudo apt-get install dnsutils"
21581
msgstr ""
21582
21583
#: serverguide/C/dns.xml:40(para)
21584
msgid ""
21585
"There a many ways to configure <application>BIND9</application>. Some of the "
21586
"most common configurations are a caching nameserver, primary master, and a "
21587
"as a secondary master."
21588
msgstr ""
21589
21590
#: serverguide/C/dns.xml:46(para)
21591
msgid ""
21592
"When configured as a caching nameserver BIND9 will find the answer to name "
21593
"queries and remember the answer when the domain is queried again."
21594
msgstr ""
21595
21596
#: serverguide/C/dns.xml:52(para)
21597
msgid ""
21598
"As a primary master server BIND9 reads the data for a zone from a file on "
21599
"it's host and is authoritative for that zone."
21600
msgstr ""
21601
21602
#: serverguide/C/dns.xml:57(para)
21603
msgid ""
21604
"In a secondary master configuration BIND9 gets the zone data from another "
21605
"nameserver authoritative for the zone."
21606
msgstr ""
21607
21608
#: serverguide/C/dns.xml:65(para)
21609
msgid ""
21610
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
21611
"directory. The primary configuration file is "
21612
"<filename>/etc/bind/named.conf</filename>."
21613
msgstr ""
21614
21615
#: serverguide/C/dns.xml:72(para)
21616
msgid ""
21617
"The <emphasis>include</emphasis> line specifies the filename which contains "
21618
"the DNS options. The <emphasis>directory</emphasis> line in the "
21619
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
21620
"look for files. All files BIND uses will be relative to this directory."
21621
msgstr ""
21622
21623
#: serverguide/C/dns.xml:80(para)
21624
msgid ""
21625
"The file named <filename>/etc/bind/db.root</filename> describes the root "
21626
"nameservers in the world. The servers change over time, so the "
21627
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
21628
"This is usually done as updates to the <application>bind9</application> "
21629
"package. The <emphasis>zone</emphasis> section defines a master server, and "
21630
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
21631
msgstr ""
21632
21633
#: serverguide/C/dns.xml:90(para)
21634
msgid ""
21635
"It is possible to configure the same server to be a caching name server, "
21636
"primary master, and secondary master. A server can be the Start of Authority "
21637
"(SOA) for one zone, while providing secondary service for another zone. All "
21638
"the while providing caching services for hosts on the local LAN."
21639
msgstr ""
21640
21641
#: serverguide/C/dns.xml:98(title)
21642
msgid "Caching Nameserver"
21643
msgstr ""
21644
21645
#: serverguide/C/dns.xml:99(para)
21646
msgid ""
21647
"The default configuration is setup to act as a caching server. All that is "
21648
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
21649
"uncomment and edit the following in "
21650
"<filename>/etc/bind/named.conf.options</filename>:"
21651
msgstr ""
21652
21653
#: serverguide/C/dns.xml:103(programlisting)
21654
#, no-wrap
21655
msgid ""
21656
"\n"
21657
"forwarders {\n"
21658
" 1.2.3.4;\n"
21659
" 5.6.7.8;\n"
21660
" };\n"
21661
msgstr ""
21662
21663
#: serverguide/C/dns.xml:110(para)
21664
msgid ""
21665
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
21666
"the IP Adresses of actual nameservers."
21667
msgstr ""
21668
21669
#: serverguide/C/dns.xml:114(para)
21670
msgid ""
21671
"Now restart the DNS server, to enable the new configuration. From a terminal "
21672
"prompt:"
21673
msgstr ""
21674
21675
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
21676
msgid "sudo /etc/init.d/bind9 restart"
21677
msgstr ""
21678
21679
#: serverguide/C/dns.xml:120(para)
21680
msgid ""
21681
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
21682
"DNS server."
21683
msgstr ""
21684
21685
#: serverguide/C/dns.xml:125(title)
21686
msgid "Primary Master"
21687
msgstr ""
21688
21689
#: serverguide/C/dns.xml:126(para)
21690
msgid ""
21691
"In this section <application>BIND9</application> will be configured as the "
21692
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
21693
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
21694
"(Fully Qualified Domain Name)."
21695
msgstr ""
21696
21697
#: serverguide/C/dns.xml:132(title)
21698
msgid "Forward Zone File"
21699
msgstr ""
21700
21701
#: serverguide/C/dns.xml:133(para)
21702
msgid ""
21703
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
21704
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
21705
msgstr ""
21706
21707
#: serverguide/C/dns.xml:137(programlisting)
21708
#, no-wrap
21709
msgid ""
21710
"\n"
21711
"zone \"example.com\" {\n"
21712
"\ttype master;\n"
21713
" file \"/etc/bind/db.example.com\";\n"
21714
"};\n"
21715
msgstr ""
21716
21717
#: serverguide/C/dns.xml:143(para)
21718
msgid ""
21719
"Now use an existing zone file as a template to create the "
21720
"<filename>/etc/bind/db.example.com</filename> file:"
21721
msgstr ""
21722
21723
#: serverguide/C/dns.xml:147(command)
21724
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
21725
msgstr ""
21726
21727
#: serverguide/C/dns.xml:149(para)
21728
msgid ""
21729
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
21730
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
21731
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
21732
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
21733
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
21734
"leaving the \".\" at the end."
21735
msgstr ""
21736
21737
#: serverguide/C/dns.xml:155(para)
21738
msgid ""
21739
"Also, create an <emphasis>A record</emphasis> for <emphasis "
21740
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
21741
msgstr ""
21742
21743
#: serverguide/C/dns.xml:159(programlisting)
21744
#, no-wrap
21745
msgid ""
21746
"\n"
21747
";\n"
21748
"; BIND data file for local loopback interface\n"
21749
";\n"
21750
"$TTL 604800\n"
21751
"@ IN SOA ns.example.com. root.example.com. (\n"
21752
" 2 ; Serial\n"
21753
" 604800 ; Refresh\n"
21754
" 86400 ; Retry\n"
21755
" 2419200 ; Expire\n"
21756
" 604800 ) ; Negative Cache TTL\n"
21757
";\n"
21758
"@ IN NS ns.example.com.\n"
21759
"@ IN A 127.0.0.1\n"
21760
"@ IN AAAA ::1\n"
21761
"ns IN A 192.168.1.10\n"
21762
msgstr ""
21763
21764
#: serverguide/C/dns.xml:176(para)
21765
msgid ""
21766
"You must increment the <emphasis>Serial Number</emphasis> every time you "
21767
"make changes to the zone file. If you make multiple changes before "
21768
"restarting BIND9, simply increment the Serial once."
21769
msgstr ""
21770
21771
#: serverguide/C/dns.xml:180(para)
21772
msgid ""
21773
"Now, you can add DNS records to the bottom of the zone file. See <xref "
21774
"linkend=\"dns-record-types\"/> for details."
21775
msgstr ""
21776
21777
#: serverguide/C/dns.xml:184(para)
21778
msgid ""
21779
"Many admins like to use the last date edited as the serial of a zone, such "
21780
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
21781
"<emphasis>ss</emphasis> is the Serial Number)"
21782
msgstr ""
21783
21784
#: serverguide/C/dns.xml:189(para)
21785
msgid ""
21786
"Once you have made a change to the zone file "
21787
"<application>BIND9</application> will need to be restarted for the changes "
21788
"to take effect:"
21789
msgstr ""
21790
21791
#: serverguide/C/dns.xml:198(title)
21792
msgid "Reverse Zone File"
21793
msgstr ""
21794
21795
#: serverguide/C/dns.xml:199(para)
21796
msgid ""
21797
"Now that the zone is setup and resolving names to IP Adresses a "
21798
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
21799
"DNS to resolve an address to a name."
21800
msgstr ""
21801
21802
#: serverguide/C/dns.xml:203(para)
21803
msgid "Edit /etc/bind/named.conf.local and add the following:"
21804
msgstr ""
21805
21806
#: serverguide/C/dns.xml:206(programlisting)
21807
#, no-wrap
21808
msgid ""
21809
"\n"
21810
"zone \"1.168.192.in-addr.arpa\" {\n"
21811
" type master;\n"
21812
" notify no;\n"
21813
" file \"/etc/bind/db.192\";\n"
21814
"};\n"
21815
msgstr ""
21816
21817
#: serverguide/C/dns.xml:214(para)
21818
msgid ""
21819
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
21820
"whatever network you are using. Also, name the zone file "
21821
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
21822
"first octet of your network."
21823
msgstr ""
21824
21825
#: serverguide/C/dns.xml:219(para)
21826
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
21827
msgstr ""
21828
21829
#: serverguide/C/dns.xml:223(command)
21830
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
21831
msgstr ""
21832
21833
#: serverguide/C/dns.xml:225(para)
21834
msgid ""
21835
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
21836
"same options as <filename>/etc/bind/db.example.com</filename>:"
21837
msgstr ""
21838
21839
#: serverguide/C/dns.xml:229(programlisting)
21840
#, no-wrap
21841
msgid ""
21842
"\n"
21843
";\n"
21844
"; BIND reverse data file for local loopback interface\n"
21845
";\n"
21846
"$TTL 604800\n"
21847
"@ IN SOA ns.example.com. root.example.com. (\n"
21848
" 2 ; Serial\n"
21849
" 604800 ; Refresh\n"
21850
" 86400 ; Retry\n"
21851
" 2419200 ; Expire\n"
21852
" 604800 ) ; Negative Cache TTL\n"
21853
";\n"
21854
"@ IN NS ns.\n"
21855
"10 IN PTR ns.example.com.\n"
21856
msgstr ""
21857
21858
#: serverguide/C/dns.xml:244(para)
21859
msgid ""
21860
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
21861
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
21862
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
21863
"create a <emphasis>PTR record</emphasis> in "
21864
"<filename>/etc/bind/db.192</filename>."
21865
msgstr ""
21866
21867
#: serverguide/C/dns.xml:249(para)
21868
msgid ""
21869
"After creating the reverse zone file restart "
21870
"<application>BIND9</application>:"
21871
msgstr ""
21872
21873
#: serverguide/C/dns.xml:258(title)
21874
msgid "Secondary Master"
21875
msgstr ""
21876
21877
#: serverguide/C/dns.xml:259(para)
21878
msgid ""
21879
"Once a <emphasis>Primary Master</emphasis> has been configured a "
21880
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
21881
"availability of the domain should the Primary become unavailable."
21882
msgstr ""
21883
21884
#: serverguide/C/dns.xml:263(para)
21885
msgid ""
21886
"First, on the Primary Master server, the zone transfer needs to be allowed. "
21887
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
21888
"and Reverse zone definitions in "
21889
"<filename>/etc/bind/named.conf.local</filename>:"
21890
msgstr ""
21891
21892
#: serverguide/C/dns.xml:267(programlisting)
21893
#, no-wrap
21894
msgid ""
21895
"\n"
21896
"zone \"example.com\" {\n"
21897
" type master;\n"
21898
"\tfile \"/etc/bind/db.example.com\";\n"
21899
" allow-transfer { 192.168.1.11; };\n"
21900
"};\n"
21901
"\n"
21902
"zone \"1.168.192.in-addr.arpa\" {\n"
21903
" type master;\n"
21904
" notify no;\n"
21905
" file \"/etc/bind/db.192\";\n"
21906
"\tallow-transfer { 192.168.1.11; };\n"
21907
"};\n"
21908
msgstr ""
21909
21910
#: serverguide/C/dns.xml:282(para)
21911
msgid ""
21912
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
21913
"Secondary nameserver."
21914
msgstr ""
21915
21916
#: serverguide/C/dns.xml:286(para)
21917
msgid ""
21918
"Next, on the Secondary Master, install the <application>bind9</application> "
21919
"package the same way as on the Primary. Then edit the "
21920
"<filename>/etc/bind/named.conf.local</filename> and add the following "
21921
"declarations for the Forward and Reverse zones:"
21922
msgstr ""
21923
21924
#: serverguide/C/dns.xml:290(programlisting)
21925
#, no-wrap
21926
msgid ""
21927
"\n"
21928
"zone \"example.com\" {\n"
21929
"\ttype slave;\n"
21930
" file \"/var/cache/bind/db.example.com\";\n"
21931
" masters { 192.168.1.10; };\n"
21932
"}; \n"
21933
" \n"
21934
"zone \"1.168.192.in-addr.arpa\" {\n"
21935
"\ttype slave;\n"
21936
" file \"/var/cache/bind/db.192\";\n"
21937
" masters { 192.168.1.10; };\n"
21938
"};\n"
21939
msgstr ""
21940
21941
#: serverguide/C/dns.xml:304(para)
21942
msgid ""
21943
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
21944
"Primary nameserver."
21945
msgstr ""
21946
21947
#: serverguide/C/dns.xml:308(para)
21948
msgid "Restart <application>BIND9</application> on the Secondary Master:"
21949
msgstr ""
21950
21951
#: serverguide/C/dns.xml:314(para)
21952
msgid ""
21953
"In <filename>/var/log/syslog</filename> you should see something similar to:"
21954
msgstr ""
21955
21956
#: serverguide/C/dns.xml:317(programlisting)
21957
#, no-wrap
21958
msgid ""
21959
"\n"
21960
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
21961
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
21962
msgstr ""
21963
21964
#: serverguide/C/dns.xml:322(para)
21965
msgid ""
21966
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
21967
"on the Primary is larger than the one on the Secondary."
21968
msgstr ""
21969
21970
#: serverguide/C/dns.xml:328(para)
21971
msgid ""
21972
"The default directory for non-authoritative zone files is "
21973
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
21974
"<application>AppArmor</application> to allow the "
21975
"<application>named</application> daemon to write to. For more information on "
21976
"AppArmor see <xref linkend=\"apparmor\"/>."
21977
msgstr ""
21978
21979
#: serverguide/C/dns.xml:339(para)
21980
msgid ""
21981
"This section covers ways to help determine the cause when problems happen "
21982
"with DNS and <application>BIND9</application>."
21983
msgstr ""
21984
21985
#: serverguide/C/dns.xml:345(title)
21986
msgid "resolv.conf"
21987
msgstr ""
21988
21989
#: serverguide/C/dns.xml:346(para)
21990
msgid ""
21991
"The first step in testing <application>BIND9</application> is to add the "
21992
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
21993
"be configured as well as another host to double check things. Simply edit "
21994
"<filename>/etc/resolv.conf</filename> and add the following:"
21995
msgstr ""
21996
21997
#: serverguide/C/dns.xml:351(programlisting)
21998
#, no-wrap
21999
msgid ""
22000
"\n"
22001
"nameserver\t192.168.1.10\n"
22002
"nameserver\t192.168.1.11\n"
22003
msgstr ""
22004
22005
#: serverguide/C/dns.xml:356(para)
22006
msgid ""
22007
"You should also add the IP Address of the Secondary nameserver in case the "
22008
"Primary becomes unavailable."
22009
msgstr ""
22010
22011
#: serverguide/C/dns.xml:362(title)
22012
msgid "dig"
22013
msgstr ""
22014
22015
#: serverguide/C/dns.xml:363(para)
22016
msgid ""
22017
"If you installed the <application>dnsutils</application> package you can "
22018
"test your setup using the DNS lookup utility <application>dig</application>:"
22019
msgstr ""
22020
22021
#: serverguide/C/dns.xml:369(para)
22022
msgid ""
22023
"After installing <application>BIND9</application> use "
22024
"<application>dig</application> against the loopback interface to make sure "
22025
"it is listening on port 53. From a terminal prompt:"
22026
msgstr ""
22027
22028
#: serverguide/C/dns.xml:374(command)
22029
msgid "dig -x 127.0.0.1"
22030
msgstr ""
22031
22032
#: serverguide/C/dns.xml:376(para)
22033
msgid "You should see lines similar to the following in the command output:"
22034
msgstr ""
22035
22036
#: serverguide/C/dns.xml:379(programlisting)
22037
#, no-wrap
22038
msgid ""
22039
"\n"
22040
";; Query time: 1 msec\n"
22041
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22042
msgstr ""
22043
22044
#: serverguide/C/dns.xml:385(para)
22045
msgid ""
22046
"If you have configured <application>BIND9</application> as a "
22047
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22048
"the query time:"
22049
msgstr ""
22050
22051
#: serverguide/C/dns.xml:390(command)
22052
msgid "dig ubuntu.com"
22053
msgstr ""
22054
22055
#: serverguide/C/dns.xml:392(para)
22056
msgid "Note the query time toward the end of the command output:"
22057
msgstr ""
22058
22059
#: serverguide/C/dns.xml:395(programlisting)
22060
#, no-wrap
22061
msgid ""
22062
"\n"
22063
";; Query time: 49 msec\n"
22064
msgstr ""
22065
22066
#: serverguide/C/dns.xml:398(para)
22067
msgid "After a second dig there should be improvement:"
22068
msgstr ""
22069
22070
#: serverguide/C/dns.xml:401(programlisting)
22071
#, no-wrap
22072
msgid ""
22073
"\n"
22074
";; Query time: 1 msec\n"
22075
msgstr ""
22076
22077
#: serverguide/C/dns.xml:408(title)
22078
msgid "ping"
22079
msgstr ""
22080
22081
#: serverguide/C/dns.xml:410(para)
22082
msgid ""
22083
"Now to demonstrate how applications make use of DNS to resolve a host name "
22084
"use the <application>ping</application> utility to send an ICMP echo "
22085
"request. From a terminal prompt enter:"
22086
msgstr ""
22087
22088
#: serverguide/C/dns.xml:416(command)
22089
msgid "ping example.com"
22090
msgstr ""
22091
22092
#: serverguide/C/dns.xml:418(para)
22093
msgid ""
22094
"This tests if the nameserver can resolve the name "
22095
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22096
"should resemble:"
22097
msgstr ""
22098
22099
#: serverguide/C/dns.xml:422(programlisting)
22100
#, no-wrap
22101
msgid ""
22102
"\n"
22103
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22104
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22105
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22106
msgstr ""
22107
22108
#: serverguide/C/dns.xml:429(title)
22109
msgid "named-checkzone"
22110
msgstr ""
22111
22112
#: serverguide/C/dns.xml:430(para)
22113
msgid ""
22114
"A great way to test your zone files is by using the <application>named-"
22115
"checkzone</application> utility installed with the "
22116
"<application>bind9</application> package. This utility allows you to make "
22117
"sure the configuration is correct before restarting "
22118
"<application>BIND9</application> and making the changes live."
22119
msgstr ""
22120
22121
#: serverguide/C/dns.xml:437(para)
22122
msgid ""
22123
"To test our example Forward zone file enter the following from a command "
22124
"prompt:"
22125
msgstr ""
22126
22127
#: serverguide/C/dns.xml:441(command)
22128
msgid "named-checkzone example.com /etc/bind/db.example.com"
22129
msgstr ""
22130
22131
#: serverguide/C/dns.xml:443(para)
22132
msgid ""
22133
"If everything is configured correctly you should see output similar to:"
22134
msgstr ""
22135
22136
#: serverguide/C/dns.xml:446(programlisting)
22137
#, no-wrap
22138
msgid ""
22139
"\n"
22140
"zone example.com/IN: loaded serial 6\n"
22141
"OK\n"
22142
msgstr ""
22143
22144
#: serverguide/C/dns.xml:452(para)
22145
msgid "Similarly, to test the Reverse zone file enter the following:"
22146
msgstr ""
22147
22148
#: serverguide/C/dns.xml:456(command)
22149
msgid "named-checkzone example.com /etc/bind/db.192"
22150
msgstr ""
22151
22152
#: serverguide/C/dns.xml:458(para)
22153
msgid "The output should be similar to:"
22154
msgstr ""
22155
22156
#: serverguide/C/dns.xml:461(programlisting)
22157
#, no-wrap
22158
msgid ""
22159
"\n"
22160
"zone example.com/IN: loaded serial 3\n"
22161
"OK\n"
22162
msgstr ""
22163
22164
#: serverguide/C/dns.xml:468(para)
22165
msgid ""
22166
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22167
"different."
22168
msgstr ""
22169
22170
#: serverguide/C/dns.xml:475(title)
22171
msgid "Logging"
22172
msgstr ""
22173
22174
#: serverguide/C/dns.xml:476(para)
22175
msgid ""
22176
"<application>BIND9</application> has a wide variety of logging configuration "
22177
"options available. There are two main options. The "
22178
"<emphasis>channel</emphasis> option configures where logs go, and the "
22179
"<emphasis>category</emphasis> option determines what information to log."
22180
msgstr ""
22181
22182
#: serverguide/C/dns.xml:480(para)
22183
msgid "If no logging option is configured the default option is:"
22184
msgstr ""
22185
22186
#: serverguide/C/dns.xml:483(programlisting)
22187
#, no-wrap
22188
msgid ""
22189
"\n"
22190
"logging {\n"
22191
" category default { default_syslog; default_debug; };\n"
22192
" category unmatched { null; };\n"
22193
"};\n"
22194
msgstr ""
22195
22196
#: serverguide/C/dns.xml:489(para)
22197
msgid ""
22198
"This section covers configuring <application>BIND9</application> to send "
22199
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22200
"file."
22201
msgstr ""
22202
22203
#: serverguide/C/dns.xml:494(para)
22204
msgid ""
22205
"First, we need to configure a channel to specify which file to send the "
22206
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22207
"the following:"
22208
msgstr ""
22209
22210
#: serverguide/C/dns.xml:498(programlisting)
22211
#, no-wrap
22212
msgid ""
22213
"\n"
22214
"logging {\n"
22215
" channel query.log { \n"
22216
" file \"/var/log/query.log\";\n"
22217
" severity debug 3; \n"
22218
" }; \n"
22219
"};\n"
22220
msgstr ""
22221
22222
#: serverguide/C/dns.xml:508(para)
22223
msgid "Next, configure a category to send all DNS queries to the query file:"
22224
msgstr ""
22225
22226
#: serverguide/C/dns.xml:511(programlisting)
22227
#, no-wrap
22228
msgid ""
22229
"\n"
22230
"logging {\n"
22231
" channel query.log { \n"
22232
" file \"/var/log/query.log\"; \n"
22233
" severity debug 3; \n"
22234
" }; \n"
22235
" <emphasis>category queries { query.log; };</emphasis> \n"
22236
"};\n"
22237
msgstr ""
22238
22239
#: serverguide/C/dns.xml:523(para)
22240
msgid ""
22241
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22242
"level isn't specified level 1 is the default."
22243
msgstr ""
22244
22245
#: serverguide/C/dns.xml:529(para)
22246
msgid ""
22247
"Since the <emphasis>named daemon</emphasis> runs as the "
22248
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22249
"file must be created and the ownership changed:"
22250
msgstr ""
22251
22252
#: serverguide/C/dns.xml:534(command)
22253
msgid "sudo touch /var/log/query.log"
22254
msgstr ""
22255
22256
#: serverguide/C/dns.xml:535(command)
22257
msgid "sudo chown bind /var/log/query.log"
22258
msgstr ""
22259
22260
#: serverguide/C/dns.xml:539(para)
22261
msgid ""
22262
"Before <application>named</application> daemon can write to the new log file "
22263
"the <application>AppArmor</application> profile must be updated. First, edit "
22264
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22265
msgstr ""
22266
22267
#: serverguide/C/dns.xml:543(programlisting)
22268
#, no-wrap
22269
msgid ""
22270
"\n"
22271
"/var/log/query.log w,\n"
22272
msgstr ""
22273
22274
#: serverguide/C/dns.xml:546(para)
22275
msgid "Next, reload the profile:"
22276
msgstr ""
22277
22278
#: serverguide/C/dns.xml:550(command)
22279
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22280
msgstr ""
22281
22282
#: serverguide/C/dns.xml:552(para)
22283
msgid ""
22284
"For more information on <application>AppArmor</application> see <xref "
22285
"linkend=\"apparmor\"/>"
22286
msgstr ""
22287
22288
#: serverguide/C/dns.xml:557(para)
22289
msgid ""
22290
"Now restart <application>BIND9</application> for the changes to take effect:"
22291
msgstr ""
22292
22293
#: serverguide/C/dns.xml:565(para)
22294
msgid ""
22295
"You should see the file <filename>/var/log/query.log</filename> fill with "
22296
"query information. This is a simple example of the "
22297
"<application>BIND9</application> logging options. For coverage of advanced "
22298
"options see <xref linkend=\"dns-more-info\"/>."
22299
msgstr ""
22300
22301
#: serverguide/C/dns.xml:574(title)
22302
msgid "Common Record Types"
22303
msgstr ""
22304
22305
#: serverguide/C/dns.xml:575(para)
22306
msgid "This section covers some of the most common DNS record types."
22307
msgstr ""
22308
22309
#: serverguide/C/dns.xml:580(para)
22310
msgid ""
22311
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22312
msgstr ""
22313
22314
#: serverguide/C/dns.xml:583(programlisting)
22315
#, no-wrap
22316
msgid ""
22317
"\n"
22318
"www IN A 192.168.1.12\n"
22319
msgstr ""
22320
22321
#: serverguide/C/dns.xml:588(para)
22322
msgid ""
22323
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22324
"record. You cannot create a CNAME record pointing to another CNAME record."
22325
msgstr ""
22326
22327
#: serverguide/C/dns.xml:591(programlisting)
22328
#, no-wrap
22329
msgid ""
22330
"\n"
22331
"web IN CNAME www\n"
22332
msgstr ""
22333
22334
#: serverguide/C/dns.xml:596(para)
22335
msgid ""
22336
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22337
"to. Must point to an A record, not a CNAME."
22338
msgstr ""
22339
22340
#: serverguide/C/dns.xml:599(programlisting)
22341
#, no-wrap
22342
msgid ""
22343
"\n"
22344
" IN MX 1 mail.example.com.\n"
22345
"mail IN A 192.168.1.13\n"
22346
msgstr ""
22347
22348
#: serverguide/C/dns.xml:605(para)
22349
msgid ""
22350
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22351
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22352
"Secondary servers are defined."
22353
msgstr ""
22354
22355
#: serverguide/C/dns.xml:609(programlisting)
22356
#, no-wrap
22357
msgid ""
22358
"\n"
22359
" IN NS ns.example.com.\n"
22360
"\tIN NS ns2.example.com.\n"
22361
"ns IN A 192.168.1.10\n"
22362
"ns2\tIN A\t 192.168.1.11\n"
22363
msgstr ""
22364
22365
#: serverguide/C/dns.xml:622(para)
22366
msgid ""
22367
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22368
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22369
msgstr ""
22370
22371
#: serverguide/C/dns.xml:627(para)
22372
msgid ""
22373
"For in depth coverage of <emphasis>DNS</emphasis> and "
22374
"<application>BIND9</application> see <ulink "
22375
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22376
msgstr ""
22377
22378
#: serverguide/C/dns.xml:632(para)
22379
msgid ""
22380
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22381
"BIND</ulink> is a popular book now in it's fifth edition."
22382
msgstr ""
22383
22384
#: serverguide/C/dns.xml:637(para)
22385
msgid ""
22386
"A great place to ask for <application>BIND9</application> assistance, and "
22387
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22388
"server</emphasis> IRC channel on <ulink "
22389
"url=\"http://freenode.net\">freenode</ulink>."
22390
msgstr ""
22391
22392
#: serverguide/C/dns.xml:643(para)
22393
msgid ""
22394
"Also, see the <ulink "
22395
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22396
"HOWTO</ulink> in the Ubuntu Wiki."
22397
msgstr ""
22398
22399
#: serverguide/C/databases.xml:13(title)
22400
msgid "Databases"
22401
msgstr ""
22402
22403
#: serverguide/C/databases.xml:14(para)
22404
msgid "Ubuntu provides two popular database servers. They are:"
22405
msgstr ""
22406
22407
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22408
msgid "PostgreSQL"
22409
msgstr ""
22410
22411
#: serverguide/C/databases.xml:25(para)
22412
msgid ""
22413
"They are available in the main repository. This section explains how to "
22414
"install and configure these database servers."
22415
msgstr ""
22416
22417
#: serverguide/C/databases.xml:32(para)
22418
msgid ""
22419
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22420
"It is intended for mission-critical, heavy-load production systems as well "
22421
"as for embedding into mass-deployed software."
22422
msgstr ""
22423
22424
#: serverguide/C/databases.xml:41(para)
22425
msgid "To install MySQL, run the following command from a terminal prompt:"
22426
msgstr ""
22427
22428
#: serverguide/C/databases.xml:46(command)
22429
msgid "sudo apt-get install mysql-server"
22430
msgstr ""
22431
22432
#: serverguide/C/databases.xml:48(para)
22433
msgid ""
22434
"During the installation process you will be prompted to enter a password for "
22435
"the <application>MySQL</application> root user."
22436
msgstr ""
22437
22438
#: serverguide/C/databases.xml:53(para)
22439
msgid ""
22440
"Once the installation is complete, the MySQL server should be started "
22441
"automatically. You can run the following command from a terminal prompt to "
22442
"check whether the MySQL server is running:"
22443
msgstr ""
22444
22445
#: serverguide/C/databases.xml:61(command)
22446
msgid "sudo netstat -tap | grep mysql"
22447
msgstr ""
22448
22449
#: serverguide/C/databases.xml:70(programlisting)
22450
#, no-wrap
22451
msgid ""
22452
"\n"
22453
"tcp 0 0 localhost:mysql *:* LISTEN "
22454
" 2556/mysqld\n"
22455
msgstr ""
22456
22457
#: serverguide/C/databases.xml:74(para)
22458
msgid ""
22459
"If the server is not running correctly, you can type the following command "
22460
"to start it:"
22461
msgstr ""
22462
22463
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22464
msgid "sudo /etc/init.d/mysql restart"
22465
msgstr ""
22466
22467
#: serverguide/C/databases.xml:85(para)
22468
msgid ""
22469
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22470
"the basic settings -- log file, port number, etc. For example, to configure "
22471
"<application>MySQL</application> to listen for connections from network "
22472
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22473
"server's IP address:"
22474
msgstr ""
22475
22476
#: serverguide/C/databases.xml:91(programlisting)
22477
#, no-wrap
22478
msgid ""
22479
"\n"
22480
"bind-address = 192.168.0.5\n"
22481
msgstr ""
22482
22483
#: serverguide/C/databases.xml:95(para)
22484
msgid "Replace 192.168.0.5 with the appropriate address."
22485
msgstr ""
22486
22487
#: serverguide/C/databases.xml:99(para)
22488
msgid ""
22489
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22490
"<application>mysql</application> daemon will need to be restarted:"
22491
msgstr ""
22492
22493
#: serverguide/C/databases.xml:107(para)
22494
msgid ""
22495
"If you would like to change the "
22496
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22497
"terminal enter:"
22498
msgstr ""
22499
22500
#: serverguide/C/databases.xml:113(command)
22501
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22502
msgstr ""
22503
22504
#: serverguide/C/databases.xml:116(para)
22505
msgid ""
22506
"The <application>mysql</application> daemon will be stopped, and you will be "
22507
"prompted to enter a new password."
22508
msgstr ""
22509
22510
#: serverguide/C/databases.xml:125(para)
22511
msgid ""
22512
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22513
"more information."
22514
msgstr ""
22515
22516
#: serverguide/C/databases.xml:130(para)
22517
msgid ""
22518
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22519
"<application>mysql-doc-5.0</application> package. To install the package "
22520
"enter the following in a terminal:"
22521
msgstr ""
22522
22523
#: serverguide/C/databases.xml:135(command)
22524
msgid "sudo apt-get install mysql-doc-5.0"
22525
msgstr ""
22526
22527
#: serverguide/C/databases.xml:137(para)
22528
msgid ""
22529
"The documentation is in HTML format, to view them enter "
22530
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22531
"chapter/index.html</command> in your browser's address bar."
22532
msgstr ""
22533
22534
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22535
msgid ""
22536
"For general SQL information see <ulink "
22537
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22538
"Special Edition</ulink> by Rafe Colburn."
22539
msgstr ""
22540
22541
#: serverguide/C/databases.xml:149(para)
22542
msgid ""
22543
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22544
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22545
msgstr ""
22546
22547
#: serverguide/C/databases.xml:158(para)
22548
msgid ""
22549
"PostgreSQL is an object-relational database system that has the features of "
22550
"traditional commercial database systems with enhancements to be found in "
22551
"next-generation DBMS systems."
22552
msgstr ""
22553
22554
#: serverguide/C/databases.xml:165(para)
22555
msgid ""
22556
"To install PostgreSQL, run the following command in the command prompt:"
22557
msgstr ""
22558
22559
#: serverguide/C/databases.xml:172(command)
22560
msgid "sudo apt-get install postgresql"
22561
msgstr ""
22562
22563
#: serverguide/C/databases.xml:176(para)
22564
msgid ""
22565
"Once the installation is complete, you should configure the PostgreSQL "
22566
"server based on your needs, although the default configuration is viable."
22567
msgstr ""
22568
22569
#: serverguide/C/databases.xml:184(para)
22570
msgid ""
22571
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22572
"client authentication methods. By default, IDENT authentication method is "
22573
"used for <application>postgres</application> and local users. Please refer "
22574
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22575
"PostgreSQL Administrator's Guide</ulink>."
22576
msgstr ""
22577
22578
#: serverguide/C/databases.xml:191(para)
22579
msgid ""
22580
"The following discussion assumes that you wish to enable TCP/IP connections "
22581
"and use the MD5 method for client authentication. PostgreSQL configuration "
22582
"files are stored in the "
22583
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22584
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22585
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22586
msgstr ""
22587
22588
#: serverguide/C/databases.xml:201(para)
22589
msgid ""
22590
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
22591
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
22592
msgstr ""
22593
22594
#: serverguide/C/databases.xml:208(para)
22595
msgid ""
22596
"To enable TCP/IP connections, edit the file "
22597
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
22598
msgstr ""
22599
22600
#: serverguide/C/databases.xml:210(para)
22601
msgid ""
22602
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
22603
"change it to:"
22604
msgstr ""
22605
22606
#: serverguide/C/databases.xml:213(programlisting)
22607
#, no-wrap
22608
msgid ""
22609
"\n"
22610
"listen_addresses = 'localhost'\n"
22611
msgstr ""
22612
22613
#: serverguide/C/databases.xml:217(para)
22614
msgid ""
22615
"To allow other computers to connect to your "
22616
"<application>PostgreSQL</application> server replace 'localhost' with the "
22617
"<emphasis>IP Address</emphasis> of your server."
22618
msgstr ""
22619
22620
#: serverguide/C/databases.xml:222(para)
22621
msgid ""
22622
"You may also edit all other parameters, if you know what you are doing! For "
22623
"details, refer to the configuration file or to the PostgreSQL documentation."
22624
msgstr ""
22625
22626
#: serverguide/C/databases.xml:227(para)
22627
msgid ""
22628
"Now that we can connect to our <application>PostgreSQL</application> server, "
22629
"the next step is to set a password for the <emphasis>postgres</emphasis> "
22630
"user. Run the following command at a terminal prompt to connect to the "
22631
"default PostgreSQL template database:"
22632
msgstr ""
22633
22634
#: serverguide/C/databases.xml:234(command)
22635
msgid "sudo -u postgres psql template1"
22636
msgstr ""
22637
22638
#: serverguide/C/databases.xml:236(para)
22639
msgid ""
22640
"The above command connects to PostgreSQL database "
22641
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
22642
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
22643
"run the following SQL command at the <application>psql</application> prompt "
22644
"to configure the password for the user <emphasis "
22645
"role=\"italics\">postgres</emphasis>."
22646
msgstr ""
22647
22648
#: serverguide/C/databases.xml:244(command)
22649
msgid "ALTER USER postgres with encrypted password 'your_password';"
22650
msgstr ""
22651
22652
#: serverguide/C/databases.xml:246(para)
22653
msgid ""
22654
"After configuring the password, edit the file "
22655
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
22656
"<emphasis>MD5</emphasis> authentication with the "
22657
"<emphasis>postgres</emphasis> user:"
22658
msgstr ""
22659
22660
#: serverguide/C/databases.xml:252(programlisting)
22661
#, no-wrap
22662
msgid ""
22663
"\n"
22664
"local all postgres md5\n"
22665
msgstr ""
22666
22667
#: serverguide/C/databases.xml:256(para)
22668
msgid ""
22669
"Finally, you should restart the <application>PostgreSQL</application> "
22670
"service to initialize the new configuration. From a terminal prompt enter "
22671
"the following to restart <application>PostgreSQL</application>:"
22672
msgstr ""
22673
22674
#: serverguide/C/databases.xml:262(command)
22675
msgid "sudo /etc/init.d/postgresql-8.4 restart"
22676
msgstr ""
22677
22678
#: serverguide/C/databases.xml:265(para)
22679
msgid ""
22680
"The above configuration is not complete by any means. Please refer <ulink "
22681
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
22682
"Administrator's Guide</ulink> to configure more parameters."
22683
msgstr ""
22684
22685
#: serverguide/C/databases.xml:276(para)
22686
msgid ""
22687
"As mentioned above the <ulink "
22688
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
22689
"Guide</ulink> is an excellent resource. The guide is also available in the "
22690
"<application>postgresql-doc-8.4</application> package. Execute the following "
22691
"in a terminal to install the package:"
22692
msgstr ""
22693
22694
#: serverguide/C/databases.xml:282(command)
22695
msgid "sudo apt-get install postgresql-doc-8.4"
22696
msgstr ""
22697
22698
#: serverguide/C/databases.xml:284(para)
22699
msgid ""
22700
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
22701
"8.4/html/index.html</command> into the address bar of your browser."
22702
msgstr ""
22703
22704
#: serverguide/C/databases.xml:296(para)
22705
msgid ""
22706
"Also, see the <ulink "
22707
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
22708
"Wiki</ulink> page for more information."
22709
msgstr ""
22710
22711
#: serverguide/C/clustering.xml:13(title)
22712
msgid "Clustering"
22713
msgstr ""
22714
22715
#: serverguide/C/clustering.xml:16(title)
22716
msgid "DRBD"
22717
msgstr ""
22718
22719
#: serverguide/C/clustering.xml:18(para)
22720
msgid ""
22721
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
22722
"multiple hosts. The replication is transparent to other applications on the "
22723
"host systems. Any block device hard disks, partitions, RAID devices, logical "
22724
"volumes, etc can be mirrored."
22725
msgstr ""
22726
22727
#: serverguide/C/clustering.xml:24(para)
22728
msgid ""
22729
"To get started using <application>drbd</application>, first install the "
22730
"necessary packages. From a terminal enter:"
22731
msgstr ""
22732
22733
#: serverguide/C/clustering.xml:29(command)
22734
msgid "sudo apt-get install drbd8-utils"
22735
msgstr ""
22736
22737
#: serverguide/C/clustering.xml:33(para)
22738
msgid ""
22739
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
22740
"virtual machine you will need to manually compile the "
22741
"<application>drbd</application> module. It may be easier to install the "
22742
"<application>linux-server</application> package inside the virtual machine."
22743
msgstr ""
22744
22745
#: serverguide/C/clustering.xml:40(para)
22746
msgid ""
22747
"This section covers setting up a <application>drbd</application> to "
22748
"replicate a separate <filename>/srv</filename> partition, with an "
22749
"<application>ext3</application> filesystem between two hosts. The partition "
22750
"size is not particularly relevant, but both partitions need to be the same "
22751
"size."
22752
msgstr ""
22753
22754
#: serverguide/C/clustering.xml:49(para)
22755
msgid ""
22756
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
22757
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
22758
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
22759
"See <xref linkend=\"dns\"/> for details."
22760
msgstr ""
22761
22762
#: serverguide/C/clustering.xml:57(para)
22763
msgid ""
22764
"To configure <application>drbd</application>, on the first host edit "
22765
"<filename>/etc/drbd.conf</filename>:"
22766
msgstr ""
22767
22768
#: serverguide/C/clustering.xml:61(programlisting)
22769
#, no-wrap
22770
msgid ""
22771
"\n"
22772
"global { usage-count no; }\n"
22773
"common { syncer { rate 100M; } }\n"
22774
"resource r0 {\n"
22775
" protocol C;\n"
22776
" startup {\n"
22777
" wfc-timeout 15;\n"
22778
" degr-wfc-timeout 60;\n"
22779
" }\n"
22780
" net {\n"
22781
" cram-hmac-alg sha1;\n"
22782
" shared-secret \"secret\";\n"
22783
" }\n"
22784
" on drbd01 {\n"
22785
" device /dev/drbd0;\n"
22786
" disk /dev/sdb1;\n"
22787
" address 192.168.0.1:7788;\n"
22788
" meta-disk internal;\n"
22789
" }\n"
22790
" on drbd02 {\n"
22791
" device /dev/drbd0;\n"
22792
" disk /dev/sdb1;\n"
22793
" address 192.168.0.2:7788;\n"
22794
" meta-disk internal;\n"
22795
" }\n"
22796
"} \n"
22797
msgstr ""
22798
22799
#: serverguide/C/clustering.xml:90(para)
22800
msgid ""
22801
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
22802
"this example their default values are fine."
22803
msgstr ""
22804
22805
#: serverguide/C/clustering.xml:98(para)
22806
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
22807
msgstr ""
22808
22809
#: serverguide/C/clustering.xml:103(command)
22810
msgid "scp /etc/drbd.conf drbd02:~"
22811
msgstr ""
22812
22813
#: serverguide/C/clustering.xml:109(para)
22814
msgid ""
22815
"And, on <emphasis>drbd02</emphasis> move the file to "
22816
"<filename>/etc</filename>:"
22817
msgstr ""
22818
22819
#: serverguide/C/clustering.xml:114(command)
22820
msgid "sudo mv drbd.conf /etc/"
22821
msgstr ""
22822
22823
#: serverguide/C/clustering.xml:120(para)
22824
msgid ""
22825
"Next, on both hosts, start the <application>drbd</application> daemon:"
22826
msgstr ""
22827
22828
#: serverguide/C/clustering.xml:125(command)
22829
msgid "sudo /etc/init.d/drbd start"
22830
msgstr ""
22831
22832
#: serverguide/C/clustering.xml:131(para)
22833
msgid ""
22834
"Now using the <application>drbdadm</application> utility initialize the meta "
22835
"data storage. On each server execute:"
22836
msgstr ""
22837
22838
#: serverguide/C/clustering.xml:137(command)
22839
msgid "sudo drbdadm create-md r0"
22840
msgstr ""
22841
22842
#: serverguide/C/clustering.xml:143(para)
22843
msgid ""
22844
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
22845
"primary, enter the following:"
22846
msgstr ""
22847
22848
#: serverguide/C/clustering.xml:148(command)
22849
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
22850
msgstr ""
22851
22852
#: serverguide/C/clustering.xml:154(para)
22853
msgid ""
22854
"After executing the above command, the data will start syncing with the "
22855
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
22856
"the following:"
22857
msgstr ""
22858
22859
#: serverguide/C/clustering.xml:160(command)
22860
msgid "watch -n1 cat /proc/drbd"
22861
msgstr ""
22862
22863
#: serverguide/C/clustering.xml:163(para)
22864
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
22865
msgstr ""
22866
22867
#: serverguide/C/clustering.xml:170(para)
22868
msgid ""
22869
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
22870
msgstr ""
22871
22872
#: serverguide/C/clustering.xml:175(command)
22873
msgid "sudo mkfs.ext3 /dev/drbd0"
22874
msgstr ""
22875
22876
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
22877
msgid "sudo mount /dev/drbd0 /srv"
22878
msgstr ""
22879
22880
#: serverguide/C/clustering.xml:186(para)
22881
msgid ""
22882
"To test that the data is actually syncing between the hosts copy some files "
22883
"on the <emphasis>drbd01</emphasis>, the primary, to "
22884
"<filename>/srv</filename>:"
22885
msgstr ""
22886
22887
#: serverguide/C/clustering.xml:195(para)
22888
msgid "Next, unmount <filename>/srv</filename>:"
22889
msgstr ""
22890
22891
#: serverguide/C/clustering.xml:203(para)
22892
msgid ""
22893
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
22894
"<emphasis>secondary</emphasis> role:"
22895
msgstr ""
22896
22897
#: serverguide/C/clustering.xml:208(command)
22898
msgid "sudo drbdadm secondary r0"
22899
msgstr ""
22900
22901
#: serverguide/C/clustering.xml:211(para)
22902
msgid ""
22903
"Now on the <emphasis>secondary</emphasis> server "
22904
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
22905
msgstr ""
22906
22907
#: serverguide/C/clustering.xml:216(command)
22908
msgid "sudo drbdadm primary r0"
22909
msgstr ""
22910
22911
#: serverguide/C/clustering.xml:219(para)
22912
msgid "Lastly, mount the partition:"
22913
msgstr ""
22914
22915
#: serverguide/C/clustering.xml:227(para)
22916
msgid ""
22917
"Using <emphasis>ls</emphasis> you should see "
22918
"<filename>/srv/default</filename> copied from the former "
22919
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
22920
msgstr ""
22921
22922
#: serverguide/C/clustering.xml:238(para)
22923
msgid ""
22924
"For more information on <application>DRBD</application> see the <ulink "
22925
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
22926
msgstr ""
22927
22928
#: serverguide/C/clustering.xml:243(para)
22929
msgid ""
22930
"The <ulink "
22931
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
22932
"bd.conf man page</ulink> contains details on the options not covered in this "
22933
"guide."
22934
msgstr ""
22935
22936
#: serverguide/C/clustering.xml:249(para)
22937
msgid ""
22938
"Also, see the <ulink "
22939
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
22940
"adm man page</ulink>."
22941
msgstr ""
22942
22943
#: serverguide/C/clustering.xml:254(para)
22944
msgid ""
22945
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
22946
"Wiki</ulink> page also has more information."
22947
msgstr ""
22948
22949
#: serverguide/C/chat.xml:13(title)
22950
msgid "Chat Applications"
22951
msgstr ""
22952
22953
#: serverguide/C/chat.xml:19(para)
22954
msgid ""
22955
"In this section, we will discuss how to install and configure a IRC server, "
22956
"<application>ircd-irc2</application>. We will also discuss how to install "
22957
"and configure Jabber, an instance messaging server."
22958
msgstr ""
22959
22960
#: serverguide/C/chat.xml:28(title)
22961
msgid "IRC Server"
22962
msgstr ""
22963
22964
#: serverguide/C/chat.xml:30(para)
22965
msgid ""
22966
"The Ubuntu repository has many Internet Relay Chat servers. This section "
22967
"explains how to install and configure the original IRC server "
22968
"<application>ircd-irc2</application>."
22969
msgstr ""
22970
22971
#: serverguide/C/chat.xml:39(para)
22972
msgid ""
22973
"To install <application>ircd-irc2</application>, run the following command "
22974
"in the command prompt:"
22975
msgstr ""
22976
22977
#: serverguide/C/chat.xml:45(command)
22978
msgid "sudo apt-get install ircd-irc2"
22979
msgstr ""
22980
22981
#: serverguide/C/chat.xml:48(para)
22982
msgid ""
22983
"The configuration files are stored in <filename>/etc/ircd</filename> "
22984
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
22985
"irc2</filename> directory."
22986
msgstr ""
22987
22988
#: serverguide/C/chat.xml:59(para)
22989
msgid ""
22990
"The IRC settings can be done in the configuration file "
22991
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
22992
"this file by editing the following line:"
22993
msgstr ""
22994
22995
#: serverguide/C/chat.xml:64(programlisting)
22996
#, no-wrap
22997
msgid ""
22998
"\n"
22999
"M:irc.localhost::Debian ircd default configuration::000A\n"
23000
msgstr ""
23001
23002
#: serverguide/C/chat.xml:68(para)
23003
msgid ""
23004
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23005
"you set irc.livecipher.com as IRC host name, please make sure "
23006
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23007
"name should not be same as the host name."
23008
msgstr ""
23009
23010
#: serverguide/C/chat.xml:75(para)
23011
msgid ""
23012
"The IRC admin details can be configured by editting the following line:"
23013
msgstr ""
23014
23015
#: serverguide/C/chat.xml:80(programlisting)
23016
#, no-wrap
23017
msgid ""
23018
"\n"
23019
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23020
"Server::IRCnet:\n"
23021
msgstr ""
23022
23023
#: serverguide/C/chat.xml:84(para)
23024
msgid ""
23025
"You should add specific lines to configure the list of IRC ports to listen "
23026
"on, to configure Operator credentials, to configure client authentication, "
23027
"etc. For details, please refer to the example configuration file "
23028
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23029
msgstr ""
23030
23031
#: serverguide/C/chat.xml:92(para)
23032
msgid ""
23033
"The IRC banner to be displayed in the IRC client, when the user connects to "
23034
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23035
msgstr ""
23036
23037
#: serverguide/C/chat.xml:97(para)
23038
msgid ""
23039
"After making necessary changes to the configuration file, you can restart "
23040
"the IRC server using following command:"
23041
msgstr ""
23042
23043
#: serverguide/C/chat.xml:101(programlisting)
23044
#, no-wrap
23045
msgid ""
23046
"\n"
23047
"sudo /etc/init.d/ircd-irc2 restart\n"
23048
msgstr ""
23049
23050
#: serverguide/C/chat.xml:109(para)
23051
msgid ""
23052
"You may also be interested to take a look at other IRC servers available in "
23053
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23054
"<application>ircd-hybrid</application>."
23055
msgstr ""
23056
23057
#: serverguide/C/chat.xml:117(para)
23058
msgid ""
23059
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23060
"FAQ</ulink> for more details about the IRC Server."
23061
msgstr ""
23062
23063
#: serverguide/C/chat.xml:124(para)
23064
msgid ""
23065
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23066
"IRCD</ulink> page has more information."
23067
msgstr ""
23068
23069
#: serverguide/C/chat.xml:132(title)
23070
msgid "Jabber Instant Messaging Server"
23071
msgstr ""
23072
23073
#: serverguide/C/chat.xml:134(para)
23074
msgid ""
23075
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23076
"XMPP, an open standard for instant messaging, and used by many popular "
23077
"applications. This section covers setting up a <emphasis>Jabberd "
23078
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23079
"to providing messaging services to users over the Internet."
23080
msgstr ""
23081
23082
#: serverguide/C/chat.xml:143(para)
23083
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23084
msgstr ""
23085
23086
#: serverguide/C/chat.xml:148(command)
23087
msgid "sudo apt-get install jabberd2"
23088
msgstr ""
23089
23090
#: serverguide/C/chat.xml:155(para)
23091
msgid ""
23092
"A couple of XML configuration files will be used to configure "
23093
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23094
"authentication. This is a very simple form of authentication. However, "
23095
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23096
"Postgresql, etc for for user authentication."
23097
msgstr ""
23098
23099
#: serverguide/C/chat.xml:162(para)
23100
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23101
msgstr ""
23102
23103
#: serverguide/C/chat.xml:166(programlisting)
23104
#, no-wrap
23105
msgid ""
23106
"\n"
23107
" <id>jabber.example.com</id>\n"
23108
msgstr ""
23109
23110
#: serverguide/C/chat.xml:171(para)
23111
msgid ""
23112
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23113
"id, of your server."
23114
msgstr ""
23115
23116
#: serverguide/C/chat.xml:176(para)
23117
msgid "Now in the <storage> section change the <driver> to:"
23118
msgstr ""
23119
23120
#: serverguide/C/chat.xml:180(programlisting)
23121
#, no-wrap
23122
msgid ""
23123
"\n"
23124
" <driver>db</driver>\n"
23125
msgstr ""
23126
23127
#: serverguide/C/chat.xml:184(para)
23128
msgid ""
23129
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23130
"<emphasis><local></emphasis> section change:"
23131
msgstr ""
23132
23133
#: serverguide/C/chat.xml:188(programlisting)
23134
#, no-wrap
23135
msgid ""
23136
"\n"
23137
" <id>jabber.example.com</id>\n"
23138
msgstr ""
23139
23140
#: serverguide/C/chat.xml:192(para)
23141
msgid ""
23142
"And in the <authreg> section adjust the <module> section to:"
23143
msgstr ""
23144
23145
#: serverguide/C/chat.xml:196(programlisting)
23146
#, no-wrap
23147
msgid ""
23148
"\n"
23149
" <module>db</module>\n"
23150
msgstr ""
23151
23152
#: serverguide/C/chat.xml:200(para)
23153
msgid ""
23154
"Finally, restart <application>jabberd2</application> to enable the new "
23155
"settings:"
23156
msgstr ""
23157
23158
#: serverguide/C/chat.xml:205(command)
23159
msgid "sudo /etc/init.d/jabberd2 restart"
23160
msgstr ""
23161
23162
#: serverguide/C/chat.xml:208(para)
23163
msgid ""
23164
"You should now be able to connect to the server using a Jabber client like "
23165
"<application>Pidgin</application> for example."
23166
msgstr ""
23167
23168
#: serverguide/C/chat.xml:213(para)
23169
msgid ""
23170
"The advantage of using Berkeley DB for user data is that after being "
23171
"configured no additional maintenance is required. If you need more control "
23172
"over user accounts and credentials another authentication method is "
23173
"recommended."
23174
msgstr ""
23175
23176
#: serverguide/C/chat.xml:225(para)
23177
msgid ""
23178
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23179
"Site</ulink> contains more details on configuring "
23180
"<application>Jabberd2</application>."
23181
msgstr ""
23182
23183
#: serverguide/C/chat.xml:231(para)
23184
msgid ""
23185
"For more authentication options see the <ulink "
23186
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23187
"Guide</ulink>."
23188
msgstr ""
23189
23190
#: serverguide/C/chat.xml:236(para)
23191
msgid ""
23192
"Also, the <ulink "
23193
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23194
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23195
msgstr ""
23196
23197
#: serverguide/C/backups.xml:13(title)
23198
msgid "Backups"
23199
msgstr ""
23200
23201
#: serverguide/C/backups.xml:14(para)
23202
msgid ""
23203
"There are many ways to backup an Ubuntu installation. The most important "
23204
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23205
"consisting of what to backup, where to back it up to, and how to restore it."
23206
msgstr ""
23207
23208
#: serverguide/C/backups.xml:18(para)
23209
msgid ""
23210
"The following sections discuss various ways of accomplishing these tasks."
23211
msgstr ""
23212
23213
#: serverguide/C/backups.xml:22(title)
23214
msgid "Shell Scripts"
23215
msgstr ""
23216
23217
#: serverguide/C/backups.xml:23(para)
23218
msgid ""
23219
"One of the simplest ways to backup a system is using a <emphasis>shell "
23220
"script</emphasis>. For example, a script can be used to configure which "
23221
"directories to backup, and use those directories as arguments to the "
23222
"<application>tar</application> utility creating an archive file. The archive "
23223
"file can then be moved or copied to another location. The archive can also "
23224
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23225
msgstr ""
23226
23227
#: serverguide/C/backups.xml:29(para)
23228
msgid ""
23229
"The <application>tar</application> utility creates one archive file out of "
23230
"many files or directories. <application>tar</application> can also filter "
23231
"the files through compression utilities reducing the size of the archive "
23232
"file."
23233
msgstr ""
23234
23235
#: serverguide/C/backups.xml:35(title)
23236
msgid "Simple Shell Script"
23237
msgstr ""
23238
23239
#: serverguide/C/backups.xml:36(para)
23240
msgid ""
23241
"The following shell script uses <application>tar</application> to create an "
23242
"archive file on a remotely mounted NFS file system. The archive filename is "
23243
"determined using additional command line utilities."
23244
msgstr ""
23245
23246
#: serverguide/C/backups.xml:40(programlisting)
23247
#, no-wrap
23248
msgid ""
23249
"\n"
23250
"#!/bin/sh\n"
23251
"####################################\n"
23252
"#\n"
23253
"# Backup to NFS mount script.\n"
23254
"#\n"
23255
"####################################\n"
23256
"\n"
23257
"# What to backup. \n"
23258
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23259
"\n"
23260
"# Where to backup to.\n"
23261
"dest=\"/mnt/backup\"\n"
23262
"\n"
23263
"# Create archive filename.\n"
23264
"day=$(date +%A)\n"
23265
"hostname=$(hostname -s)\n"
23266
"archive_file=\"$hostname-$day.tgz\"\n"
23267
"\n"
23268
"# Print start status message.\n"
23269
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23270
"date\n"
23271
"echo\n"
23272
"\n"
23273
"# Backup the files using tar.\n"
23274
"tar czf $dest/$archive_file $backup_files\n"
23275
"\n"
23276
"# Print end status message.\n"
23277
"echo\n"
23278
"echo \"Backup finished\"\n"
23279
"date\n"
23280
"\n"
23281
"# Long listing of files in $dest to check file sizes.\n"
23282
"ls -lh $dest\n"
23283
msgstr ""
23284
23285
#: serverguide/C/backups.xml:77(para)
23286
msgid ""
23287
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23288
"would like to backup. The list should be customized to fit your needs."
23289
msgstr ""
23290
23291
#: serverguide/C/backups.xml:83(para)
23292
msgid ""
23293
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23294
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23295
"day of the week, giving a backup history of seven days. There are other ways "
23296
"to accomplish this including other ways using the "
23297
"<application>date</application> utility."
23298
msgstr ""
23299
23300
#: serverguide/C/backups.xml:90(para)
23301
msgid ""
23302
"<emphasis>$hostname:</emphasis> variable containing the "
23303
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23304
"archive filename gives you the option of placing daily archive files from "
23305
"multiple systems in the same directory."
23306
msgstr ""
23307
23308
#: serverguide/C/backups.xml:97(para)
23309
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23310
msgstr ""
23311
23312
#: serverguide/C/backups.xml:102(para)
23313
msgid ""
23314
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23315
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23316
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23317
"details using <emphasis>NFS</emphasis>."
23318
msgstr ""
23319
23320
#: serverguide/C/backups.xml:109(para)
23321
msgid ""
23322
"<emphasis>status messages:</emphasis> optional messages printed to the "
23323
"console using the <application>echo</application> utility."
23324
msgstr ""
23325
23326
#: serverguide/C/backups.xml:115(para)
23327
msgid ""
23328
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23329
"<application>tar</application> command used to create the archive file."
23330
msgstr ""
23331
23332
#: serverguide/C/backups.xml:121(para)
23333
msgid "<emphasis>c:</emphasis> creates an archive."
23334
msgstr ""
23335
23336
#: serverguide/C/backups.xml:126(para)
23337
msgid ""
23338
"<emphasis>z:</emphasis> filter the archive through the "
23339
"<application>gzip</application> utility compressing the archive."
23340
msgstr ""
23341
23342
#: serverguide/C/backups.xml:131(para)
23343
msgid ""
23344
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23345
"<application>tar</application> output will be sent to STDOUT."
23346
msgstr ""
23347
23348
#: serverguide/C/backups.xml:138(para)
23349
msgid ""
23350
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23351
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23352
"of the destination directory. This is useful for a quick file size check of "
23353
"the archive file. This check should not replace testing the archive file."
23354
msgstr ""
23355
23356
#: serverguide/C/backups.xml:145(para)
23357
msgid ""
23358
"This is a simple example of a backup shell script. There are large amount of "
23359
"options that can be included in a backup script. See <xref linkend=\"backup-"
23360
"shellscript-references\"/> for links to resources providing more in depth "
23361
"shell scripting information."
23362
msgstr ""
23363
23364
#: serverguide/C/backups.xml:152(title)
23365
msgid "Executing the Script"
23366
msgstr ""
23367
23368
#: serverguide/C/backups.xml:154(title)
23369
msgid "Executing from a Terminal"
23370
msgstr ""
23371
23372
#: serverguide/C/backups.xml:155(para)
23373
msgid ""
23374
"The simplest way of executing the above backup script is to copy and paste "
23375
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23376
"from a terminal prompt:"
23377
msgstr ""
23378
23379
#: serverguide/C/backups.xml:160(command)
23380
msgid "sudo bash backup.sh"
23381
msgstr ""
23382
23383
#: serverguide/C/backups.xml:162(para)
23384
msgid ""
23385
"This is a great way to test the script to make sure everything works as "
23386
"expected."
23387
msgstr ""
23388
23389
#: serverguide/C/backups.xml:167(title)
23390
msgid "Executing with cron"
23391
msgstr ""
23392
23393
#: serverguide/C/backups.xml:168(para)
23394
msgid ""
23395
"The <application>cron</application> utility can be used to automate the "
23396
"script execution. The <application>cron</application> daemon allows the "
23397
"execution of scripts, or commands, at a specified time and date."
23398
msgstr ""
23399
23400
#: serverguide/C/backups.xml:172(para)
23401
msgid ""
23402
"<application>cron</application> is configured through entries in a "
23403
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23404
"separated into fields:"
23405
msgstr ""
23406
23407
#: serverguide/C/backups.xml:176(programlisting)
23408
#, no-wrap
23409
msgid ""
23410
"\n"
23411
"# m h dom mon dow command\n"
23412
msgstr ""
23413
23414
#: serverguide/C/backups.xml:181(para)
23415
msgid ""
23416
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23417
msgstr ""
23418
23419
#: serverguide/C/backups.xml:186(para)
23420
msgid ""
23421
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23422
msgstr ""
23423
23424
#: serverguide/C/backups.xml:191(para)
23425
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23426
msgstr ""
23427
23428
#: serverguide/C/backups.xml:196(para)
23429
msgid ""
23430
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23431
msgstr ""
23432
23433
#: serverguide/C/backups.xml:201(para)
23434
msgid ""
23435
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23436
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23437
"valid."
23438
msgstr ""
23439
23440
#: serverguide/C/backups.xml:206(para)
23441
msgid "<emphasis>command:</emphasis> the command to execute."
23442
msgstr ""
23443
23444
#: serverguide/C/backups.xml:211(para)
23445
msgid ""
23446
"To add or change entries in a <filename>crontab</filename> file the "
23447
"<application>crontab -e</application> command should be used. Also, the "
23448
"contents of a <filename>crontab</filename> file can be viewed using the "
23449
"<application>crontab -l</application> command."
23450
msgstr ""
23451
23452
#: serverguide/C/backups.xml:215(para)
23453
msgid ""
23454
"To execute the <application>backup.sh</application> script listed above "
23455
"using <application>cron</application>. Enter the following from a terminal "
23456
"prompt:"
23457
msgstr ""
23458
23459
#: serverguide/C/backups.xml:220(command)
23460
msgid "sudo crontab -e"
23461
msgstr ""
23462
23463
#: serverguide/C/backups.xml:223(para)
23464
msgid ""
23465
"Using <application>sudo</application> with the <application>crontab -"
23466
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23467
"This is necessary if you are backing up directories only the root user has "
23468
"access to."
23469
msgstr ""
23470
23471
#: serverguide/C/backups.xml:228(para)
23472
msgid "Add the following entry to the <filename>crontab</filename> file:"
23473
msgstr ""
23474
23475
#: serverguide/C/backups.xml:231(programlisting)
23476
#, no-wrap
23477
msgid ""
23478
"\n"
23479
"# m h dom mon dow command\n"
23480
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23481
msgstr ""
23482
23483
#: serverguide/C/backups.xml:235(para)
23484
msgid ""
23485
"The <application>backup.sh</application> script will now be executed every "
23486
"day at 12:00 am."
23487
msgstr ""
23488
23489
#: serverguide/C/backups.xml:239(para)
23490
msgid ""
23491
"The <application>backup.sh</application> script will need to be copied to "
23492
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23493
"to execute properly. The script can reside anywhere on the file system "
23494
"simply change the script path appropriately."
23495
msgstr ""
23496
23497
#: serverguide/C/backups.xml:244(para)
23498
msgid ""
23499
"For more in depth <application>crontab</application> options see <xref "
23500
"linkend=\"backup-shellscript-references\"/>."
23501
msgstr ""
23502
23503
#: serverguide/C/backups.xml:250(title)
23504
msgid "Restoring from the Archive"
23505
msgstr ""
23506
23507
#: serverguide/C/backups.xml:251(para)
23508
msgid ""
23509
"Once an archive has been created it is important to test the archive. The "
23510
"archive can be tested by listing the files it contains, but the best test is "
23511
"to <emphasis>restore</emphasis> a file from the archive."
23512
msgstr ""
23513
23514
#: serverguide/C/backups.xml:257(para)
23515
msgid "To see a listing of the archive contents. From a terminal prompt:"
23516
msgstr ""
23517
23518
#: serverguide/C/backups.xml:261(command)
23519
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23520
msgstr ""
23521
23522
#: serverguide/C/backups.xml:265(para)
23523
msgid "To restore a file from the archive to a different directory enter:"
23524
msgstr ""
23525
23526
#: serverguide/C/backups.xml:269(command)
23527
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23528
msgstr ""
23529
23530
#: serverguide/C/backups.xml:271(para)
23531
msgid ""
23532
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23533
"redirects the extracted files to the specified directory. The above example "
23534
"will extract the <filename>/etc/hosts</filename> file to "
23535
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23536
"recreates the directory structure that it contains."
23537
msgstr ""
23538
23539
#: serverguide/C/backups.xml:276(para)
23540
msgid ""
23541
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23542
"the file to restore."
23543
msgstr ""
23544
23545
#: serverguide/C/backups.xml:281(para)
23546
msgid "To restore all files in the archive enter the following:"
23547
msgstr ""
23548
23549
#: serverguide/C/backups.xml:285(command)
23550
msgid "cd /"
23551
msgstr ""
23552
23553
#: serverguide/C/backups.xml:286(command)
23554
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23555
msgstr ""
23556
23557
#: serverguide/C/backups.xml:291(para)
23558
msgid "This will overwrite the files currently on the file system."
23559
msgstr ""
23560
23561
#: serverguide/C/backups.xml:300(para)
23562
msgid ""
23563
"For more information on shell scripting see the <ulink "
23564
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23565
msgstr ""
23566
23567
#: serverguide/C/backups.xml:305(para)
23568
msgid ""
23569
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23570
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23571
"great resource for shell scripting."
23572
msgstr ""
23573
23574
#: serverguide/C/backups.xml:311(para)
23575
msgid ""
23576
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23577
"Wiki Page</ulink> contains details on advanced "
23578
"<application>cron</application> options."
23579
msgstr ""
23580
23581
#: serverguide/C/backups.xml:318(para)
23582
msgid ""
23583
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23584
"tar Manual</ulink> for more <application>tar</application> options."
23585
msgstr ""
23586
23587
#: serverguide/C/backups.xml:324(para)
23588
msgid ""
23589
"The Wikipedia <ulink "
23590
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
23591
"Scheme</ulink> article contains information on other backup rotation schemes."
23592
msgstr ""
23593
23594
#: serverguide/C/backups.xml:330(para)
23595
msgid ""
23596
"The shell script uses <application>tar</application> to create the archive, "
23597
"but there many other command line utilities that can be used. For example:"
23598
msgstr ""
23599
23600
#: serverguide/C/backups.xml:336(para)
23601
msgid ""
23602
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
23603
"files to and from archives."
23604
msgstr ""
23605
23606
#: serverguide/C/backups.xml:341(para)
23607
msgid ""
23608
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
23609
"the <application>coreutils</application> package. A low level utility that "
23610
"can copy data from one format to another"
23611
msgstr ""
23612
23613
#: serverguide/C/backups.xml:347(para)
23614
msgid ""
23615
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
23616
"snap shot utility used to create copies of an entire file system."
23617
msgstr ""
23618
23619
#: serverguide/C/backups.xml:358(title)
23620
msgid "Archive Rotation"
23621
msgstr ""
23622
23623
#: serverguide/C/backups.xml:359(para)
23624
msgid ""
23625
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
23626
"allows for seven different archives. For a server whose data doesn't change "
23627
"often this may be enough. If the server has a large amount of data a more "
23628
"robust rotation scheme should be used."
23629
msgstr ""
23630
23631
#: serverguide/C/backups.xml:365(title)
23632
msgid "Rotating NFS Archives"
23633
msgstr ""
23634
23635
#: serverguide/C/backups.xml:366(para)
23636
msgid ""
23637
"In this section the shell script will be slightly modified to implement a "
23638
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
23639
msgstr ""
23640
23641
#: serverguide/C/backups.xml:372(para)
23642
msgid ""
23643
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
23644
"Friday."
23645
msgstr ""
23646
23647
#: serverguide/C/backups.xml:377(para)
23648
msgid ""
23649
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
23650
"weekly backups a month."
23651
msgstr ""
23652
23653
#: serverguide/C/backups.xml:382(para)
23654
msgid ""
23655
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
23656
"rotating two monthly backups based on if the month is odd or even."
23657
msgstr ""
23658
23659
#: serverguide/C/backups.xml:388(para)
23660
msgid "Here is the new script:"
23661
msgstr ""
23662
23663
#: serverguide/C/backups.xml:391(programlisting)
23664
#, no-wrap
23665
msgid ""
23666
"\n"
23667
"#!/bin/bash\n"
23668
"####################################\n"
23669
"#\n"
23670
"# Backup to NFS mount script with\n"
23671
"# grandfather-father-son rotation.\n"
23672
"#\n"
23673
"####################################\n"
23674
"\n"
23675
"# What to backup. \n"
23676
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23677
"\n"
23678
"# Where to backup to.\n"
23679
"dest=\"/mnt/backup\"\n"
23680
"\n"
23681
"# Setup variables for the archive filename.\n"
23682
"day=$(date +%A)\n"
23683
"hostname=$(hostname -s)\n"
23684
"\n"
23685
"# Find which week of the month 1-4 it is.\n"
23686
"day_num=$(date +%d)\n"
23687
"if (( $day_num <= 7 )); then\n"
23688
" week_file=\"$hostname-week1.tgz\"\n"
23689
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
23690
" week_file=\"$hostname-week2.tgz\"\n"
23691
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
23692
" week_file=\"$hostname-week3.tgz\"\n"
23693
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
23694
" week_file=\"$hostname-week4.tgz\"\n"
23695
"fi\n"
23696
"\n"
23697
"# Find if the Month is odd or even.\n"
23698
"month_num=$(date +%m)\n"
23699
"month=$(expr $month_num % 2)\n"
23700
"if [ $month -eq 0 ]; then\n"
23701
" month_file=\"$hostname-month2.tgz\"\n"
23702
"else\n"
23703
" month_file=\"$hostname-month1.tgz\"\n"
23704
"fi\n"
23705
"\n"
23706
"# Create archive filename.\n"
23707
"if [ $day_num == 1 ]; then\n"
23708
"\tarchive_file=$month_file\n"
23709
"elif [ $day != \"Saturday\" ]; then\n"
23710
" archive_file=\"$hostname-$day.tgz\"\n"
23711
"else \n"
23712
"\tarchive_file=$week_file\n"
23713
"fi\n"
23714
"\n"
23715
"# Print start status message.\n"
23716
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23717
"date\n"
23718
"echo\n"
23719
"\n"
23720
"# Backup the files using tar.\n"
23721
"tar czf $dest/$archive_file $backup_files\n"
23722
"\n"
23723
"# Print end status message.\n"
23724
"echo\n"
23725
"echo \"Backup finished\"\n"
23726
"date\n"
23727
"\n"
23728
"# Long listing of files in $dest to check file sizes.\n"
23729
"ls -lh $dest/\n"
23730
msgstr ""
23731
23732
#: serverguide/C/backups.xml:456(para)
23733
msgid ""
23734
"The script can be executed using the same methods as in <xref "
23735
"linkend=\"backup-executing-shellscript\"/>."
23736
msgstr ""
23737
23738
#: serverguide/C/backups.xml:459(para)
23739
msgid ""
23740
"It is good practice to take backup media off site in case of a disaster. In "
23741
"the shell script example the backup media is another server providing an NFS "
23742
"share. In all likelihood taking the NFS server to another location would not "
23743
"be practical. Depending upon connection speeds it may be an option to copy "
23744
"the archive file over a WAN link to a server in another location."
23745
msgstr ""
23746
23747
#: serverguide/C/backups.xml:465(para)
23748
msgid ""
23749
"Another option is to copy the archive file to an external hard drive which "
23750
"can then be taken off site. Since the price of external hard drives continue "
23751
"to decrease it may be cost affective to use two drives for each archive "
23752
"level. This would allow you to have one external drive attached to the "
23753
"backup server and one in another location."
23754
msgstr ""
23755
23756
#: serverguide/C/backups.xml:472(title)
23757
msgid "Tape Drives"
23758
msgstr ""
23759
23760
#: serverguide/C/backups.xml:473(para)
23761
msgid ""
23762
"A tape drive attached to the server can be used instead of a NFS share. "
23763
"Using a tape drive simplifies archive rotation, and taking the media off "
23764
"site as well."
23765
msgstr ""
23766
23767
#: serverguide/C/backups.xml:477(para)
23768
msgid ""
23769
"When using a tape drive the filename portions of the script aren't needed "
23770
"because the date is sent directly to the tape device. Some commands to "
23771
"manipulate the tape are needed. This is accomplished using "
23772
"<application>mt</application>, a magnetic tape control utility part of the "
23773
"<application>cpio</application> package."
23774
msgstr ""
23775
23776
#: serverguide/C/backups.xml:482(para)
23777
msgid "Here is the shell script modified to use a tape drive:"
23778
msgstr ""
23779
23780
#: serverguide/C/backups.xml:485(programlisting)
23781
#, no-wrap
23782
msgid ""
23783
"\n"
23784
"#!/bin/bash\n"
23785
"####################################\n"
23786
"#\n"
23787
"# Backup to tape drive script.\n"
23788
"#\n"
23789
"####################################\n"
23790
"\n"
23791
"# What to backup. \n"
23792
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23793
"\n"
23794
"# Where to backup to.\n"
23795
"dest=\"/dev/st0\"\n"
23796
"\n"
23797
"# Print start status message.\n"
23798
"echo \"Backing up $backup_files to $dest\"\n"
23799
"date\n"
23800
"echo\n"
23801
"\n"
23802
"# Make sure the tape is rewound.\n"
23803
"mt -f $dest rewind\n"
23804
"\n"
23805
"# Backup the files using tar.\n"
23806
"tar czf $dest $backup_files\n"
23807
"\n"
23808
"# Rewind and eject the tape.\n"
23809
"mt -f $dest rewoffl\n"
23810
"\n"
23811
"# Print end status message.\n"
23812
"echo\n"
23813
"echo \"Backup finished\"\n"
23814
"date\n"
23815
msgstr ""
23816
23817
#: serverguide/C/backups.xml:519(para)
23818
msgid ""
23819
"The default device name for a SCSI tape drive is "
23820
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
23821
"system."
23822
msgstr ""
23823
23824
#: serverguide/C/backups.xml:524(para)
23825
msgid ""
23826
"Restoring from a tape drive is basically the same as restoring from a file. "
23827
"Simply rewind the tape and use the device path instead of a file path. For "
23828
"example to restore the <filename>/etc/hosts</filename> file to "
23829
"<filename>/tmp/etc/hosts</filename>:"
23830
msgstr ""
23831
23832
#: serverguide/C/backups.xml:529(command)
23833
msgid "mt -f /dev/st0 rewind"
23834
msgstr ""
23835
23836
#: serverguide/C/backups.xml:530(command)
23837
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
23838
msgstr ""
23839
23840
#: serverguide/C/backups.xml:535(title)
23841
msgid "Bacula"
23842
msgstr ""
23843
23844
#: serverguide/C/backups.xml:536(para)
23845
msgid ""
23846
"<application>Bacula</application> is a backup program enabling you to "
23847
"backup, restore, and verify data across your network. There are Bacula "
23848
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
23849
"wide solution."
23850
msgstr ""
23851
23852
#: serverguide/C/backups.xml:542(para)
23853
msgid ""
23854
"<application>Bacula</application> is made up of several components and "
23855
"services used to manage which files to backup and where to back them up to:"
23856
msgstr ""
23857
23858
#: serverguide/C/backups.xml:548(para)
23859
msgid ""
23860
"<application>Bacula Director:</application> a service that controls all "
23861
"backup, restore, verify, and archive operations."
23862
msgstr ""
23863
23864
#: serverguide/C/backups.xml:553(para)
23865
msgid ""
23866
"<application>Bacula Console:</application> an application allowing "
23867
"communication with the Director. There are three versions of the Console:"
23868
msgstr ""
23869
23870
#: serverguide/C/backups.xml:558(para)
23871
msgid "Text based command line version."
23872
msgstr ""
23873
23874
#: serverguide/C/backups.xml:559(para)
23875
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
23876
msgstr ""
23877
23878
#: serverguide/C/backups.xml:560(para)
23879
msgid "wxWidgets GUI interface."
23880
msgstr ""
23881
23882
#: serverguide/C/backups.xml:564(para)
23883
msgid ""
23884
"<application>Bacula File:</application> also known as the "
23885
"<application>Bacula Client</application> program. This application is "
23886
"installed on machines to be backed up, and is responsible for the data "
23887
"requested by the Director."
23888
msgstr ""
23889
23890
#: serverguide/C/backups.xml:570(para)
23891
msgid ""
23892
"<application>Bacula Storage:</application> the programs that perform the "
23893
"storage and recovery of data to the physical media."
23894
msgstr ""
23895
23896
#: serverguide/C/backups.xml:575(para)
23897
msgid ""
23898
"<application>Bacula Catalog:</application> is responsible for maintaining "
23899
"the file indexes and volume databases for all files backed up, enabling "
23900
"quick location and restoration of archived files. The Catalog supports three "
23901
"different databases MySQL, PostgreSQL, and SQLite."
23902
msgstr ""
23903
23904
#: serverguide/C/backups.xml:581(para)
23905
msgid ""
23906
"<application>Bacula Monitor:</application> allows the monitoring of the "
23907
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
23908
"available as a GTK+ GUI application."
23909
msgstr ""
23910
23911
#: serverguide/C/backups.xml:587(para)
23912
msgid ""
23913
"These services and applications can be run on multiple servers and clients, "
23914
"or they can be installed on one machine if backing up a single disk or "
23915
"volume."
23916
msgstr ""
23917
23918
#: serverguide/C/backups.xml:594(para)
23919
msgid ""
23920
"There are multiple packages containing the different "
23921
"<application>Bacula</application> components. To install Bacula, from a "
23922
"terminal prompt enter:"
23923
msgstr ""
23924
23925
#: serverguide/C/backups.xml:599(command)
23926
msgid "sudo apt-get install bacula"
23927
msgstr ""
23928
23929
#: serverguide/C/backups.xml:601(para)
23930
msgid ""
23931
"By default installing the <application>bacula</application> package will use "
23932
"a <application>MySQL</application> database for the Catalog. If you want to "
23933
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
23934
"director-sqlite3</application> or <application>bacula-director-"
23935
"pgsql</application> respectively."
23936
msgstr ""
23937
23938
#: serverguide/C/backups.xml:607(para)
23939
msgid ""
23940
"During the install process you will be asked to supply credentials for the "
23941
"database <emphasis>administrator</emphasis> and the "
23942
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
23943
"database administrator will need to have the appropriate rights to create a "
23944
"database, see <xref linkend=\"mysql\"/> for more information."
23945
msgstr ""
23946
23947
#: serverguide/C/backups.xml:617(para)
23948
msgid ""
23949
"<application>Bacula</application> configuration files are formatted based on "
23950
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
23951
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
23952
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
23953
"directory."
23954
msgstr ""
23955
23956
#: serverguide/C/backups.xml:622(para)
23957
msgid ""
23958
"The various <application>Bacula</application> components must authorize "
23959
"themselves to each other. This is accomplished using the "
23960
"<emphasis>password</emphasis> directive. For example, the "
23961
"<emphasis>Storage</emphasis> resource password in the "
23962
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
23963
"<emphasis>Director</emphasis> resource password in "
23964
"<filename>/etc/bacula/bacula-sd.conf</filename>."
23965
msgstr ""
23966
23967
#: serverguide/C/backups.xml:628(para)
23968
msgid ""
23969
"By default the backup job named <emphasis>Client1</emphasis> is configured "
23970
"to archive the <application>Bacula</application> Catalog. If you plan on "
23971
"using the server to backup more than one client you should change the name "
23972
"of this job to something more descriptive. To change the name edit "
23973
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
23974
msgstr ""
23975
23976
#: serverguide/C/backups.xml:633(programlisting)
23977
#, no-wrap
23978
msgid ""
23979
"\n"
23980
"#\n"
23981
"# Define the main nightly save backup job\n"
23982
"# By default, this job will back up to disk in \n"
23983
"Job {\n"
23984
" Name = \"BackupServer\"\n"
23985
" JobDefs = \"DefaultJob\"\n"
23986
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
23987
"}\n"
23988
msgstr ""
23989
23990
#: serverguide/C/backups.xml:644(para)
23991
msgid ""
23992
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
23993
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
23994
"your appropriate hostname, or other descriptive name."
23995
msgstr ""
23996
23997
#: serverguide/C/backups.xml:649(para)
23998
msgid ""
23999
"The <emphasis>Console</emphasis> can be used to query the "
24000
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
24001
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24002
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24003
"the following from a terminal:"
24004
msgstr ""
24005
24006
#: serverguide/C/backups.xml:655(command)
24007
msgid "sudo adduser $username bacula"
24008
msgstr ""
24009
24010
#: serverguide/C/backups.xml:658(para)
24011
msgid ""
24012
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24013
"you are adding the current user to the group you should log out and back in "
24014
"for the new permissions to take effect."
24015
msgstr ""
24016
24017
#: serverguide/C/backups.xml:665(title)
24018
msgid "Localhost Backup"
24019
msgstr ""
24020
24021
#: serverguide/C/backups.xml:666(para)
24022
msgid ""
24023
"This section describes how to backup specified directories on a single host "
24024
"to a local tape drive."
24025
msgstr ""
24026
24027
#: serverguide/C/backups.xml:671(para)
24028
msgid ""
24029
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24030
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24031
msgstr ""
24032
24033
#: serverguide/C/backups.xml:674(programlisting)
24034
#, no-wrap
24035
msgid ""
24036
"\n"
24037
"Device {\n"
24038
" Name = \"Tape Drive\"\n"
24039
" Device Type = tape\n"
24040
" Media Type = DDS-4\n"
24041
" Archive Device = /dev/st0\n"
24042
" Hardware end of medium = No;\n"
24043
" AutomaticMount = yes; # when device opened, read it\n"
24044
" AlwaysOpen = Yes;\n"
24045
" RemovableMedia = yes;\n"
24046
" RandomAccess = no;\n"
24047
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24048
"}\n"
24049
msgstr ""
24050
24051
#: serverguide/C/backups.xml:688(para)
24052
msgid ""
24053
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24054
"Type and Archive Device to match your hardware."
24055
msgstr ""
24056
24057
#: serverguide/C/backups.xml:691(para)
24058
msgid "You could also uncomment one of the other examples in the file."
24059
msgstr ""
24060
24061
#: serverguide/C/backups.xml:696(para)
24062
msgid ""
24063
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24064
"<application>Storage</application> daemon will need to be restarted:"
24065
msgstr ""
24066
24067
#: serverguide/C/backups.xml:701(command)
24068
msgid "sudo /etc/init.d/bacula-sd restart"
24069
msgstr ""
24070
24071
#: serverguide/C/backups.xml:705(para)
24072
msgid ""
24073
"Now add a <emphasis>Storage</emphasis> resource in "
24074
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24075
msgstr ""
24076
24077
#: serverguide/C/backups.xml:708(programlisting)
24078
#, no-wrap
24079
msgid ""
24080
"\n"
24081
"# Definition of \"Tape Drive\" storage device\n"
24082
"Storage {\n"
24083
" Name = TapeDrive\n"
24084
" # Do not use \"localhost\" here \n"
24085
" Address = backupserver # N.B. Use a fully qualified name "
24086
"here\n"
24087
" SDPort = 9103\n"
24088
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24089
" Device = \"Tape Drive\"\n"
24090
" Media Type = tape\n"
24091
"}\n"
24092
msgstr ""
24093
24094
#: serverguide/C/backups.xml:720(para)
24095
msgid ""
24096
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24097
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24098
"to the actual host name."
24099
msgstr ""
24100
24101
#: serverguide/C/backups.xml:724(para)
24102
msgid ""
24103
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24104
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24105
msgstr ""
24106
24107
#: serverguide/C/backups.xml:730(para)
24108
msgid ""
24109
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24110
"directories to backup, by adding:"
24111
msgstr ""
24112
24113
#: serverguide/C/backups.xml:733(programlisting)
24114
#, no-wrap
24115
msgid ""
24116
"\n"
24117
"# LocalhostBacup FileSet.\n"
24118
"FileSet {\n"
24119
" Name = \"LocalhostFiles\"\n"
24120
" Include {\n"
24121
" Options {\n"
24122
" signature = MD5\n"
24123
" compression=GZIP\n"
24124
" }\n"
24125
" File = /etc\n"
24126
" File = /home\n"
24127
" }\n"
24128
"}\n"
24129
msgstr ""
24130
24131
#: serverguide/C/backups.xml:747(para)
24132
msgid ""
24133
"This <emphasis>FileSet</emphasis> will backup the <filename "
24134
"role=\"directory\">/etc</filename> and <filename "
24135
"role=\"directory\">/home</filename> directories. The "
24136
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24137
"create a MD5 signature for each file backed up, and to compress the files "
24138
"using GZIP."
24139
msgstr ""
24140
24141
#: serverguide/C/backups.xml:754(para)
24142
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24143
msgstr ""
24144
24145
#: serverguide/C/backups.xml:757(programlisting)
24146
#, no-wrap
24147
msgid ""
24148
"\n"
24149
"# LocalhostBackup Schedule -- Daily.\n"
24150
"Schedule {\n"
24151
" Name = \"LocalhostDaily\"\n"
24152
" Run = Full daily at 00:01\n"
24153
"}\n"
24154
msgstr ""
24155
24156
#: serverguide/C/backups.xml:764(para)
24157
msgid ""
24158
"The job will run every day at 00:01 or 12:01 am. There are many other "
24159
"scheduling options available."
24160
msgstr ""
24161
24162
#: serverguide/C/backups.xml:769(para)
24163
msgid "Finally create the <emphasis>Job</emphasis>:"
24164
msgstr ""
24165
24166
#: serverguide/C/backups.xml:772(programlisting)
24167
#, no-wrap
24168
msgid ""
24169
"\n"
24170
"# Localhost backup.\n"
24171
"Job {\n"
24172
" Name = \"LocalhostBackup\"\n"
24173
" JobDefs = \"DefaultJob\"\n"
24174
" Enabled = yes\n"
24175
" Level = Full\n"
24176
" FileSet = \"LocalhostFiles\"\n"
24177
" Schedule = \"LocalhostDaily\"\n"
24178
" Storage = TapeDrive\n"
24179
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24180
"} \n"
24181
msgstr ""
24182
24183
#: serverguide/C/backups.xml:785(para)
24184
msgid ""
24185
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24186
"drive."
24187
msgstr ""
24188
24189
#: serverguide/C/backups.xml:790(para)
24190
msgid ""
24191
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24192
"current tape does not have a label <application>Bacula</application> will "
24193
"send an email letting you know. To label a tape using the "
24194
"<application>Console</application> enter the following from a terminal:"
24195
msgstr ""
24196
24197
#: serverguide/C/backups.xml:796(command)
24198
msgid "bconsole"
24199
msgstr ""
24200
24201
#: serverguide/C/backups.xml:800(para)
24202
msgid "At the Bacula Console prompt enter:"
24203
msgstr ""
24204
24205
#: serverguide/C/backups.xml:804(command)
24206
msgid "label"
24207
msgstr ""
24208
24209
#: serverguide/C/backups.xml:808(para)
24210
msgid ""
24211
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24212
msgstr ""
24213
24214
#: serverguide/C/backups.xml:818(userinput)
24215
#, no-wrap
24216
msgid "2"
24217
msgstr ""
24218
24219
#: serverguide/C/backups.xml:812(computeroutput)
24220
#, no-wrap
24221
msgid ""
24222
"\n"
24223
"Automatically selected Catalog: MyCatalog\n"
24224
"Using Catalog \"MyCatalog\"\n"
24225
"The defined Storage resources are:\n"
24226
" 1: File\n"
24227
" 2: TapeDrive\n"
24228
"Select Storage resource (1-2):<placeholder-1/>\n"
24229
msgstr ""
24230
24231
#: serverguide/C/backups.xml:823(para)
24232
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24233
msgstr ""
24234
24235
#: serverguide/C/backups.xml:828(userinput)
24236
#, no-wrap
24237
msgid "Sunday"
24238
msgstr ""
24239
24240
#: serverguide/C/backups.xml:827(computeroutput)
24241
#, no-wrap
24242
msgid ""
24243
"\n"
24244
"Enter new Volume name: <placeholder-1/>\n"
24245
"Defined Pools:\n"
24246
" 1: Default\n"
24247
" 2: Scratch"
24248
msgstr ""
24249
24250
#: serverguide/C/backups.xml:833(para)
24251
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24252
msgstr ""
24253
24254
#: serverguide/C/backups.xml:838(para)
24255
msgid "Now, select the <emphasis>Pool</emphasis>:"
24256
msgstr ""
24257
24258
#: serverguide/C/backups.xml:843(userinput)
24259
#, no-wrap
24260
msgid "1"
24261
msgstr ""
24262
24263
#: serverguide/C/backups.xml:842(computeroutput)
24264
#, no-wrap
24265
msgid ""
24266
"\n"
24267
"Select the Pool (1-2): <placeholder-1/>\n"
24268
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24269
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24270
msgstr ""
24271
24272
#: serverguide/C/backups.xml:850(para)
24273
msgid ""
24274
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24275
"backup the localhost to an attached tape drive."
24276
msgstr ""
24277
24278
#: serverguide/C/backups.xml:858(para)
24279
msgid ""
24280
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24281
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24282
"Manual</ulink>"
24283
msgstr ""
24284
24285
#: serverguide/C/backups.xml:864(para)
24286
msgid ""
24287
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24288
"the latest Bacula news and developments."
24289
msgstr ""
24290
24291
#: serverguide/C/backups.xml:869(para)
24292
msgid ""
24293
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24294
"Ubuntu Wiki</ulink> page."
24295
msgstr ""
24296
24297
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24298
#: serverguide/C/backups.xml:0(None)
24299
msgid "translator-credits"
24300
msgstr ""
24301
"Launchpad Contributions:\n"
24302
" Kiwinote https://launchpad.net/~kiwinote\n"
24303
" Mike Morraye https://launchpad.net/~mike-morraye-be\n"
24304
" TWeberink https://launchpad.net/~tiemenwebbink-deactivatedaccount\n"
24305
" heppe https://launchpad.net/~heppew"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1