SUSE LINUX Enterprise Server – Installation and Administration
 SUSE LINUX Enterprise Server
IntroductionNext

SUSE LINUX Enterprise Server

Installation and Administration

AuthorsStefan Behlert, Frank Bodammer, Stefan Dirsch, Olaf Donjak, Roman Drahtmüller, Torsten Duwe, Thorsten Dubiel, Thomas Fehr, Stefan Fent, Werner Fink, Kurt Garloff, Carsten Groß, Joachim Gleißner, Andreas Grünbacher, Franz Hassels, Andreas Jaeger, Klaus Kämpf, Hubert Mantel, Lars Marowsky-Bree, Johannes Meixner, Lars Müller, Matthias Nagorni, Anas Nashif, Siegfried Olschner, Peter Pöml, Thomas Renninger, Heiko Rommel, Marcus Schäfer, Nicolaus Schüler, Klaus Singvogel, Hendrik Vogelsang, Klaus G. Wagner, Rebecca Walter, Christian Zoz
EditorsJörg Arndt, Antje Faber, Berthold Gunreben, Roland Haidl, Jana Jaeger, Edith Parzefall, Ines Pozo, Thomas Rölz, Thomas Schraitle, Rebecca Walter
TranslatorsOlaf Niepolt, Daniel Pisano
Legal Notice

Table of Contents

Introduction
1. Organization of the Manual
2. Conventions and Abbreviations
3. Target Audience
I. Installation
1. Installation with YaST
1.1. S/390, zSeries: System Start-up for Installation
1.2. System Start-up for Installation
1.3. The Boot Screen
1.4. Language Selection
1.5. S/390, zSeries: Hard Disk Configuration
1.6. Installation Mode
1.7. Installation Suggestion
1.8. Finishing the Installation
1.9. Hardware Configuration
1.10. Graphical Login
2. YaST — Configuration
2.1. Starting YaST
2.2. The YaST Control Center
2.3. Software
2.4. Hardware
2.5. Network Devices
2.6. Network Services
2.7. Security and Users
2.8. System
2.9. Miscellaneous
2.10. YaST in Text Mode (ncurses)
3. Special Installation Procedures
3.1. linuxrc
3.2. Installation with VNC
3.3. Text-Based Installation with YaST
3.4. Starting SUSE LINUX
3.5. Special Installation Procedures
3.6. Tips and Tricks
3.7. ATAPI CD-ROM Hangs while Reading
3.8. Assigning Permanent Device File Names to SCSI Devices
3.9. Partitioning for Experts
3.10. LVM Configuration
3.11. Soft RAID
3.12. Mass Storage via IP Networks — iSCSI
4. Central Software Installation and Update
4.1. Setting up a Central Installation Server
4.2. Managing Software Updates with the YOU Server
4.3. Booting from the Network
5. Updating the System and Package Management
5.1. Updating SUSE LINUX
5.2. Software Changes from Version to Version
5.3. RPM — the Package Manager
6. System Repair
6.1. Starting YaST System Repair
6.2. Automatic Repair
6.3. User-Defined Repair
6.4. Expert Tools
6.5. S/390, zSeries: Using initrd as a Rescue System
II. System
7. 32-Bit and 64-Bit Applications in a 64-Bit System Environment
7.1. Runtime Support
7.2. Software Development
7.3. Software Compilation on Biarch Platforms
7.4. Kernel Specifications
8. Booting and Boot Managers
8.1. Booting a PC
8.2. Boot Concepts
8.3. Map Files, GRUB, and LILO
8.4. Booting with GRUB
8.5. Booting with LILO
8.6. Configuring the Boot Loader with YaST
8.7. Uninstalling the Linux Boot Loader
8.8. Creating Boot CDs
8.9. S/390, zSeries: The Boot Loader ZIPL
9. The Linux Kernel
9.1. Kernel Update
9.2. Kernel Sources
9.3. Kernel Configuration
9.4. Kernel Modules
9.5. Settings in the Kernel Configuration
9.6. Compiling the Kernel
9.7. Installing the Kernel
9.8. Cleaning Your Hard Disk after Compilation
10. Special Features of SUSE LINUX
10.1. Linux Standards
10.2. Hints on Special Software Packages
10.3. Booting with the Initial RAM Disk
10.4. The SUSE Rescue System
10.5. Virtual Consoles
10.6. Keyboard Mapping
10.7. Local Adjustments — I18N and L10N
11. The SUSE LINUX Boot Concept
11.1. The init Program
11.2. Runlevels
11.3. Changing Runlevels
11.4. Init Scripts
11.5. The YaST Runlevel Editor
11.6. SuSEconfig and /etc/sysconfig
11.7. The YaST sysconfig Editor
12. The X Window System
12.1. Optimizing the X Configuration
12.2. Installing and Configuring Fonts
12.3. OpenGL — 3D Configuration
13. Printer Operation
13.1. Updating, Upgrading, and Migrating the Print System
13.2. Preparation and Other Considerations
13.3. Methods and Protocols for Connecting Printers
13.4. Installing the Software
13.5. Configuring the Printer
13.6. Special Features in SUSE LINUX
13.7. Printer Hardware
14. The Hotplug System
14.1. Devices and Interfaces
14.2. Hotplug Events
14.3. Hotplug Agents
14.4. Automatic Module Loading
14.5. Network Devices and Interface Designations
14.6. Hotplug with PCI
14.7. Coldplug
14.8. Error Analysis
15. Dynamic Device Nodes with udev
15.1. Creating Rules
15.2. Automization with NAME and SYMLINK
15.3. Regular Expressions in Keys
15.4. Key Selection
15.5. Consistent Names for Mass Storage Devices
16. Linux on Mobile Devices
16.1. PCMCIA
16.2. SCPM — System Configuration Profile Management
16.3. IrDA — Infrared Data Association
16.4. Bluetooth — Wireless Connections
17. Power Management
17.1. Power Saving Functions
17.2. APM
17.3. ACPI
17.4. Rest for the Hard Disk
17.5. powersave
17.6. The YaST Power Management Module
17.7. WOL — Wake on LAN
18. File Systems in Linux
18.1. Glossary
18.2. Major File Systems in Linux
18.3. Some Other Supported File Systems
18.4. Large File Support in Linux
18.5. For More Information
19. High Availability under Linux
19.1. Important Terms
19.2. A Sample Minimum Scenario
19.3. Components of a High Availability Solution
19.4. The Software Side of High Availability
19.5. Clustering
19.6. For More Information
20. PAM — Pluggable Authentication Modules
20.1. Structure of a PAM Configuration File
20.2. The PAM Configuration of sshd
20.3. Configuration of PAM Modules
20.4. For More Information
III. Services
21. Linux in the Network
21.1. TCP/IP — The Protocol Used by Linux
21.2. IPv6 — The Next Generation Internet
21.3. Manual Network Configuration
21.4. Network Integration
21.5. Routing in SUSE LINUX
21.6. SLP Services in the Network
21.7. DNS — Domain Name System
21.8. LDAP — A Directory Service
21.9. NIS — Network Information Service
21.10. NFS — Shared File Systems
21.11. DHCP
21.12. Time Synchronization with xntp
22. The Apache Web Server
22.1. Basics
22.2. Setting up the HTTP Server with YaST
22.3. Apache Modules
22.4. New Features of Apache 2
22.5. Threads
22.6. Installation
22.7. Configuration
22.8. Using Apache
22.9. Active Contents
22.10. Virtual Hosts
22.11. Security
22.12. Troubleshooting
22.13. For More Information
23. File Synchronization
23.1. Available Data Synchronization Software
23.2. Determining Factors for Selecting a Program
23.3. Introduction to Unison
23.4. Introduction to CVS
23.5. Introduction to Subversion
23.6. Introduction to rsync
23.7. Introduction to mailsync
24. Heterogenous Networks
24.1. Samba
24.2. Netatalk
25. Internet
25.1. smpppd as Dial-up Assistant
25.2. Configuring an ADSL or T-DSL Connection
25.3. Proxy Server: Squid
26. Security in the Network
26.1. X.509 Certification with YaST
26.2. VPN with SUSE LINUX
26.3. Masquerading and Firewalls
26.4. SSH — Secure Shell, the Safe Alternative
26.5. Network Authentication — Kerberos
26.6. Installing and Administering Kerberos
26.7. Security and Confidentiality
IV. Administration
27. Access Control Lists in Linux
27.1. Advantages of ACLs
27.2. Definitions
27.3. Handling ACLs
27.4. Support by Applications
28. System Monitoring Utilities
28.1. List of Open Files: lsof
28.2. User Accessing Files: fuser
28.3. File Properties: stat
28.4. Processes: top
28.5. Process List: ps
28.6. Process Tree: pstree
28.7. Who Is Doing What: w
28.8. Memory Usage: free
28.9. Kernel Ring Buffer: dmesg
28.10. File Systems and Their Usage: mount, df, and du
28.11. The /proc File System
28.12. procinfo
28.13. PCI Resources: lspci
28.14. System Calls of a Program Run: strace
28.15. Library Calls of a Program Run: ltrace
28.16. Specifying the Required Library: ldd
28.17. Interprocess Communication: ipcs
V. Appendix
A. Information Sources and Documentation
A.1. SUSE Documentation
A.2. The Linux Documentation Project (TLDP)
A.3. Man Pages and Info Pages
A.4. Standards and Specifications
B. Manual Page of e2fsck
C. Manual Page of reiserfsck
D. The GNU General Public License
D.1. GNU General Public License
D.2. GNU General, Public License
Bibliography
Index

List of Figures

1.1. The Boot Screen
1.2. Selecting the Language
1.3. S/390, zSeries: Selecting a DASD
1.4. S/390, zSeries: Activating a DASD
1.5. S/390, zSeries: Overview of Available ZFCP Disks
1.6. Selecting the Installation Mode
1.7. Suggestion Window
1.8. Selecting the Mouse Type
1.9. Editing the Partitioning Setup
1.10. Selecting the Hard Disk
1.11. The YaST Partitioner in Expert Mode
1.12. Possible Options for Windows Partitions
1.13. Resizing the Windows Partition
1.14. Installing and Removing Software with the YaST Package Manager
1.15. Selecting the Time Zone
1.16. Setting the root Password
1.17. Configuring the Network Devices
1.18. Testing the Internet Connection
1.19. Proposed Setup for Network Services
1.20. User Authentication
1.21. NIS Client Configuration
1.22. Entering the User Name and Password
1.23. Configuring the System Components
1.24. The Login Screen
2.1. The YaST Control Center
2.2. Change Installation Source
2.3. YaST Online Update
2.4. YaST Package Manager
2.5. Conflict Management of the Package Manager
2.6. Suggestion Dialog for Updates
2.7. Update Options
2.8. Printer Setup with YaST2: Selecting the Model
2.9. The Main Window of SaX2
2.10. Monitor Selection
2.11. Selecting the Graphics Card
2.12. Configuring the Resolution
2.13. Configuring the Virtual Resolution
2.14. Adjusting the Image Geometry
2.15. Displaying Hardware Information
2.16. User Administration
2.17. Group Administration
2.18. Security Settings
2.19. Start Window of the Restore Module
2.20. Creating a Boot, Rescue, or Module Disk
2.21. Submitting a Support Request
2.22. Main Window of YaST in Text Mode
2.23. The Software Installation Module
3.1. Selecting the Language
3.2. The linuxrc Main Menu
3.3. System Information
3.4. Loading Modules
3.5. Selecting SCSI Drivers
3.6. Entering Parameters for a Module
3.7. The linuxrc Installation Menu
3.8. Selecting the Source Medium in linuxrc
3.9. Activating LVM during Installation
3.10. YaST: LVM Partitioner
3.11. Adding a Volume Group
3.12. Partition List
3.13. Logical Volume Management
3.14. Creating Logical Volumes
4.1. YaST Installation Server: Selecting the Server Type
4.2. YaST Installation Server: Overview of Installation Sources
4.3. The YOU Server
5.1. Updating the Software
6.1. Selecting the YaST System Repair Utility
6.2. Automatic Repair Mode
8.1. Configuring the Boot Loader with YaST
10.1. Source Medium for the Rescue System
10.2. Network Protocols
11.1. YaST: Runlevel Editor
11.2. System Configuration Using the sysconfig Editor
17.1. YaST Power Management: Scheme Selection
17.2. YaST Power Management: Overview of Existing Schemes
17.3. YaST Power Management: Adding a Scheme
17.4. YaST Power Management: Battery Charge Level
17.5. YaST Power Management: ACPI Settings
19.1. A Simple High Availability Cluster
21.1. Simplified Layer Model for TCP/IP
21.2. TCP/IP Ethernet Packet
21.3. Configuration of the Network Card
21.4. Modem Configuration
21.5. DSL Configuration
21.6. T-DSL Configuration (Germany)
21.7. ISDN Configuration
21.8. ISDN Interface Configuration
21.9. DNS Server Installation: Forwarder Settings
21.10. DNS Server Installation: Finish Wizard
21.11. DNS Server: Logging
21.12. DNS Server: DNS Zones
21.13. DNS Server: Slave Zone Editor
21.14. DNS Server: Zone Editor (Basic)
21.15. DNS Server: Zone Editor (SOA)
21.16. Structure of an LDAP Directory
21.17. YaST OpenLDAP Server Configuration: Log Level
21.18. YaST OpenLDAP Server Configuration: Allow
21.19. YaST OpenLDAP Server Configuration: TLS
21.20. YaST OpenLDAP Server Configuration: Selecting a Certificate
21.21. YaST OpenLDAP Server Configuration: Importing a Certificate
21.22. YaST OpenLDAP Server Configuration: Available Databases
21.23. YaST OpenLDAP Server Configuration: New Database
21.24. YaST OpenLDAP Server Configuration: Editing a Database
21.25. YaST: Configuration of the LDAP Client
21.26. YaST: Advanced Configuration
21.27. YaST: Module Configuration
21.28. YaST: Changing Attributes in the Module Configuration
21.29. YaST: Creating a New Module
21.30. YaST: Configuration of an Object Template
21.31. YaST: Additional LDAP Settings
21.32. YaST: NIS Server Configuration Tool
21.33. YaST: Changing the Directory and Synchronizing Files for a NIS Server
21.34. YaST: Setting Request Permissions for a NIS Server
21.35. Setting Domain and Address of NIS Server
21.36. NFS Client Configuration with YaST
21.37. NFS Server Configuration Tool
21.38. Configuring an NFS Server with YaST
21.39. DHCP Server: Selecting the Network Interface
21.40. DHCP Server: Host Management
21.41. DHCP Server: Chroot Jail and Declarations
21.42. DHCP Server: Selecting a Declaration Type
21.43. DHCP Server: Configuring Subnets
24.1. Samba Configuration — Start Up
24.2. Samba Configuration — Shares
24.3. Samba Configuration — Identity
24.4. Samba Configuration — Trusted Domains
26.1. YaST CA module — Basic Data for a Root CA
26.2. YaST CA module - using CA
26.3. Certificates of a CA
26.4. YaST CA Module — Extended Settings
26.5. YaST VPN Module — Overview
26.6. YaST VPN Module — Connection Settings
26.7. iptables: A Packet's Possible Paths
27.1. Minimum ACL: ACL Entries Compared to Permission Bits
27.2. Extended ACL: ACL Entries Compared to Permission Bits

List of Tables

2.1. AccessX — Operating the Mouse with the Numeric Keypad
5.1. Comparison POSIX 1992 vs. POSIX 2001
5.2. The Most Important RPM Query Options
5.3. RPM Verify Options
10.1. ulimit: Setting Resources for the User
11.1. Available Runlevels
11.2. Possible init Script Options
12.1. Sections in /etc/X11/XF86Config
12.2. Parameters of fc-list
12.3. Supported 3D Hardware
18.1. File System Types in Linux
18.2. Maximum Sizes of File Systems (On-Disk Format)
21.1. Several Protocols in the TCP/IP Protocol Family
21.2. Specific Addresses
21.3. Private IP Address Domains
21.4. Various IPv6 Prefixes
21.5. Parameters for /etc/host.conf
21.6. Databases Available via /etc/nsswitch.conf
21.7. Configuration Options for NSS Databases
21.8. Some Start-up Scripts for Network Programs
21.9. Commonly Used Object Classes and Attributes
21.10. User Groups and Their Access Grants
21.11. Types of Access
21.12. Permissions for Exported File System
23.1. Features of the File Synchronization Tools: -- = very poor, - = poor or not available, o = medium, + = good, ++ = excellent, x = available
26.1. X.509v3 Certificate
26.2. X.509 Certificate Revocation List (CRL)
26.3. Passwords during LDAP Export
27.1. ACL Entry Types
27.2. Masking Access Permissions

List of Examples

1.1. /etc/fstab: Partition Data
3.1. Example df Output
5.1. List with df -h
5.2. rpm -q -i wget
5.3. Script to Search for Packages
6.1. Output for No Network Adapter Selected
6.2. Loading DASD Modules
6.3. Output of the Mount Command
6.4. chroot to the Mounted File System
6.5. Installing the IPL Record with zipl
6.6. Unmounting the File System
8.1. Sample Configuration of /etc/lilo.conf
8.2. Output after Launching LILO
8.3. /etc/zipl.conf
10.1. Example of an Entry in /etc/crontab
10.2. Example for /etc/logrotate.conf
10.3. ulimit: Settings in ~/.bashrc
10.4. Example /etc/fstab
11.1. A Minimal INIT INFO Block
12.1. Screen Section of the File /etc/X11/XF86Config
13.1. /etc/modprobe.conf: Interrupt Mode for the First Parallel Port
13.2. Error Message from the lpd
13.3. Broadcast from the CUPS Network Server
16.1. The File /boot/grub/menu.lst
16.2. File /etc/lilo.conf
16.3. Output of irdadump
20.1. PAM Configuration for sshd
20.2. pam_unix2.conf
20.3. pam_env.conf
20.4. pam_pwcheck.conf
21.1. How an IP Address is Written
21.2. Linking IP Addresses to the Netmask
21.3. Sample IPv6 Address
21.4. IPv6 Address Specifying the Prefix Length
21.5. /etc/resolv.conf
21.6. /etc/hosts
21.7. /etc/networks
21.8. /etc/host.conf
21.9. /etc/nsswitch.conf
21.10. Forwarding Options in named.conf
21.11. A Basic /etc/named.conf
21.12. Entry to Disable Logging
21.13. Zone Entry for my-domain.de
21.14. Zone Entry for other-domain.de
21.15. File /var/lib/named/world.zone
21.16. Reverse Lookup
21.17. Excerpt from schema.core (line numbering for explanatory reasons)
21.18. slapd.conf: Include Directive for Schemes
21.19. slapd.conf: pidfile and argsfile
21.20. slapd.conf: Access Control
21.21. slapd.conf: Example for Access Control
21.22. slapd.conf: Database-Specific Directives
21.23. Example for an LDIF File
21.24. ldapadd with example.ldif
21.25. LDIF Data for Tux
21.26. Modified LDIF File tux.ldif
21.27. pam_unix2.conf Adapted to LDAP
21.28. Adaptations in nsswitch.conf
21.29. /etc/exports
21.30. The Configuration File /etc/dhcpd.conf
21.31. Additions to the Configuration File
24.1. A CD-ROM Share
24.2. homes Share
24.3. Global Section in smb.conf
24.4. Setting up a Machine Account
24.5. Automated Setup of a Machine Account
25.1. Firewall Configuration: Option 15
25.2. Access Rules
25.3. Access Rules
 IntroductionNext