Changeset 0931098 for server


Ignore:
Timestamp:
06/13/2004 05:38:30 AM (20 years ago)
Author:
DJ Lucas <dj@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.0, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
60384c68
Parents:
08254fc
Message:

Part VI xml update + bz815

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@2307 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:
server
Files:
17 edited

Legend:

Unmodified
Added
Removed

  • server/mail/courier.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY courier-download-http "http://prdownloads.sourceforge.net/courier/courier-&courier-version;.tar.bz2">
     8<!ENTITY courier-download-ftp " ">
     9<!ENTITY courier-size "4.2 MB">
     10<!ENTITY courier-buildsize "114 MB">
     11<!ENTITY courier-time "3.00 SBU">
     12
     13]>
     14
    115<sect1 id="courier" xreflabel="Courier-&courier-version;">
    216<?dbhtml filename="courier.html"?>
    317<title>Courier-&courier-version;</title>
    418
    5 &courier-intro;
    6 &courier-inst;
    7 &courier-exp;
    8 &courier-config;
    9 &courier-desc;
    10 
     19<sect2>
     20<title>Introduction to <application>Courier</application></title>
     21
     22<para>The <application>Courier</application> package contains a Mail Transport
     23Agent (<acronym>MTA</acronym>). This is useful for sending email to other users
     24of your host machine. It can also be configured to be a central mail server for
     25your domain or a mail relay agent. The <application>Courier</application>
     26packages also includes a web-based email interface, <acronym>IMAP</acronym>,
     27<acronym>IMAP</acronym>-<acronym>SSL</acronym>, <acronym>POP</acronym>3, and
     28<acronym>POP</acronym>3-<acronym>SSL</acronym>.</para>
     29
     30<!--
     31The configuration
     32listed below will allow users with <acronym>PAM</acronym> and virtual-users in
     33a <application>My<acronym>SQL</acronym></application> Database access to email.</para>
     34-->
     35
     36<sect3><title>Package information</title>
     37<itemizedlist spacing='compact'>
     38<listitem><para>Download (HTTP): <ulink url="&courier-download-http;"/></para></listitem>
     39<listitem><para>Download (FTP): <ulink url="&courier-download-ftp;"/></para></listitem>
     40<listitem><para>Download size: &courier-size;</para></listitem>
     41<listitem><para>Estimated Disk space required: &courier-buildsize;</para></listitem>
     42<listitem><para>Estimated build time: &courier-time;</para></listitem></itemizedlist>
     43</sect3>
     44
     45<sect3><title><application>Courier</application> dependencies</title>
     46<sect4><title>Required</title>
     47<para><xref linkend="gdbm"/><!-- or <xref linkend="db"/> --></para></sect4>
     48<sect4><title>Optional</title>
     49<para>
     50<xref linkend="mysql"/> or <xref linkend="postgresql"/>,
     51<xref linkend="Linux_PAM"/>,
     52<xref linkend="openssl"/>,
     53<xref linkend="fam"/>,
     54<xref linkend="openldap"/>,
     55<xref linkend="apache"/>,
     56<xref linkend="ispell"/> or <xref linkend="aspell"/>,
     57<xref linkend="gnupg"/>,
     58<ulink url="http://expect.nist.gov/">Expect</ulink>,
     59<ulink url="http://netpbm.sourceforge.net/">Netpbm</ulink> and
     60<ulink url="http://alpha.greenie.net/mgetty/">Mgetty+Sendfax</ulink>
     61</para></sect4>
     62</sect3>
     63
     64</sect2>
     65
     66<sect2>
     67<title>Installation of <application>Courier</application></title>
     68
     69<para> Before you compile the program, you need to create users and groups that
     70will be expected to be in place when the install script executes. Add the users
     71and groups with the following commands:</para>
     72
     73<screen><userinput><command>groupadd courier &amp;&amp;
     74useradd -c 'Courier Mail Server' -d /dev/null -g courier -s /bin/false courier</command></userinput></screen>
     75
     76<para> You also need to create a bin user. If you already have a user
     77named bin, this step can be safely ignored.</para>
     78
     79<screen><userinput><command>useradd -c 'bin' -d /dev/null -g bin -u 1 bin</command></userinput></screen>
     80
     81<para>This creates a
     82<filename class="directory">/var/run/courier</filename> directory where
     83all the <application>Courier</application> <acronym>MTA</acronym> pid
     84files will exist. This will allow <filename>courierfilter.pid</filename>
     85to be created. Without the <command>courierfilter</command> running, the
     86<application>Courier</application> MTA will not work. Issue the
     87following commands to create
     88<filename class="directory">/var/run/courier</filename>:</para>
     89
     90<screen><userinput><command>mkdir /var/run/courier &amp;&amp;
     91chown courier:courier /var/run/courier</command></userinput></screen>
     92
     93<para>Install <application>courier</application> by running the following commands:</para>
     94
     95<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/lib/courier \
     96    --datadir=/usr/share/courier --sysconfdir=/etc/courier \
     97    --localstatedir=/var/lib/courier --with-piddir=/var/run/courier \
     98    --disable-root-check --with-mailuser=courier --with-mailgroup=courier \
     99    --with-paranoid-smtpext --disable-autorenamesent \
     100    --enable-workarounds-for-imap-client-bugs --with-db=gdbm &amp;&amp;
     101make &amp;&amp;
     102make install &amp;&amp;
     103make install-configure</command></userinput></screen>
     104
     105</sect2>
     106
     107<sect2>
     108<title>Command explanations</title>
     109
     110<para><parameter>--libexecdir=/usr/lib/courier</parameter>: Specifies
     111the directory which contains programs and libraries that cannot be
     112directly executed from the command-line.</para>
     113
     114<para><parameter>--datadir=/usr/share/courier</parameter>: Specifies the
     115directory where miscellaneous shell scripts,
     116<application>Perl</application> scripts, and data files will be
     117installed.</para>
     118
     119<para><parameter>--localstatedir=/var/spool/courier</parameter>:
     120Specifies the directory that will hold the mail queue, and other
     121temporary data.</para>
     122
     123<para><parameter>--with-piddir=/var/run/courier</parameter>: Specifies
     124the directory where <application>Courier</application>'s
     125<filename>PID</filename> files are stored when
     126<application>Courier</application> is active.</para>
     127
     128<para><option>--disable-root-check</option>: Allows
     129<application>Courier</application> to be built as the root user.</para>
     130
     131<para><parameter>--with-mailuser=courier</parameter>: All except two
     132<application>Courier</application> daemons run as a non-privileged user.
     133This option specifies the userid that <application>Courier</application>
     134will install and run as.</para>
     135
     136<para><parameter>--with-mailgroup=courier</parameter>: like
     137<option>--with-mailuser</option>, but specifies the group
     138<acronym>ID</acronym>.</para>
     139
     140<para><option>--with-paranoid-smtpext</option>: Be paranoid when
     141negotiating Courier-specific <acronym>ESMTP</acronym> extensions with
     142remote servers. The <application>Courier</application> mail server
     143defines and implements certain experimental <acronym>ESMTP</acronym>
     144extensions: XVERP and XEXDATA. Problems may result in the event that
     145someone else uses the same name to implement some other extension. If
     146this option is specified, <application>Courier's</application>
     147<acronym>ESMTP</acronym> server will also advertise a dummy
     148<acronym>ESMTP</acronym> capability called XCOURIEREXTENSIONS, and will
     149not recognize any Courier-specific extensions unless the remote mail
     150server also advertises this dummy <acronym>ESMTP</acronym>
     151capability.</para>
     152
     153<para><option>--disable-autorenamesent</option>: Do not rename the Sent
     154folder every month. This option can also be controlled by the
     155<envar>SQWEBMAIL_AUTORENAMESENT</envar> environment variable.</para>
     156
     157<para><option>--enable-workarounds-for-imap-client-bugs</option>: There
     158are several confirmed bugs in some <acronym>IMAP</acronym> clients that
     159do not properly implement the <acronym>IMAP</acronym>4rev1 protocol.
     160This option enables some workarounds for those buggy
     161<acronym>IMAP</acronym> clients. NOTE: <command>make check</command>
     162will fail if this option is used. You should first configure without
     163this option, and if all post-configuration tests succeed, rerun
     164configure with this option and recompile.</para>
     165
     166<para><parameter>--with-db=gdbm</parameter>:
     167<application>Courier</application> requires either the
     168<application><acronym>GDBM</acronym></application> or the
     169<application>DB</application> database library.
     170<application><acronym>GDBM</acronym></application> is used if both are
     171present. This option forces the selection of the GDBM database
     172library since support for DB is broken at the current state.</para>
     173
     174<!-- # Note - Courier will build fine with <xref linkend="db"/>, but all
     175the database files will not be created correctly -->
     176
     177<para><parameter>--with-ispell=/usr/bin/aspell</parameter>:
     178<application>Courier</application>'s webmail server can use spell
     179checking, if <command>configure</command> finds
     180<application>ispell</application> or if you explicitly set the location
     181of <application>aspell</application>.</para>
     182
     183<para><parameter>--enable-mimetypes=<replaceable>[location of mime.types file]</replaceable></parameter>:
     184Use this switch if you receive an error saying that the
     185<filename>mime.types</filename> file could not be found.</para>
     186   
     187</sect2>
     188
     189<sect2>
     190<title>Configuring <application>Courier</application></title>
     191
     192<sect3><title>Config files</title>
     193<para><filename>/etc/courier/*</filename></para>
     194</sect3>
     195
     196<sect3><title>Configuration Information</title>
     197
     198<para>Make the following changes in
     199<filename>/etc/courier/authmysqlrc</filename> file if you are utilizing
     200<application>My<acronym>SQL</acronym></application>:</para>
     201
     202<screen><userinput>MYSQL_SERVER            localhost
     203MYSQL_USERNAME          courier
     204MYSQL_PASSWORD          <replaceable>[your choice]</replaceable>
     205MYSQL_SOCKET            /tmp/mysql.sock
     206MYSQL_PORT              3306
     207MYSQL_DATABASE          courier_mail
     208MYSQL_USER_TABLE        users
     209MYSQL_CLEAR_PWFIELD     clear
     210DEFAULT DOMAIN          <replaceable>[your domain]</replaceable>
     211MYSQL_QUOTA_FIELD       quota</userinput></screen>
     212
     213<para>If you utilize <application>PAM</application>:</para>
     214
     215<screen><userinput><command>cat &gt; /etc/pam.d/esmtp &lt;&lt; "EOF"</command>
     216# Begin /etc/pam.d/esmtp
     217
     218auth            required                pam_unix.so try_first_pass
     219account         required                pam_unix.so
     220session         required                pam_unix.so
     221
     222# End /etc/pam.d/esmtp
     223<command>EOF
     224cat &gt; /etc/pam.d/pop3 &lt;&lt; "EOF"</command>
     225# Begin /etc/pam.d/pop3
     226
     227auth            required                pam_unix.so try_first_pass
     228account         required                pam_unix.so
     229session         required                pam_unix.so
     230
     231# End /etc/pam.d/pop3
     232<command>EOF
     233cat &gt; /etc/pam.d/imap &lt;&lt; "EOF"</command>
     234# Begin /etc/pam.d/imap
     235
     236auth            required                pam_unix.so try_first_pass
     237account         required                pam_unix.so
     238session         required                pam_unix.so
     239
     240# End /etc/pam.d/imap
     241<command>EOF
     242cat &gt; /etc/pam.d/webmail &lt;&lt; "EOF"</command>
     243# Begin /etc/pam.d/webmail
     244
     245auth            required                pam_unix.so try_first_pass
     246account         required                pam_unix.so
     247session         required                pam_unix.so
     248
     249# End /etc/pam.d/webmail
     250<command>EOF</command></userinput></screen>
     251
     252<para>Connect to the <application>My<acronym>SQL</acronym></application>
     253database:</para>
     254
     255<screen><userinput><command>mysql -p</command></userinput></screen>
     256
     257<para>This command will create the database for authentication:</para>
     258
     259<screen><userinput><command>CREATE DATABASE courier_mail;
     260USE courier_mail</command></userinput></screen>
     261
     262<para>This command will setup the table users for the courier_mail
     263database:</para>
     264
     265<screen><userinput><command>CREATE TABLE users (
     266id                    char(128) DEFAULT '' NOT NULL,
     267crypt                 char(128) DEFAULT '' NOT NULL,
     268clear                 char(128) DEFAULT '' NOT NULL,
     269name                  char(128) DEFAULT '' NOT NULL,
     270uid                   int(10) unsigned DEFAULT '65534' NOT NULL,
     271gid                   int(10) unsigned DEFAULT '65534' NOT NULL,
     272home                  char(255) DEFAULT '' NOT NULL,
     273quota                 char(255) DEFAULT '' NOT NULL,
     274KEY id (id(128))
     275);</command></userinput></screen>
     276
     277<para>This will add the courier user that we specified earlier in the
     278<filename>/etc/courier/authmysqlrc</filename> file:</para>
     279
     280<screen><userinput><command>GRANT ALL PRIVILEGES ON *.* TO courier@localhost IDENTIFIED BY '<replaceable>[password]</replaceable>' WITH GRANT OPTION;
     281QUIT</command></userinput></screen>
     282
     283<para><emphasis>General Settings for Mail</emphasis></para>
     284
     285<para>You will need to create the following files with the contents
     286specified.</para>
     287
     288<para><filename>/etc/courier/defaultdomain</filename></para>
     289
     290<screen><userinput><command>cat &gt; /etc/courier/defaultdomain &lt;&lt; "EOF"</command>
     291<replaceable>[yourdomain]</replaceable>
     292<command>EOF</command></userinput></screen>
     293
     294<para><filename>/etc/courier/me</filename></para>
     295
     296<screen><userinput><command>cat &gt; /etc/courier/me &lt;&lt; "EOF"</command>
     297<replaceable>[servername.yourdomain]</replaceable>
     298<command>EOF</command></userinput></screen>
     299
     300<para><filename>/etc/courier/locals</filename></para>
     301
     302<screen><userinput><command>cat &gt; /etc/courier/locals &lt;&lt; "EOF"</command>
     303localhost
     304<replaceable>[yourdomain]</replaceable>
     305<command>EOF</command></userinput></screen>
     306
     307<para><filename>/etc/courier/esmtpacceptmailfor.dir/system</filename></para>
     308
     309<screen><userinput><command>cat &gt;/etc/courier/esmtpacceptmailfor.dir/system &lt;&lt; "EOF"</command>
     310localhost
     311<replaceable>[yourdomain]</replaceable>
     312<command>EOF</command></userinput></screen>
     313
     314<para>You will also need to edit the aliases file and change the
     315following entry.</para>
     316
     317<para><filename>/etc/courier/aliases/system</filename></para>
     318
     319<screen><userinput>postmaster: <replaceable>[your administrator email]</replaceable></userinput></screen>
     320
     321<para>If you want to deny access from some hosts from sending mail, you
     322will need to edit the
     323<filename>/etc/courier/smtpaccess/default</filename> file.</para>
     324
     325<para>After the above steps are completed you will need to run the
     326following commands:</para>
     327
     328<screen><userinput><command>makesmtpaccess &amp;&amp;
     329makehosteddomains &amp;&amp;
     330makealiases</command></userinput></screen>
     331
     332<para><emphasis><acronym>SMTP</acronym>/<acronym>SMTMP</acronym>-<acronym>SSL
     333</acronym> Configuration</emphasis></para>
     334
     335<para>This section will enable the <acronym>SMTP</acronym> Server from Courier</para>
     336
     337<para><filename>/etc/courier/esmtpd</filename></para>
     338
     339<screen><userinput>ESMTPDSTART=YES</userinput></screen>
     340
     341<para><filename>/etc/courier/esmtpd-ssl</filename></para>
     342
     343<screen><userinput>ESMTPDSSLSTART=YES</userinput></screen>
     344
     345<para><emphasis><acronym>POP</acronym>3/<acronym>POP</acronym>3-<acronym>SSL
     346</acronym> Configuration</emphasis></para>
     347
     348<para>This section will enable the <acronym>POP</acronym>3 Server from
     349Courier</para>
     350
     351
     352<para><filename>/etc/courier/pop3d</filename></para>
     353
     354<screen><userinput>POP3DSTART=YES</userinput></screen>
     355
     356<para><filename>/etc/courier/pop3d-ssl</filename></para>
     357
     358<screen><userinput>POP3DSLLSTART=YES</userinput></screen>
     359
     360<para><emphasis><acronym>IMAP</acronym>/<acronym>IMAP</acronym>-<acronym>SSL
     361</acronym> Configuration</emphasis></para>
     362
     363<para>This section will enable the <acronym>IMAP</acronym> Server from
     364Courier</para>
     365
     366<para><filename>/etc/courier/imapd</filename></para>
     367
     368
     369<screen><userinput>IMAPDSTART=YES</userinput></screen>
     370
     371<para><filename>/etc/courierd/imapd-ssl</filename></para>
     372
     373<screen><userinput>IMAPDSSLSTART=YES</userinput></screen>
     374
     375<para><emphasis>Creating Mail directories for System Users</emphasis></para>
     376
     377
     378<para>This section will explain how to create MailDirs for
     379your system users.</para>
     380
     381<screen><userinput><command>cd /home/<replaceable>[username]</replaceable> &amp;&amp;
     382maildirmake Maildir &amp;&amp;
     383chown <replaceable>[username]</replaceable>.<replaceable>[username]</replaceable> Maildir -R</command></userinput></screen>
     384
     385<para><emphasis>Setup for Virtual users</emphasis></para>
     386
     387<para>This section will explain how to setup Maildir for your virtual
     388users.</para>
     389
     390<screen><userinput><command>groupadd -g 9000 vmailman &amp;&amp;
     391useradd -c 'Virtual Mailman' -g vmailman -m -k /dev/null -u 9000 vmailman</command></userinput></screen>
     392
     393<para>Now to setup the Maildir for these virtual users.</para>
     394
     395<screen><userinput><command>cd /home/vmailman &amp;&amp;
     396mkdir <replaceable>[virtual_user]</replaceable> &amp;&amp;
     397cd <replaceable>[virtual_user]</replaceable> &amp;&amp;
     398maildirmake Maildir &amp;&amp;
     399chown vmailman.vmailman Maildir -R</command></userinput></screen>
     400
     401<para>Connect to the <application>My<acronym>SQL</acronym></application>
     402database.</para>
     403
     404<screen><userinput><command>mysql -u courier -p</command></userinput></screen>
     405   
     406<para>To add the virtual user you need to enter at
     407least one version of the password either clear text or encrypted.</para>
     408
     409<screen><userinput><command>USE courier_mail
     410INSERT INTO users VALUES (
     411'<replaceable>[virtual_users]</replaceable>@<replaceable>[domain.com]</replaceable>,
     412'<replaceable>[encrypted password or blank]</replaceable>',
     413'<replaceable>[clear text password or blank]</replaceable>',
     414'<replaceable>[User's Name]</replaceable>',
     4159000,
     4169000,
     417'<replaceable>[location of Maildir]</replaceable>',
     418'<replaceable>[Quota in Bytes']</replaceable>
     419);
     420QUIT</command></userinput></screen>
     421
     422<para>For example:</para>
     423
     424<screen><userinput><command>INSERT INTO users VALUES (
     425'blfsuser@linuxfromscratch.org',
     426'',
     427'password',
     428'BLFS User',
     4299000,
     4309000,
     431'/home/vmailman/blfsuser',
     432''
     433);</command></userinput></screen>
     434
     435<para><emphasis>Setup for Web-based Email</emphasis></para>
     436
     437<para>This section will explain how to setup Courier Web-based email
     438system.</para>
     439
     440<para>You will need to copy the <filename>webmail</filename> file from
     441<filename>/usr/lib/courier/courier/webmail</filename> to your <filename>cgi-bin
     442</filename> directory of your <application>Apache</application>
     443server.</para>
     444
     445<screen><userinput><command>cp -a /usr/lib/courier/courier/webmail/webmail /var/www/cgi-bin</command></userinput></screen>
     446
     447<para>You will then need to copy the images to a directory under your
     448<filename>htdocs</filename> directory of your
     449<application>Apache</application> server. The directory needs to be named
     450<filename>webmail</filename> or you need to specify it during the configure
     451phase with <parameter>--enable-imageurl=<replaceable>[URL]</replaceable></parameter>.</para>
     452
     453<screen><userinput><command>cp -a /usr/share/courier/sqwebmail/images /var/www/htdocs/webmail</command></userinput></screen>
     454<para><emphasis>Setup for Web-based Email</emphasis></para>
     455
     456<para>This section will explain how to setup Courier Web-based administration
     457system.</para>
     458
     459<para>You will need to copy the <filename>webadmin</filename> file from
     460<filename class="directory">/usr/lib/courier/courier/webmail</filename>
     461to your <filename class="directory">cgi-bin</filename> directory of your
     462<application>Apache</application> server.</para>
     463
     464<screen><userinput><command>cp -a /usr/lib/courier/courier/webmail/webadmin /var/www/cgi-bin</command></userinput></screen>
     465
     466<para><filename>/etc/courier/webadmin/password</filename></para>
     467
     468<screen><userinput><command>cat &gt; /etc/courier/webadmin/password &lt;&lt; "EOF"</command>
     469<replaceable>[password]</replaceable>
     470<command>EOF</command></userinput></screen>
     471
     472<para>If you are not using <acronym>SSL</acronym> on your <application>Apache
     473</application> server, you will need to add
     474<filename>/etc/courier/webadmin/unsecureok</filename>, so you will be able
     475to use your web based administration tool.</para>
     476
     477<screen><userinput><command>touch /etc/courier/webadmin/unsecureok</command></userinput></screen>
     478</sect3>
     479
     480<sect3><title>Courier init.d script</title>
     481
     482<para>The startup script from the <application>Courier</application> package is
     483the easiest to use. It will automatically create missing data files, and
     484<acronym>SSL</acronym> certificates if they are missing. To install the
     485init.d file for <application>Courier</application>, you will need to use the
     486following commands:</para>
     487
     488<screen><userinput><command>cp /usr/src/courier-&courier-version;/courier.sysvinit /etc/rc.d/init.d/courier &amp;&amp;
     489chmod 754 /etc/rc.d/init.d/courier</command></userinput></screen>
     490
     491<para>Create the symbolic links to this file in the relevant
     492<filename>rc.d</filename> directory with the following commands:</para>
     493
     494<screen><userinput><command>cd /etc/rc.d/init.d &amp;&amp;
     495ln -sf ../init.d/courier ../rc0.d/K25courier &amp;&amp;
     496ln -sf ../init.d/courier ../rc1.d/K25courier &amp;&amp;
     497ln -sf ../init.d/courier ../rc2.d/K25courier &amp;&amp;
     498ln -sf ../init.d/courier ../rc3.d/S35courier &amp;&amp;
     499ln -sf ../init.d/courier ../rc4.d/S35courier &amp;&amp;
     500ln -sf ../init.d/courier ../rc5.d/S35courier &amp;&amp;
     501ln -sf ../init.d/courier ../rc6.d/K25courier</command></userinput></screen>
     502
     503</sect3>
     504</sect2>
     505
     506<sect2>
     507<title>Contents</title>
     508
     509<para>The <application>Courier</application> package contains
     510<command>addcr</command>,
     511<command>authenumerate</command>,
     512<command>cancelmsg</command>,
     513<command>courier</command>,
     514<command>courier-config</command>,
     515<command>courieresmtpd</command>,
     516<command>courierfilter</command>,
     517<command>courierldapaliasd</command>,
     518<command>courierlogger</command>,
     519<command>couriermlm</command>,
     520<command>couriertcpd</command>,
     521<command>couriertls</command>,
     522<command>deliverquota</command>,
     523<command>dotforward</command>,
     524<command>esmtpd</command>,
     525<command>esmtpd-msa</command>,
     526<command>esmtpd-ssl</command>,
     527<command>filterctl</command>,
     528<command>imapd</command>,
     529<command>imapd</command>,
     530<command>imapd-ssl</command>,
     531<command>lockmail</command>,
     532<command>mailbot</command>,
     533<command>maildiracl</command>,
     534<command>maildirkw</command>,
     535<command>maildirmake</command>,
     536<command>maildrop</command>,
     537<command>makeacceptmailfor</command>,
     538<command>makealiases</command>,
     539<command>makedat</command>,
     540<command>makehosteddomains</command>,
     541<command>makemime</command>,
     542<command>makepercentrelay</command>,
     543<command>makesmtpaccess</command>,
     544<command>makesmtpaccess-msa</command>,
     545<command>makeuserdb</command>,
     546<command>makeuucpneighbors</command>,
     547<command>mimegpg</command>,
     548<command>mkesmtpdcert</command>,
     549<command>mkimapdcert</command>,
     550<command>mkpop3dcert</command>,
     551<command>pop3d</command>,
     552<command>pop3d-ssl</command>,
     553<command>preline</command>,
     554<command>pw2userdb</command>,
     555<command>reformail</command>,
     556<command>reformime</command>,
     557<command>rmail</command>,
     558<command>sendmail</command>,
     559<command>sharedindexinstall</command>,
     560<command>sharedindexsplit</command>,
     561<command>showconfig</command>,
     562<command>showmodules</command>,
     563<command>testmxlookup</command>,
     564<command>userdb</command>,
     565<command>userdbpw</command>,
     566<command>vchkpw2userdb</command> and
     567<command>webgpg</command>.</para>
     568
     569</sect2>
     570
     571<sect2><title>Description</title>
     572
     573<sect3><title>cancelmsg</title>
     574<para><command>cancelmsg</command> removes a message from the mail queue.</para></sect3>
     575
     576<sect3><title>courier</title>
     577<para><command>courier</command> is a modular multi-protocol E-mail
     578transport agent. The <command>courier</command> command is an
     579administrative command, and most of its options are only available to
     580the superuser.</para></sect3>
     581
     582<sect3><title>courierfilter</title>
     583<para><command>courierfilter</command> command installs or uninstalls
     584global mail filters. Global mail filters are used to selectively block
     585unwanted mail.</para></sect3>
     586
     587<sect3><title>couriermlm</title>
     588<para><command>couriermlm</command> is the Courier mailing list manager.</para></sect3>
     589
     590<sect3><title>filterctl</title>
     591<para><command>filterctl</command> command installs or uninstalls global
     592mail filters. Global mail filters are used to selectively block unwanted
     593mail.</para></sect3>
     594
     595<sect3><title>lockmail</title>
     596<para><command>lockmail</command> is a helper utility for working with mailbox files.</para></sect3>
     597
     598<sect3><title>mailbot</title>
     599<para><command>mailbot</command> reads an E-mail message on standard input and creates an E-mail message
     600replying to the original message's sender.</para></sect3>
     601
     602<sect3><title>maildirkw</title>
     603<para><command>maildirkw</command> modifies Courier-IMAP compatible maildir message keywords.</para></sect3>
     604
     605<sect3><title>maildrop</title>
     606<para><command>maildrop</command> is a replacement local mail delivery agent that includes a mail filtering
     607language.</para></sect3>
     608
     609<sect3><title>makeacceptmailfor</title>
     610<para><command>makeacceptmailfor</command> Build a list of domains to accept mail for from the
     611<filename>/etc/courier/esmtpacceptmailfor.dir</filename> directory.</para></sect3>
     612
     613<sect3><title>makealiases</title>
     614<para><command>makealiases</command> Build a list of aliases from the <filename>/etc/courier/aliases</filename>
     615or <filename>/etc/courier/aliasdir</filename> directories.</para></sect3>
     616
     617<sect3><title>makehosteddomains</title>
     618<para><command>makehostedomains</command> Build a database of hosted domains from <filename>hosteddomains</filename>.</para></sect3>
     619
     620<sect3><title>makepercentrelay</title>
     621<para><command>makepercentrelay</command> Build a list of %-relayed
     622domains from the <filename>percentrelay.dir</filename>
     623directory.</para></sect3>
     624
     625<sect3><title>makesmtpaccess</title>
     626<para><command>makesmtpaccess</command> Build ESMTP server access file
     627from the <filename>/etc/courier/smtpaccess</filename>
     628directory.</para></sect3>
     629
     630<sect3><title>makesmtpaccess-msa</title>
     631<para><command>makesmtpaccess-msa</command> Build ESMTP server access
     632file from the <filename>/etc/courier/smtpaccess</filename>
     633directory. This esmtp list is for the MSA protocol.</para></sect3>
     634
     635<sect3><title>makeuucpneighbors</title>
     636<para><command>makeuucpneighbors</command> Builds a list of
     637<acronym>UUCP</acronym> recipients using <filename>/etc/courier/uucpneighbors</filename>.</para></sect3>
     638
     639<sect3><title>reformail</title>
     640<para><command>reformail</command> program reads a message on standard input, reformats it in some way,
     641 and writes the message to standard output.</para></sect3>
     642
     643<sect3><title>reformime</title>
     644<para><command>reformime</command> is a utility for reformatting MIME messages.</para></sect3>
     645
     646<sect3><title>sendmail</title>
     647<para><command>sendmail</command> command reads an E-mail message and delivers the message to its recipients.
     648This sendmail command is part of the Courier mail server, although it attempts to emulate the behavior of the
     649original sendmail MTA.</para></sect3>
     650
     651<sect3><title>showconfig</title>
     652<para><command>showconfig</command> Shows the current Courier configuration.</para></sect3>
     653
     654<sect3><title>showmodules</title>
     655<para><command>showmodules</command> Shows the current Courier modules.</para></sect3>
     656
     657<sect3><title>testmxlookup</title>
     658<para><command>testmxlookup</command> lists the names and IP addresses of mail relays that receive mail for the
     659domain.  This is useful in diagnosing mail delivery problems.</para></sect3>
     660
     661</sect2>
    11662</sect1>
    12663

  • server/mail/exim.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY exim-download-http "http://gd.tuwien.ac.at/infosys/mail/exim/exim4/exim-&exim-version;.tar.bz2">
     8<!ENTITY exim-download-ftp "ftp://ftp.exim.org/pub/exim/exim4/exim-&exim-version;.tar.bz2">
     9<!ENTITY exim-size "1.2 MB">
     10<!ENTITY exim-buildsize "11 MB">
     11<!ENTITY exim-time "0.27 SBU">
     12
     13]>
     14
    115<sect1 id="exim" xreflabel="Exim-&exim-version;">
    216<?dbhtml filename="exim.html"?>
    317<title>Exim-&exim-version;</title>
    418
    5 &exim-intro;
    6 &exim-inst;
    7 &exim-exp;
    8 &exim-config;
    9 &exim-desc;
     19<sect2>
     20<title>Introduction to <application>Exim</application></title>
     21
     22<para>The <application>Exim</application> package contains a Mail Transport Agent written by the
     23University of Cambridge, released under the <acronym>GNU</acronym> Public License.</para>
     24
     25<sect3><title>Package information</title>
     26<itemizedlist spacing='compact'>
     27<listitem><para>Download (HTTP): <ulink url="&exim-download-http;"/></para></listitem>
     28<listitem><para>Download (FTP): <ulink url="&exim-download-ftp;"/></para></listitem>
     29<listitem><para>Download size: &exim-size;</para></listitem>
     30<listitem><para>Estimated Disk space required: &exim-buildsize;</para></listitem>
     31<listitem><para>Estimated build time: &exim-time;</para></listitem></itemizedlist>
     32</sect3>
     33
     34<sect3><title><application>Exim</application> dependencies</title>
     35<sect4><title>Required</title>
     36<para><xref linkend="db"/>
     37</para></sect4>
     38<sect4><title>Optional</title>
     39<para>
     40X (<xref linkend="xfree86"/> or <xref linkend="xorg"/>),
     41<xref linkend="openldap"/>,
     42<xref linkend="mysql"/>,
     43<xref linkend="tcpwrappers"/> and
     44<xref linkend="Linux_PAM"/>
     45</para></sect4>
     46</sect3>
     47
     48</sect2>
     49
     50<sect2>
     51<title>Installation of <application>Exim</application></title>
     52
     53<para>Before building <application>Exim</application>, we need to
     54create the group and user exim which will run the exim daemon:</para>
     55
     56<screen><userinput><command>groupadd exim &amp;&amp;
     57useradd -d /dev/null -g exim -s /bin/false exim</command></userinput></screen>
     58
     59<para>Install <application>Exim</application> with the following commands:</para>
     60
     61<screen><userinput><command>sed -e 's/^BIN_DIR.*$/BIN_DIRECTORY=\/usr\/sbin/' src/EDITME | \
     62  sed -e 's/^CONF.*$/CONFIGURE_FILE=\/etc\/exim.conf/' | \
     63  sed -e 's/^EXIM_USER.*$/EXIM_USER=exim/' | \
     64  sed -e 's/^EXIM_MONITOR/#EXIM_MONITOR/' > Local/Makefile &amp;&amp;
     65make &amp;&amp;
     66make install &amp;&amp;
     67cp doc/exim.8 /usr/share/man/man8 &amp;&amp;
     68ln -s exim-4.24-1 /usr/sbin/exim &amp;&amp;
     69ln -s exim /usr/sbin/sendmail</command></userinput></screen>
     70
     71</sect2>
     72
     73<sect2>
     74<title>Command explanations</title>
     75
     76<para><command>sed -e ... > Local/Makefile</command>: Many of
     77<application>Exim</application>'s
     78configuration options are compiled in. Here, we specify the minimum set
     79of options, <parameter>BIN_DIRECTORY</parameter>,
     80<parameter>CONFIGURE_FILE</parameter> and
     81<parameter>EXIM_USER</parameter>. We also defer
     82building the <application>Exim</application> monitor program, which
     83requires the <application>X</application> Window System
     84support, by commenting out the <parameter>EXIM_MONITOR</parameter> line
     85in the <filename>Makefile</filename>.</para>
     86
     87<para><command>ln -s exim /usr/sbin/sendmail</command>:
     88Create a link to <command>sendmail</command> for applications which need
     89it. <application>Exim</application> will
     90accept most <application>Sendmail</application> command-line options.</para>
     91
     92</sect2>
     93
     94<sect2>
     95<title>Configuring Exim</title>
     96
     97<sect3><title>Config files</title>
     98
     99<para><filename>/etc/exim.conf</filename>, <filename>/etc/aliases</filename></para>
     100
     101</sect3>
     102
     103<sect3><title>Configuration Information</title>
     104
     105<para>Create the Exim configuration files with the following commands:</para>
     106
     107<screen><userinput><command>cat &gt;&gt; /etc/aliases &lt;&lt; "EOF"</command>
     108postmaster: root
     109MAILER-DAEMON: root
     110<command>EOF
     111exim -v -bi &amp;&amp;
     112/usr/sbin/exim -bd -q1m</command></userinput></screen>
     113
     114<note><para>To protect an existing <filename>/etc/aliases</filename>
     115file, we will append these aliases to it if it exists. This file
     116should be checked and duplicate aliases removed, if
     117present.</para></note>
     118
     119<para>To automate the running of exim at startup,
     120install the <filename>/etc/rc.d/init.d/exim</filename>
     121init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     122
     123<screen><userinput><command>make install-exim</command></userinput></screen>
     124
     125</sect3>
     126
     127</sect2>
     128
     129<sect2>
     130<title>Contents</title>
     131
     132<para>The <application>Exim</application> package contains
     133<command>exim</command>,
     134<command>exim_dumpdb</command>,
     135<command>exim_fixdb</command>,
     136<command>exim_tidydb</command>,
     137<command>exinext</command>,
     138<command>exiwhat</command>,
     139<command>exim_dbmbuild</command>,
     140<command>exicyclog</command>,
     141<command>exigrep</command>,
     142<command>eximstats</command>,
     143<command>exiqsumm</command>,
     144<command>exiqgrep</command>,
     145<command>exim_lock</command> and
     146<command>exim_checkaccess</command>.
     147</para>
     148
     149</sect2>
     150
     151<sect2><title>Description</title>
     152<sect3><title>exim</title>
     153<para><command>exim</command> is the Mail Transport Agent daemon.</para></sect3>
     154
     155<sect3><title>exim_dumpdb</title>
     156<para><command>exim_dumpdb</command> writes the contents of exim databases to the
     157standard output.</para></sect3>
     158
     159<sect3><title>exim_fixdb</title>
     160<para><command>exim_fixdb</command> modifies data in exim databases.</para></sect3>
     161
     162<sect3><title>exim_tidydb</title>
     163<para><command>exim_tidydb</command> removes old records from exim databases.</para></sect3>
     164
     165<sect3><title>exinext</title>
     166<para><command>exinext</command> queries remote host retry times.</para></sect3>
     167
     168<sect3><title>exiwhat</title>
     169<para><command>exiwhat</command> queries running exim processes.</para></sect3>
     170
     171<sect3><title>exim_dbmbuild</title>
     172<para><command>exim_dbmbuild</command> creates and rebuilds exim
     173databases.</para></sect3>
     174
     175<sect3><title>exicyclog</title>
     176<para><command>exicyclog</command> cycles exim log files.</para></sect3>
     177
     178<sect3><title>exigrep</title>
     179<para><command>exigrep</command> searches exim log files.</para></sect3>
     180
     181<sect3><title>eximstats</title>
     182<para><command>eximstats</command> generates mail statistics from exim log
     183files.</para></sect3>
     184
     185<sect3><title>exiqsumm</title>
     186<para><command>exiqsumm</command> produces a summary of the messages on the mail
     187queue.</para></sect3>
     188
     189<sect3><title>exiqgrep</title>
     190<para><command>exiqgrep</command> is an utility for selective queue
     191listing.</para></sect3>
     192
     193<sect3><title>exim_lock</title>
     194<para><command>exim_lock</command> locks a mailbox file.</para></sect3>
     195
     196<sect3><title>exim_checkaccess</title>
     197<para><command>exim_checkaccess</command> states whether a given recipient address from a
     198given host is acceptable or not.</para></sect3>
     199
     200</sect2>
    10201
    11202</sect1>

  • server/mail/mail.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3  "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4 <!ENTITY % general-entities SYSTEM "../../general.ent">
     5 %general-entities;
     6]>
     7
    18<chapter id="server-mail">
    29<?dbhtml filename="mail.html"?>
    … …  
    1118server (Courier-<acronym>IMAP</acronym>).</para>
    1219
    13 &postfix;
    14 &sendmail;
    15 &exim;
    16 &qpopper;
    17 &courier;
     20<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="postfix.xml"/>
     21<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="sendmail.xml"/>
     22<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="exim.xml"/>
     23<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="qpopper.xml"/>
     24<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="courier.xml"/>
     25
    1826</chapter>

  • server/mail/postfix.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY postfix-download-http "http://ftp.uni-koeln.de/mail/postfix-&postfix-version;.tar.gz">
     8<!ENTITY postfix-download-ftp "ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-&postfix-version;.tar.gz">
     9<!ENTITY postfix-size "1.9 MB">
     10<!ENTITY postfix-buildsize "82 MB">
     11<!ENTITY postfix-time "0.29 SBU">
     12
     13]>
     14
    115<sect1 id="postfix" xreflabel="Postfix-&postfix-version;">
    216<?dbhtml filename="postfix.html"?>
    317<title>Postfix-&postfix-version;</title>
    418
    5 &postfix-intro;
    6 &postfix-inst;
    7 &postfix-exp;
    8 &postfix-config;
    9 &postfix-desc;
     19<sect2>
     20<title>Introduction to Postfix</title>
     21
     22<para>The <application>Postfix</application> package contains a Mail
     23Transport Agent (<acronym>MTA</acronym>). This is useful for sending email
     24to other users of your host machine.  It can also be configured to be a
     25central mail server for your domain, a mail relay agent or simply a mail
     26delivery agent to your local Internet Service Provider
     27(<acronym>ISP</acronym>).</para>
     28
     29<sect3><title>Package information</title>
     30<itemizedlist spacing='compact'>
     31<listitem><para>Download (HTTP): <ulink
     32url="&postfix-download-http;"/></para></listitem>
     33<listitem><para>Download (FTP): <ulink
     34url="&postfix-download-ftp;"/></para></listitem>
     35<listitem><para>Download size: &postfix-size;</para></listitem>
     36<listitem><para>Estimated Disk space required:
     37&postfix-buildsize;</para></listitem>
     38<listitem><para>Estimated build time:
     39&postfix-time;</para></listitem></itemizedlist>
     40</sect3>
     41
     42<sect3><title><application>Postfix</application> dependencies</title>
     43<sect4><title>Required</title>
     44<para><xref linkend="db"/></para></sect4>
     45<sect4><title>Optional</title>
     46<para><ulink url="http://asg.web.cmu.edu/sasl/">Cyrus SASL</ulink></para></sect4>
     47</sect3>
     48
     49</sect2>
     50
     51<sect2>
     52<title>Installation of <application>Postfix</application></title>
     53
     54<para>Before you compile the program, you need to create users and groups that
     55will be expected to be in place when the install script executes.  Add the
     56users and groups with the following commands:</para>
     57
     58<screen><userinput><command>groupadd postfix &amp;&amp;
     59groupadd postdrop &amp;&amp;
     60groupadd -g 65534 nogroup &amp;&amp;
     61useradd -c postfix -d /dev/null -g postfix -s /bin/false postfix &amp;&amp;
     62useradd -c nobody -d /home -g nogroup -s /bin/bash -u 65534 nobody &amp;&amp;
     63chown postfix:postfix /var/mail</command></userinput></screen>
     64
     65<para>Install <application>postfix</application> by running the following commands:</para>
     66
     67<screen><userinput><command>make &amp;&amp;
     68sh postfix-install daemon_directory=/usr/sbin \
     69                   manpage_directory=/usr/share/man \
     70                   sample_directory=/usr/share/doc/postfix \
     71                   -non-interactive</command></userinput></screen>
     72
     73<para>The final installation step is to install the program's documentation with this command:</para>
     74
     75<screen><userinput><command>install -d /usr/share/doc/postfix &amp;&amp;
     76cp -rf html/* /usr/share/doc/postfix</command></userinput></screen>
     77
     78</sect2>
     79
     80<sect2>
     81<title>Command explanations</title>
     82
     83<para><command>sh postfix-install ... -non-interactive</command> :
     84We don't want the install script to ask any questions so we call it with
     85a non-interactive switch and accept default destination directories in
     86all but three cases.</para>
     87
     88</sect2>
     89
     90<sect2>
     91<title>Configuring <application>Postfix</application></title>
     92
     93<sect3><title>Config files</title>
     94<para><filename>/etc/aliases</filename>,
     95<filename>/etc/postfix/main.cf</filename> and
     96<filename>/etc/postfix/master.cf</filename></para>
     97</sect3>
     98
     99<sect3><title>Configuration Information</title>
     100
     101<screen><userinput><command>cat &gt;&gt; /etc/aliases &lt;&lt; "EOF"</command>
     102# Begin /etc/aliases
     103
     104MAILER-DAEMON:    postmaster
     105postmaster:       root
     106
     107root:             LOGIN
     108# End /etc/aliases
     109<command>EOF</command></userinput></screen>
     110
     111<note><para>To protect an existing <filename>/etc/aliases</filename>
     112file, we will append these aliases to it if it exists. This file
     113should be checked and duplicate aliases removed, if
     114present.</para></note>
     115
     116<para>The <filename>/etc/aliases</filename> file that was just created
     117or appended, the <filename>main.cf</filename> and the
     118<filename>master.cf</filename>
     119must be personalized for your system. The <filename>aliases</filename> file
     120needs your non-root login identity so mail addressed to root can be forwarded
     121to you at the user level.  The <filename>main.cf</filename> file needs your
     122fully qualified hostname.  All of these edits can be done with sed commands
     123entered into the console with appropriate substitutions of your non-root
     124login name for <replaceable>[user]</replaceable> and your fully qualified
     125hostname for <replaceable>[localhost.localdomain]</replaceable>. You will
     126find the <filename>main.cf</filename> file
     127is self documenting, so load it into your editor to make the changes you need
     128for your situation.</para>
     129
     130<screen><userinput><command>cp /etc/aliases /etc/aliases.bak &amp;&amp;
     131cp /etc/postfix/main.cf /etc/postfix/main.cf.bak &amp;&amp;
     132sed "s/LOGIN/<replaceable>[user]</replaceable>/" /etc/aliases.bak > /etc/aliases &amp;&amp;
     133sed "s/#myhostname = host.domain.tld/myhostname = \
     134        <replaceable>[localhost.localdomain]</replaceable>/" \
     135        /etc/postfix/main.cf.bak > /etc/postfix/main.cf &amp;&amp;
     136/usr/bin/newaliases &amp;&amp;
     137/usr/sbin/postfix start</command></userinput></screen></sect3>
     138
     139<sect3><title>Postfix init.d script</title>
     140
     141<para>To automate the running of Postfix at startup, install the  <filename>/etc/rc.d/init.d/postfix</filename>
     142init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     143
     144<screen><userinput><command>make install-postfix</command></userinput></screen>
     145
     146</sect3>
     147
     148</sect2>
     149
     150<sect2>
     151<title>Contents</title>
     152
     153<para>The <application>Postfix</application> package contains <filename>bounce
     154</filename>, <filename>cleanup</filename>, <filename>error</filename>,
     155<filename>flush</filename>, <filename>lmtp</filename>,
     156<filename>local</filename>, <filename class="symlink">mailq</filename>,
     157<filename>master</filename>, <filename class="symlink">newaliases</filename>,
     158<filename>nqmgr</filename>, <filename>pickup</filename>,
     159<filename>pipe</filename>, <command>postalias</command>,
     160<command>postcat</command>, <command>postconf</command>,
     161<command>postdrop</command>, <command>postfix</command>,
     162<command>postkick</command>, <command>postlock</command>,
     163<command>postlog</command>, <command>postmap</command>,
     164<command>postqueue</command>, <command>postsuper</command>,
     165<filename>qmgr</filename>, <filename>qmqpd</filename>,
     166<command>sendmail</command>, <command>showq</command>,
     167<filename>smtp</filename>, <filename>smtpd</filename>,
     168<filename>spawn</filename>, <filename>trivial-rewrite</filename>,
     169and <filename>virtual</filename>.</para>
     170
     171</sect2>
     172
     173<sect2><title>Description</title>
     174
     175<sect3><title>postfix</title>
     176<para><command>postfix</command> is the program that starts and stops the mail delivery system.</para></sect3>
     177
     178<sect3><title>master</title>
     179<para><filename>master</filename> is the resident process that runs
     180<filename>bounce</filename>, <filename>cleanup</filename>,
     181<filename>error</filename>, <filename>flush</filename>,
     182<filename>lmtp</filename>, <filename>local</filename>,
     183<filename>nqmgr</filename>, <filename>pickup</filename>,
     184<filename>pipe</filename>, <filename>qmgr</filename>,
     185<filename>qmqpd</filename>, <filename>showq</filename>,
     186<filename>smtp</filename>, <filename>smtpd</filename>,
     187<filename>spawn</filename>, <filename>trivial-rewrite</filename> and
     188<filename>virtual</filename> on demand. These programs are not designed to
     189work as user commands.</para></sect3>
     190
     191<sect3><title>postqueue</title>
     192<para><command>postqueue</command> implements the
     193<application>Postfix</application> user interface for
     194queue management.  It implements all the operations that are traditionally
     195available via the <command>sendmail</command> command.</para></sect3>
     196
     197<sect3><title>sendmail</title>
     198<para><command>sendmail</command> implements the
     199<application>Postfix</application> to
     200<application>Sendmail</application> compatibility interface. 
     201<filename class="symlink">mailq</filename> and <filename
     202class="symlink">newaliases</filename> are symlinks to
     203<command>sendmail</command>.</para></sect3>
     204
     205<sect3><title>showq</title>
     206<para><command>showq</command> will emulate the <filename
     207class="symlink">mailq</filename> command when the
     208<application>Postfix</application> mail system is
     209not running.</para></sect3>
     210
     211<sect3><title>postsuper</title>
     212<para><command>postsuper</command> does maintenance jobs on the
     213<application>Postfix</application> queue.</para></sect3>
     214
     215<sect3><title>postalias</title>
     216<para><command>postalias</command> creates, queries or updates
     217<application>Postfix</application> alias
     218databases.</para></sect3>
     219
     220<sect3><title>postcat</title>
     221<para><command>postcat</command> prints the contents of a
     222<application>Postfix</application> queue file in human-readable
     223form.</para></sect3>
     224
     225<sect3><title>postconf</title>
     226<para><command>postconf</command> prints or changes the value of configuration
     227parameters.</para></sect3>
     228
     229<sect3><title>postdrop</title>
     230<para><command>postdrop</command> creates a file in the maildrop directory and
     231copies its standard input to the file.</para></sect3>
     232
     233<sect3><title>postkick</title>
     234<para><command>postkick</command> makes the mail system private
     235<acronym>IPC</acronym> accessible for use in shell
     236scripts.</para></sect3>
     237
     238<sect3><title>postlock</title>
     239<para><command>postlock</command> locks a file for exclusive access and
     240executes a command on that file.</para></sect3>
     241
     242<sect3><title>postlog</title>
     243<para><command>postlog</command> implements a logging interface for use in
     244shell scripts.</para></sect3>
     245
     246<sect3><title>postmap</title>
     247<para><command>postmap</command> creates, queries or updates
     248<application>Postfix</application> lookup tables.</para></sect3>
     249
     250</sect2>
    10251
    11252</sect1>

  • server/mail/qpopper.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY qpopper-download-http "http://ftp.uni-koeln.de/mail/qpopper&qpopper-version;.tar.gz">
     8<!ENTITY qpopper-download-ftp "ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper&qpopper-version;.tar.gz">
     9<!ENTITY qpopper-size "2.2 MB">
     10<!ENTITY qpopper-buildsize "9.0 MB">
     11<!ENTITY qpopper-time "0.13 SBU">
     12
     13]>
     14
    115<sect1 id="qpopper" xreflabel="Qpopper-&qpopper-version;">
    216<?dbhtml filename="qpopper.html"?>
    317<title>Qpopper-&qpopper-version;</title>
    418
    5 &qpopper-intro;
    6 &qpopper-inst;
    7 &qpopper-config;
    8 &qpopper-desc;
     19<sect2>
     20<title>Introduction to <application>Qpopper</application></title>
     21
     22<para>The <application>Qpopper</application> package contains a
     23<acronym>POP</acronym>3
     24mail server.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&qpopper-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&qpopper-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &qpopper-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &qpopper-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &qpopper-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title><application>Qpopper</application> dependencies</title>
     36<sect4><title>Required</title>
     37<para>
     38<ulink url="../server/mail.html">MTA</ulink>
     39</para></sect4>
     40<sect4><title>Optional</title>
     41<para>
     42<xref linkend="openssl"/>,
     43<xref linkend="gdbm"/>,
     44<xref linkend="Linux_PAM"/> and
     45<xref linkend="mitkrb"/>
     46</para></sect4>
     47
     48</sect3>
     49
     50</sect2>
     51
     52<sect2>
     53<title>Installation of <application>Qpopper</application></title>
     54
     55<para>Install <application>Qpopper</application> with the following commands:</para>
     56
     57<screen><userinput><command>./configure --prefix=/usr &amp;&amp;
     58make &amp;&amp;
     59make install</command></userinput></screen>
     60
     61</sect2>
     62
     63
     64<sect2>
     65<title>Configuring <application>Qpopper</application></title>
     66
     67<sect3><title>Configuration Information</title>
     68
     69<para>If you use <command>inetd</command>, the following command will add the qpopper
     70entry to <filename>/etc/inetd.conf</filename>:</para>
     71
     72<screen><userinput><command>echo "pop3 stream tcp nowait root /usr/sbin/popper popper" &gt;&gt; \
     73    /etc/inetd.conf &amp;&amp;
     74killall inetd || inetd &amp;&amp;
     75echo "local0.notice;local0.debug /var/log/POP.log" &gt;&gt; \
     76    /etc/syslog.conf &amp;&amp;
     77killall -HUP syslogd</command></userinput></screen>
     78
     79<para>Issue a <command>killall -HUP inetd</command> to reread the changed
     80<filename>inetd.conf</filename> file.</para>
     81
     82<para>If you use <command>xinetd</command>, the following command will add the qpopper
     83entry to <filename>/etc/xinetd.conf</filename>:</para>
     84
     85<screen><userinput><command>cat &gt;&gt; /etc/xinetd.conf &lt;&lt; "EOF"</command>
     86service pop3
     87{
     88    port            = 110
     89    socket_type     = stream
     90    protocol        = tcp
     91    wait            = no
     92    user            = root
     93    server          = /usr/sbin/popper
     94}
     95<command>EOF</command></userinput></screen>
     96
     97<para>Issue a <command>killall -HUP xinetd</command> to reread the changed
     98<filename>xinetd.conf</filename> file.</para>
     99
     100</sect3>
     101
     102</sect2>
     103
     104<sect2>
     105<title>Contents</title>
     106
     107<para>The <application>Qpopper</application> package contains
     108<command>popper</command>.
     109</para>
     110
     111</sect2>
     112
     113<sect2><title>Description</title>
     114
     115<sect3><title>popper</title>
     116<para><command>popper</command> is the <acronym>POP</acronym>3 server daemon.</para></sect3>
     117
     118</sect2>
    9119
    10120</sect1>

  • server/mail/sendmail.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY sendmail-download-ftp "ftp://ftp.sendmail.org/pub/sendmail/sendmail.&sendmail-version;.tar.gz">
     8<!ENTITY sendmail-download-http "http://www.sendmail.org/ftp/sendmail.&sendmail-version;.tar.gz">
     9<!ENTITY sendmail-size "1.8 MB">
     10<!ENTITY sendmail-buildsize "13 MB">
     11<!ENTITY sendmail-time "0.43 SBU">
     12
     13]>
     14
    115<sect1 id="sendmail" xreflabel="Sendmail-&sendmail-version;">
    216<?dbhtml filename="sendmail.html"?>
    317<title>Sendmail-&sendmail-version;</title>
    418
    5 &sendmail-intro;
    6 &sendmail-inst;
    7 &sendmail-config;
    8 &sendmail-desc;
     19<sect2>
     20<title>Introduction to <application>Sendmail</application></title>
     21
     22<para>The <application>Sendmail</application> package contains a Mail Transport Agent
     23(<acronym>MTA</acronym>).</para>
     24
     25<sect3><title>Package information</title>
     26<itemizedlist spacing='compact'>
     27<listitem><para>Download (HTTP): <ulink url="&sendmail-download-http;"/></para></listitem>
     28<listitem><para>Download (FTP): <ulink url="&sendmail-download-ftp;"/></para></listitem>
     29<listitem><para>Download size: &sendmail-size;</para></listitem>
     30<listitem><para>Estimated Disk space required: &sendmail-buildsize;</para></listitem>
     31<listitem><para>Estimated build time: &sendmail-time;</para></listitem></itemizedlist>
     32</sect3>
     33
     34<sect3><title><application>Sendmail</application> dependencies</title>
     35<sect4><title>Required</title>
     36<para><xref linkend="db"/> and <xref linkend="procmail"/>
     37</para></sect4>
     38</sect3>
     39
     40</sect2>
     41
     42<sect2>
     43<title>Installation of <application>Sendmail</application></title>
     44
     45<para>Before building <application>Sendmail</application>, we need to create users, groups and
     46directories that sendmail uses with the following commands:</para>
     47
     48<screen><userinput><command>groupadd smmsp &amp;&amp;
     49groupadd mail &amp;&amp;
     50useradd -g smmsp -G mail smmsp &amp;&amp;
     51chmod 1777 /tmp &amp;&amp;
     52chmod 1777 /var/mail &amp;&amp;
     53mkdir /var/spool/mqueue</command></userinput></screen>
     54
     55<para>Install <application>Sendmail</application> with the following commands:</para>
     56
     57<screen><userinput><command>cat &gt; devtools/Site/site.config.m4 &lt;&lt; "EOF"
     58define(`confMANGRP',`root')
     59define(`confMANOWN',`root')
     60define(`confSBINGRP',`root')
     61define(`confUBINGRP',`root')
     62define(`confUBINOWN',`root')
     63EOF
     64cd sendmail &amp;&amp;
     65sh Build &amp;&amp;
     66cd ../cf/cf &amp;&amp;
     67cp generic-linux.mc sendmail.mc &amp;&amp;
     68mkdir /etc/mail &amp;&amp;
     69sh Build sendmail.mc &amp;&amp;
     70sh Build install-cf &amp;&amp;
     71cd ../../ &amp;&amp;
     72sh Build install</command></userinput></screen>
     73
     74</sect2>
     75
     76<sect2>
     77<title>Configuring <application>Sendmail</application></title>
     78
     79<sect3><title>Config files</title>
     80<para><filename>/etc/mail/*</filename></para>
     81</sect3>
     82
     83<sect3><title>Configuration Information</title>
     84
     85<screen><userinput><command>echo `hostname` > /etc/mail/local-host-names
     86cat &gt; /etc/mail/aliases &lt;&lt; "EOF"
     87postmaster: root
     88MAILER-DAEMON: root
     89EOF
     90cp -R cf/* /etc/mail &amp;&amp;
     91cp cf/cf/{submit,sendmail}.mc /etc/mail &amp;&amp;
     92newaliases -v</command></userinput></screen>
     93
     94<para>To automate the running of Sendmail at startup, install the <filename>/etc/rc.d/init.d/sendmail</filename>
     95init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     96                                                                                                               
     97<screen><userinput><command>make install-sendmail</command></userinput></screen>
     98
     99<note><para>The -qNm option to <command>sendmail</command>, where N is number of minutes, controls
     100how often Sendmail will process the mail queue. A default of 5
     101minutes is used in the init script. Individual workstation users may want to set
     102this as low as 1 minute, large installations handling more mail may
     103want to set it higher.</para></note>
     104
     105</sect3>
     106</sect2>
     107
     108<sect2>
     109<title>Contents</title>
     110
     111<para>The <application>Sendmail</application> package contains
     112<command>mail.local</command>,
     113<command>rmail</command>,
     114<command>smrsh</command>,
     115<command>editmap</command>,
     116<command>makemap</command>,
     117<command>mailq</command>,
     118<command>newaliases</command>,
     119<command>sendmail</command>,
     120<command>vacation</command>,
     121<command>praliases</command> and
     122<command>mailstats</command>.
     123</para>
     124</sect2>
     125
     126<sect2><title>Description</title>
     127
     128<sect3><title>mail.local</title>
     129<para><command>mail.local</command> appends its standard input to a user's mail
     130file.</para></sect3>
     131
     132<sect3><title>rmail</title>
     133<para><command>rmail</command> interprets incoming mail received via
     134<acronym>UUCP</acronym>.</para></sect3>
     135
     136<sect3><title>smrsh</title>
     137<para><command>smrsh</command> is a restricted shell for Sendmail.</para></sect3>
     138
     139<sect3><title>editmap</title>
     140<para><command>editmap</command> queries and edits Sendmail map files.</para></sect3>
     141
     142<sect3><title>makemap</title>
     143<para><command>makemap</command> creates Sendmail map files.</para></sect3>
     144
     145<sect3><title>mailq</title>
     146<para><command>mailq</command> prints a summary of waiting mail messages.</para></sect3>
     147
     148<sect3><title>newaliases</title>
     149<para><command>newaliases</command> rebuilds <filename>/etc/mail/aliases.db</filename>.
     150</para></sect3>
     151
     152<sect3><title>sendmail</title>
     153<para><command>sendmail</command> is the Sendmail mail transport agent.</para></sect3>
     154
     155<sect3><title>vacation</title>
     156<para><command>vacation</command> is an email auto responder.</para></sect3>
     157
     158<sect3><title>praliases</title>
     159<para><command>praliases</command> displays current Sendmail aliases.</para></sect3>
     160
     161<sect3><title>mailstats</title>
     162<para><command>mailstats</command> displays Sendmail statistics.</para></sect3>
     163
     164</sect2>
    9165
    10166</sect1>

  • server/other/bind.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY bind-download-http "http://gd.tuwien.ac.at/infosys/servers/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
     8<!ENTITY bind-download-ftp "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.gz">
     9<!ENTITY bind-size "4.4 MB">
     10<!ENTITY bind-buildsize "88 MB">
     11<!ENTITY bind-time "0.89 SBU">
     12
     13]>
     14
    115<sect1 id="bind" xreflabel="BIND-&bind-version;">
    216<?dbhtml filename="bind.html"?>
    317<title><acronym>BIND</acronym>-&bind-version;</title>
    418
    5 &bind-intro;
    6 &bind-inst;
    7 &bind-config;
    8 &bind-desc;
     19<sect2>
     20<title>Introduction to <application><acronym>BIND</acronym></application></title>
     21
     22<para>The <application><acronym>BIND</acronym></application> package
     23provides a <acronym>DNS</acronym> server and client utilities. If you
     24are only interested in the utilities, refer to the <xref linkend="bind-utils"/>.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&bind-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&bind-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &bind-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &bind-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &bind-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title><application><acronym>BIND</acronym></application> dependencies</title>
     36<sect4><title>Optional</title>
     37<para><xref linkend="openssl"/> and <xref linkend="openjade"/>
     38</para></sect4>
     39</sect3>
     40
     41</sect2>
     42
     43<sect2>
     44<title>Installation of <application><acronym>BIND</acronym></application></title>
     45
     46<para>Install <application><acronym>BIND</acronym></application> by
     47running the following commands:</para>
     48
     49<screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc &amp;&amp;
     50make &amp;&amp;
     51make install</command></userinput></screen>
     52
     53</sect2>
     54
     55<sect2>
     56<title>Configuring
     57<application><acronym>BIND</acronym></application></title>
     58
     59<sect3><title>Config files</title>
     60<para><filename>named.conf</filename>, <filename>root.hints</filename>,
     61<filename>127.0.0</filename>, <filename>rndc.conf</filename></para>
     62</sect3>
     63
     64<sect3><title>Configuration Information</title>
     65
     66<para>We will configure
     67<application><acronym>BIND</acronym></application> to run in a chroot
     68jail as an unprivileged user (named). This configuration is more secure
     69in that a <acronym>DNS</acronym> compromise can only affect a few files
     70in the named user's <envar>HOME</envar> directory.</para>
     71
     72<para>First we create the unprivileged user and group named:</para>
     73
     74<screen><userinput><command>groupadd named &amp;&amp;
     75useradd -m -g named -s /bin/false named</command></userinput></screen>
     76
     77<para>Then we set up some files, directories and devices needed by
     78<application><acronym>BIND</acronym></application>:</para>
     79
     80<screen><userinput><command>cd /home/named &amp;&amp;
     81mkdir -p dev etc/namedb/slave var/run &amp;&amp;
     82mknod /home/named/dev/null c 1 3 &amp;&amp;
     83mknod /home/named/dev/random c 1 8 &amp;&amp;
     84chmod 666 /home/named/dev/{null,random} &amp;&amp;
     85mkdir /home/named/etc/namedb/pz &amp;&amp;
     86cp /etc/localtime /home/named/etc</command></userinput></screen>
     87
     88<para>Create the <filename>named.conf</filename> file from which named
     89will read the location of zone files, root name servers and secure
     90<acronym>DNS</acronym> keys:</para>
     91
     92<screen><userinput><command>cat &gt; /home/named/etc/named.conf &lt;&lt; "EOF"</command>
     93 options {
     94     directory "/etc/namedb";
     95    pid-file "/var/run/named.pid";
     96    statistics-file "/var/run/named.stats";
     97       
     98 };
     99 controls {
     100     inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
     101 };
     102 key "rndc_key" {
     103     algorithm hmac-md5;
     104     secret "<replaceable>[c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K]</replaceable>";
     105 };
     106 zone "." {
     107     type hint;
     108     file "root.hints";
     109 };
     110 zone "0.0.127.in-addr.arpa" {
     111     type master;
     112     file "pz/127.0.0";
     113 };
     114<command>EOF</command></userinput></screen>
     115
     116<para>Create a zone file with the following contents:</para>
     117
     118<screen><userinput><command>cat &gt; /home/named/etc/namedb/pz/127.0.0 &lt;&lt; "EOF"</command>
     119$TTL 3D
     120@      IN      SOA     ns.local.domain. hostmaster.local.domain. (
     121                        1       ; Serial
     122                        8H      ; Refresh
     123                        2H      ; Retry
     124                        4W      ; Expire
     125                        1D)     ; Minimum TTL
     126                NS      ns.local.domain.
     1271               PTR     localhost.
     128<command>EOF</command></userinput></screen>
     129
     130<para>Create the <filename>root.hints</filename> file with the following
     131commands:</para>
     132
     133<note><para>Caution must be used to ensure no leading spaces in this
     134file.</para></note>
     135
     136<screen><userinput><command>cat &gt; /home/named/etc/namedb/root.hints &lt;&lt; "EOF"</command>
     137.                       6D  IN      NS      A.ROOT-SERVERS.NET.
     138.                       6D  IN      NS      B.ROOT-SERVERS.NET.
     139.                       6D  IN      NS      C.ROOT-SERVERS.NET.
     140.                       6D  IN      NS      D.ROOT-SERVERS.NET.
     141.                       6D  IN      NS      E.ROOT-SERVERS.NET.
     142.                       6D  IN      NS      F.ROOT-SERVERS.NET.
     143.                       6D  IN      NS      G.ROOT-SERVERS.NET.
     144.                       6D  IN      NS      H.ROOT-SERVERS.NET.
     145.                       6D  IN      NS      I.ROOT-SERVERS.NET.
     146.                       6D  IN      NS      J.ROOT-SERVERS.NET.
     147.                       6D  IN      NS      K.ROOT-SERVERS.NET.
     148.                       6D  IN      NS      L.ROOT-SERVERS.NET.
     149.                       6D  IN      NS      M.ROOT-SERVERS.NET.
     150A.ROOT-SERVERS.NET.     6D  IN      A       198.41.0.4
     151B.ROOT-SERVERS.NET.     6D  IN      A       128.9.0.107
     152C.ROOT-SERVERS.NET.     6D  IN      A       192.33.4.12
     153D.ROOT-SERVERS.NET.     6D  IN      A       128.8.10.90
     154E.ROOT-SERVERS.NET.     6D  IN      A       192.203.230.10
     155F.ROOT-SERVERS.NET.     6D  IN      A       192.5.5.241
     156G.ROOT-SERVERS.NET.     6D  IN      A       192.112.36.4
     157H.ROOT-SERVERS.NET.     6D  IN      A       128.63.2.53
     158I.ROOT-SERVERS.NET.     6D  IN      A       192.36.148.17
     159J.ROOT-SERVERS.NET.     6D  IN      A       192.58.128.30
     160K.ROOT-SERVERS.NET.     6D  IN      A       193.0.14.129
     161L.ROOT-SERVERS.NET.     6D  IN      A       198.32.64.12
     162M.ROOT-SERVERS.NET.     6D  IN      A       202.12.27.33
     163<command>EOF</command></userinput></screen>
     164
     165<para>The <filename>root.hints</filename> file is a list of root name
     166servers. This file must be updated periodically with the
     167<command>dig</command> utility.
     168Consult the <ulink url="http://www.bind9.net/Bv9ARM.html"><application><acronym>BIND</acronym></application> 9 Administrator Reference Manual</ulink> for
     169details.</para>
     170
     171<para>Create the <filename>rndc.conf</filename> with the following commands:</para>
     172
     173<screen><userinput><command>cat &gt; /etc/rndc.conf &lt;&lt; "EOF"</command>
     174key rndc_key {
     175algorithm "hmac-md5";
     176    secret
     177    "<replaceable>[c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K]</replaceable>";
     178    };
     179options {
     180    default-server localhost;
     181    default-key    rndc_key;
     182};
     183<command>EOF</command></userinput></screen>
     184
     185<para>The <filename>rndc.conf</filename> file contains information for
     186controlling named operations with the <command>rndc</command>
     187utility.</para>
     188
     189<para>Create or modify <filename>resolv.conf</filename> to use the new
     190name server with the following commands:</para>
     191
     192<note><para>Replace yourdomain.com with your own valid domain
     193name.</para></note>
     194
     195<screen><userinput><command>cp /etc/resolv.conf /etc/resolv.conf.bak &amp;&amp;
     196cat &gt; /etc/resolv.conf &lt;&lt; "EOF"</command>
     197search <replaceable>[yourdomain.com]</replaceable>
     198nameserver 127.0.0.1
     199<command>EOF</command></userinput></screen>
     200
     201<para>Set permissions on the chroot jail with the following
     202command:</para>
     203
     204<screen><userinput><command>chown -R named.named /home/named</command></userinput></screen>
     205
     206<para>To start the DNS server at boot, install the <filename>/etc/rc.d/init.d/bind</filename>
     207init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     208                                                                                                               
     209<screen><userinput><command>make install-bind</command></userinput></screen>
     210
     211<para>Now start <application><acronym>BIND</acronym></application> with
     212the new boot script:</para>
     213
     214<screen><userinput><command>/etc/rc.d/init.d/bind start</command></userinput></screen>
     215
     216</sect3>
     217
     218<sect3><title>Testing <application><acronym>BIND</acronym></application></title>
     219
     220<para>Test out the new
     221<application><acronym>BIND</acronym></application> 9 installation. First
     222query the local host address with <command>dig</command>:</para>
     223
     224<screen><userinput><command>dig -x 127.0.0.1</command></userinput></screen>
     225
     226<para>Now try an external name lookup, taking note of the speed
     227difference in repeated lookups due to the caching. Run the dig command
     228twice on the same address:</para>
     229
     230<para><screen><userinput><command>dig beyond.linuxfromscratch.org &amp;&amp;
     231dig beyond.linuxfromscratch.org</command></userinput></screen>
     232You can see almost instantaneous results with the named caching lookups.
     233Consult <filename>bind-&bind-version;/doc/arm/Bv9ARM.html</filename>,
     234the <application><acronym>BIND</acronym></application> Administrator
     235Reference Manual for further configuration options.</para>
     236
     237</sect3>
     238
     239</sect2>
     240
     241<sect2>
     242<title>Contents</title>
     243
     244<para>The <application><acronym>BIND</acronym></application> package contains
     245<command>dig</command>,
     246<command>host</command>,
     247<command>isc-config.sh</command>,
     248<command>nslookup</command>,
     249<command>rndc</command>,
     250<command>rndc-confgen</command>,
     251<command>named-checkconf</command>,
     252<command>named-checkzone</command>,
     253<command>lwresd</command>,
     254<command>named</command>,
     255<command>dnssec-signzone</command>,
     256<command>dnssec-signkey</command>,
     257<command>dnssec-keygen</command>,
     258<command>dnssec-makekeyset</command> and
     259<command>nsupdate</command>.</para>
     260</sect2>
     261
     262<sect2><title>Description</title>
     263
     264<sect3><title>dig</title>
     265<para><command>dig</command> interrogates <acronym>DNS</acronym>
     266servers.</para></sect3>
     267
     268<sect3><title>host</title>
     269<para><command>host</command> is a utility for <acronym>DNS</acronym>
     270lookups.</para></sect3>
     271
     272<sect3><title>nslookup</title>
     273<para><command>nslookup</command> is a program used to query Internet
     274domain nameservers.</para></sect3>
     275
     276<sect3><title>rndc</title>
     277<para><command>rndc</command> controls the operation of
     278<application><acronym>BIND</acronym></application>.</para></sect3>
     279
     280<sect3><title>rndc-confgen</title>
     281<para><command>rndc-confgen</command> generates
     282<filename>rndc.conf</filename> files.</para></sect3>
     283
     284<sect3><title>named-checkconf</title>
     285<para><command>named-checkconf</command> checks the syntax of
     286<filename>named.conf</filename> files.</para></sect3>
     287
     288<sect3><title>named-checkzone</title>
     289<para><command>named-checkzone</command> checks zone file
     290validity.</para></sect3>
     291
     292<sect3><title>lwresd</title>
     293<para><command>lwresd</command> is a caching-only name server for local
     294process use.</para></sect3>
     295
     296<sect3><title>named</title>
     297<para><command>named</command> is the name server daemon.</para></sect3>
     298
     299<sect3><title>dnssec-signzone</title>
     300<para><command>dnssec-signzone</command> generates signed versions of
     301zone files.</para></sect3>
     302
     303<sect3><title>dnssec-signkey</title>
     304<para><command>dnssec-signkey</command> signs zone file key
     305sets.</para></sect3>
     306
     307<sect3><title>dnssec-keygen</title>
     308<para><command>dnssec-keygen</command> is a key generator for secure
     309<acronym>DNS</acronym>.</para></sect3>
     310
     311<sect3><title>dnssec-makekeyset</title>
     312<para><command>dnssec-makekeyset</command> generates a key set from one
     313or more keys created by dnssec-keygen.</para></sect3>
     314
     315<sect3><title>nsupdate</title>
     316<para><command>nsupdate</command> is used to submit
     317<acronym>DNS</acronym> update requests.</para></sect3>
     318
     319</sect2>
    9320
    10321</sect1>

  • server/other/cvsserver.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7]>
     8
    19<sect1 id="cvsserver" xreflabel="cvsserver">
    210<?dbhtml filename="cvsserver.html"?>
    311<title>Running a CVS server</title>
    412
    5 &cvsserver-intro;
    6 &cvsserver-inst;
    7 &cvsserver-exp;
     13<sect2>
     14<title>Running a <acronym>CVS</acronym> server</title>
     15
     16<para>This section will describe how to set up, administer and secure
     17a <acronym>CVS</acronym> server.</para>
     18
     19<sect3><title><application>CVS server</application> dependencies</title>
     20<sect4><title>Required</title>
     21<para><xref linkend="cvs"/> and <xref linkend="openssh"/></para></sect4>
     22</sect3>
     23
     24</sect2>
     25
     26<sect2>
     27<title>Setting up a <acronym>CVS</acronym> server.</title>
     28
     29<para>A <acronym>CVS</acronym> server will be set up using OpenSSH
     30as the remote access method.  Other access methods, including :pserver: and
     31:server: will not be used for write access to the <acronym>CVS</acronym>
     32repository.  The :pserver: method sends clear text passwords over the network
     33and the :server: method is not supported in all <acronym>CVS</acronym> ports. 
     34Instructions for anonymous, read only <acronym>CVS</acronym> access using
     35:pserver: can be found at the end of this section.</para>
     36
     37<para>Configuration of the <acronym>CVS</acronym> server consists of four
     38steps:</para>
     39
     40<sect3><title>1. Create a repository.</title>
     41<para>Create a new <acronym>CVS</acronym> repository with the following
     42commands:</para>
     43<screen><userinput><command>mkdir /home/cvsroot &amp;&amp;
     44chmod 1777 /home/cvsroot &amp;&amp;
     45export CVSROOT=/home//cvsroot &amp;&amp;
     46cvs init</command></userinput></screen></sect3>
     47
     48<sect3><title>2. Import source code into the repository.</title>
     49<para>Import a source module into the repository with the following
     50commands, issued from a user account on the same machine as the
     51<acronym>CVS</acronym> repository:</para>
     52
     53<screen><userinput><command>export CVSROOT=/home/cvsroot &amp;&amp;
     54cd <replaceable>[sourcedir]</replaceable> &amp;&amp;
     55cvs import -m <replaceable>["repository test"] [cvstest] [vendortag] [releasetag]</replaceable></command></userinput></screen></sect3>
     56
     57<sect3><title>3. Verify local repository access.</title>
     58<para>Test access to the <acronym>CVS</acronym> repository from the same user
     59account with the following command:</para>
     60
     61<screen><userinput><command>cvs co cvstest</command></userinput></screen></sect3>
     62
     63<sect3><title>4. Verify remote repository access.</title>
     64<para>Test access to the <acronym>CVS</acronym> repository from a remote
     65machine using a user account that has <command>ssh</command> access to the
     66<acronym>CVS</acronym> server with the following commands:</para>
     67<note><para>Replace <replaceable>[servername]</replaceable> with the
     68<acronym>IP</acronym> address or host name of the <acronym>CVS</acronym>
     69repository machine.  You will be prompted for the user's shell account password
     70before <acronym>CVS</acronym> checkout can continue.</para></note>
     71
     72
     73<screen><userinput><command>export CVS_RSH=/usr/bin/ssh &amp;&amp;
     74cvs -d:ext:<replaceable>[servername]</replaceable>:/cvsroot co cvstest</command></userinput></screen></sect3>
     75</sect2>
     76<sect2>
     77<title>Configuring <acronym>CVS</acronym> for anonymous read only access.</title>
     78
     79<para><acronym>CVS</acronym> can be set up to allow anonymous read only access
     80using the :pserver: method by logging on as root and executing the following
     81commands:</para>
     82
     83<screen><userinput><command>(grep anonymous /etc/passwd || useradd anonymous -s /bin/false) &amp;&amp;
     84echo anonymous: &gt; /home/cvsroot/CVSROOT/passwd &amp;&amp;
     85echo anonymous &gt; /home/cvsroot/CVSROOT/readers</command></userinput></screen>
     86
     87<para>If you use <command>inetd</command>, the following command will add the
     88pserver entry to <filename>/etc/inetd.conf</filename>:</para>
     89
     90<screen><userinput><command>echo "2401  stream  tcp  nowait  root  /usr/bin/cvs cvs -f \
     91        --allow-root=/home/cvsroot pserver" &gt;&gt; /etc/inetd.conf</command></userinput></screen>
     92
     93<para>Issue a <command>killall -HUP inetd</command> to reread the changed
     94<filename>inetd.conf</filename> file.</para>
     95
     96<para>If you use <command>xinetd</command>, the following command will add the
     97pserver entry to <filename>/etc/xinetd.conf</filename>:</para>
     98
     99<screen><userinput><command>cat &gt;&gt; /etc/xinetd.conf &lt;&lt; "EOF"</command>
     100     service cvspserver
     101     {
     102          port        = 2401
     103          socket_type = stream
     104          protocol    = tcp
     105          wait        = no
     106          user        = root
     107          passenv     = PATH
     108          server      = /usr/bin/cvs
     109         server_args = -f --allow-root=/home/cvsroot pserver
     110     }
     111<command>EOF</command></userinput></screen>
     112<para>Issue a <command>/etc/rc.d/init.d/xinetd reload</command> to reread the changed
     113<filename>xinetd.conf</filename> file.</para>
     114
     115<para>Testing anonymous access to the new repository requires an account
     116on another machine that can reach the <acronym>CVS</acronym> server via
     117network.  No account on the <acronym>CVS</acronym> repository is needed.  To
     118test anonymous access to the <acronym>CVS</acronym> repository, log in to
     119another machine as an unprivileged user and execute the following command:
     120</para>
     121
     122<screen><userinput><command>cvs -d:pserver:anonymous@<replaceable>[servername]</replaceable>:/home/cvsroot co cvstest</command></userinput></screen>
     123<note><para>Replace <replaceable>[servername]</replaceable> with the <acronym>IP</acronym> address or
     124hostname of the <acronym>CVS</acronym> server</para></note>
     125
     126</sect2>
     127
     128<sect2>
     129<title>Command explanations</title>
     130
     131<para><command>mkdir /home/cvsroot</command>: Create the <acronym>CVS</acronym>
     132repository directory.</para>
     133
     134<para><command>chmod 1777 /home/cvsroot</command>: Set sticky bit permissions for
     135<envar>CVSROOT</envar>.</para>
     136
     137<para><command>export CVSROOT=/home/cvsroot</command>: Specify new <envar>CVSROOT
     138</envar> for all <command>cvs</command> commands.</para>
     139
     140<para><command>cvs init</command>: Initialize the new <acronym>CVS</acronym>
     141repository.</para>
     142
     143<para><command>cvs import -m "repository test" cvstest vendortag
     144releasetag</command>: All source code modules must be imported
     145into the <acronym>CVS</acronym> repository before use, with the
     146<command>cvs import</command> command.  The <userinput>-m</userinput>
     147flags specifies an initial descriptive entry for the new module.
     148The "cvstest" parameter is the name used for the module in all
     149subsequent <command>cvs</command> commands.  The "vendortag" and "releasetag"
     150parameters are used to further identify each <acronym>CVS</acronym> module and
     151are mandatory whether used or not.</para>
     152
     153<para><command>(grep anonymous /etc/passwd || useradd anonymous -s
     154/bin/false)</command>: Check for an existing anonymous user and
     155create one if not found.</para>
     156
     157<para><command>echo anonymous: &gt; /home/cvsroot/CVSROOT/passwd
     158</command>: Add the anonymous user to the <acronym>CVS</acronym> passwd file,
     159which is unused for anything else in this configuration.</para>
     160
     161<para><command>echo anonymous &gt; /home/cvsroot/CVSROOT/readers</command>: Add the
     162anonymous user to the <acronym>CVS</acronym> readers file, a list of
     163users who have read only access to the repository.</para>
     164
     165</sect2>
    8166
    9167</sect1>

  • server/other/dhcp.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY dhcp-download-http "http://gd.tuwien.ac.at/infosys/servers/isc/dhcp/dhcp-&dhcp-version;.tar.gz">
     8<!ENTITY dhcp-download-ftp "ftp://ftp.isc.org/isc/dhcp/dhcp-&dhcp-version;.tar.gz">
     9<!ENTITY dhcp-size "852 KB">
     10<!ENTITY dhcp-buildsize "29.6 MB">
     11<!ENTITY dhcp-time "0.23 SBU">
     12
     13]>
     14
    115<sect1 id="dhcp" xreflabel="DHCP-&dhcp-version;">
    216<?dbhtml filename="dhcp.html"?>
    317<title><acronym>DHCP</acronym>-&dhcp-version;</title>
    418
    5 &dhcp-intro;
    6 &dhcp-inst;
    7 &dhcp-exp;
    8 &dhcp-config;
    9 &dhcp-desc;
     19<sect2>
     20<title>Introduction to <application><acronym>DHCP</acronym></application></title>
     21
     22<para>The <application><acronym>DHCP</acronym></application> package contains
     23both the client and server programs for <acronym>DHCP</acronym>.
     24<command>dhclient</command> (the client) is useful for connecting your computer
     25to a network which uses <acronym>DHCP</acronym> to assign network addresses.
     26<command>dhcpd</command> (the server) is useful for assigning network addresses
     27on your private network.</para>
     28
     29<sect3><title>Package information</title>
     30<itemizedlist spacing='compact'>
     31<listitem><para>Download (HTTP): <ulink
     32url="&dhcp-download-http;"/></para></listitem>
     33<listitem><para>Download (FTP): <ulink
     34url="&dhcp-download-ftp;"/></para></listitem>
     35<listitem><para>Download size: &dhcp-size;</para></listitem>
     36<listitem><para>Estimated Disk space required:
     37&dhcp-buildsize;</para></listitem>
     38<listitem><para>Estimated build time:
     39&dhcp-time;</para></listitem></itemizedlist>
     40</sect3>
     41
     42</sect2>
     43
     44<sect2>
     45<title>Installation of <application><acronym>DHCP</acronym></application></title>
     46
     47<note><para>You must have Packet Socket support compiled in the kernel and
     48Socket Filtering either compiled in or as a kernel module.</para></note>
     49                                                                               
     50<para>Install <application><acronym>DHCP</acronym></application> by running the following commands:</para>
     51
     52<screen><userinput><command>./configure &amp;&amp;
     53make &amp;&amp;
     54make LIBDIR=/usr/lib INCDIR=/usr/include install</command></userinput></screen>
     55
     56</sect2>
     57
     58<sect2>
     59<title>Command explanations</title>
     60
     61<para><parameter>LIBDIR=/usr/lib INCDIR=/usr/include</parameter>: This
     62command installs the library and include files in <filename
     63class="directory">/usr</filename> instead of <filename
     64class="directory">/usr/local</filename>.</para>
     65
     66</sect2>
     67
     68<sect2>
     69<title>Configuring <application><acronym>DHCP</acronym></application></title>
     70
     71<sect3><title>Config files</title>
     72<para><filename>/etc/dhclient.conf</filename></para>
     73</sect3>
     74
     75<sect3><title>Configuration Information</title>
     76
     77<para>Information on configuring the <acronym>DHCP</acronym> client can be
     78found in <xref linkend="connect-dhcp"/>.</para>
     79
     80<para>Note that you only need the <acronym>DHCP</acronym> server if
     81you want to issue <acronym>LAN</acronym> addresses over your network.  The
     82<acronym>DHCP</acronym> client doesn't need this script to be used.  Also note
     83that this script is coded for the <emphasis role="strong">eth1</emphasis>
     84interface, which may need to be modified for your hardware configuration.</para>
     85
     86<para>Install the <filename>/etc/rc.d/init.d/dhcp</filename>
     87init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     88                                                                                                               
     89<screen><userinput><command>make install-dhcp</command></userinput></screen>
     90
     91<para>The lease file must exist on startup.  The following command will
     92satisfy that requirement:</para>
     93
     94<screen><userinput><command>touch /var/state/dhcp/dhcpd.leases</command></userinput></screen>
     95
     96<para>The following commands will create a base configuration file for a
     97<acronym>DHCP</acronym> server.  There are several options that you may want to
     98add (information that is passed back to the <acronym>DHCP</acronym> client) and
     99those are covered in the man pages for <filename>dhcp.conf</filename>.</para>
     100
     101<screen><userinput><command>cat &gt; /etc/dhcpd.conf &lt;&lt; "EOF"</command>
     102default-lease-time 72000;
     103max-lease-time 144000;
     104ddns-update-style ad-hoc;
     105
     106subnet <replaceable>[192.168.5.0]</replaceable> netmask <replaceable>[255.255.255.0]</replaceable> {
     107  range <replaceable>[192.168.5.10] [192.168.5.240]</replaceable>;
     108  option broadcast-address <replaceable>[195.168.5.255]</replaceable>;
     109  option routers <replaceable>[192.168.5.1]</replaceable>;
     110}
     111<command>EOF</command></userinput></screen>
     112
     113<para>All addresses should be changed to meet your circumstance.</para>
     114
     115</sect3>
     116
     117</sect2>
     118
     119<sect2>
     120<title>Contents</title>
     121
     122<para>The <application><acronym>DHCP</acronym></application> package contains
     123<command>dhclient</command>, <command>dhcpd</command> and <command>dhcrelay</command>.</para>
     124
     125</sect2>
     126
     127<sect2><title>Description</title>
     128
     129<sect3><title>dhclient</title>
     130<para><command>dhclient</command> is the implementation of the
     131<acronym>DHCP</acronym> client.</para></sect3>
     132
     133<sect3><title>dhcpd</title>
     134<para><command>dhcpd</command> implements Dynamic Host Configuration Protocol
     135(<acronym>DHCP</acronym>) and Internet Bootstrap Protocol
     136(<acronym>BOOTP</acronym>) requests for network addresses.</para></sect3>
     137
     138<sect3><title>dhcrelay</title>
     139<para><command>dhcrelay</command> provides a means to accept <acronym>DHCP
     140</acronym> and <acronym>BOOTP</acronym> requests on a subnet without a
     141<acronym>DHCP</acronym> server and relay them to a <acronym>DHCP</acronym>
     142server on another subnet.</para></sect3>
     143
     144</sect2>
    10145
    11146</sect1>

  • server/other/leafnode.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY leafnode-download-http "http://prdownloads.sourceforge.net/leafnode/leafnode-&leafnode-version;.rel.tar.bz2">
     8<!ENTITY leafnode-download-ftp " ">
     9<!ENTITY leafnode-size "614 KB">
     10<!ENTITY leafnode-buildsize "14 MB">
     11<!ENTITY leafnode-time "0.11 SBU">
     12
     13]>
     14
    115<sect1 id="leafnode" xreflabel="Leafnode-&leafnode-version;">
    216<?dbhtml filename="leafnode.html"?>
    317<title>Leafnode-&leafnode-version;</title>
    418
    5 &leafnode-intro;
    6 &leafnode-inst;
    7 &leafnode-exp;
    8 &leafnode-config;
    9 &leafnode-desc;
     19<sect2>
     20<title>Introduction to <application>Leafnode</application></title>
     21
     22<para><application>Leafnode</application> is an <acronym>NNTP</acronym>
     23server designed for small sites to provide a local USENET spool.</para>
     24
     25<sect3><title>Package information</title>
     26<itemizedlist spacing='compact'>
     27<listitem><para>Download (HTTP): <ulink url="&leafnode-download-http;"/></para></listitem>
     28<listitem><para>Download (FTP): <ulink url="&leafnode-download-ftp;"/></para></listitem>
     29<listitem><para>Download size: &leafnode-size;</para></listitem>
     30<listitem><para>Estimated Disk space required: &leafnode-buildsize;</para></listitem>
     31<listitem><para>Estimated build time: &leafnode-time;</para></listitem></itemizedlist>
     32</sect3>
     33
     34<sect3><title><application>Leafnode</application> dependencies</title>
     35<sect4><title>Required</title>
     36<para><xref linkend="pcre"/> and <xref linkend="tcpwrappers"/>
     37</para></sect4>
     38</sect3>
     39
     40</sect2>
     41
     42<sect2>
     43<title>Installation of <application>Leafnode</application></title>
     44
     45<para>Create the group and user news, if not present:</para>
     46
     47<screen><userinput><command>groupadd news &amp;&amp;
     48useradd -g news news</command></userinput></screen>
     49
     50<para>Install <application>Leafnode</application> by running the following
     51commands:</para>
     52
     53<screen><userinput><command>./configure --prefix=/usr --localstatedir=/var \
     54    --sysconfdir=/etc/news --with-lockfile=/var/lock/fetchnews.lck &amp;&amp;
     55make &amp;&amp;
     56make install &amp;&amp;
     57ldconfig &amp;&amp;
     58make update</command></userinput></screen>
     59
     60</sect2>
     61
     62<sect2>
     63<title>Installation command explanations</title>
     64
     65<para><parameter>--localstatedir=/var</parameter>: Change the default
     66spool directory of <filename class="directory">/usr/var</filename>.</para>
     67
     68<para><parameter>--sysconfdir=/etc/news</parameter>: leafnode reads its
     69configuration data from a file called <filename>config</filename> which
     70will be created in <filename class="directory">/etc/news</filename> to
     71avoid any potential conflict with other packages.</para>
     72
     73<para><command>make update</command>: Create an initial
     74<filename>/etc/news/config.example</filename> file, which must be
     75renamed to <filename>/etc/news/config</filename>.</para>
     76
     77</sect2>
     78
     79<sect2>
     80<title>Configuring <application>Leafnode</application></title>
     81
     82<sect3><title>Config files</title>
     83<para><filename>/etc/news/config</filename>,
     84<filename>/etc/inetd.conf</filename> or
     85<filename>/etc/xinetd.conf</filename></para>
     86
     87<para><application>Leafnode</application> may be configured to use
     88<command>inetd</command> by adding an entry
     89to the <filename>/etc/inetd.conf</filename> file with the following
     90command:</para>
     91
     92<screen><userinput><command>echo "nntp stream tcp nowait news /usr/sbin/tcpd /usr/sbin/leafnode" \
     93&gt;&gt; /etc/inetd.conf</command></userinput></screen>
     94
     95<para>Issue a <command>killall -HUP inetd</command> to reread the
     96changed <filename>inetd.conf</filename> file.</para>
     97
     98<para>Alternatively, <application>Leafnode</application> may be configured to
     99use <command>xinetd</command> by adding an entry to the <filename>
     100/etc/xinetd.conf</filename> file with the following command:</para>
     101
     102<screen><userinput><command>cat &gt;&gt; /etc/xinetd.conf &lt;&lt; "EOF" </command>
     103        service nntp
     104        {
     105           flags           = NAMEINARGS NOLIBWRAP
     106           socket_type     = stream
     107           protocol        = tcp
     108           wait            = no
     109           user            = news
     110           server          = /usr/sbin/tcpd
     111           server_args     = /usr/sbin/leafnode
     112           instances       = 7
     113           per_source      = 3
     114        }
     115<command>EOF</command></userinput></screen>
     116
     117<para>Issue a <command>killall -HUP xinetd</command> to reread the
     118changed <filename>xinetd.conf</filename> file.</para>
     119
     120<para>The <filename>/etc/news/config</filename> file must be
     121edited to reflect the name of the upstream <acronym>NNTP</acronym>
     122provider. Copy the
     123example configuration file to <filename>/etc/news/config</filename>
     124and save the original for reference: </para>
     125
     126<screen><userinput><command>cp /etc/news/config.example /etc/news/config
     127</command></userinput></screen>
     128
     129<para>Change the
     130<screen><userinput>server = </userinput></screen>
     131entry to reflect your news provider.</para>
     132
     133<para>The <envar>NNTPSERVER</envar> environment variable must be set to
     134127.0.0.1 to prevent news clients from reading news from the upstream feed,
     135so add the following to <filename>/etc/profile</filename> or
     136<filename>$HOME/.bash_profile</filename>:</para>
     137
     138<screen><userinput><command>export NNTPSERVER=127.0.0.1</command></userinput></screen>
     139
     140</sect3>
     141
     142</sect2>
     143
     144<sect2>
     145<title>Contents</title>
     146
     147<para>The <application>Leafnode</application> package contains
     148<command>leafnode-version</command>,
     149<command>leafnode</command>,
     150<command>applyfilter</command>,
     151<command>texpire</command>,
     152<command>checkgroups</command>,
     153<command>fetchnews</command> and
     154<command>newsq.</command></para></sect2>
     155
     156<sect2><title>Description</title>
     157
     158<sect3><title>leafnode-version</title>
     159<para><command>leafnode-version</command> prints the leafnode
     160version.</para></sect3>
     161
     162<sect3><title>leafnode</title>
     163<para><command>leafnode</command> is the <acronym>NNTP</acronym> server daemon.</para></sect3>
     164
     165<sect3><title>applyfilter</title>
     166<para><command>applyfilter</command> filters newsgroup articles according to regular
     167expressions.</para></sect3>
     168
     169<sect3><title>texpire</title>
     170<para><command>texpire</command> expires old articles and unread groups.</para></sect3>
     171
     172<sect3><title>checkgroups</title>
     173<para><command>checkgroups</command> inserts newsgroup titles into the newsgroup
     174database.</para></sect3>
     175
     176<sect3><title>fetchnews</title>
     177<para><command>fetchnews</command> sends posted articles to and retrieves new articles
     178from an upstream news server.</para></sect3>
     179
     180<sect3><title>newsq</title>
     181<para><command>newsq</command> shows articles waiting to be sent upstream.</para></sect3>
     182
     183</sect2>
    10184
    11185</sect1>

  • server/other/openldap.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY openldap-download-http "http://gd.tuwien.ac.at/infosys/network/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
     8<!ENTITY openldap-download-ftp "ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
     9<!ENTITY openldap-size "2.0 MB">
     10<!ENTITY openldap-buildsize "116 MB">
     11<!ENTITY openldap-time "7.52 SBU">
     12
     13]>
     14
    115<sect1 id="openldap" xreflabel="OpenLDAP-&openldap-version;">
    216<?dbhtml filename="openldap.html"?>
    317<title>Open<acronym>LDAP</acronym>-&openldap-version;</title>
    418
    5 &openldap-intro;
    6 &openldap-inst;
    7 &openldap-exp;
    8 &openldap-config;
    9 &openldap-desc;
     19<sect2>
     20<title>Introduction to <application>Open<acronym>LDAP</acronym></application></title>
     21
     22<para>The <application>Open<acronym>LDAP</acronym></application> package
     23provides an open source implementation of the Lightweight Directory
     24Access Protocol.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&openldap-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&openldap-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &openldap-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &openldap-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &openldap-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title><application>Open<acronym>LDAP</acronym></application> dependencies</title>
     36<sect4><title>Required</title>
     37<para><xref linkend="db"/>
     38</para></sect4>
     39<sect4><title>Optional</title>
     40<para>
     41<xref linkend="openssl"/>,
     42<xref linkend="gdbm"/>,
     43<xref linkend="tcpwrappers"/>,
     44<xref linkend="readline"/>,
     45<xref linkend="heimdal"/> or
     46<xref linkend="mitkrb"/>,  and
     47<ulink url="http://asg.web.cmu.edu/sasl/">Cyrus SASL</ulink>
     48</para></sect4>
     49</sect3>
     50
     51</sect2>
     52
     53<sect2>
     54<title>Installation of <application>Open<acronym>LDAP</acronym></application></title>
     55
     56<para>Install <application>Open<acronym>LDAP</acronym></application> by
     57running the following commands:</para>
     58
     59<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/sbin \
     60    --sysconfdir=/etc --localstatedir=/var/lib \
     61    --disable-debug --enable-ldbm &amp;&amp;
     62make depend &amp;&amp;
     63make &amp;&amp;
     64make test &amp;&amp;
     65make install</command></userinput></screen>
     66
     67</sect2>
     68
     69<sect2>
     70<title>Command explanations</title>
     71
     72<para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration file directory to
     73avoid the default of <filename class="directory">/usr/etc</filename>.</para>
     74
     75<para><parameter>--libexecdir=/usr/sbin</parameter>: Puts the server executables in
     76<filename class="directory">/usr/sbin</filename> instead of <filename
     77class="directory">/usr/libexec</filename>.</para>
     78
     79<para><option>--enable-ldbm</option>: Build <command>slapd</command>
     80with primary database back end using either <application>Berkeley
     81DB</application> or
     82<application><acronym>GNU</acronym> Database Manager</application>.</para>
     83
     84<para><option>--disable-debug</option>: Disable debugging code.</para> 
     85
     86<para><command>make test</command>: Validate correct build of the package.</para> 
     87
     88</sect2>
     89
     90<sect2>
     91<title>Configuring Open<acronym>LDAP</acronym></title>
     92
     93<sect3><title>Config files</title>
     94<para><filename>/etc/openldap/*</filename></para>
     95</sect3>
     96
     97<sect3><title>Configuration Information</title>
     98
     99<para>The only configuration needed for
     100<application>Open<acronym>LDAP</acronym></application> is
     101to run <command>ldconfig</command>. The <acronym>LDAP</acronym> server
     102can be started by <command>/usr/sbin/slapd</command> as described in
     103the man page slapd(8). You can verify that <acronym>LDAP</acronym> is
     104running with <command>ps aux</command> and you can verify access to the
     105<acronym>LDAP</acronym> server with the following command:</para>
     106<screen><userinput><command>ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts</command></userinput></screen>
     107
     108<para>The correct result is:</para>
     109<screen><computeroutput># extended LDIF
     110#
     111# LDAPv3
     112# base &lt;&gt; with scope base
     113# filter: (objectclass=*)
     114# requesting: namingContexts
     115#
     116
     117#
     118dn:
     119namingContexts: dc=my-domain,dc=com
     120
     121# search result
     122search: 2
     123result: 0 Success
     124
     125# numResponses: 2
     126# numEntries: 1</computeroutput></screen>
     127
     128<para>Kill the server with this command:</para>
     129<screen><userinput><command>kill -INT `cat /var/lib/slapd.pid`</command></userinput></screen>
     130
     131<para>You are now ready to modify the
     132<filename>/etc/openldap/slapd.conf</filename> to be specific to your
     133installation.</para>
     134
     135<para><emphasis>Utilizing <application>GDBM</application></emphasis></para>
     136
     137<para>To utilize <application>GDBM</application> as the database
     138backend, the "database" entry in <filename>/etc/openldap/slapd.conf</filename>
     139must be changed from "bdb" to "ldbm".  You can use both by creating an
     140additional database section in <filename>/etc/openldap/slapd.conf</filename>.</para>
     141
     142<para><emphasis>Securing your <acronym>LDAP</acronym> server</emphasis></para>
     143
     144<para>Significant configuration is needed for
     145<application>Open<acronym>LDAP</acronym></application> to utilize
     146security features.  The <ulink
     147url="http://www.openldap.org/doc/admin21/">OpenLDAP 2.1 Administrator's
     148Guide</ulink> is a good place to start for access control settings,
     149running as a user other than root and setting a chroot environment.</para>
     150
     151<para><emphasis>User Tools</emphasis></para>
     152
     153<para>Data can be added to the <acronym>LDAP</acronym> database via
     154<command>ldapadd</command>. There are other programs that can use
     155the database. For more information see the appropriate man page.</para>
     156
     157<para><emphasis><application>Mozilla</application> Address Directory</emphasis></para>
     158
     159<para>By default, LDAPv2 support is disabled in the
     160<filename>slapd.conf</filename> file. Once the database is properly
     161setup and <application>Mozilla</application> is configured to use the
     162directory, you must add <option>allow bind_v2</option> to the
     163<filename>slapd.conf</filename> file.</para>
     164
     165
     166</sect3>
     167
     168</sect2>
     169
     170<sect2>
     171<title>Contents</title>
     172
     173<para>The Open<acronym><acronym>LDAP</acronym></acronym> package contains
     174<command>ldapadd</command>,
     175<command>ldapcompare</command>,
     176<command>ldapdelete</command>,
     177<command>ldapmodify</command>,
     178<command>ldapmodrdn</command>,
     179<command>ldappasswd</command>,
     180<command>ldapsearch</command>,
     181<command>ldapwhoami</command>,
     182<command>slapadd</command>,
     183<command>slapcat</command>,
     184<command>slapd</command>,
     185<command>slapindex</command>,
     186<command>slappasswd</command>,
     187<command>slurpd</command>,
     188<filename class="libraryfile">liblber</filename> and
     189<filename class="libraryfile">libldap</filename>.</para>
     190
     191</sect2>
     192
     193<sect2><title>Description</title>
     194
     195<sect3><title>ldapadd</title>
     196<para><command>ldapadd</command> opens a connection to an <acronym>LDAP</acronym> server,
     197binds and adds entries.</para></sect3>
     198
     199<sect3><title>ldapcompare</title>
     200<para><command>ldapcompare</command> opens a connection to an <acronym>LDAP</acronym>
     201server, binds and performs a compare using specified
     202parameters.</para></sect3>
     203
     204<sect3><title>ldapdelete</title>
     205<para><command>ldapdelete</command> opens a connection to an <acronym>LDAP</acronym> server,
     206binds and deletes one or more entries.</para></sect3>
     207
     208<sect3><title>ldapmodify</title>
     209<para><command>ldapmodify</command> opens a connection to an <acronym>LDAP</acronym>
     210server, binds and modifies entries.</para></sect3>
     211
     212<sect3><title>ldapmodrdn</title>
     213<para><command>ldapmodrdn</command> opens a connection to an <acronym>LDAP</acronym>
     214server, binds and modifies the <acronym>RDN</acronym> of
     215entries.</para></sect3>
     216
     217<sect3><title>ldappasswd</title>
     218<para><command>ldappasswd</command> is a tool to set the password of an
     219<acronym>LDAP</acronym> user.</para></sect3>
     220
     221<sect3><title>ldapsearch</title>
     222<para><command>ldapsearch</command> opens a connection to an <acronym>LDAP</acronym>
     223server, binds and performs a search using specified
     224parameters.</para></sect3>
     225
     226<sect3><title>ldapwhoami</title>
     227<para><command>ldapwhoami</command> open a connection to an <acronym>LDAP</acronym> server,
     228binds and performs a whoami operation.</para></sect3>
     229
     230<sect3><title>slapadd</title>
     231<para><command>slapadd</command> is used to add entries specified in
     232<acronym>LDAP</acronym> Directory Interchange Format (<acronym>LDIF</acronym>) to a
     233slapd database.</para></sect3>
     234
     235<sect3><title>slapcat</title>
     236<para><command>slapcat</command> is used to generate an <acronym>LDAP</acronym>
     237<acronym>LDIF</acronym> output
     238based upon the contents of a slapd database.</para></sect3>
     239
     240<sect3><title>slapd</title>
     241<para><command>slapd</command> is the stand-alone <acronym>LDAP</acronym> server.</para></sect3>
     242
     243<sect3><title>slapindex</title>
     244<para><command>slapindex</command> is used to regenerate slapd
     245indices based upon the current contents of a database.</para></sect3>
     246
     247<sect3><title>slappasswd</title>
     248<para><command>slappasswd</command> is an Open<acronym>LDAP</acronym> password
     249utility.</para></sect3>
     250
     251<sect3><title>slurpd</title>
     252<para><command>slurpd</command> is the stand-alone
     253<acronym>LDAP</acronym> replication server.</para></sect3>
     254
     255<sect3><title>liblber and libldap</title>
     256<para>These libraries support the <acronym>LDAP</acronym> programs and provide functionality for
     257other programs interacting with <acronym>LDAP</acronym>.</para></sect3>
     258
     259</sect2>
    10260
    11261</sect1>

  • server/other/openssh.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY openssh-download-http "http://sunsite.ualberta.ca/pub/OpenBSD/OpenSSH/portable/openssh-&openssh-version;.tar.gz">
     8<!ENTITY openssh-download-ftp "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-&openssh-version;.tar.gz">
     9<!ENTITY openssh-size "799 KB">
     10<!ENTITY openssh-buildsize "37 MB">
     11<!ENTITY openssh-time "0.49 SBU">
     12
     13]>
     14
    115<sect1 id="openssh" xreflabel="OpenSSH-&openssh-version;">
    216<?dbhtml filename="openssh.html"?>
    317<title>Open<acronym>SSH</acronym>-&openssh-version;</title>
    418
    5 &openssh-intro;
    6 &openssh-inst;
    7 &openssh-exp;
    8 &openssh-config;
    9 &openssh-desc;
     19<sect2>
     20<title>Introduction to <application>Open<acronym>SSH</acronym></application></title>
     21
     22<para>The <application>Open<acronym>SSH</acronym></application> package
     23contains <command>ssh</command> clients and the <command>sshd</command> daemon.
     24This is useful for encrypting authentication and subsequent traffic over a network.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&openssh-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&openssh-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &openssh-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &openssh-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &openssh-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title><application>Open<acronym>SSH</acronym></application> dependencies</title>
     36<sect4><title>Required</title>
     37<para><xref linkend="openssl"/></para></sect4>
     38<sect4><title>Optional</title>
     39<para>
     40<xref linkend="Linux_PAM"/>,
     41<xref linkend="tcpwrappers"/>,
     42X (<xref linkend="xfree86"/> or <xref linkend="xorg"/>),
     43<xref linkend="mitkrb"/> or <xref linkend="heimdal"/>, and
     44<ulink url="http://www.opensc.org/">OpenSC</ulink>
     45</para></sect4>
     46</sect3>
     47
     48</sect2>
     49
     50<sect2>
     51<title>Installation of <application>Open<acronym>SSH</acronym></application></title>
     52
     53<para><application>Open<acronym>SSH</acronym></application> runs as two
     54processes when connecting to other
     55computers. The first process is a privileged process and controls the
     56issuance of privileges as necessary. The second process communicates
     57with the network. Additional installation steps are necessary to set up
     58the proper environment which are performed by the following
     59commands:</para>
     60
     61<screen><userinput><command>mkdir /var/empty &amp;&amp;
     62chown root:sys /var/empty &amp;&amp;
     63groupadd sshd &amp;&amp;
     64useradd -c 'sshd privsep' -d /var/empty -g sshd -s /bin/false sshd</command></userinput></screen>
     65
     66<para><application>OpenSSH</application> is very sensitive to changes in the
     67linked <application>OpenSSL</application> libraries. If you recompile
     68<application>OpenSSL</application>, <application>OpenSSH</application> may
     69fail to startup. An alternative is to link against the static <application>OpenSSL</application>
     70library. To link against the static library, execute the following command:</para>
     71
     72<screen><userinput><command>sed -i "s:-lcrypto:/usr/lib/libcrypto.a:g" configure</command></userinput></screen>
     73
     74<para>Install <application>Open<acronym>SSH</acronym></application> by running
     75the following commands:</para>
     76
     77<screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc/ssh \
     78    --libexecdir=/usr/sbin --with-md5-passwords &amp;&amp;
     79make &amp;&amp;
     80make install</command></userinput></screen>
     81
     82</sect2>
     83
     84<sect2>
     85<title>Command explanations</title>
     86
     87<para><parameter>--sysconfdir=/etc/ssh</parameter>: This prevents the
     88configuration files from going to <filename class="directory">/usr/etc</filename>.</para>
     89
     90<para><parameter>--with-md5-passwords</parameter>: This is required
     91if you made the changes recommended by the shadowpasswd_plus
     92<acronym>LFS</acronym> hint on
     93your <acronym>SSH</acronym> server when you installed the Shadow Password
     94Suite or if you access a <acronym>SSH</acronym> server that authenticates by
     95user passwords encrypted with md5. </para>
     96
     97<para><parameter>--libexecdir=/usr/sbin</parameter>:
     98<application>Open<acronym>SSH</acronym></application> installs
     99programs called by programs in <filename class="directory">/usr/libexec</filename>.
     100<command>sftp-server</command> is a <command>sshd</command>
     101utility and <command>ssh-askpass</command> is a <command>ssh-add</command>
     102utility that is installed as a link to <command>X11-ssh-askpass</command>. 
     103Both of these should go in <filename class="directory">/usr/sbin</filename>
     104not <filename class="directory">/usr/libexec</filename>.</para>
     105
     106</sect2>
     107
     108<sect2>
     109<title>Configuring <application>Open<acronym>SSH</acronym></application></title>
     110
     111<sect3><title>Config files</title>
     112
     113<para><filename>/etc/ssh/ssh_config</filename>,
     114<filename>/etc/ssh/sshd_config </filename></para>
     115<para>There are no required changes in either of these files.  However
     116you may wish to view them to make changes for appropriate security to
     117your system. Configuration information can be found in the man pages for
     118<command>sshd</command>, <command>ssh</command> and <command>ssh-agent
     119</command></para>
     120</sect3>
     121
     122<sect3><title>sshd init.d script</title>
     123
     124<para>To start the SSH Server at boot, install the <filename>/etc/rc.d/init.d/sshd</filename>
     125init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     126                                                                                                               
     127<screen><userinput><command>make install-sshd</command></userinput></screen>
     128
     129</sect3>
     130
     131</sect2>
     132
     133<sect2>
     134<title>Contents</title>
     135
     136<para>The <application>Open<acronym>SSH</acronym></application> package contains <command>ssh</command>,
     137<command>sshd</command>, <command>ssh-agent</command>,
     138<command>ssh-add</command>, <command>sftp</command>,
     139<command>scp</command>, <command>ssh-keygen</command>,
     140<command>sftp-server</command> and
     141<command>ssh-keyscan</command>.</para>
     142
     143</sect2>
     144
     145<sect2><title>Description</title>
     146
     147<sect3><title>ssh</title>
     148<para>The basic rlogin/rsh-like client program.</para></sect3>
     149
     150<sect3><title>sshd</title>
     151<para>The daemon that listens for ssh login requests.</para></sect3>
     152
     153<sect3><title>ssh-agent</title>
     154<para>An authentication agent that can store private keys.</para></sect3>
     155
     156<sect3><title>ssh-add</title>
     157<para>Tool which adds keys to the <command>ssh-agent</command>.</para></sect3>
     158
     159<sect3><title>sftp</title>
     160<para><acronym>FTP</acronym>-like program that works over
     161<acronym>SSH</acronym>1 and <acronym>SSH</acronym>2 protocols.</para></sect3>
     162
     163<sect3><title>scp</title>
     164<para>File copy program that acts like rcp.</para></sect3>
     165
     166<sect3><title>ssh-keygen</title>
     167<para>Key generation tool.</para></sect3>
     168
     169<sect3><title>sftp-server</title>
     170<para><acronym>SFTP</acronym> server subsystem.</para></sect3>
     171
     172<sect3><title>ssh-keyscan</title>
     173<para>Utility for gathering public host keys from a number of hosts.</para></sect3>
     174
     175</sect2>
    10176
    11177</sect1>

  • server/other/other.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3  "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4 <!ENTITY % general-entities SYSTEM "../../general.ent">
     5 %general-entities;
     6]>
     7
    18<chapter id="server-other">
    29<?dbhtml filename="other.html"?>
    … …  
    1017that you can analyze the risks.</para>
    1118
    12 &bind;
    13 &cvsserver;
    14 &dhcp;
    15 &leafnode;
    16 &openssh;
    17 &rsync;
    18 &openldap;
    19 &samba3;
    20 &xinetd;
     19<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="bind.xml"/>
     20<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="cvsserver.xml"/>
     21<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="dhcp.xml"/>
     22<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="leafnode.xml"/>
     23<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="openssh.xml"/>
     24<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="rsync.xml"/>
     25<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="openldap.xml"/>
     26<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="samba3.xml"/>
     27<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="xinetd.xml"/>
    2128
    2229</chapter>

  • server/other/rsync.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY rsync-download-http "http://rsync.samba.org/ftp/rsync/rsync-&rsync-version;.tar.gz">
     8<!ENTITY rsync-download-ftp "ftp://gd.tuwien.ac.at/utils/admin-tools/rsync/rsync-&rsync-version;.tar.gz">
     9<!ENTITY rsyncd-size "504 KB">
     10<!ENTITY rsync-buildsize "6.5 MB">
     11<!ENTITY rsyncd-time "0.20 SBU">
     12
     13]>
     14
    115<sect1 id="rsync" xreflabel="rsync-&rsync-version;">
    216<?dbhtml filename="rsync.html"?>
    317<title>rsync-&rsync-version;</title>
    418
    5 &rsync-intro;
    6 &rsync-inst;
    7 &rsync-config;
    8 &rsync-desc;
     19<sect2>
     20<title>Introduction to <application>rsync</application></title>
     21
     22<para>The <application>rsync</application> package contains the
     23<command>rsync</command> utility. This is useful for synchronizing large file
     24archives over a network.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&rsync-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&rsync-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &rsyncd-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &rsync-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &rsyncd-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title><application>rsync</application> dependencies</title>
     36<sect4><title>Optional</title>
     37<para>
     38<xref linkend="popt"/>
     39</para></sect4>
     40</sect3>
     41
     42</sect2>
     43
     44<sect2>
     45<title>Installation of <application>rsync</application></title>
     46
     47<para>For security reasons, running the <application>rsync</application> server as
     48an unprivileged user and group is encouraged.  Create the rsyncd user
     49and group with the following commands:</para>
     50
     51<screen><userinput><command>groupadd rsyncd &amp;&amp;
     52useradd -c rsyncd -d /home/rsync -g rsyncd -s /bin/false rsyncd</command>
     53</userinput></screen>
     54
     55<para>Install <application>rsync</application> by running the following
     56commands:</para>
     57
     58<screen><userinput><command>./configure --prefix=/usr &amp;&amp;
     59make &amp;&amp;
     60make install </command></userinput></screen>
     61
     62</sect2>
     63
     64<sect2>
     65<title>Configuring <application>rsync</application></title>
     66
     67<sect3><title>Config files</title>
     68<para><filename>/etc/rsyncd.conf</filename></para>
     69</sect3>
     70
     71<sect3><title>Configuration Information</title>
     72
     73<para>This is a simple download-only configuration. See the rsyncd man-page for
     74additional options (i.e., user authentication).</para>
     75
     76<screen><userinput><command>cat &gt; /etc/rsyncd.conf &lt;&lt; "EOF"</command>
     77# This is a basic rsync configuration file
     78# It exports a single module without user authentication.
     79
     80motd file = /home/rsync/welcome.msg
     81use chroot = yes
     82
     83[localhost]
     84    path = /home/rsync
     85    comment = Default rsync module
     86    read only = yes
     87    list = yes
     88    uid = rsyncd
     89    gid = rsyncd
     90
     91<command>EOF</command></userinput></screen>
     92</sect3>
     93
     94<sect3><title>rsyncd init.d script</title>
     95
     96<para>Note that you only want to start the <application>rsync</application>
     97server if you want to provide a <application>rsync</application> archive on
     98your machine. The <application>rsync</application> client doesn't need this
     99script to be used.</para>
     100
     101<para>Install the <filename>/etc/rc.d/init.d/rsyncd</filename>
     102init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     103                                                                                                               
     104<screen><userinput><command>make install-rsyncd</command></userinput></screen>
     105
     106</sect3>
     107
     108</sect2>
     109
     110<sect2>
     111<title>Contents</title>
     112
     113<para>The <application>rsync</application> package contains <command>rsync</command>.</para>
     114
     115</sect2>
     116
     117<sect2><title>Description</title>
     118
     119<sect3><title>rsync</title>
     120<para><application>rsync</application> is a replacement for <command>rcp
     121</command> (and <command>scp</command>) that has many more features. It
     122uses the "rsync algorithm" which provides a very fast method of syncing remote
     123files. It does this by sending just the differences in the files across the
     124link, without requiring that both sets of files are present at one end
     125of the link beforehand.</para></sect3>
     126
     127</sect2>
    9128
    10129</sect1>

  • server/other/samba3.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY samba3-download-http "http://us1.samba.org/samba/ftp/samba-&samba3-version;.tar.gz">
     8<!ENTITY samba3-download-ftp "ftp://ftp.samba.org/pub/samba/samba-&samba3-version;.tar.gz">
     9<!ENTITY samba3-size "14.4 MB">
     10<!ENTITY samba3-buildsize "123 MB">
     11<!ENTITY samba3-time "10.5 SBU">
     12
     13]>
     14
    115<sect1 id="samba3" xreflabel="Samba-&samba3-version;">
    216<?dbhtml filename="samba3.html"?>
    317<title>Samba-&samba3-version;</title>
    418
    5 &samba3-intro;
    6 &samba3-inst;
    7 &samba3-exp;
    8 &samba3-config;
    9 &samba3-desc;
     19<sect2>
     20<title>Introduction to <application>Samba</application></title>
     21
     22<para>The <application>Samba</application> package provides file and print
     23services to <acronym>SMB</acronym>/<acronym>CIFS</acronym> clients and
     24Windows networking to Linux clients.</para>
     25
     26<sect3><title>Package information</title>
     27<itemizedlist spacing='compact'>
     28<listitem><para>Download (HTTP): <ulink url="&samba3-download-http;"/></para></listitem>
     29<listitem><para>Download (FTP): <ulink url="&samba3-download-ftp;"/></para></listitem>
     30<listitem><para>Download size: &samba3-size;</para></listitem>
     31<listitem><para>Estimated Disk space required: &samba3-buildsize;</para></listitem>
     32<listitem><para>Estimated build time: &samba3-time;</para></listitem></itemizedlist>
     33</sect3>
     34
     35<sect3><title>Additional downloads</title>
     36<itemizedlist spacing='compact'>
     37<listitem><para>Maintainer Recommended patch:
     38<ulink url="&patch-root;/samba-3.0.4-maintainer.patch"/></para></listitem>
     39</itemizedlist>
     40</sect3>
     41
     42<sect3>
     43<title><application>Samba</application> dependencies</title>
     44<sect4>
     45<title>Optional</title>
     46<para>
     47<xref linkend="Linux_PAM"/>,
     48<xref linkend="readline"/>,
     49<xref linkend="openldap"/>,
     50<xref linkend="cups"/>,
     51<xref linkend="heimdal"/> or <xref linkend="mitkrb"/>,
     52<xref linkend="libxml2"/>,
     53<xref linkend="mysql"/> or <xref linkend="postgresql"/>,
     54<xref linkend="Python"/>, and
     55<ulink url="http://valgrind.kde.org/">Valgrind</ulink>
     56</para>
     57</sect4>
     58</sect3>
     59
     60</sect2>
     61
     62<sect2>
     63<title>Installation of <application>Samba</application></title>
     64
     65<para>Install <application>Samba</application> by running the following
     66commands:</para>
     67
     68<screen><userinput><command>patch -Np1 -i samba-3.0.4-maintainer.patch &amp;&amp;
     69cd source &amp;&amp;
     70install -d /var/cache/samba &amp;&amp;
     71./configure \
     72    --prefix=/usr \
     73    --sysconfdir=/etc \
     74    --localstatedir=/var \
     75    --with-piddir=/var/run \
     76    --with-fhs \
     77    --with-smbmount &amp;&amp;
     78make &amp;&amp;
     79make install &amp;&amp;
     80install -m755 nsswitch/libnss_win{s,bind}.so /lib &amp;&amp;
     81ln -sf libnss_winbind.so /lib/libnss_winbind.so.2 &amp;&amp;
     82ln -sf libnss_wins.so /lib/libnss_wins.so.2 &amp;&amp;
     83cp ../examples/smb.conf.default /etc/samba</command></userinput></screen>
     84
     85<note><para>You may want to run <command>configure</command> with the
     86<parameter>--help</parameter> parameter.  There may be other parameters
     87needed to take advantage of the optional dependencies.</para></note>
     88
     89</sect2>
     90
     91<sect2>
     92<title>Installation command explanations</title>
     93
     94<para><command>install -d /var/cache/samba</command>: This directory is
     95needed for proper operation of the <command>smbd</command> and
     96<command>nmbd</command> daemons.</para>
     97
     98<para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration
     99file directory to avoid the default of <filename class="directory">/usr/etc</filename>.</para>
     100
     101<para><parameter>--localstatedir=/var</parameter>: Sets the variable
     102data directory to avoid the default of <filename class="directory">/usr/var</filename>.</para>
     103
     104<para><option>--with-fhs</option>: Assigns all other file paths in a manner
     105compliant with the Filesystem Hierarchy Standard
     106(<acronym>FHS</acronym>).</para>
     107
     108<para><option>--with-smbmount</option>: Orders the creation of an extra
     109binary for use by the <command>mount</command> command so that mounting remote
     110<acronym>SMB</acronym> (Windows) shares becomes no more complex than mounting
     111remote <acronym>NFS</acronym> shares.</para>
     112
     113<para><command>install -m755 nsswitch/libnss_win{s,bind}.so /lib</command>:
     114The nss libraries are not installed by default.  If you intend to use
     115winbindd for domain auth, and/or <acronym>WINS</acronym> name resolution,
     116you need these libraries.</para>
     117
     118<para><command>ln -sf libnss_winbind.so /lib/libnss_winbind.so.2</command>
     119and <command>ln -sf libnss_wins.so /lib/libnss_wins.so.2</command>:
     120These symlinks are required by glibc to use the nss libraries.</para>
     121
     122<para><command>cp ../examples/smb.conf.default /etc/samba</command>:
     123This copies a default <filename>smb.conf </filename>into
     124<filename>/etc/samba</filename>.  This sample configuration will not
     125work unless edited for your site, and renamed
     126<filename>smb.conf</filename>.</para>
     127
     128</sect2>
     129
     130<sect2>
     131<title>Configuring <application>Samba</application></title>
     132
     133<para>Because of the various uses for <application>Samba</application>,
     134complete configuration is well beyond the scope of the BLFS book. 
     135In fact, many complete books have been written on this topic alone. 
     136The included documentation, a popular book published by O'Reilly,
     137can be viewed by pointing your web browser to
     138<ulink url="file:///usr/share/samba/swat/using_samba/toc.html" />.
     139</para>
     140
     141<para>The built in <acronym>SWAT</acronym> (Samba Web Administration Tool)
     142utility can be used for basic configuration, however, before
     143using <acronym>SWAT</acronym> you must add an entry to
     144<filename>/etc/services</filename> and make changes to your
     145<command>inetd</command>/<command>xinetd</command>
     146configuration.</para>
     147
     148<para>Add the swat entry to <filename>/etc/services</filename> with the
     149following command: </para>
     150
     151<screen><userinput><command>echo "swat            901/tcp" &gt;&gt; /etc/services</command></userinput></screen>
     152
     153<para>If <command>inetd</command> is used, the following command will add the
     154swat entry to <filename>/etc/inetd.conf</filename>: </para>
     155
     156<screen><userinput><command>echo "swat stream tcp nowait.400 root /usr/sbin/swat swat" \
     157    &gt;&gt; /etc/inetd.conf</command></userinput></screen>
     158<para>Issue a <command>killall -HUP inetd</command> to reread the
     159changed <filename>inetd.conf</filename> file.</para>
     160
     161<para>If <command>xinetd</command> is used, the following command will
     162add the swat entry to <filename>/etc/xinetd.conf</filename>: </para>
     163
     164<screen><userinput><command>cat &gt;&gt; /etc/xinetd.conf &lt;&lt; "EOF"</command>
     165service swat
     166{
     167    port            = 901
     168    socket_type     = stream
     169    wait            = no
     170    only_from       = 127.0.0.1
     171    user            = root
     172    server          = /usr/sbin/swat
     173    log_on_failure  += USERID
     174}
     175<command>EOF</command></userinput></screen>
     176
     177<para>Issue a <command>killall -HUP xinetd</command> to reread the
     178changed <filename>xinetd.conf</filename> file.</para>
     179
     180<para><acronym>SWAT</acronym> can be launched by pointing your web
     181browser to <ulink url="http://localhost:901"/>.</para>
     182
     183<para>For your convenience, boot scripts have been provided for
     184<application>Samba</application>.  There are two included in the
     185<xref linkend="intro-important-bootscripts"/> package.  The first,
     186<filename>samba</filename>, will start the <command>smbd</command> and
     187<command>nmbd</command> daemons needed to provide
     188<acronym>SMB</acronym>/<acronym>CIFS</acronym> services.  The second
     189script, <filename>winbind</filename>, starts the <command>winbindd</command>
     190daemon, used for providing Windows domain services to Linux clients.</para>
     191
     192<para>Install the <filename>samba</filename> script with the following
     193command:</para>
     194
     195<screen><userinput><command>make install-samba</command></userinput></screen>
     196
     197<para>If you also need the <filename>winbind</filename> script:</para>
     198
     199<screen><userinput><command>make install-winbind</command></userinput></screen>
     200
     201</sect2>
     202
     203<sect2>
     204<title>Contents</title>
     205
     206<para>The <application>Samba</application> package contains
     207<command>make_smbcodepage</command>,
     208<command>make_unicodemap</command>,
     209<command>mount.smbfs</command>,
     210<command>net</command>,
     211<command>nmbd</command>,
     212<command>nmblookup</command>,
     213<command>rpcclient</command>,
     214<command>smbcacls</command>,
     215<command>smbclient</command>,
     216<command>smbcontrol</command>,
     217<command>smbd</command>,
     218<command>smbpasswd</command>,
     219<command>smbspool</command>,
     220<command>smbstatus</command>,
     221<command>swat</command>,
     222<command>testparm</command>,
     223<command>testprns</command>,
     224<command>wbinfo</command> and
     225<command>winbindd.</command></para></sect2>
     226
     227<sect2>
     228<title>Description</title>
     229<sect3><title>make_smbcodepage</title>
     230<para><command>make_smbcodepage</command> converts text descriptions of code
     231pages to binary code page files and vice versa.</para></sect3>
     232<sect3><title>make_unicodemap</title>
     233<para><command>make_unicodemap</command> converts text Unicode map files to
     234binary, for use in mapping characters to 16 bit Unicode.</para></sect3>
     235<sect3><title>mount.smbfs</title>
     236<para><command>mount.smbfs</command> provides <command>/bin/mount</command>
     237with a way to mount remote Windows (or Samba) fileshares.</para></sect3>
     238<sect3><title>net</title>
     239<para><command>net</command> is a tool for administration of Samba and remote
     240CIFS servers, similar to the net utility for DOS/Windows.</para></sect3>
     241<sect3><title>nmbd</title>
     242<para><command>nmbd</command> is the Samba Net<acronym>BIOS</acronym> name
     243server.</para></sect3>
     244<sect3><title>nmblookup</title>
     245<para><command>nmblookup</command> is used to query
     246Net<acronym>BIOS</acronym> names and map them to <acronym>IP</acronym>
     247addresses.</para></sect3>
     248<sect3><title>rpcclient</title>
     249<para><command>rpcclient</command> is used to execute
     250MS-<acronym>RPC</acronym> client side functions.</para></sect3>
     251<sect3><title>smbcacls</title>
     252<para><command>smbcacls</command> is used to manipulate NT access control
     253lists.</para></sect3>
     254<sect3><title>smbclient</title>
     255<para><command>smbclient</command> is a <acronym>SMB</acronym>/<acronym>CIFS
     256</acronym> access utility, similar to <acronym>FTP</acronym>.</para></sect3>
     257<sect3><title>smbcontrol</title>
     258<para><command>smbcontrol</command> is used to control running <command>smbd</command>,
     259<command>nmbd</command> and <command>winbindd</command>
     260daemons.</para></sect3>
     261<sect3><title>smbd</title>
     262<para><command>smbd</command> is the main
     263<application>Samba</application> daemon.</para></sect3>
     264<sect3><title>smbpasswd</title>
     265<para><command>smbpasswd</command> changes a user's <application>Samba
     266</application> password.</para></sect3>
     267<sect3><title>smbspool</title>
     268<para><command>smbspool</command> sends a print job to an <acronym>SMB
     269</acronym> printer.</para></sect3>
     270<sect3><title>smbstatus</title>
     271<para><command>smbstatus</command> reports current
     272<application>Samba</application> connections.</para></sect3>
     273<sect3><title>swat</title>
     274<para><command>swat</command> is the Samba Web Administration Tool.</para>
     275</sect3>
     276<sect3><title>testparm</title>
     277<para><command>testparm</command> checks an <filename>smb.conf</filename> file
     278for proper syntax.</para></sect3>
     279<sect3><title>testprns</title>
     280<para><command>testprns</command> tests printer names.</para></sect3>
     281<sect3><title>wbinfo</title>
     282<para><command>wbinfo</command> queries a running <command>winbindd</command>
     283daemon.</para></sect3>
     284<sect3><title>winbindd</title>
     285<para><command>winbindd</command> resolves names from NT servers.</para></sect3>
     286</sect2>
    10287
    11288</sect1>

  • server/other/xinetd.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4  <!ENTITY % general-entities SYSTEM "../../general.ent">
     5  %general-entities;
     6
     7<!ENTITY xinetd-download-http "http://www.xinetd.org/xinetd-&xinetd-version;.tar.gz">
     8<!ENTITY xinetd-download-ftp " ">
     9<!ENTITY xinetd-size "291 KB">
     10<!ENTITY xinetd-buildsize "5.5 MB">
     11<!ENTITY xinetd-time "0.12 SBU">
     12
     13]>
     14
    115<sect1 id="xinetd" xreflabel="xinetd-&xinetd-version;">
    216<?dbhtml filename="xinetd.html"?>
    317<title>xinetd-&xinetd-version;</title>
    418
    5 &xinetd-intro;
    6 &xinetd-inst;
    7 &xinetd-config;
    8 &xinetd-desc;
     19<sect2>
     20<title>Introduction to <application>xinetd</application></title>
     21
     22<para><application>xinetd</application> is the eXtended InterNET services
     23Daemon, a secure replacement for <command>inetd</command>.</para>
     24
     25<sect3><title>Package information</title>
     26<itemizedlist spacing='compact'>
     27<listitem><para>Download (HTTP): <ulink url="&xinetd-download-http;"/></para></listitem>
     28<listitem><para>Download (FTP): <ulink url="&xinetd-download-ftp;"/></para></listitem>
     29<listitem><para>Download size: &xinetd-size;</para></listitem>
     30<listitem><para>Estimated Disk space required: &xinetd-buildsize;</para></listitem>
     31<listitem><para>Estimated build time: &xinetd-time;</para></listitem></itemizedlist>
     32</sect3>
     33
     34</sect2>
     35
     36<sect2>
     37<title>Installation of <application>xinetd</application></title>
     38
     39<para>Install <application>xinetd</application> by running the following commands:</para>
     40
     41<screen><userinput><command>./configure --prefix=/usr &amp;&amp;
     42make &amp;&amp;
     43make install</command></userinput></screen>
     44
     45</sect2>
     46
     47<sect2>
     48<title>Configuring <application>xinetd</application></title>
     49
     50<sect3><title>Config files</title>
     51
     52<para><filename>/etc/xinetd.conf</filename></para>
     53
     54</sect3>
     55
     56<sect3><title>Configuration Information</title>
     57
     58<para>Ensure the path to all daemons is <filename
     59class="directory">/usr/sbin</filename>, rather than the default path of
     60<filename class="directory">/usr/etc</filename> by running the following
     61command:</para>
     62
     63<screen><userinput><command>sed -e 's/etc/sbin/g' xinetd/sample.conf &gt; /etc/xinetd.conf</command>
     64</userinput></screen>
     65
     66<para>The format of the <filename>/etc/xinetd.conf</filename> is
     67documented in the xinetd.conf man page. Further information can be
     68found at <ulink url="http://www.xinetd.org"/>.</para>
     69
     70<para>Install the <filename>/etc/rc.d/init.d/xinetd</filename>
     71init script included in the <xref linkend="intro-important-bootscripts"/> package.</para>
     72                                                                                                               
     73<screen><userinput><command>make install-xinetd</command></userinput></screen>
     74
     75<para>Now, we'll use our new boot script to start <command>xinetd</command>: </para>
     76
     77<screen><userinput><command>/etc/rc.d/init.d/xinetd start</command></userinput></screen>
     78
     79<para>Checking the <filename>/var/log/daemon.log</filename> file
     80should prove quite entertaining. This file may contain entries
     81similar to the following:</para>
     82
     83<screen><userinput>Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rlogind is not
     84executable [line=29]
     85Aug 22 21:40:21 dps10 xinetd[2696]: Error parsing attribute server -
     86DISABLING SERVICE [line=29]
     87Aug 22 21:40:21 dps10 xinetd[2696]: Server /usr/sbin/in.rshd is not
     88executable [line=42]</userinput></screen>
     89
     90<para>These errors are because most of the
     91servers <command>xinetd</command> is trying to control are not installed yet.</para>
     92
     93</sect3>
     94
     95</sect2>
     96
     97<sect2>
     98<title>Contents</title>
     99
     100<para>The <application>xinetd</application> package contains
     101<command>xinetd</command>,
     102<command>itox</command> and
     103<command>xconv.pl</command>.</para></sect2>
     104
     105<sect2><title>Description</title>
     106
     107<sect3><title>xinetd</title>
     108<para><command>xinetd</command> is the Internet services daemon.</para></sect3>
     109
     110<sect3><title>itox</title>
     111<para><command>itox</command> is a utility used for converting
     112<filename>inetd.conf</filename> files to
     113<filename>xinetd.conf</filename> format.</para></sect3>
     114
     115<sect3><title>xconv.pl</title>
     116<para><command>xconv.pl</command> is a <application>Perl</application> script used for converting
     117<filename>inetd.conf</filename> files to <filename>xinetd.conf</filename>
     118format, similar to <command>itox</command>.</para></sect3>
     119
     120</sect2>
    9121
    10122</sect1>

  • server/server.xml

    r08254fc r0931098  
     1<?xml version="1.0" encoding="ISO-8859-1"?>
     2<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
     3  "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
     4 <!ENTITY % general-entities SYSTEM "../general.ent">
     5 %general-entities;
     6]>
     7
    18<part id="server" xreflabel="Server Networking">
    29<?dbhtml filename="server.html" dir="server"?>
    310<title>Server Networking</title>
    411
    5 &server-mail;
    6 &server-other;
     12<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="mail/mail.xml"/>
     13<xi:include xmlns:xi="http://www.w3.org/2003/XInclude" href="other/other.xml"/>
    714
    815</part>
Note: See TracChangeset for help on using the changeset viewer.