Novell LINUX ENTERPRISE DESKTOP 11 Instruction Manual

SUSE Linux Enterprise
Server
www.novell.com11
March23,2009 Administration Guide

Administration Guide
All content is copyright © 2006- 2009 Novell, Inc.
Legal Notice
This manual is protected under Novell intellectual property rights. By reproducing, duplicating or
distributing this manual you explicitly agree to conform to the terms and conditions of this license
agreement.
This manual may be freely reproduced, duplicated and distributed either as such or as part of a bundled
package in electronic and/or printed format, provided however that the following conditions are ful-
lled:
That this copyright notice and the names of authors and contributors appear clearly and distinctively
on all reproduced, duplicated and distributed copies. That this manual, specically for the printed
format, is reproduced and/or distributed for noncommercial use only. The express authorization of
Novell, Inc must be obtained prior to any other use of any manual or part thereof.
For Novell trademarks, see the Novell Trademark and Service Mark list http://www.novell
.com/company/legal/trademarks/tmlist.html. * Linux is a registered trademark of
Linus Torvalds. All other third party trademarks are the property of their respective owners. A trademark
symbol (®, ™ etc.) denotes a Novell trademark; an asterisk (*) denotes a third party trademark.
All information found in this book has been compiled with utmost attention to detail. However, this
does not guarantee complete accuracy. Neither Novell, Inc., SUSE LINUX Products GmbH, the authors,
nor the translators shall be held liable for possible errors or the consequences thereof.

Contents
About This Guide xi
Part I Support and Common Tasks 1
1YaST Online Update 3
1.1 Installing Patches Manually Using the Qt Interface . . . . . . . . . . . . 4
1.2 Installing Patches Manually Using the gtk Interface . . . . . . . . . . . 6
1.3 Automatic Online Update . . . . . . . . . . . . . . . . . . . . . . 7
2Gathering System Information for Support 9
2.1 Novell Support Link Overview . . . . . . . . . . . . . . . . . . . . 9
2.2 Using Supportcong . . . . . . . . . . . . . . . . . . . . . . . . 10
2.3 Submitting Information to Novell . . . . . . . . . . . . . . . . . . 12
2.4 For More Information . . . . . . . . . . . . . . . . . . . . . . . 14
3YaST in Text Mode 15
3.1 Navigation in Modules . . . . . . . . . . . . . . . . . . . . . . . 16
3.2 Restriction of Key Combinations . . . . . . . . . . . . . . . . . . . 17
3.3 YaST Command Line Options . . . . . . . . . . . . . . . . . . . . 18
4Managing Software with Command Line Tools 21
4.1 UsingZypper........................... 21
4.2 RPM—the Package Manager . . . . . . . . . . . . . . . . . . . . 26

5Bash and Bash Scripts 39
5.1 What is “The Shell”? . . . . . . . . . . . . . . . . . . . . . . . . 39
5.2 Writing Shell Scripts . . . . . . . . . . . . . . . . . . . . . . . . 45
5.3 Redirecting Command Events . . . . . . . . . . . . . . . . . . . . 46
5.4 UsingAliases........................... 47
5.5 Using Variables in Bash . . . . . . . . . . . . . . . . . . . . . . 47
5.6 Grouping And Combining Commands . . . . . . . . . . . . . . . . 50
5.7 Working with Common Flow Constructs . . . . . . . . . . . . . . . 51
5.8 For More Information . . . . . . . . . . . . . . . . . . . . . . . 52
Part II System 53
632-Bit and 64-Bit Applications in a 64-Bit System Environment 55
6.1 RuntimeSupport......................... 56
6.2 Software Development . . . . . . . . . . . . . . . . . . . . . . 57
6.3 Software Compilation on Biarch Platforms . . . . . . . . . . . . . . 57
6.4 Kernel Specications . . . . . . . . . . . . . . . . . . . . . . . 59
7Booting and Conguring a Linux System 61
7.1 The Linux Boot Process . . . . . . . . . . . . . . . . . . . . . . 61
7.2 TheinitProcess.......................... 65
7.3 System Conguration via /etc/syscong . . . . . . . . . . . . . . . 74
8The Boot Loader GRUB 77
8.1 BootingwithGRUB........................ 78
8.2 Conguring the Boot Loader with YaST . . . . . . . . . . . . . . . . 87
8.3 Uninstalling the Linux Boot Loader . . . . . . . . . . . . . . . . . 93
8.4 CreatingBootCDs........................ 93
8.5 The Graphical SUSE Screen . . . . . . . . . . . . . . . . . . . . . 95
8.6 Troubleshooting ......................... 95
8.7 For More Information . . . . . . . . . . . . . . . . . . . . . . . 97
9Special System Features 99
9.1 Information about Special Software Packages . . . . . . . . . . . . . 99
9.2 VirtualConsoles......................... 106
9.3 KeyboardMapping........................ 107
9.4 Language and Country-Specic Settings . . . . . . . . . . . . . . . 108

10 Printer Operation 113
10.1 The Workow of the Printing System . . . . . . . . . . . . . . . . 115
10.2 Methods and Protocols for Connecting Printers . . . . . . . . . . . . 115
10.3 Installing the Software . . . . . . . . . . . . . . . . . . . . . . 116
10.4 NetworkPrinters......................... 117
10.5 Graphical Printing Interfaces . . . . . . . . . . . . . . . . . . . . 119
10.6 Printing from the Command Line . . . . . . . . . . . . . . . . . . 120
10.7 Special Features in SUSE Linux Enterprise Server . . . . . . . . . . . 120
10.8 Troubleshooting......................... 123
11 Dynamic Kernel Device Management with udev 131
11.1 The /dev Directory....................... 131
11.2 Kernel uevents and udev . . . . . . . . . . . . . . . . . . . . . 132
11.3 Drivers, Kernel Modules and Devices . . . . . . . . . . . . . . . . 132
11.4 Booting and Initial Device Setup . . . . . . . . . . . . . . . . . . 133
11.5 Monitoring the Running udev Daemon . . . . . . . . . . . . . . . 133
11.6 Inuencing Kernel Device Event Handling with udev Rules . . . . . . . 135
11.7 Persistent Device Naming . . . . . . . . . . . . . . . . . . . . . 142
11.8 Files used by udev . . . . . . . . . . . . . . . . . . . . . . . . 142
11.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 143
12 The X Window System 145
12.1 Manually Conguring the X Window System . . . . . . . . . . . . . 145
12.2 Installing and Conguring Fonts . . . . . . . . . . . . . . . . . . 152
12.3 For More Information . . . . . . . . . . . . . . . . . . . . . . 158
13 Accessing File Systems with FUSE 159
13.1 ConguringFUSE........................ 159
13.2 Mounting an NTFS Partition . . . . . . . . . . . . . . . . . . . . 159
13.3 Mounting Remote File System with SSHFS . . . . . . . . . . . . . . 160
13.4 Mounting an ISO File System . . . . . . . . . . . . . . . . . . . 161
13.5 Available FUSE Plug-ins . . . . . . . . . . . . . . . . . . . . . . 161
13.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 162
Part III Mobile Computers 163
14 Mobile Computing with Linux 165
14.1 Laptops ............................ 165
14.2 MobileHardware ........................ 172
14.3 Cellular Phones and PDAs . . . . . . . . . . . . . . . . . . . . . 173

14.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 173
15 Power Management 175
15.1 Power Saving Functions . . . . . . . . . . . . . . . . . . . . . . 175
15.2 ACPI.............................. 176
15.3 Rest for the Hard Disk . . . . . . . . . . . . . . . . . . . . . . 180
15.4 Troubleshooting......................... 182
15.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 184
16 Using Tablet PCs 185
16.1 Installing Tablet PC Packages . . . . . . . . . . . . . . . . . . . . 186
16.2 Conguring Your Tablet Device . . . . . . . . . . . . . . . . . . . 187
16.3 Using the Virtual Keyboard . . . . . . . . . . . . . . . . . . . . 188
16.4 Rotating Your Display . . . . . . . . . . . . . . . . . . . . . . . 189
16.5 Using Gesture Recognition . . . . . . . . . . . . . . . . . . . . 189
16.6 Taking Notes and Sketching with the Pen . . . . . . . . . . . . . . 192
16.7 Troubleshooting......................... 194
16.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 195
Part IV Services 197
17 Basic Networking 199
17.1 IP Addresses and Routing . . . . . . . . . . . . . . . . . . . . . 202
17.2 IPv6—The Next Generation Internet . . . . . . . . . . . . . . . . 205
17.3 NameResolution ........................ 214
17.4 Conguring a Network Connection with YaST . . . . . . . . . . . . 216
17.5 NetworkManager ........................ 239
17.6 Conguring a Network Connection Manually . . . . . . . . . . . . . 240
17.7 smpppd as Dial-up Assistant . . . . . . . . . . . . . . . . . . . . 255
18 Wireless Communication 259
18.1 WirelessLAN.......................... 259
19 SLP Services in the Network 269
19.1 Installation........................... 269
19.2 ActivatingSLP.......................... 270
19.3 SLP Front-Ends in SUSE Linux Enterprise Server . . . . . . . . . . . . 270
19.4 Installation over SLP . . . . . . . . . . . . . . . . . . . . . . . 271
19.5 Providing Services via SLP . . . . . . . . . . . . . . . . . . . . . 271

19.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 272
20 Time Synchronization with NTP 273
20.1 Conguring an NTP Client with YaST . . . . . . . . . . . . . . . . 273
20.2 Manually Conguring ntp in the Network . . . . . . . . . . . . . . 277
20.3 Setting Up a Local Reference Clock . . . . . . . . . . . . . . . . . 277
20.4 Clock Synchronization to an External Time Reference (ETR) . . . . . . . 278
21 The Domain Name System 279
21.1 DNSTerminology........................ 279
21.2 Installation........................... 280
21.3 Conguration with YaST . . . . . . . . . . . . . . . . . . . . . . 280
21.4 Starting the Name Server BIND . . . . . . . . . . . . . . . . . . 290
21.5 The Conguration File /etc/named.conf . . . . . . . . . . . . . . . 291
21.6 ZoneFiles ........................... 296
21.7 Dynamic Update of Zone Data . . . . . . . . . . . . . . . . . . . 300
21.8 Secure Transactions . . . . . . . . . . . . . . . . . . . . . . . 300
21.9 DNSSecurity.......................... 302
21.10 For More Information . . . . . . . . . . . . . . . . . . . . . . 302
22 DHCP 303
22.1 Conguring a DHCP Server with YaST . . . . . . . . . . . . . . . . 304
22.2 DHCP Software Packages . . . . . . . . . . . . . . . . . . . . . 315
22.3 The DHCP Server dhcpd . . . . . . . . . . . . . . . . . . . . . 316
22.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 319
23 Using NetworkManager 321
23.1 Use Cases for NetworkManager . . . . . . . . . . . . . . . . . . 321
23.2 Enabling NetworkManager . . . . . . . . . . . . . . . . . . . . 322
23.3 Conguring Network Connections . . . . . . . . . . . . . . . . . 323
23.4 Using KDE NetworkManager Widget . . . . . . . . . . . . . . . . 324
23.5 Using GNOME NetworkManager Applet . . . . . . . . . . . . . . . 325
23.6 NetworkManager and VPN . . . . . . . . . . . . . . . . . . . . 327
23.7 NetworkManager and Security . . . . . . . . . . . . . . . . . . . 328
23.8 Frequently Asked Questions . . . . . . . . . . . . . . . . . . . . 329
23.9 Troubleshooting......................... 331
23.10 For More Information . . . . . . . . . . . . . . . . . . . . . . 332
24 Samba 333
24.1 Terminology........................... 333

24.2 Starting and Stopping Samba . . . . . . . . . . . . . . . . . . . 335
24.3 Conguring a Samba Server . . . . . . . . . . . . . . . . . . . . 335
24.4 Conguring Clients . . . . . . . . . . . . . . . . . . . . . . . . 342
24.5 Samba as Login Server . . . . . . . . . . . . . . . . . . . . . . 343
24.6 Samba Server in the Network with Active Directory . . . . . . . . . . 344
24.7 For More Information . . . . . . . . . . . . . . . . . . . . . . 345
25 Sharing File Systems with NFS 347
25.1 Installing the Required Software . . . . . . . . . . . . . . . . . . 347
25.2 Importing File Systems with YaST . . . . . . . . . . . . . . . . . . 348
25.3 Importing File Systems Manually . . . . . . . . . . . . . . . . . . 349
25.4 Exporting File Systems with YaST . . . . . . . . . . . . . . . . . . 351
25.5 Exporting File Systems Manually . . . . . . . . . . . . . . . . . . 356
25.6 NFS with Kerberos . . . . . . . . . . . . . . . . . . . . . . . . 359
25.7 For More Information . . . . . . . . . . . . . . . . . . . . . . 359
26 File Synchronization 361
26.1 Available Data Synchronization Software . . . . . . . . . . . . . . . 361
26.2 Determining Factors for Selecting a Program . . . . . . . . . . . . . 363
26.3 Introduction to CVS . . . . . . . . . . . . . . . . . . . . . . . 366
26.4 Introduction to rsync . . . . . . . . . . . . . . . . . . . . . . . 368
26.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 370
27 The Apache HTTP Server 371
27.1 QuickStart........................... 371
27.2 Conguring Apache . . . . . . . . . . . . . . . . . . . . . . . 373
27.3 Starting and Stopping Apache . . . . . . . . . . . . . . . . . . . 388
27.4 Installing, Activating, and Conguring Modules . . . . . . . . . . . . 391
27.5 Getting CGI Scripts to Work . . . . . . . . . . . . . . . . . . . . 398
27.6 Setting Up a Secure Web Server with SSL . . . . . . . . . . . . . . 401
27.7 Avoiding Security Problems . . . . . . . . . . . . . . . . . . . . 407
27.8 Troubleshooting......................... 409
27.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 410
28 Setting up an FTP server with YaST 413
28.1 Starting the FTP server . . . . . . . . . . . . . . . . . . . . . . 414
28.2 FTP General Settings . . . . . . . . . . . . . . . . . . . . . . . 415
28.3 FTP Performance Settings . . . . . . . . . . . . . . . . . . . . . 416
28.4 Authentication ......................... 416
28.5 ExpertSettings ......................... 417
28.6 For more information . . . . . . . . . . . . . . . . . . . . . . 417

29 The Proxy Server Squid 419
29.1 Some Facts about Proxy Caches . . . . . . . . . . . . . . . . . . 420
29.2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . 421
29.3 StartingSquid.......................... 423
29.4 The Conguration File /etc/squid/squid.conf . . . . . . . . . . . . . 425
29.5 Conguring a Transparent Proxy . . . . . . . . . . . . . . . . . . 431
29.6 cachemgr.cgi .......................... 434
29.7 Cache Report Generation with Calamaris . . . . . . . . . . . . . . 436
29.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 437

About This Guide
This guide is intended for use by professional network and system administrators during
the operation of SUSE® Linux Enterprise. As such, it is solely concerned with ensuring
that SUSE Linux Enterprise is properly congured and that the required services on
the network are available to allow it to function properly as initially installed. This
guide does not cover the process of ensuring that SUSE Linux Enterprise offers proper
compatibility with your enterprise's application software or that its core functionality
meets those requirements. It assumes that a full requirements audit has been done and
the installation has been requested or that a test installation, for the purpose of such an
audit, has been requested.
This guide contains the following:
Administration
SUSE Linux Enterprise offers a wide range of tools to customize various aspects
of the system. This part introduces a few of them. A breakdown of available device
technologies, high availability congurations, and advanced administration possi-
bilities introduces the system to the administrator.
System
Learn more about the underlying operating system by studying this part. SUSE
Linux Enterprise supports a number of hardware architectures and you can use this
to adapt your own applications to run on SUSE Linux Enterprise. The boot loader
and boot procedure information assists you in understanding how your Linux system
works and how your own custom scripts and applications may blend in with it.
Mobile Computing
Laptops, and the communication between mobile devices like PDAs, or cellular
phones and SUSE Linux Enterprise need some special attention. Take care for
power conservation and for the integration of different devices into a changing
network environment. Also get in touch with the background technologies that
provide the needed functionality.
Services
SUSE Linux Enterprise is designed to be a network operating system. It offers a
wide range of network services, such as DNS, DHCP, Web, proxy, and authentica-
tion services, and integrates well into heterogeneous environments including MS
Windows clients and servers.

Many chapters in this manual contain links to additional documentation resources. This
includes additional documentation that is available on the system as well as documen-
tation available on the Internet.
For an overview of the documentation available for your product and the latest docu-
mentation updates, refer to http://www.novell.com/documentation.
1 Available Documentation
We provide HTML and PDF versions of our books in different languages. The following
manuals for users and administrators are available on this product:
Deployment Guide (↑Deployment Guide)
Shows how to install single or multiple systems and how to exploit the product
inherent capabilities for a deployment infrastructure. Choose from various approach-
es, ranging from a local installation or a network installation server to a mass de-
ployment using a remote-controlled, highly-customized, and automated installation
technique.
Administration Guide (page 1)
Covers system administration tasks like maintaining, monitoring and customizing
an initially installed system.
Security Guide (↑Security Guide)
Introduces basic concepts of system security, covering both local and network se-
curity aspects. Shows how to make use of the product inherent security software
like Novell AppArmor (which lets you specify per program which les the program
may read, write, and execute) or the auditing system that reliably collects informa-
tion about any security-relevant events.
Virtualization with Xen (↑Virtualization with Xen)
Offers an introduction to virtualization technology of your product. It features an
overview of the various elds of application and installation types of each of the
xii Administration Guide

platforms supported by SUSE Linux Enterprise Server as well as a short description
of the installation procedure.
Storage Administration Guide
Provides information about how to manage storage devices on a SUSE Linux En-
terprise Server.
In addition to the comprehensive manuals, several quick start guides are available:
Installation Quick Start (↑Installation Quick Start)
Lists the system requirements and guides you step-by-step through the installation
of SUSE Linux Enterprise Server from DVD, or from an ISO image.
Linux Audit Quick Start
Gives a short overview how to enable and congure the auditing system and how
to execute key tasks such as setting up audit rules, generating reports, and analyzing
the log les.
Novell AppArmor Quick Start
Helps you understand the main concepts behind Novell® AppArmor.
Find HTML versions of most SUSE Linux Enterprise Server manuals in your installed
system under /usr/share/doc/manual or in the help centers of your desktop.
Find the latest documentation updates at http://www.novell.com/
documentation where you can download PDF or HTML versions of the manuals
for your product.
2 Feedback
Several feedback channels are available:
• To report bugs for a product component or to submit enhancements requests, please
use https://bugzilla.novell.com/. If you are new to Bugzilla, you
might nd the Bug Writing FAQs helpful, available from the Novell Bugzilla home
page.
• We want to hear your comments and suggestions about this manual and the other
documentation included with this product. Please use the User Comments feature
About This Guide xiii

at the bottom of each page of the online documentation and enter your comments
there.
3 Documentation Conventions
The following typographical conventions are used in this manual:
•/etc/passwd: directory names and lenames
•placeholder: replace placeholder with the actual value
•PATH: the environment variable PATH
•ls,--help: commands, options, and parameters
•user: users or groups
•Alt,Alt +F1: a key to press or a key combination; keys are shown in uppercase as
on a keyboard
•File,File >Save As: menu items, buttons
•►amd64 em64t ipf: This paragraph is only relevant for the specied architectures.
The arrows mark the beginning and the end of the text block. ◄
►ipseries zseries: This paragraph is only relevant for the specied architectures.
The arrows mark the beginning and the end of the text block. ◄
•Dancing Penguins (Chapter Penguins, ↑Another Manual): This is a reference to a
chapter in another manual.
xiv Administration Guide

Part I. Support and Common
Tasks

1
YaST Online Update
Novell offers a continuous stream of software security updates for your product. By
default openSUSE Updater is used to keep your system up-to-date. Refer to Sec-
tion “Keeping the System Up-to-date” (Chapter 9, Installing or Removing Software,
↑Deployment Guide) for further information on openSUSE Updater. This chapter covers
the alternative tool for updating software packages: YaST Online Update.
The current patches for SUSE® Linux Enterprise Server are available from an update
software repository. If you have registered your product during the installation, an update
repository is already congured. If you have not registered SUSE Linux Enterprise
Server, you can do so by running Software >Online Update Conguration in YaST
and start Advanced >Register for Support and Get Update Repository. Alternatively,
you can manually add an update repository from a source you trust. To add or remove
repositories, start the Repository Manager with Software >Software Repositories in
YaST. Learn more about the Repository Manager in Section “Managing Software
Repositories and Services” (Chapter 9, Installing or Removing Software, ↑Deployment
Guide).
NOTE: Error on Accessing the Update Catalog
If you are not able to access the update catalog, this might be due to an expired
subscription. Normally, SUSE Linux Enterprise Server comes with a one or three
years subscription, during which you have access to the update catalog. This
access will be denied once the subscription ends.
In case of an access denial to the update catalog you will see a warning message
with a recommendation to visit the Novell Customer Center and check your
YaST Online Update 3

subscription. The Novell Customer Center is available at http://www.novell
.com/center/.
Novell provides updates with different relevance levels. Security updates x severe
security hazards and should denitely be installed. Recommended updates x issues
that could compromise your computer, whereas Optional updates x non-security
relevant issues or provide enhancements.
To install updates and improvements with YaST, run Software >Online Update from
YaST. All new patches (except the optional ones) that are currently available for your
system are already marked for installation. Clicking Accept or Apply automatically in-
stalls these patches. After the installation has completed, conrm with Finish. Your
system is now up-to-date.
TIP: Disabling deltarpms
By default updates are downloaded as deltarpms. Since rebuilding rpm packages
from deltarpms is a memory and CPU time consuming task, certain setups or
hardware congurations might require you to disable the usage of deltarpms
for performance sake. To disable the use of deltarpms edit the le /etc/
zypp/zypp.conf and set download.use_deltarpm to false.
1.1 Installing Patches Manually Using
the Qt Interface
The Online Update window consists of four sections. The list of all patches available
is on the left. Find the description of the selected patch displayed below the list of
patches. The right column lists the packages included in the selected patch (a patch can
consist of several packages) and below, a detailed description of the selected package.
Optionally, the disk usage can be displayed at the bottom of the left column (this display
is faded out by default—use the dotted slider to make it visible).
4Administration Guide

Figure 1.1 YaST Online Update
The patch display lists the available patches for SUSE Linux Enterprise Server. The
patches are sorted by security relevance (security,recommended, and optional).
There are three different views on patches. Use Show Patch Category to toggle the
views:
Needed Patches (default view)
Non-installed patches that apply to packages installed on your system.
Unneeded Patches
Patches that either apply to packages not installed on your system, or patches that
have requirements which have already have been fullled (because they have already
been updated from another source).
All Patches
All patches available for SUSE Linux Enterprise Server.
A list entry consists of a symbol and the patch name. For a list of possible symbols,
press Shift +F1. Actions required by Security and Recommended patches are au-
tomatically preset. These actions are Autoinstall,Autoupdate and Autodelete. Actions
for Optional patches are not preset—right-click on a patch and choose an action
from the list.
YaST Online Update 5

If you install an up-to-date package from a repository other than the update repository,
the requirements of a patch for this package may be fullled with this installation. In
this case a check mark is displayed in front of the patch summary. The patch will be
visible in the list until you mark it for installation. This will in fact not install the patch
(because the package already is up-to-date), but mark the patch as having been installed.
Most patches include updates for several packages. If you want to change actions for
single packages, right-click on a package in the package window and choose an action.
Once you have marked all patches and packages as desired, proceed with Accept.
1.2 Installing Patches Manually Using
the gtk Interface
The Online Update window consists of two main sections. The left pane lists all
patches and provides different lters for the patch list. See the right pane for a list of
changes that will carried out once you Apply them.
Figure 1.2 YaST Online Update
6Administration Guide