Ubuntu Server Guide Ubuntu Server Guide Copyright © 2016 Contributors to the Document

Total Page:16

File Type:pdf, Size:1020Kb

Ubuntu Server Guide Ubuntu Server Guide Copyright © 2016 Contributors to the Document Ubuntu Server Guide Ubuntu Server Guide Copyright © 2016 Contributors to the document Abstract Welcome to the Ubuntu Server Guide! It contains information on how to install and configure various server applications on your Ubuntu system to fit your needs. It is a step-by-step, task-oriented guide for configuring and customizing your system. Credits and License This document is maintained by the Ubuntu documentation team (https://wiki.ubuntu.com/DocumentationTeam). A list of contributors is below. This document is made available under the Creative Commons ShareAlike 3.0 License (CC-BY-SA). You are free to modify, extend, and improve the Ubuntu documentation source code under the terms of this license. All derivative works must be released under this license. This documentation is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER. A copy of the license is available here: Creative Commons ShareAlike License1. Contributors to this document are: • Members of the Ubuntu Documentation Project2 • Members of the Ubuntu Server Team3 • Contributors to the Community Help Wiki4 • Other contributors can be found in the revision history of the serverguide5 and ubuntu-docs6 bzr branches available on Launchpad. 1 https://creativecommons.org/licenses/by-sa/3.0/ 2 https://launchpad.net/~ubuntu-core-doc 3 https://launchpad.net/~ubuntu-server 4 https://help.ubuntu.com/community/ 5 https://bazaar.launchpad.net/~ubuntu-core-doc/serverguide/trunk/changes 6 https://bazaar.launchpad.net/~ubuntu-core-doc/ubuntu-docs/trunk/changes Table of Contents 1. Introduction ........................................................................................................................................ 1 1. Support ...................................................................................................................................... 2 2. Installation .......................................................................................................................................... 3 1. Preparing to Install ..................................................................................................................... 4 2. Installation .................................................................................................................................. 6 3. Upgrading .................................................................................................................................. 9 4. Advanced Installation ................................................................................................................ 10 5. Kernel Crash Dump .................................................................................................................. 19 3. Package Management ........................................................................................................................ 25 1. Introduction .............................................................................................................................. 26 2. dpkg ......................................................................................................................................... 27 3. Apt ........................................................................................................................................... 28 4. Aptitude ................................................................................................................................... 30 5. Automatic Updates ................................................................................................................... 32 6. Configuration ............................................................................................................................ 34 7. References ................................................................................................................................ 36 4. Networking ....................................................................................................................................... 37 1. Network Configuration .............................................................................................................. 38 2. TCP/IP ..................................................................................................................................... 47 3. Dynamic Host Configuration Protocol (DHCP) .......................................................................... 51 4. Time Synchronisation with NTP ................................................................................................ 54 5. Data Plane Development Kit ..................................................................................................... 57 5. DM-Multipath ................................................................................................................................... 72 1. Device Mapper Multipathing ..................................................................................................... 73 2. Multipath Devices ..................................................................................................................... 76 3. Setting up DM-Multipath Overview ........................................................................................... 79 4. The DM-Multipath Configuration File ....................................................................................... 83 5. DM-Multipath Administration and Troubleshooting .................................................................... 95 6. Remote Administration .................................................................................................................... 100 1. OpenSSH Server ..................................................................................................................... 101 2. Puppet .................................................................................................................................... 104 3. Zentyal ................................................................................................................................... 107 7. Network Authentication ................................................................................................................... 111 1. OpenLDAP Server .................................................................................................................. 112 2. Samba and LDAP ................................................................................................................... 137 3. Kerberos ................................................................................................................................. 143 4. Kerberos and LDAP ................................................................................................................ 151 5. SSSD and Active Directory ..................................................................................................... 158 8. Domain Name Service (DNS) ......................................................................................................... 163 1. Installation .............................................................................................................................. 164 iii Ubuntu Server Guide 2. Configuration .......................................................................................................................... 165 3. Troubleshooting ...................................................................................................................... 171 4. References .............................................................................................................................. 175 9. Security .......................................................................................................................................... 176 1. User Management ................................................................................................................... 177 2. Console Security ..................................................................................................................... 183 3. Firewall .................................................................................................................................. 184 4. AppArmor .............................................................................................................................. 191 5. Certificates ............................................................................................................................. 195 6. eCryptfs .................................................................................................................................. 200 10. Monitoring .................................................................................................................................... 202 1. Overview ................................................................................................................................ 203 2. Nagios .................................................................................................................................... 204 3. Munin ..................................................................................................................................... 208 11. Web Servers ................................................................................................................................. 210
Recommended publications
  • Zentyal, El Servidor Linux Para Pymes
    Zentyal, el servidor Linux para PYMEs Olvide las tareas complejas y repetiti- Zentyal es un servidor Linux para PYMEs, la alternativa en software libre a Windows Small vas para el manejo Business Server. Basado en Ubuntu, Zentyal permite administrar todos los servicios de una red informática, tales como el acceso a Internet, la seguridad y la infraestructura de la red, los de su red informática recursos compartidos o las comunicaciones, a través de una única plataforma. Todas estas funcionalidades están estrechamente integradas, automatizando la mayoría de las tareas y ahorrando tiempo en la administración de sistemas. El código abierto está ampliamente difundido Características clave Zentyal es un software de código abierto, el cual se puede descargar libremente de Internet. Gestiona fácilmente toda la infraestructura TIC de una Actualmente, existen decenas de miles de implantaciones en todo el mundo, superando las PYME 30.000 descargas mensuales y con una comunidad de unos 2.500 colaboradores activos. Igualmente, Zentyal (antes conocido como eBox Platform) es parte integral de la distribución Acceso al correo de la empresa Ubuntu desde 2008, lo que ayuda a aumentar su difusión y credibilidad como producto tec- desde el celular, el portátil o la nológico. Su uso está extendido a prácticamente todos los países del globo, siendo Estados web independientemente de su Unidos, Alemania, España, Italia y Brasil los países que cuentan con más instalaciones. Zentyal ubicación se usa principalmente en PYMEs, pero también en otros entornos como
    [Show full text]
  • Müller Docs Documentation Versão 0.0.1
    Müller Docs Documentation Versão 0.0.1 Müller Fernandes da Silva 27 September, 2015 Conteúdo 1 Fontes 3 1.1 Table of Contents.............................................3 1.2 Indices and tables............................................ 231 1.3 Conteúdo Pendente............................................ 231 Bibliografia 235 i ii Müller Docs Documentation, Versão 0.0.1 Bem vindo à minha base de documentação. Na busca por um método de anotar os conheci- mentos necessários para minhas atividades do dia-a-dia me deparei com o trabalho feito pelo ‘Ops School<(http://www.opsschool.org/en/latest/>‘_ e comecei a alterá-lo para satisfazer minhas necessidades. Conteúdo 1 Müller Docs Documentation, Versão 0.0.1 2 Conteúdo CAPÍTULO 1 Fontes • Fork de Ops School • Este projeto é escrito em reStructuredText • Hospedado em Read the Docs • Compilado pelo sistema de documentação Sphinx no Travis CI 1.1 Table of Contents 1.1.1 Tecnologia da informação Active Directory 101 What is Active Directory? Active Directory is a Directory Service created by Microsoft. It is included with most Windows Server operating systems. Almost all Active Directory installations actually include several separate but related components; although the term “Active Directory” technically refers only to the directory service, in general use it refers to the entire constellation of parts. What is Active Directory used for? Active Directory is primarily used to store directory objects (like users and groups) and their attributes and relati- onships to one another. These objects are most commonly used to control access to various resources; for instance, an Active Directory might contain a group which grants its members permission to log into a certain server, or to print to a specific printer, or even to perform administrative tasks on the directory itself.
    [Show full text]
  • Fira Code: Monospaced Font with Programming Ligatures
    Personal Open source Business Explore Pricing Blog Support This repository Sign in Sign up tonsky / FiraCode Watch 282 Star 9,014 Fork 255 Code Issues 74 Pull requests 1 Projects 0 Wiki Pulse Graphs Monospaced font with programming ligatures 145 commits 1 branch 15 releases 32 contributors OFL-1.1 master New pull request Find file Clone or download lf- committed with tonsky Add mintty to the ligatures-unsupported list (#284) Latest commit d7dbc2d 16 days ago distr Version 1.203 (added `__`, closes #120) a month ago showcases Version 1.203 (added `__`, closes #120) a month ago .gitignore - Removed `!!!` `???` `;;;` `&&&` `|||` `=~` (closes #167) `~~~` `%%%` 3 months ago FiraCode.glyphs Version 1.203 (added `__`, closes #120) a month ago LICENSE version 0.6 a year ago README.md Add mintty to the ligatures-unsupported list (#284) 16 days ago gen_calt.clj Removed `/**` `**/` and disabled ligatures for `/*/` `*/*` sequences … 2 months ago release.sh removed Retina weight from webfonts 3 months ago README.md Fira Code: monospaced font with programming ligatures Problem Programmers use a lot of symbols, often encoded with several characters. For the human brain, sequences like -> , <= or := are single logical tokens, even if they take two or three characters on the screen. Your eye spends a non-zero amount of energy to scan, parse and join multiple characters into a single logical one. Ideally, all programming languages should be designed with full-fledged Unicode symbols for operators, but that’s not the case yet. Solution Download v1.203 · How to install · News & updates Fira Code is an extension of the Fira Mono font containing a set of ligatures for common programming multi-character combinations.
    [Show full text]
  • Informational Internet Relay
    Network Working Group C. Kalt Request for Comments: 2813 April 2000 Updates: 1459 Category: Informational Internet Relay Chat: Server Protocol Status of this Memo This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. Copyright Notice Copyright (C) The Internet Society (2000). All Rights Reserved. Abstract While based on the client-server model, the IRC (Internet Relay Chat) protocol allows servers to connect to each other effectively forming a network. This document defines the protocol used by servers to talk to each other. It was originally a superset of the client protocol but has evolved differently. First formally documented in May 1993 as part of RFC 1459 [IRC], most of the changes brought since then can be found in this document as development was focused on making the protocol scale better. Better scalability has allowed existing world-wide networks to keep growing and reach sizes which defy the old specification. Kalt Informational [Page 1] RFC 2813 Internet Relay Chat: Server Protocol April 2000 Table of Contents 1. Introduction ............................................... 3 2. Global database ............................................ 3 2.1 Servers ................................................ 3 2.2 Clients ................................................ 4 2.2.1 Users ............................................. 4 2.2.2 Services .......................................... 4 2.3 Channels ..............................................
    [Show full text]
  • Licensing Information User Manual Release 9.0 Revision 1.2
    Oracle SD-WAN Edge Licensing Information User Manual Release 9.0 Revision 1.2 October 2020 Licensing Information User Manual Oracle SD-WAN Edge 8.2 Oracle SD-WAN Edge Licensing Information ser !an"al# Release 9.0 Copyright Information $o%yrig't ( 2020# Oracle and)or its a*liates. All rig'ts reser+ed. ,'is soft-are and related doc"mentation are %rovided "nder a license agreement containing restrictions on "se and disclosure and are %rotected by intellect"al %ro%ert& la-s. E.ce%t as e.%ressly %ermitted in &o"r license agreement or allo-ed by la-# &o" may not "se# co%&# re%rod"ce# translate# broadcast# modif&# license# transmit# distrib"te# e.'ibit# %erform# %"blish# or display any %art# in any form# or by any means. Re+erse engineering# disassembl&# or decom%ilation of t'is soft-are# "nless re/"ired by la- for intero%erabilit&# is %ro'ibited. ,'e information contained 'erein is sub0ect to change -it'o"t notice and is not -arranted to be error-free. If &o" find any errors, %lease re%ort t'em to "s in -riting. If t'is is soft-are or related documentation t'at is deli+ered to t'e .S. 2o+ernment or an&one licensing it on be'alf of t'e .S. 2o+ernment# t'en t'e follo-ing notice is a%%licable3 .S. 2O4ERN!EN, END SERS3 Oracle %rograms, incl"ding any o%erating s&stem# integrated soft-are# any %rograms installed on t'e 'ard-are# and)or documentation# deli+ered to .S.
    [Show full text]
  • SPARTAN ILY Fee Hikes May Stop KEEPING FIT and EDUCATED
    VOLUME 108, NO. 88 TUESDAY MAY 6. 1 9 9 7 INSIDE * INSIDE a IS ell Spirit of friendship goes 4,#..sk The Offspring gives its.. w leehi beyond competition dose of alternative rock(---' Page 5 1" -V-- Page 8 Ma Ser San Jose State University Since 1 93 .1 SPARTAN ILY Fee hikes may stop KEEPING FIT AND EDUCATED By Dennis Knight said Ducheny, the chair of the Spartan Daily Stuff Write, Assembly Budget Committee, in a press release. "Not only would AB 01 pay Students who are tired 1318 hold the line on fee hikes for at California ing exorbitant fees die rest of the decade, but it would soon find relief if universities may give working families the opportu- Act of the College Affordability nity to plan and save for their chil- the 1997 makes its way through dren's education." State Assembly. Besides freezing fees until the Written by Assemblywoman turn of the century, AB 1318 (D - Denise Moreno Ducheny would limit student fee increases Vista), the bill, known as Chula after the year 2000 to no more AB 1318. would freeze student fees than the rise in personal income University, in the t ..difornia State from the prior year. The bill would California and University of also express the intent of the legis- College California Community lature to financially support public the year 2000. systems until colleges based on growth in enroll- continues in the spirit "This act ment and personal income, accord- 1960 in mak- of the Master Plan of ing to Ducheny. as essible ing our public colleges Currently, the cost for students by laying out a rational and pre- dictable policy for student lees," See Fees, page 5 It's standing room only in the Washington Square Hall let, ture room as author Anne Lamott speaks to SJSU students Friday afternoon.
    [Show full text]
  • Guida a Ubuntu Server
    Capitolo 6. Amministrazione remota Ci sono diversi modi per amministrare un server Linux da remoto; questa sezione illustra due dei metodi più comuni, come OpenSSH e Puppet. 81 Amministrazione remota 1. Server OpenSSH 1.1. Introduzione Questa sezione della Guida a Ubuntu server introduce una serie di potenti strumenti per il controllo remoto di computer e per il trasferimento di dati tra i computer in rete chiamata OpenSSH. Vengono spiegate alcune delle possibili impostazioni dell'applicazione server OpenSSH e come modificarne la configurazione in Ubuntu. OpenSSH è una versione libera della famiglia di protocolli e strumenti SSH (Secure SHell) per il controllo remoto di un computer o per il trasferimento di file tra computer. Gli strumenti tradizionali usati per svolgere queste funzioni, come telnet o rcp, sono insicuri e quando utilizzati trasmettono la password dell'utente in chiaro. OpenSSH fornisce un demone server e degli strumenti lato client per facilitare operazioni di controllo remoto e trasferimento di file in sicurezza e con crittografia, sostituendo in modo completo gli strumenti tradizionali. Il componente server di OpenSSH, sshd, è in ascolto continuo per le connessioni in arrivo dei client, qualunque sia lo strumento usato sui client. Quando avviene una richiesta di connessione, per mezzo di sshd viene impostata la corretta connessione in base allo strumento utilizzato dal client. Per esempio, se il computer remoto sta effettuando una connessione con l'applicazione client ssh, il server OpenSSH imposta, dopo l'autenticazione, una sessione di controllo remoto. Se un utente remoto si connette a un server OpenSSH con scp, il demone server OpenSSH inizializza, dopo l'autenticazione, una procedura di copia sicura di file tra il server e il client.
    [Show full text]
  • Ubuntu: Unleashed 2017 Edition
    Matthew Helmke with Andrew Hudson and Paul Hudson Ubuntu UNLEASHED 2017 Edition 800 East 96th Street, Indianapolis, Indiana 46240 USA Ubuntu Unleashed 2017 Edition Editor-in-Chief Copyright © 2017 by Pearson Education, Inc. Mark Taub All rights reserved. Printed in the United States of America. This publication is protected Acquisitions Editor by copyright, and permission must be obtained from the publisher prior to any prohib- Debra Williams ited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise. For information Cauley regarding permissions, request forms and the appropriate contacts within the Pearson Managing Editor Education Global Rights & Permissions Department, please visit www.pearsoned.com/ permissions/. Sandra Schroeder Many of the designations used by manufacturers and sellers to distinguish their Project Editor products are claimed as trademarks. Where those designations appear in this book, and Lori Lyons the publisher was aware of a trademark claim, the designations have been printed with initial capital letters or in all capitals. Production Manager The author and publisher have taken care in the preparation of this book, but make Dhayanidhi no expressed or implied warranty of any kind and assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in Proofreader connection with or arising out of the use of the information or programs contained Sasirekha herein. Technical Editor For information about buying this title in bulk quantities, or for special sales opportunities (which may include electronic versions; custom cover designs; and content José Antonio Rey particular to your business, training goals, marketing focus, or branding interests), Editorial Assistant please contact our corporate sales department at [email protected] or (800) 382-3419.
    [Show full text]
  • Ubuntu Server Guide Basic Installation Preparing to Install
    Ubuntu Server Guide Welcome to the Ubuntu Server Guide! This site includes information on using Ubuntu Server for the latest LTS release, Ubuntu 20.04 LTS (Focal Fossa). For an offline version as well as versions for previous releases see below. Improving the Documentation If you find any errors or have suggestions for improvements to pages, please use the link at thebottomof each topic titled: “Help improve this document in the forum.” This link will take you to the Server Discourse forum for the specific page you are viewing. There you can share your comments or let us know aboutbugs with any page. PDFs and Previous Releases Below are links to the previous Ubuntu Server release server guides as well as an offline copy of the current version of this site: Ubuntu 20.04 LTS (Focal Fossa): PDF Ubuntu 18.04 LTS (Bionic Beaver): Web and PDF Ubuntu 16.04 LTS (Xenial Xerus): Web and PDF Support There are a couple of different ways that the Ubuntu Server edition is supported: commercial support and community support. The main commercial support (and development funding) is available from Canonical, Ltd. They supply reasonably- priced support contracts on a per desktop or per-server basis. For more information see the Ubuntu Advantage page. Community support is also provided by dedicated individuals and companies that wish to make Ubuntu the best distribution possible. Support is provided through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The large amount of information available can be overwhelming, but a good search engine query can usually provide an answer to your questions.
    [Show full text]
  • Ubuntu Server Guide Ubuntu Server Guide Copyright © 2010 Canonical Ltd
    Ubuntu Server Guide Ubuntu Server Guide Copyright © 2010 Canonical Ltd. and members of the Ubuntu Documentation Project3 Abstract Welcome to the Ubuntu Server Guide! It contains information on how to install and configure various server applications on your Ubuntu system to fit your needs. It is a step-by-step, task-oriented guide for configuring and customizing your system. Credits and License This document is maintained by the Ubuntu documentation team (https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see the contributors page1 This document is made available under the Creative Commons ShareAlike 2.5 License (CC-BY-SA). You are free to modify, extend, and improve the Ubuntu documentation source code under the terms of this license. All derivative works must be released under this license. This documentation is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER. A copy of the license is available here: Creative Commons ShareAlike License2. 3 https://launchpad.net/~ubuntu-core-doc 1 ../../libs/C/contributors.xml 2 /usr/share/ubuntu-docs/libs/C/ccbysa.xml Table of Contents 1. Introduction ........................................................................................................................... 1 1. Support .......................................................................................................................... 2 2. Installation ............................................................................................................................
    [Show full text]
  • Munin Documentation Release 2.999.10-Detached-2018-12-16-C13-G47debb5
    Munin Documentation Release 2.999.10-detached-2018-12-16-c13-g47debb5 The Munin project and its contributors Dec 16, 2018 Contents 1 Preface 3 1.1 What is Munin ?...........................................3 1.2 Conventions.............................................3 1.3 Further Information.........................................3 1.4 Bug Reporting Guidelines......................................6 1.5 Documenting Munin.........................................7 2 Tutorial 11 2.1 Getting Started............................................ 11 2.2 Wildcard Plugins........................................... 13 2.3 Using SNMP plugins......................................... 14 2.4 Let Munin croak alarm........................................ 15 2.5 Munin and Nagios.......................................... 20 2.6 Advanced Features.......................................... 24 2.7 Extraordinary Usage......................................... 25 2.8 Monitoring the “unreachable” hosts................................. 25 2.9 Troubleshooting........................................... 28 3 Munin’s Architecture 35 3.1 Overview............................................... 35 3.2 Components............................................. 36 3.3 Protocols............................................... 60 3.4 Syntax................................................ 62 3.5 API.................................................. 64 4 Munin Installation 65 4.1 Prerequisites............................................. 65 4.2 Installing Munin..........................................
    [Show full text]
  • Instalacion Juju
    Universidad Nacional de Quilmes Laboratorio de Sistemas Operativos y Redes Trabajo Práctico JUJU - UBUNTU Elaborado: Gabriel Angel Garcia Descripción del proyecto: Juju (antes Ensemble ) es una herramienta de gestión de implementacion de servicios desarrollada por Canonical Ltd. Es un proyecto de software libre presentado en Launchpad y liberado bajo la licencia pública general de Affero (AGPL). Juju se concentra en la noción del servicio, abstrayendo la noción de la máquina o el servidor, y define las relaciones entre aquellos servicios que son actualizados automáticamente cuando dos servicios relacionados observan una modificación notable. Esto permite subir o bajar escaladamente los servicios a través de la llamada de un simple comando. Por ejemplo, un servicio web denominado Charm , que tiene una relación establecida con un equilibrador de carga, puede subirse horizontalmente con una simple orden de "añadir unidad" sin tener que preocuparse de volver a configurar el equilibrador de carga para declarar las nuevas instancias: las relaciones basadas en eventos del Charm se encargan de eso. Los Charms de Juju pueden ser escritos en cualquier lenguaje ejecutable. Relevamiento de características de la maquina utilizada: Procesador: Pentium Dual Core E5300 Ram: 2 GB Disco Rigido: 200 GB Relevamiento de sistema operativo y software utilizado y/o necesario: Ubuntu 16.04 JUJU Charms: son conjuntos de scripts para desplegar y administrar servicios. Con el manejo de eventos integrado, pueden declarar interfaces que encajan con otros servicios, por lo que pueden formarse relaciones. LXD: es un hypervisor (plataforma que permite aplicar diversas técnicas de control de virtualización) para contenedores Linux desarrollado por Canonical Ltd. Es un complemento para los contenedores de Linux (LXC) que facilita su uso y añade nuevas posibilidades.
    [Show full text]