mirror of
https://github.com/Zeckmathederg/glfs.git
synced 2025-01-24 15:12:11 +08:00
updated to samba-2.2.8
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@824 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Larry Lawrence
parent
79df62689d
commit
677a0f7b62
@ -10,7 +10,10 @@ page in Chapter 1 for details on who wrote what.</para>
|
||||
|
||||
<itemizedlist>
|
||||
|
||||
<listitem><para>April 5th, 2003 [larry]: servers: Update to
|
||||
<listitem><para>April 5th, 2003 [larry]: server: updated to
|
||||
samba-2.2.8.</para></listitem>
|
||||
|
||||
<listitem><para>April 5th, 2003 [larry]: server: Update to
|
||||
sendmail-8.12.9.</para></listitem>
|
||||
|
||||
<listitem><para>April 5th, 2003 [tushar]: openldap: Updated to 2.1.17.
|
||||
|
||||
@ -8,11 +8,11 @@
|
||||
<sect3><title>Configuration of exim</title>
|
||||
<para>Create the exim configuration files with the following commands:
|
||||
</para>
|
||||
<para><screen><userinput>cat >> /etc/aliases << "EOF"
|
||||
<para><screen><userinput>cat >> /etc/aliases << "EOF"</userinput>
|
||||
postmaster: root
|
||||
MAILER-DAEMON: root
|
||||
EOF
|
||||
exim -v -bi
|
||||
<userinput>EOF
|
||||
exim -v -bi &&
|
||||
/usr/sbin/exim -bd -q1m</userinput></screen></para>
|
||||
|
||||
<note><para>To protect an existing <filename>/etc/aliases</filename>
|
||||
|
||||
@ -1,28 +1,23 @@
|
||||
<sect2>
|
||||
<title>Installation command explanations</title>
|
||||
|
||||
<para><userinput>
|
||||
<para><screen><userinput>
|
||||
groupadd exim
|
||||
useradd -g exim exim : </userinput>
|
||||
useradd -g exim exim</userinput></screen>
|
||||
Create the group and user exim which will run the the exim
|
||||
daemon.</para>
|
||||
|
||||
<para><screen><userinput>
|
||||
sed -e 's/^BIN_DIR.*$/BIN_DIRECTORY=\/usr\/sbin/' src/EDITME | \
|
||||
<para><screen><userinput>sed -e 's/^BIN_DIR.*$/BIN_DIRECTORY=\/usr\/sbin/' src/EDITME | \
|
||||
sed -e 's/^CONF.*$/CONFIGURE_FILE=\/etc\/exim.conf/' | \
|
||||
sed -e 's/^EXIM_USER.*$/EXIM_USER=exim/' | \
|
||||
sed -e 's/^EXIM_MONITOR/#EXIM_MONITOR/' > Local/Makefile :
|
||||
</userinput></screen>
|
||||
|
||||
sed -e 's/^EXIM_MONITOR/#EXIM_MONITOR/' > Local/Makefile</userinput></screen>
|
||||
Many of exim's configuration options are compiled in. Here, we
|
||||
specify the minimum set of options, BIN_DIRECTORY, CONFIGURE_FILE and
|
||||
EXIM_USER. We also defer building the exim monitor program, which
|
||||
requires X windows support, by commenting out the EXIM_MONITOR line in
|
||||
the Makefile.</para>
|
||||
|
||||
<para><userinput> ln -s /usr/sbin/exim /usr/sbin/sendmail :
|
||||
</userinput>
|
||||
Create a link to sendmail for applications which need it. exim will
|
||||
<para><userinput>ln -s /usr/sbin/exim /usr/sbin/sendmail</userinput> : Create a link to sendmail for applications which need it. exim will
|
||||
accept most Sendmail command line options.</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -16,7 +16,7 @@ tcp-env /var/qmail/bin/qmail-smtpd" >> /etc/inetd.conf</userinput></screen></par
|
||||
<para>If xinetd is used, the following command will add the qmaild
|
||||
entry to <filename>/etc/xinetd.conf</filename>: </para>
|
||||
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"</userinput>
|
||||
service smtp
|
||||
{
|
||||
disable = no
|
||||
@ -31,12 +31,12 @@ service smtp
|
||||
only_from = 127.0.0.1
|
||||
log_on_failture += USERID
|
||||
}
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>To automate the running of qmail, use following command to
|
||||
create the init.d script:</para>
|
||||
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/qmail << "EOF"
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/qmail << "EOF"</userinput>
|
||||
#!/bin/sh
|
||||
# Begin $rc_base/init.d/qmail
|
||||
|
||||
@ -71,7 +71,7 @@ case "$1" in
|
||||
esac
|
||||
|
||||
# End $rc_base/init.d/qmail
|
||||
EOF
|
||||
<userinput>EOF
|
||||
chmod 755 /etc/rc.d/init.d/qmail</userinput></screen></para>
|
||||
|
||||
<para>Create the symbolic links to this file in the relevant rc.d directory with the following commands:
|
||||
|
||||
@ -9,10 +9,10 @@
|
||||
|
||||
<sect3><title>Configuring sendmail</title>
|
||||
<para><screen><userinput>echo `hostname` > /etc/mail/local-host-names
|
||||
cat > /etc/mail/aliases << "EOF"
|
||||
cat > /etc/mail/aliases << "EOF"</userinput>
|
||||
postmaster: root
|
||||
MAILER-DAEMON: root
|
||||
EOF
|
||||
<userinput>EOF
|
||||
cd /etc/mail &&
|
||||
cp -R /usr/src/sendmail-&sendmail-version;/cf/* . &&
|
||||
cp -R /usr/src/sendmail-&sendmail-version;/cf/cf/submit.mc . &&
|
||||
|
||||
@ -12,13 +12,13 @@ mkdir /var/spool/mqueue</userinput></screen></para>
|
||||
|
||||
<para>Install sendmail with the following commands:</para>
|
||||
|
||||
<para><screen><userinput>cat > devtools/Site/site.config.m4 << "EOF"
|
||||
<para><screen><userinput>cat > devtools/Site/site.config.m4 << "EOF"</userinput>
|
||||
define(`confMANGRP',`root')
|
||||
define(`confMANOWN',`root')
|
||||
define(`confSBINGRP',`root')
|
||||
define(`confUBINGRP',`root')
|
||||
define(`confUBINOWN',`root')
|
||||
EOF
|
||||
<userinput>EOF
|
||||
cd sendmail &&
|
||||
sh Build &&
|
||||
cd ../cf/cf &&
|
||||
|
||||
@ -8,36 +8,25 @@ mknod /home/named/dev/null c 1 3
|
||||
mknod /home/named/dev/random c 1 8
|
||||
chmod 666 /home/named/dev/{null,random}
|
||||
mkdir /home/named/etc/namedb/pz
|
||||
cp /etc/localtime /home/named/etc : </userinput></screen>
|
||||
|
||||
cp /etc/localtime /home/named/etc</userinput></screen>
|
||||
Create the unprivileged user and group named, along with device files
|
||||
that named will need access to inside the chroot jail.</para>
|
||||
|
||||
<para><userinput>
|
||||
cat > /home/named/etc/named.conf << "EOF" :</userinput>
|
||||
Create the BIND configuration file, from which named will read the
|
||||
<para><userinput>cat > /home/named/etc/named.conf <<
|
||||
"EOF"</userinput> : Create the BIND configuration file, from which named will read the
|
||||
location of zone files, root nameservers and secure DNS keys.</para>
|
||||
<para><userinput>
|
||||
cat > /home/named/etc/namedb/pz/127.0.0 << "EOF" :</userinput>
|
||||
Create a single zone file.</para>
|
||||
<para><userinput>
|
||||
cat > /home/named/etc/namedb/root.hints << "EOF" :</userinput>
|
||||
The root.hints file is a list of root nameservers. This file must be
|
||||
<para><userinput>cat > /home/named/etc/namedb/pz/127.0.0 << "EOF"</userinput> : Create a single zone file.</para>
|
||||
<para><userinput>cat > /home/named/etc/namedb/root.hints << "EOF"</userinput> : The root.hints file is a list of root nameservers. This file must be
|
||||
updated periodically with the dig utility. Consult the BIND 9
|
||||
Administrator Reference Manual for details.</para>
|
||||
<para><userinput>
|
||||
cat > /etc/rndc.conf << "EOF" :</userinput>
|
||||
The rndc.conf file contains information for controlling named
|
||||
<para><userinput>cat > /etc/rndc.conf << "EOF"</userinput> : The rndc.conf file contains information for controlling named
|
||||
operations with the rndc utility.</para>
|
||||
|
||||
<para><userinput>
|
||||
cat > /etc/resolv.conf << "EOF" :</userinput>
|
||||
The resolv.conf file will specify the local host(127.0.0.1) as the
|
||||
<para><userinput>cat > /etc/resolv.conf << "EOF"</userinput> : The resolv.conf file will specify the local host(127.0.0.1) as the
|
||||
nameserver.</para>
|
||||
|
||||
<para><userinput>
|
||||
cat > /etc/rc.d/init.d/bind << "EOF" :</userinput>
|
||||
Create the boot script for BIND 9, used to start and stop the name
|
||||
<para><userinput>cat > /etc/rc.d/init.d/bind <<
|
||||
"EOF"</userinput> : Create the boot script for BIND 9, used to start and stop the name
|
||||
server daemon, named.</para>
|
||||
|
||||
|
||||
|
||||
@ -7,8 +7,7 @@ directory </para>
|
||||
|
||||
<para>First we set up some files and directories needed by
|
||||
BIND:</para>
|
||||
<para><screen><userinput>
|
||||
groupadd -g 200 named &&
|
||||
<para><screen><userinput>groupadd -g 200 named &&
|
||||
useradd -m -g named -u 200 -s /bin/false named &&
|
||||
cd /home/named &&
|
||||
mkdir -p dev etc/namedb/slave var/run &&
|
||||
@ -16,16 +15,15 @@ mknod /home/named/dev/null c 1 3 &&
|
||||
mknod /home/named/dev/random c 1 8 &&
|
||||
chmod 666 /home/named/dev/{null,random} &&
|
||||
mkdir /home/named/etc/namedb/pz &&
|
||||
cp /etc/localtime /home/named/etc
|
||||
</userinput></screen></para>
|
||||
cp /etc/localtime /home/named/etc</userinput></screen></para>
|
||||
|
||||
<sect3><title>Config files</title>
|
||||
<para><userinput>named.conf, root.hints, 127.0.0, rndc.conf
|
||||
</userinput></para>
|
||||
<para><userinput>named.conf</userinput>,
|
||||
<userinput>root.hints</userinput>, <userinput>127.0.0</userinput> and
|
||||
<userinput>rndc.conf</userinput></para>
|
||||
|
||||
<para>Create the named.conf file with the following commands:</para>
|
||||
<para><screen><userinput>
|
||||
cat > /home/named/etc/named.conf << "EOF"
|
||||
<para><screen><userinput>cat > /home/named/etc/named.conf << "EOF"</userinput>
|
||||
options {
|
||||
directory "/etc/namedb";
|
||||
pid-file "/var/run/named.pid";
|
||||
@ -47,11 +45,9 @@ cat > /home/named/etc/named.conf << "EOF"
|
||||
type master;
|
||||
file "pz/127.0.0";
|
||||
};
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
<para>Create a zone file with the following contents: </para>
|
||||
<para><screen><userinput>
|
||||
cat > /home/named/etc/namedb/pz/127.0.0 << "EOF"
|
||||
<para><screen><userinput>cat > /home/named/etc/namedb/pz/127.0.0 << "EOF"</userinput>
|
||||
$TTL 3D
|
||||
@ IN SOA ns.local.domain. hostmaster.local.domain. (
|
||||
1 ; Serial
|
||||
@ -61,14 +57,12 @@ $TTL 3D
|
||||
1D) ; Minimum TTL
|
||||
NS ns.local.domain.
|
||||
1 PTR localhost.
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Create the root.hints file with the following commands: </para>
|
||||
<note><para>Caution must be used to insure no leading spaces in this
|
||||
file.</para></note>
|
||||
<para><screen><userinput>
|
||||
cat > /home/named/etc/namedb/root.hints << "EOF"
|
||||
<para><screen><userinput>cat > /home/named/etc/namedb/root.hints << "EOF"</userinput>
|
||||
. 6D IN NS A.ROOT-SERVERS.NET.
|
||||
. 6D IN NS B.ROOT-SERVERS.NET.
|
||||
. 6D IN NS C.ROOT-SERVERS.NET.
|
||||
@ -95,12 +89,10 @@ J.ROOT-SERVERS.NET. 6D IN A 192.58.128.30
|
||||
K.ROOT-SERVERS.NET. 6D IN A 193.0.14.129
|
||||
L.ROOT-SERVERS.NET. 6D IN A 198.32.64.12
|
||||
M.ROOT-SERVERS.NET. 6D IN A 202.12.27.33
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Create the rndc.conf with the following commands:</para>
|
||||
<para><screen><userinput>
|
||||
cat > /etc/rndc.conf << "EOF"
|
||||
<para><screen><userinput>cat > /etc/rndc.conf << "EOF"</userinput>
|
||||
key rndc_key {
|
||||
algorithm "hmac-md5";
|
||||
secret
|
||||
@ -110,31 +102,25 @@ options {
|
||||
default-server localhost;
|
||||
default-key rndc_key;
|
||||
};
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Create or modify resolv.conf to use the new nameserver with the
|
||||
following commands: </para>
|
||||
<note><para>Replace yourdomain.com with your own valid domain
|
||||
name.</para></note>
|
||||
|
||||
<para><screen><userinput>
|
||||
cp /etc/resolv.conf /etc/resolv.conf.bak
|
||||
cat > /etc/resolv.conf << "EOF"
|
||||
<para><screen><userinput>cp /etc/resolv.conf /etc/resolv.conf.bak &&
|
||||
cat > /etc/resolv.conf << "EOF"</userinput>
|
||||
search yourdomain.com
|
||||
nameserver 127.0.0.1
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Set permissions on the chroot jail with the following
|
||||
command:</para>
|
||||
<para><screen><userinput>
|
||||
chown -R named.named /home/named
|
||||
</userinput></screen></para>
|
||||
<para><screen><userinput>chown -R named.named /home/named</userinput></screen></para>
|
||||
|
||||
<para>Create the BIND boot script:</para>
|
||||
<para><screen><userinput>
|
||||
cat > /etc/rc.d/init.d/bind << "EOF"
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/bind << "EOF"</userinput>
|
||||
#!/bin/bash
|
||||
# Begin $rc_base/init.d/bind
|
||||
# Based on sysklogd script from LFS-3.1 and earlier.
|
||||
@ -170,39 +156,30 @@ case "$1" in
|
||||
;;
|
||||
esac
|
||||
# End $rc_base/init.d/bind
|
||||
EOF
|
||||
</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Add the run level symlinks:</para>
|
||||
<para><screen><userinput>
|
||||
chmod 754 /etc/rc.d/init.d/bind &&
|
||||
<para><screen><userinput>chmod 754 /etc/rc.d/init.d/bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc0.d/K49bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc1.d/K49bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc2.d/K49bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc3.d/S22bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc4.d/S22bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc5.d/S22bind &&
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc6.d/K49bind
|
||||
</userinput></screen></para>
|
||||
ln -s /etc/rc.d/init.d/bind /etc/rc.d/rc6.d/K49bind</userinput></screen></para>
|
||||
|
||||
<para>Now start BIND with the new boot script: </para>
|
||||
<para><screen><userinput>
|
||||
/etc/rc.d/init.d/bind start
|
||||
</userinput></screen></para></sect3>
|
||||
<para><screen><userinput>/etc/rc.d/init.d/bind start</userinput></screen></para></sect3>
|
||||
|
||||
<sect3><title>Testing BIND</title>
|
||||
<para>Test out the new BIND 9 installation. First query the local
|
||||
host address with dig:</para>
|
||||
<para><screen><userinput>
|
||||
dig -x 127.0.0.1
|
||||
</userinput></screen></para>
|
||||
<para><screen><userinput>dig -x 127.0.0.1</userinput></screen></para>
|
||||
<para>Now try an external name lookup, taking note of the speed
|
||||
difference in repeated lookups due to the caching. Run the dig
|
||||
command twice on the same address:</para>
|
||||
<para><screen><userinput>
|
||||
dig beyond.linuxfromscratch.org &&
|
||||
dig beyond.linuxfromscratch.org
|
||||
</userinput></screen>
|
||||
<para><screen><userinput>dig beyond.linuxfromscratch.org &&
|
||||
dig beyond.linuxfromscratch.org</userinput></screen>
|
||||
You can see almost instantaneous results with the named caching
|
||||
lookups. Consult bind-&bind-version;/doc/arm/Bv9ARM.html, the BIND
|
||||
Administrator Reference Manual for further configuration options.
|
||||
|
||||
@ -1,20 +1,20 @@
|
||||
<sect2>
|
||||
<title>Command explanations</title>
|
||||
|
||||
<para><userinput>mkdir /cvsroot :</userinput> Create the CVS repository
|
||||
<para><userinput>mkdir /cvsroot</userinput> : Create the CVS repository
|
||||
directory.</para>
|
||||
|
||||
<para><userinput>chmod 1777 /cvsroot :</userinput> Sticky bit
|
||||
<para><userinput>chmod 1777 /cvsroot</userinput> : Sticky bit
|
||||
permissions for CVSROOT.</para>
|
||||
|
||||
<para><userinput>export CVSROOT=/cvsroot :</userinput> Specify new
|
||||
<para><userinput>export CVSROOT=/cvsroot</userinput> : Specify new
|
||||
CVSROOT for all cvs commands.</para>
|
||||
|
||||
<para><userinput>cvs init :</userinput> Initialize the new CVS
|
||||
<para><userinput>cvs init</userinput> : Initialize the new CVS
|
||||
repository.</para>
|
||||
|
||||
<para><userinput>cvs import -m "repository test" cvstest vendortag
|
||||
releasetag :</userinput> All source code modules must be imported
|
||||
releasetag</userinput> : All source code modules must be imported
|
||||
into the CVS repository before use, with the cvs import command. the
|
||||
-m flags specifies an initial descriptive entry for the new module.
|
||||
the "cvstest" parameter is the name used for the module in all
|
||||
@ -23,15 +23,14 @@ are used to further identify each CVS module and are mandatory whether
|
||||
used or not.</para>
|
||||
|
||||
<para><userinput>(grep anonymous /etc/passwd || useradd anonymous -s
|
||||
/bin/false) :</userinput> Check for an existing anonymous user and
|
||||
/bin/false)</userinput> : Check for an existing anonymous user and
|
||||
create one if not found.</para>
|
||||
|
||||
<para><userinput>echo anonymous: > /cvsroot/CVSROOT/passwd
|
||||
:</userinput> Add the anonymous user to the CVS passwd file, which is
|
||||
<para><userinput>echo anonymous: > /cvsroot/CVSROOT/passwd
|
||||
</userinput> : Add the anonymous user to the CVS passwd file, which is
|
||||
unused for anything else in this configuration.</para>
|
||||
|
||||
<para><userinput>echo anonymous > /cvsroot/CVSROOT/readers :
|
||||
</userinput> Add the anonymous user to the CVS readers file, a list of
|
||||
<para><userinput>echo anonymous > /cvsroot/CVSROOT/readers</userinput> : Add the anonymous user to the CVS readers file, a list of
|
||||
users who have read only access to the repository.</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -16,7 +16,7 @@ end of this section.</para>
|
||||
logged in as root:</para>
|
||||
<para><screen><userinput>mkdir /cvsroot &&
|
||||
chmod 1777 /cvsroot &&
|
||||
export CVSROOT=/cvsroot
|
||||
export CVSROOT=/cvsroot &&
|
||||
cvs init</userinput></screen></para></sect3>
|
||||
|
||||
<sect3><title>2. Import source code into the repository.</title>
|
||||
@ -55,8 +55,8 @@ cvs -d:ext:servername:/cvsroot co cvstest</userinput></screen></para></sect3>
|
||||
commands:</para>
|
||||
|
||||
<para><screen><userinput>(grep anonymous /etc/passwd || useradd anonymous -s /bin/false) &&
|
||||
echo anonymous: > /cvsroot/CVSROOT/passwd &&
|
||||
echo anonymous > /cvsroot/CVSROOT/readers</userinput></screen></para>
|
||||
echo anonymous: > /cvsroot/CVSROOT/passwd &&
|
||||
echo anonymous > /cvsroot/CVSROOT/readers</userinput></screen></para>
|
||||
|
||||
<para>If you use inetd, the following command will add the pserver
|
||||
entry to /etc/inetd.conf:</para>
|
||||
@ -70,7 +70,7 @@ file.</para>
|
||||
<para>If you use xinetd, the following command will add the pserver
|
||||
entry to /etc/xinetd.conf:</para>
|
||||
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"</userinput>
|
||||
service cvspserver
|
||||
{
|
||||
port = 2401
|
||||
@ -82,7 +82,7 @@ entry to /etc/xinetd.conf:</para>
|
||||
server = /usr/bin/cvs
|
||||
server_args = -f --allow-root=/cvsroot pserver
|
||||
}
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
<para>Issue a killall -HUP xinetd to reread the changed xinetd.conf
|
||||
file.</para>
|
||||
|
||||
|
||||
@ -1,10 +1,7 @@
|
||||
<sect2>
|
||||
<title>Command explanations</title>
|
||||
|
||||
<para><userinput>make CC="gcc $CFLAGS" :</userinput> This makes dhcp
|
||||
compile using our CFLAGS for optimizations.</para>
|
||||
|
||||
<para><userinput>LIBDIR=/usr/lib INCDIR=/usr/include :</userinput> This
|
||||
<para><userinput>LIBDIR=/usr/lib INCDIR=/usr/include</userinput> : This
|
||||
command installs the library and include files in <filename
|
||||
class="directory">/usr</filename> instead of <filename
|
||||
class="directory">/usr/local</filename>.</para>
|
||||
|
||||
@ -4,7 +4,7 @@
|
||||
<para>Install dhcp by running the following commands:</para>
|
||||
|
||||
<para><screen><userinput>./configure &&
|
||||
make CC="gcc $CFLAGS" &&
|
||||
make &&
|
||||
make LIBDIR=/usr/lib INCDIR=/usr/include install</userinput></screen></para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -2,8 +2,8 @@
|
||||
<title>Configuring leafnode</title>
|
||||
|
||||
<sect3><title>Config files</title>
|
||||
<para><userinput>/etc/leafnode/config,
|
||||
/etc/inetd.conf, /etc/xinetd.conf</userinput></para>
|
||||
<para><userinput>/etc/leafnode/config</userinput>,
|
||||
<userinput>/etc/inetd.conf</userinput> and <userinput>/etc/xinetd.conf</userinput></para>
|
||||
|
||||
<para>leafnode may be configured to use inetd or xinetd as follows:
|
||||
</para>
|
||||
@ -17,7 +17,7 @@ file with the following command:
|
||||
<para>xinetd configuration</para>
|
||||
<para>Add a leafnode entry to the <filename>/etc/xinetd.conf</filename>
|
||||
file with the following command:
|
||||
<screen><userinput>cat >> /etc/xinetd.conf << "EOF"
|
||||
<screen><userinput>cat >> /etc/xinetd.conf << "EOF"</userinput>
|
||||
service nntp
|
||||
{
|
||||
flags = NAMEINARGS NOLIBWRAP
|
||||
@ -30,7 +30,7 @@ file with the following command:
|
||||
instances = 7
|
||||
per_source = 3
|
||||
}
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>The <filename>/etc/news/config</filename> file must be
|
||||
edited to reflect the name of the upstream NNTP provider. Copy the
|
||||
|
||||
@ -9,21 +9,17 @@ useradd -g news news :
|
||||
resulting from an already existing user or group news may be
|
||||
ignored.</para>
|
||||
|
||||
<para><userinput> --prefix=/usr : </userinput>
|
||||
Change the default installation directory of /usr/local.</para>
|
||||
<para><userinput> --prefix=/usr</userinput> : Change the default installation directory of /usr/local.</para>
|
||||
|
||||
<para><userinput> --localstatedir=/var : </userinput>
|
||||
Change the default spool directory of /usr/var.</para>
|
||||
<para><userinput> --localstatedir=/var</userinput> : Change the default spool directory of /usr/var.</para>
|
||||
|
||||
<para><userinput> --sysconfdir=/etc/news : </userinput>
|
||||
leafnode reads it's configuration data from an file called
|
||||
<para><userinput> --sysconfdir=/etc/news</userinput> : leafnode reads it's configuration data from an file called
|
||||
<filename>config</filename>, this with be created in
|
||||
<filename>/etc/news</filename> to avoid any potential conflict with
|
||||
other packages.
|
||||
</para>
|
||||
|
||||
<para><userinput> make update : </userinput>
|
||||
Create an initial <filename>/etc/news/config.example</filename> file,
|
||||
<para><userinput> make update</userinput> : Create an initial <filename>/etc/news/config.example</filename> file,
|
||||
which must be renamed to <filename>/etc/news/config</filename>.</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -1,8 +1,9 @@
|
||||
<sect2>
|
||||
<title>Contents</title>
|
||||
|
||||
<para>The OpenLDAP package contains slapd, slurpd, LDAP libraries, and
|
||||
various utilities, tools, and sample clients. </para>
|
||||
<para>The OpenLDAP package contains <userinput>slapd</userinput>,
|
||||
<userinput>slurpd</userinput>, <userinput>LDAP libraries</userinput> and
|
||||
<userinput>various utilities, tools, and sample clients</userinput>.</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
|
||||
@ -1,18 +1,18 @@
|
||||
<sect2>
|
||||
<title>Installation command explanations</title>
|
||||
|
||||
<para><userinput>--prefix=/usr:</userinput> Sets the prefix for almost all the file
|
||||
<para><userinput>--prefix=/usr</userinput> : Sets the prefix for almost all the file
|
||||
paths to /usr.</para>
|
||||
|
||||
<para><userinput>--sysconfdir=/etc:</userinput> Sets the configuration file directory to
|
||||
<para><userinput>--sysconfdir=/etc</userinput> : Sets the configuration file directory to
|
||||
avoid the default of /usr/etc.</para>
|
||||
|
||||
<para><userinput>--libexecdir=/usr/sbin:</userinput> Puts the server executables in
|
||||
<para><userinput>--libexecdir=/usr/sbin</userinput> : Puts the server executables in
|
||||
/usr/sbin instead of /usr/libexec.</para>
|
||||
|
||||
<para><userinput>--enable-ldbm:</userinput> Enable the most recent version of the Berkely DB.</para>
|
||||
<para><userinput>--enable-ldbm</userinput> : Enable the most recent version of the Berkely DB.</para>
|
||||
|
||||
<para><userinput>--disable-debug:</userinput> Disable debugging code.</para>
|
||||
<para><userinput>--disable-debug</userinput> : Disable debugging code.</para>
|
||||
<para><userinput>make test:</userinput> Validate correct build of the package.</para>
|
||||
|
||||
|
||||
|
||||
@ -1,7 +1,8 @@
|
||||
<sect2>
|
||||
<title>Introduction to OpenLDAP</title>
|
||||
|
||||
<screen>Download location (FTP): <ulink url="&openldap-download-ftp;"/>
|
||||
<screen>Download location (HTTP): <ulink url="&openldap-download-http;"/>
|
||||
Download location (FTP): <ulink url="&openldap-download-ftp;"/>
|
||||
Version used: &openldap-version;
|
||||
Package size: &openldap-size;
|
||||
Estimated Disk space required: &openldap-buildsize;</screen>
|
||||
|
||||
@ -9,5 +9,4 @@
|
||||
<!ENTITY openldap-version "2.1.17">
|
||||
<!ENTITY openldap-size "2.0 MB">
|
||||
<!ENTITY openldap-download-http "">
|
||||
<!ENTITY openldap-download-ftp
|
||||
"ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
|
||||
<!ENTITY openldap-download-ftp "ftp://ftp.OpenLDAP.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
|
||||
|
||||
@ -3,7 +3,7 @@
|
||||
|
||||
<sect3><title>Config files</title>
|
||||
|
||||
<para><userinput>/etc/ssh/ssh_config, /etc/ssh/sshd_config </userinput></para>
|
||||
<para><userinput>/etc/ssh/ssh_config</userinput>, <userinput>/etc/ssh/sshd_config </userinput></para>
|
||||
<para>There are no required changes in either of these files. However
|
||||
you may wish to view them to make changes for appropriate security to
|
||||
your system. Configuration information can be found in the man pages for sshd, ssh and ssh-agent</para>
|
||||
|
||||
@ -1,16 +1,16 @@
|
||||
<sect2>
|
||||
<title>Command explanations</title>
|
||||
|
||||
<para><userinput>--sysconfigdir=/etc/ssh :</userinput> This prevents the
|
||||
<para><userinput>--sysconfigdir=/etc/ssh</userinput> : This prevents the
|
||||
configuration files from going to /usr/etc.</para>
|
||||
|
||||
<para><userinput>--with-md5-passwords :</userinput> This is required
|
||||
<para><userinput>--with-md5-passwords</userinput> : This is required
|
||||
if you made the changes recommended by the shadowpasswd_plus lfs hint on
|
||||
your ssh server when you installed the Shadow Password Suite or if you
|
||||
access a ssh server that authenticates by user passwords encrypted with
|
||||
md5. </para>
|
||||
|
||||
<para><userinput>--libexecdir=/usr/sbin :</userinput> OpenSSH puts
|
||||
<para><userinput>--libexecdir=/usr/sbin</userinput> : OpenSSH puts
|
||||
programs called by programs in /usr/libexec. sftp-server is a sshd
|
||||
utility and ssh-askpass is a ssh-add utility that is installed as a
|
||||
link to X11-ssh-askpass. Both of these should go in <filename
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
<sect2>
|
||||
<title>Configuration command explanations</title>
|
||||
<para><userinput>cat > /etc/samba/smb.conf << "EOF" :</userinput>
|
||||
Create a default Samba configuration file. This configuration will
|
||||
<para><userinput>cat > /etc/samba/smb.conf << "EOF"</userinput>
|
||||
: Create a default Samba configuration file. This configuration will
|
||||
allow Samba to act as a Primary Domain Controller for a Microsoft
|
||||
Windows based network. If this is not desired, a simpler default
|
||||
smb.conf file is bundled with the Samba distribution. See the
|
||||
@ -11,27 +11,26 @@ complicated than ordinary member server configuration, so instructions
|
||||
for PDC configuration will be given here.</para>
|
||||
|
||||
|
||||
<para><userinput>cat > /etc/rc.d/init.d/samba << "EOF" :</userinput>
|
||||
Create the Samba boot script, used to start and stop Samba
|
||||
<para><userinput>cat > /etc/rc.d/init.d/samba <<
|
||||
"EOF"</userinput> : Create the Samba boot script, used to start and stop Samba
|
||||
automatically on machine startup and shutdown.</para>
|
||||
|
||||
<para><screen><userinput>/usr/sbin/useradd -g 100 -d /dev/null -c \
|
||||
"Win2k Server" -s /bin/false win2kbox$ :</userinput></screen>
|
||||
"Win2k Server" -s /bin/false win2kbox$</userinput></screen>
|
||||
This command creates a machine trust account, necessary only for
|
||||
Windows 2000/NT servers to authenticate to our new PDC. Machine trust
|
||||
accounts are not necessary for Win95/98 clients.</para>
|
||||
|
||||
<para>
|
||||
<userinput>echo "swat 901/tcp" >> /etc/services :</userinput>
|
||||
Register the swat service to run on port 901.</para>
|
||||
<userinput>echo "swat 901/tcp" >> /etc/services</userinput> : Register the swat service to run on port 901.</para>
|
||||
|
||||
<para><userinput>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" >>
|
||||
/etc/inetd.conf :</userinput> Instruct inetd where to find and how to
|
||||
/etc/inetd.conf</userinput> : Instruct inetd where to find and how to
|
||||
run swat.</para>
|
||||
|
||||
<para>
|
||||
<userinput>ln -s /etc/rc.d/init.d/samba /etc/rc.d/rc3.d/S600samba, etc. :</userinput>
|
||||
Create the Samba boot scripts, used to start and stop Samba
|
||||
<userinput>ln -s /etc/rc.d/init.d/samba
|
||||
/etc/rc.d/rc3.d/S600samba</userinput> etc. : Create the Samba boot scripts, used to start and stop Samba
|
||||
automatically on machine startup and shutdown.</para>
|
||||
</sect2>
|
||||
|
||||
|
||||
@ -11,7 +11,7 @@ documentation by pointing a web browser to:</para>
|
||||
<para><screen><userinput>file:///usr/share/samba/swat/using_samba/ch03_01.html#ch03-55770.</userinput></screen></para>
|
||||
|
||||
<sect3><title>Config files</title>
|
||||
<para><userinput>/etc/samba/smb.conf, /etc/rc.d/init.d/samba </userinput></para>
|
||||
<para><userinput>/etc/samba/smb.conf</userinput>, <userinput>/etc/rc.d/init.d/samba </userinput></para>
|
||||
|
||||
<para>First we set up some directories needed by Samba:</para>
|
||||
<para><screen><userinput>mkdir /var/lib/samba &&
|
||||
@ -21,7 +21,7 @@ mkdir /var/lib/samba/profiles &&
|
||||
chmod -R 1777 /var/lib/samba</userinput></screen></para>
|
||||
|
||||
<para>And the Samba configuration file: </para>
|
||||
<para><screen><userinput>cat > /etc/samba/smb.conf << "EOF"
|
||||
<para><screen><userinput>cat > /etc/samba/smb.conf << "EOF"</userinput>
|
||||
[global]
|
||||
netbios name = SAMBABOX
|
||||
workgroup = DOMAIN01
|
||||
@ -58,7 +58,7 @@ comment = Users' home directories
|
||||
path = /home
|
||||
read only = no
|
||||
public = no
|
||||
EOF </userinput></screen></para>
|
||||
<userinput>EOF </userinput></screen></para>
|
||||
|
||||
<para>Now add the machine trust account for WIN2KBOX:</para>
|
||||
<para><screen><userinput>/usr/sbin/useradd -g 100 -d /dev/null -c \
|
||||
@ -67,7 +67,7 @@ passwd -l win2kbox$ &&
|
||||
smbpasswd -a -m win2kbox</userinput></screen></para>
|
||||
|
||||
<para>Create the Samba boot script:</para>
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/samba << "EOF"
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/samba << "EOF"</userinput>
|
||||
#!/bin/bash
|
||||
# Begin $rc_base/init.d/samba
|
||||
# Based on sysklogd script from LFS-3.1 and earlier.
|
||||
@ -108,7 +108,7 @@ case "$1" in
|
||||
;;
|
||||
esac
|
||||
# End $rc_base/init.d/samba
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
<para>Add the run level symlinks:</para>
|
||||
<para><screen><userinput>chmod 754 /etc/rc.d/init.d/samba &&
|
||||
ln -s /etc/rc.d/init.d/samba /etc/rc.d/rc0.d/K48samba &&
|
||||
@ -129,9 +129,7 @@ first in order to join WIN2KBOX to the DOMAIN01 domain: </para>
|
||||
<para>After starting Samba and adding root to the Samba user list, the
|
||||
first machine we'll join to DOMAIN01 will be WIN2KBOX, the Windows
|
||||
2000 Server box we created the machine trust account for. On
|
||||
WIN2KBOX:</para><para><screen><userinput>
|
||||
|
||||
1. Right click on My Computer.
|
||||
WIN2KBOX:</para><para><screen><userinput>1. Right click on My Computer.
|
||||
2. Click on Properties.
|
||||
3. Click on the Network Identification notebook tab.
|
||||
4. Click on the Properties button.
|
||||
@ -144,7 +142,7 @@ WIN2KBOX:</para><para><screen><userinput>
|
||||
dialog box welcoming you to the DOMAIN01 domain.
|
||||
9. Click OK in the reboot reminder dialog box.
|
||||
10. Click OK to close the System Properties window.
|
||||
11. Click Yes to reboot WIN2KBOX. </userinput></screen></para></sect3>
|
||||
11. Click Yes to reboot WIN2KBOX.</userinput></screen></para></sect3>
|
||||
|
||||
<sect3><title>Add a new user to the DOMAIN01 domain.</title>
|
||||
<para>Before logging on to WIN2KBOX, we will create a new user with
|
||||
@ -172,7 +170,7 @@ to <filename>/etc/inetd.conf</filename>: </para>
|
||||
|
||||
<para>If xinetd is used, the following command will add the swat entry
|
||||
to <filename>/etc/xinetd.conf</filename>: </para>
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"
|
||||
<para><screen><userinput>cat >> /etc/xinetd.conf << "EOF"</userinput>
|
||||
service swat
|
||||
{
|
||||
port = 901
|
||||
@ -183,7 +181,7 @@ service swat
|
||||
server = /usr/sbin/swat
|
||||
log_on_failure += USERID
|
||||
}
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>The Samba Web Administration Tool, swat, can be launched with the
|
||||
following command on SAMBABOX: </para>
|
||||
|
||||
@ -33,7 +33,7 @@ binary code page files nd vice versa.</para></sect3>
|
||||
use in mapping characters to 16 bit unicode.</para></sect3>
|
||||
<sect3><title>mount.smbfs</title>
|
||||
<para>mount.smbfs provides /bin/mount with a way to mount remote
|
||||
windows (or samba) fileshares</para></sect3>
|
||||
windows (or samba) fileshares.</para></sect3>
|
||||
<sect3><title>nmbd</title>
|
||||
<para>nmbd is the Samba NetBIOS name server.</para></sect3>
|
||||
<sect3><title>nmblookup</title>
|
||||
|
||||
@ -2,19 +2,19 @@
|
||||
<title>Installation command explanations</title>
|
||||
|
||||
<para><screen><userinput>mkdir -p /etc/samba/private
|
||||
mkdir -p /var/cache/samba :</userinput></screen>
|
||||
mkdir -p /var/cache/samba</userinput></screen>
|
||||
Directories needed for proper operation of the smbd and nmbd daemons.</para>
|
||||
|
||||
<para><userinput>--prefix=/usr :</userinput> Sets the prefix for almost all the file paths to /usr.</para>
|
||||
<para><userinput>--prefix=/usr</userinput> : Sets the prefix for almost all the file paths to /usr.</para>
|
||||
|
||||
<para><userinput>--sysconfdir=/etc :</userinput> Sets the configuration file directory to avoid the default of /usr/etc.</para>
|
||||
<para><userinput>--sysconfdir=/etc</userinput> : Sets the configuration file directory to avoid the default of /usr/etc.</para>
|
||||
|
||||
<para><userinput>--localstatedir=/var :</userinput> Sets the variable data directory to avoid the default of /usr/var.</para>
|
||||
<para><userinput>--localstatedir=/var</userinput> : Sets the variable data directory to avoid the default of /usr/var.</para>
|
||||
|
||||
<para><userinput>--with-fhs :</userinput> Assigns all other file paths in a manner compliant with the Filesystem Hierarchy Standard.</para>
|
||||
<para><userinput>--with-fhs</userinput> : Assigns all other file paths in a manner compliant with the Filesystem Hierarchy Standard.</para>
|
||||
|
||||
<para><userinput>--with-smbmount :</userinput> Orders the creation of an extra binary for use by the mount command so that mounting remote SMB (windows) shares becomes no more complex than mounting remote NFS shares.</para>
|
||||
<para><userinput>--with-smbmount</userinput> : Orders the creation of an extra binary for use by the mount command so that mounting remote SMB (windows) shares becomes no more complex than mounting remote NFS shares.</para>
|
||||
|
||||
<para><userinput>rm -rf /usr/private : </userinput> Removes a directory erroneously created by source/scripts/installbin.sh during the make install.</para>
|
||||
<para><userinput>rm -rf /usr/private</userinput> : Removes a directory erroneously created by source/scripts/installbin.sh during the make install.</para>
|
||||
|
||||
</sect2>
|
||||
|
||||
@ -2,6 +2,7 @@
|
||||
<title>Introduction to Samba</title>
|
||||
|
||||
<screen>Download location (HTTP): <ulink url="&samba-download-http;"/>
|
||||
Download location (FTP): <ulink url="&samba-download-ftp;"/>
|
||||
Version used: &samba-version;
|
||||
Package size: &samba-size;
|
||||
Estimated Disk space required: &samba-buildsize;</screen>
|
||||
|
||||
@ -6,8 +6,7 @@
|
||||
<!ENTITY samba-desc SYSTEM "samba-desc.xml">
|
||||
<!ENTITY samba-config SYSTEM "samba-config.xml">
|
||||
<!ENTITY samba-buildsize "45 MB">
|
||||
<!ENTITY samba-version "2.2.7a">
|
||||
<!ENTITY samba-download-http
|
||||
"http://us1.samba.org/samba/ftp/samba-&samba-version;.tar.gz">
|
||||
<!ENTITY samba-version "2.2.8">
|
||||
<!ENTITY samba-download-http "http://us1.samba.org/samba/ftp/samba-&samba-version;.tar.bz2">
|
||||
<!ENTITY samba-download-ftp "">
|
||||
<!ENTITY samba-size "5.0 MB">
|
||||
|
||||
@ -9,7 +9,7 @@ sed -e 's/etc/sbin/g' xinetd/sample.conf > /etc/xinetd.conf</userinput></scre
|
||||
<para><userinput>/etc/xinetd.conf</userinput></para>
|
||||
|
||||
<para>Create the xinetd boot script:</para>
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/xinetd << "EOF"
|
||||
<para><screen><userinput>cat > /etc/rc.d/init.d/xinetd << "EOF"</userinput>
|
||||
#!/bin/bash
|
||||
# Begin $rc_base/init.d/xinetd
|
||||
# Based on sysklogd script from LFS-3.1 and earlier.
|
||||
@ -43,7 +43,7 @@ case "$1" in
|
||||
;;
|
||||
esac
|
||||
# End $rc_base/init.d/xinetd
|
||||
EOF</userinput></screen></para>
|
||||
<userinput>EOF</userinput></screen></para>
|
||||
|
||||
<para>Add the run level symlinks:</para>
|
||||
|
||||
|
||||
@ -4,7 +4,7 @@
|
||||
<para>The xinetd package contains
|
||||
<userinput>xinetd</userinput>,
|
||||
<userinput>itox</userinput> and
|
||||
<userinput>xconv.pl.</userinput></para></sect2>
|
||||
<userinput>xconv.pl</userinput>.</para></sect2>
|
||||
|
||||
<sect2><title>Description</title>
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user