Translations by CarZ

sudo dpkg-reconfigure slapd

dn: ou=people,dc=example,dc=com objectClass: organizationalUnit ou: people dn: ou=groups,dc=example,dc=com objectClass: organizationalUnit ou: groups dn: uid=john,ou=people,dc=example,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount uid: john sn: Doe givenName: John cn: John Doe displayName: John Doe uidNumber: 1000 gidNumber: 10000 userPassword: password gecos: John Doe loginShell: /bin/bash homeDirectory: /home/john shadowExpire: -1 shadowFlag: 0 shadowWarning: 7 shadowMin: 8 shadowMax: 999999 shadowLastChange: 10877 mail: john.doe@example.com postalCode: 31000 l: Toulouse o: Example mobile: +33 (0)6 xx xx xx xx homePhone: +33 (0)5 xx xx xx xx title: System Administrator postalAddress: initials: JD dn: cn=example,ou=groups,dc=example,dc=com objectClass: posixGroup cn: example gidNumber: 10000

In this case, you will need to specify your DNS servers manually in <filename>/etc/resolv.conf</filename>, which should look something like this:

search mydomain.example nameserver 192.168.0.1 nameserver 4.2.2.2

iface eth1 inet static address 192.168.0.2 netmask 255.255.255.0 gateway 192.168.0.1

<emphasis>Log Observer:</emphasis> unfortunately this event does not work with the <application>eBox</application> version shipped with Ubuntu 7.10.

#exec /sbin/shutdown -r now "Control-Alt-Delete pressed"

Securing a Samba File and Print Server

If you chose the <emphasis>Samba Server</emphasis> task during installation <application>libpam-smbpass</application> is already installed.

Finally, restart Samba for the new settings to take effect:

After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for the changes to take effect:

Then remount the partition:

The above example assumes <filename>/srv</filename> on a separate partition. If <filename>/srv</filename>, or wherever you have configured your share path, is part of the <filename>/</filename> partition a reboot may be required.

To match the Samba configuration above the <emphasis>sysadmin</emphasis> group will be given read, write, and execute permissions to <filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group will be given read and execute permissions, and the files will be owned by the username <emphasis>melissa</emphasis>. Enter the following in a terminal:

The <application>setfacl</application> command above gives <emphasis>execute</emphasis> permissions to all files in the <filename>/srv/samba/share</filename> directory, which you may or may not want.

password required pam_unix.so nullok obscure min=4 max=8 md5

password required pam_unix.so nullok obscure min=6 max=8 md5

There are many tools available to help you construct a complete firewall without intimate knowledge of iptables. For the GUI-inclined:

If you prefer a command-line tool with plain-text configuration files:

<application>aa-complain</application> places a profile into <emphasis>complain</emphasis> mode.

<application>aa-enforce</application> places a profile into <emphasis>enforce</emphasis> mode.

To place all profiles in enforce mode:

sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/

sudo apparmor_parser -R /etc/apparmor.d/profile.name

sudo rm /etc/apparmor.d/disable/profile.name

sudo /etc/init.d/apparmor stop

<emphasis>Path entries:</emphasis> which detail which files an application can access in the file system.

<emphasis>/bin/ping mixr,:</emphasis> allows the application read and execute access to the file.

Some standard test cases are:

<emphasis>Generate the new profile:</emphasis> Use <application>aa-genprof</application> to generate a new profile. From a terminal:

Remote Administration

In the <filename>/etc/ssh/sshd_config</filename> file, or if already present, ensure the line is not commented out.

In the <filename>/etc/ssh/sshd_config</filename> file.

eBox

apt-cache rdepends ebox | uniq

sudo apt-get install ebox

Once you make a change that requires a Save, the link will change from green to red.

eBox Modules

By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a new module is installed it will not be automatically enabled.

Default Modules

This section provides a quick summary of the default <application>eBox</application> modules.

<emphasis>Disk Usage:</emphasis> displays a graph detailing information about disk usage.

<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it.

Available Events:

Additional Modules

<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP server.

<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS server configuration options.

<emphasis>Services:</emphasis> displays configuration information for services that are available to the network.

<emphasis>Squid:</emphasis> configuration options for the <application>Squid</application> proxy server.