StuRa Diskussion:Server: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
K (→Uhrzeit) |
(Neuer Abschnitt →Web server management software) |
||
| Zeile 649: | Zeile 649: | ||
--[[Benutzer:PaulRiegel|PaulRiegel]] 14:14, 18. Sep 2012 (UTC) | --[[Benutzer:PaulRiegel|PaulRiegel]] 14:14, 18. Sep 2012 (UTC) | ||
== [https://en.wikipedia.org/wiki/Category:Web_server_management_software Web server management software] == | |||
Salvete Gemeinde,<br /> | |||
insbesondere lieber [[Bereich Administration Rechentechnik]], | |||
Gibt es eine Bewertung zur Verwendung von Tool wie [https://de.wikipedia.org/wiki/Webmin Webmin] und dergleichen? Ferner sei das hiermit ein Gedankenanstoß. :-) | |||
--[[Benutzer:PaulRiegel|PaulRiegel]] ([[Benutzer Diskussion:PaulRiegel|Diskussion]]) 02:31, 1. Aug. 2013 (CEST) | |||
Version vom 1. August 2013, 01:31 Uhr
Schätzung des zeitlichen Arbeitsaufwandes für die Erstellung der geforderten Dienste
super-optimistische Schätzung (Vollzeit)
- Backup-Server (2W)
- Notfallmanagment erstellt (30.8.11 16:00-21:30)
- Server 2 (Fette Elke)
- eingebaut (16.9. 16:00 - 19:00)
- einrichten
- Betriebssystem mit ZFS installiert (19.9. 13:00 - 1:15)
- os neu aufgesetzt mit raidz2 (hat bessere redundanz)(20.9. 15:00-19:40)
- test zfs dateien syncen (20.9. 19:40-20:40, 21.9. 14:00-19:30)
- einrichten fortgesetzt siehe Server/Hauptsystem (24.9. 16:00-4:00)
- Jails (25.9. 14:00-21:30, 26.9. 14:00-20:00, 27.9. 14:00-18:00 , 28.9 14:00-21:30, 29.9. 16:00-21:30, 30.09. 13:00 - 21:00)
- Bacula Dokumentation unter Server/Bacula (24.9. 14:30-16:00)
- Mail-Server * Mailman (1W)
- Mailingliste erweitert und Struktur angepasst (7.-8.9.11 20:00- 01:15)
- Mailman für testzwecke auf srs8 installiert (9.9. 13:00 - 16:00 , 16:30 - 21:20, 11.9. 15:15- 20:00) (Virtuellhost)
- converting Postfix list to Mailman (16.9. 19:00 - 20:30, 19.9. 15:45 - 16:00)
- Samba-Server (2d)
- Web-Server * Crypto (2d)
- Plone startup script configurieren (9.9 16:00 - 16:30)
- Wiki-Umzug (2d)
- DNS-Server (2d)
- Mirror-Server (? ... abhängig von den gemirrorten Sachen)
- = 3W + 8d = (gemäß der Arbeitsdefinition von Benutzer:Matthias Jakobi (als Bereichsleitung Administration Rechentechnik entspricht 1W = 5d und 1d = 10h) 3(5d) + 8d = 23d = 23(10h) = 230h
Aktueller zeitlicher Gesamtaufwand: 110H 00MIN
+ 6W um die eingetretene Scheiße wieder loszuwerden
srs8
- kopiert von srs21
- aliases.*
- master.cf
- main.cf (abgeändert)
myhostname = srs8.stura.htw-dresden.de
- rc.conf (abgeändert)
mailman_enable="YES"- nicht konfiguriert
apache22_enable="YES"- nicht konfiguriert
postfix_enable="YES"- basiskonfiguration vom srs21 übernommen
- pf.conf konfiguriert
Mailman test installation srs8
| Options for mailman 2.1.14_5 ?
? ?????????????????????????????????????????????????????????????????? ?
? ? [ ] SENDMAIL for use with sendmail ? ?
? ? [ ] EXIM3 for use with exim3 ? ?
? ? [ ] EXIM4 for use with exim4 ? ?
? ? [X] POSTFIX for use with postfix ? ?
? ? [ ] COURIER for use with courier ? ?
? ? [ ] CHINESE support for Chinese mailing lists ? ?
? ? [ ] HTDIG htdig integration patches ? ?
? ? [X] NAMAZU2 make private archives searchable with namazu2 | |
? Options for python27 2.7.* ?
? ?????????????????????????????????????????????????????????????????? ?
? ? [X] THREADS Enable thread support ? ?
? ? [ ] HUGE_STACK_SIZE Use a larger thread stack ? ?
? ? [ ] SEM Use POSIX semaphores (experimental) ? ?
? ? [ ] PTH Use GNU Pth for threading/multiprocessing ? ?
? ? [X] UCS4 Use UCS4 for unicode support ? ?
? ? [X] PYMALLOC Use python's internal malloc ? ?
? ? [X] IPV6 Enable IPv6 support ? ?
? ? [ ] FPECTL Enable floating point exception handling ? ?
Apache22 srs8
? Options for apache 2.2.* ?
? ?????????????????????????????????????????????????????????????????? ?
? ?[X] THREADS Enable threads support in APR ? ?
? ?[ ] MYSQL Enable MySQL support for apr-dbd ? ?
? ?[ ] PGSQL Enable PostgreSQL support for apr-dbd ? ?
? ?[ ] SQLITE Enable SQLite support for apr-dbd ? ?
? ?[X] IPV6 Enable IPv6 support ? ?
? ?[ ] BDB Enable BerkeleyDB dbm ? ?
? ?[X] AUTH_BASIC Enable mod_auth_basic ? ?
? ?[X] AUTH_DIGEST Enable mod_auth_digest ? ?
? ?[X] AUTHN_FILE Enable mod_authn_file ? ?
? ?[ ] AUTHN_DBD Enable mod_authn_dbd ? ?
? ?[X] AUTHN_DBM Enable mod_authn_dbm ? ?
? ?[X] AUTHN_ANON Enable mod_authn_anon ? ?
? ?[X] AUTHN_DEFAULT Enable mod_authn_default ? ?
? ?[X] AUTHN_ALIAS Enable mod_authn_alias ? ?
? ?[X] AUTHZ_HOST Enable mod_authz_host ? ?
? |[X] AUTHZ_GROUPFILE Enable mod_authz_groupfile ? ?
? ?[X] AUTHZ_USER Enable mod_authz_user ? ?
? ?[X] AUTHZ_DBM Enable mod_authz_dbm ? ?
? ?[X] AUTHZ_OWNER Enable mod_authz_owner ? ?
? ?[X] AUTHZ_DEFAULT Enable mod_authz_default ? ?
? ?[X] CACHE Enable mod_cache ? ?
? ?[X] DISK_CACHE Enable mod_disk_cache ? ?
? ?[X] FILE_CACHE Enable mod_file_cache ? ?
? ?[X] MEM_CACHE Enable mod_mem_cache ? ?
? ?[ ] DAV Enable mod_dav ? ?
? ?[ ] DAV_FS Enable mod_dav_fs ? ?
? ?[ ] BUCKETEER Enable mod_bucketeer ? ?
? ?[ ] CASE_FILTER Enable mod_case_filter ? ?
? ?[ ] CASE_FILTER_IN Enable mod_case_filter_in ? ?
? ?[ ] EXT_FILTER Enable mod_ext_filter ? ?
? ?[ ] LOG_FORENSIC Enable mod_log_forensic ? ?
? ?[ ] OPTIONAL_HOOK_EXPORT Enable mod_optional_hook_export ? ?
? ?[ ] OPTIONAL_HOOK_IMPORT Enable mod_optional_hook_import ? ?
? ?[ ] OPTIONAL_FN_IMPORT Enable mod_optional_fn_import ? ?
? ?[ ] OPTIONAL_FN_EXPORT Enable mod_optional_fn_export ? ?
? ?[X] LDAP Enable mod_ldap ? ?
? ?[X] AUTHNZ_LDAP Enable mod_authnz_ldap ? ?
? ?[X] ACTIONS Enable mod_actions ? ?
? ?[X] ALIAS Enable mod_alias ? ?
? ?[X] ASIS Enable mod_asis ? ?
? ?[X] AUTOINDEX Enable mod_autoindex ? ?
? ?[X] CERN_META Enable mod_cern_meta ? ?
? ?[X] CGI Enable mod_cgi ? ?
? ?[X] CHARSET_LITE Enable mod_charset_lite ? ?
? ?[ ] DBD Enable mod_dbd ? ?
? ?[X] DEFLATE Enable mod_deflate ? ?
? ?[X] DIR Enable mod_dir ? ?
? ?[X] DUMPIO Enable mod_dumpio ? ?
? ?[X] ENV Enable mod_env ? ?
? ?[X] EXPIRES Enable mod_expires ? ?
? ?[X] HEADERS Enable mod_headers ? ?
? ?[X] IMAGEMAP Enable mod_imagemap ? ?
? ?[X] INCLUDE Enable mod_include ? ?
? ?[X] INFO Enable mod_info ? ?
? ?[X] LOG_CONFIG Enable mod_log_config ? ?
? ?[X] LOGIO Enable mod_logio ? ?
? ?[X] MIME Enable mod_mime ? ?
? ?[X] MIME_MAGIC Enable mod_mime_magic ? ?
? ?[X] NEGOTIATION Enable mod_negotiation ? ?
? ?[X] REWRITE Enable mod_rewrite ? ?
? ?[X] SETENVIF Enable mod_setenvif ? ?
? ?[X] SPELING Enable mod_speling ? ?
? ?[X] STATUS Enable mod_status ? ?
? ?[ ] UNIQUE_ID Enable mod_unique_id ? ?
? ?[X] USERDIR Enable mod_userdir ? ?
? ?[ ] USERTRACK Enable mod_usertrack ? ?
? ?[X] VHOST_ALIAS Enable mod_vhost_alias ? ?
? ?[X] FILTER Enable mod_filter ? ?
? ?[ ] SUBSTITUTE Enable mod_substitute ? ?
? ?[X] VERSION Enable mod_version ? ?
? ?[ ] PROXY Enable mod_proxy ? ?
? ?[ ] PROXY_CONNECT Enable mod_proxy_connect ? ?
? ?[X] PATCH_PROXY_CONNECT Patch proxy_connect SSL support ? ?
? ?[ ] PROXY_FTP Enable mod_proxy_ftp ? ?
? ?[ ] PROXY_HTTP Enable mod_proxy_http ? ?
? ?[ ] PROXY_AJP Enable mod_proxy_ajp ? ?
? ?[ ] PROXY_BALANCER Enable mod_proxy_balancer ? ?
? ?[ ] PROXY_SCGI Enable mod_proxy_scgi ? ?
? ?[X] SSL Enable mod_ssl ? ?
? ?[ ] SUEXEC Enable mod_suexec ? ?
? ?[ ] SUEXEC_RSRCLIMIT SuEXEC rlimits based on login class ? ?
? ?[X] REQTIMEOUT Enable mod_reqtimeout ? ?
? ?[ ] CGID Enable mod_cgid ? ?
- Warum folgende Module?
- mod_dav & mod_dav_fs ... WebDAV für was?
- mod_actions
- mod_asis
- mod_autoindex
- mod_cern_meta
- mod_dumpio
- mod_imagemap
- mod_include - SSI?
- mod_info
- mod_negotiation
- mod_speling
- mod_status
- mod_unique_id - tracking nötig? datensparsamkeit?
- mod_userdir
- mod_usertrack - tracking nötig? datensparsamkeit?
- mod_proxy_balancer
? Options for apr-ipv6-devrandom-gdbm-db42 1.4.5.1.3.12 ?
? ?????????????????????????????????????????????????????????????????? ?
? ? [X] THREADS Enable Threads in apr ? ?
? ? [X] IPV6 Enable IPV6 Support in apr ? ?
? ? [X] BDB Enable Berkley BDB support in apr-util ? ?
? ? [X] GDBM Enable GNU dbm support in apr-util ? ?
? ? [X] LDAP Enable LDAP support in apr-util ? ?
? ? [ ] MYSQL Enable MySQL suport in apr-util ? ?
? ? [ ] NDBM Enable NDBM support in apr-util ? ?
? ? [ ] PGSQL Enable Postgresql suport in apr-util ? ?
? ? [ ] SQLITE Enable SQLite3 support in apr-util ? ?
? ? [X] DEVRANDOM Use /dev/random or compatible in apr ? ?
? Options for openldap-client 2.4.26 ?
? ?????????????????????????????????????????????????????????????????? ?
? ? [X] SASL With (Cyrus) SASL2 support ? ?
? ? [X] FETCH Enable fetch(3) support ? ?
? Options for cyrus-sasl 2.1.23_3 ?
? ?????????????????????????????????????????????????????????????????? ?
? ? [ ] BDB Use Berkeley DB ? ?
? ? [ ] MYSQL Use MySQL ? ?
? ? [ ] PGSQL Use PostgreSQL ? ?
? ? [ ] SQLITE Use SQLite ? ?
? ? [X] DEV_URANDOM Use /dev/urandom ? ?
? ? [ ] ALWAYSTRUE Enable the alwaystrue password verifier ? ?
? ? [ ] KEEP_DB_OPEN Keep handle to Berkeley DB open ? ?
? ? [X] AUTHDAEMOND Enable use of authdaemon ? ?
? ? [X] LOGIN Enable LOGIN authentication ? ?
? ? [X] PLAIN Enable PLAIN authentication ? ?
? ? [X] CRAM Enable CRAM-MD5 authentication ? ?
? ? [X] DIGEST Enable DIGEST-MD5 authentication ? ?
? ? [X] OTP Enable OTP authentication ? ?
? ? [X] NTLM Enable NTLM authentication ? ?
Postfix
? Options for postfix 2.8.* ?
? ?????????????????????????????????????????????????????????????????? ?
? ?[X] PCRE Perl Compatible Regular Expressions ? ?
? ?[X] SASL2 Cyrus SASLv2 (Simple Auth. and Sec. Layer) ? ?
? ?[ ] DOVECOT Dovecot 1.x SASL authentication method ? ?
? ?[X] DOVECOT2 Dovecot 2.x SASL authentication method ? ?
? ?[ ] SASLKRB5 If your SASL req. Kerberos5 select this option ? ?
? ?[ ] SASLKMIT If your SASL req. MIT Kerberos5 select this optio? ?
? ?nX] TLS Enable SSL and TLS support ? ?
? ?[ ] BDB Berkeley DB (choose version with WITH_BDB_VER) ? ?
? ?[ ] MYSQL MySQL maps (choose version with WITH_MYSQL_VER) ? ?
? ?[ ] PGSQL PostgreSQL maps (pick ver. with DEFAULT_PGSQL_VER? ?
? ?) ] SQLITE SQLite maps ? ?
? ?[ ] OPENLDAP OpenLDAP maps (choose ver. with WITH_OPENLDAP_VER? ?
? ?)X] LDAP_SASL Enable OpenLDAP client-to-server auth via SASL ? ?
? ?[ ] CDB CDB maps lookups ? ?
? ?[ ] NIS NIS maps lookups ? ?
| ?[ ] VDA VDA (Virtual Delivery Agent 32Bit) ? ?
? ?[ ] TEST SMTP/LMTP test server and generator ? ?
? ?[ ] SPF SPF support (via libspf2 1.2.x) ? ?
? ?[ ] INST_BASE Install into /usr and /etc/postfix ? ?
Dovecot
? Options for dovecot 2.0.* ? ? ?????????????????????????????????????????????????????????????????? ? ? ? [X] KQUEUE kqueue(2) support ? ? ? ? [X] SSL SSL support ? ? ? ? [ ] GSSAPI GSSAPI support ? ? ? ? [ ] VPOPMAIL VPopMail support ? ? ? ? [ ] BDB BerkleyDB support ? ? ? ? [ ] LDAP OpenLDAP support ? ? ? ? [ ] PGSQL PostgreSQL support ? ? ? ? [x] MYSQL MySQL support ? ? ? ? [ ] SQLITE SQLite support ? ?
Mailman test config
- Verzeichniss
/usr/local/mailman- Password einstellen
./bin/mmsitepass PASSWORD - Configuration
./Mailman/mm_cfg.py- softlink
/etc/mailman/mm_cfg.py
- softlink
- Password einstellen
#DEFAULT_URL_HOST = '141.56.50.8'
DEFAULT_EMAIL_HOST = '141.56.50.8'
SMTPHOST = '141.56.50.8'
MTA = 'postfix'
#POSTFIX_STYLE_VIRTUAL_DOMAINS= ['141.56.50.8']
- wenn auf srs21 ändern
DEFAULT_URL_HOST = '141.56.50.21'
DEFAULT_EMAIL_HOST = '141.56.50.21'
SMTPHOST = 'localhost'
MTA = 'postfix'
POSTFIX_STYLE_VIRTUAL_DOMAINS= ['srs21.stura.htw-dresden.de']
- weiter config Datein
- Mailmans Verhalten und einstellungen
/etc/mailman/sitelist.cfg
- Mailmans Verhalten und einstellungen
- Get Postfix-To-Mailman script
# cd /usr/local/mailman
# fetch http://www.gurulabs.com/downloads/postfix-to-mailman-2.1.py
# mv postfix-to-mailman-2.1.py postfix-to-mailman.py
# chmod 750 postfix-to-mailman.py
# chown mailman:mailman postfix-to-mailman.py
- Edit /usr/local/mailman/postfix-to-mailman.py file:
#! /usr/local/bin/python
# Configuration variables – Change these for your site if necessary.
MailmanHome = “/usr/local/mailman“; # Mailman home directory.
MailmanOwner = “postmaster@domain.tld“; # Postmaster and abuse mail recipient.
postfix/main.cf
- Edit /usr/local/etc/postfix/main.cf file:
...
relay_domains = lists.domain.tld
...
# TRANSPORT MAP
#
# See the discussion in the ADDRESS_REWRITING_README document.
transport_maps = hash:/usr/local/etc/postfix/transport
vacation_destination_recipient_limit = 1
mailman_destination_recipient_limit = 1
...
alias_maps =
...
recipient_delimiter = +
...
Transportlist
Add transport for list to /usr/local/etc/postfix/transport file:
# echo 'lists.domain.tld mailman:' >> /usr/local/etc/postfix/transport
postfix/master.cf
- Edit /usr/local/etc/postfix/master.cf file:
mailman unix - n n - - pipe
flags=FR user=mailman:mailman argv=/usr/local/mailman/postfix-to-mailman.py
${nexthop} ${user}
genau hinsehen!!!
Create Postfix transport database
# postmap /usr/local/etc/postfix/transport
- Reload Postfix:
# postfix reload
- Set site password:
#cd /usr/local/mailman
#bin/mmsitepass
New site password: mailman_password
Again to confirm password: mailman_password
- Create Mailman list:
#bin/newlist
Enter the name of the list: mailman
Enter the email of the person running the list: you@domain.tld
Initial mailman password: list_password
You’ll then see instructions to add aliases for the mailing list. We need not worry about that because everything is virtual. So, proceeding… Hit enter to notify mailman owner… ENTER
/usr/local/etc/apache22/extra/httpd-vhosts.conf
NameVirtualHost *:80
#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
# The first VirtualHost section is used for all requests that do not
# match a ServerName or ServerAlias in any block.
#
# Default domain on this server
#
<Virtualhost *:80>
ServerAdmin webmaster@domain.tld
DocumentRoot "/usr/local/www/apache22/data"
ServerName www.domain.tld
ServerAlias domain.tld www.domain.tld
<Directory "/usr/local/www/apache22/data">
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/httpd-error.log
CustomLog /var/log/httpd-access.log combined
</Virtualhost>
# Mailman mailing list domain.
#
<Virtualhost *:80>
ServerAdmin webmaster@domain.tld
DocumentRoot "/usr/local/mailman"
ServerName lists.domain.tld
ServerAlias lists.domain.tld
ScriptAlias /cgi-bin/ "/usr/local/mailman/cgi-bin/"
ScriptAlias /mailman/ "/usr/local/mailman/cgi-bin/"
Alias /pipermail "/usr/local/mailman/archives/public"
Alias /icons "/usr/local/mailman/icons"
RedirectMatch ^/$ mailman/listinfo
<Directory "/usr/local/mailman">
AllowOverride All
Options FollowSymlinks
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/httpd-error.log
CustomLog /var/log/httpd-access.log combined
</Virtualhost>
NOTE: Notice the addition of the default HTTP directory. The reason for this is due to the fact that once virtual hosting is enabled, the default directory used by Apache is the first VirtualHost listed in the httpd-vhosts.conf file. So, make sure that what ever site you plan on using as the default site for that machine comes first in the list of virtual hosts in the httpd-vhosts.conf file. After adding the above VirtualHost directive, you can delete or comment out the remaining lines in the httpd-vhosts.conf file being as they’re just the default examples and pretty much useless.
/usr/local/etc/apache22/httpd.conf to include vhosts
…
# Virtual hosts
Include etc/apache22/extra/httpd-vhosts.conf
…
Reload Apache configuration
# apachectl graceful
Add list to Mailman configuration file
# echo "add_virtualhost('lists.domain.tld','lists.domain.tld')" >> /usr/local/mailman/Mailman/mm_cfg.py
bei geänderter SiteList
# echo "MAILMAN_SITE_LIST = '<anderer name für die liste>'" >> /usr/local/mailman/Mailman/mm_cfg.py
Plone startup script
- aktuell nur für altes Plone
Problem mit su Meldung: su:Sorry
Lösung noch keine gefunden
#!/bin/sh
# PROVIDE: plone
# REQUIRE: DAEMON
# KEYWORD: shutdown
#
# Add the following lines to /etc/rc.conf to enable plone
#
#
# plone_enable (bool): Set to "NO" by default,
# Set it to "YES" to enable
# plone
#
# plone_buildout (str): The path to plone buildout env
# file (defaults to
# /usr/local/Plone)
#
# plone_user (str): The username of the user the daemon will
# run as (defaults to www)
#
. /etc/rc.subr
name="plone"
rcvar=`set_rcvar`
load_rc_config $name
eval "${rcvar}=\${${rcvar}:-'NO'}"
plone_buildout=${plone_buildout:-"/usr/local/Plone/zinstance"}
plone_user=${plone_user:-"admin fragen"}
#command="${plone_buildout}/${name}"
#command_interpreter="/bin/sh"
start_cmd="${name}_start"
stop_cmd="${name}_stop"
plone_start()
{
plone_pid=`pgrep -f "/usr/local/bin/python2.4 ${plone_buildout}"`
if [ ${plone_pid} ]
then
echo "${name} already running (pid: ${plone_pid})"
else
echo "Starting ${name}."
su ${plone_user} -c "${plone_buildout}/bin/instance start"
fi
# ensure the server is started
plone_pid=`pgrep -f "/usr/local/bin/python2.4 ${plone_buildout}"`
if [ ${plone_pid} ]
then
echo "${name} started."
else
echo "${name} could not be started, please check the log files (${plone_buildout}/var/log/)"
fi
}
plone_stop()
{
plone_pid=`pgrep -f "/usr/local/bin/python2.4 ${plone_buildout}"`
if [ ${plone_pid} ]
then
echo "Stopping ${name}."
su ${plone_user} -c "${plone_buildout}/bin/instance stop"
else
echo "${name} not running?"
fi
# ensure the server is stopped
plone_pid=`pgrep -f "/usr/local/bin/python2.4 ${plone_buildout}"`
if [ ${plone_pid} ]
then
echo "${name} could not be stopped"
fi
}
load_rc_config $name
run_rc_command "$1"
Webmail
Webmail bietet keine (verlässliche) Verschlüsselung. Selbst wenn die Software es kann, so werden die Schlüssel bei einem Einbruch kompromittiert und können genutzt werden, um die daneben liegenden Emails zu entschlüsseln. (ergo sinnfrei) Der StuRa sollte allerdings die Möglichkeit zur verschlüsselten Kontaktaufnahme bieten (z.B. für das Referat Soziales ... denn wer will sich schon gerne bloßstellen?) JohannesSchneemann 13:43, 15. Sep 2011 (CEST)
Samba Server
Important Files
- /usr/local/sbin/smbd
- /usr/local/sbin/nmbd
- /usr/local/etc/smb.conf - smbd configuration file
- /etc/inetd.conf - Internet daemon (starts smbd and nmbd)
- /usr/local/private/smbpasswd - encrypted samba passwd file
Steps
- Make sure smbd and nmbd are installed (in /usr/local/sbin/).
- Add (or uncomment) the following lines from /etc/inetd.conf:
netbios-ssn stream tcp nowait root /usr/local/sbin/smbd smbd
netbios-ns dgram udp wait root /usr/local/sbin/nmbd nmbd
- Setup /usr/local/etc/smb.conf. Here's tyagi's file:
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DIRT
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to 152.2.137, selected
# machines (my office PC and my home PC), and the "loopback" interface.
# For more examples of the syntax see the smb.conf man page
allow hosts = 152.2.137. 152.2.142.123 152.2.129.140 localhost
# This enables or disables logging of connections to a status file that
# smbstatus can read
status = yes
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
encrypt passwords = yes
# this tells Samba to use a one log file
log file = /var/log/smb.log
# Put a capping on the size of the log files (in Kb).
max log size = 100
# To make this one look like the smb.conf on topsecret
[homes]
guest ok = no
browesable = yes
read only = no
create mode = 0750
- Setup users. (note: You can only add users who exist in /etc/passwd)
# cd /usr/local/private
# cp smbpasswd smbpasswd.old
# addtosmbpass [username] < smbpasswd.old > smbpasswd.new
# mv smbpasswd.new smbpasswd
- Change existing users' passwords.
# smbpasswd [username]
- Reboot the machine to start the server.
Notes
- There's some way to be able to access directories other than your home directory, but I haven't found it yet. The easiest way to set this up is to create symbolic links from your home directory to your favorite directories (like /usr/dirt/src, /playpen, ...).
- To access the server from a department Windows NT box, you'll have to use the server's IP address rather than its hostname (security reasons). For example, I'd access my home directory on tyagi by mapping a network drive to \\152.2.137.54\clark.
Link
http://us1.samba.org/samba/samba.html
Skripte
SourceForge: Projekt BSD Administration Scripts
Uhrzeit
Salve Beastie,
lebst du in der UTC-Zeitzone?
Die Weiber wohne doch aber alle in der CET, oder?
Kollegiale
--PaulRiegel 14:14, 18. Sep 2012 (UTC)
Web server management software
Salvete Gemeinde,
insbesondere lieber Bereich Administration Rechentechnik,
Gibt es eine Bewertung zur Verwendung von Tool wie Webmin und dergleichen? Ferner sei das hiermit ein Gedankenanstoß. :-)
--PaulRiegel (Diskussion) 02:31, 1. Aug. 2013 (CEST)