mirror of https://github.com/tLDP/LDP
updated
This commit is contained in:
parent
a6d280a356
commit
9dde100ba7
|
@ -1379,7 +1379,7 @@ How to convert an XFree86 modeline into an XInside/XiGraphics one. </Para>
|
|||
XFree-Local-multi-user-HOWTO</ULink>,
|
||||
<CiteTitle>XFree local multi-user HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: June 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: July 2003</CiteTitle>.
|
||||
Explains the shortest way to get a working multiple local X user-capable
|
||||
PC system. </Para>
|
||||
</ListItem>
|
||||
|
|
|
@ -827,7 +827,7 @@ partition images to and from a TFTP server. </Para>
|
|||
Cluster-HOWTO</ULink>,
|
||||
<CiteTitle>Linux Cluster HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: March 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: June 2003</CiteTitle>.
|
||||
How to set up high-performance Linux computing clusters. </Para>
|
||||
</ListItem>
|
||||
|
||||
|
@ -3857,7 +3857,7 @@ RTLinux Installation and writing realtime programs in Linux. </Para>
|
|||
Samba-Authenticated-Gateway-HOWTO</ULink>,
|
||||
<CiteTitle>Samba Authenticated Gateway HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: May 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: July 2003</CiteTitle>.
|
||||
How to build a Firewall/Gateway with
|
||||
rules set on user basis having the users authenticated by a Samba
|
||||
Primary Domain Controller. </Para>
|
||||
|
@ -5124,7 +5124,7 @@ version of the X Window System (X11R6) for Linux systems. </Para>
|
|||
XFree-Local-multi-user-HOWTO</ULink>,
|
||||
<CiteTitle>XFree local multi-user HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: June 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: July 2003</CiteTitle>.
|
||||
Explains the shortest way to get a working multiple local X user-capable
|
||||
PC system. </Para>
|
||||
</ListItem>
|
||||
|
|
|
@ -101,7 +101,7 @@ various issues related to this. </Para>
|
|||
Cluster-HOWTO</ULink>,
|
||||
<CiteTitle>Linux Cluster HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: March 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: June 2003</CiteTitle>.
|
||||
How to set up high-performance Linux computing clusters. </Para>
|
||||
</ListItem>
|
||||
|
||||
|
|
|
@ -1068,7 +1068,7 @@ chains software for Linux, and some ideas on how you might use them. </Para>
|
|||
Samba-Authenticated-Gateway-HOWTO</ULink>,
|
||||
<CiteTitle>Samba Authenticated Gateway HOWTO</CiteTitle>
|
||||
</Para><Para>
|
||||
<CiteTitle>Updated: May 2003</CiteTitle>.
|
||||
<CiteTitle>Updated: July 2003</CiteTitle>.
|
||||
How to build a Firewall/Gateway with
|
||||
rules set on user basis having the users authenticated by a Samba
|
||||
Primary Domain Controller. </Para>
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
<?xml version="1.0" encoding="ISO-8859-1"?>
|
||||
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
|
||||
"http://docbook.org/xml/4.2/docbookx.dtd" []>
|
||||
"http://www.docbook.org/xml/4.2/docbookx.dtd" []>
|
||||
|
||||
<book id="index">
|
||||
<bookinfo>
|
||||
|
@ -14,9 +14,16 @@
|
|||
<address><email>galia (at) st-peter.stw.uni-erlangen.de</email></address>
|
||||
</affiliation>
|
||||
</author>
|
||||
<pubdate>Jun 2003</pubdate>
|
||||
<pubdate>Jul 2003</pubdate>
|
||||
<!-- Most recent revision goes at the top; list in descending order -->
|
||||
<revhistory>
|
||||
<revision>
|
||||
<revnumber>1.1.0</revnumber>
|
||||
<date>2003-07-14</date>
|
||||
<authorinitials>SS</authorinitials>
|
||||
<revremark> sync input agent with examples, a bit more about ruby, less Fix-Me's, additions to video compatibility</revremark>
|
||||
</revision>
|
||||
<!--
|
||||
<revision>
|
||||
<revnumber>1.0.3</revnumber>
|
||||
<date>2003-06-25</date>
|
||||
|
@ -35,6 +42,7 @@
|
|||
<authorinitials>SS</authorinitials>
|
||||
<revremark>more on "XFree with evdev support", reorganise a bit, resolve most of the FIX-ME's</revremark>
|
||||
</revision>
|
||||
-->
|
||||
<revision>
|
||||
<revnumber>1.0</revnumber>
|
||||
<date>2003-05-13</date>
|
||||
|
@ -1941,7 +1949,7 @@ exit 0
|
|||
</sect1>
|
||||
<sect1 id="first_x_server">
|
||||
<title>1st X server configuration file</title>
|
||||
<para>A small part of the Mandrake init scripts (you can append it to yours if you are missing something similar):</para>
|
||||
<para>A small part of the Mandrake init scripts <filename>/etc/rc.d/rc.sysinit</filename> (you can append it to yours if you are missing something similar):</para>
|
||||
<programlisting>
|
||||
-----------------------------------------------------------------------------------
|
||||
# (pixel) a kind of profile for XF86Config
|
||||
|
@ -2226,7 +2234,7 @@ if [ $MACHINE = ppc -o $MACHINE = ppc64 ]; then
|
|||
<para><emphasis>Nvidia cards</emphasis></para>
|
||||
<para>Riva TNT (PCI+PCI+AGP)</para>
|
||||
<para>Riva TNT2 M64 (pci)(nvidia) + Riva TNT2 M64 (pci)(nvidia)</para>
|
||||
<para>Nvidia GeForce2MX(PCI)+GeForce2MX(PCI)+GeForce2MX(PCI)+GeForce2MX(PCI)</para>
|
||||
<para>Nvidia GeForce2MX(PCI) + GeForce2MX(PCI) + GeForce2MX(PCI) + GeForce2MX(PCI)</para>
|
||||
<para></para>
|
||||
<para><emphasis>Works fine. DRI + Nvidia GLX works too.</emphasis></para>
|
||||
<para></para>
|
||||
|
@ -2239,19 +2247,22 @@ if [ $MACHINE = ppc -o $MACHINE = ppc64 ]; then
|
|||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>Generally the X server driving the AGP card has to be started first.</para>
|
||||
<para>This can be acomplished by manually starting X or using gdm as desktop manager. You'll have to abstain from using xdm or kdm, as they start the X servers at the same time.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>AGP sever restart leads to system crashes. In <filename>gdm.conf</filename>, set <option>AlwaysRestartServer=false</option>.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>The new X server patch (XFree-4.3-prefbusid) fixes most of the problems.</para>
|
||||
<para>The first and the last combination are reported to work without major problems with XFree86-prefbusid.</para>
|
||||
<para>The new X server patch (XFree-4.3-prefbusid) fixes most of the problems. In case the X servers are started in the right order there are no lock ups.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
<para>Nvidia GeForce4MX440(AGP)+TNT2M64(PCI)+TNT2M64(PCI)</para>
|
||||
<para>Matrox MGAG400(AGP)+Matrox MGA1064SG[Mystique]PCI</para>
|
||||
<para>Matrox MGAG550DH(AGP)+Riva TNTM64(PCI)</para>
|
||||
<para>Matrox MGAG550DH(AGP)+Geforce4 420(PCI)</para>
|
||||
<para>Nvidia TNT2(AGP) + Matrox Mystique(PCI)</para>
|
||||
<para>Nvidia TNT2(AGP) + S3 VIRGE/DX(PCI)</para>
|
||||
<para>Nvidia GeForce4MX440(AGP) + TNT2M64(PCI) + TNT2M64(PCI)</para>
|
||||
<para>Matrox MGAG400(AGP) + Matrox MGA1064SG[Mystique]PCI</para>
|
||||
<para>Matrox MGAG450DH(AGP) + ATI Mach 64(PCI) </para>
|
||||
<para>Matrox MGAG550DH(AGP) + Riva TNT2-M64(PCI)</para>
|
||||
<para>Matrox MGAG550DH(AGP) + Geforce4 420(PCI)</para>
|
||||
</sect1>
|
||||
</appendix>
|
||||
<appendix id="examples">
|
||||
|
@ -3577,12 +3588,13 @@ setup_event ()
|
|||
if [ `echo "$PHYS" | grep $PHYS_PATTERN 2>/dev/null` ]; then
|
||||
case $ACTION in
|
||||
add)
|
||||
rm -f $SYM_LINK
|
||||
ln -s /dev/input/$DEV_EVENT $SYM_LINK
|
||||
cd /dev/input
|
||||
rm -f $SYM_LINK
|
||||
ln -s $DEV_EVENT $SYM_LINK
|
||||
debug_mesg "Input event device $NAME on $PHYS linked to $SYM_LINK"
|
||||
;;
|
||||
remove)
|
||||
rm -f $SYM_LINK
|
||||
rm -f /dev/input/$SYM_LINK
|
||||
debug_mesg "Input event device link $SYM_LINK removed"
|
||||
;;
|
||||
esac
|
||||
|
@ -3602,12 +3614,13 @@ setup_mouse ()
|
|||
if [ `echo "$PHYS" | grep $PHYS_PATTERN 2>/dev/null` ]; then
|
||||
case $ACTION in
|
||||
add)
|
||||
cd /dev/input
|
||||
rm -f $SYM_LINK
|
||||
ln -s /dev/input/$DEV_MOUSE $SYM_LINK
|
||||
ln -s $DEV_MOUSE $SYM_LINK
|
||||
debug_mesg "Input mouse device $NAME on $PHYS linked to $SYM_LINK"
|
||||
;;
|
||||
remove)
|
||||
rm -f $SYM_LINK
|
||||
rm -f /dev/input/$SYM_LINK
|
||||
debug_mesg "Input mouse device link $SYM_LINK removed"
|
||||
;;
|
||||
esac
|
||||
|
|
|
@ -5,7 +5,7 @@
|
|||
<title> Linux Cluster HOWTO </title>
|
||||
|
||||
<author>Ram Samudrala <tt>(me@ram.org)</tt> </author>
|
||||
<date> v1.0, March 17, 2003 </date>
|
||||
<date> v1.1, June 17, 2003 </date>
|
||||
|
||||
<abstract>
|
||||
How to set up high-performance Linux computing clusters.
|
||||
|
@ -64,9 +64,22 @@ recent is listed first). </p>
|
|||
|
||||
<p> 32 machines have the following setup each:
|
||||
|
||||
<itemize>
|
||||
<item> 2 XEON 2.4GHZ 533FSB CPUs </item>
|
||||
<item> Supermicro X5DPR-1G2 motherboard </item>
|
||||
<item> 2 512MB PC2100 DDR REG ECC RAM </item>
|
||||
<item> 1 40GB SEA 7200 HD </item>
|
||||
<item> 1 120GB SEA 7200 HD </item>
|
||||
<item> Supermicro Slim 24X CDROM </item>
|
||||
<item> CSE-812 400 C/B 1U case </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 32 machines have the following setup each:
|
||||
|
||||
<itemize>
|
||||
<item> 2 AMD Palamino MP XP 2000+ 1.67 GHz CPUs </item>
|
||||
<item> Asus A7M266-D w/LAN Dual DDR </item>
|
||||
<item> Asus A7M266-D w/LAN Dual DDR motherboard </item>
|
||||
<item> 2 Kingston 512mb PC2100 DDR-266MHz REG ECC RAM </item>
|
||||
<item> 1 41 GB Maxtor 7200rpm ATA100 HD </item>
|
||||
<item> 1 120 GB Maxtor 5400rpm ATA100 HD </item>
|
||||
|
@ -141,19 +154,56 @@ following setup:
|
|||
|
||||
<p> 1 desktop with the following setup:
|
||||
|
||||
<itemize>
|
||||
<item> 2 AMD XP 2600 MP </item>
|
||||
<item> MSI K7D Master-L DUAL MS-6501 motherboard </item>
|
||||
<item> 4 1024MB PC2100 DDR REG ECC RAM </item>
|
||||
<item> 1 40GB SEA 7200 Maxtor harddisk </item>
|
||||
<item> 2 120GB SEA 7200 Maxtor hardidks </item>
|
||||
<item> PIONEER DVR-AO5 IDE DVD-RW </item>
|
||||
<item> 1.44mb floppy drive </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb video card </item>
|
||||
<item> IN-WIN P4 300ATX Mid Tower case </item>
|
||||
<item> Intel PCI PRO-100 10/100Mbps network card </item>
|
||||
<item> 450W ENERMAX P4-430ATX power supply </item>
|
||||
<item> CREATIVE SB 128 5.1 PCI soundcard </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 2 desktops with the following setup:
|
||||
|
||||
<itemize>
|
||||
<item> 2 AMD XP 2600 MP </item>
|
||||
<item> MSI K7D Master-L DUAL MS-6501 motherboard </item>
|
||||
<item> 2 512MB PC2100 DDR REG ECC RAM </item>
|
||||
<item> 1 40GB SEA 7200 Maxtor harddisk </item>
|
||||
<item> 2 120GB SEA 7200 Maxtor hardidks </item>
|
||||
<item> MSI 52X24X52X CR52-A2 CD-RW </item>
|
||||
<item> 1.44mb floppy drive </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb video card </item>
|
||||
<item> IN-WIN P4 300ATX Mid Tower case </item>
|
||||
<item> Intel PCI PRO-100 10/100Mbps network card </item>
|
||||
<item> 450W ENERMAX P4-430ATX power supply </item>
|
||||
<item> CREATIVE SB 128 5.1 PCI soundcard </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 1 desktop with the following setup:
|
||||
|
||||
<itemize>
|
||||
<item> 2 AMD Palamino MP XP 2000+ 1.67 GHz CPUs </item>
|
||||
<item> Asus A7M266-D w/LAN Dual DDR </item>
|
||||
<item> 2 Kingston 512mb PC2100 DDR-266MHz REG ECC RAM </item>
|
||||
<item> Ricoh 32x12x10 CDRW/DVD Combo EIDE </item>
|
||||
<item> 1.44mb floppy drive </item>
|
||||
<item> 1 41 GB Maxtor 7200rpm ATA100 HD </item>
|
||||
<item> 1 120 GB Maxtor 5400rpm ATA100 HD </item>
|
||||
<item> 1.44mb floppy drive </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb video card </item>
|
||||
<item> IN-WIN P4 300ATX Mid Tower case </item>
|
||||
<item> Intel PCI PRO-100 10/100Mbps network card </item>
|
||||
<item> Enermax P4-430ATX power supply </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 1 desktop with the following setup:
|
||||
|
||||
|
@ -171,6 +221,7 @@ following setup:
|
|||
<item> Microsoft Intellimouse Explorer </item>
|
||||
<item> Supermicro SC760 full-tower case with 400W PS </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 2 desktops with the following setup:
|
||||
|
||||
|
@ -275,7 +326,23 @@ following setup:
|
|||
<item> Asus 52X CD-A520 INT IDE cdrom </item>
|
||||
<item> 1.44 MB floppy drive </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb video card </item>
|
||||
<item> 4 Intel Pro/1000T Gigabit Server ethernet cards </item>
|
||||
<item> 3 Intel Pro/1000T Gigabit Server ethernet cards </item>
|
||||
<item> 4U Black Rackmount Steel case </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
<p> 1 gateway with the following setup. The gateway is a mirror of
|
||||
the firewall in case the firewall breaks.
|
||||
|
||||
<itemize>
|
||||
<item> AMD Palamino XP 1800+ 1.57GHz CPU </item>
|
||||
<item> MSI KT3 Ultra2 KT333 MS-6380E motherboard </item>
|
||||
<item> 512 MB PC2100 DDR-266MHz DIMM RAM </item>
|
||||
<item> 40GB Seagate 7200rpm ATA/100 hard disk </item>
|
||||
<item> Asus 52X CD-A520 INT IDE cdrom </item>
|
||||
<item> 1.44 MB floppy drive </item>
|
||||
<item> ATI Expert 2000 Rage 128 32mb video card </item>
|
||||
<item> 3 Intel Pro/1000T Gigabit Server ethernet cards </item>
|
||||
<item> 4U Black Rackmount Steel case </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
@ -296,6 +363,7 @@ following setup:
|
|||
<p> Monitors:
|
||||
|
||||
<itemize>
|
||||
<item> 2 17" Viewsonic VE700 LCD monitor </item>
|
||||
<item> 1 20.1" Viewsonic VP201M LCD monitor </item>
|
||||
<item> 1 22" Viewsonic P220F 0.25-0.27m monitor </item>
|
||||
<item> 4 21" Sony CPD-G500 .24mm monitor </item>
|
||||
|
@ -318,13 +386,14 @@ following setup:
|
|||
|
||||
<sect1> Putting-it-all-together hardware
|
||||
|
||||
<p> We use KVM switches with a cheap monitor to connect up and "look"
|
||||
<p> We used to use KVM switches with a cheap monitor to connect up and "look"
|
||||
at all the machines:
|
||||
|
||||
<itemize>
|
||||
<item> 15" .28dp XLN CTL Monitor </item>
|
||||
<item> 3 Belkin Omniview 16-Port Pro Switches </item>
|
||||
<item> Belkin Omniview 2-Port Switch </item>
|
||||
<item> APC AR203 netshelter rack unit </item>
|
||||
</itemize>
|
||||
</p>
|
||||
|
||||
|
@ -336,9 +405,9 @@ more monitor switches/KVM cables. </p>
|
|||
<p> Networking is important:
|
||||
|
||||
<itemize>
|
||||
<item> 2 Netgear FS750NA 48 port/1 git network switch </item>
|
||||
<item> 1 Netgear FSM750S 48 port/2 git network switch </item>
|
||||
<item> 1 Netgear FS517TS 16 port/1 git network switch </item>
|
||||
<item> 1 Netgear FS750NA 48 port network switch </item>
|
||||
<item> 1 Netgear FS524 24 port network switch </item>
|
||||
<item> 1 Cisco Catalyst 3448 XL Enterprise Edition 48 port network switch </item>
|
||||
<item> 1 Netgear ME102NA Wireless Access Point </item>
|
||||
|
@ -355,8 +424,8 @@ more monitor switches/KVM cables. </p>
|
|||
<p> Our vendor is Hard Drives Northwest (<htmlurl
|
||||
url="http://www.hdnw.com" name="http://www.hdnw.com">). For each
|
||||
compute node in our cluster (containing two processors), we paid about
|
||||
$1500-$2000, including taxes. Generally, our goal is to keep each node to
|
||||
below $2000.00 (which is what our desktop machines cost). </p>
|
||||
$1500-$2000, including taxes. Generally, our goal is to keep the cost
|
||||
of each processor to below $1000 (including housing it). </p>
|
||||
|
||||
</sect1>
|
||||
|
||||
|
@ -378,6 +447,7 @@ below $2000.00 (which is what our desktop machines cost). </p>
|
|||
<item> Kernel 2.2.16-22, distribution KRUD 7.0
|
||||
<item> Kernel 2.4.9-7, distribution KRUD 7.2
|
||||
<item> Kernel 2.4.18-10, distribution KRUD 7.3
|
||||
<item> Kernel 2.4.20-13.9, distribution KRUD 9.0
|
||||
</itemize>
|
||||
|
||||
These distributions work very well for us since updates are sent to us
|
||||
|
@ -568,6 +638,10 @@ url="http://www.ram.org/computing/linux/cluster/fantini_contribution.tgz"
|
|||
name="http://www.ram.org/computing/linux/cluster/fantini_contribution.tgz">.
|
||||
</p>
|
||||
|
||||
<p> I have been working on a system where all you have to do is put a
|
||||
CD in, boot the machine in, and it'll come back up fully cloned. I
|
||||
will post this in the near future. </p>
|
||||
|
||||
</sect2>
|
||||
|
||||
<!-- ************************************************************* -->
|
||||
|
@ -652,14 +726,20 @@ applications you wish to run. </p>
|
|||
|
||||
<p> For the single most important program we run (our <it>ab
|
||||
initio</it> protein folding simulation program), using the Pentium 3 1
|
||||
GHz processor machine as a frame of reference, the Athlon 1.2 GHz
|
||||
processor machine is about 16% faster on average, the Xeon 1.7 GHz
|
||||
machine is about 25-32% faster on average, the Athlon 1.5 GHz
|
||||
processor is about 38% faster on average, and the Athlon 1.7 GHz
|
||||
processor is about 46% faster on average (yes, the Athlon 1.5 GHz is
|
||||
faster than the Xeon 1.7 GHz since the Xeon executes only six
|
||||
instructions per clock (IPC) whereas the Athlon executes nine IPC (you
|
||||
do the math!)). </p>
|
||||
GHz processor machine as a frame of reference, on average:
|
||||
|
||||
<tscreen><verb>
|
||||
Athlon 1.2 GHz processor is about 16% faster
|
||||
Xeon 1.7 GHz processor is about 27% faster
|
||||
Athlon 1.5 GHz processor is about 38% faster
|
||||
Athlon 1.7 GHz processor is about 46% faster
|
||||
Xeon 2.4 GHz processor is about 62% faster
|
||||
</verb></tscreen>
|
||||
</p>
|
||||
|
||||
<p> Yes, the Athlon 1.5 GHz is faster than the Xeon 1.7 GHz since the
|
||||
Xeon executes only six instructions per clock (IPC) whereas the Athlon
|
||||
executes nine IPC (you do the math!). </p>
|
||||
|
||||
</sect1>
|
||||
|
||||
|
@ -723,3 +803,7 @@ Samudrala's research page (which describes the kind of research done with these
|
|||
|
||||
</article>
|
||||
|
||||
---------------------------------------------------------------------
|
||||
To unsubscribe, e-mail: submit-unsubscribe@en.tldp.org
|
||||
For additional commands, e-mail: submit-help@en.tldp.org
|
||||
|
||||
|
|
|
@ -3,7 +3,7 @@
|
|||
<article><!-- LyX 1.2 created this file. For more info see http://www.lyx.org/ -->
|
||||
<title>Samba Authenticated Gateway HOWTO
|
||||
</title><author>Ricardo Alexandre Mattar
|
||||
</author><date>v1.1.0, 2003-05-03
|
||||
</author><date>v1.1.1, 2003-07-14
|
||||
</date><abstract>This documents intends to show how to build a Firewall/Gateway
|
||||
with rules set on user basis having the users authenticated by a
|
||||
Samba Primary Domain Controller
|
||||
|
@ -57,9 +57,9 @@
|
|||
</p><p>Naming of particular products or brands should not be seen as
|
||||
endorsements.
|
||||
</p><sect1>New versions
|
||||
<p>The newest release of this document can be found at <url url="http://smbgate.sourceforge.net" name="http://smbgate.sourceforge.net">
|
||||
<p>The newest release of this document can be found at <url url="http://ram.eti.br" name="http://ram.eti.br"> or at <url url="http://www.tldp.org" name="http://www.tldp.org">
|
||||
</p><p>Related HOWTOs can be found at the Linux Documentation Project
|
||||
homepage.
|
||||
homepage at <url url="http://tldp.org" name="http://tldp.org">.
|
||||
</p><sect1>Translations
|
||||
<p>A Portuguese version is available.
|
||||
</p><p>A French translation by Guillaume Lelarge is available at<url url="http://www.traduc.org/docs/HOWTO/lecture/Samba-Authenticated-Gateway-HOWTO.html" name="http://www.traduc.org">
|
||||
|
@ -68,7 +68,7 @@
|
|||
<p>Contributions and criticism are both welcome.
|
||||
</p><p>Corrections to my English are also very welcome!
|
||||
</p><p>If you find any bugs in the scripts included, please tell me.
|
||||
</p><p>You can find me at ricardo.mattar@bol.com.br
|
||||
</p><p>You can find me at ricardo@ram.eti.br or ricardo.mattar@bol.com.br
|
||||
</p><sect1>Copyright and trademarks
|
||||
<p>Copyright (c) 2002-2003 Ricardo Alexandre Mattar
|
||||
</p><p>Permission is granted to copy, distribute and/or modify this
|
||||
|
@ -84,6 +84,7 @@
|
|||
</p><p>Thanks to Guillaume Lelarge for the (continuous) help with the
|
||||
revision.
|
||||
</p><p>Thanks to Erik Esplund for further language corrections.
|
||||
</p><p>Thanks to Albert Teixids for code improvements.
|
||||
</p><sect>Requirements
|
||||
<sect1>Knowledge
|
||||
<p>This document is target at the seasoned systems administrator.
|
||||
|
@ -174,7 +175,7 @@ echo "1" > /proc/sys/net/ipv4/ip_dynaddr
|
|||
maybe your LINUX distribution also has plenty of SAMBA documentation.
|
||||
</p><p>We will need to setup SAMBA as a Primary Domain Controller. I
|
||||
will give an example configuration file here, but you should read
|
||||
the <url url="http://www.samba.org/samba/docs/Samba-HOWTO-Collection.html" name="Samba HOWTO Collection"> and learn all you can about a PDC.
|
||||
the <url url="http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection.html" name="Samba HOWTO Collection"> and learn all you can about a PDC.
|
||||
</p><sect2>Basic SAMBA setup.
|
||||
<p>Since I do not intend to rewrite the SAMBA documentation, here
|
||||
goes a sample smb.conf file:
|
||||
|
@ -216,7 +217,7 @@ guest account =
|
|||
comment = login tracking share
|
||||
path = /home/samba/samba
|
||||
browseable = No
|
||||
root preexec = /usr/local/bin/netlogon.sh %u
|
||||
root preexec = /usr/local/bin/netlogon.sh %u %I
|
||||
root postexec = /usr/local/bin/netlogoff.sh %u
|
||||
</verb></p><p>You will have to do with it or read the SAMBA documentation if
|
||||
you really want to control your server and network.
|
||||
|
@ -246,7 +247,7 @@ net use z: \\linux\samba /yes
|
|||
comment = login tracking share
|
||||
path = /home/samba/samba
|
||||
browseable = No
|
||||
root preexec = /usr/local/bin/netlogon.sh %u
|
||||
root preexec = /usr/local/bin/netlogon.sh %u %I
|
||||
root postexec = /usr/local/bin/netlogoff.sh %u
|
||||
</verb></p><p>As you can guess or know if you read the SAMBA documentation,
|
||||
the root preexec and the root postexec lines tell SAMBA to run the
|
||||
|
@ -268,7 +269,7 @@ root postexec = /usr/local/bin/netlogoff.sh %u
|
|||
if [ -f /var/run/smbgate/$1 ] ; then
|
||||
exit 0
|
||||
fi
|
||||
smbstatus | grep $1 | grep samba | gawk '// { print substr($6,2,length($6)-2)}' > /var/run/smbgate/$1
|
||||
echo $2 > /var/run/smbgate/$1
|
||||
IPTABLES='/usr/sbin/iptables'
|
||||
EXTIF='eth0'
|
||||
COMMAND='-A'
|
||||
|
@ -285,11 +286,12 @@ else
|
|||
fi
|
||||
|
||||
</verb></p><p>This script (netlogon.sh) is intended to run when the user logs
|
||||
in and will filter the output of smbstatus extracting the user's
|
||||
ip address which will be written to a file at /var/run/smbgate. The
|
||||
file will take the user's name and will be later used when the user
|
||||
log off. The address extracted will be passed as an argument to a
|
||||
script with the users' name which will finally update the firewall.
|
||||
in and will select the which scripts will be executed based on the
|
||||
user name and to which group the user belongs. The user's ip address
|
||||
will be written to a file at /var/run/smbgate for tracking purposes.
|
||||
The file will take the user's name and will be later used when the
|
||||
user log off. The IP address will be passed as an argument to a script
|
||||
with the users' name which will finally update the firewall.
|
||||
</p><p>Notice that this netlogon.sh script tries a user script, then
|
||||
if it can't find the user script it tries a group script, and finally
|
||||
if it can't find the group script it tries the default.sh script.
|
||||
|
@ -379,7 +381,7 @@ EXTIF=$3
|
|||
IPTABLES='/usr/sbin/iptables'
|
||||
$IPTABLES $COMMAND POSTROUTING -t nat -s $ADDRESS -o $EXTIF -j MASQUERADE
|
||||
</verb></p><p>We should also hase a default.sh script at /etc/smbgate/users/
|
||||
to give the gateway a default behavior to the gateway.
|
||||
to give the gateway a default behavior.
|
||||
</p><p><verb>#!/bin/sh
|
||||
#
|
||||
# default.sh
|
||||
|
|
Loading…
Reference in New Issue