Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE... Quick reference guide

SUSE Linux Enterprise
Desktop
www.novell.com10 SP2
May08,2008 Deployment Guide

Deployment Guide
All content is copyright © Novell, Inc.
Legal Notice
This manual is protected under Novell intellectual property rights. By reproducing, duplicating or
distributing this manual you explicitly agree to conform to the terms and conditions of this license
agreement.
This manual may be freely reproduced, duplicated and distributed either as such or as part of a bundled
package in electronic and/or printed format, provided however that the following conditions are ful-
lled:
That this copyright notice and the names of authors and contributors appear clearly and distinctively
on all reproduced, duplicated and distributed copies. That this manual, specically for the printed
format, is reproduced and/or distributed for noncommercial use only. The express authorization of
Novell, Inc must be obtained prior to any other use of any manual or part thereof.
For Novell trademarks, see the Novell Trademark and Service Mark list http://www.novell
.com/company/legal/trademarks/tmlist.html. * Linux is a registered trademark of
Linus Torvalds. All other third party trademarks are the property of their respective owners. A trademark
symbol (®, ™ etc.) denotes a Novell trademark; an asterisk (*) denotes a third party trademark.
All information found in this book has been compiled with utmost attention to detail. However, this
does not guarantee complete accuracy. Neither Novell, Inc., SUSE LINUX Products GmbH, the authors,
nor the translators shall be held liable for possible errors or the consequences thereof.

Contents
About This Guide xiii
Part I Deployment 1
1Planning for SUSE Linux Enterprise Desktop 3
1.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . 4
1.2 Reasons to Use SUSE Linux Enterprise Desktop . . . . . . . . . . . . . 4
2Deployment Strategies 7
2.1 Deploying up to 10 Workstations . . . . . . . . . . . . . . . . . . . 7
2.2 Deploying up to 100 Workstations . . . . . . . . . . . . . . . . . . 9
2.3 Deploying More than 100 Workstations . . . . . . . . . . . . . . . 16
3Installation with YaST 17
3.1 System Start-Up for Installation . . . . . . . . . . . . . . . . . . . 17
3.2 The Installation Workow . . . . . . . . . . . . . . . . . . . . . 19
3.3 TheBootScreen......................... 20
3.4 Language ............................ 23
3.5 MediaCheck........................... 23
3.6 LicenseAgreement........................ 24
3.7 InstallationMode......................... 24
3.8 Clock and Time Zone . . . . . . . . . . . . . . . . . . . . . . . 25
3.9 Installation Settings . . . . . . . . . . . . . . . . . . . . . . . . 25
3.10 Performing the Installation . . . . . . . . . . . . . . . . . . . . . 30
3.11 Conguration of the Installed System . . . . . . . . . . . . . . . . 31
3.12 GraphicalLogin.......................... 38

4Remote Installation 39
4.1 Installation Scenarios for Remote Installation . . . . . . . . . . . . . 39
4.2 Setting Up the Server Holding the Installation Sources . . . . . . . . . 48
4.3 Preparing the Boot of the Target System . . . . . . . . . . . . . . . 58
4.4 Booting the Target System for Installation . . . . . . . . . . . . . . . 68
4.5 Monitoring the Installation Process . . . . . . . . . . . . . . . . . 73
5Automated Installation 77
5.1 Simple Mass Installation . . . . . . . . . . . . . . . . . . . . . . 77
5.2 Rule-Based Autoinstallation . . . . . . . . . . . . . . . . . . . . . 89
5.3 For More Information . . . . . . . . . . . . . . . . . . . . . . . 94
6Deploying Customized Preinstallations 95
6.1 Preparing the Master Machine . . . . . . . . . . . . . . . . . . . 96
6.2 Customizing the Firstboot Installation . . . . . . . . . . . . . . . . 96
6.3 Cloning the Master Installation . . . . . . . . . . . . . . . . . . . 104
6.4 Personalizing the Installation . . . . . . . . . . . . . . . . . . . . 105
7Advanced Disk Setup 107
7.1 LVMConguration........................ 107
7.2 Soft RAID Conguration . . . . . . . . . . . . . . . . . . . . . 113
8System Conguration with YaST 119
8.1 YaSTLanguage.......................... 120
8.2 The YaST Control Center . . . . . . . . . . . . . . . . . . . . . 120
8.3 Software............................ 122
8.4 Hardware............................ 136
8.5 System............................. 145
8.6 NetworkDevices......................... 155
8.7 NetworkServices........................ 156
8.8 AppArmor ........................... 160
8.9 Security and Users . . . . . . . . . . . . . . . . . . . . . . . . 160
8.10 Virtualization.......................... 169
8.11 Miscellaneous.......................... 170
8.12 YaSTinTextMode........................ 172
8.13 Managing YaST from the Command Line . . . . . . . . . . . . . . . 176
8.14 Update from the Command Line with rug . . . . . . . . . . . . . . 179
8.15 SaX2.............................. 182
8.16 Troubleshooting......................... 188
8.17 For More Information . . . . . . . . . . . . . . . . . . . . . . 189

9Updating SUSE Linux Enterprise 191
9.1 Updating SUSE Linux Enterprise . . . . . . . . . . . . . . . . . . 191
9.2 Installing Service Packs . . . . . . . . . . . . . . . . . . . . . . 194
9.3 Software Changes from Version 9 to Version 10 . . . . . . . . . . . 204
Part II Administration 217
10 GNOME Conguration for Administrators 219
10.1 Using GConf for Defaults . . . . . . . . . . . . . . . . . . . . . 220
10.2 Customizing Menus . . . . . . . . . . . . . . . . . . . . . . . 244
10.3 Installing Themes . . . . . . . . . . . . . . . . . . . . . . . . 257
10.4 Conguring Fonts . . . . . . . . . . . . . . . . . . . . . . . . 263
10.5 MIMETypes........................... 264
10.6 Setting Screensavers . . . . . . . . . . . . . . . . . . . . . . . 266
10.7 Session Management . . . . . . . . . . . . . . . . . . . . . . . 268
10.8 Improving Performance . . . . . . . . . . . . . . . . . . . . . . 269
10.9 Hidden Directories . . . . . . . . . . . . . . . . . . . . . . . . 278
10.10 Security Note on Conguring SMB Printers . . . . . . . . . . . . . 280
10.11 Disabling GNOME Desktop Features . . . . . . . . . . . . . . . . 280
10.12 Starting Applications Automatically . . . . . . . . . . . . . . . . . 283
10.13 Automounting and Managing Media Devices . . . . . . . . . . . . . 284
10.14 Changing Preferred Applications . . . . . . . . . . . . . . . . . . 284
10.15 Managing Proles Using Sabayon . . . . . . . . . . . . . . . . . . 284
10.16 Adding Document Templates . . . . . . . . . . . . . . . . . . . 288
11 KDE Conguration for Administrators 289
11.1 Managing Proles Using the KIOSK Admin Tool . . . . . . . . . . . . 289
11.2 Managing Proles Manually . . . . . . . . . . . . . . . . . . . . 297
12 Active Directory Support 303
12.1 Integrating Linux and AD Environments . . . . . . . . . . . . . . . 303
12.2 Background Information for Linux AD Support . . . . . . . . . . . . 304
12.3 Conguring a Linux Client for Active Directory . . . . . . . . . . . . 309
12.4 Logging In to an AD Domain . . . . . . . . . . . . . . . . . . . . 313
12.5 Changing Passwords . . . . . . . . . . . . . . . . . . . . . . . 314
13 Access Control Lists in Linux 317
13.1 Traditional File Permissions . . . . . . . . . . . . . . . . . . . . 317
13.2 Advantages of ACLs . . . . . . . . . . . . . . . . . . . . . . . 319
13.3 Denitions........................... 319

13.4 HandlingACLs.......................... 320
13.5 ACL Support in Applications . . . . . . . . . . . . . . . . . . . . 328
13.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 328
14 System Monitoring Utilities 329
14.1 Debugging........................... 330
14.2 Files and File Systems . . . . . . . . . . . . . . . . . . . . . . . 332
14.3 Hardware Information . . . . . . . . . . . . . . . . . . . . . . 334
14.4 Networking........................... 337
14.5 The /proc FileSystem...................... 338
14.6 Processes............................ 341
14.7 System Information . . . . . . . . . . . . . . . . . . . . . . . 345
14.8 User Information . . . . . . . . . . . . . . . . . . . . . . . . 349
14.9 TimeandDate.......................... 349
15 Working with the Shell 351
15.1 Getting Started with the Bash Shell . . . . . . . . . . . . . . . . . 352
15.2 Users and Access Permissions . . . . . . . . . . . . . . . . . . . 363
15.3 Important Linux Commands . . . . . . . . . . . . . . . . . . . . 367
15.4 TheviEditor.......................... 377
Part III System 383
16 32-Bit and 64-Bit Applications in a 64-Bit System Environment 385
16.1 RuntimeSupport ........................ 385
16.2 Software Development . . . . . . . . . . . . . . . . . . . . . . 386
16.3 Software Compilation on Biarch Platforms . . . . . . . . . . . . . . 387
16.4 Kernel Specications . . . . . . . . . . . . . . . . . . . . . . . 388
17 Booting and Conguring a Linux System 389
17.1 The Linux Boot Process . . . . . . . . . . . . . . . . . . . . . . 389
17.2 TheinitProcess......................... 393
17.3 System Conguration via /etc/syscong . . . . . . . . . . . . . . . 401
18 The Boot Loader 405
18.1 Selecting a Boot Loader . . . . . . . . . . . . . . . . . . . . . . 406
18.2 Booting with GRUB . . . . . . . . . . . . . . . . . . . . . . . . 406
18.3 Conguring the Boot Loader with YaST . . . . . . . . . . . . . . . 416
18.4 Uninstalling the Linux Boot Loader . . . . . . . . . . . . . . . . . 420

18.5 Creating Boot CDs . . . . . . . . . . . . . . . . . . . . . . . . 420
18.6 The Graphical SUSE Screen . . . . . . . . . . . . . . . . . . . . 421
18.7 Troubleshooting......................... 422
18.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 424
19 Special System Features 425
19.1 Information about Special Software Packages . . . . . . . . . . . . 425
19.2 VirtualConsoles......................... 432
19.3 Keyboard Mapping . . . . . . . . . . . . . . . . . . . . . . . . 432
19.4 Language and Country-Specic Settings . . . . . . . . . . . . . . . 433
20 Printer Operation 439
20.1 The Workow of the Printing System . . . . . . . . . . . . . . . . 441
20.2 Methods and Protocols for Connecting Printers . . . . . . . . . . . . 441
20.3 Installing the Software . . . . . . . . . . . . . . . . . . . . . . 442
20.4 Setting Up a Printer . . . . . . . . . . . . . . . . . . . . . . . 443
20.5 NetworkPrinters......................... 447
20.6 Graphical Printing Interfaces . . . . . . . . . . . . . . . . . . . . 450
20.7 Printing from the Command Line . . . . . . . . . . . . . . . . . . 450
20.8 Special Features in SUSE Linux Enterprise . . . . . . . . . . . . . . 451
20.9 Troubleshooting......................... 455
21 Dynamic Kernel Device Management with udev 463
21.1 The /dev Directory....................... 463
21.2 Kernel uevents and udev . . . . . . . . . . . . . . . . . . . . . 464
21.3 Drivers, Kernel Modules, and Devices . . . . . . . . . . . . . . . . 464
21.4 Booting and Initial Device Setup . . . . . . . . . . . . . . . . . . 465
21.5 Debugging udev Events . . . . . . . . . . . . . . . . . . . . . . 465
21.6 Inuencing Kernel Device Event Handling with udev Rules . . . . . . . 466
21.7 Persistent Device Naming . . . . . . . . . . . . . . . . . . . . . 467
21.8 The Replaced hotplug Package . . . . . . . . . . . . . . . . . . . 468
21.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 469
22 File Systems in Linux 471
22.1 Terminology........................... 471
22.2 Major File Systems in Linux . . . . . . . . . . . . . . . . . . . . 472
22.3 Some Other Supported File Systems . . . . . . . . . . . . . . . . 477
22.4 Large File Support in Linux . . . . . . . . . . . . . . . . . . . . 478
22.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 479

23 The X Window System 481
23.1 Manually Conguring the X Window System . . . . . . . . . . . . . 481
23.2 Installing and Conguring Fonts . . . . . . . . . . . . . . . . . . 487
23.3 For More Information . . . . . . . . . . . . . . . . . . . . . . 493
24 Authentication with PAM 495
24.1 Structure of a PAM Conguration File . . . . . . . . . . . . . . . . 496
24.2 The PAM Conguration of sshd . . . . . . . . . . . . . . . . . . 497
24.3 Conguration of PAM Modules . . . . . . . . . . . . . . . . . . 500
24.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 502
25 Mobile Computing with Linux 503
25.1 Laptops ............................ 503
25.2 MobileHardware........................ 511
25.3 Cellular Phones and PDAs . . . . . . . . . . . . . . . . . . . . . 512
25.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 513
26 PCMCIA 515
26.1 Controlling PCMCIA Cards Using pccardctl . . . . . . . . . . . . . . 516
26.2 PCMCIAinDetail........................ 516
26.3 Troubleshooting......................... 519
27 System Conguration Prole Management 523
27.1 Terminology........................... 524
27.2 SettingUpSCPM......................... 525
27.3 Conguring SCPM Using a Graphical User Interface . . . . . . . . . . 526
27.4 Conguring SCPM Using the Command Line . . . . . . . . . . . . . 532
27.5 Troubleshooting......................... 535
27.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 536
28 Power Management 537
28.1 Power Saving Functions . . . . . . . . . . . . . . . . . . . . . . 537
28.2 APM.............................. 539
28.3 ACPI.............................. 540
28.4 Rest for the Hard Disk . . . . . . . . . . . . . . . . . . . . . . 547
28.5 The powersave Package . . . . . . . . . . . . . . . . . . . . . . 549
28.6 The YaST Power Management Module . . . . . . . . . . . . . . . . 557

29 Wireless Communication 563
29.1 WirelessLAN.......................... 563
29.2 Bluetooth............................ 573
29.3 Infrared Data Transmission . . . . . . . . . . . . . . . . . . . . 584
29.4 Managing UMTS/3G Network Connections . . . . . . . . . . . . . . 587
Part IV Services 593
30 Basic Networking 595
30.1 IP Addresses and Routing . . . . . . . . . . . . . . . . . . . . . 598
30.2 IPv6—The Next Generation Internet . . . . . . . . . . . . . . . . 601
30.3 NameResolution ........................ 610
30.4 Conguring a Network Connection with YaST . . . . . . . . . . . . 612
30.5 Managing Network Connections with NetworkManager . . . . . . . . 627
30.6 Conguring a Network Connection Manually . . . . . . . . . . . . . 630
30.7 smpppd as Dial-up Assistant . . . . . . . . . . . . . . . . . . . . 645
31 SLP Services in the Network 649
31.1 ActivatingSLP.......................... 649
31.2 SLP Front-Ends in SUSE Linux Enterprise . . . . . . . . . . . . . . . 650
31.3 Providing Services with SLP . . . . . . . . . . . . . . . . . . . . 650
31.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 652
32 Time Synchronization with NTP 653
32.1 Conguring an NTP Client with YaST . . . . . . . . . . . . . . . . 654
32.2 Conguring xntp in the Network . . . . . . . . . . . . . . . . . . 657
32.3 Setting Up a Local Reference Clock . . . . . . . . . . . . . . . . . 657
33 Using NIS 659
33.1 Conguring NIS Clients . . . . . . . . . . . . . . . . . . . . . . 659
34 Conguring eDirectory Authentication 661
34.1 Setting Up Workstations to Use eDirectory Authentication . . . . . . . 662
34.2 Using iManager to Enable Users for eDirectory Authentication . . . . . 666
34.3 Turning Off LUM and eDirectory Authentication . . . . . . . . . . . 669
35 LDAP—A Directory Service 671
35.1 LDAPversusNIS......................... 672

35.2 Structure of an LDAP Directory Tree . . . . . . . . . . . . . . . . 673
35.3 Conguring an LDAP Client with YaST . . . . . . . . . . . . . . . . 677
35.4 Conguring LDAP Users and Groups in YaST . . . . . . . . . . . . . 685
35.5 Browsing the LDAP Directory Tree . . . . . . . . . . . . . . . . . 687
35.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 688
36 Samba 691
36.1 Terminology........................... 691
36.2 Starting and Stopping Samba . . . . . . . . . . . . . . . . . . . 693
36.3 Conguring a Samba Server . . . . . . . . . . . . . . . . . . . . 693
36.4 Conguring Clients . . . . . . . . . . . . . . . . . . . . . . . . 699
36.5 Samba as Login Server . . . . . . . . . . . . . . . . . . . . . . 700
36.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 701
37 Sharing File Systems with NFS 703
37.1 Installing the Required Software . . . . . . . . . . . . . . . . . . 703
37.2 Importing File Systems with YaST . . . . . . . . . . . . . . . . . . 704
37.3 Importing File Systems Manually . . . . . . . . . . . . . . . . . . 705
37.4 Exporting File Systems with YaST . . . . . . . . . . . . . . . . . . 707
37.5 Exporting File Systems Manually . . . . . . . . . . . . . . . . . . 712
37.6 NFS with Kerberos . . . . . . . . . . . . . . . . . . . . . . . . 715
37.7 For More Information . . . . . . . . . . . . . . . . . . . . . . 715
38 File Synchronization 717
38.1 Available Data Synchronization Software . . . . . . . . . . . . . . . 717
38.2 Determining Factors for Selecting a Program . . . . . . . . . . . . . 719
38.3 Introduction to CVS . . . . . . . . . . . . . . . . . . . . . . . 722
38.4 Introduction to rsync . . . . . . . . . . . . . . . . . . . . . . . 725
Part V Security 729
39 Masquerading and Firewalls 731
39.1 Packet Filtering with iptables . . . . . . . . . . . . . . . . . . . . 731
39.2 Masquerading Basics . . . . . . . . . . . . . . . . . . . . . . . 734
39.3 Firewalling Basics . . . . . . . . . . . . . . . . . . . . . . . . 736
39.4 SuSErewall2.......................... 736
39.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 741