openSUSE

Reference

Legal Notice

Contents

About This Guide
1. Feedback
2. Additional Documentation
3. Documentation Conventions
4. About the Making of This Manual
5. Source Code
6. Acknowledgment
I. Advanced Deployment Scenarios
1. Remote Installation
1.1. Installation Scenarios for Remote Installation
1.2. Setting Up the Server Holding the Installation Sources
1.3. Preparing the Boot of the Target System
1.4. Booting the Target System for Installation
1.5. Monitoring the Installation Process
2. Advanced Disk Setup
2.1. Using the YaST Partitioner
2.2. LVM Configuration
2.3. Soft RAID Configuration
II. Administration
3. Online Update
3.1. YaST Online Update
3.2. Software Updater
3.3. Update from the Command Line with rug
3.4. Update from the Command Line with zypper
4. YaST in Text Mode
4.1. Navigation in Modules
4.2. Restriction of Key Combinations
4.3. YaST Command Line Options
5. Updating the System and System Changes
5.1. Updating the System
5.2. Software Changes from Version to Version
6. RPM—the Package Manager
6.1. Verifying Package Authenticity
6.2. Managing Packages: Install, Update, and Uninstall
6.3. RPM and Patches
6.4. Delta RPM Packages
6.5. RPM Queries
6.6. Installing and Compiling Source Packages
6.7. Compiling RPM Packages with build
6.8. Tools for RPM Archives and the RPM Database
7. Printer Operation
7.1. Workflow of the Printing System
7.2. Methods and Protocols for Connecting Printers
7.3. Installing the Software
7.4. Network Printers
7.5. Graphical Printing Interfaces
7.6. Printing from the Command Line
7.7. Special Features in openSUSE
7.8. Troubleshooting
8. The X Window System
8.1. Manually Configuring the X Window System
8.2. Installing and Configuring Fonts
8.3. For More Information
9. FreeNX: Remotely Controlling Another Computer
9.1. Getting Started with NX
9.2. Advanced FreeNX Configuration
9.3. Troubleshooting
9.4. For More Information
10. Virtual Machine Server
10.1. System Requirements
10.2. Benefits of Virtual Machines
10.3. Terminology
10.4. Virtual Machine Modes
10.5. Virtual Machine Server
10.6. Setting up the Virtual Machine Server
10.7. Creating Virtual Machines
10.8. Managing Virtual Machines
11. System Monitoring Utilities
11.1. Debugging
11.2. Files and File Systems
11.3. Hardware Information
11.4. Networking
11.5. The /proc File System
11.6. Processes
11.7. System Information
11.8. User Information
11.9. Time and Date
III. System
12. 32-Bit and 64-Bit Applications in a 64-Bit System Environment
12.1. Runtime Support
12.2. Software Development
12.3. Software Compilation on Biarch Platforms
12.4. Kernel Specifications
13. Booting and Configuring a Linux System
13.1. The Linux Boot Process
13.2. The init Process
13.3. System Configuration via /etc/sysconfig
14. The Boot Loader
14.1. Selecting a Boot Loader
14.2. Booting with GRUB
14.3. Configuring the Boot Loader with YaST
14.4. Uninstalling the Linux Boot Loader
14.5. Creating Boot CDs
14.6. The Graphical SUSE Screen
14.7. Troubleshooting
14.8. For More Information
15. Special System Features
15.1. Information about Special Software Packages
15.2. Virtual Consoles
15.3. Keyboard Mapping
15.4. Language and Country-Specific Settings
16. Dynamic Kernel Device Management with udev
16.1. The /dev Directory
16.2. Kernel uevents and udev
16.3. Drivers, Kernel Modules, and Devices
16.4. Booting and Initial Device Setup
16.5. Debugging udev Events
16.6. Influencing Kernel Device Event Handling with udev Rules
16.7. Persistent Device Naming
16.8. The Replaced hotplug Package
16.9. For More Information
17. File Systems in Linux
17.1. Terminology
17.2. Major File Systems in Linux
17.3. Some Other Supported File Systems
17.4. Large File Support in Linux
17.5. For More Information
18. Access Control Lists in Linux
18.1. Traditional File Permissions
18.2. Advantages of ACLs
18.3. Definitions
18.4. Handling ACLs
18.5. ACL Support in Applications
18.6. For More Information
19. Authentication with PAM
19.1. Structure of a PAM Configuration File
19.2. The PAM Configuration of sshd
19.3. Configuration of PAM Modules
19.4. For More Information
20. Working with the Shell
20.1. Using the Bash Shell
20.2. Users and Access Permissions
20.3. Important Linux Commands
20.4. The vi Editor
IV. Services
21. Basic Networking
21.1. IP Addresses and Routing
21.2. IPv6—The Next Generation Internet
21.3. Name Resolution
21.4. Configuring a Network Connection with YaST
21.5. Managing Network Connections with NetworkManager
21.6. Configuring a Network Connection Manually
21.7. smpppd as Dial-up Assistant
22. SLP Services in the Network
22.1. Installation
22.2. Activating SLP
22.3. SLP Front-Ends in openSUSE
22.4. Installation over SLP
22.5. Providing Services via SLP
22.6. For More Information
23. The Domain Name System
23.1. DNS Terminology
23.2. Installation
23.3. Configuration with YaST
23.4. Starting the Name Server BIND
23.5. The Configuration File /etc/named.conf
23.6. Zone Files
23.7. Dynamic Update of Zone Data
23.8. Secure Transactions
23.9. DNS Security
23.10. For More Information
24. DHCP
24.1. Configuring a DHCP Server with YaST
24.2. DHCP Software Packages
24.3. The DHCP Server dhcpd
24.4. For More Information
25. Time Synchronization with NTP
25.1. Configuring an NTP Client with YaST
25.2. Configuring xntp in the Network
25.3. Setting Up a Local Reference Clock
26. Using NIS
26.1. Configuring NIS Clients
27. LDAP—A Directory Service
27.1. LDAP versus NIS
27.2. Structure of an LDAP Directory Tree
27.3. Server Configuration with slapd.conf
27.4. Data Handling in the LDAP Directory
27.5. Configuring an LDAP Server with YaST
27.6. Configuring an LDAP Client with YaST
27.7. Configuring LDAP Users and Groups in YaST
27.8. Browsing the LDAP Directory Tree
27.9. For More Information
28. Active Directory Support
28.1. Integrating Linux and AD Environments
28.2. Background Information for Linux AD Support
28.3. Configuring a Linux Client for Active Directory
28.4. Logging In to an AD Domain
28.5. Changing Passwords
29. Sharing File Systems with NFS
29.1. Installation
29.2. Importing File Systems with YaST
29.3. Importing File Systems Manually
29.4. Exporting File Systems with YaST
29.5. Exporting File Systems Manually
29.6. For More Information
30. Samba
30.1. Terminology
30.2. Installation
30.3. Starting and Stopping Samba
30.4. Configuring a Samba Server
30.5. Configuring Clients
30.6. Samba as Login Server
30.7. For More Information
31. The Proxy Server Squid
31.1. Some Facts about Proxy Caches
31.2. System Requirements
31.3. Starting Squid
31.4. The Configuration File /etc/squid/squid.conf
31.5. Configuring a Transparent Proxy
31.6. cachemgr.cgi
31.7. squidGuard
31.8. Cache Report Generation with Calamaris
31.9. For More Information
32. The Apache HTTP Server
32.1. Quick Start
32.2. Configuring Apache
32.3. Starting and Stopping Apache
32.4. Installing, Activating, and Configuring Modules
32.5. Getting CGI Scripts to Work
32.6. Setting Up a Secure Web Server with SSL
32.7. Avoiding Security Problems
32.8. Troubleshooting
32.9. For More Information
V. Mobility
33. PCMCIA
33.1. Controlling PCMCIA Cards Using pccardctl
33.2. PCMCIA in Detail
33.3. Troubleshooting
34. System Configuration Profile Management
34.1. Terminology
34.2. Setting Up SCPM
34.3. Configuring SCPM Using a Graphical User Interface
34.4. Configuring SCPM Using the Command Line
34.5. Troubleshooting
34.6. For More Information
35. Power Management
35.1. Power Saving Functions
35.2. APM
35.3. ACPI
35.4. Rest for the Hard Disk
35.5. The powersave Package
36. Wireless Communication
36.1. Wireless LAN
36.2. Bluetooth
36.3. Infrared Data Transmission
VI. Security
37. Masquerading and Firewalls
37.1. Packet Filtering with iptables
37.2. Masquerading Basics
37.3. Firewalling Basics
37.4. SuSEfirewall2
37.5. For More Information
38. SSH: Secure Network Operations
38.1. The OpenSSH Package
38.2. The ssh Program
38.3. scp—Secure Copy
38.4. sftp—Secure File Transfer
38.5. The SSH Daemon (sshd)—Server-Side
38.6. SSH Authentication Mechanisms
38.7. X, Authentication, and Forwarding Mechanisms
39. Managing X.509 Certification
39.1. The Principles of Digital Certification
39.2. YaST Modules for CA Management
40. Encrypting Partitions and Files
40.1. Setting Up a Crypto File System with YaST
40.2. Using vi to Encrypt Single Files
41. Confining Privileges with AppArmor
41.1. Installing Novell AppArmor
41.2. Enabling and Disabling Novell AppArmor
41.3. Getting Started with Profiling Applications
42. Security and Confidentiality
42.1. Local Security and Network Security
42.2. Some General Security Tips and Tricks
42.3. Using the Central Security Reporting Address
A. GNU Licenses
A.1. GNU General Public License
A.2. GNU Free Documentation License
Index

List of Figures

2.1. The YaST Partitioner
2.2. Physical Partitioning versus LVM
2.3. Creating a Volume Group
2.4. Physical Volume Setup
2.5. Logical Volume Management
2.6. Creating Logical Volumes
2.7. RAID Partitions
2.8. File System Settings
3.1. YaST Online Update
3.2. Selecting the Software Updates
4.1. Main Window of YaST in Text Mode
4.2. The Software Installation Module
10.1. Virtual Machine Server and Device Drivers
10.2. VM Device Drivers
10.3. VM Server and Virtual Machines
13.1. System Services (Runlevel)
13.2. System Configuration Using the sysconfig Editor
14.1. Boot Loader Settings
18.1. Minimum ACL: ACL Entries Compared to Permission Bits
18.2. Extended ACL: ACL Entries Compared to Permission Bits
20.1. Example of a Bash Terminal Window
21.1. Simplified Layer Model for TCP/IP
21.2. TCP/IP Ethernet Packet
21.3. Configuring a Network Card
21.4. Modem Configuration
21.5. ISDN Configuration
21.6. ISDN Interface Configuration
21.7. DSL Configuration
23.1. DNS Server Installation: Forwarder Settings
23.2. DNS Server Installation: DNS Zones
23.3. DNS Server Installation: Finish Wizard
23.4. DNS Server: Logging
23.5. DNS Server: Slave Zone Editor
23.6. DNS Server: Zone Editor (NS Records)
23.7. DNS Server: Zone Editor (MX Records)
23.8. DNS Server: Zone Editor (SOA)
24.1. DHCP Server: Card Selection
24.2. DHCP Server: Global Settings
24.3. DHCP Server: Dynamic DHCP
24.4. DHCP Server: Start-Up
25.1. YaST: Configuring an NTP Client
25.2. YaST: Complex NTP Configuration
26.1. Setting Domain and Address of a NIS Server
27.1. Structure of an LDAP Directory
27.2. YaST LDAP Server Configuration
27.3. YaST: Configuration of the LDAP Client
27.4. YaST: Advanced Configuration
27.5. YaST: Module Configuration
27.6. YaST: Configuration of an Object Template
27.7. YaST: Additional LDAP Settings
27.8. Browsing the LDAP Directory Tree
27.9. Browsing the Entry Data
28.1. Active Directory Authentication Schema
28.2. Determining Windows Domain Membership
28.3. Providing Administrator Credentials
29.1. NFS Client Configuration with YaST
29.2. NFS Server Configuration Tool
29.3. Configuring an NFS Server with YaST
32.1. HTTP Server Wizard: Default Host
32.2. HTTP Server Wizard: Summary
32.3. HTTP Server Configuration: Listen Ports and Addresses
32.4. HTTP Server Configuration: Server Modules
34.1. YaST: Basic SCPM Configuration
34.2. YaST: Configure SCPM Users
34.3. Configuring Resource Groups
36.1. YaST: Configuring the Wireless Network Card
36.2. YaST Bluetooth Configuration
37.1. iptables: A Packet's Possible Paths
37.2. The YaST Firewall Configuration
39.1. YaST CA Module—Basic Data for a Root CA
39.2. YaST CA Module—Using a CA
39.3. Certificates of a CA
39.4. YaST CA Module—Extended Settings

List of Tables

1.1. F Keys During Installation
1.2. Installation (Boot) Scenarios Used in This Chapter
5.1. Commands
5.2. Log Files in /var/log
5.3. Split Configuration Files in /etc/sysconfig/powersave
5.4. Wrapper
5.5. Backup Files
6.1. The Most Important RPM Query Options
6.2. RPM Verify Options
8.1. Sections in /etc/X11/xorg.conf
8.2. Parameters of fc-list
10.1. Tasks and Commands for Managing Virtual Machines
10.2. Changing Viewer Preferences
13.1. Available Runlevels
13.2. Possible init Script Options
15.1. ulimit: Setting Resources for the User
17.1. File System Types in Linux
17.2. Maximum Sizes of File Systems (On-Disk Format)
18.1. ACL Entry Types
18.2. Masking Access Permissions
20.1. Overview of a Standard Directory Tree
20.2. Simple Commands of the vi Editor
21.1. Several Protocols in the TCP/IP Protocol Family
21.2. Specific Addresses
21.3. Private IP Address Domains
21.4. Various IPv6 Prefixes
21.5. Manual Network Configuration Scripts
21.6. Parameters for /etc/host.conf
21.7. Databases Available via /etc/nsswitch.conf
21.8. Configuration Options for NSS “Databases
21.9. Some Start-Up Scripts for Network Programs
27.1. Commonly Used Object Classes and Attributes
27.2. User Groups and Their Access Grants
27.3. Types of Access
29.1. Permissions for Exported File System
36.1. Overview of Various WLAN Standards
39.1. X.509v3 Certificate
39.2. X.509 Certificate Revocation List (CRL)
39.3. Passwords during LDAP Export

List of Examples

2.1. /etc/fstab: Partition Data
5.1. List with df -h
6.1. rpm -q -i wget
6.2. Script to Search for Packages
7.1. /etc/modprobe.conf: Interrupt Mode for the First Parallel Port
7.2. Error Message from the lpd
7.3. Broadcast from the CUPS Network Server
8.1. Screen Section of the File /etc/X11/xorg.conf
13.1. A Minimal INIT INFO Block
15.1. Entry in /etc/crontab
15.2. /etc/crontab: Remove Time Stamp Files
15.3. Example for /etc/logrotate.conf
15.4. ulimit: Settings in ~/.bashrc
19.1. PAM Configuration for sshd
19.2. Default Configuration for the auth Section
19.3. Default Configuration for the account Section
19.4. Default Configuration for the password Section
19.5. Default Configuration for the session Section
19.6. pam_env.conf
20.1. Sample Output Showing File Permissions
20.2. Sample Output Showing Directory Permissions
21.1. Writing IP Addresses
21.2. Linking IP Addresses to the Netmask
21.3. Sample IPv6 Address
21.4. IPv6 Address Specifying the Prefix Length
21.5. /etc/resolv.conf
21.6. /etc/hosts
21.7. /etc/networks
21.8. /etc/host.conf
21.9. /etc/nsswitch.conf
21.10. Output of the Command ping
21.11. Output of the ifconfig Command
21.12. Output of the route -n Command
23.1. Forwarding Options in named.conf
23.2. A Basic /etc/named.conf
23.3. Entry to Disable Logging
23.4. Zone Entry for my-domain.de
23.5. Zone Entry for other-domain.de
23.6. File /var/lib/named/world.zone
23.7. Reverse Lookup
24.1. The Configuration File /etc/dhcpd.conf
24.2. Additions to the Configuration File
27.1. Excerpt from schema.core
27.2. slapd.conf: Include Directive for Schemes
27.3. slapd.conf: pidfile and argsfile
27.4. slapd.conf: Access Control
27.5. slapd.conf: Example for Access Control
27.6. slapd.conf: Database-Specific Directives
27.7. Example for an LDIF File
27.8. ldapadd with example.ldif
27.9. LDIF Data for Tux
27.10. Modified LDIF File tux.ldif
27.11. pam_unix2.conf Adapted to LDAP
27.12. Adaptations in nsswitch.conf
29.1. /etc/exports
30.1. A CD-ROM Share
30.2. homes Share
30.3. Global Section in smb.conf
30.4. Setting Up a Machine Account
30.5. Automated Setup of a Machine Account
31.1. Firewall Configuration: Option 15
31.2. Access Rules
31.3. Access Rules
32.1. Variations of Name-Based VirtualHost Entries
32.2. Name-Based VirtualHost Directives
32.3. IP-Based VirtualHost Directives
32.4. Basic VirtualHost Configuration
32.5. VirtualHost CGI Configuration
36.1. Output of irdadump
41.1. Output of aa-unconfined