Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION... User manual

SUSE Linux Enterprise
Server
www.novell.com10
August04,2006 Installation and Administration

Installation and Administration
List of Authors: Jörg Arndt, Steve Bearnson, Stefan Behlert, Frank Bodammer, James Branam,
Volker Buzek, Klara Cihlarova, Catherine Craft, Olaf Dabrunz, Stefan Dirsch, Olaf Donjak, Roman
Drahtmüller, Thorsten Dubiel, Torsten Duwe, Thomas Fehr, Stefan Fent, Werner Fink, Jakub Friedl,
Kurt Garloff, Joachim Gleißner, Todd Grant, Carsten Groß, Andreas Grünbacher, Berthold Gunreben,
Franz Hassels, Andreas Jaeger, Jana Jaeger, Denise Jewkes, Klaus Kämpf, Andi Kleen, Hubert
Mantel, Lars Marowsky-Bree, Chris Mason, Johannes Meixner, Lars Müller, Matthias Nagorni, Anas
Nashif, Siegfried Olschner, Edith Parzefall, Peter Pöml, Thomas Renninger, Hannes Reinecke, Scott
Rhoades, Thomas Rölz, Heiko Rommel, Tanja Roth, Marcus Schäfer, Thomas Schraitle, Kay Sievers,
Klaus Singvogel, Frank Sundermeyer, Elisabeth Tobiasson, Hendrik Vogelsang, Klaus G. Wagner,
Rebecca Walter, Christian Zoz
This publication is intellectual property of Novell Inc.
Its contents can be duplicated, either in part or in whole, provided that a copyright label is visibly lo-
cated on each copy.
All information found in this book has been compiled with utmost attention to detail. However, this
does not guarantee complete accuracy. Neither SUSE LINUX GmbH, the authors, nor the translators
shall be held liable for possible errors or the consequences thereof.
Novell, the Novell logo, the N logo and SUSE are registered trademarks of Novell, Inc. in the United
States and other countries. * Linux is a registered trademark of Linus Torvalds. All other third party
trademarks are the property of their respective owners.

Contents
About This Guide xv
Part I Deployment 19
1Planning for SUSE Linux Enterprise 21
1.1 Considerations for Deployment of a SUSE Linux Enterprise Server . . . . 23
1.2 Deployment of SUSE Linux Enterprise Server . . . . . . . . . . . . . 23
1.3 Running SUSE Linux Enterprise Server . . . . . . . . . . . . . . . . 24
2Deployment Strategies 25
2.1 Deploying up to 10 Workstations . . . . . . . . . . . . . . . . . . 25
2.2 Deploying up to 100 Workstations . . . . . . . . . . . . . . . . . . 27
2.3 Deploying More than 100 Workstations . . . . . . . . . . . . . . . 34
3Installation with YaST 35
3.1 IBM System z: System Start-Up for Installation . . . . . . . . . . . . . 35
3.2 System Start-Up for Installation . . . . . . . . . . . . . . . . . . . 36
3.3 TheBootScreen......................... 38
3.4 Language Selection . . . . . . . . . . . . . . . . . . . . . . . . 40
3.5 IBM System z: Hard Disk Conguration . . . . . . . . . . . . . . . . 40
3.6 LicenseAgreement........................ 42
3.7 SystemAnalysis.......................... 43
3.8 TimeZone............................ 43
3.9 Installation Summary . . . . . . . . . . . . . . . . . . . . . . . 43
3.10 Conguration .......................... 57
3.11 GraphicalLogin.......................... 67

4Remote Installation 69
4.1 Installation Scenarios for Remote Installation . . . . . . . . . . . . . 69
4.2 Setting Up the Server Holding the Installation Sources . . . . . . . . . 78
4.3 Preparing the Boot of the Target System . . . . . . . . . . . . . . . 86
4.4 Booting the Target System for Installation . . . . . . . . . . . . . . . 97
4.5 Monitoring the Installation Process . . . . . . . . . . . . . . . . . 101
5Automated Installation 105
5.1 Simple Mass Installation . . . . . . . . . . . . . . . . . . . . . . 105
5.2 Rule-Based Autoinstallation . . . . . . . . . . . . . . . . . . . . 116
5.3 For More Information . . . . . . . . . . . . . . . . . . . . . . 122
6Advanced Disk Setup 123
6.1 LVMConguration........................ 123
6.2 Soft RAID Conguration . . . . . . . . . . . . . . . . . . . . . 131
7System Conguration with YaST 137
7.1 YaSTLanguage.......................... 138
7.2 The YaST Control Center . . . . . . . . . . . . . . . . . . . . . 138
7.3 Software............................ 139
7.4 Hardware............................ 152
7.5 System............................. 158
7.6 NetworkDevices......................... 169
7.7 NetworkServices........................ 170
7.8 AppArmor ........................... 176
7.9 Security and Users . . . . . . . . . . . . . . . . . . . . . . . . 177
7.10 Miscellaneous.......................... 181
7.11 YaSTinTextMode........................ 184
7.12 Update from the Command Line . . . . . . . . . . . . . . . . . . 187
7.13 SaX2.............................. 190
7.14 Troubleshooting......................... 196
7.15 For More Information . . . . . . . . . . . . . . . . . . . . . . 197
8Updating SUSE Linux Enterprise 199
8.1 Updating SUSE Linux Enterprise . . . . . . . . . . . . . . . . . . 199
8.2 Installing Service Packs . . . . . . . . . . . . . . . . . . . . . . 201
8.3 Software Changes from Version 9 to Version 10 . . . . . . . . . . . 208

Part II Administration 221
9OpenWBEM 223
9.1 Setting Up OpenWBEM . . . . . . . . . . . . . . . . . . . . . . 225
9.2 Changing the OpenWBEM CIMOM Conguration . . . . . . . . . . . 230
9.3 For More Information . . . . . . . . . . . . . . . . . . . . . . 250
10 Multipath IO 251
10.1 Supported Hardware . . . . . . . . . . . . . . . . . . . . . . . 252
10.2 System Conguration . . . . . . . . . . . . . . . . . . . . . . . 253
10.3 Software Conguration . . . . . . . . . . . . . . . . . . . . . . 253
10.4 Using the Devices . . . . . . . . . . . . . . . . . . . . . . . . 256
11 Mass Storage over IP Networks—iSCSI 259
11.1 Setting Up an iSCSI Target . . . . . . . . . . . . . . . . . . . . . 259
11.2 Conguring iSCSI Initiator . . . . . . . . . . . . . . . . . . . . . 264
12 High Availability under Linux 269
12.1 ImportantTerms......................... 269
12.2 A Sample Minimum Scenario . . . . . . . . . . . . . . . . . . . 271
12.3 Components of a High Availability Solution . . . . . . . . . . . . . 272
12.4 The Software Side of High Availability . . . . . . . . . . . . . . . . 273
12.5 Clustering............................ 275
12.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 276
13 Installing a Heartbeat 2 Cluster Using YaST 279
13.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . 279
13.2 Software Requirements . . . . . . . . . . . . . . . . . . . . . . 280
13.3 Shared Disk System Requirements . . . . . . . . . . . . . . . . . 280
13.4 Installing Heartbeat 2 . . . . . . . . . . . . . . . . . . . . . . . 280
13.5 Additional Information . . . . . . . . . . . . . . . . . . . . . . 283
14 Oracle Cluster File System 2 285
14.1 Overview of OCFS2 . . . . . . . . . . . . . . . . . . . . . . . . 285
14.2 Creating an OCFS2 Volume . . . . . . . . . . . . . . . . . . . . 292
14.3 Mounting an OCFS2 Volume . . . . . . . . . . . . . . . . . . . . 296
14.4 Additional Information . . . . . . . . . . . . . . . . . . . . . . 297

15 Access Control Lists in Linux 299
15.1 Traditional File Permissions . . . . . . . . . . . . . . . . . . . . 299
15.2 Advantages of ACLs . . . . . . . . . . . . . . . . . . . . . . . 301
15.3 Denitions........................... 301
15.4 HandlingACLs.......................... 302
15.5 ACL Support in Applications . . . . . . . . . . . . . . . . . . . . 310
15.6 For More Information . . . . . . . . . . . . . . . . . . . . . . 310
16 RPM—the Package Manager 311
16.1 Verifying Package Authenticity . . . . . . . . . . . . . . . . . . . 312
16.2 Managing Packages: Install, Update, and Uninstall . . . . . . . . . . . 312
16.3 RPMandPatches........................ 313
16.4 Delta RPM Packages . . . . . . . . . . . . . . . . . . . . . . . 315
16.5 RPMQueries.......................... 316
16.6 Installing and Compiling Source Packages . . . . . . . . . . . . . . 319
16.7 Compiling RPM Packages with build . . . . . . . . . . . . . . . . . 321
16.8 Tools for RPM Archives and the RPM Database . . . . . . . . . . . . 322
17 System Monitoring Utilities 323
17.1 Debugging........................... 324
17.2 Files and File Systems . . . . . . . . . . . . . . . . . . . . . . . 326
17.3 Hardware Information . . . . . . . . . . . . . . . . . . . . . . 328
17.4 Networking........................... 330
17.5 The /proc FileSystem...................... 332
17.6 Processes............................ 335
17.7 System Information . . . . . . . . . . . . . . . . . . . . . . . 338
17.8 User Information . . . . . . . . . . . . . . . . . . . . . . . . 342
17.9 TimeandDate.......................... 343
18 Working with the Shell 345
18.1 Getting Started with the Bash Shell . . . . . . . . . . . . . . . . . 346
18.2 Users and Access Permissions . . . . . . . . . . . . . . . . . . . 358
18.3 Important Linux Commands . . . . . . . . . . . . . . . . . . . . 361
18.4 TheviEditor.......................... 372
Part III System 377
19 32-Bit and 64-Bit Applications in a 64-Bit System Environment 379
19.1 RuntimeSupport ........................ 380
19.2 Software Development . . . . . . . . . . . . . . . . . . . . . . 380

19.3 Software Compilation on Biarch Platforms . . . . . . . . . . . . . . 381
19.4 Kernel Specications . . . . . . . . . . . . . . . . . . . . . . . 383
20 Booting and Conguring a Linux System 385
20.1 The Linux Boot Process . . . . . . . . . . . . . . . . . . . . . . 385
20.2 TheinitProcess......................... 389
20.3 System Conguration via /etc/syscong . . . . . . . . . . . . . . . 398
21 The Boot Loader 401
21.1 Selecting a Boot Loader . . . . . . . . . . . . . . . . . . . . . . 402
21.2 Booting with GRUB . . . . . . . . . . . . . . . . . . . . . . . . 402
21.3 Conguring the Boot Loader with YaST . . . . . . . . . . . . . . . 411
21.4 Uninstalling the Linux Boot Loader . . . . . . . . . . . . . . . . . 416
21.5 Creating Boot CDs . . . . . . . . . . . . . . . . . . . . . . . . 416
21.6 The Graphical SUSE Screen . . . . . . . . . . . . . . . . . . . . 417
21.7 Troubleshooting......................... 418
21.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 420
22 Special Features of SUSE Linux Enterprise 421
22.1 Information about Special Software Packages . . . . . . . . . . . . 421
22.2 VirtualConsoles......................... 428
22.3 Keyboard Mapping . . . . . . . . . . . . . . . . . . . . . . . . 428
22.4 Language and Country-Specic Settings . . . . . . . . . . . . . . . 429
23 Virtual Machine Server 435
23.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . 436
23.2 Benets of Virtual Machines . . . . . . . . . . . . . . . . . . . . 437
23.3 Terminology........................... 438
23.4 Virtual Machine Modes . . . . . . . . . . . . . . . . . . . . . . 439
23.5 Virtual Machine Server . . . . . . . . . . . . . . . . . . . . . . 439
23.6 Setting up the Virtual Machine Server . . . . . . . . . . . . . . . . 442
23.7 Creating Virtual Machines . . . . . . . . . . . . . . . . . . . . . 446
23.8 Managing Virtual Machines . . . . . . . . . . . . . . . . . . . . 447
24 Printer Operation 451
24.1 Workow of the Printing System . . . . . . . . . . . . . . . . . . 452
24.2 Methods and Protocols for Connecting Printers . . . . . . . . . . . . 453
24.3 Installing the Software . . . . . . . . . . . . . . . . . . . . . . 454
24.4 Conguring the Printer . . . . . . . . . . . . . . . . . . . . . . 454
24.5 Conguration for Applications . . . . . . . . . . . . . . . . . . . 461

24.6 Special Features in SUSE Linux Enterprise . . . . . . . . . . . . . . 461
24.7 Troubleshooting......................... 466
25 Dynamic Kernel Device Management with udev 475
25.1 The /dev Directory....................... 475
25.2 Kernel uevents and udev . . . . . . . . . . . . . . . . . . . . . 476
25.3 Drivers, Kernel Modules, and Devices . . . . . . . . . . . . . . . . 476
25.4 Booting and Initial Device Setup . . . . . . . . . . . . . . . . . . 477
25.5 Debugging udev Events . . . . . . . . . . . . . . . . . . . . . . 477
25.6 Inuencing Kernel Device Event Handling with udev Rules . . . . . . . 478
25.7 Persistent Device Naming . . . . . . . . . . . . . . . . . . . . . 479
25.8 The Replaced hotplug Package . . . . . . . . . . . . . . . . . . . 480
25.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 481
26 File Systems in Linux 483
26.1 Terminology........................... 483
26.2 Major File Systems in Linux . . . . . . . . . . . . . . . . . . . . 484
26.3 Some Other Supported File Systems . . . . . . . . . . . . . . . . 490
26.4 Large File Support in Linux . . . . . . . . . . . . . . . . . . . . 491
26.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 492
27 The X Window System 495
27.1 X11 Setup with SaX2 . . . . . . . . . . . . . . . . . . . . . . . 495
27.2 Optimizing the X Conguration . . . . . . . . . . . . . . . . . . 497
27.3 Installing and Conguring Fonts . . . . . . . . . . . . . . . . . . 503
27.4 OpenGL—3D Conguration . . . . . . . . . . . . . . . . . . . . 508
28 Authentication with PAM 513
28.1 Structure of a PAM Conguration File . . . . . . . . . . . . . . . . 514
28.2 The PAM Conguration of sshd . . . . . . . . . . . . . . . . . . 515
28.3 Conguration of PAM Modules . . . . . . . . . . . . . . . . . . 518
28.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 520
29 Power Management 521
29.1 Power Saving Functions . . . . . . . . . . . . . . . . . . . . . . 522
29.2 APM.............................. 523
29.3 ACPI.............................. 524
29.4 Rest for the Hard Disk . . . . . . . . . . . . . . . . . . . . . . 532
29.5 The powersave Package . . . . . . . . . . . . . . . . . . . . . . 533
29.6 The YaST Power Management Module . . . . . . . . . . . . . . . . 541

30 Wireless Communication 547
30.1 WirelessLAN.......................... 547
Part IV Services 559
31 Basic Networking 561
31.1 IP Addresses and Routing . . . . . . . . . . . . . . . . . . . . . 565
31.2 IPv6—The Next Generation Internet . . . . . . . . . . . . . . . . 568
31.3 NameResolution ........................ 577
31.4 Conguring a Network Connection with YaST . . . . . . . . . . . . 578
31.5 Managing Network Connections with NetworkManager . . . . . . . . 597
31.6 Conguring a Network Connection Manually . . . . . . . . . . . . . 600
31.7 smpppd as Dial-up Assistant . . . . . . . . . . . . . . . . . . . . 615
32 SLP Services in the Network 619
32.1 Installation over SLP . . . . . . . . . . . . . . . . . . . . . . . 619
32.2 Registering Your Own Services . . . . . . . . . . . . . . . . . . . 620
32.3 SLP Front-Ends in SUSE Linux Enterprise . . . . . . . . . . . . . . . 621
32.4 ActivatingSLP.......................... 622
32.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 622
33 Time Synchronization with NTP 623
33.1 Conguring an NTP Client with YaST . . . . . . . . . . . . . . . . 623
33.2 Conguring xntp in the Network . . . . . . . . . . . . . . . . . . 626
33.3 Setting Up a Local Reference Clock . . . . . . . . . . . . . . . . . 627
34 The Domain Name System 629
34.1 DNSTerminology........................ 629
34.2 Conguration with YaST . . . . . . . . . . . . . . . . . . . . . . 630
34.3 Starting the Name Server BIND . . . . . . . . . . . . . . . . . . 640
34.4 The Conguration File /etc/named.conf . . . . . . . . . . . . . . . 642
34.5 ZoneFiles ........................... 646
34.6 Dynamic Update of Zone Data . . . . . . . . . . . . . . . . . . . 651
34.7 Secure Transactions . . . . . . . . . . . . . . . . . . . . . . . 651
34.8 DNSSecurity.......................... 652
34.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 653
35 DHCP 655
35.1 Conguring a DHCP Server with YaST . . . . . . . . . . . . . . . . 656

35.2 DHCP Software Packages . . . . . . . . . . . . . . . . . . . . . 667
35.3 The DHCP Server dhcpd . . . . . . . . . . . . . . . . . . . . . 668
35.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 671
36 Using NIS 673
36.1 Conguring NIS Servers . . . . . . . . . . . . . . . . . . . . . . 673
36.2 Conguring NIS Clients . . . . . . . . . . . . . . . . . . . . . . 679
37 LDAP—A Directory Service 681
37.1 LDAPversusNIS......................... 682
37.2 Structure of an LDAP Directory Tree . . . . . . . . . . . . . . . . 683
37.3 Server Conguration with slapd.conf . . . . . . . . . . . . . . . . 686
37.4 Data Handling in the LDAP Directory . . . . . . . . . . . . . . . . 691
37.5 Conguring an LDAP Server with YaST . . . . . . . . . . . . . . . . 695
37.6 Conguring an LDAP Client with YaST . . . . . . . . . . . . . . . . 698
37.7 Conguring LDAP Users and Groups in YaST . . . . . . . . . . . . . 706
37.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 707
38 Samba 709
38.1 Terminology........................... 709
38.2 Starting and Stopping Samba . . . . . . . . . . . . . . . . . . . 711
38.3 Conguring a Samba Server . . . . . . . . . . . . . . . . . . . . 711
38.4 Conguring Clients . . . . . . . . . . . . . . . . . . . . . . . . 717
38.5 Samba as Login Server . . . . . . . . . . . . . . . . . . . . . . 718
38.6 Samba Server in the Network with Active Directory . . . . . . . . . . 719
38.7 Migrating a Windows NT Server to Samba . . . . . . . . . . . . . . 721
38.8 For More Information . . . . . . . . . . . . . . . . . . . . . . 723
39 Sharing File Systems with NFS 725
39.1 Importing File Systems with YaST . . . . . . . . . . . . . . . . . . 725
39.2 Importing File Systems Manually . . . . . . . . . . . . . . . . . . 726
39.3 Exporting File Systems with YaST . . . . . . . . . . . . . . . . . . 726
39.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 728
40 File Synchronization 729
40.1 Available Data Synchronization Software . . . . . . . . . . . . . . . 729
40.2 Determining Factors for Selecting a Program . . . . . . . . . . . . . 732
40.3 Introduction to Unison . . . . . . . . . . . . . . . . . . . . . . 736
40.4 Introduction to CVS . . . . . . . . . . . . . . . . . . . . . . . 738
40.5 Introduction to Subversion . . . . . . . . . . . . . . . . . . . . 741

40.6 Introduction to rsync . . . . . . . . . . . . . . . . . . . . . . . 744
40.7 Introduction to mailsync . . . . . . . . . . . . . . . . . . . . . 746
41 The Apache HTTP Server 751
41.1 QuickStart........................... 751
41.2 Conguring Apache . . . . . . . . . . . . . . . . . . . . . . . 753
41.3 Starting and Stopping Apache . . . . . . . . . . . . . . . . . . . 767
41.4 Installing, Activating, and Conguring Modules . . . . . . . . . . . . 769
41.5 Getting CGI Scripts to Work . . . . . . . . . . . . . . . . . . . . 776
41.6 Setting Up a Secure Web Server with SSL . . . . . . . . . . . . . . 779
41.7 Avoiding Security Problems . . . . . . . . . . . . . . . . . . . . 784
41.8 Troubleshooting......................... 786
41.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 787
42 The Proxy Server Squid 791
42.1 Some Facts about Proxy Caches . . . . . . . . . . . . . . . . . . 792
42.2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . 793
42.3 StartingSquid.......................... 795
42.4 The Conguration File /etc/squid/squid.conf . . . . . . . . . . . . . 797
42.5 Conguring a Transparent Proxy . . . . . . . . . . . . . . . . . . 802
42.6 cachemgr.cgi .......................... 805
42.7 squidGuard........................... 807
42.8 Cache Report Generation with Calamaris . . . . . . . . . . . . . . 809
42.9 For More Information . . . . . . . . . . . . . . . . . . . . . . 810
Part V Security 811
43 Managing X.509 Certication 813
43.1 The Principles of Digital Certication . . . . . . . . . . . . . . . . 813
43.2 YaST Modules for CA Management . . . . . . . . . . . . . . . . . 818
44 Masquerading and Firewalls 829
44.1 Packet Filtering with iptables . . . . . . . . . . . . . . . . . . . . 829
44.2 Masquerading Basics . . . . . . . . . . . . . . . . . . . . . . . 831
44.3 Firewalling Basics . . . . . . . . . . . . . . . . . . . . . . . . 832
44.4 SuSErewall2.......................... 833
44.5 For More Information . . . . . . . . . . . . . . . . . . . . . . 838

45 SSH: Secure Network Operations 839
45.1 The OpenSSH Package . . . . . . . . . . . . . . . . . . . . . . 839
45.2 ThesshProgram......................... 840
45.3 scp—SecureCopy........................ 840
45.4 sftp—Secure File Transfer . . . . . . . . . . . . . . . . . . . . . 841
45.5 The SSH Daemon (sshd)—Server-Side . . . . . . . . . . . . . . . . 841
45.6 SSH Authentication Mechanisms . . . . . . . . . . . . . . . . . . 842
45.7 X, Authentication, and Forwarding Mechanisms . . . . . . . . . . . . 843
46 Network Authentication—Kerberos 845
46.1 Kerberos Terminology . . . . . . . . . . . . . . . . . . . . . . 845
46.2 How Kerberos Works . . . . . . . . . . . . . . . . . . . . . . . 847
46.3 Users' View of Kerberos . . . . . . . . . . . . . . . . . . . . . . 850
46.4 For More Information . . . . . . . . . . . . . . . . . . . . . . 851
47 Installing and Administering Kerberos 853
47.1 Choosing the Kerberos Realms . . . . . . . . . . . . . . . . . . . 853
47.2 Setting Up the KDC Hardware . . . . . . . . . . . . . . . . . . . 854
47.3 Clock Synchronization . . . . . . . . . . . . . . . . . . . . . . 855
47.4 Conguring the KDC . . . . . . . . . . . . . . . . . . . . . . . 855
47.5 Manually Conguring Kerberos Clients . . . . . . . . . . . . . . . 858
47.6 Conguring a Kerberos Client with YaST . . . . . . . . . . . . . . . 861
47.7 Remote Kerberos Administration . . . . . . . . . . . . . . . . . . 863
47.8 Creating Kerberos Host Principals . . . . . . . . . . . . . . . . . 865
47.9 Enabling PAM Support for Kerberos . . . . . . . . . . . . . . . . 866
47.10 Conguring SSH for Kerberos Authentication . . . . . . . . . . . . . 867
47.11 Using LDAP and Kerberos . . . . . . . . . . . . . . . . . . . . . 868
48 Encrypting Partitions and Files 873
48.1 Setting Up a Crypto File System with YaST . . . . . . . . . . . . . . 874
48.2 Using vi to Encrypt Single Files . . . . . . . . . . . . . . . . . . . 876
49 Conning Privileges with AppArmor 879
49.1 Installing Novell AppArmor . . . . . . . . . . . . . . . . . . . . 880
49.2 Enabling and Disabling Novell AppArmor . . . . . . . . . . . . . . 880
49.3 Getting Started with Proling Applications . . . . . . . . . . . . . 882
50 Security and Condentiality 889
50.1 Local Security and Network Security . . . . . . . . . . . . . . . . 889

50.2 Some General Security Tips and Tricks . . . . . . . . . . . . . . . 898
50.3 Using the Central Security Reporting Address . . . . . . . . . . . . 901
Part VI Troubleshooting 903
51 Help and Documentation 905
51.1 Using the SUSE Help Center . . . . . . . . . . . . . . . . . . . . 905
51.2 ManPages........................... 909
51.3 InfoPages ........................... 910
51.4 The Linux Documentation Project . . . . . . . . . . . . . . . . . 910
51.5 Wikipedia: The Free Online Encyclopedia . . . . . . . . . . . . . . 911
51.6 GuidesandBooks........................ 911
51.7 Package Documentation . . . . . . . . . . . . . . . . . . . . . 912
51.8 Usenet............................. 913
51.9 Standards and Specications . . . . . . . . . . . . . . . . . . . . 913
52 Common Problems and Their Solutions 917
52.1 Finding Information . . . . . . . . . . . . . . . . . . . . . . . 917
52.2 Installation Problems . . . . . . . . . . . . . . . . . . . . . . . 918
52.3 BootProblems ......................... 926
52.4 LoginProblems......................... 928
52.5 Network Problems . . . . . . . . . . . . . . . . . . . . . . . . 935
52.6 DataProblems.......................... 939
52.7 IBM System z: Using initrd as a Rescue System . . . . . . . . . . . . 951
Index 955

About This Guide
This guide is intended for use by professional network and system administrators during
the actual planning, deployment, conguration, and operation of SUSE® Linux Enter-
prise. As such, it is solely concerned with ensuring that SUSE Linux Enterprise is
properly congured and that the required services on the network are available to allow
it to function properly as initially installed. This guide does not cover the process of
ensuring that SUSE Linux Enterprise offers proper compatibility with your enterprise's
application software or that its core functionality meets those requirements. It assumes
that a full requirements audit has been done and the installation has been requested or
that a test installation, for the purpose of such an audit, has been requested.
This guide contains the following:
Deployment
Before you install SUSE Linux Enterprise, choose the deployment strategy and
disk setup that is best suited for your scenario. Learn how to install your system
manually, how to use network installation setups, and how to perform an autoinstal-
lation. Congure the installed system with YaST to adapt it to your requirements.
Administration
SUSE Linux Enterprise offers a wide range of tools to customize various aspects
of the system. This part introduces a few of them. A breakdown of available device
technologies, high availability congurations, and advanced administration possi-
bilities introduces the system to the administrator.
System
Learn more about the underlying operating system by studying this part. SUSE
Linux Enterprise supports a number of hardware architectures and you can use this
to adapt your own applications to run on SUSE Linux Enterprise. The boot loader
and boot procedure information assists you in understanding how your Linux system
works and how your own custom scripts and applications may blend in with it.
Services
SUSE Linux Enterprise is designed to be a network operating system. It offers a
wide range of network services, such as DNS, DHCP, Web, proxy, and authentica-
tion services, and integrates well into heterogeneous environments including MS
Windows clients and servers.

Security
This edition of SUSE Linux Enterprise includes several security-related features.
It ships with Novell® AppArmor, which enables you to protect your applications
by restricting privileges. Secure login, rewalling, and le system encryption are
covered as well.
Troubleshooting
SUSE Linux Enterprise includes a wealth of applications, tools, and documentation
should you need them in case of trouble. Some of the most common problems that
can occur with SUSE Linux Enterprise and their solutions are discussed in detail.
1 Feedback
We want to hear your comments and suggestions about this manual and the other doc-
umentation included with this product. Please use the User Comments feature at the
bottom of each page of the online documentation and enter your comments there.
2 Documentation Updates
For the latest version of this documentation, see the SUSE Linux Enterprise Server
Web site [http://www.novell.com/documentation/sles10/index
.html].
3 Additional Documentation
For additional documentation on this product, refer to http://www.novell.com/
documentation/sles10/index.html:
Start-Up Guide
Basic information about installation types and work ows.
Architecture-Specic Information
Architecture-specic information needed to prepare a SUSE Linux Enterprise
Server target for installation.
xvi Installation and Administration

Installation and Administration
In-depth installation and administration for SUSE Linux Enterprise Server.
For a documentation overview on the SUSE® Linux Enterprise Desktop product, refer
to http://www.novell.com/documentation/sled10/index.html. The
following manuals are exclusively available for SUSE Linux Enterprise Desktop:
GNOME User Guide
A comprehensive guide to the GNOME desktop and its most important applications.
KDE User Guide
A comprehensive guide to the KDE desktop and its most important applications.
Network Connectivity Guide
An in-depth introduction to networking using NetworkManager.
Novell AppArmor 2.0 Administration Guide
An in-depth administration guide to Novell AppArmor that introduces you to ap-
plication connement for heightened security in your environment.
Many chapters in this manual contain links to additional documentation resources. This
includes additional documentation that is available on the system as well as documen-
tation available on the Internet.
4 Documentation Conventions
The following typographical conventions are used in this manual:
•/etc/passwd: lenames and directory names
•placeholder: replace placeholder with the actual value
•PATH: the environment variable PATH
•ls,--help: commands, options, and parameters
•user: users or groups
•Alt ,Alt +F1 : a key to press or a key combination; keys are shown in uppercase
as on a keyboard
About This Guide xvii

•File,File →Save As: menu items, buttons
•►amd64 em64t ipf: This paragraph is only relevant for the specied architectures.
The arrows mark the beginning and the end of the text block.◄
►ipseries s390 zseries: This paragraph is only relevant for the specied architec-
tures. The arrows mark the beginning and the end of the text block.◄
•Dancing Penguins (Chapter Penguins, ↑Reference): This is a reference to a chapter
in another book.
xviii Installation and Administration

Part I. Deployment