docs-commits June 2016

docs-commits@lists.fedoraproject.org

3 participants
33 discussions

[web] Publish SAG
by Petr Kovář 24 Jun '16

24 Jun '16

commit 188c674de2fc26d164719cfd433315841e885486 Author: Petr Kovar <pkovar(a)redhat.com> Date: Fri Jun 24 16:08:48 2016 +0200 Publish SAG fedoradocs.db | Bin 1148928 -> 1148928 bytes public_html/Sitemap | 72 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/as-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/as-IN/opds-Fedora_Core.xml | 2 +- .../as-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/as-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/as-IN/opds.xml | 14 +- public_html/as-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/bg-BG/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/bg-BG/opds-Fedora_Core.xml | 2 +- .../bg-BG/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/bg-BG/opds-Fedora_Security_Team.xml | 2 +- public_html/bg-BG/opds.xml | 14 +- public_html/bg-BG/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/bn-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/bn-IN/opds-Fedora_Core.xml | 2 +- .../bn-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/bn-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/bn-IN/opds.xml | 14 +- public_html/bn-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/bs-BA/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/bs-BA/opds-Fedora_Core.xml | 2 +- .../bs-BA/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/bs-BA/opds-Fedora_Security_Team.xml | 2 +- public_html/bs-BA/opds.xml | 14 +- public_html/bs-BA/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ca-ES/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ca-ES/opds-Fedora_Core.xml | 2 +- .../ca-ES/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ca-ES/opds-Fedora_Security_Team.xml | 2 +- public_html/ca-ES/opds.xml | 14 +- public_html/ca-ES/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/cs-CZ/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/cs-CZ/opds-Fedora_Core.xml | 2 +- .../cs-CZ/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/cs-CZ/opds-Fedora_Security_Team.xml | 2 +- public_html/cs-CZ/opds.xml | 14 +- public_html/cs-CZ/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/da-DK/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/da-DK/opds-Fedora_Core.xml | 2 +- .../da-DK/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/da-DK/opds-Fedora_Security_Team.xml | 2 +- public_html/da-DK/opds.xml | 14 +- public_html/da-DK/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/de-DE/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/de-DE/opds-Fedora_Core.xml | 2 +- .../de-DE/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/de-DE/opds-Fedora_Security_Team.xml | 2 +- public_html/de-DE/opds.xml | 14 +- public_html/de-DE/toc.html | 24 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/el-GR/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/el-GR/opds-Fedora_Core.xml | 2 +- .../el-GR/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/el-GR/opds-Fedora_Security_Team.xml | 2 +- public_html/el-GR/opds.xml | 14 +- public_html/el-GR/toc.html | 20 +- ...edora-24-System_Administrators_Guide-en-US.epub | Bin 14838796 -> 14835640 bytes .../System_Administrators_Guide/index.html | 1050 ++++++++++---------- .../app-Revision_History.html | 2 +- .../ch-Automating_System_Tasks.html | 8 +- .../ch-Configuring_NTP_Using_ntpd.html | 2 +- .../ch-Configuring_NTP_Using_the_chrony_Suite.html | 2 +- .../ch-Configuring_PTP_Using_ptp4l.html | 2 +- .../ch-Configuring_the_Date_and_Time.html | 2 +- .../html/System_Administrators_Guide/ch-DNF.html | 12 +- .../ch-Directory_Servers.html | 72 +- .../ch-File_and_Print_Servers.html | 114 ++-- .../ch-Mail_Servers.html | 12 +- .../ch-Managing_Users_and_Groups.html | 6 +- .../ch-Manually_Upgrading_the_Kernel.html | 8 +- .../System_Administrators_Guide/ch-OProfile.html | 8 +- .../System_Administrators_Guide/ch-OpenSSH.html | 20 +- .../ch-Opening_GUI_Applications.html | 2 +- .../html/System_Administrators_Guide/ch-RPM.html | 16 +- .../ch-Services_and_Daemons.html | 4 +- ...h-System_Locale_and_Keyboard_Configuration.html | 2 +- .../ch-System_Monitoring_Tools.html | 8 +- .../System_Administrators_Guide/ch-TigerVNC.html | 2 +- .../ch-Viewing_and_Managing_Log_Files.html | 8 +- .../ch-Web_Servers.html | 244 +++--- .../ch-Working_with_Kernel_Modules.html | 6 +- .../ch-Working_with_the_GRUB_2_Boot_Loader.html | 2 +- .../System_Administrators_Guide/ch01s03s03.html | 2 +- .../chap-Gaining_Privileges.html | 2 +- .../System_Administrators_Guide/gui-alt_f2.html | 2 +- .../gui-from_menu-kde.html | 2 +- .../System_Administrators_Guide/gui-from_menu.html | 2 +- .../24/html/System_Administrators_Guide/index.html | 6 +- .../24/html/System_Administrators_Guide/ix01.html | 2 +- .../part-Basic_System_Configuration.html | 2 +- .../part-Infrastructure_Services.html | 2 +- ...art-Kernel_Module_and_Driver_Configuration.html | 2 +- .../part-Monitoring_and_Automation.html | 2 +- .../part-Package_Management.html | 2 +- .../System_Administrators_Guide/part-Servers.html | 2 +- .../24/html/System_Administrators_Guide/pr01.html | 2 +- .../html/System_Administrators_Guide/pr01s03.html | 4 +- .../System_Administrators_Guide/pr01s03s02.html | 2 +- .../System_Administrators_Guide/pr01s03s03.html | 2 +- .../html/System_Administrators_Guide/pr01s04.html | 2 +- .../pref-Acknowledgments.html | 2 +- .../s1-Authentication_Options_for_NTP.html | 2 +- .../s1-Changing_the_Keyboard_Layout.html | 2 +- ...s1-Checking_if_the_NTP_Daemon_is_Installed.html | 2 +- .../s1-Checking_the_status_of_NTP.html | 2 +- .../s1-Configure_NTP.html | 2 +- .../s1-Configure_ntpdate_Servers.html | 2 +- ...the_Firewall_to_Allow_Incoming_NTP_Packets.html | 2 +- .../s1-Configuring_Clock_Sources.html | 2 +- .../s1-Configuring_the_Hardware_Clock_update.html | 2 +- .../s1-Disabling_chrony.html | 2 +- .../html/System_Administrators_Guide/s1-FTP.html | 6 +- .../s1-Installing_the_NTP_Daemon_ntpd.html | 2 +- .../s1-Managing_the_Time_on_Virtual_Machines.html | 2 +- .../System_Administrators_Guide/s1-NTP_Strata.html | 2 +- .../s1-UTC_timezones_and_DST.html | 2 +- .../s1-Understanding_Leap_Seconds.html | 2 +- .../s1-Understanding_NTP.html | 2 +- .../s1-Understanding_the_Drift_File.html | 2 +- ...-Understanding_the_ntpd_Configuration_File.html | 2 +- .../s1-Understanding_the_ntpd_Sysconfig_File.html | 2 +- .../s1-Using_the_Journal.html | 2 +- .../s1-autotasks-additional-resources.html | 2 +- .../s1-autotasks-at-batch.html | 2 +- .../s1-basic_configuration_of_rsyslog.html | 4 +- .../s1-check-rpm-sig.html | 2 +- ...s1-configuring_rsyslog_on_a_logging_server.html | 2 +- .../s1-debugging_rsyslog.html | 2 +- .../s1-email-additional-resources.html | 4 +- .../System_Administrators_Guide/s1-email-mda.html | 6 +- .../System_Administrators_Guide/s1-email-mta.html | 6 +- .../System_Administrators_Guide/s1-email-mua.html | 8 +- .../s1-email-types.html | 4 +- .../s1-find-verify-rpm.html | 12 +- .../s1-interaction_of_rsyslog_and_journal.html | 2 +- .../s1-kernel-boot-loader.html | 4 +- .../s1-kernel-download.html | 2 +- .../s1-kernel-modules-additional-resources.html | 2 +- .../s1-kernel-perform-upgrade.html | 2 +- .../s1-kernel-preparing.html | 2 +- .../s1-log-files-additional-resources.html | 2 +- ...aging_log_files_in_a_graphical_environment.html | 10 +- .../s1-ntpd_additional-resources.html | 2 +- .../s1-openssh-additional-resources.html | 2 +- .../s1-oprofile-analyzing-data.html | 4 +- .../s1-oprofile-and-systemtap.html | 2 +- .../s1-oprofile-configuring.html | 8 +- .../s1-oprofile-dev-oprofile.html | 2 +- .../s1-oprofile-example-usage.html | 2 +- .../s1-oprofile-gui.html | 2 +- .../s1-oprofile-java-support.html | 2 +- .../s1-oprofile-saving-data.html | 2 +- .../s1-oprofile-starting.html | 6 +- .../s1-oprofile_additional_resources.html | 2 +- .../s1-printing-additional-resources.html | 2 +- .../s1-printing-edit.html | 10 +- .../s1-printing-ipp-printer.html | 2 +- .../s1-printing-jetdirect-printer.html | 2 +- .../s1-printing-select-model.html | 2 +- .../s1-printing-smb-printer.html | 2 +- .../s1-printing-test-page.html | 2 +- .../s1-rpm-additional-resources.html | 6 +- .../s1-rpm-usage-examples.html | 12 +- .../System_Administrators_Guide/s1-rpm-using.html | 14 +- .../s1-services-additional-resources.html | 2 +- .../s1-services-running.html | 2 +- .../s1-ssh-beyondshell.html | 4 +- .../s1-ssh-clients.html | 4 +- .../s1-ssh-configuration.html | 6 +- .../s1-structured_logging_with_rsyslog.html | 2 +- .../s1-sysinfo-additional-resources.html | 2 +- .../s1-sysinfo-cpu.html | 2 +- .../s1-sysinfo-filesystems.html | 2 +- .../s1-sysinfo-hardware.html | 2 +- .../s1-sysinfo-memory-usage.html | 2 +- .../s1-users-configui.html | 2 +- .../s1-users-tools.html | 6 +- .../s1-using-operf.html | 2 +- .../s1-using_rsyslog_modules.html | 2 +- .../System_Administrators_Guide/s1-using_ssh.html | 2 +- .../s1-working_with_queues_in_rsyslog.html | 2 +- .../s2-Access_Control.html | 2 +- .../System_Administrators_Guide/s2-Actions.html | 4 +- .../s2-Enabling_Persistent_Storage.html | 2 +- .../s2-Filtering_Messages.html | 2 +- .../s2-Listing_Available_Keymaps.html | 2 +- ...Open_Ports_in_the_firewall_for_ntp_packets.html | 2 +- .../s2-Setting_the_Keymap.html | 2 +- .../System_Administrators_Guide/s2-Templates.html | 2 +- .../s2-Using_The_Live_View.html | 2 +- .../s2-autotasks-at-batch-controlling-access.html | 2 +- .../s2-autotasks-at-batch-viewing.html | 2 +- .../s2-autotasks-at-configuring.html | 2 +- .../s2-autotasks-batch-configuring.html | 2 +- .../s2-autotasks-commandline-options.html | 2 +- .../s2-chrony_Online_Documentation.html | 2 +- .../s2-compatibility_with_syslogd.html | 2 +- .../s2-email-mta-fetchmail.html | 16 +- .../s2-email-mta-sendmail.html | 14 +- .../s2-email-procmail-recipes.html | 14 +- .../s2-email-related-books.html | 2 +- .../s2-email-switchmail.html | 4 +- .../s2-email-types-mda.html | 2 +- .../s2-email-types-mua.html | 2 +- .../s2-email-useful-websites.html | 2 +- .../s2-enabling_encrypted_transport.html | 2 +- .../s2-exporting_messages_to_a_database.html | 2 +- .../s2-filtering_structured_messages.html | 2 +- .../s2-ftp-resources.html | 6 +- .../s2-ftp-servers.html | 2 +- .../s2-ftp-vsftpd-conf.html | 18 +- .../s2-ftp-vsftpd-start.html | 4 +- .../s2-global_directives.html | 2 +- .../s2-kernel-boot-loader-iseries.html | 2 +- .../s2-kernel-boot-loader-pseries.html | 2 +- .../s2-log_rotation.html | 2 +- .../s2-logfiles-adding.html | 2 +- .../s2-logfiles-examining.html | 2 +- .../s2-managing_queues.html | 2 +- .../s2-ntpd_useful-websites.html | 2 +- .../s2-operf-categorization.html | 2 +- .../s2-operf-events.html | 2 +- .../s2-oprofile-events.html | 8 +- .../s2-oprofile-module-output.html | 2 +- .../s2-oprofile-reading-opannotate.html | 2 +- .../s2-oprofile-reading-opreport-single.html | 2 +- .../s2-oprofile-starting-separate.html | 2 +- .../s2-parsing_JSON.html | 2 +- .../s2-rpm-freshening.html | 2 +- .../s2-rpm-querying.html | 2 +- .../s2-rpm-uninstalling.html | 2 +- .../s2-rpm-verifying.html | 6 +- .../s2-services-additional-resources-books.html | 2 +- .../s2-ssh-beyondshell-tcpip.html | 2 +- .../s2-ssh-clients-scp.html | 2 +- .../s2-ssh-clients-sftp.html | 2 +- .../s2-ssh-configuration-keypairs.html | 12 +- .../s2-ssh-configuration-requiring.html | 2 +- .../s2-ssh-configuration-sshd.html | 6 +- .../s2-storing_messages_in_the_mongodb.html | 2 +- .../s2-sysinfo-filesystems-blkid.html | 2 +- .../s2-sysinfo-filesystems-df.html | 4 +- .../s2-sysinfo-filesystems-du.html | 2 +- .../s2-sysinfo-filesystems-findmnt.html | 2 +- .../s2-sysinfo-filesystems-partx.html | 2 +- .../s2-sysinfo-filesystems-system_monitor.html | 2 +- .../s2-sysinfo-hardware-lscpu.html | 2 +- .../s2-sysinfo-hardware-lspcmcia.html | 2 +- .../s2-sysinfo-hardware-lsusb.html | 2 +- .../s2-sysinfo-memory-usage-system_monitor.html | 2 +- .../s2-users-tools-groups-add.html | 2 +- .../s2-users-tools-groups-directories.html | 2 +- .../s2-users-tools-password-aging.html | 4 +- .../s2-users-tools-users-logout.html | 2 +- .../System_Administrators_Guide/s2-using_RELP.html | 2 +- ...g_a_Broadcast_or_Mutlticast_Server_Address.html | 2 +- .../s2_Adding_a_Broadcastclient_Address.html | 2 +- .../s2_Adding_a_Manycast_Client_Address.html | 2 +- .../s2_Adding_a_Peer_Address.html | 2 +- .../s2_Adding_a_Server_Address.html | 2 +- .../s2_Adding_a_manycastserver_Address.html | 2 +- .../s2_Adding_a_multicastclient_Address.html | 2 +- ...ure_Rate_Limiting_Access_to_an_NTP_Service.html | 2 +- .../s2_Configuring_Server_Preference.html | 2 +- ...uring_Symmetric_Authentication_Using_a_Key.html | 2 +- .../s2_Configuring_The_Version_of_NTP_to_use.html | 2 +- .../s2_Configuring_the_Poll_Interval.html | 2 +- ...nfiguring_the_Time-To-Live_for_NTP_Packets.html | 2 +- .../s2_Configuring_the_burst_option.html | 2 +- .../s2_Configuring_the_iburst_Option.html | 2 +- .../s3-ftp-vsftpd-conf.html | 2 +- .../s3-services-running-restarting.html | 2 +- .../s3-services-running-running.html | 2 +- .../s3-services-running-stopping.html | 2 +- .../System_Administrators_Guide/s5-vnc-viewer.html | 2 +- .../s6-connecting-vnc-viewer.html | 2 +- .../s9-additional-sources.html | 2 +- .../sec-Adding_Other_Printer.html | 2 +- .../sec-Adding_a_new_Entry.html | 2 +- .../sec-Additional_Resources.html | 2 +- .../sec-Booting_to_Emergency_Mode.html | 2 +- ...c-Changing_and_Resetting_the_Root_Password.html | 2 +- .../sec-Configuring_DNF_and_DNF_Repositories.html | 4 +- .../sec-Configuring_the_GRUB_2_Boot_Loader.html | 2 +- .../sec-Configuring_timemaster_Options.html | 2 +- ...c-Creating_SSH_CA_Certificate_Signing-Keys.html | 2 +- ...-Customizing_the_GRUB_2_Configuration_File.html | 2 +- .../sec-DNF-Transaction_History.html | 2 +- .../sec-Displaying_Information_About_a_Module.html | 2 +- .../sec-Displaying_Package_Information.html | 4 +- ...stributing_and_Trusting_SSH_CA_Public_Keys.html | 2 +- .../sec-Editing_a_Menu_Entry.html | 2 +- .../sec-GRUB_2_Password_Protection.html | 2 +- .../sec-GRUB_2_over_a_Serial_Console.html | 2 +- .../sec-Improving_Accuracy.html | 2 +- .../sec-Installing.html | 4 +- .../sec-Installing_PTP.html | 2 +- .../sec-Listing_Packages.html | 28 +- .../sec-Loading_a_Module.html | 6 +- ...ges_to_a_GRUB_2_Menu_Using_the_grubby_Tool.html | 2 +- ...-Making_Temporary_Changes_to_a_GRUB_2_Menu.html | 2 +- .../sec-Managing_DNF_Repositories.html | 2 +- .../sec-PTP_additional_resources.html | 2 +- .../sec-PTP_useful-websites.html | 2 +- .../sec-Packages_and_Package_Groups.html | 4 +- .../sec-Password_Encryption.html | 2 +- .../sec-Persistent_Module_Loading.html | 2 +- .../sec-Printer_Configuration.html | 4 +- .../sec-Reinstalling_GRUB_2.html | 2 +- .../System_Administrators_Guide/sec-Removing.html | 4 +- .../sec-Resetting_and_Reinstalling_GRUB_2.html | 2 +- .../sec-Revoking_an_SSH_CA_Certificate.html | 2 +- .../sec-SSH_Certificate_PKCS_11_Token.html | 2 +- .../sec-Serving_NTP_Time_with_PTP.html | 2 +- .../sec-Serving_PTP_Time_with_NTP.html | 2 +- .../sec-Setting_Module_Parameters.html | 2 +- .../sec-Setting_Printer.html | 2 +- .../sec-Setting_repository_Options.html | 2 +- .../sec-Signing_SSH_Certificates.html | 2 +- .../sec-Specifying_a_Configuration_File.html | 2 +- .../sec-Starting_ptp4l.html | 2 +- .../sec-Support_for_OpenSSH_Certificates.html | 2 +- ...ronize_to_PTP_or_NTP_Time_Using_timemaster.html | 2 +- .../sec-Synchronizing_the_Clocks.html | 2 +- .../sec-Terminal_Menu_Editing_During_Boot.html | 2 +- .../sec-Troubleshooting_Logging_to_a_Server.html | 2 +- .../sec-UEFI_Secure_Boot.html | 2 +- ...standing_the_timemaster_Configuration_File.html | 2 +- .../sec-Unloading_a_Module.html | 4 +- .../sec-Using_DNF_Variables.html | 2 +- ...c-Using_OpenSSH_Certificate_Authentication.html | 2 +- .../System_Administrators_Guide/sec-Using_PTP.html | 2 +- .../sec-Using_only_a_Custom_Menu.html | 2 +- ...ng_screen_to_Connect_to_the_Serial_Console.html | 2 +- .../sec-Using_the_PTP_Management_Client.html | 2 +- .../sec-Verifying_Time_Synchronization.html | 2 +- .../sec-Verifying_the_Initial_RAM_Disk_Image.html | 4 +- .../sec-Viewing_an_SSH_CA_Certificate.html | 2 +- .../sec-Viewing_the_Current_Configuration.html | 2 +- ...he_GRUB_2_Boot_Loader-Additional_Resources.html | 2 +- ...sec-grub2-reinstall_on_UEFI-Based_Machines.html | 2 +- .../sec-printing-LPDLPR-printer.html | 2 +- .../sec-using_the_new_configuration_format.html | 4 +- .../sect-Atd-Running.html | 2 +- .../sect-Checking_if_chrony_is_synchronized.html | 2 +- .../sect-Checking_the_Status_of_chronyd.html | 2 +- ...ct-Configuring_the_Date_and_Time-date-Date.html | 2 +- ...ct-Configuring_the_Date_and_Time-date-Time.html | 2 +- .../sect-Configuring_the_Date_and_Time-date.html | 2 +- ...sect-Configuring_the_Date_and_Time-hwclock.html | 2 +- .../sect-Date_and_Time-Resources.html | 2 +- ...ct-Gaining_Privileges-Additional_Resources.html | 8 +- .../sect-Gaining_Privileges-The_sudo_Command.html | 2 +- .../sect-Keyboard_Configuration-Resources.html | 2 +- .../sect-Manually_Adjusting-the-System_Clock.html | 2 +- .../sect-Preface-Book_Organization.html | 2 +- .../sect-Security_with_chronyc.html | 2 +- ...chrony_for_a_system_in_an_isolated_network.html | 2 +- ...tting_up_chrony_for_different_environments.html | 2 +- .../sect-Starting_chronyd.html | 2 +- .../sect-Stopping_chronyd.html | 2 +- ...stem_Monitoring_Tools-Net-SNMP-Configuring.html | 2 +- ...System_Monitoring_Tools-Net-SNMP-Extending.html | 2 +- ...ystem_Monitoring_Tools-Net-SNMP-Retrieving.html | 2 +- ...t-System_Monitoring_Tools-Net-SNMP-Running.html | 2 +- .../sect-System_Monitoring_Tools-Net-SNMP.html | 2 +- ...Understanding_chrony_and-its_configuration.html | 2 +- .../sect-Understanding_chronyc.html | 2 +- ...standing_the_chrony_configuration_commands.html | 2 +- .../sect-Users_and_Groups-Resources.html | 4 +- .../sect-Using_chrony.html | 2 +- .../sect-Using_chronyc.html | 2 +- ...ct-Using_chronyc_for_remote_administration.html | 2 +- .../sect-additional_resources.html | 2 +- ...sect-enrolling-public-key-on-target-system.html | 2 +- ...-generating-a-public-private-x509-key-pair.html | 2 +- .../sect-kernel-module-authentication.html | 6 +- .../sect-loading-signed-kernel-module.html | 2 +- ...signing-kernel-module-with-the-private-key.html | 2 +- ...ect-signing-kernel-modules-for-secure-boot.html | 8 +- .../sect3-changing-date-time-hwclock.html | 2 +- .../sect4-synchronizing-date-time-hwclock.html | 2 +- ...Fedora-24-System_Administrators_Guide-en-US.pdf | Bin 11617468 -> 11557807 bytes .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/en-US/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/en-US/opds-Fedora_Core.xml | 2 +- .../en-US/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/en-US/opds-Fedora_Security_Team.xml | 2 +- public_html/en-US/opds.xml | 14 +- public_html/en-US/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/es-ES/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/es-ES/opds-Fedora_Core.xml | 2 +- public_html/es-ES/opds-Fedora_Documentation.xml | 2 +- .../es-ES/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/es-ES/opds-Fedora_Security_Team.xml | 2 +- public_html/es-ES/opds.xml | 16 +- public_html/es-ES/toc.html | 12 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/fa-IR/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/fa-IR/opds-Fedora_Core.xml | 2 +- .../fa-IR/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/fa-IR/opds-Fedora_Security_Team.xml | 2 +- public_html/fa-IR/opds.xml | 14 +- public_html/fa-IR/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/fi-FI/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/fi-FI/opds-Fedora_Core.xml | 2 +- .../fi-FI/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/fi-FI/opds-Fedora_Security_Team.xml | 2 +- public_html/fi-FI/opds.xml | 14 +- public_html/fi-FI/toc.html | 24 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/fr-FR/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/fr-FR/opds-Fedora_Core.xml | 2 +- public_html/fr-FR/opds-Fedora_Documentation.xml | 2 +- .../fr-FR/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/fr-FR/opds-Fedora_Security_Team.xml | 2 +- public_html/fr-FR/opds.xml | 16 +- public_html/fr-FR/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/gu-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/gu-IN/opds-Fedora_Core.xml | 2 +- .../gu-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/gu-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/gu-IN/opds.xml | 14 +- public_html/gu-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/he-IL/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/he-IL/opds-Fedora_Core.xml | 2 +- .../he-IL/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/he-IL/opds-Fedora_Security_Team.xml | 2 +- public_html/he-IL/opds.xml | 14 +- public_html/he-IL/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/hi-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/hi-IN/opds-Fedora_Core.xml | 2 +- .../hi-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/hi-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/hi-IN/opds.xml | 14 +- public_html/hi-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/hu-HU/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/hu-HU/opds-Fedora_Core.xml | 2 +- .../hu-HU/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/hu-HU/opds-Fedora_Security_Team.xml | 2 +- public_html/hu-HU/opds.xml | 14 +- public_html/hu-HU/toc.html | 22 +- .../ia/opds-Community_Services_Infrastructure.xml | 2 +- public_html/ia/opds-Fedora.xml | 4 +- .../ia/opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ia/opds-Fedora_Core.xml | 2 +- public_html/ia/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ia/opds-Fedora_Security_Team.xml | 2 +- public_html/ia/opds.xml | 14 +- public_html/ia/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/id-ID/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/id-ID/opds-Fedora_Core.xml | 2 +- .../id-ID/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/id-ID/opds-Fedora_Security_Team.xml | 2 +- public_html/id-ID/opds.xml | 14 +- public_html/id-ID/toc.html | 22 +- public_html/index.html | 2 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/it-IT/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/it-IT/opds-Fedora_Core.xml | 2 +- .../it-IT/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/it-IT/opds-Fedora_Security_Team.xml | 2 +- public_html/it-IT/opds.xml | 14 +- public_html/it-IT/toc.html | 24 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ja-JP/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ja-JP/opds-Fedora_Core.xml | 2 +- public_html/ja-JP/opds-Fedora_Documentation.xml | 2 +- .../ja-JP/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ja-JP/opds-Fedora_Security_Team.xml | 2 +- public_html/ja-JP/opds.xml | 16 +- public_html/ja-JP/toc.html | 20 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/kn-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/kn-IN/opds-Fedora_Core.xml | 2 +- .../kn-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/kn-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/kn-IN/opds.xml | 14 +- public_html/kn-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ko-KR/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ko-KR/opds-Fedora_Core.xml | 2 +- .../ko-KR/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ko-KR/opds-Fedora_Security_Team.xml | 2 +- public_html/ko-KR/opds.xml | 14 +- public_html/ko-KR/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/lt-LT/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/lt-LT/opds-Fedora_Core.xml | 2 +- .../lt-LT/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/lt-LT/opds-Fedora_Security_Team.xml | 2 +- public_html/lt-LT/opds.xml | 14 +- public_html/lt-LT/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/lv-LT/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/lv-LT/opds-Fedora_Core.xml | 2 +- .../lv-LT/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/lv-LT/opds-Fedora_Security_Team.xml | 2 +- public_html/lv-LT/opds.xml | 14 +- public_html/lv-LT/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ml-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ml-IN/opds-Fedora_Core.xml | 2 +- .../ml-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ml-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/ml-IN/opds.xml | 14 +- public_html/ml-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/mr-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/mr-IN/opds-Fedora_Core.xml | 2 +- .../mr-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/mr-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/mr-IN/opds.xml | 14 +- public_html/mr-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/nb-NO/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/nb-NO/opds-Fedora_Core.xml | 2 +- .../nb-NO/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/nb-NO/opds-Fedora_Security_Team.xml | 2 +- public_html/nb-NO/opds.xml | 14 +- public_html/nb-NO/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/nl-NL/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/nl-NL/opds-Fedora_Core.xml | 2 +- public_html/nl-NL/opds-Fedora_Documentation.xml | 2 +- .../nl-NL/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/nl-NL/opds-Fedora_Security_Team.xml | 2 +- public_html/nl-NL/opds.xml | 16 +- public_html/nl-NL/toc.html | 14 +- public_html/opds.xml | 94 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/or-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/or-IN/opds-Fedora_Core.xml | 2 +- .../or-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/or-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/or-IN/opds.xml | 14 +- public_html/or-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/pa-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/pa-IN/opds-Fedora_Core.xml | 2 +- .../pa-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/pa-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/pa-IN/opds.xml | 14 +- public_html/pa-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/pl-PL/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/pl-PL/opds-Fedora_Core.xml | 2 +- .../pl-PL/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/pl-PL/opds-Fedora_Security_Team.xml | 2 +- public_html/pl-PL/opds.xml | 14 +- public_html/pl-PL/toc.html | 20 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/pt-BR/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/pt-BR/opds-Fedora_Core.xml | 2 +- .../pt-BR/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/pt-BR/opds-Fedora_Security_Team.xml | 2 +- public_html/pt-BR/opds.xml | 14 +- public_html/pt-BR/toc.html | 20 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/pt-PT/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/pt-PT/opds-Fedora_Core.xml | 2 +- .../pt-PT/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/pt-PT/opds-Fedora_Security_Team.xml | 2 +- public_html/pt-PT/opds.xml | 14 +- public_html/pt-PT/toc.html | 18 +- .../ro/opds-Community_Services_Infrastructure.xml | 2 +- public_html/ro/opds-Fedora.xml | 4 +- .../ro/opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ro/opds-Fedora_Core.xml | 2 +- public_html/ro/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ro/opds-Fedora_Security_Team.xml | 2 +- public_html/ro/opds.xml | 14 +- public_html/ro/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ru-RU/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ru-RU/opds-Fedora_Core.xml | 2 +- .../ru-RU/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ru-RU/opds-Fedora_Security_Team.xml | 2 +- public_html/ru-RU/opds.xml | 14 +- public_html/ru-RU/toc.html | 24 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/sk-SK/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/sk-SK/opds-Fedora_Core.xml | 2 +- .../sk-SK/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/sk-SK/opds-Fedora_Security_Team.xml | 2 +- public_html/sk-SK/opds.xml | 14 +- public_html/sk-SK/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/sr-Latn-RS/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/sr-Latn-RS/opds-Fedora_Core.xml | 2 +- .../sr-Latn-RS/opds-Fedora_Draft_Documentation.xml | 2 +- .../sr-Latn-RS/opds-Fedora_Security_Team.xml | 2 +- public_html/sr-Latn-RS/opds.xml | 14 +- public_html/sr-Latn-RS/toc.html | 20 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/sr-RS/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/sr-RS/opds-Fedora_Core.xml | 2 +- .../sr-RS/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/sr-RS/opds-Fedora_Security_Team.xml | 2 +- public_html/sr-RS/opds.xml | 14 +- public_html/sr-RS/toc.html | 20 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/sv-SE/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/sv-SE/opds-Fedora_Core.xml | 2 +- .../sv-SE/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/sv-SE/opds-Fedora_Security_Team.xml | 2 +- public_html/sv-SE/opds.xml | 14 +- public_html/sv-SE/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/ta-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/ta-IN/opds-Fedora_Core.xml | 2 +- .../ta-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/ta-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/ta-IN/opds.xml | 14 +- public_html/ta-IN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/te-IN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/te-IN/opds-Fedora_Core.xml | 2 +- .../te-IN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/te-IN/opds-Fedora_Security_Team.xml | 2 +- public_html/te-IN/opds.xml | 14 +- public_html/te-IN/toc.html | 22 +- public_html/toc.html | 64 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/uk-UA/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/uk-UA/opds-Fedora_Core.xml | 2 +- .../uk-UA/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/uk-UA/opds-Fedora_Security_Team.xml | 2 +- public_html/uk-UA/opds.xml | 14 +- public_html/uk-UA/toc.html | 18 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/zh-CN/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/zh-CN/opds-Fedora_Core.xml | 2 +- .../zh-CN/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/zh-CN/opds-Fedora_Security_Team.xml | 2 +- public_html/zh-CN/opds.xml | 14 +- public_html/zh-CN/toc.html | 22 +- .../opds-Community_Services_Infrastructure.xml | 2 +- public_html/zh-TW/opds-Fedora.xml | 4 +- .../opds-Fedora_Contributor_Documentation.xml | 2 +- public_html/zh-TW/opds-Fedora_Core.xml | 2 +- .../zh-TW/opds-Fedora_Draft_Documentation.xml | 2 +- public_html/zh-TW/opds-Fedora_Security_Team.xml | 2 +- public_html/zh-TW/opds.xml | 14 +- public_html/zh-TW/toc.html | 22 +- 704 files changed, 2499 insertions(+), 2499 deletions(-) --- diff --git a/fedoradocs.db b/fedoradocs.db index 736535a..330c1d8 100755 Binary files a/fedoradocs.db and b/fedoradocs.db differ diff --git a/public_html/Sitemap b/public_html/Sitemap index 650fd37..e32c8ec 100644 --- a/public_html/Sitemap +++ b/public_html/Sitemap @@ -409,7 +409,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ca-ES/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/ca-ES/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -691,7 +691,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -997,7 +997,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/de-DE/Fedora/18/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/de-DE/Fedora/18/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2013-04-12</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -2024,25 +2024,25 @@ </url> <url> <loc>http://docs.fedoraproject.org/en-US/Fedora/24/epub/System_Administrators_Gu…</loc> - <lastmod>2016-06-22</lastmod> + <lastmod>2016-06-24</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> </url> <url> <loc>http://docs.fedoraproject.org/en-US/Fedora/24/html/System_Administrators_Gu…</loc> - <lastmod>2016-06-22</lastmod> + <lastmod>2016-06-24</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> </url> <url> <loc>http://docs.fedoraproject.org/en-US/Fedora/24/html-single/System_Administra…</loc> - <lastmod>2016-06-22</lastmod> + <lastmod>2016-06-24</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> </url> <url> <loc>http://docs.fedoraproject.org/en-US/Fedora/24/pdf/System_Administrators_Gui…</loc> - <lastmod>2016-06-22</lastmod> + <lastmod>2016-06-24</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> </url> @@ -2953,7 +2953,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Installation_Quick_Start_…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Installation_Quick_Start_…</loc> <lastmod>2013-03-13</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -3043,7 +3043,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Security_Guide/Fedora_Doc…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Security_Guide/Fedora-18-…</loc> <lastmod>2013-04-18</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -3163,7 +3163,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Virtualization_Getting_St…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/18/pdf/Virtualization_Getting_St…</loc> <lastmod>2013-02-12</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -3421,7 +3421,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/17/pdf/Security_Guide/fedora-17-…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/17/pdf/Security_Guide/Fedora-17-…</loc> <lastmod>2012-08-07</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -3775,7 +3775,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -4279,7 +4279,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/13/pdf/Accessibility_Guide/Fedor…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/13/pdf/Accessibility_Guide/fedor…</loc> <lastmod>2010-07-23</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -5071,7 +5071,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/11/pdf/Security_Guide/Fedora-11-…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/11/pdf/Security_Guide/fedora-11-…</loc> <lastmod>2009-11-17</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -5335,7 +5335,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora/8/pdf/Installation_Guide/Fedora-…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora/8/pdf/Installation_Guide/Fedora-…</loc> <lastmod>2008-05-13</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -5503,7 +5503,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/…</loc> <lastmod>2014-07-14</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -5575,7 +5575,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/…</loc> <lastmod>2010-07-07</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -6193,7 +6193,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.1/pdf/Virt…</loc> + <loc>http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.1/pdf/Virt…</loc> <lastmod>2013-05-28</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -6895,7 +6895,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/es-ES/Fedora/13/pdf/Accessibility_Guide/fedor…</loc> + <loc>http://docs.fedoraproject.org/es-ES/Fedora/13/pdf/Accessibility_Guide/Fedor…</loc> <lastmod>2010-05-22</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -7567,7 +7567,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/es-ES/Fedora/11/pdf/Security_Guide/fedora-11-…</loc> + <loc>http://docs.fedoraproject.org/es-ES/Fedora/11/pdf/Security_Guide/Fedora-11-…</loc> <lastmod>2010-06-13</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -8341,7 +8341,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/fi-FI/Fedora/12/pdf/Fedora_Live_images/Fedora…</loc> + <loc>http://docs.fedoraproject.org/fi-FI/Fedora/12/pdf/Fedora_Live_images/Fedora…</loc> <lastmod>2010-06-14</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -8413,7 +8413,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora…</loc> + <loc>http://docs.fedoraproject.org/fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora…</loc> <lastmod>2010-06-14</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -8989,7 +8989,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/fr-FR/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/fr-FR/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -9619,7 +9619,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/he-IL/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/he-IL/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -9883,7 +9883,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/id-ID/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/id-ID/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -10243,7 +10243,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/it-IT/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/it-IT/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -10417,7 +10417,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/it-IT/Fedora/13/pdf/Accessibility_Guide/Fedor…</loc> + <loc>http://docs.fedoraproject.org/it-IT/Fedora/13/pdf/Accessibility_Guide/fedor…</loc> <lastmod>2010-05-22</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -11731,7 +11731,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ja-JP/Fedora/18/pdf/Virtualization_Getting_St…</loc> + <loc>http://docs.fedoraproject.org/ja-JP/Fedora/18/pdf/Virtualization_Getting_St…</loc> <lastmod>2015-02-16</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -12151,7 +12151,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ja-JP/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/ja-JP/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -13675,7 +13675,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/nl-NL/Fedora/18/pdf/Virtualization_Getting_St…</loc> + <loc>http://docs.fedoraproject.org/nl-NL/Fedora/18/pdf/Virtualization_Getting_St…</loc> <lastmod>2013-03-15</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -13843,7 +13843,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/nl-NL/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/nl-NL/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -17653,7 +17653,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ru-RU/Fedora/18/pdf/Fedora_Live_Images/Fedora…</loc> + <loc>http://docs.fedoraproject.org/ru-RU/Fedora/18/pdf/Fedora_Live_Images/Fedora…</loc> <lastmod>2013-01-17</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -17749,7 +17749,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ru-RU/Fedora/17/pdf/Fedora_Live_Images/Fedora…</loc> + <loc>http://docs.fedoraproject.org/ru-RU/Fedora/17/pdf/Fedora_Live_Images/Fedora…</loc> <lastmod>2012-06-04</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -17869,7 +17869,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ru-RU/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> + <loc>http://docs.fedoraproject.org/ru-RU/Fedora/15/pdf/Burning_ISO_images_to_dis…</loc> <lastmod>2011-09-10</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -17959,7 +17959,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/ru-RU/Fedora/13/pdf/Accessibility_Guide/fedor…</loc> + <loc>http://docs.fedoraproject.org/ru-RU/Fedora/13/pdf/Accessibility_Guide/Fedor…</loc> <lastmod>2010-05-22</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> @@ -21637,7 +21637,7 @@ <priority>0.8</priority> </url> <url> - <loc>http://docs.fedoraproject.org/zh-CN/Fedora/13/pdf/Accessibility_Guide/fedor…</loc> + <loc>http://docs.fedoraproject.org/zh-CN/Fedora/13/pdf/Accessibility_Guide/Fedor…</loc> <lastmod>2010-05-22</lastmod> <changefreq>monthly</changefreq> <priority>0.8</priority> diff --git a/public_html/as-IN/opds-Community_Services_Infrastructure.xml b/public_html/as-IN/opds-Community_Services_Infrastructure.xml index 3eedf87..8091ef0 100644 --- a/public_html/as-IN/opds-Community_Services_Infrastructure.xml +++ b/public_html/as-IN/opds-Community_Services_Infrastructure.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/as-IN/opds-Community_Services_Infrastructure.…</id> <title>Community Services Infrastructure</title> <subtitle>Community Services Infrastructure</subtitle> - <updated>2016-06-22T05:27:50</updated> + <updated>2016-06-24T14:07:06</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>as-IN</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml index ae23d21..32e77ab 100644 --- a/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/as-IN/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:50</updated> + <updated>2016-06-24T14:07:07</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>bg-BG</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml b/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml index bc96f84..e0453cd 100644 --- a/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/bg-BG/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:51</updated> + <updated>2016-06-24T14:07:07</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>bn-IN</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml index 650fa1c..b141b70 100644 --- a/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/bn-IN/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:51</updated> + <updated>2016-06-24T14:07:07</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>bs-BA</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml b/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml index 54b5717..948054e 100644 --- a/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/bs-BA/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:52</updated> + <updated>2016-06-24T14:07:07</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>ca-ES</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml b/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml index 9e964af..372be7a 100644 --- a/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/ca-ES/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:52</updated> + <updated>2016-06-24T14:07:08</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>cs-CZ</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml b/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml index 93080b7..d49431c 100644 --- a/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/cs-CZ/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:53</updated> + <updated>2016-06-24T14:07:08</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>da-DK</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml b/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml index 76b06cb..6e08e3b 100644 --- a/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/da-DK/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:53</updated> + <updated>2016-06-24T14:07:08</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>de-DE</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml b/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml index 27545d2..19f598c 100644 --- a/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/de-DE/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated>  - <updated>2016-06-22</updated> + <updated>2016-06-24</updated> <dc:language>el-GR</dc:language> <category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>  diff --git a/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml b/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml index 31c9da5..46c98e6 100644 --- a/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml +++ b/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Contributor_Documentation.x…</id> <title>Fedora Contributor Documentation</title> <subtitle>Fedora Contributor Documentation</subtitle> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <!--author> <name></name> <uri></uri> diff --git a/public_html/el-GR/opds-Fedora_Core.xml b/public_html/el-GR/opds-Fedora_Core.xml index e0af6b0..38b595f 100644 --- a/public_html/el-GR/opds-Fedora_Core.xml +++ b/public_html/el-GR/opds-Fedora_Core.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Core.xml</id> <title>Fedora Core</title> <subtitle>Fedora Core</subtitle> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <!--author> <name></name> <uri></uri> diff --git a/public_html/el-GR/opds-Fedora_Draft_Documentation.xml b/public_html/el-GR/opds-Fedora_Draft_Documentation.xml index 8dac5c7..4bd4bab 100644 --- a/public_html/el-GR/opds-Fedora_Draft_Documentation.xml +++ b/public_html/el-GR/opds-Fedora_Draft_Documentation.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Draft_Documentation.xml</id> <title>Fedora Draft Documentation</title> <subtitle>Fedora Draft Documentation</subtitle> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <!--author> <name></name> <uri></uri> diff --git a/public_html/el-GR/opds-Fedora_Security_Team.xml b/public_html/el-GR/opds-Fedora_Security_Team.xml index 62fbaa4..0e56531 100644 --- a/public_html/el-GR/opds-Fedora_Security_Team.xml +++ b/public_html/el-GR/opds-Fedora_Security_Team.xml @@ -6,7 +6,7 @@ <id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Security_Team.xml</id> <title>Fedora Security Team</title> <subtitle>Fedora Security Team</subtitle> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <!--author> <name></name> <uri></uri> diff --git a/public_html/el-GR/opds.xml b/public_html/el-GR/opds.xml index 46523b3..9c357c9 100644 --- a/public_html/el-GR/opds.xml +++ b/public_html/el-GR/opds.xml @@ -6,7 +6,7 @@ <link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/> <id>http://docs.fedoraproject.org/el-GR/opds.xml</id> <title>Product List</title> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <!--author> <name></name> <uri></uri> @@ -15,7 +15,7 @@ <entry> <title>Community Services Infrastructure</title> <id>http://docs.fedoraproject.org/el-GR/Community_Services_Infrastructure/opds-…</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Community_Services_Infrastructure.xml"/> @@ -23,7 +23,7 @@ <entry> <title>Fedora</title> <id>http://docs.fedoraproject.org/el-GR/Fedora/opds-Fedora.xml</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Fedora.xml"/> @@ -31,7 +31,7 @@ <entry> <title>Fedora Contributor Documentation</title> <id>http://docs.fedoraproject.org/el-GR/Fedora_Contributor_Documentation/opds-F…</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/> @@ -39,7 +39,7 @@ <entry> <title>Fedora Core</title> <id>http://docs.fedoraproject.org/el-GR/Fedora_Core/opds-Fedora_Core.xml</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Fedora_Core.xml"/> @@ -47,7 +47,7 @@ <entry> <title>Fedora Draft Documentation</title> <id>http://docs.fedoraproject.org/el-GR/Fedora_Draft_Documentation/opds-Fedora_…</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/> @@ -55,7 +55,7 @@ <entry> <title>Fedora Security Team</title> <id>http://docs.fedoraproject.org/el-GR/Fedora_Security_Team/opds-Fedora_Securi…</id> - <updated>2016-06-22T05:27:54</updated> + <updated>2016-06-24T14:07:09</updated> <dc:language>el-GR</dc:language> <content type="text"></content> <link type="application/atom+xml" href="opds-Fedora_Security_Team.xml"/> diff --git a/public_html/el-GR/toc.html b/public_html/el-GR/toc.html index d99c82e..b2907e3 100644 --- a/public_html/el-GR/toc.html +++ b/public_html/el-GR/toc.html @@ -542,7 +542,7 @@ <a class="type" href="../en-US/./Fedora/18/epub/Installation_Quick_Start_Guide/Fedora-18-Installation_Quick_Start_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/18/html/Installation_Quick_Start_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html/Installation_Quick_Start_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/18/html-single/Installation_Quick_Start_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html-single/Installation_Quick_Start_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/18/pdf/Installation_Quick_Start_Guide/Fedora-18-Installation_Quick_Start_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Installation_Quick_Start_Guide/Fedora-18-Installation_Quick_Start_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/18/pdf/Installation_Quick_Start_Guide/Fedora-18-Installation_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Installation_Quick_Start_Guide/Fedora-18-Installation_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.18.Musicians_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.18.Musicians_Guide.types');"> @@ -577,7 +577,7 @@ <a class="type" href="../en-US/./Fedora/18/epub/Security_Guide/Fedora-18-Security_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/18/html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html/Security_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/18/html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html-single/Security_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/18/pdf/Security_Guide/Fedora_Documentation-18-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Security_Guide/Fedora_Documentation-18-Security_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/18/pdf/Security_Guide/Fedora-18-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Security_Guide/Fedora-18-Security_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.18.System_Administrators_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.18.System_Administrators_Guide.types');"> @@ -622,7 +622,7 @@ <a class="type" href="../en-US/./Fedora/18/epub/Virtualization_Getting_Started_Guide/Fedora-18-Virtualization_Getting_Started_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/18/html/Virtualization_Getting_Started_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html/Virtualization_Getting_Started_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/18/html-single/Virtualization_Getting_Started_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/18/html-single/Virtualization_Getting_Started_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/18/pdf/Virtualization_Getting_Started_Guide/Fedora-18-Virtualization_Getting_Started_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Virtualization_Getting_Started_Guide/Fedora-18-Virtualization_Getting_Started_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/18/pdf/Virtualization_Getting_Started_Guide/Fedora_Draft_Documentation-0.1-Virtualization_Getting_Started_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/18/pdf/Virtualization_Getting_Started_Guide/Fedora_Draft_Documentation-0.1-Virtualization_Getting_Started_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.18.Virtualization_Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.18.Virtualization_Security_Guide.types');"> @@ -730,7 +730,7 @@ <a class="type" href="../en-US/./Fedora/17/epub/Security_Guide/Fedora-17-Security_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/17/html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/17/html/Security_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/17/html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/17/html-single/Security_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/17/pdf/Security_Guide/fedora-17-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/17/pdf/Security_Guide/fedora-17-Security_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/17/pdf/Security_Guide/Fedora-17-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/17/pdf/Security_Guide/Fedora-17-Security_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.17.System_Administrators_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.17.System_Administrators_Guide.types');"> @@ -884,7 +884,7 @@ <a class="type" href="../en-US/./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='../en-US/./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='../en-US/./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.15.Deployment_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.15.Deployment_Guide.types');"> @@ -1098,7 +1098,7 @@ <a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');"> @@ -1415,7 +1415,7 @@ <a class="type" href="../en-US/./Fedora/11/epub/Security_Guide/Fedora-11-Security_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora/11/html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/11/html/Security_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora/11/html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/11/html-single/Security_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora/11/pdf/Security_Guide/Fedora-11-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/11/pdf/Security_Guide/Fedora-11-Security_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora/11/pdf/Security_Guide/fedora-11-Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/11/pdf/Security_Guide/fedora-11-Security_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora.11.User_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.11.User_Guide.types');"> @@ -1630,7 +1630,7 @@ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Fedora_Elections_Guide/Fedora_Contributor_Documentation-1-Fedora_Elections_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Fedora_Elections_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Fedora_Elections_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Fedora_Elections_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Fedora_Elections_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Fedora_Elections_Guide/Fedora_Contributor_Documentation-1-Fedora_Elections_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Fedora_Elections_Guide/Fedora_Contributor_Documentation-1-Fedora_Elections_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Fedora_Elections_Guide/Fedora_Contributor_Documentation--Fedora_Elections_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Fedora_Elections_Guide/Fedora_Contributor_Documentation--Fedora_Elections_Guide-en-US.pdf';return false;">pdf</a> </div> </div> <div id='Fedora_Contributor_Documentation.1.Software_Collections_Guide' class="book collapsed" onclick="toggle(event, 'Fedora_Contributor_Documentation.1.Software_Collections_Guide.types');"> @@ -1657,7 +1657,7 @@ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a> </div> </div> </div> @@ -1995,7 +1995,7 @@ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.1/epub/Virtualization_Deployment_and_Administration_Guide/Fedora_Draft_Documentation-0.1-Virtualization_Deployment_and_Administration_Guide-en-US.epub" >epub</a> <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.1/html/Virtualization_Deployment_and_Administration_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.1/html/Virtualization_Deployment_and_Administration_Guide/index.html';return false;">html</a> <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.1/html-single/Virtualization_Deployment_and_Administration_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.1/html-single/Virtualization_Deployment_and_Administration_Guide/index.html';return false;">html-single</a> - <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.1/pdf/Virtualization_Deployment_and_Administration_Guide/Fedora_Draft_Documentation-0.1-Virtualization_Deployment_and_Administration_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.1/pdf/Virtualization_Deployment_and_Administration_Guide/Fedora_Draft_Documentation-0.1-Virtualization_Deployment_and_Administration_Guide-en-US.pdf';return false;">pdf</a> + <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.1/pdf/Virtualization_Deployment_and_Administration_Guide/Fedora-19-Virtualization_Deployment_and_Administration_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.1/pdf/Virtualization_Deployment_and_Administration_Guide/Fedora-19-Virtualization_Deployment_and_Administration_Guide-en-US.pdf';return false;">pdf</a> </div> </div> </div> diff --git a/public_html/en-US/Fedora/24/epub/System_Administrators_Guide/Fedora-24-System_Administrators_Guide-en-US.epub b/public_html/en-US/Fedora/24/epub/System_Administrators_Guide/Fedora-24-System_Administrators_Guide-en-US.epub index bac350a..eaf2cca 100644 Binary files a/public_html/en-US/Fedora/24/epub/System_Administrators_Guide/Fedora-24-System_Administrators_Guide-en-US.epub and b/public_html/en-US/Fedora/24/epub/System_Administrators_Guide/Fedora-24-System_Administrators_Guide-en-US.epub differ diff --git a/public_html/en-US/Fedora/24/html-single/System_Administrators_Guide/index.html b/public_html/en-US/Fedora/24/html-single/System_Administrators_Guide/index.html index 7c9f3bf..922db62 100644 --- a/public_html/en-US/Fedora/24/html-single/System_Administrators_Guide/index.html +++ b/public_html/en-US/Fedora/24/html-single/System_Administrators_Guide/index.html @@ -6,10 +6,10 @@ addID('Fedora.24.books'); addID('Fedora.24.System_Administrators_Guide'); - </script><meta name="keywords" content="fileserver, package management, dnf, repository, user management, ssh, vnc, systemd, service, httpd, apache, postfix, locale, daemon, samba, CIFS, ftp, vsftpd, printing, cups, ntp, chrony" /></head><body class="draft toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><div xml:lang="en-US" class="book" id="idm263487741472" lang="en-US"><div class="titlepage"><div><div class="producttitle" font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><span class="productna me">Fedora</span> <span class="productnumber">24</span></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h1 id="idm263487741472" class="title">System Administrator's Guide</h1></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h2 class="subtitle">Deployment, Configuration, and Administration of Fedora 24</h2></div><p class="edition">Edition 1.0</p><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h3 class="corpauthor"> + </script><meta name="keywords" content="fileserver, package management, dnf, repository, user management, ssh, vnc, systemd, service, httpd, apache, postfix, locale, daemon, samba, CIFS, ftp, vsftpd, printing, cups, ntp, chrony" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><div xml:lang="en-US" class="book" id="idm225468129088" lang="en-US"><div class="titlepage"><div><div class="producttitle" font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><span class="productname">Fe dora</span> <span class="productnumber">24</span></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h1 id="idm225468129088" class="title">System Administrator's Guide</h1></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h2 class="subtitle">Deployment, Configuration, and Administration of Fedora 24</h2></div><p class="edition">Edition 1.0</p><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h3 class="corpauthor"> <span class="inlinemediaobject"><object data="Common_Content/images/title_logo.svg" type="image/svg+xml"> </object></span> - </h3></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div xml:lang="en-US" class="authorgroup" lang="en-US"><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Wadeley</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:swadeley@redhat.com">swadeley(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Jaromír</span> <span class="surname">Hradílek</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:jhradilek@redhat.com">jhradilek(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Petr</span> <span class="surname">Bokoč</span></h3><d iv class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:pbokoc@redhat.com">pbokoc(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Petr</span> <span class="surname">Kovář</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:pkovar@redhat.com">pkovar(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Tomáš</span> <span class="surname">Čapek</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:tcapek@redhat.com">tcapek(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Douglas</span> <span class="surname">Silas</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:silas@redhat.com">silas(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Martin</span> <span class="surname">Prpič</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Eliška</span> <span class="surname">Slobodová</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Miroslav</span> <span class="surname">Svoboda</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div> </div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="surname">Ha</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">O'Brien</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Michael</span> <span class="surname">Hideo</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Don</span> <span class="surname">Domingo</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div></div></div><hr /><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div id="idm263475632384" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para"> + </h3></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div xml:lang="en-US" class="authorgroup" lang="en-US"><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Wadeley</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:swadeley@redhat.com">swadeley(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Jaromír</span> <span class="surname">Hradílek</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:jhradilek@redhat.com">jhradilek(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Petr</span> <span class="surname">Bokoč</span></h3><d iv class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:pbokoc@redhat.com">pbokoc(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Petr</span> <span class="surname">Kovář</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:pkovar@redhat.com">pkovar(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Tomáš</span> <span class="surname">Čapek</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:tcapek@redhat.com">tcapek(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Douglas</span> <span class="surname">Silas</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div><code class="email"><a class="email" href="mailto:silas@redhat.com">silas(a)redhat.com</a></code></div><div class="author"><h3 class="author"><span class="firstname">Martin</span> <span class="surname">Prpič</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Eliška</span> <span class="surname">Slobodová</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Miroslav</span> <span class="surname">Svoboda</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div> </div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="surname">Ha</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">O'Brien</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Michael</span> <span class="surname">Hideo</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div><div class="author"><h3 class="author"><span class="firstname">Don</span> <span class="surname">Domingo</span></h3><div class="affiliation"><span class="orgname">Red Hat</span> <span class="orgdiv">Customer Content Services</span></div></div></div></div><hr /><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div id="idm225459450304" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para"> Copyright <span class="trademark"></span>© 2016 Red Hat, Inc. and others. </div><div class="para"> The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at <a href="http://creativecommons.org/licenses/by-sa/3.0/">http://creativecommons.org/licenses/by-sa/3.0/</a>. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. @@ -31,7 +31,7 @@ All other trademarks are the property of their respective owners. </div></div></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div class="abstract"><h6>Abstract</h6><div class="para"> The <em class="citetitle">System Administrator's Guide</em> documents relevant information regarding the deployment, configuration, and administration of Fedora 24. It is oriented towards system administrators with a basic understanding of the system. - </div></div></div></div><hr /></div><div class="toc"><dl class="toc"><dt><span class="preface"><a href="#idm263463394368">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Preface-Target_Audience">1. Target Audience</a></span></dt><dt><span class="section"><a href="#sect-Preface-Book_Organization">2. How to Read this Book</a></span></dt><dt><span class="section"><a href="#idm263480376192">3. Document Conventions</a></span></dt><dd><dl><dt><span class="section"><a href="#idm263486274048">3.1. Typographic Conventions</a></span></dt><dt><span class="section"><a href="#idm263491804992">3.2. Pull-quote Conventions</a></span></dt><dt><span class="section"><a href="#idm263464125376">3.3. Notes and Warnings</a></span></dt></dl></dd><dt><span class="section"><a href="#idm263466628000">4. We Need Feedback!</a></span></dt><dt><span class="section"><a href="#pref-Acknowledgments">5. Acknowledgments</a></span></dt></dl></dd><dt><span class="part"><a href="#part-Ba sic_System_Configuration">I. Basic System Configuration</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Opening_GUI_Applications">1. Opening Graphical Applications</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm263474255504">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></dd><dt><span class="chapte r"><a href="#ch-System_Locale_and_Keyboard_Configuration">2. System Locale and Keyboard Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a hre f="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_the_Date_and_Time">3. Configuring the Date and Time</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl">3.1. Using the timedatectl Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Display">3.1.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time">3.1.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Date">3.1.3. Changing the Current Date</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time_Zone ">3.1.4. Changing the Time Zone</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-NTP">3.1.5. Synchronizing the System Clock with a Remote Server</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date">3.2. Using the date Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Display">3.2.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Time">3.2.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Date">3.2.3. Changing the Current Date</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-hwclock">3.3. Using the hwclock Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect2-displaying-time-hwclock">3.3.1. Displaying the Curre nt Date and Time</a></span></dt><dt><span class="section"><a href="#sect3-changing-date-time-hwclock">3.3.2. Setting the Date and Time</a></span></dt><dt><span class="section"><a href="#sect4-synchronizing-date-time-hwclock">3.3.3. Synchronizing the Date and Time</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Date_and_Time-Resources">3.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Managing_Users_and_Groups">4. Managing Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a></sp an></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#chap-Gaining_Privilege s">5. Gaining Privileges</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Gaining_Privileges-The_su_Command">5.1. The su Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-The_sudo_Command">5.2. The sudo Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-Additional_Resources">5.3. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Package_Management">II. Package Management</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-DNF">6. DNF</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_and_Updating_Packages">6.1. Checking For and Updating Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_Updates">6.1.1. Checking For Updates</a></span></dt><dt><span class="section"><a href="#sec-Updating_Packages">6.1.2. Updating Packages</a></span></dt><dt><span class="section"><a href="#sec-Preserving_ Configuration_File_Changes">6.1.3. Preserving Configuration File Changes</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Packages_and_Package_Groups">6.2. Packages and Package Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Searching_Packages">6.2.1. Searching Packages</a></span></dt><dt><span class="section"><a href="#sec-Listing_Packages">6.2.2. Listing Packages</a></span></dt><dt><span class="section"><a href="#sec-Displaying_Package_Information">6.2.3. Displaying Package Information</a></span></dt><dt><span class="section"><a href="#sec-Installing">6.2.4. Installing Packages</a></span></dt><dt><span class="section"><a href="#sec-Removing">6.2.5. Removing Packages</a></span></dt><dt><span class="section"><a href="#sec-DNF-Transaction_History">6.2.6. Working with Transaction History</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Configuring_DNF_and_DNF_Repositories">6.3. Configuring DNF and DNF Repositories</a></span ></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_main_Options">6.3.1. Setting [main] Options</a></span></dt><dt><span class="section"><a href="#sec-Setting_repository_Options">6.3.2. Setting [repository] Options</a></span></dt><dt><span class="section"><a href="#sec-Using_DNF_Variables">6.3.3. Using DNF Variables</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Viewing_the_Current_Configuration">6.4. Viewing the Current Configuration</a></span></dt><dt><span class="section"><a href="#sec-Managing_DNF_Repositories">6.5. Adding, Enabling, and Disabling a DNF Repository</a></span></dt><dt><span class="section"><a href="#sec-Additional_Resources">6.6. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Infrastructure_Services">III. Infrastructure Services</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Services_and_Daemons">7. Services and Daemons</a></span></dt><dd><dl><dt><span class="section" ><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span ></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-OpenSSH">8. OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-config uration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certificates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span c lass="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><spa n class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-TigerVNC">9. TigerVNC</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-vnc-server">9.1. VNC Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-vnc-installation">9.1.1. Installing VNC Server</a></span></dt><dt><span class="section"><a href="#s3-configuring-vnc-server">9.1.2. Configuring VNC Server</a></span></dt><dt><span class="section"><a href="#s 4-starting-vncserver">9.1.3. Starting VNC Server</a></span></dt><dt><span class="section"><a href="#terminating-vnc-session">9.1.4. Terminating a VNC Session</a></span></dt></dl></dd><dt><span class="section"><a href="#s5-vnc-viewer">9.2. VNC Viewer</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-vncviewer">9.2.1. Installing VNC Viewer</a></span></dt><dt><span class="section"><a href="#s6-connecting-vnc-viewer">9.2.2. Connecting to VNC Server</a></span></dt><dt><span class="section"><a href="#s1-using_ssh">9.2.3. Connecting to VNC Server Using SSH</a></span></dt></dl></dd><dt><span class="section"><a href="#s9-additional-sources">9.3. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Servers">IV. Servers</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Web_Servers">10. Web Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a> </span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Mail_Servers">11. Mail Servers</a></span></dt><dd><dl><dt><span class="section" ><a href="#s1-email-protocols">11.1. Email Protocols</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-protocols-send">11.1.1. Mail Transport Protocols</a></span></dt><dt><span class="section"><a href="#s2-email-protocols-client">11.1.2. Mail Access Protocols</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-types">11.2. Email Program Classifications</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-types-mta">11.2.1. Mail Transport Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mda">11.2.2. Mail Delivery Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mua">11.2.3. Mail User Agent</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mta">11.3. Mail Transport Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-mta-postfix">11.3.1. Postfix</a></span></dt><dt><span class="section"><a href="#s2-email-mta-sendmail">11.3.2. Sendmail</a></ span></dt><dt><span class="section"><a href="#s2-email-mta-fetchmail">11.3.3. Fetchmail</a></span></dt><dt><span class="section"><a href="#s2-email-switchmail">11.3.4. Mail Transport Agent (MTA) Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mda">11.4. Mail Delivery Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-procmail-configuration">11.4.1. Procmail Configuration</a></span></dt><dt><span class="section"><a href="#s2-email-procmail-recipes">11.4.2. Procmail Recipes</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mua">11.5. Mail User Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-security">11.5.1. Securing Communication</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-additional-resources">11.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-installed-docs">11.6.1. Installed Documentation</a></span> </dt><dt><span class="section"><a href="#s2-email-useful-websites">11.6.2. Useful Websites</a></span></dt><dt><span class="section"><a href="#s2-email-related-books">11.6.3. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Directory_Servers">12. Directory Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-OpenLDAP">12.1. OpenLDAP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ldap-introduction">12.1.1. Introduction to LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-installation">12.1.2. Installing the OpenLDAP Suite</a></span></dt><dt><span class="section"><a href="#s2-ldap-configuration">12.1.3. Configuring an OpenLDAP Server</a></span></dt><dt><span class="section"><a href="#s2-selinux-openldap">12.1.4. SELinux Policy for Applications Using LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-running">12.1.5. Running an OpenLDAP Server</a></span></dt><dt><span class="section "><a href="#s2-ldap-pam">12.1.6. Configuring a System to Authenticate Using OpenLDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-resources">12.1.7. Additional Resources</a></span></dt><dt><span class="section"><a href="#s3-ldap-related-books">12.1.8. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-File_and_Print_Servers">13. File and Print Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba">13.1. Samba</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba-Introduction_to_Samba">13.1.1. Introduction to Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba_Daemons_and_Related_Services">13.1.2. Samba Daemons and Related Services</a></span></dt><dt><span class="section"><a href="#sect-Samba-Connecting_to_a_Samba_Share">13.1.3. Connecting to a Samba Share</a></span></dt><dt><span class="section"><a href="#sect-Mounting_the_Samba_Share">13.1.4. Mounting the Share</a></sp an></dt><dt><span class="section"><a href="#sect-Samba-Configuring_a_Samba_Server">13.1.5. Configuring a Samba Server</a></span></dt><dt><span class="section"><a href="#sect-Samba-Starting_and_Stopping">13.1.6. Starting and Stopping Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba-Server_Types_and_the_smb.conf_File">13.1.7. Samba Server Types and the <code class="filename">smb.conf</code> File</a></span></dt><dt><span class="section"><a href="#sect-Samba-Security_Modes">13.1.8. Samba Security Modes</a></span></dt><dt><span class="section"><a href="#sect-Samba-Account_Information-Databases">13.1.9. Samba Account Information Databases</a></span></dt><dt><span class="section"><a href="#sect-Samba-Network_Browsing">13.1.10. Samba Network Browsing</a></span></dt><dt><span class="section"><a href="#sect-Samba_with_CUPS_Printing_Support">13.1.11. Samba with CUPS Printing Support</a></span></dt><dt><span class="section"><a href="#sect-Samba_Distribution_Programs"> 13.1.12. Samba Distribution Programs</a></span></dt><dt><span class="section"><a href="#sect-Samba-Resources">13.1.13. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-FTP">13.2. FTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ftp-protocol">13.2.1. The File Transfer Protocol</a></span></dt><dt><span class="section"><a href="#s2-ftp-servers">13.2.2. FTP Servers</a></span></dt><dt><span class="section"><a href="#s3-ftp-vsftpd-conf">13.2.3. Files Installed with <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-start">13.2.4. Starting and Stopping <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-conf">13.2.5. <code class="command">vsftpd</code> Configuration Options</a></span></dt><dt><span class="section"><a href="#s2-ftp-resources">13.2.6. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href=" #sec-Printer_Configuration">13.3. Printer Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_Printer_Config">13.3.1. Starting the Printers Configuration Tool</a></span></dt><dt><span class="section"><a href="#sec-Setting_Printer">13.3.2. Starting Printer Setup</a></span></dt><dt><span class="section"><a href="#sec-Adding_Other_Printer">13.3.3. Adding a Local Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-jetdirect-printer">13.3.4. Adding an AppSocket/HP JetDirect printer</a></span></dt><dt><span class="section"><a href="#s1-printing-ipp-printer">13.3.5. Adding an IPP Printer</a></span></dt><dt><span class="section"><a href="#sec-printing-LPDLPR-printer">13.3.6. Adding an LPD/LPR Host or Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-smb-printer">13.3.7. Adding a Samba (SMB) printer</a></span></dt><dt><span class="section"><a href="#s1-printing-select-model">13.3.8. Selecting the Printer Model and Finishing</a></span></dt><dt><span class="section"><a href="#s1-printing-test-page">13.3.9. Printing a Test Page</a></span></dt><dt><span class="section"><a href="#s1-printing-edit">13.3.10. Modifying Existing Printers</a></span></dt><dt><span class="section"><a href="#s1-printing-additional-resources">13.3.11. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_the_chrony_Suite">14. Configuring NTP Using the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Introduction_to_the_chrony_Suite">14.1. Introduction to the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-differences_between_ntpd_and_chronyd">14.1.1. Differences Between ntpd and chronyd</a></span></dt><dt><span class="section"><a href="#sect-Choosing_between_NTP_daemon">14.1.2. Choosing Between NTP Daemons</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Understanding_chrony_a nd-its_configuration">14.2. Understanding chrony and Its Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Understanding_chronyd">14.2.1. Understanding chronyd</a></span></dt><dt><span class="section"><a href="#sect-Understanding_chronyc">14.2.2. Understanding chronyc</a></span></dt><dt><span class="section"><a href="#sect-Understanding_the_chrony_configuration_commands">14.2.3. Understanding the chrony Configuration Commands</a></span></dt><dt><span class="section"><a href="#sect-Security_with_chronyc">14.2.4. Security with chronyc</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chrony">14.3. Using chrony</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Installing_chrony">14.3.1. Installing chrony</a></span></dt><dt><span class="section"><a href="#sect-Checking_the_Status_of_chronyd">14.3.2. Checking the Status of chronyd</a></span></dt><dt><span class="section"><a href="#sect-Starting_chronyd">14.3.3. Start ing chronyd</a></span></dt><dt><span class="section"><a href="#sect-Stopping_chronyd">14.3.4. Stopping chronyd</a></span></dt><dt><span class="section"><a href="#sect-Checking_if_chrony_is_synchronized">14.3.5. Checking if chrony is Synchronized</a></span></dt><dt><span class="section"><a href="#sect-Manually_Adjusting-the-System_Clock">14.3.6. Manually Adjusting the System Clock</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Setting_up_chrony_for_different_environments">14.4. Setting Up chrony for Different Environments</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_which_is_infrequently_connected">14.4.1. Setting Up chrony for a System Which is Infrequently Connected</a></span></dt><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_in_an_isolated_network">14.4.2. Setting Up chrony for a System in an Isolated Network</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using _chronyc">14.5. Using chronyc</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Using_chronyc_chronyc_to_control_chronyd">14.5.1. Using chronyc to Control chronyd</a></span></dt><dt><span class="section"><a href="#sect-Using_chronyc_for_remote_administration">14.5.2. Using chronyc for Remote Administration</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-additional_resources">14.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-chrony-docs-inst">14.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-chrony_Online_Documentation">14.6.2. Online Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_ntpd">15. Configuring NTP Using ntpd</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Introduction_to_NTP">15.1. Introduction to NTP</a></span></dt><dt><span class="section"><a href="#s1-NTP_Strata">15.2. NTP Strata</a> </span></dt><dt><span class="section"><a href="#s1-Understanding_NTP">15.3. Understanding NTP</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_Drift_File">15.4. Understanding the Drift File</a></span></dt><dt><span class="section"><a href="#s1-UTC_timezones_and_DST">15.5. UTC, Timezones, and DST</a></span></dt><dt><span class="section"><a href="#s1-Authentication_Options_for_NTP">15.6. Authentication Options for NTP</a></span></dt><dt><span class="section"><a href="#s1-Managing_the_Time_on_Virtual_Machines">15.7. Managing the Time on Virtual Machines</a></span></dt><dt><span class="section"><a href="#s1-Understanding_Leap_Seconds">15.8. Understanding Leap Seconds</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Configuration_File">15.9. Understanding the ntpd Configuration File</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Sysconfig_File">15.10. Understanding the ntpd Sysconfig File</a></span>< /dt><dt><span class="section"><a href="#s1-Disabling_chrony">15.11. Disabling chrony</a></span></dt><dt><span class="section"><a href="#s1-Checking_if_the_NTP_Daemon_is_Installed">15.12. Checking if the NTP Daemon is Installed</a></span></dt><dt><span class="section"><a href="#s1-Installing_the_NTP_Daemon_ntpd">15.13. Installing the NTP Daemon (ntpd)</a></span></dt><dt><span class="section"><a href="#s1-Checking_the_status_of_NTP">15.14. Checking the Status of NTP</a></span></dt><dt><span class="section"><a href="#s1-Configure_the_Firewall_to_Allow_Incoming_NTP_Packets">15.15. Configure the Firewall to Allow Incoming NTP Packets</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Change_the_firewall_settings">15.15.1. Change the Firewall Settings</a></span></dt><dt><span class="section"><a href="#s2-Open_Ports_in_the_firewall_for_ntp_packets">15.15.2. Open Ports in the Firewall for NTP Packets</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configur e_ntpdate_Servers">15.16. Configure ntpdate Servers</a></span></dt><dt><span class="section"><a href="#s1-Configure_NTP">15.17. Configure NTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Configure_Access_Control_to_an_NTP_service">15.17.1. Configure Access Control to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Configure_Rate_Limiting_Access_to_an_NTP_Service">15.17.2. Configure Rate Limiting Access to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Peer_Address">15.17.3. Adding a Peer Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Server_Address">15.17.4. Adding a Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Broadcast_or_Mutlticast_Server_Address">15.17.5. Adding a Broadcast or Multicast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Manycast_Client_Address">15.17.6. Adding a Manycast Client Address</a></span></dt><dt ><span class="section"><a href="#s2_Adding_a_Broadcastclient_Address">15.17.7. Adding a Broadcast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_manycastserver_Address">15.17.8. Adding a Manycast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_multicastclient_Address">15.17.9. Adding a Multicast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_burst_option">15.17.10. Configuring the Burst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_iburst_Option">15.17.11. Configuring the iburst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Symmetric_Authentication_Using_a_Key">15.17.12. Configuring Symmetric Authentication Using a Key</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Poll_Interval">15.17.13. Configuring the Poll Interval</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Server_Prefere nce">15.17.14. Configuring Server Preference</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Time-To-Live_for_NTP_Packets">15.17.15. Configuring the Time-to-Live for NTP Packets</a></span></dt><dt><span class="section"><a href="#s2_Configuring_The_Version_of_NTP_to_use">15.17.16. Configuring the NTP Version to Use</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configuring_the_Hardware_Clock_update">15.18. Configuring the Hardware Clock Update</a></span></dt><dt><span class="section"><a href="#s1-Configuring_Clock_Sources">15.19. Configuring Clock Sources</a></span></dt><dt><span class="section"><a href="#s1-ntpd_additional-resources">15.20. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ntpd-docs-inst">15.20.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-ntpd_useful-websites">15.20.2. Useful Websites</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href ="#ch-Configuring_PTP_Using_ptp4l">16. Configuring PTP Using ptp4l</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_PTP">16.1. Introduction to PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Understanding_PTP">16.1.1. Understanding PTP</a></span></dt><dt><span class="section"><a href="#sec-Advantages_of_PTP">16.1.2. Advantages of PTP</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_PTP">16.2. Using PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_for_Driver_and_Hardware_Support">16.2.1. Checking for Driver and Hardware Support</a></span></dt><dt><span class="section"><a href="#sec-Installing_PTP">16.2.2. Installing PTP</a></span></dt><dt><span class="section"><a href="#sec-Starting_ptp4l">16.2.3. Starting ptp4l</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Specifying_a_Configuration_File">16.3. Specifying a Configuration File</a></span></dt><dt><span class="se ction"><a href="#sec-Using_the_PTP_Management_Client">16.4. Using the PTP Management Client</a></span></dt><dt><span class="section"><a href="#sec-Synchronizing_the_Clocks">16.5. Synchronizing the Clocks</a></span></dt><dt><span class="section"><a href="#sec-Verifying_Time_Synchronization">16.6. Verifying Time Synchronization</a></span></dt><dt><span class="section"><a href="#sec-Serving_PTP_Time_with_NTP">16.7. Serving PTP Time with NTP</a></span></dt><dt><span class="section"><a href="#sec-Serving_NTP_Time_with_PTP">16.8. Serving NTP Time with PTP</a></span></dt><dt><span class="section"><a href="#sec-Synchronize_to_PTP_or_NTP_Time_Using_timemaster">16.9. Synchronize to PTP or NTP Time Using timemaster</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_timemaster_as_a_Service">16.9.1. Starting timemaster as a Service</a></span></dt><dt><span class="section"><a href="#sec-Understanding_the_timemaster_Configuration_File">16.9.2. Understanding the timemas ter Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Configuring_timemaster_Options">16.9.3. Configuring timemaster Options</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Improving_Accuracy">16.10. Improving Accuracy</a></span></dt><dt><span class="section"><a href="#sec-PTP_additional_resources">16.11. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-PTP-docs-inst">16.11.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#sec-PTP_useful-websites">16.11.2. Useful Websites</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="#part-Monitoring_and_Automation">V. Monitoring and Automation</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-System_Monitoring_Tools">17. System Monitoring Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-sysinfo-system-processes">17.1. Viewing System Processes</a></span></dt><dd><dl><dt><span cl ass="section"><a href="#s2-sysinfo-system-processes-ps">17.1.1. Using the ps Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-system-processes-top">17.1.2. Using the top Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-system-processes-system_monitor">17.1.3. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-memory-usage">17.2. Viewing Memory Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-memory-usage-free">17.2.1. Using the free Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-memory-usage-system_monitor">17.2.2. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-cpu">17.3. Viewing CPU Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-cpu-system_monitor">17.3.1. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sy sinfo-filesystems">17.4. Viewing Block Devices and File Systems</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-filesystems-lsblk">17.4.1. Using the lsblk Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-blkid">17.4.2. Using the blkid Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-partx">17.4.3. Using the partx Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-findmnt">17.4.4. Using the findmnt Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-df">17.4.5. Using the df Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-du">17.4.6. Using the du Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-system_monitor">17.4.7. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-hardware">17.5. Viewing Hardware Information</a ></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-hardware-lspci">17.5.1. Using the lspci Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lsusb">17.5.2. Using the lsusb Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lspcmcia">17.5.3. Using the lspcmcia Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lscpu">17.5.4. Using the lscpu Command</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP">17.6. Monitoring Performance with Net-SNMP</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Installing">17.6.1. Installing Net-SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Running">17.6.2. Running the Net-SNMP Daemon</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Configuring">17.6.3. Configuring N et-SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Retrieving">17.6.4. Retrieving Performance Data over SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Extending">17.6.5. Extending Net-SNMP</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-additional-resources">17.7. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-installed-docs">17.7.1. Installed Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Viewing_and_Managing_Log_Files">18. Viewing and Managing Log Files</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-logfiles-locating">18.1. Locating Log Files</a></span></dt><dt><span class="section"><a href="#s1-basic_configuration_of_rsyslog">18.2. Basic Configuration of Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Filters">18.2.1. Filters</a></span>< /dt><dt><span class="section"><a href="#s2-Actions">18.2.2. Actions</a></span></dt><dt><span class="section"><a href="#s2-Templates">18.2.3. Templates</a></span></dt><dt><span class="section"><a href="#s2-global_directives">18.2.4. Global Directives</a></span></dt><dt><span class="section"><a href="#s2-log_rotation">18.2.5. Log Rotation</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-using_the_new_configuration_format">18.3. Using the New Configuration Format</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Rulesets">18.3.1. Rulesets</a></span></dt><dt><span class="section"><a href="#s2-compatibility_with_syslogd">18.3.2. Compatibility with syslogd</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-working_with_queues_in_rsyslog">18.4. Working with Queues in Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-defining_queues">18.4.1. Defining Queues</a></span></dt><dt><span class="section"><a href="#s2-managing_qu eues">18.4.2. Managing Queues</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-configuring_rsyslog_on_a_logging_server">18.5. Configuring rsyslog on a Logging Server</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Using_The_New_Template_Syntax_on_a_Logging_Server">18.5.1. Using The New Template Syntax on a Logging Server</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-using_rsyslog_modules">18.6. Using Rsyslog Modules</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-importing_text_files">18.6.1. Importing Text Files</a></span></dt><dt><span class="section"><a href="#s2-exporting_messages_to_a_database">18.6.2. Exporting Messages to a Database</a></span></dt><dt><span class="section"><a href="#s2-enabling_encrypted_transport">18.6.3. Enabling Encrypted Transport</a></span></dt><dt><span class="section"><a href="#s2-using_RELP">18.6.4. Using RELP</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-interacti on_of_rsyslog_and_journal">18.7. Interaction of Rsyslog and Journal</a></span></dt><dt><span class="section"><a href="#s1-structured_logging_with_rsyslog">18.8. Structured Logging with Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-importing_data_from_journal">18.8.1. Importing Data from Journal</a></span></dt><dt><span class="section"><a href="#s2-filtering_structured_messages">18.8.2. Filtering Structured Messages</a></span></dt><dt><span class="section"><a href="#s2-parsing_JSON">18.8.3. Parsing JSON</a></span></dt><dt><span class="section"><a href="#s2-storing_messages_in_the_mongodb">18.8.4. Storing Messages in the MongoDB</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-debugging_rsyslog">18.9. Debugging Rsyslog</a></span></dt><dt><span class="section"><a href="#sec-Troubleshooting_Logging_to_a_Server">18.10. Troubleshooting Logging to a Server</a></span></dt><dt><span class="section"><a href="#s1-Using_the_Journal">18.11. Using th e Journal</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Viewing_Log_Files">18.11.1. Viewing Log Files</a></span></dt><dt><span class="section"><a href="#s2-Access_Control">18.11.2. Access Control</a></span></dt><dt><span class="section"><a href="#s2-Using_The_Live_View">18.11.3. Using The Live View</a></span></dt><dt><span class="section"><a href="#s2-Filtering_Messages">18.11.4. Filtering Messages</a></span></dt><dt><span class="section"><a href="#s2-Enabling_Persistent_Storage">18.11.5. Enabling Persistent Storage</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-managing_log_files_in_a_graphical_environment">18.12. Managing Log Files in a Graphical Environment</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-logfiles-viewing">18.12.1. Viewing Log Files</a></span></dt><dt><span class="section"><a href="#s2-logfiles-adding">18.12.2. Adding a Log File</a></span></dt><dt><span class="section"><a href="#s2-logfiles-examining">18.12.3. Monitoring Log Files</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-log-files-additional-resources">18.13. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Automating_System_Tasks">19. Automating System Tasks</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-autotasks-cron-anacron">19.1. Cron and Anacron</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Cron-Installing">19.1.1. Installing Cron and Anacron</a></span></dt><dt><span class="section"><a href="#sect-Cron-Running">19.1.2. Running the Crond Service</a></span></dt><dt><span class="section"><a href="#s2-configuring-anacron-jobs">19.1.3. Configuring Anacron Jobs</a></span></dt><dt><span class="section"><a href="#s2-configuring-cron-jobs">19.1.4. Configuring Cron Jobs</a></span></dt><dt><span class="section"><a href="#s2-autotasks-cron-access">19.1.5. Controlling Access to Cron</a></span></dt><dt><span class="section"><a href="#s2-black-whit e-listing-of-cron-jobs">19.1.6. Black and White Listing of Cron Jobs</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-autotasks-at-batch">19.2. At and Batch</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-At_and_Batch_Installation">19.2.1. Installing At and Batch</a></span></dt><dt><span class="section"><a href="#sect-Atd-Running">19.2.2. Running the At Service</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-configuring">19.2.3. Configuring an At Job</a></span></dt><dt><span class="section"><a href="#s2-autotasks-batch-configuring">19.2.4. Configuring a Batch Job</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-batch-viewing">19.2.5. Viewing Pending Jobs</a></span></dt><dt><span class="section"><a href="#s2-autotasks-commandline-options">19.2.6. Additional Command Line Options</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-batch-controlling-access">19.2.7. Controlling Access to At and Bat ch</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-autotasks-additional-resources">19.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-OProfile">20. OProfile</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-oprofile-overview-tools">20.1. Overview of Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-operf_vs_opcontrol">20.1.1. operf vs. opcontrol</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-using-operf">20.2. Using operf</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-operf-kernel">20.2.1. Specifying the Kernel</a></span></dt><dt><span class="section"><a href="#s2-operf-events">20.2.2. Setting Events to Monitor</a></span></dt><dt><span class="section"><a href="#s2-operf-categorization">20.2.3. Categorization of Samples</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-configuring">20.3. Configuring OProfile Using Legacy Mode</a></span>< /dt><dd><dl><dt><span class="section"><a href="#s2-oprofile-kernel">20.3.1. Specifying the Kernel</a></span></dt><dt><span class="section"><a href="#s2-oprofile-events">20.3.2. Setting Events to Monitor</a></span></dt><dt><span class="section"><a href="#s2-oprofile-starting-separate">20.3.3. Separating Kernel and User-space Profiles</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-starting">20.4. Starting and Stopping OProfile Using Legacy Mode</a></span></dt><dt><span class="section"><a href="#s1-oprofile-saving-data">20.5. Saving Data in Legacy Mode</a></span></dt><dt><span class="section"><a href="#s1-oprofile-analyzing-data">20.6. Analyzing the Data</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-oprofile-reading-opreport">20.6.1. Using <code class="command">opreport</code></a></span></dt><dt><span class="section"><a href="#s2-oprofile-reading-opreport-single">20.6.2. Using opreport on a Single Executable</a></span></dt><dt><span cla ss="section"><a href="#s2-oprofile-module-output">20.6.3. Getting More Detailed Output on the Modules</a></span></dt><dt><span class="section"><a href="#s2-oprofile-reading-opannotate">20.6.4. Using <code class="command">opannotate</code></a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-dev-oprofile">20.7. Understanding the /dev/oprofile/ directory </a></span></dt><dt><span class="section"><a href="#s1-oprofile-example-usage">20.8. Example Usage</a></span></dt><dt><span class="section"><a href="#s1-oprofile-java-support">20.9. OProfile Support for Java</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-oprofile-java-profiling">20.9.1. Profiling Java Code</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-gui">20.10. Graphical Interface</a></span></dt><dt><span class="section"><a href="#s1-oprofile-and-systemtap">20.11. OProfile and SystemTap</a></span></dt><dt><span class="section"><a href="#s1-oprofile_additional_reso urces">20.12. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Kernel_Module_and_Driver_Configuration">VI. Kernel, Module and Driver Configuration</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Working_with_the_GRUB_2_Boot_Loader">21. Working with the GRUB 2 Boot Loader</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_GRUB_2">21.1. Introduction to GRUB 2</a></span></dt><dt><span class="section"><a href="#sec-Configuring_the_GRUB_2_Boot_Loader">21.2. Configuring the GRUB 2 Boot Loader</a></span></dt><dt><span class="section"><a href="#sec-Making_Temporary_Changes_to_a_GRUB_2_Menu">21.3. Making Temporary Changes to a GRUB 2 Menu</a></span></dt><dt><span class="section"><a href="#sec-Making_Persistent_Changes_to_a_GRUB_2_Menu_Using_the_grubby_Tool">21.4. Making Persistent Changes to a GRUB 2 Menu Using the grubby Tool</a></span></dt><dt><span class="section"><a href="#sec-Customizing_the_G RUB_2_Configuration_File">21.5. Customizing the GRUB 2 Configuration File</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Changing_the_Default_Boot_Entry">21.5.1. Changing the Default Boot Entry</a></span></dt><dt><span class="section"><a href="#sec-Editing_a_Menu_Entry">21.5.2. Editing a Menu Entry</a></span></dt><dt><span class="section"><a href="#sec-Adding_a_new_Entry">21.5.3. Adding a new Entry</a></span></dt><dt><span class="section"><a href="#sec-Using_only_a_Custom_Menu">21.5.4. Creating a Custom Menu</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-GRUB_2_Password_Protection">21.6. GRUB 2 Password Protection</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_Up_Users_and_Password_Protection_Specifying_Menu_Entries">21.6.1. Setting Up Users and Password Protection, Specifying Menu Entries</a></span></dt><dt><span class="section"><a href="#sec-Password_Encryption">21.6.2. Password Encryption</a></span></dt></dl></dd>< dt><span class="section"><a href="#sec-Reinstalling_GRUB_2">21.7. Reinstalling GRUB 2</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-grub2-reinstall_on_BIOS-Based_Machines">21.7.1. Reinstalling GRUB 2 on BIOS-Based Machines</a></span></dt><dt><span class="section"><a href="#sec-grub2-reinstall_on_UEFI-Based_Machines">21.7.2. Reinstalling GRUB 2 on UEFI-Based Machines</a></span></dt><dt><span class="section"><a href="#sec-Resetting_and_Reinstalling_GRUB_2">21.7.3. Resetting and Reinstalling GRUB 2</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-GRUB_2_over_a_Serial_Console">21.8. GRUB 2 over a Serial Console</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Configuring_the_GRUB_2_Menu">21.8.1. Configuring the GRUB 2 Menu</a></span></dt><dt><span class="section"><a href="#sec-Using_screen_to_Connect_to_the_Serial_Console">21.8.2. Using screen to Connect to the Serial Console</a></span></dt></dl></dd><dt><span class="section"><a hre f="#sec-Terminal_Menu_Editing_During_Boot">21.9. Terminal Menu Editing During Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Booting_to_Rescue_Mode">21.9.1. Booting to Rescue Mode</a></span></dt><dt><span class="section"><a href="#sec-Booting_to_Emergency_Mode">21.9.2. Booting to Emergency Mode</a></span></dt><dt><span class="section"><a href="#sec-Changing_and_Resetting_the_Root_Password">21.9.3. Changing and Resetting the Root Password</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-UEFI_Secure_Boot">21.10. UEFI Secure Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-UEFI_Secure_Boot_Support_in_Fedora">21.10.1. UEFI Secure Boot Support in Fedora</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Working_with_the_GRUB_2_Boot_Loader-Additional_Resources">21.11. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Manually_Upgrading_the_Kernel">22. Manually Upgrading the Ker nel</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-kernel-packages">22.1. Overview of Kernel Packages</a></span></dt><dt><span class="section"><a href="#s1-kernel-preparing">22.2. Preparing to Upgrade</a></span></dt><dt><span class="section"><a href="#s1-kernel-download">22.3. Downloading the Upgraded Kernel</a></span></dt><dt><span class="section"><a href="#s1-kernel-perform-upgrade">22.4. Performing the Upgrade</a></span></dt><dt><span class="section"><a href="#sec-Verifying_the_Initial_RAM_Disk_Image">22.5. Verifying the Initial RAM Disk Image</a></span></dt><dt><span class="section"><a href="#s1-kernel-boot-loader">22.6. Verifying the Boot Loader</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-kernel-boot-loader-grub">22.6.1. Configuring the GRUB 2 Boot Loader</a></span></dt><dt><span class="section"><a href="#s2-kernel-boot-loader-iseries">22.6.2. Configuring the OS/400 Boot Loader</a></span></dt><dt><span class="section"><a href="#s2-kernel -boot-loader-pseries">22.6.3. Configuring the YABOOT Boot Loader</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Working_with_Kernel_Modules">23. Working with Kernel Modules</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Listing_Currently-Loaded_Modules">23.1. Listing Currently-Loaded Modules</a></span></dt><dt><span class="section"><a href="#sec-Displaying_Information_About_a_Module">23.2. Displaying Information About a Module</a></span></dt><dt><span class="section"><a href="#sec-Loading_a_Module">23.3. Loading a Module</a></span></dt><dt><span class="section"><a href="#sec-Unloading_a_Module">23.4. Unloading a Module</a></span></dt><dt><span class="section"><a href="#sec-Setting_Module_Parameters">23.5. Setting Module Parameters</a></span></dt><dt><span class="section"><a href="#sec-Persistent_Module_Loading">23.6. Persistent Module Loading</a></span></dt><dt><span class="section"><a href="#sect-signing-kernel-modules-for-secure-b oot">23.7. Signing Kernel Modules for Secure Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-prerequisites">23.7.1. Prerequisites</a></span></dt><dt><span class="section"><a href="#sect-kernel-module-authentication">23.7.2. Kernel Module Authentication</a></span></dt><dt><span class="section"><a href="#sect-generating-a-public-private-x509-key-pair">23.7.3. Generating a Public and Private X.509 Key Pair</a></span></dt><dt><span class="section"><a href="#sect-enrolling-public-key-on-target-system">23.7.4. Enrolling Public Key on Target System</a></span></dt><dt><span class="section"><a href="#sect-signing-kernel-module-with-the-private-key">23.7.5. Signing Kernel Module with the Private Key</a></span></dt><dt><span class="section"><a href="#sect-loading-signed-kernel-module">23.7.6. Loading Signed Kernel Module</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-kernel-modules-additional-resources">23.8. Additional Resources</a></span></dt></d l></dd></dl></dd><dt><span class="appendix"><a href="#ch-RPM">A. RPM</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-rpm-design">A.1. RPM Design Goals</a></span></dt><dt><span class="section"><a href="#s1-rpm-using">A.2. Using RPM</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Installing_and_Upgrading">A.2.1. Installing and Upgrading Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-uninstalling">A.2.2. Uninstalling Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-freshening">A.2.3. Freshening Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-querying">A.2.4. Querying Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-verifying">A.2.5. Verifying Packages</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-find-verify-rpm">A.3. Finding and Verifying RPM Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-rpm-finding">A.3.1. Finding RPM Packages</a>< /span></dt><dt><span class="section"><a href="#s1-check-rpm-sig">A.3.2. Checking Package Signatures</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-rpm-usage-examples">A.4. Common Examples of RPM Usage</a></span></dt><dt><span class="section"><a href="#s1-rpm-additional-resources">A.5. Additional Resources</a></span></dt></dl></dd><dt><span class="appendix"><a href="#app-Revision_History">B. Revision History</a></span></dt><dt><span class="index"><a href="#idm263486265680">Index</a></span></dt></dl></div><div xml:lang="en-US" class="preface" id="idm263463394368" lang="en-US"><div class="titlepage"><div><div><h1 id="idm263463394368" class="title">Preface</h1></div></div></div><div class="para"> + </div></div></div></div><hr /></div><div class="toc"><dl class="toc"><dt><span class="preface"><a href="#idm225425386560">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Preface-Target_Audience">1. Target Audience</a></span></dt><dt><span class="section"><a href="#sect-Preface-Book_Organization">2. How to Read this Book</a></span></dt><dt><span class="section"><a href="#idm225473409088">3. Document Conventions</a></span></dt><dd><dl><dt><span class="section"><a href="#idm225460700720">3.1. Typographic Conventions</a></span></dt><dt><span class="section"><a href="#idm225407107760">3.2. Pull-quote Conventions</a></span></dt><dt><span class="section"><a href="#idm225436319920">3.3. Notes and Warnings</a></span></dt></dl></dd><dt><span class="section"><a href="#idm225453598688">4. We Need Feedback!</a></span></dt><dt><span class="section"><a href="#pref-Acknowledgments">5. Acknowledgments</a></span></dt></dl></dd><dt><span class="part"><a href="#part-Ba sic_System_Configuration">I. Basic System Configuration</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Opening_GUI_Applications">1. Opening Graphical Applications</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm225499600880">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></dd><dt><span class="chapte r"><a href="#ch-System_Locale_and_Keyboard_Configuration">2. System Locale and Keyboard Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a hre f="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_the_Date_and_Time">3. Configuring the Date and Time</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl">3.1. Using the timedatectl Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Display">3.1.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time">3.1.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Date">3.1.3. Changing the Current Date</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time_Zone ">3.1.4. Changing the Time Zone</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-NTP">3.1.5. Synchronizing the System Clock with a Remote Server</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date">3.2. Using the date Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Display">3.2.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Time">3.2.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Date">3.2.3. Changing the Current Date</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-hwclock">3.3. Using the hwclock Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect2-displaying-time-hwclock">3.3.1. Displaying the Curre nt Date and Time</a></span></dt><dt><span class="section"><a href="#sect3-changing-date-time-hwclock">3.3.2. Setting the Date and Time</a></span></dt><dt><span class="section"><a href="#sect4-synchronizing-date-time-hwclock">3.3.3. Synchronizing the Date and Time</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Date_and_Time-Resources">3.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Managing_Users_and_Groups">4. Managing Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a></sp an></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#chap-Gaining_Privilege s">5. Gaining Privileges</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Gaining_Privileges-The_su_Command">5.1. The su Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-The_sudo_Command">5.2. The sudo Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-Additional_Resources">5.3. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Package_Management">II. Package Management</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-DNF">6. DNF</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_and_Updating_Packages">6.1. Checking For and Updating Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_Updates">6.1.1. Checking For Updates</a></span></dt><dt><span class="section"><a href="#sec-Updating_Packages">6.1.2. Updating Packages</a></span></dt><dt><span class="section"><a href="#sec-Preserving_ Configuration_File_Changes">6.1.3. Preserving Configuration File Changes</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Packages_and_Package_Groups">6.2. Packages and Package Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Searching_Packages">6.2.1. Searching Packages</a></span></dt><dt><span class="section"><a href="#sec-Listing_Packages">6.2.2. Listing Packages</a></span></dt><dt><span class="section"><a href="#sec-Displaying_Package_Information">6.2.3. Displaying Package Information</a></span></dt><dt><span class="section"><a href="#sec-Installing">6.2.4. Installing Packages</a></span></dt><dt><span class="section"><a href="#sec-Removing">6.2.5. Removing Packages</a></span></dt><dt><span class="section"><a href="#sec-DNF-Transaction_History">6.2.6. Working with Transaction History</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Configuring_DNF_and_DNF_Repositories">6.3. Configuring DNF and DNF Repositories</a></span ></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_main_Options">6.3.1. Setting [main] Options</a></span></dt><dt><span class="section"><a href="#sec-Setting_repository_Options">6.3.2. Setting [repository] Options</a></span></dt><dt><span class="section"><a href="#sec-Using_DNF_Variables">6.3.3. Using DNF Variables</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Viewing_the_Current_Configuration">6.4. Viewing the Current Configuration</a></span></dt><dt><span class="section"><a href="#sec-Managing_DNF_Repositories">6.5. Adding, Enabling, and Disabling a DNF Repository</a></span></dt><dt><span class="section"><a href="#sec-Additional_Resources">6.6. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Infrastructure_Services">III. Infrastructure Services</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Services_and_Daemons">7. Services and Daemons</a></span></dt><dd><dl><dt><span class="section" ><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span ></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-OpenSSH">8. OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-config uration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certificates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span c lass="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><spa n class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-TigerVNC">9. TigerVNC</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-vnc-server">9.1. VNC Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-vnc-installation">9.1.1. Installing VNC Server</a></span></dt><dt><span class="section"><a href="#s3-configuring-vnc-server">9.1.2. Configuring VNC Server</a></span></dt><dt><span class="section"><a href="#s 4-starting-vncserver">9.1.3. Starting VNC Server</a></span></dt><dt><span class="section"><a href="#terminating-vnc-session">9.1.4. Terminating a VNC Session</a></span></dt></dl></dd><dt><span class="section"><a href="#s5-vnc-viewer">9.2. VNC Viewer</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-vncviewer">9.2.1. Installing VNC Viewer</a></span></dt><dt><span class="section"><a href="#s6-connecting-vnc-viewer">9.2.2. Connecting to VNC Server</a></span></dt><dt><span class="section"><a href="#s1-using_ssh">9.2.3. Connecting to VNC Server Using SSH</a></span></dt></dl></dd><dt><span class="section"><a href="#s9-additional-sources">9.3. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Servers">IV. Servers</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Web_Servers">10. Web Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a> </span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Mail_Servers">11. Mail Servers</a></span></dt><dd><dl><dt><span class="section" ><a href="#s1-email-protocols">11.1. Email Protocols</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-protocols-send">11.1.1. Mail Transport Protocols</a></span></dt><dt><span class="section"><a href="#s2-email-protocols-client">11.1.2. Mail Access Protocols</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-types">11.2. Email Program Classifications</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-types-mta">11.2.1. Mail Transport Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mda">11.2.2. Mail Delivery Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mua">11.2.3. Mail User Agent</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mta">11.3. Mail Transport Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-mta-postfix">11.3.1. Postfix</a></span></dt><dt><span class="section"><a href="#s2-email-mta-sendmail">11.3.2. Sendmail</a></ span></dt><dt><span class="section"><a href="#s2-email-mta-fetchmail">11.3.3. Fetchmail</a></span></dt><dt><span class="section"><a href="#s2-email-switchmail">11.3.4. Mail Transport Agent (MTA) Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mda">11.4. Mail Delivery Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-procmail-configuration">11.4.1. Procmail Configuration</a></span></dt><dt><span class="section"><a href="#s2-email-procmail-recipes">11.4.2. Procmail Recipes</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mua">11.5. Mail User Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-security">11.5.1. Securing Communication</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-additional-resources">11.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-installed-docs">11.6.1. Installed Documentation</a></span> </dt><dt><span class="section"><a href="#s2-email-useful-websites">11.6.2. Useful Websites</a></span></dt><dt><span class="section"><a href="#s2-email-related-books">11.6.3. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Directory_Servers">12. Directory Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-OpenLDAP">12.1. OpenLDAP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ldap-introduction">12.1.1. Introduction to LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-installation">12.1.2. Installing the OpenLDAP Suite</a></span></dt><dt><span class="section"><a href="#s2-ldap-configuration">12.1.3. Configuring an OpenLDAP Server</a></span></dt><dt><span class="section"><a href="#s2-selinux-openldap">12.1.4. SELinux Policy for Applications Using LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-running">12.1.5. Running an OpenLDAP Server</a></span></dt><dt><span class="section "><a href="#s2-ldap-pam">12.1.6. Configuring a System to Authenticate Using OpenLDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-resources">12.1.7. Additional Resources</a></span></dt><dt><span class="section"><a href="#s3-ldap-related-books">12.1.8. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-File_and_Print_Servers">13. File and Print Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba">13.1. Samba</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba-Introduction_to_Samba">13.1.1. Introduction to Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba_Daemons_and_Related_Services">13.1.2. Samba Daemons and Related Services</a></span></dt><dt><span class="section"><a href="#sect-Samba-Connecting_to_a_Samba_Share">13.1.3. Connecting to a Samba Share</a></span></dt><dt><span class="section"><a href="#sect-Mounting_the_Samba_Share">13.1.4. Mounting the Share</a></sp an></dt><dt><span class="section"><a href="#sect-Samba-Configuring_a_Samba_Server">13.1.5. Configuring a Samba Server</a></span></dt><dt><span class="section"><a href="#sect-Samba-Starting_and_Stopping">13.1.6. Starting and Stopping Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba-Server_Types_and_the_smb.conf_File">13.1.7. Samba Server Types and the <code class="filename">smb.conf</code> File</a></span></dt><dt><span class="section"><a href="#sect-Samba-Security_Modes">13.1.8. Samba Security Modes</a></span></dt><dt><span class="section"><a href="#sect-Samba-Account_Information-Databases">13.1.9. Samba Account Information Databases</a></span></dt><dt><span class="section"><a href="#sect-Samba-Network_Browsing">13.1.10. Samba Network Browsing</a></span></dt><dt><span class="section"><a href="#sect-Samba_with_CUPS_Printing_Support">13.1.11. Samba with CUPS Printing Support</a></span></dt><dt><span class="section"><a href="#sect-Samba_Distribution_Programs"> 13.1.12. Samba Distribution Programs</a></span></dt><dt><span class="section"><a href="#sect-Samba-Resources">13.1.13. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-FTP">13.2. FTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ftp-protocol">13.2.1. The File Transfer Protocol</a></span></dt><dt><span class="section"><a href="#s2-ftp-servers">13.2.2. FTP Servers</a></span></dt><dt><span class="section"><a href="#s3-ftp-vsftpd-conf">13.2.3. Files Installed with <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-start">13.2.4. Starting and Stopping <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-conf">13.2.5. <code class="command">vsftpd</code> Configuration Options</a></span></dt><dt><span class="section"><a href="#s2-ftp-resources">13.2.6. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href=" #sec-Printer_Configuration">13.3. Printer Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_Printer_Config">13.3.1. Starting the Printers Configuration Tool</a></span></dt><dt><span class="section"><a href="#sec-Setting_Printer">13.3.2. Starting Printer Setup</a></span></dt><dt><span class="section"><a href="#sec-Adding_Other_Printer">13.3.3. Adding a Local Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-jetdirect-printer">13.3.4. Adding an AppSocket/HP JetDirect printer</a></span></dt><dt><span class="section"><a href="#s1-printing-ipp-printer">13.3.5. Adding an IPP Printer</a></span></dt><dt><span class="section"><a href="#sec-printing-LPDLPR-printer">13.3.6. Adding an LPD/LPR Host or Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-smb-printer">13.3.7. Adding a Samba (SMB) printer</a></span></dt><dt><span class="section"><a href="#s1-printing-select-model">13.3.8. Selecting the Printer Model and Finishing</a></span></dt><dt><span class="section"><a href="#s1-printing-test-page">13.3.9. Printing a Test Page</a></span></dt><dt><span class="section"><a href="#s1-printing-edit">13.3.10. Modifying Existing Printers</a></span></dt><dt><span class="section"><a href="#s1-printing-additional-resources">13.3.11. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_the_chrony_Suite">14. Configuring NTP Using the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Introduction_to_the_chrony_Suite">14.1. Introduction to the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-differences_between_ntpd_and_chronyd">14.1.1. Differences Between ntpd and chronyd</a></span></dt><dt><span class="section"><a href="#sect-Choosing_between_NTP_daemon">14.1.2. Choosing Between NTP Daemons</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Understanding_chrony_a nd-its_configuration">14.2. Understanding chrony and Its Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Understanding_chronyd">14.2.1. Understanding chronyd</a></span></dt><dt><span class="section"><a href="#sect-Understanding_chronyc">14.2.2. Understanding chronyc</a></span></dt><dt><span class="section"><a href="#sect-Understanding_the_chrony_configuration_commands">14.2.3. Understanding the chrony Configuration Commands</a></span></dt><dt><span class="section"><a href="#sect-Security_with_chronyc">14.2.4. Security with chronyc</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chrony">14.3. Using chrony</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Installing_chrony">14.3.1. Installing chrony</a></span></dt><dt><span class="section"><a href="#sect-Checking_the_Status_of_chronyd">14.3.2. Checking the Status of chronyd</a></span></dt><dt><span class="section"><a href="#sect-Starting_chronyd">14.3.3. Start ing chronyd</a></span></dt><dt><span class="section"><a href="#sect-Stopping_chronyd">14.3.4. Stopping chronyd</a></span></dt><dt><span class="section"><a href="#sect-Checking_if_chrony_is_synchronized">14.3.5. Checking if chrony is Synchronized</a></span></dt><dt><span class="section"><a href="#sect-Manually_Adjusting-the-System_Clock">14.3.6. Manually Adjusting the System Clock</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Setting_up_chrony_for_different_environments">14.4. Setting Up chrony for Different Environments</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_which_is_infrequently_connected">14.4.1. Setting Up chrony for a System Which is Infrequently Connected</a></span></dt><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_in_an_isolated_network">14.4.2. Setting Up chrony for a System in an Isolated Network</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using _chronyc">14.5. Using chronyc</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Using_chronyc_chronyc_to_control_chronyd">14.5.1. Using chronyc to Control chronyd</a></span></dt><dt><span class="section"><a href="#sect-Using_chronyc_for_remote_administration">14.5.2. Using chronyc for Remote Administration</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-additional_resources">14.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-chrony-docs-inst">14.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-chrony_Online_Documentation">14.6.2. Online Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_ntpd">15. Configuring NTP Using ntpd</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Introduction_to_NTP">15.1. Introduction to NTP</a></span></dt><dt><span class="section"><a href="#s1-NTP_Strata">15.2. NTP Strata</a> </span></dt><dt><span class="section"><a href="#s1-Understanding_NTP">15.3. Understanding NTP</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_Drift_File">15.4. Understanding the Drift File</a></span></dt><dt><span class="section"><a href="#s1-UTC_timezones_and_DST">15.5. UTC, Timezones, and DST</a></span></dt><dt><span class="section"><a href="#s1-Authentication_Options_for_NTP">15.6. Authentication Options for NTP</a></span></dt><dt><span class="section"><a href="#s1-Managing_the_Time_on_Virtual_Machines">15.7. Managing the Time on Virtual Machines</a></span></dt><dt><span class="section"><a href="#s1-Understanding_Leap_Seconds">15.8. Understanding Leap Seconds</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Configuration_File">15.9. Understanding the ntpd Configuration File</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Sysconfig_File">15.10. Understanding the ntpd Sysconfig File</a></span>< /dt><dt><span class="section"><a href="#s1-Disabling_chrony">15.11. Disabling chrony</a></span></dt><dt><span class="section"><a href="#s1-Checking_if_the_NTP_Daemon_is_Installed">15.12. Checking if the NTP Daemon is Installed</a></span></dt><dt><span class="section"><a href="#s1-Installing_the_NTP_Daemon_ntpd">15.13. Installing the NTP Daemon (ntpd)</a></span></dt><dt><span class="section"><a href="#s1-Checking_the_status_of_NTP">15.14. Checking the Status of NTP</a></span></dt><dt><span class="section"><a href="#s1-Configure_the_Firewall_to_Allow_Incoming_NTP_Packets">15.15. Configure the Firewall to Allow Incoming NTP Packets</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Change_the_firewall_settings">15.15.1. Change the Firewall Settings</a></span></dt><dt><span class="section"><a href="#s2-Open_Ports_in_the_firewall_for_ntp_packets">15.15.2. Open Ports in the Firewall for NTP Packets</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configur e_ntpdate_Servers">15.16. Configure ntpdate Servers</a></span></dt><dt><span class="section"><a href="#s1-Configure_NTP">15.17. Configure NTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Configure_Access_Control_to_an_NTP_service">15.17.1. Configure Access Control to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Configure_Rate_Limiting_Access_to_an_NTP_Service">15.17.2. Configure Rate Limiting Access to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Peer_Address">15.17.3. Adding a Peer Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Server_Address">15.17.4. Adding a Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Broadcast_or_Mutlticast_Server_Address">15.17.5. Adding a Broadcast or Multicast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Manycast_Client_Address">15.17.6. Adding a Manycast Client Address</a></span></dt><dt ><span class="section"><a href="#s2_Adding_a_Broadcastclient_Address">15.17.7. Adding a Broadcast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_manycastserver_Address">15.17.8. Adding a Manycast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_multicastclient_Address">15.17.9. Adding a Multicast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_burst_option">15.17.10. Configuring the Burst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_iburst_Option">15.17.11. Configuring the iburst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Symmetric_Authentication_Using_a_Key">15.17.12. Configuring Symmetric Authentication Using a Key</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Poll_Interval">15.17.13. Configuring the Poll Interval</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Server_Prefere nce">15.17.14. Configuring Server Preference</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Time-To-Live_for_NTP_Packets">15.17.15. Configuring the Time-to-Live for NTP Packets</a></span></dt><dt><span class="section"><a href="#s2_Configuring_The_Version_of_NTP_to_use">15.17.16. Configuring the NTP Version to Use</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configuring_the_Hardware_Clock_update">15.18. Configuring the Hardware Clock Update</a></span></dt><dt><span class="section"><a href="#s1-Configuring_Clock_Sources">15.19. Configuring Clock Sources</a></span></dt><dt><span class="section"><a href="#s1-ntpd_additional-resources">15.20. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ntpd-docs-inst">15.20.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-ntpd_useful-websites">15.20.2. Useful Websites</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href ="#ch-Configuring_PTP_Using_ptp4l">16. Configuring PTP Using ptp4l</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_PTP">16.1. Introduction to PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Understanding_PTP">16.1.1. Understanding PTP</a></span></dt><dt><span class="section"><a href="#sec-Advantages_of_PTP">16.1.2. Advantages of PTP</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_PTP">16.2. Using PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_for_Driver_and_Hardware_Support">16.2.1. Checking for Driver and Hardware Support</a></span></dt><dt><span class="section"><a href="#sec-Installing_PTP">16.2.2. Installing PTP</a></span></dt><dt><span class="section"><a href="#sec-Starting_ptp4l">16.2.3. Starting ptp4l</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Specifying_a_Configuration_File">16.3. Specifying a Configuration File</a></span></dt><dt><span class="se ction"><a href="#sec-Using_the_PTP_Management_Client">16.4. Using the PTP Management Client</a></span></dt><dt><span class="section"><a href="#sec-Synchronizing_the_Clocks">16.5. Synchronizing the Clocks</a></span></dt><dt><span class="section"><a href="#sec-Verifying_Time_Synchronization">16.6. Verifying Time Synchronization</a></span></dt><dt><span class="section"><a href="#sec-Serving_PTP_Time_with_NTP">16.7. Serving PTP Time with NTP</a></span></dt><dt><span class="section"><a href="#sec-Serving_NTP_Time_with_PTP">16.8. Serving NTP Time with PTP</a></span></dt><dt><span class="section"><a href="#sec-Synchronize_to_PTP_or_NTP_Time_Using_timemaster">16.9. Synchronize to PTP or NTP Time Using timemaster</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_timemaster_as_a_Service">16.9.1. Starting timemaster as a Service</a></span></dt><dt><span class="section"><a href="#sec-Understanding_the_timemaster_Configuration_File">16.9.2. Understanding the timemas ter Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Configuring_timemaster_Options">16.9.3. Configuring timemaster Options</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Improving_Accuracy">16.10. Improving Accuracy</a></span></dt><dt><span class="section"><a href="#sec-PTP_additional_resources">16.11. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-PTP-docs-inst">16.11.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#sec-PTP_useful-websites">16.11.2. Useful Websites</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="#part-Monitoring_and_Automation">V. Monitoring and Automation</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-System_Monitoring_Tools">17. System Monitoring Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-sysinfo-system-processes">17.1. Viewing System Processes</a></span></dt><dd><dl><dt><span cl ass="section"><a href="#s2-sysinfo-system-processes-ps">17.1.1. Using the ps Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-system-processes-top">17.1.2. Using the top Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-system-processes-system_monitor">17.1.3. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-memory-usage">17.2. Viewing Memory Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-memory-usage-free">17.2.1. Using the free Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-memory-usage-system_monitor">17.2.2. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-cpu">17.3. Viewing CPU Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-cpu-system_monitor">17.3.1. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sy sinfo-filesystems">17.4. Viewing Block Devices and File Systems</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-filesystems-lsblk">17.4.1. Using the lsblk Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-blkid">17.4.2. Using the blkid Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-partx">17.4.3. Using the partx Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-findmnt">17.4.4. Using the findmnt Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-df">17.4.5. Using the df Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-du">17.4.6. Using the du Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-filesystems-system_monitor">17.4.7. Using the System Monitor Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-hardware">17.5. Viewing Hardware Information</a ></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-hardware-lspci">17.5.1. Using the lspci Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lsusb">17.5.2. Using the lsusb Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lspcmcia">17.5.3. Using the lspcmcia Command</a></span></dt><dt><span class="section"><a href="#s2-sysinfo-hardware-lscpu">17.5.4. Using the lscpu Command</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP">17.6. Monitoring Performance with Net-SNMP</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Installing">17.6.1. Installing Net-SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Running">17.6.2. Running the Net-SNMP Daemon</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Configuring">17.6.3. Configuring N et-SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Retrieving">17.6.4. Retrieving Performance Data over SNMP</a></span></dt><dt><span class="section"><a href="#sect-System_Monitoring_Tools-Net-SNMP-Extending">17.6.5. Extending Net-SNMP</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-sysinfo-additional-resources">17.7. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-sysinfo-installed-docs">17.7.1. Installed Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Viewing_and_Managing_Log_Files">18. Viewing and Managing Log Files</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-logfiles-locating">18.1. Locating Log Files</a></span></dt><dt><span class="section"><a href="#s1-basic_configuration_of_rsyslog">18.2. Basic Configuration of Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Filters">18.2.1. Filters</a></span>< /dt><dt><span class="section"><a href="#s2-Actions">18.2.2. Actions</a></span></dt><dt><span class="section"><a href="#s2-Templates">18.2.3. Templates</a></span></dt><dt><span class="section"><a href="#s2-global_directives">18.2.4. Global Directives</a></span></dt><dt><span class="section"><a href="#s2-log_rotation">18.2.5. Log Rotation</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-using_the_new_configuration_format">18.3. Using the New Configuration Format</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Rulesets">18.3.1. Rulesets</a></span></dt><dt><span class="section"><a href="#s2-compatibility_with_syslogd">18.3.2. Compatibility with syslogd</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-working_with_queues_in_rsyslog">18.4. Working with Queues in Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-defining_queues">18.4.1. Defining Queues</a></span></dt><dt><span class="section"><a href="#s2-managing_qu eues">18.4.2. Managing Queues</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-configuring_rsyslog_on_a_logging_server">18.5. Configuring rsyslog on a Logging Server</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Using_The_New_Template_Syntax_on_a_Logging_Server">18.5.1. Using The New Template Syntax on a Logging Server</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-using_rsyslog_modules">18.6. Using Rsyslog Modules</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-importing_text_files">18.6.1. Importing Text Files</a></span></dt><dt><span class="section"><a href="#s2-exporting_messages_to_a_database">18.6.2. Exporting Messages to a Database</a></span></dt><dt><span class="section"><a href="#s2-enabling_encrypted_transport">18.6.3. Enabling Encrypted Transport</a></span></dt><dt><span class="section"><a href="#s2-using_RELP">18.6.4. Using RELP</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-interacti on_of_rsyslog_and_journal">18.7. Interaction of Rsyslog and Journal</a></span></dt><dt><span class="section"><a href="#s1-structured_logging_with_rsyslog">18.8. Structured Logging with Rsyslog</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-importing_data_from_journal">18.8.1. Importing Data from Journal</a></span></dt><dt><span class="section"><a href="#s2-filtering_structured_messages">18.8.2. Filtering Structured Messages</a></span></dt><dt><span class="section"><a href="#s2-parsing_JSON">18.8.3. Parsing JSON</a></span></dt><dt><span class="section"><a href="#s2-storing_messages_in_the_mongodb">18.8.4. Storing Messages in the MongoDB</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-debugging_rsyslog">18.9. Debugging Rsyslog</a></span></dt><dt><span class="section"><a href="#sec-Troubleshooting_Logging_to_a_Server">18.10. Troubleshooting Logging to a Server</a></span></dt><dt><span class="section"><a href="#s1-Using_the_Journal">18.11. Using th e Journal</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Viewing_Log_Files">18.11.1. Viewing Log Files</a></span></dt><dt><span class="section"><a href="#s2-Access_Control">18.11.2. Access Control</a></span></dt><dt><span class="section"><a href="#s2-Using_The_Live_View">18.11.3. Using The Live View</a></span></dt><dt><span class="section"><a href="#s2-Filtering_Messages">18.11.4. Filtering Messages</a></span></dt><dt><span class="section"><a href="#s2-Enabling_Persistent_Storage">18.11.5. Enabling Persistent Storage</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-managing_log_files_in_a_graphical_environment">18.12. Managing Log Files in a Graphical Environment</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-logfiles-viewing">18.12.1. Viewing Log Files</a></span></dt><dt><span class="section"><a href="#s2-logfiles-adding">18.12.2. Adding a Log File</a></span></dt><dt><span class="section"><a href="#s2-logfiles-examining">18.12.3. Monitoring Log Files</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-log-files-additional-resources">18.13. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Automating_System_Tasks">19. Automating System Tasks</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-autotasks-cron-anacron">19.1. Cron and Anacron</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Cron-Installing">19.1.1. Installing Cron and Anacron</a></span></dt><dt><span class="section"><a href="#sect-Cron-Running">19.1.2. Running the Crond Service</a></span></dt><dt><span class="section"><a href="#s2-configuring-anacron-jobs">19.1.3. Configuring Anacron Jobs</a></span></dt><dt><span class="section"><a href="#s2-configuring-cron-jobs">19.1.4. Configuring Cron Jobs</a></span></dt><dt><span class="section"><a href="#s2-autotasks-cron-access">19.1.5. Controlling Access to Cron</a></span></dt><dt><span class="section"><a href="#s2-black-whit e-listing-of-cron-jobs">19.1.6. Black and White Listing of Cron Jobs</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-autotasks-at-batch">19.2. At and Batch</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-At_and_Batch_Installation">19.2.1. Installing At and Batch</a></span></dt><dt><span class="section"><a href="#sect-Atd-Running">19.2.2. Running the At Service</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-configuring">19.2.3. Configuring an At Job</a></span></dt><dt><span class="section"><a href="#s2-autotasks-batch-configuring">19.2.4. Configuring a Batch Job</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-batch-viewing">19.2.5. Viewing Pending Jobs</a></span></dt><dt><span class="section"><a href="#s2-autotasks-commandline-options">19.2.6. Additional Command Line Options</a></span></dt><dt><span class="section"><a href="#s2-autotasks-at-batch-controlling-access">19.2.7. Controlling Access to At and Bat ch</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-autotasks-additional-resources">19.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-OProfile">20. OProfile</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-oprofile-overview-tools">20.1. Overview of Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-operf_vs_opcontrol">20.1.1. operf vs. opcontrol</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-using-operf">20.2. Using operf</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-operf-kernel">20.2.1. Specifying the Kernel</a></span></dt><dt><span class="section"><a href="#s2-operf-events">20.2.2. Setting Events to Monitor</a></span></dt><dt><span class="section"><a href="#s2-operf-categorization">20.2.3. Categorization of Samples</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-configuring">20.3. Configuring OProfile Using Legacy Mode</a></span>< /dt><dd><dl><dt><span class="section"><a href="#s2-oprofile-kernel">20.3.1. Specifying the Kernel</a></span></dt><dt><span class="section"><a href="#s2-oprofile-events">20.3.2. Setting Events to Monitor</a></span></dt><dt><span class="section"><a href="#s2-oprofile-starting-separate">20.3.3. Separating Kernel and User-space Profiles</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-starting">20.4. Starting and Stopping OProfile Using Legacy Mode</a></span></dt><dt><span class="section"><a href="#s1-oprofile-saving-data">20.5. Saving Data in Legacy Mode</a></span></dt><dt><span class="section"><a href="#s1-oprofile-analyzing-data">20.6. Analyzing the Data</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-oprofile-reading-opreport">20.6.1. Using <code class="command">opreport</code></a></span></dt><dt><span class="section"><a href="#s2-oprofile-reading-opreport-single">20.6.2. Using opreport on a Single Executable</a></span></dt><dt><span cla ss="section"><a href="#s2-oprofile-module-output">20.6.3. Getting More Detailed Output on the Modules</a></span></dt><dt><span class="section"><a href="#s2-oprofile-reading-opannotate">20.6.4. Using <code class="command">opannotate</code></a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-dev-oprofile">20.7. Understanding the /dev/oprofile/ directory </a></span></dt><dt><span class="section"><a href="#s1-oprofile-example-usage">20.8. Example Usage</a></span></dt><dt><span class="section"><a href="#s1-oprofile-java-support">20.9. OProfile Support for Java</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-oprofile-java-profiling">20.9.1. Profiling Java Code</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-oprofile-gui">20.10. Graphical Interface</a></span></dt><dt><span class="section"><a href="#s1-oprofile-and-systemtap">20.11. OProfile and SystemTap</a></span></dt><dt><span class="section"><a href="#s1-oprofile_additional_reso urces">20.12. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="part"><a href="#part-Kernel_Module_and_Driver_Configuration">VI. Kernel, Module and Driver Configuration</a></span></dt><dd><dl><dt><span class="chapter"><a href="#ch-Working_with_the_GRUB_2_Boot_Loader">21. Working with the GRUB 2 Boot Loader</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_GRUB_2">21.1. Introduction to GRUB 2</a></span></dt><dt><span class="section"><a href="#sec-Configuring_the_GRUB_2_Boot_Loader">21.2. Configuring the GRUB 2 Boot Loader</a></span></dt><dt><span class="section"><a href="#sec-Making_Temporary_Changes_to_a_GRUB_2_Menu">21.3. Making Temporary Changes to a GRUB 2 Menu</a></span></dt><dt><span class="section"><a href="#sec-Making_Persistent_Changes_to_a_GRUB_2_Menu_Using_the_grubby_Tool">21.4. Making Persistent Changes to a GRUB 2 Menu Using the grubby Tool</a></span></dt><dt><span class="section"><a href="#sec-Customizing_the_G RUB_2_Configuration_File">21.5. Customizing the GRUB 2 Configuration File</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Changing_the_Default_Boot_Entry">21.5.1. Changing the Default Boot Entry</a></span></dt><dt><span class="section"><a href="#sec-Editing_a_Menu_Entry">21.5.2. Editing a Menu Entry</a></span></dt><dt><span class="section"><a href="#sec-Adding_a_new_Entry">21.5.3. Adding a new Entry</a></span></dt><dt><span class="section"><a href="#sec-Using_only_a_Custom_Menu">21.5.4. Creating a Custom Menu</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-GRUB_2_Password_Protection">21.6. GRUB 2 Password Protection</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_Up_Users_and_Password_Protection_Specifying_Menu_Entries">21.6.1. Setting Up Users and Password Protection, Specifying Menu Entries</a></span></dt><dt><span class="section"><a href="#sec-Password_Encryption">21.6.2. Password Encryption</a></span></dt></dl></dd>< dt><span class="section"><a href="#sec-Reinstalling_GRUB_2">21.7. Reinstalling GRUB 2</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-grub2-reinstall_on_BIOS-Based_Machines">21.7.1. Reinstalling GRUB 2 on BIOS-Based Machines</a></span></dt><dt><span class="section"><a href="#sec-grub2-reinstall_on_UEFI-Based_Machines">21.7.2. Reinstalling GRUB 2 on UEFI-Based Machines</a></span></dt><dt><span class="section"><a href="#sec-Resetting_and_Reinstalling_GRUB_2">21.7.3. Resetting and Reinstalling GRUB 2</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-GRUB_2_over_a_Serial_Console">21.8. GRUB 2 over a Serial Console</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Configuring_the_GRUB_2_Menu">21.8.1. Configuring the GRUB 2 Menu</a></span></dt><dt><span class="section"><a href="#sec-Using_screen_to_Connect_to_the_Serial_Console">21.8.2. Using screen to Connect to the Serial Console</a></span></dt></dl></dd><dt><span class="section"><a hre f="#sec-Terminal_Menu_Editing_During_Boot">21.9. Terminal Menu Editing During Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Booting_to_Rescue_Mode">21.9.1. Booting to Rescue Mode</a></span></dt><dt><span class="section"><a href="#sec-Booting_to_Emergency_Mode">21.9.2. Booting to Emergency Mode</a></span></dt><dt><span class="section"><a href="#sec-Changing_and_Resetting_the_Root_Password">21.9.3. Changing and Resetting the Root Password</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-UEFI_Secure_Boot">21.10. UEFI Secure Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-UEFI_Secure_Boot_Support_in_Fedora">21.10.1. UEFI Secure Boot Support in Fedora</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Working_with_the_GRUB_2_Boot_Loader-Additional_Resources">21.11. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Manually_Upgrading_the_Kernel">22. Manually Upgrading the Ker nel</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-kernel-packages">22.1. Overview of Kernel Packages</a></span></dt><dt><span class="section"><a href="#s1-kernel-preparing">22.2. Preparing to Upgrade</a></span></dt><dt><span class="section"><a href="#s1-kernel-download">22.3. Downloading the Upgraded Kernel</a></span></dt><dt><span class="section"><a href="#s1-kernel-perform-upgrade">22.4. Performing the Upgrade</a></span></dt><dt><span class="section"><a href="#sec-Verifying_the_Initial_RAM_Disk_Image">22.5. Verifying the Initial RAM Disk Image</a></span></dt><dt><span class="section"><a href="#s1-kernel-boot-loader">22.6. Verifying the Boot Loader</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-kernel-boot-loader-grub">22.6.1. Configuring the GRUB 2 Boot Loader</a></span></dt><dt><span class="section"><a href="#s2-kernel-boot-loader-iseries">22.6.2. Configuring the OS/400 Boot Loader</a></span></dt><dt><span class="section"><a href="#s2-kernel -boot-loader-pseries">22.6.3. Configuring the YABOOT Boot Loader</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Working_with_Kernel_Modules">23. Working with Kernel Modules</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Listing_Currently-Loaded_Modules">23.1. Listing Currently-Loaded Modules</a></span></dt><dt><span class="section"><a href="#sec-Displaying_Information_About_a_Module">23.2. Displaying Information About a Module</a></span></dt><dt><span class="section"><a href="#sec-Loading_a_Module">23.3. Loading a Module</a></span></dt><dt><span class="section"><a href="#sec-Unloading_a_Module">23.4. Unloading a Module</a></span></dt><dt><span class="section"><a href="#sec-Setting_Module_Parameters">23.5. Setting Module Parameters</a></span></dt><dt><span class="section"><a href="#sec-Persistent_Module_Loading">23.6. Persistent Module Loading</a></span></dt><dt><span class="section"><a href="#sect-signing-kernel-modules-for-secure-b oot">23.7. Signing Kernel Modules for Secure Boot</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-prerequisites">23.7.1. Prerequisites</a></span></dt><dt><span class="section"><a href="#sect-kernel-module-authentication">23.7.2. Kernel Module Authentication</a></span></dt><dt><span class="section"><a href="#sect-generating-a-public-private-x509-key-pair">23.7.3. Generating a Public and Private X.509 Key Pair</a></span></dt><dt><span class="section"><a href="#sect-enrolling-public-key-on-target-system">23.7.4. Enrolling Public Key on Target System</a></span></dt><dt><span class="section"><a href="#sect-signing-kernel-module-with-the-private-key">23.7.5. Signing Kernel Module with the Private Key</a></span></dt><dt><span class="section"><a href="#sect-loading-signed-kernel-module">23.7.6. Loading Signed Kernel Module</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-kernel-modules-additional-resources">23.8. Additional Resources</a></span></dt></d l></dd></dl></dd><dt><span class="appendix"><a href="#ch-RPM">A. RPM</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-rpm-design">A.1. RPM Design Goals</a></span></dt><dt><span class="section"><a href="#s1-rpm-using">A.2. Using RPM</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Installing_and_Upgrading">A.2.1. Installing and Upgrading Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-uninstalling">A.2.2. Uninstalling Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-freshening">A.2.3. Freshening Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-querying">A.2.4. Querying Packages</a></span></dt><dt><span class="section"><a href="#s2-rpm-verifying">A.2.5. Verifying Packages</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-find-verify-rpm">A.3. Finding and Verifying RPM Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-rpm-finding">A.3.1. Finding RPM Packages</a>< /span></dt><dt><span class="section"><a href="#s1-check-rpm-sig">A.3.2. Checking Package Signatures</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-rpm-usage-examples">A.4. Common Examples of RPM Usage</a></span></dt><dt><span class="section"><a href="#s1-rpm-additional-resources">A.5. Additional Resources</a></span></dt></dl></dd><dt><span class="appendix"><a href="#app-Revision_History">B. Revision History</a></span></dt><dt><span class="index"><a href="#idm225465268784">Index</a></span></dt></dl></div><div xml:lang="en-US" class="preface" id="idm225425386560" lang="en-US"><div class="titlepage"><div><div><h1 id="idm225425386560" class="title">Preface</h1></div></div></div><div class="para"> The <em class="citetitle">System Administrator's Guide</em> contains information on how to customize the Fedora 24 system to fit your needs. If you are looking for a comprehensive, task-oriented guide for configuring and customizing your system, this is the manual for you. </div><div class="para"> This manual discusses many intermediate topics such as the following: @@ -107,11 +107,11 @@ <a class="xref" href="#ch-Working_with_Kernel_Modules">Chapter 23, <em>Working with Kernel Modules</em></a> explains how to display, query, load, and unload kernel modules and their dependencies, and how to set module parameters. Additionally, it covers specific kernel module capabilities such as using multiple Ethernet cards and using channel bonding. Read this chapter if you need to work with kernel modules. </div></dd><dt class="varlistentry"><span class="term"><a class="xref" href="#ch-RPM">Appendix A, <em>RPM</em></a></span></dt><dd><div class="para"> This appendix concentrates on the RPM Package Manager (RPM), an open packaging system used by Fedora, and the use of the <code class="command">rpm</code> utility. Read this appendix if you need to use <code class="command">rpm</code> instead of <code class="command">dnf</code>. - </div></dd></dl></div></div><div xml:lang="en-US" class="section" id="idm263480376192" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="idm263480376192">3. Document Conventions</h2></div></div></div><div class="para"> + </div></dd></dl></div></div><div xml:lang="en-US" class="section" id="idm225473409088" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="idm225473409088">3. Document Conventions</h2></div></div></div><div class="para"> This manual uses several conventions to highlight certain words and phrases and draw attention to specific pieces of information. </div><div class="para"> In PDF and paper editions, this manual uses typefaces drawn from the <a href="https://fedorahosted.org/liberation-fonts/">Liberation Fonts</a> set. The Liberation Fonts set is also used in HTML editions if the set is installed on your system. If not, alternative but equivalent typefaces are displayed. Note: Red Hat Enterprise Linux 5 and later includes the Liberation Fonts set by default. - </div><div class="section" id="idm263486274048"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm263486274048">3.1. Typographic Conventions</h3></div></div></div><div class="para"> + </div><div class="section" id="idm225460700720"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm225460700720">3.1. Typographic Conventions</h3></div></div></div><div class="para"> Four typographic conventions are used to call attention to specific words and phrases. These conventions, and the circumstances they apply to, are as follows. </div><div class="para"> <code class="literal">Mono-spaced Bold</code> @@ -159,7 +159,7 @@ Aside from standard usage for presenting the title of a work, italics denotes the first use of a new and important term. For example: </div><div class="blockquote"><blockquote class="blockquote"><div class="para"> Publican is a <em class="firstterm">DocBook</em> publishing system. - </div></blockquote></div></div><div class="section" id="idm263491804992"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm263491804992">3.2. Pull-quote Conventions</h3></div></div></div><div class="para"> + </div></blockquote></div></div><div class="section" id="idm225407107760"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm225407107760">3.2. Pull-quote Conventions</h3></div></div></div><div class="para"> Terminal output and source code listings are set off visually from the surrounding text. </div><div class="para"> Output sent to a terminal is set in <code class="computeroutput">mono-spaced roman</code> and presented thus: @@ -184,7 +184,7 @@ books_tests Desktop1 downloads images notes scripts svgs</pre><div cla System.<span class="perl_Function">out</span>.<span class="perl_Function">println</span>(<span class="perl_String">"Echo.echo('Hello') = "</span> + echo.<span class="perl_Function">echo</span>(<span class="perl_String">"Hello"</span>)); } -}</pre></div><div class="section" id="idm263464125376"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm263464125376">3.3. Notes and Warnings</h3></div></div></div><div class="para"> +}</pre></div><div class="section" id="idm225436319920"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm225436319920">3.3. Notes and Warnings</h3></div></div></div><div class="para"> Finally, we use three visual styles to draw attention to information that might otherwise be overlooked. </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para"> Notes are tips, shortcuts or alternative approaches to the task at hand. Ignoring a note should have no negative consequences, but you might miss out on a trick that makes your life easier. @@ -192,7 +192,7 @@ books_tests Desktop1 downloads images notes scripts svgs</pre><div cla Important boxes detail things that are easily missed: configuration changes that only apply to the current session, or services that need restarting before an update will apply. Ignoring a box labeled 'Important' will not cause data loss but may cause irritation and frustration. </div></div></div><div class="warning"><div class="admonition_header"><h2>Warning</h2></div><div class="admonition"><div class="para"> Warnings should not be ignored. Ignoring warnings will most likely cause data loss. - </div></div></div></div></div><div xml:lang="en-US" class="section" id="idm263466628000" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="idm263466628000">4. We Need Feedback!</h2></div></div></div><a id="idm263468667840" class="indexterm"></a><div class="para"> + </div></div></div></div></div><div xml:lang="en-US" class="section" id="idm225453598688" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="idm225453598688">4. We Need Feedback!</h2></div></div></div><a id="idm225431451312" class="indexterm"></a><div class="para"> If you find a typographical error in this manual, or if you have thought of a way to make this manual better, we would love to hear from you! Please submit a report in Bugzilla: <a href="https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora Documentation&component=system-administrator's-guide">https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora Documentation&component=system-administrator's-guide</a> </div><div class="para"> If you have a suggestion for improving the documentation, try to be as specific as possible when describing it. If you have found an error, please include the section number and some of the surrounding text so we can find it easily. @@ -202,9 +202,9 @@ books_tests Desktop1 downloads images notes scripts svgs</pre><div cla <a class="xref" href="#sect-System_Monitoring_Tools-Net-SNMP">Section 17.6, “Monitoring Performance with Net-SNMP”</a> is based on an article written by Michael Solberg. </div><div class="para"> The authors of this book would like to thank the following people for their valuable contributions: Adam Tkáč, Andrew Fitzsimon, Andrius Benokraitis, Brian Cleary Edward Bailey, Garrett LeSage, Jeffrey Fearn, Joe Orton, Joshua Wulf, Karsten Wade, Lucy Ringland, Marcela Mašláňová, Mark Johnson, Michael Behm, Miroslav Lichvár, Radek Vokál, Rahul Kavalapara, Rahul Sundaram, Sandra Moore, Zbyšek Mráz, Jan Včelák, Peter Hutterer, T.C. Hollingsworth, and James Antill, among many others. - </div></div></div><div class="part" id="part-Basic_System_Configuration"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part I. Basic System Configuration</h1></div></div></div><div class="partintro" id="idm263439950288"><div></div><div class="para"> + </div></div></div><div class="part" id="part-Basic_System_Configuration"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part I. Basic System Configuration</h1></div></div></div><div class="partintro" id="idm225491459152"><div></div><div class="para"> This part covers basic system administration tasks such as keyboard configuration, date and time configuration, managing users and groups, and gaining privileges. - </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Opening_GUI_Applications">1. Opening Graphical Applications</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm263474255504">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></dd><dt><span class="ch apter"><a href="#ch-System_Locale_and_Keyboard_Configuration">2. System Locale and Keyboard Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_the_Date_and_Time">3. Configuring the Date and Time</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl">3.1. Using the timedatectl Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Display">3.1.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time">3.1.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Date">3.1.3. Changing the Current Date</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time_ Zone">3.1.4. Changing the Time Zone</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-NTP">3.1.5. Synchronizing the System Clock with a Remote Server</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date">3.2. Using the date Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Display">3.2.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Time">3.2.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Date">3.2.3. Changing the Current Date</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-hwclock">3.3. Using the hwclock Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect2-displaying-time-hwclock">3.3.1. Displaying the C urrent Date and Time</a></span></dt><dt><span class="section"><a href="#sect3-changing-date-time-hwclock">3.3.2. Setting the Date and Time</a></span></dt><dt><span class="section"><a href="#sect4-synchronizing-date-time-hwclock">3.3.3. Synchronizing the Date and Time</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Date_and_Time-Resources">3.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Managing_Users_and_Groups">4. Managing Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a> </span></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#chap-Gaining_Privi leges">5. Gaining Privileges</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Gaining_Privileges-The_su_Command">5.1. The su Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-The_sudo_Command">5.2. The sudo Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-Additional_Resources">5.3. Additional Resources</a></span></dt></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch-Opening_GUI_Applications" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 1. Opening Graphical Applications</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm263474255504">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></div><a id="idm263479860816" class="indexterm"></a><div class="para"> + </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Opening_GUI_Applications">1. Opening Graphical Applications</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm225499600880">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></dd><dt><span class="ch apter"><a href="#ch-System_Locale_and_Keyboard_Configuration">2. System Locale and Keyboard Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_the_Date_and_Time">3. Configuring the Date and Time</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl">3.1. Using the timedatectl Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Display">3.1.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time">3.1.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Date">3.1.3. Changing the Current Date</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-Time_ Zone">3.1.4. Changing the Time Zone</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-timedatectl-NTP">3.1.5. Synchronizing the System Clock with a Remote Server</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date">3.2. Using the date Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Display">3.2.1. Displaying the Current Date and Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Time">3.2.2. Changing the Current Time</a></span></dt><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-date-Date">3.2.3. Changing the Current Date</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Configuring_the_Date_and_Time-hwclock">3.3. Using the hwclock Command</a></span></dt><dd><dl><dt><span class="section"><a href="#sect2-displaying-time-hwclock">3.3.1. Displaying the C urrent Date and Time</a></span></dt><dt><span class="section"><a href="#sect3-changing-date-time-hwclock">3.3.2. Setting the Date and Time</a></span></dt><dt><span class="section"><a href="#sect4-synchronizing-date-time-hwclock">3.3.3. Synchronizing the Date and Time</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Date_and_Time-Resources">3.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-Managing_Users_and_Groups">4. Managing Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a> </span></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#chap-Gaining_Privi leges">5. Gaining Privileges</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Gaining_Privileges-The_su_Command">5.1. The su Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-The_sudo_Command">5.2. The sudo Command</a></span></dt><dt><span class="section"><a href="#sect-Gaining_Privileges-Additional_Resources">5.3. Additional Resources</a></span></dt></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch-Opening_GUI_Applications" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 1. Opening Graphical Applications</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#gui-from_cli">1.1. Opening graphical applications from the command line</a></span></dt><dt><span class="section"><a href="#gui-alt_f2">1.2. Launching Applications with <span class="keycap"><strong>Alt</strong></span>+<span class="keycap"><strong>F2</strong></span> </a></span></dt><dt><span class="section"><a href="#gui-from_menu">1.3. Launching applications from the Desktop Menu</a></span></dt><dd><dl><dt><span class="section"><a href="#gui-from_menu-gnome">1.3.1. Using GNOME menus</a></span></dt><dt><span class="section"><a href="#gui-from_menu-kde">1.3.2. Using KDE menus </a></span></dt><dt><span class="section"><a href="#idm225499600880">1.3.3. Using menus in LXDE, MATE, and XFCE</a></span></dt></dl></dd></dl></div><a id="idm225494855616" class="indexterm"></a><div class="para"> Fedora provides graphical applications in addition to command line utilities for configuring many features. This chapter describes methods for opening <code class="literal">Graphical User Interface</code>, or <em class="firstterm">GUI</em>, applications in various environments. </div><div class="section" id="gui-from_cli"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">1.1. Opening graphical applications from the command line</h2></div></div></div><div class="para"> Graphical applications can be launched from a terminal window or console session by simply typing the name of the application. @@ -303,7 +303,7 @@ root 23874 0.0 0.0 109184 900 pts/21 S+ 15:35 0:00 grep --color=au Search functionality is also available in the KDE menu system. To search for applications, open the menu and begin typing. The menu will display matching entries. </div><div class="figure" id="fig-searchmenu_kde"><div class="figure-contents"><div class="mediaobject"><img src="images/searchmenu_KDE.png" alt="Searching with the KDE menu." /><div class="longdesc"><div class="para"> The KDE menu will search for matching applications if you type into the search box. For example, typing <code class="literal">browser</code> will display installed browsers and other matching entries. - </div></div></div></div><h6>Figure 1.9. Searching with the KDE menu. </h6></div><br class="figure-break" /></div><div class="section" id="idm263474255504"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm263474255504">1.3.3. Using menus in LXDE, MATE, and XFCE</h3></div></div></div><div class="para"> + </div></div></div></div><h6>Figure 1.9. Searching with the KDE menu. </h6></div><br class="figure-break" /></div><div class="section" id="idm225499600880"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="idm225499600880">1.3.3. Using menus in LXDE, MATE, and XFCE</h3></div></div></div><div class="para"> Menus in LXDE, MATE, and XFCE have a varied appearance but a very similar structure. They categorize applications, and the contents of a category are displayed by hovering the cursor over the entry. Applications are launched by clicking on an entry. </div><div class="figure" id="fig-menu_lxde"><div class="figure-contents"><div class="mediaobject"><img src="images/menu_LXDE.png" alt="The LXDE menu" /><div class="longdesc"><div class="para"> LXDE Menu @@ -311,7 +311,7 @@ root 23874 0.0 0.0 109184 900 pts/21 S+ 15:35 0:00 grep --color=au MATE menu </div></div></div></div><h6>Figure 1.11. MATE menu </h6></div><br class="figure-break" /><div class="figure" id="fig-menu_xfce"><div class="figure-contents"><div class="mediaobject"><img src="images/menu_XFCE.png" alt="XFCE Menu" /><div class="longdesc"><div class="para"> XFCE Menu - </div></div></div></div><h6>Figure 1.12. XFCE Menu </h6></div><br class="figure-break" /></div></div></div><div xml:lang="en-US" class="chapter" id="ch-System_Locale_and_Keyboard_Configuration" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 2. System Locale and Keyboard Configuration</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="sect ion"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></div><a id="idm263463391824" class="indexterm"></a><div class="para"> + </div></div></div></div><h6>Figure 1.12. XFCE Menu </h6></div><br class="figure-break" /></div></div></div><div xml:lang="en-US" class="chapter" id="ch-System_Locale_and_Keyboard_Configuration" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 2. System Locale and Keyboard Configuration</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-Setting_the_System_Locale">2.1. Setting the System Locale</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Displaying_the_Current_Status">2.1.1. Displaying the Current Status</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Locales">2.1.2. Listing Available Locales</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Locale">2.1.3. Setting the Locale</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Changing_the_Keyboard_Layout">2.2. Changing the Keyboard Layout</a></span></dt><dd><dl><dt><span class="sect ion"><a href="#s2-Displaying_the_Current_Settings">2.2.1. Displaying the Current Settings</a></span></dt><dt><span class="section"><a href="#s2-Listing_Available_Keymaps">2.2.2. Listing Available Keymaps</a></span></dt><dt><span class="section"><a href="#s2-Setting_the_Keymap">2.2.3. Setting the Keymap</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Keyboard_Configuration-Resources">2.3. Additional Resources</a></span></dt></dl></div><a id="idm225456551088" class="indexterm"></a><div class="para"> The <span class="emphasis"><em>system locale</em></span> specifies the language settings of system services and user interfaces. The <span class="emphasis"><em>keyboard layout</em></span> settings control the layout used on the text console and graphical user interfaces. </div><div class="para"> These settings can be made by modifying the <code class="filename">/etc/locale.conf</code> configuration file or by using the <span class="application"><strong>localectl</strong></span> utility. Also, you can use the graphical user interface to perform the task; for a description of this method, see <a href="http://docs.fedoraproject.org/install-guide">Fedora Installation Guide</a>. @@ -383,7 +383,7 @@ en_BW.utf8 Replace <em class="replaceable"><code>locale</code></em> with the locale name, found with the <code class="command">localectl</code> <code class="option">list-locales</code> command. The above syntax can also be used to configure parameters from <a class="xref" href="#tab-locale_options">Table 2.1, “Options configurable in /etc/locale.conf”</a>. </div><div class="example"><h6>Example 2.3. Changing the Default Locale</h6><div class="example-contents"><div class="para"> For example, if you want to set British English as your default locale, first find the name of this locale by using <code class="option">list-locales</code>. Then, as <code class="systemitem">root</code>, type the command in the following form: - </div><pre class="synopsis">~]# <code class="command">localectl</code> <code class="option">set-locale</code> <code class="option">LANG</code>=<code class="literal">en_GB.utf8</code></pre></div></div><br class="example-break" /></div></div><div class="section" id="s1-Changing_the_Keyboard_Layout"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">2.2. Changing the Keyboard Layout</h2></div></div></div><a id="idm263422753072" class="indexterm"></a><a id="idm263422751472" class="indexterm"></a><div class="para"> + </div><pre class="synopsis">~]# <code class="command">localectl</code> <code class="option">set-locale</code> <code class="option">LANG</code>=<code class="literal">en_GB.utf8</code></pre></div></div><br class="example-break" /></div></div><div class="section" id="s1-Changing_the_Keyboard_Layout"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">2.2. Changing the Keyboard Layout</h2></div></div></div><a id="idm225451167712" class="indexterm"></a><a id="idm225451082544" class="indexterm"></a><div class="para"> The keyboard layout settings enable the user to control the layout used on the text console and graphical user interfaces. </div><div class="section" id="s2-Displaying_the_Current_Settings"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">2.2.1. Displaying the Current Settings</h3></div></div></div><div class="para"> As mentioned before, you can check your current keyboard layout configuration with the following command: @@ -654,7 +654,7 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> <code class="systemitem">hwclock</code>(8) — The manual page for the <code class="command">hwclock</code> command provides a complete list of supported command line options. </div></li></ul></div><h3 id="brid-Date_and_Time-Resources-Also">See Also</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <a class="xref" href="#ch-System_Locale_and_Keyboard_Configuration">Chapter 2, <em>System Locale and Keyboard Configuration</em></a> documents how to configure the keyboard layout. - </div></li></ul></div></div></div><div xml:lang="en-US" class="chapter" id="ch-Managing_Users_and_Groups" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Managing Users and Groups</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><spa n class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></div><a id="idm263490592704" class="indexterm"></a><a id="idm263437778128" class="indexterm"></a><a id="idm263463991376" class="indexterm"></a><a id="idm263460637120" class="indexterm"></a><div class="para"> + </div></li></ul></div></div></div><div xml:lang="en-US" class="chapter" id="ch-Managing_Users_and_Groups" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Managing Users and Groups</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-users-groups-introduction">4.1. Introduction to Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-users-groups-private-groups">4.1.1. User Private Groups</a></span></dt><dt><span class="section"><a href="#s2-users-groups-shadow-utilities">4.1.2. Shadow Passwords</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-configui">4.2. Managing Users in a Graphical Environment</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-redhat-config-users-list">4.2.1. Using the Users Settings Tool</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-users-tools">4.3. Using Command Line Tools</a></span></dt><dd><dl><dt><spa n class="section"><a href="#s2-users-tools-users-add">4.3.1. Adding a New User</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-add">4.3.2. Adding a New Group</a></span></dt><dt><span class="section"><a href="#s2-users-tools-password-aging">4.3.3. Enabling Password Aging</a></span></dt><dt><span class="section"><a href="#s2-users-tools-users-logout">4.3.4. Enabling Automatic Logouts</a></span></dt><dt><span class="section"><a href="#s2-users-tools-groups-directories">4.3.5. Creating Group Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Users_and_Groups-Resources">4.4. Additional Resources</a></span></dt></dl></div><a id="idm225463047728" class="indexterm"></a><a id="idm225454020736" class="indexterm"></a><a id="idm225430890304" class="indexterm"></a><a id="idm225501295232" class="indexterm"></a><div class="para"> The control of users and groups is a core element of Fedora system administration. This chapter explains how to add, manage, and delete users and groups in the graphical user interface and on the command line, and covers advanced topics, such as creating group directories. </div><div class="section" id="s1-users-groups-introduction"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.1. Introduction to Users and Groups</h2></div></div></div><div class="para"> While users can be either people (meaning accounts tied to physical users) or accounts which exist for specific applications to use, groups are logical expressions of organization, tying users together for a common purpose. Users within a group share the same permissions to read, write, or execute files owned by that group. @@ -662,7 +662,7 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> Each user is associated with a unique numerical identification number called a <em class="firstterm">user ID</em> (<acronym class="acronym">UID</acronym>). Likewise, each group is associated with a <em class="firstterm">group ID</em> (<acronym class="acronym">GID</acronym>). A user who creates a file is also the owner and group owner of that file. The file is assigned separate read, write, and execute permissions for the owner, the group, and everyone else. The file owner can be changed only by <code class="systemitem">root</code>, and access permissions can be changed by both the <code class="systemitem">root</code> user and file owner. </div><div class="para"> Additionally, Fedora supports <em class="firstterm">access control lists</em> (<acronym class="acronym">ACLs</acronym>) for files and directories which allow permissions for specific users outside of the owner to be set. For more information about this feature, see the <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…"><em class="citetitle">Access Control Lists</em></a> chapter of the <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…"><em class="citetitle">Storage Administration Guide</em></a>. - </div><div class="section" id="s2-users-groups-private-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.1.1. User Private Groups</h3></div></div></div><a id="idm263485912512" class="indexterm"></a><a id="idm263485911072" class="indexterm"></a><a id="idm263485909632" class="indexterm"></a><div class="para"> + </div><div class="section" id="s2-users-groups-private-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.1.1. User Private Groups</h3></div></div></div><a id="idm225469381792" class="indexterm"></a><a id="idm225469763952" class="indexterm"></a><a id="idm225426120864" class="indexterm"></a><div class="para"> Fedora uses a <em class="firstterm">user private group</em> (<em class="firstterm">UPG</em>) scheme, which makes UNIX groups easier to manage. A user private group is created whenever a new user is added to the system. It has the same name as the user for which it was created and that user is the only member of the user private group. </div><div class="para"> User private groups make it safe to set default permissions for a newly created file or directory, allowing both the user and <span class="emphasis"><em>the group of that user</em></span> to make modifications to the file or directory. @@ -670,7 +670,7 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> The setting which determines what permissions are applied to a newly created file or directory is called a <em class="firstterm">umask</em> and is configured in the <code class="filename">/etc/bashrc</code> file. Traditionally on UNIX-based systems, the <code class="command">umask</code> is set to <code class="command">022</code>, which allows only the user who created the file or directory to make modifications. Under this scheme, all other users, <span class="emphasis"><em>including members of the creator's group</em></span>, are not allowed to make any modifications. However, under the UPG scheme, this <span class="quote">“<span class="quote">group protection</span>”</span> is not necessary since every user has their own private group. </div><div class="para"> A list of all groups is stored in the <code class="filename">/etc/group</code> configuration file. - </div></div><div class="section" id="s2-users-groups-shadow-utilities"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.1.2. Shadow Passwords</h3></div></div></div><a id="idm263487163840" class="indexterm"></a><a id="idm263487162400" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-users-groups-shadow-utilities"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.1.2. Shadow Passwords</h3></div></div></div><a id="idm225451250864" class="indexterm"></a><a id="idm225451249424" class="indexterm"></a><div class="para"> In environments with multiple users, it is very important to use <em class="firstterm">shadow passwords</em> provided by the <span class="package">shadow-utils</span> package to enhance the security of system authentication files. For this reason, the installation program enables shadow passwords by default. </div><div class="para"> The following is a list of the advantages shadow passwords have over the traditional way of storing passwords on UNIX-based systems: @@ -690,7 +690,7 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> The <code class="command">usermod</code> command with the <code class="option">-e, --expiredate</code> or <code class="option">-f, --inactive</code> option. </div></li><li class="listitem"><div class="para"> The <code class="command">useradd</code> command with the <code class="option">-e, --expiredate</code> or <code class="option">-f, --inactive</code> option. - </div></li></ul></div></div></div><div class="section" id="s1-users-configui"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.2. Managing Users in a Graphical Environment</h2></div></div></div><a id="idm263469223728" class="indexterm"></a><a id="idm263469222288" class="indexterm"></a><a id="idm263469220848" class="indexterm"></a><a id="idm263513362288" class="indexterm"></a><a id="idm263513360848" class="indexterm"></a><div class="para"> + </div></li></ul></div></div></div><div class="section" id="s1-users-configui"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.2. Managing Users in a Graphical Environment</h2></div></div></div><a id="idm225467941664" class="indexterm"></a><a id="idm225467940224" class="indexterm"></a><a id="idm225475560688" class="indexterm"></a><a id="idm225475559248" class="indexterm"></a><a id="idm225445607648" class="indexterm"></a><div class="para"> The <span class="application"><strong>Users</strong></span> utility allows you to view, modify, add, and delete local users in the graphical user interface. </div><div class="section" id="s2-redhat-config-users-list"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.2.1. Using the Users Settings Tool</h3></div></div></div><div class="para"> Press the <span class="keycap"><strong>Super</strong></span> key to enter the Activities Overview, type <code class="command">Users</code> and then press <span class="keycap"><strong>Enter</strong></span>. The <span class="application"><strong>Users</strong></span> settings tool appears. The <span class="keycap"><strong>Super</strong></span> key appears in a variety of guises, depending on the keyboard and other hardware, but often as either the Windows or Command key, and typically to the left of the Spacebar. @@ -700,7 +700,7 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> The <span class="application"><strong>Users</strong></span> settings tool </div></div></div></div><h6>Figure 4.1. The Users Settings Tool</h6></div><br class="figure-break" /><div class="para"> When a new user is created, the account is disabled until a password is set. The <span class="guimenu"><strong>Add User</strong></span> menu contains the options to set a password by the administrator immediately, or to allow the user to choose a password at the first login. - </div></div></div><div class="section" id="s1-users-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.3. Using Command Line Tools</h2></div></div></div><a id="idm263436562208" class="indexterm"></a><a id="idm263436560128" class="indexterm"></a><a id="idm263490975024" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="s1-users-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.3. Using Command Line Tools</h2></div></div></div><a id="idm225436429664" class="indexterm"></a><a id="idm225436427584" class="indexterm"></a><a id="idm225454129024" class="indexterm"></a><div class="para"> Apart from the <span class="application"><strong>Users</strong></span> settings tool described in <a class="xref" href="#s1-users-configui">Section 4.2, “Managing Users in a Graphical Environment”</a>, which is designed for basic managing of users, you can use command line tools for managing users and groups that are listed in <a class="xref" href="#table-users-tools">Table 4.1, “Command line utilities for managing users and groups”</a>. </div><div class="table" id="table-users-tools"><h6>Table 4.1. Command line utilities for managing users and groups</h6><div class="table-contents"><table summary="Command line utilities for managing users and groups" border="1"><colgroup><col width="35%" class="utilities" /><col width="65%" class="description" /></colgroup><thead><tr><th class=""> Utilities @@ -734,11 +734,11 @@ Tue 15 Apr 2014 04:23:46 PM CEST -0.329272 seconds</pre><div class="para"> <code class="command">grpconv</code>, <code class="command">grpunconv</code> </td><td class=""> Similar to the previous, these utilities can be used for conversion of shadowed information for group accounts. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="s2-users-tools-users-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.1. Adding a New User</h3></div></div></div><a id="idm263489600928" class="indexterm"></a><a id="idm263489599200" class="indexterm"></a><a id="idm263480028112" class="indexterm"></a><div class="para"> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="s2-users-tools-users-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.1. Adding a New User</h3></div></div></div><a id="idm225425098624" class="indexterm"></a><a id="idm225425096896" class="indexterm"></a><a id="idm225472438192" class="indexterm"></a><div class="para"> To add a new user to the system, type the following at a shell prompt as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">useradd</code> [<span class="optional"><em class="replaceable"><code>options</code></em></span>] <em class="replaceable"><code>username</code></em></pre><div class="para"> …where <em class="replaceable"><code>options</code></em> are command-line options as described in <a class="xref" href="#table-useradd-options">Table 4.2, “Common useradd command-line options”</a>. - </div><a id="idm263392971808" class="indexterm"></a><div class="para"> + </div><a id="idm225452290832" class="indexterm"></a><div class="para"> By default, the <code class="command">useradd</code> command creates a locked user account. To unlock the account, run the following command as <code class="systemitem">root</code> to assign a password: </div><pre class="synopsis"><code class="command">passwd</code> <em class="replaceable"><code>username</code></em></pre><div class="para"> Optionally, you can set a password aging policy. See <a class="xref" href="#s2-users-tools-password-aging">Section 4.3.3, “Enabling Password Aging”</a> for information on how to enable password aging. @@ -870,7 +870,7 @@ drwxr-xr-x. 5 root root 4096 Mar 3 18:23 .. -rw-r--r--. 1 juan juan 124 Jul 09 08:43 .bashrc drwxr-xr-x. 4 juan juan 4096 Jul 09 08:43 .mozilla</pre></li></ol></div><div class="para"> At this point, a locked account called <code class="systemitem">juan</code> exists on the system. To activate it, the administrator must next assign a password to the account using the <code class="command">passwd</code> command and, optionally, set password aging guidelines. - </div></div><div class="section" id="s2-users-tools-groups-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.2. Adding a New Group</h3></div></div></div><a id="idm263458079696" class="indexterm"></a><a id="idm263458078096" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-users-tools-groups-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.2. Adding a New Group</h3></div></div></div><a id="idm225454190512" class="indexterm"></a><a id="idm225454188912" class="indexterm"></a><div class="para"> To add a new group to the system, type the following at a shell prompt as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">groupadd</code> [<span class="optional"><em class="replaceable"><code>options</code></em></span>] <em class="replaceable"><code>group_name</code></em></pre><div class="para"> …where <em class="replaceable"><code>options</code></em> are command-line options as described in <a class="xref" href="#table-groupadd-options">Table 4.3, “Common groupadd command-line options”</a>. @@ -902,11 +902,11 @@ drwxr-xr-x. 4 juan juan 4096 Jul 09 08:43 .mozilla</pre></li></ol></div><div cla <code class="option">-r</code> </td><td class=""> Create a system group with a GID less than 1000. - </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="s2-users-tools-password-aging"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.3. Enabling Password Aging</h3></div></div></div><a id="idm263490368976" class="indexterm"></a><a id="idm263490367536" class="indexterm"></a><a id="idm263490366096" class="indexterm"></a><a id="idm263490365168" class="indexterm"></a><a id="idm263392888144" class="indexterm"></a><div class="para"> + </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="s2-users-tools-password-aging"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.3. Enabling Password Aging</h3></div></div></div><a id="idm225475450880" class="indexterm"></a><a id="idm225475449440" class="indexterm"></a><a id="idm225475592128" class="indexterm"></a><a id="idm225475591200" class="indexterm"></a><a id="idm225458141792" class="indexterm"></a><div class="para"> For security reasons, it is advisable to require users to change their passwords periodically. This can be done by using the <code class="command">chage</code> command. </div><div class="important"><div class="admonition_header"><h2>Shadow passwords must be enabled to use chage</h2></div><div class="admonition"><div class="para"> Shadow passwords must be enabled to use the <code class="command">chage</code> command. For more information, see <a class="xref" href="#s2-users-groups-shadow-utilities">Section 4.1.2, “Shadow Passwords”</a>. - </div></div></div><a id="idm263392882848" class="indexterm"></a><div class="para"> + </div></div></div><a id="idm225459175072" class="indexterm"></a><div class="para"> To configure password expiration for a user from a shell prompt, run the following command as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">chage</code> [<span class="optional"><em class="replaceable"><code>options</code></em></span>] <em class="replaceable"><code>username</code></em></pre><div class="para"> …where <em class="replaceable"><code>options</code></em> are command line options as described in <a class="xref" href="#table-chage-options">Table 4.4, “chage command line options”</a>. When the <code class="command">chage</code> command is followed directly by a username (that is, when no command line options are specified), it displays the current password aging values and allows you to change them interactively. @@ -988,7 +988,7 @@ autodetach off</pre><div class="para"> This way, a password will be required to unlock the session. </div></li></ol></div><div class="para"> The changes take effect the next time a user logs in to the system. - </div></div><div class="section" id="s2-users-tools-groups-directories"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.5. Creating Group Directories</h3></div></div></div><a id="idm263488801232" class="indexterm"></a><a id="idm263522082464" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-users-tools-groups-directories"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">4.3.5. Creating Group Directories</h3></div></div></div><a id="idm225470253440" class="indexterm"></a><a id="idm225492735888" class="indexterm"></a><div class="para"> System administrators usually like to create a group for each major project and assign people to the group when they need to access that project's files. With this traditional scheme, file management is difficult; when someone creates a file, it is associated with the primary group to which they belong. When a single person works on multiple projects, it becomes difficult to associate the right files with the right group. However, with the UPG scheme, groups are automatically assigned to files created within a directory with the <em class="firstterm">setgid</em> bit set. The setgid bit makes managing group projects that share a common directory very simple because any files a user creates within the directory are owned by the group that owns the directory. </div><div class="para"> For example, a group of people need to work on files in the <code class="filename">/opt/myproject/</code> directory. Some people are trusted to modify the contents of this directory, but not everyone. @@ -1006,9 +1006,9 @@ autodetach off</pre><div class="para"> drwxrwsr-x. 3 root myproject 4096 Mar 3 18:31 /opt/myproject </pre></li><li class="step"><div class="para"> Add users to the <code class="systemitem">myproject</code> group: - </div><pre class="screen"><code class="command">usermod -aG myproject <em class="replaceable"><code>username</code></em></code></pre></li></ol></div></div></div><div class="section" id="sect-Users_and_Groups-Resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.4. Additional Resources</h2></div></div></div><a id="idm263433609120" class="indexterm"></a><a id="idm263433607680" class="indexterm"></a><div class="para"> + </div><pre class="screen"><code class="command">usermod -aG myproject <em class="replaceable"><code>username</code></em></code></pre></li></ol></div></div></div><div class="section" id="sect-Users_and_Groups-Resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">4.4. Additional Resources</h2></div></div></div><a id="idm225454386400" class="indexterm"></a><a id="idm225454384960" class="indexterm"></a><div class="para"> For more information on how to manage users and groups on Fedora, see the resources listed below. - </div><h3 id="sect-Users_and_Groups-Resources-Installed">Installed Documentation</h3><a id="idm263449152000" class="indexterm"></a><a id="idm263449150080" class="indexterm"></a><div class="para"> + </div><h3 id="sect-Users_and_Groups-Resources-Installed">Installed Documentation</h3><a id="idm225453850048" class="indexterm"></a><a id="idm225437322608" class="indexterm"></a><div class="para"> For information about various utilities for managing users and groups, see the following manual pages: </div><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <code class="systemitem">useradd</code>(8) — The manual page for the <code class="command">useradd</code> command documents how to use it to create new users. @@ -1111,17 +1111,17 @@ drwxrwsr-x. 3 root myproject 4096 Mar 3 18:31 /opt/myproject Opening a new shell as <code class="systemitem">root</code> in this or similar fashion gives the attacker administrative access for a theoretically unlimited amount of time, bypassing the timeout period specified in the <code class="filename">/etc/sudoers</code> file and never requiring the attacker to input a password for <code class="command">sudo</code> again until the newly opened session is closed. </div></li></ul></div></div></div></div><div class="section" id="sect-Gaining_Privileges-Additional_Resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">5.3. Additional Resources</h2></div></div></div><div class="para"> While programs allowing users to gain administrative privileges are a potential security risk, security itself is beyond the scope of this particular book. You should therefore refer to the resources listed below for more information regarding security and privileged access. - </div><h3 id="idm263473942000">Installed Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> + </div><h3 id="idm225467768832">Installed Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <code class="systemitem">su</code>(1) — The manual page for <code class="command">su</code> provides information regarding the options available with this command. </div></li><li class="listitem"><div class="para"> <code class="systemitem">sudo</code>(8) — The manual page for <code class="command">sudo</code> includes a detailed description of this command and lists options available for customizing its behavior. </div></li><li class="listitem"><div class="para"> <code class="systemitem">pam</code>(8) — The manual page describing the use of Pluggable Authentication Modules (PAM) for Linux. - </div></li></ul></div><h3 id="idm263439313472">Online Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> + </div></li></ul></div><h3 id="idm225452478544">Online Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> The <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…">Red Hat Enterprise Linux 7 Security Guide</a> provides a more in-depth look at potential security issues pertaining to setuid programs as well as techniques used to alleviate these risks. - </div></li></ul></div><h3 id="idm263497238944">See Also</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> + </div></li></ul></div><h3 id="idm225461893840">See Also</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <a class="xref" href="#ch-Managing_Users_and_Groups">Chapter 4, <em>Managing Users and Groups</em></a> documents how to manage system users and groups in the graphical user interface and on the command line. - </div></li></ul></div></div></div></div><div class="part" id="part-Package_Management"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part II. Package Management</h1></div></div></div><div class="partintro" id="idm263467145488"><div></div><div class="para"> + </div></li></ul></div></div></div></div><div class="part" id="part-Package_Management"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part II. Package Management</h1></div></div></div><div class="partintro" id="idm225468756352"><div></div><div class="para"> All software on a Fedora system is divided into RPM packages, which can be installed, upgraded, or removed. This part describes how to manage packages on Fedora using <span class="application"><strong>DNF</strong></span>. </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-DNF">6. DNF</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_and_Updating_Packages">6.1. Checking For and Updating Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_Updates">6.1.1. Checking For Updates</a></span></dt><dt><span class="section"><a href="#sec-Updating_Packages">6.1.2. Updating Packages</a></span></dt><dt><span class="section"><a href="#sec-Preserving_Configuration_File_Changes">6.1.3. Preserving Configuration File Changes</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Packages_and_Package_Groups">6.2. Packages and Package Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Searching_Packages">6.2.1. Searching Packages</a></span></dt><dt><span class="section"><a href="#sec-Listing_Packages">6.2.2. Listing Packages</a></span></dt><dt><span class=" section"><a href="#sec-Displaying_Package_Information">6.2.3. Displaying Package Information</a></span></dt><dt><span class="section"><a href="#sec-Installing">6.2.4. Installing Packages</a></span></dt><dt><span class="section"><a href="#sec-Removing">6.2.5. Removing Packages</a></span></dt><dt><span class="section"><a href="#sec-DNF-Transaction_History">6.2.6. Working with Transaction History</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Configuring_DNF_and_DNF_Repositories">6.3. Configuring DNF and DNF Repositories</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_main_Options">6.3.1. Setting [main] Options</a></span></dt><dt><span class="section"><a href="#sec-Setting_repository_Options">6.3.2. Setting [repository] Options</a></span></dt><dt><span class="section"><a href="#sec-Using_DNF_Variables">6.3.3. Using DNF Variables</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Viewing_the_Current_Configuration">6.4. Viewi ng the Current Configuration</a></span></dt><dt><span class="section"><a href="#sec-Managing_DNF_Repositories">6.5. Adding, Enabling, and Disabling a DNF Repository</a></span></dt><dt><span class="section"><a href="#sec-Additional_Resources">6.6. Additional Resources</a></span></dt></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch-DNF" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 6. DNF</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#sec-Checking_For_and_Updating_Packages">6.1. Checking For and Updating Packages</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_For_Updates">6.1.1. Checking For Updates</a></span></dt><dt><span class="section"><a href="#sec-Updating_Packages">6.1.2. Updating Packages</a></span></dt><dt><span class="section"><a href="#sec-Preserving_Configuration_File_Changes">6.1.3. Preserving Configuration File Changes</a></span></dt></dl></dd>< dt><span class="section"><a href="#sec-Packages_and_Package_Groups">6.2. Packages and Package Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Searching_Packages">6.2.1. Searching Packages</a></span></dt><dt><span class="section"><a href="#sec-Listing_Packages">6.2.2. Listing Packages</a></span></dt><dt><span class="section"><a href="#sec-Displaying_Package_Information">6.2.3. Displaying Package Information</a></span></dt><dt><span class="section"><a href="#sec-Installing">6.2.4. Installing Packages</a></span></dt><dt><span class="section"><a href="#sec-Removing">6.2.5. Removing Packages</a></span></dt><dt><span class="section"><a href="#sec-DNF-Transaction_History">6.2.6. Working with Transaction History</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Configuring_DNF_and_DNF_Repositories">6.3. Configuring DNF and DNF Repositories</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Setting_main_Options">6.3.1. Setting [main] O ptions</a></span></dt><dt><span class="section"><a href="#sec-Setting_repository_Options">6.3.2. Setting [repository] Options</a></span></dt><dt><span class="section"><a href="#sec-Using_DNF_Variables">6.3.3. Using DNF Variables</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Viewing_the_Current_Configuration">6.4. Viewing the Current Configuration</a></span></dt><dt><span class="section"><a href="#sec-Managing_DNF_Repositories">6.5. Adding, Enabling, and Disabling a DNF Repository</a></span></dt><dt><span class="section"><a href="#sec-Additional_Resources">6.6. Additional Resources</a></span></dt></dl></div><div class="para"> <span class="application"><strong>DNF</strong></span> is the The Fedora Project package manager that is able to query for information about packages, fetch packages from repositories, install and uninstall packages using automatic dependency resolution, and update an entire system to the latest available packages. DNF performs automatic dependency resolution on packages you are updating, installing or removing, and thus is able to automatically determine, fetch and install all available dependent packages. DNF can be configured with new, additional repositories, or <em class="firstterm">package sources</em>, and also provides many plug-ins which enhance and extend its capabilities. DNF is able to perform many of the same tasks that <span class="application"><strong>RPM</strong></span> can; additionally, many of the command line options are similar. DNF enables easy and simple package management on a single machine or on groups of them. @@ -1133,7 +1133,7 @@ drwxrwsr-x. 3 root myproject 4096 Mar 3 18:31 /opt/myproject Learning DNF is a worthwhile investment because it is often the fastest way to perform system administration tasks, and it provides capabilities beyond those provided by the <span class="application"><strong>PackageKit</strong></span> graphical package management tools. </div><div class="note" id="note-Note_DNF_and_Superuser_Privileges"><div class="admonition_header"><h2>DNF and superuser privileges</h2></div><div class="admonition"><div class="para"> You must have superuser privileges in order to use the <code class="command">dnf</code> command to install, update or remove packages on your system. All examples in this chapter assume that you have already obtained superuser privileges by using either the <code class="command">su</code> or <code class="command">sudo</code> command. - </div></div></div><div class="section" id="sec-Checking_For_and_Updating_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.1. Checking For and Updating Packages</h2></div></div></div><div class="section" id="sec-Checking_For_Updates"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.1. Checking For Updates</h3></div></div></div><a id="idm263499679168" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="sec-Checking_For_and_Updating_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.1. Checking For and Updating Packages</h2></div></div></div><div class="section" id="sec-Checking_For_Updates"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.1. Checking For Updates</h3></div></div></div><a id="idm225459729360" class="indexterm"></a><div class="para"> The quickest way to check for updates is to attempt to install any available updates by using the <code class="command">dnf upgrade</code> command as follows: <pre class="screen">~]# <code class="command">dnf upgrade</code> Last metadata expiration check performed 1:24:32 ago on Thu May 14 23:23:51 2015. @@ -1163,9 +1163,9 @@ python-libs.x86_64 2.7.9-6.fc22 updates</pre><div class= <code class="computeroutput">6.fc22</code> — the release of the updated package, </div></li><li class="listitem"><div class="para"> <code class="computeroutput">updates-testing</code> — the repository in which the updated package is located. - </div></li></ul></div></div><div class="section" id="sec-Updating_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.2. Updating Packages</h3></div></div></div><a id="idm263395757200" class="indexterm"></a><div class="para"> + </div></li></ul></div></div><div class="section" id="sec-Updating_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.2. Updating Packages</h3></div></div></div><a id="idm225434819584" class="indexterm"></a><div class="para"> You can choose to update a single package, multiple packages, or all packages at once. If any dependencies of the package, or packages, you update have updates available themselves, then they are updated too. - </div><h4 id="bh-Updating_a_Single_Package"> Updating a Single Package </h4><a id="idm263395754464" class="indexterm"></a><div class="para"> + </div><h4 id="bh-Updating_a_Single_Package"> Updating a Single Package </h4><a id="idm225394667568" class="indexterm"></a><div class="para"> To update a single package, run the following command as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">dnf</code> <code class="option">upgrade</code> <em class="replaceable"><code>package_name</code></em></pre><div class="para"> For example, to update the <span class="package">python</span> package, type: @@ -1198,11 +1198,11 @@ Is this ok [y/N]:</pre><div class="para"> DNF always <span class="emphasis"><em>installs</em></span> a new kernel in the same sense that <span class="application"><strong>RPM</strong></span> installs a new kernel when you use the command <code class="command">rpm -i kernel</code>. Therefore, you do not need to worry about the distinction between <span class="emphasis"><em>installing</em></span> and <span class="emphasis"><em>upgrading</em></span> a kernel package when you use the <code class="command">dnf</code> command: it will do the right thing, regardless of whether you are using the <code class="command">dnf upgrade</code> or <code class="command">dnf install</code> command. </div><div class="para"> When using <span class="application"><strong>RPM</strong></span>, on the other hand, it is important to use the <code class="command">rpm -i kernel</code> command (which installs a new kernel) instead of <code class="command">rpm -u kernel</code> (which <span class="emphasis"><em>replaces</em></span> the current kernel). See <a class="xref" href="#sec-Installing_and_Upgrading">Section A.2.1, “Installing and Upgrading Packages”</a> for more information on installing and updating kernels with <span class="application"><strong>RPM</strong></span>. - </div></div></div><h4 id="bh-Updating_All_Packages_and_Their_Dependencies"> Updating All Packages and Their Dependencies </h4><a id="idm263474284464" class="indexterm"></a><div class="para"> + </div></div></div><h4 id="bh-Updating_All_Packages_and_Their_Dependencies"> Updating All Packages and Their Dependencies </h4><a id="idm225440751424" class="indexterm"></a><div class="para"> To update all packages and their dependencies, enter <code class="command">dnf upgrade</code> without any arguments: - </div><pre class="screen"><code class="command">dnf upgrade</code></pre></div><div class="section" id="sec-Preserving_Configuration_File_Changes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.3. Preserving Configuration File Changes</h3></div></div></div><a id="idm263491387024" class="indexterm"></a><div class="para"> + </div><pre class="screen"><code class="command">dnf upgrade</code></pre></div><div class="section" id="sec-Preserving_Configuration_File_Changes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.1.3. Preserving Configuration File Changes</h3></div></div></div><a id="idm225440729600" class="indexterm"></a><div class="para"> You will inevitably make changes to the configuration files installed by packages as you use your Fedora system. <span class="application"><strong>RPM</strong></span>, which DNF uses to perform changes to the system, provides a mechanism for ensuring their integrity. See <a class="xref" href="#sec-Installing_and_Upgrading">Section A.2.1, “Installing and Upgrading Packages”</a> for details on how to manage changes to configuration files across package upgrades. - </div></div></div><div class="section" id="sec-Packages_and_Package_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.2. Packages and Package Groups</h2></div></div></div><a id="idm263449507104" class="indexterm"></a><a id="idm263449505696" class="indexterm"></a><div class="section" id="sec-Searching_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.1. Searching Packages</h3></div></div></div><a id="idm263449503232" class="indexterm"></a><a id="idm263450735216" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="sec-Packages_and_Package_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.2. Packages and Package Groups</h2></div></div></div><a id="idm225492822224" class="indexterm"></a><a id="idm225492820816" class="indexterm"></a><div class="section" id="sec-Searching_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.1. Searching Packages</h3></div></div></div><a id="idm225440747616" class="indexterm"></a><a id="idm225436563184" class="indexterm"></a><div class="para"> You can search all <acronym class="acronym">RPM</acronym> package names and summaries by using the following command: </div><pre class="synopsis"><code class="command">dnf</code> <code class="option">search</code> <em class="replaceable"><code>term</code></em>…</pre><div class="para"> Add the <code class="option">all</code> to match against descriptions and URLs. @@ -1217,11 +1217,11 @@ python-meld3.x86_64 : HTML/XML templating system for Python ============================= N/S Matched: kompare ============================= komparator.x86_64 : Kompare and merge two folders - Name and summary matches only, use "search all" for everything.</pre><a id="idm263477930896" class="indexterm"></a><a id="idm263477929008" class="indexterm"></a></div><div class="section" id="sec-Listing_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.2. Listing Packages</h3></div></div></div><a id="idm263436703952" class="indexterm"></a><a id="idm263436702064" class="indexterm"></a><div class="para"> + Name and summary matches only, use "search all" for everything.</pre><a id="idm225457053440" class="indexterm"></a><a id="idm225458127728" class="indexterm"></a></div><div class="section" id="sec-Listing_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.2. Listing Packages</h3></div></div></div><a id="idm225440720192" class="indexterm"></a><a id="idm225440718304" class="indexterm"></a><div class="para"> <code class="command">dnf list</code> and related commands provide information about packages, package groups, and repositories. </div><div class="para"> All of DNF's list commands allow you to filter the results by appending one or more <em class="firstterm">glob expressions</em> as arguments. Glob expressions are normal strings of characters which contain one or more of the wildcard characters <code class="command">*</code> (which expands to match any character multiple times) and <code class="command">?</code> (which expands to match any one character). - </div><div class="note" id="note-Tip-Filtering_Results_with_Glob_Expressions"><div class="admonition_header"><h2>Filtering results with glob expressions</h2></div><div class="admonition"><a id="idm263440728288" class="indexterm"></a><a id="idm263440726400" class="indexterm"></a><div class="para"> + </div><div class="note" id="note-Tip-Filtering_Results_with_Glob_Expressions"><div class="admonition_header"><h2>Filtering results with glob expressions</h2></div><div class="admonition"><a id="idm225443639424" class="indexterm"></a><a id="idm225474209232" class="indexterm"></a><div class="para"> Be careful to escape the glob expressions when passing them as arguments to a <code class="command">dnf</code> command, otherwise the Bash shell will interpret these expressions as <em class="firstterm">pathname expansions</em>, and potentially pass all files in the current directory that match the globs to DNF. To make sure the glob expressions are passed to DNF as intended, either: </div><div class="itemizedlist"><ul><li class="listitem"><div class="para"> escape the wildcard characters by preceding them with a backslash character; or, @@ -1257,8 +1257,8 @@ abrt-addon-vmcore.x86_64 2.5.1-2.fc22 @System abrt-addon-xorg.x86_64 2.5.1-2.fc22 @System abrt-plugin-bodhi.x86_64 2.5.1-2.fc22 @System Available Packages -abrt-addon-upload-watch.x86_64 2.5.1-2.fc22 fedora</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263459139296" class="indexterm"></a> - <a id="idm263466635952" class="indexterm"></a> +abrt-addon-upload-watch.x86_64 2.5.1-2.fc22 fedora</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225440743632" class="indexterm"></a> + <a id="idm225435301488" class="indexterm"></a> <code class="command">dnf list all</code> </span></dt><dd><div class="para"> Lists all installed <span class="emphasis"><em>and</em></span> available packages. </div><div class="example" id="ex-Listing_all_installed_and_available_packages"><h6>Example 6.2. Listing all installed and available packages</h6><div class="example-contents"><pre class="screen">~]# <code class="command">dnf list all</code> @@ -1270,8 +1270,8 @@ PackageKit.x86_64 1.0.6-4.fc22 @System PackageKit-glib.x86_64 1.0.6-4.fc22 @System aajohan-comfortaa-fonts.noarch 2.004-4.fc22 @System abrt.x86_64 2.5.1-2.fc22 @System -<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263477829392" class="indexterm"></a> - <a id="idm263477827504" class="indexterm"></a> +<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225470338480" class="indexterm"></a> + <a id="idm225414398768" class="indexterm"></a> <code class="command">dnf list installed</code> </span></dt><dd><div class="para"> Lists all packages installed on your system. The rightmost column in the output lists the repository from which the package was retrieved. </div><div class="example" id="ex-Listing_installed_packages_using_a_double-quoted_glob_expression"><h6>Example 6.3. Listing installed packages using a double-quoted glob expression</h6><div class="example-contents"><div class="para"> @@ -1280,8 +1280,8 @@ abrt.x86_64 2.5.1-2.fc22 @System Last metadata expiration check performed 0:34:45 ago on Mon May 25 23:38:13 2015. Installed Packages krb5-libs.x86_64 1.13.1-3.fc22 @System -krb5-workstation.x86_64 1.13.1-3.fc22 @System</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263475184448" class="indexterm"></a> - <a id="idm263490817776" class="indexterm"></a> +krb5-workstation.x86_64 1.13.1-3.fc22 @System</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225446466976" class="indexterm"></a> + <a id="idm225446465088" class="indexterm"></a> <code class="command">dnf list available</code> </span></dt><dd><div class="para"> Lists all available packages in all enabled repositories. </div><div class="example" id="ex-Listing_available_packages_using_a_single_glob_expression_with_escaped_wildcards"><h6>Example 6.4. Listing available packages using a single glob expression with escaped wildcard characters</h6><div class="example-contents"><div class="para"> @@ -1295,8 +1295,8 @@ gstreamer-plugins-bad-free.i686 0.10.23-24.fc22 fedora gstreamer-plugins-bad-free.x86_64 0.10.23-24.fc22 fedora gstreamer-plugins-bad-free-devel.i686 0.10.23-24.fc22 fedora gstreamer-plugins-bad-free-devel.x86_64 0.10.23-24.fc22 fedora - <em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263475603888" class="indexterm"></a> - <a id="idm263475602000" class="indexterm"></a> + <em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225440722624" class="indexterm"></a> + <a id="idm225440720736" class="indexterm"></a> <code class="command">dnf group list</code> </span></dt><dd><div class="para"> Lists all package groups. </div><div class="example" id="ex-Listing_all_package_groups"><h6>Example 6.5. Listing all package groups</h6><div class="example-contents"><pre class="screen">~]# <code class="command">dnf group list</code> @@ -1308,16 +1308,16 @@ Installed Groups: Dial-up Networking Support Fonts GNOME Desktop Environment -<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263464061440" class="indexterm"></a> - <a id="idm263489730688" class="indexterm"></a> +<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225463634240" class="indexterm"></a> + <a id="idm225463632352" class="indexterm"></a> <code class="command">dnf repolist</code> </span></dt><dd><div class="para"> Lists the repository ID, name, and number of packages it provides for each <span class="emphasis"><em>enabled</em></span> repository. </div><div class="example" id="ex-Listing_enabled_repositories"><h6>Example 6.6. Listing enabled repositories</h6><div class="example-contents"><pre class="screen">~]# <code class="command">dnf repolist</code> Last metadata expiration check performed 0:48:29 ago on Mon May 25 23:38:13 2015. repo id repo name status *fedora Fedora 22 - x86_64 44,762 -*updates Fedora 22 - x86_64 - Updates 0</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263485719280" class="indexterm"></a> - <a id="idm263485717392" class="indexterm"></a> +*updates Fedora 22 - x86_64 - Updates 0</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225442228128" class="indexterm"></a> + <a id="idm225446624064" class="indexterm"></a> <code class="command">dnf repository-packages <em class="replaceable"><code>repo_id</code></em> list</code> </span></dt><dd><div class="para"> Lists the packages from the specified repository. </div><div class="example" id="ex-Listing_packages_from_a_single_repositories"><h6>Example 6.7. Listing packages from a single repository</h6><div class="example-contents"><pre class="screen">~]# <code class="command">dnf repository-packages fedora list [<code class="option">option</code>]</code> @@ -1328,7 +1328,7 @@ PackageKit-glib.x86_64 1.0.6-3.fc22 @System aajohan-comfortaa-fonts.noarch 2.004-4.fc22 @System <em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre><div class="para"> The default action is to list all packages available and installed from the repository specified. Add the <code class="option">available</code> or <code class="option">installed</code> option to list only those packages available or installed from the specified repository. - </div></div></div><br class="example-break" /></dd></dl></div></div><div class="section" id="sec-Displaying_Package_Information"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.3. Displaying Package Information</h3></div></div></div><a id="idm263476854016" class="indexterm"></a><a id="idm263476852128" class="indexterm"></a><div class="para"> + </div></div></div><br class="example-break" /></dd></dl></div></div><div class="section" id="sec-Displaying_Package_Information"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.3. Displaying Package Information</h3></div></div></div><a id="idm225451345472" class="indexterm"></a><a id="idm225418828512" class="indexterm"></a><div class="para"> To display information about one or more packages, use a command as follows: </div><pre class="synopsis"><code class="command">dnf</code> <code class="option">info</code> <em class="replaceable"><code>package_name</code></em>…</pre><div class="para"> For example, to display information about the <span class="package">abrt</span> package, type: @@ -1348,7 +1348,7 @@ URL : https://github.com/abrt/abrt/wiki/ABRT-Project License : GPLv2+ Description : abrt is a tool to help users to detect defects in applications and : to create a bug report with all information needed by maintainer to fix it. - : It uses plugin system to extend its functionality.</pre><a id="idm263477662976" class="indexterm"></a><a id="idm263477661056" class="indexterm"></a><div class="para"> + : It uses plugin system to extend its functionality.</pre><a id="idm225435683008" class="indexterm"></a><a id="idm225464067424" class="indexterm"></a><div class="para"> The <code class="command">dnf info <em class="replaceable"><code>package_name</code></em></code> command is similar to the <code class="command">rpm -q --info <em class="replaceable"><code>package_name</code></em></code> command, but provides as additional information the name of the DNF repository the RPM package was installed from (look for the <code class="computeroutput">From repo:</code> line in the output). The <code class="command">dnf info</code> command shows only the newest available package if there is a newer version available than the one installed. The <code class="command">dnf repoquery</code> command can show <span class="bold bold"><strong>all</strong></span> installed and available packages. </div><div class="para"> To display information about all available packages, both installed and available from a repository, use a command as follows: @@ -1375,7 +1375,7 @@ It uses plugin system to extend its functionality.</pre><div class="para"> <pre class="screen">~]$ <code class="command">dnf repoquery -h</code> usage: dnf [options] COMMAND <em class="lineannotation"><span class="lineannotation">output truncated</span></em></pre> - </div></div><div class="section" id="sec-Installing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.4. Installing Packages</h3></div></div></div><a id="idm263423138272" class="indexterm"></a><a id="idm263393220480" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="sec-Installing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.4. Installing Packages</h3></div></div></div><a id="idm225493808944" class="indexterm"></a><a id="idm225461128624" class="indexterm"></a><div class="para"> DNF allows you to install both a single package and multiple packages, as well as a package group of your choice. </div><h4 id="bh-Installing_Individual_packages"> Installing Individual Packages </h4><div class="para"> To install a single package and all of its non-installed dependencies, enter a command in the following form: @@ -1396,7 +1396,7 @@ Using metadata from Thu Apr 16 13:41:45 2015 (4:23:50 hours old) bind-32:9.10.2-1.fc22.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server Repo : @System</pre><div class="para"> <code class="command">dnf provides "*/<em class="replaceable"><code>file_name</code></em>"</code> will find all the packages that contain <em class="replaceable"><code>file_name</code></em>. - </div></div></div><h4 id="bh-Installing_a_Package_Group"> Installing a Package Group </h4><a id="idm263487450464" class="indexterm"></a><a id="idm263487449056" class="indexterm"></a><div class="para"> + </div></div></div><h4 id="bh-Installing_a_Package_Group"> Installing a Package Group </h4><a id="idm225430329488" class="indexterm"></a><a id="idm225430328080" class="indexterm"></a><div class="para"> A package group is similar to a package: it is not useful by itself, but installing one pulls a group of dependent packages that serve a common purpose. A package group has a name and a <em class="firstterm">groupid</em> (<acronym class="acronym">GID</acronym>). The <code class="command">dnf group list -v</code> command lists the names of all package groups, and, next to each of them, their groupid in parentheses. The groupid is always the term in the last pair of parentheses, such as <code class="literal">kde-desktop-environment</code> in the following example: </div><pre class="screen">~]# <code class="command">dnf -v group list kde\*</code> cachedir: /var/cache/dnf/x86_64/22 @@ -1421,9 +1421,9 @@ Available environment groups: For example, the following are alternative but equivalent ways of installing the <code class="literal">KDE Plasma Workspaces</code> group: </div><pre class="screen">~]# <code class="command">dnf group install "KDE Plasma Workspaces"</code> ~]# <code class="command">dnf group install kde-desktop-environment</code> -~]# <code class="command">dnf install @kde-desktop-environment</code></pre></div><div class="section" id="sec-Removing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.5. Removing Packages</h3></div></div></div><a id="idm263489925248" class="indexterm"></a><a id="idm263489923840" class="indexterm"></a><div class="para"> +~]# <code class="command">dnf install @kde-desktop-environment</code></pre></div><div class="section" id="sec-Removing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.2.5. Removing Packages</h3></div></div></div><a id="idm225470691856" class="indexterm"></a><a id="idm225470690448" class="indexterm"></a><div class="para"> Similarly to package installation, DNF allows you to uninstall (remove in <span class="application"><strong>RPM</strong></span> and DNF terminology) both individual packages and a package group. - </div><h4 id="bh-Removing_Individual_Packages"> Removing Individual Packages </h4><a id="idm263496643472" class="indexterm"></a><a id="idm263496641584" class="indexterm"></a><div class="para"> + </div><h4 id="bh-Removing_Individual_Packages"> Removing Individual Packages </h4><a id="idm225435869360" class="indexterm"></a><a id="idm225435159136" class="indexterm"></a><div class="para"> To uninstall a particular package, as well as any packages that depend on it, run the following command as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">dnf</code> <code class="option">remove</code> <em class="replaceable"><code>package_name</code></em>…</pre><div class="para"> As when you install multiple packages, you can remove several at once by adding more package names to the command. For example, to remove <span class="package">totem</span>, <span class="package">rhythmbox</span>, and <span class="package">sound-juicer</span>, type the following at a shell prompt: @@ -1524,7 +1524,7 @@ ID | Login user | Date a | Action | Altere Both commands also accept the <code class="literal">last</code> keyword to undo or repeat the latest transaction. </div><div class="para"> Note that both <code class="command">dnf history undo</code> and <code class="command">dnf history redo</code> commands merely revert or repeat the steps that were performed during a transaction, and will fail if the required packages are not available. For example, if the transaction installed a new package, the <code class="command">dnf history undo</code> command will uninstall it and also attempt to downgrade all updated packages to their previous version, but the command will fail if the required packages are not available. - </div></div></div><div class="section" id="sec-Configuring_DNF_and_DNF_Repositories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.3. Configuring DNF and DNF Repositories</h2></div></div></div><a id="idm263480400256" class="indexterm"></a><a id="idm263480398848" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="sec-Configuring_DNF_and_DNF_Repositories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.3. Configuring DNF and DNF Repositories</h2></div></div></div><a id="idm225430968752" class="indexterm"></a><a id="idm225435790656" class="indexterm"></a><div class="para"> The configuration file for DNF and related utilities is located at <code class="filename">/etc/dnf/dnf.conf</code>. This file contains one mandatory <code class="literal">[main]</code> section, which allows you to set DNF options that have global effect, and may also contain one or more <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> sections, which allow you to set repository-specific options. However, it is recommended to define individual repositories in new or existing <code class="filename">.repo</code> files in the <code class="filename">/etc/yum.repos.d/</code> directory. The values you define in individual <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> sections of the <code class="filename">/etc/dnf/dnf.conf</code> file override values set in the <code class="literal">[main]</code> section. </div><div class="para"> This section shows you how to: @@ -1538,7 +1538,7 @@ ID | Login user | Date a | Action | Altere add, enable, and disable DNF repositories on the command line; and, </div></li><li class="listitem"><div class="para"> set up your own custom DNF repository. - </div></li></ul></div><div class="section" id="sec-Setting_main_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.1. Setting [main] Options</h3></div></div></div><a id="idm263452724624" class="indexterm"></a><div class="para"> + </div></li></ul></div><div class="section" id="sec-Setting_main_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.1. Setting [main] Options</h3></div></div></div><a id="idm225434647264" class="indexterm"></a><div class="para"> The <code class="filename">/etc/dnf/dnf.conf</code> configuration file contains exactly one <code class="literal">[main]</code> section, and while some of the key-value pairs in this section affect how <code class="command">dnf</code> operates, others affect how DNF treats repositories. You can add many additional options under the <code class="literal">[main]</code> section heading in <code class="filename">/etc/dnf/dnf.conf</code>. </div><div class="para"> A sample <code class="filename">/etc/dnf/dnf.conf</code> configuration file can look like this: @@ -1577,7 +1577,7 @@ clean_requirements_on_remove=true</pre><div class="para"> <code class="literal">1</code> — Retain the cache after a successful installation. </div></dd></dl></div><div class="para"> For a complete list of available <code class="literal">[main]</code> options, refer to the <code class="literal">[MAIN] OPTIONS</code> section of the <span class="bold bold"><strong>dnf.conf</strong></span>(5) manual page. - </div></div><div class="section" id="sec-Setting_repository_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.2. Setting [repository] Options</h3></div></div></div><a id="idm263393012400" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="sec-Setting_repository_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.2. Setting [repository] Options</h3></div></div></div><a id="idm225463854080" class="indexterm"></a><div class="para"> The <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> sections, where <em class="replaceable"><code>repository</code></em> is a unique repository ID such as <code class="literal">my_personal_repo</code> (spaces are not permitted), allow you to define individual DNF repositories. </div><div class="para"> The following is a bare-minimum example of the form a <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> section takes: @@ -1615,7 +1615,7 @@ baseurl=<em class="replaceable"><code>repository_url</code></em></pre><div class Turning repositories on and off can also be performed by passing either the <code class="option">--set-enabled <em class="replaceable"><code>repo_name</code></em></code> or <code class="option">--set-disabled <em class="replaceable"><code>repo_name</code></em></code> option to the <code class="command">dnf</code> command, or through the <span class="guilabel"><strong>Add/Remove Software</strong></span> window of the <span class="application"><strong>PackageKit</strong></span> utility. </div></dd></dl></div><div class="para"> Many more <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> options exist. For a complete list, refer to the <code class="literal">[repository] OPTIONS</code> section of the <span class="bold bold"><strong>dnf.conf</strong></span>(5) manual page. - </div></div><div class="section" id="sec-Using_DNF_Variables"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.3. Using DNF Variables</h3></div></div></div><a id="idm263449997184" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="sec-Using_DNF_Variables"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">6.3.3. Using DNF Variables</h3></div></div></div><a id="idm225428392944" class="indexterm"></a><div class="para"> Variables can be used only in the appropriate sections of the DNF configuration files, namely the <code class="filename">/etc/dnf/dnf.conf</code> file and all <code class="filename">.repo</code> files in the <code class="filename">/etc/yum.repos.d/</code> directory. Repository variables include: </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term"><code class="varname">$releasever</code></span></dt><dd><div class="para"> Refers to the release version of operating system which DNF derives from information available in RPMDB. @@ -1635,7 +1635,7 @@ bandwidth = 0 best = False bugtracker_url = https://bugzilla.redhat.com/enter_bug.cgi?product=Fedora&component=dnf cachedir = /var/cache/dnf/x86_64/22 -<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div><div class="section" id="sec-Managing_DNF_Repositories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.5. Adding, Enabling, and Disabling a DNF Repository</h2></div></div></div><a id="idm263494876320" class="indexterm"></a><div class="para"> +<em class="lineannotation"><span class="lineannotation">[output truncated]</span></em></pre></div><div class="section" id="sec-Managing_DNF_Repositories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.5. Adding, Enabling, and Disabling a DNF Repository</h2></div></div></div><a id="idm225427511168" class="indexterm"></a><div class="para"> <a class="xref" href="#sec-Setting_repository_Options">Section 6.3.2, “Setting [repository] Options”</a> describes various options you can use to define a DNF repository. This section explains how to add, enable, and disable a repository by using the <code class="command">dnf config-manager</code> command. </div><h3 id="bh-Managing_DNF_Repositories-Adding"> Adding a DNF Repository </h3><div class="para"> To define a new repository, you can either add a <code class="literal">[<em class="replaceable"><code>repository</code></em>]</code> section to the <code class="filename">/etc/dnf/dnf.conf</code> file, or to a <code class="filename">.repo</code> file in the <code class="filename">/etc/yum.repos.d/</code> directory. All files with the <code class="filename">.repo</code> file extension in this directory are read by DNF, and it is recommended to define your repositories here instead of in <code class="filename">/etc/dnf/dnf.conf</code>. @@ -1654,21 +1654,21 @@ adding repo from: http://www.example.com/example.repo</pre></div></div><br class To disable a DNF repository, run the following command as <code class="systemitem">root</code>: </div><pre class="synopsis"><code class="command">dnf config-manager</code> <code class="option">--set-disabled</code> <em class="replaceable"><code>repository</code></em>…</pre><div class="para"> …where <em class="replaceable"><code>repository</code></em> is the unique repository ID. To display the current configuration, add the <code class="option">--dump</code> option. - </div></div><div class="section" id="sec-Additional_Resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.6. Additional Resources</h2></div></div></div><a id="idm263479630544" class="indexterm"></a><h3 id="bh-DNF-Resources-Installed">Installed Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> + </div></div><div class="section" id="sec-Additional_Resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">6.6. Additional Resources</h2></div></div></div><a id="idm225453696016" class="indexterm"></a><h3 id="bh-DNF-Resources-Installed">Installed Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <code class="filename">dnf(8)</code> — The DNF command reference manual page. </div></li><li class="listitem"><div class="para"> <code class="filename">dnf.conf(8)</code> — DNF Configuration Reference manual page. </div></li></ul></div><h3 id="bh-DNF-Resources-Online">Online Documentation</h3><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term"> <a href="http://dnf.readthedocs.org/en/latest/index.html">http://dnf.readthedocs.org/en/latest/index.html</a> </span></dt><dd><div class="para"> The DNF wiki contains more documentation. - </div></dd></dl></div></div></div></div><div class="part" id="part-Infrastructure_Services"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part III. Infrastructure Services</h1></div></div></div><div class="partintro" id="idm263480584624"><div></div><div class="para"> + </div></dd></dl></div></div></div></div><div class="part" id="part-Infrastructure_Services"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part III. Infrastructure Services</h1></div></div></div><div class="partintro" id="idm225472562848"><div></div><div class="para"> This part provides information on how to configure services and daemons, configure authentication, and enable remote logins. - </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Services_and_Daemons">7. Services and Daemons</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span cl ass="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-OpenSSH">8. OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-configuration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certi ficates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span class="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="sect ion"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-TigerVNC">9. TigerVNC</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-vnc-server">9.1. VNC Server</a></span></dt><dd><dl><dt><span class="section"><a h ref="#s2-vnc-installation">9.1.1. Installing VNC Server</a></span></dt><dt><span class="section"><a href="#s3-configuring-vnc-server">9.1.2. Configuring VNC Server</a></span></dt><dt><span class="section"><a href="#s4-starting-vncserver">9.1.3. Starting VNC Server</a></span></dt><dt><span class="section"><a href="#terminating-vnc-session">9.1.4. Terminating a VNC Session</a></span></dt></dl></dd><dt><span class="section"><a href="#s5-vnc-viewer">9.2. VNC Viewer</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-vncviewer">9.2.1. Installing VNC Viewer</a></span></dt><dt><span class="section"><a href="#s6-connecting-vnc-viewer">9.2.2. Connecting to VNC Server</a></span></dt><dt><span class="section"><a href="#s1-using_ssh">9.2.3. Connecting to VNC Server Using SSH</a></span></dt></dl></dd><dt><span class="section"><a href="#s9-additional-sources">9.3. Additional Resources</a></span></dt></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch- Services_and_Daemons" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Services and Daemons</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></div><a id="idm263474630192" class="indexterm"></a><div class="para"> + </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Services_and_Daemons">7. Services and Daemons</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span cl ass="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-OpenSSH">8. OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-configuration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certi ficates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span class="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="sect ion"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></dd><dt><span class="chapter"><a href="#ch-TigerVNC">9. TigerVNC</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-vnc-server">9.1. VNC Server</a></span></dt><dd><dl><dt><span class="section"><a h ref="#s2-vnc-installation">9.1.1. Installing VNC Server</a></span></dt><dt><span class="section"><a href="#s3-configuring-vnc-server">9.1.2. Configuring VNC Server</a></span></dt><dt><span class="section"><a href="#s4-starting-vncserver">9.1.3. Starting VNC Server</a></span></dt><dt><span class="section"><a href="#terminating-vnc-session">9.1.4. Terminating a VNC Session</a></span></dt></dl></dd><dt><span class="section"><a href="#s5-vnc-viewer">9.2. VNC Viewer</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-vncviewer">9.2.1. Installing VNC Viewer</a></span></dt><dt><span class="section"><a href="#s6-connecting-vnc-viewer">9.2.2. Connecting to VNC Server</a></span></dt><dt><span class="section"><a href="#s1-using_ssh">9.2.3. Connecting to VNC Server Using SSH</a></span></dt></dl></dd><dt><span class="section"><a href="#s9-additional-sources">9.3. Additional Resources</a></span></dt></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch- Services_and_Daemons" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Services and Daemons</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-services-configuring">7.1. Configuring Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-configuration-enabling">7.1.1. Enabling the Service</a></span></dt><dt><span class="section"><a href="#s3-services-configuration-disabling">7.1.2. Disabling the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-running">7.2. Running Services</a></span></dt><dd><dl><dt><span class="section"><a href="#s3-services-running-checking">7.2.1. Checking the Service Status</a></span></dt><dt><span class="section"><a href="#s3-services-running-running">7.2.2. Running the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-stopping">7.2.3. Stopping the Service</a></span></dt><dt><span class="section"><a href="#s3-services-running-restarting">7.2.4. Restarting the Service</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-services-additional-resources">7.3. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-services-additional-resources-installed">7.3.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-services-additional-resources-books">7.3.2. Related Books</a></span></dt></dl></dd></dl></div><a id="idm225498674640" class="indexterm"></a><div class="para"> Maintaining security on your system is extremely important, and one approach for this task is to manage access to system services carefully. Your system may need to provide open access to particular services (for example, <code class="systemitem">httpd</code> if you are running a web server). However, if you do not need to provide a service, you should turn it off to minimize your exposure to possible bug exploits. </div><div class="para"> This chapter covers the configuration of the services to be run when a system is started, and provides information on how to start, stop, and restart the services on the command line using the <span class="application"><strong>systemctl</strong></span> utility. </div><div class="important"><div class="admonition_header"><h2>Keep the system secure</h2></div><div class="admonition"><div class="para"> When you allow access for new services, always remember that both the firewall and <span class="application"><strong>SELinux</strong></span> need to be configured as well. One of the most common mistakes committed when configuring a new service is neglecting to implement the necessary firewall configuration and SELinux policies to allow access for it. For more information, refer to the Fedora 24 <em class="citetitle">Security Guide</em>. - </div></div></div><div class="section" id="s1-services-configuring"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">7.1. Configuring Services</h2></div></div></div><a id="idm263480843600" class="indexterm"></a><a id="idm263395649104" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="s1-services-configuring"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">7.1. Configuring Services</h2></div></div></div><a id="idm225441897904" class="indexterm"></a><a id="idm225453179104" class="indexterm"></a><div class="para"> To allow you to configure which services are started at boot time, Fedora is shipped with the <span class="application"><strong>systemctl</strong></span> command line tool. </div><div class="note"><div class="admonition_header"><h2>Do not use the ntsysv and chkconfig utilities</h2></div><div class="admonition"><div class="para"> Although it is still possible to use the <span class="application"><strong>ntsysv</strong></span> and <span class="application"><strong>chkconfig</strong></span> utilities to manage services that have init scripts installed in the <code class="filename">/etc/rc.d/init.d/</code> directory, it is advised that you use the <span class="application"><strong>systemctl</strong></span> utility. @@ -1686,7 +1686,7 @@ adding repo from: http://www.example.com/example.repo</pre></div></div><br class The next time you boot the system, the service will <span class="emphasis"><em>not</em></span> be started. For information on how to stop the service immediately, refer to <a class="xref" href="#s3-services-running-stopping">Section 7.2.3, “Stopping the Service”</a>. </div><div class="example" id="exam-services-configuration-disabling"><h6>Example 7.2. Disabling the telnet service</h6><div class="example-contents"><div class="para"> In order to secure the system, users are advised to disable insecure connection protocols such as Telnet. You can make sure that the <code class="systemitem">telnet</code> service is disabled by running the following command as <code class="systemitem">root</code>: - </div><pre class="screen">~]# <code class="command">systemctl disable telnet.service</code></pre></div></div><br class="example-break" /></div></div><div class="section" id="s1-services-running"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">7.2. Running Services</h2></div></div></div><a id="idm263393619360" class="indexterm"></a><a id="idm263393617248" class="indexterm"></a><div class="para"> + </div><pre class="screen">~]# <code class="command">systemctl disable telnet.service</code></pre></div></div><br class="example-break" /></div></div><div class="section" id="s1-services-running"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">7.2. Running Services</h2></div></div></div><a id="idm225495591440" class="indexterm"></a><a id="idm225434222768" class="indexterm"></a><div class="para"> The <span class="application"><strong>systemctl</strong></span> utility also allows you to determine the status of a particular service, as well as to start, stop, or restart a service. </div><div class="note"><div class="admonition_header"><h2>Do not use the service utility</h2></div><div class="admonition"><div class="para"> Although it is still possible to use the <span class="application"><strong>service</strong></span> utility to manage services that have init scripts installed in the <code class="filename">/etc/rc.d/init.d/</code> directory, it is advised that you use the <span class="application"><strong>systemctl</strong></span> utility. @@ -1761,13 +1761,13 @@ atd.service loaded active running Job spooling tools <code class="literal">systemctl</code>(1) — The manual page for the <span class="application"><strong>systemctl</strong></span> utility. </div></li></ul></div></div><div class="section" id="s2-services-additional-resources-books"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">7.3.2. Related Books</h3></div></div></div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term"> <em class="citetitle">Fedora 24 Security Guide</em> </span></dt><dd><div class="para"> A guide to securing Fedora. It contains valuable information on how to set up the firewall, as well as the configuration of <span class="application"><strong>SELinux</strong></span>. - </div></dd></dl></div></div></div></div><div xml:lang="en-US" class="chapter" id="ch-OpenSSH" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. OpenSSH</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-configuration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuratio n-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certificates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span class="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></s pan></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></div><a id="idm263448871232" class="indexterm"></a><div class="para"> + </div></dd></dl></div></div></div></div><div xml:lang="en-US" class="chapter" id="ch-OpenSSH" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. OpenSSH</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-ssh-protocol">8.1. The SSH Protocol</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-why">8.1.1. Why Use SSH?</a></span></dt><dt><span class="section"><a href="#s2-ssh-features">8.1.2. Main Features</a></span></dt><dt><span class="section"><a href="#s2-ssh-versions">8.1.3. Protocol Versions</a></span></dt><dt><span class="section"><a href="#s2-ssh-conn">8.1.4. Event Sequence of an SSH Connection</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-configuration">8.2. Configuring OpenSSH</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-configuration-configs">8.2.1. Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuratio n-sshd">8.2.2. Starting an OpenSSH Server</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-requiring">8.2.3. Requiring SSH for Remote Connections</a></span></dt><dt><span class="section"><a href="#s2-ssh-configuration-keypairs">8.2.4. Using Key-based Authentication</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_OpenSSH_Certificate_Authentication">8.3. Using OpenSSH Certificate Authentication</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_SSH_Certificates">8.3.1. Introduction to SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Support_for_OpenSSH_Certificates">8.3.2. Support for SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-Creating_SSH_CA_Certificate_Signing-Keys">8.3.3. Creating SSH CA Certificate Signing Keys</a></span></dt><dt><span class="section"><a href="#sec-Distributing_and_Trusting_SSH_CA_Public_Keys">8.3.4. Distributing and Trusting SSH CA Public Keys</a></span></dt><dt><span class="section"><a href="#sec-Signing_SSH_Certificates">8.3.5. Creating SSH Certificates</a></span></dt><dt><span class="section"><a href="#sec-SSH_Certificate_PKCS_11_Token">8.3.6. Signing an SSH Certificate Using a PKCS#11 Token</a></span></dt><dt><span class="section"><a href="#sec-Viewing_an_SSH_CA_Certificate">8.3.7. Viewing an SSH CA Certificate</a></span></dt><dt><span class="section"><a href="#sec-Revoking_an_SSH_CA_Certificate">8.3.8. Revoking an SSH CA Certificate</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-clients">8.4. OpenSSH Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-clients-ssh">8.4.1. Using the ssh Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-scp">8.4.2. Using the <code class="command">scp</code> Utility</a></span></dt><dt><span class="section"><a href="#s2-ssh-clients-sftp">8.4.3. Using the <code class="command">sftp</code> Utility</a></s pan></dt></dl></dd><dt><span class="section"><a href="#s1-ssh-beyondshell">8.5. More Than a Secure Shell</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ssh-beyondshell-x11">8.5.1. X11 Forwarding</a></span></dt><dt><span class="section"><a href="#s2-ssh-beyondshell-tcpip">8.5.2. Port Forwarding</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-openssh-additional-resources">8.6. Additional Resources</a></span></dt></dl></div><a id="idm225434866848" class="indexterm"></a><div class="para"> <code class="systemitem">SSH</code> (Secure Shell) is a protocol which facilitates secure communications between two systems using a client-server architecture and allows users to log into server host systems remotely. Unlike other remote communication protocols, such as <code class="systemitem">FTP</code>, <code class="systemitem">Telnet</code>, or <code class="command">rlogin</code>, SSH encrypts the login session, rendering the connection difficult for intruders to collect unencrypted passwords. </div><div class="para"> The <span class="application"><strong>ssh</strong></span> program is designed to replace older, less secure terminal applications used to log into remote hosts, such as <code class="command">telnet</code> or <code class="command">rsh</code>. A related program called <code class="command">scp</code> replaces older programs designed to copy files between hosts, such as <code class="command">rcp</code>. Because these older applications do not encrypt passwords transmitted between the client and the server, avoid them whenever possible. Using secure methods to log into remote systems decreases the risks for both the client system and the remote host. </div><div class="para"> Fedora includes the general OpenSSH package, <span class="package">openssh</span>, as well as the OpenSSH server, <span class="package">openssh-server</span>, and client, <span class="package">openssh-clients</span>, packages. Note, the OpenSSH packages require the OpenSSL package <span class="package">openssl-libs</span>, which installs several important cryptographic libraries, enabling OpenSSH to provide encrypted communications. - </div><div class="section" id="s1-ssh-protocol"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.1. The SSH Protocol</h2></div></div></div><div class="section" id="s2-ssh-why"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.1. Why Use SSH?</h3></div></div></div><a id="idm263470141888" class="indexterm"></a><div class="para"> + </div><div class="section" id="s1-ssh-protocol"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.1. The SSH Protocol</h2></div></div></div><div class="section" id="s2-ssh-why"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.1. Why Use SSH?</h3></div></div></div><a id="idm225442544432" class="indexterm"></a><div class="para"> Potential intruders have a variety of tools at their disposal enabling them to disrupt, intercept, and re-route network traffic in an effort to gain access to a system. In general terms, these threats can be categorized as follows: </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term">Interception of communication between two systems</span></dt><dd><div class="para"> The attacker can be somewhere on the network between the communicating parties, copying any information passed between them. He may intercept and keep the information, or alter the information and send it on to the intended recipient. @@ -1779,7 +1779,7 @@ atd.service loaded active running Job spooling tools This attack can be performed using a technique known as <em class="firstterm">DNS poisoning</em>, or via so-called <em class="firstterm">IP spoofing</em>. In the first case, the intruder uses a cracked DNS server to point client systems to a maliciously duplicated host. In the second case, the intruder sends falsified network packets that appear to be from a trusted host. </div></dd></dl></div><div class="para"> Both techniques intercept potentially sensitive information and, if the interception is made for hostile reasons, the results can be disastrous. If SSH is used for remote shell login and file copying, these security threats can be greatly diminished. This is because the SSH client and server use digital signatures to verify their identity. Additionally, all communication between the client and server systems is encrypted. Attempts to spoof the identity of either side of a communication does not work, since each packet is encrypted using a key known only by the local and remote systems. - </div></div><div class="section" id="s2-ssh-features"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.2. Main Features</h3></div></div></div><a id="idm263480678064" class="indexterm"></a><a id="idm263480676624" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-features"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.2. Main Features</h3></div></div></div><a id="idm225491821264" class="indexterm"></a><a id="idm225468765488" class="indexterm"></a><div class="para"> The SSH protocol provides the following safeguards: </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term">No one can pose as the intended server</span></dt><dd><div class="para"> After an initial connection, the client can verify that it is connecting to the same server it had connected to previously. @@ -1797,11 +1797,11 @@ atd.service loaded active running Job spooling tools The OpenSSH server and client can be configured to create a tunnel similar to a virtual private network for traffic between server and client machines. </div></dd><dt class="varlistentry"><span class="term">It supports the Kerberos authentication</span></dt><dd><div class="para"> OpenSSH servers and clients can be configured to authenticate using the <acronym class="acronym">GSSAPI</acronym> (Generic Security Services Application Program Interface) implementation of the Kerberos network authentication protocol. - </div></dd></dl></div></div><div class="section" id="s2-ssh-versions"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.3. Protocol Versions</h3></div></div></div><a id="idm263476826704" class="indexterm"></a><a id="idm263476825264" class="indexterm"></a><div class="para"> + </div></dd></dl></div></div><div class="section" id="s2-ssh-versions"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.3. Protocol Versions</h3></div></div></div><a id="idm225454856448" class="indexterm"></a><a id="idm225454855008" class="indexterm"></a><div class="para"> Two varieties of SSH currently exist: version 1 and version 2. The OpenSSH suite under Fedora uses SSH version 2, which has an enhanced key exchange algorithm not vulnerable to the known exploit in version 1. However, for compatibility reasons, the OpenSSH suite does support version 1 connections as well, although version 1 is disabled by default and needs to be enabled in the configuration files. </div><div class="important"><div class="admonition_header"><h2>Avoid using SSH version 1</h2></div><div class="admonition"><div class="para"> To ensure maximum security for your connection, it is recommended that only SSH version 2-compatible servers and clients are used whenever possible. - </div></div></div></div><div class="section" id="s2-ssh-conn"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.4. Event Sequence of an SSH Connection</h3></div></div></div><a id="idm263482496752" class="indexterm"></a><div class="para"> + </div></div></div></div><div class="section" id="s2-ssh-conn"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.1.4. Event Sequence of an SSH Connection</h3></div></div></div><a id="idm225471028240" class="indexterm"></a><div class="para"> The following series of events help protect the integrity of SSH communication between two hosts. </div><div class="orderedlist"><ol><li class="listitem"><div class="para"> A cryptographic handshake is made so that the client can verify that it is communicating with the correct server. @@ -1811,7 +1811,7 @@ atd.service loaded active running Job spooling tools The client authenticates itself to the server. </div></li><li class="listitem"><div class="para"> The client interacts with the remote host over the encrypted connection. - </div></li></ol></div><div class="section" id="s2-ssh-protocol-conn-transport"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.1. Transport Layer</h4></div></div></div><a id="idm263437107248" class="indexterm"></a><div class="para"> + </div></li></ol></div><div class="section" id="s2-ssh-protocol-conn-transport"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.1. Transport Layer</h4></div></div></div><a id="idm225437918832" class="indexterm"></a><div class="para"> The primary role of the transport layer is to facilitate safe and secure communication between the two hosts at the time of authentication and during subsequent communication. The transport layer accomplishes this by handling the encryption and decryption of data, and by providing integrity protection of data packets as they are sent and received. The transport layer also provides compression, speeding the transfer of information. </div><div class="para"> Once an SSH client contacts a server, key information is exchanged so that the two systems can correctly construct the transport layer. The following steps occur during this exchange: @@ -1833,12 +1833,12 @@ atd.service loaded active running Job spooling tools SSH is designed to work with almost any kind of public key algorithm or encoding format. After an initial key exchange creates a hash value used for exchanges and a shared secret value, the two systems immediately begin calculating new keys and algorithms to protect authentication and future data sent over the connection. </div><div class="para"> After a certain amount of data has been transmitted using a given key and algorithm (the exact amount depends on the SSH implementation), another key exchange occurs, generating another set of hash values and a new shared secret value. Even if an attacker is able to determine the hash and shared secret value, this information is only useful for a limited period of time. - </div></div><div class="section" id="s2-ssh-protocol-authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.2. Authentication</h4></div></div></div><a id="idm263478023104" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-protocol-authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.2. Authentication</h4></div></div></div><a id="idm225430843872" class="indexterm"></a><div class="para"> Once the transport layer has constructed a secure tunnel to pass information between the two systems, the server tells the client the different authentication methods supported, such as using a private key-encoded signature or typing a password. The client then tries to authenticate itself to the server using one of these supported methods. </div><div class="para"> SSH servers and clients can be configured to allow different types of authentication, which gives each side the optimal amount of control. The server can decide which encryption methods it supports based on its security model, and the client can choose the order of authentication methods to attempt from the available options. - </div></div><div class="section" id="s2-ssh-protocol-connection"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.3. Channels</h4></div></div></div><a id="idm263478018928" class="indexterm"></a><div class="para"> - After a successful authentication over the SSH transport layer, multiple channels are opened via a technique called <em class="firstterm">multiplexing</em><a href="#ftn.idm263472237792" class="footnote"><sup class="footnote" id="idm263472237792">[1]</sup></a>. Each of these channels handles communication for different terminal sessions and for forwarded X11 sessions. + </div></div><div class="section" id="s2-ssh-protocol-connection"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.1.4.3. Channels</h4></div></div></div><a id="idm225453579504" class="indexterm"></a><div class="para"> + After a successful authentication over the SSH transport layer, multiple channels are opened via a technique called <em class="firstterm">multiplexing</em><a href="#ftn.idm225453576832" class="footnote"><sup class="footnote" id="idm225453576832">[1]</sup></a>. Each of these channels handles communication for different terminal sessions and for forwarded X11 sessions. </div><div class="para"> Both clients and servers can create a new channel. Each channel is then assigned a different number on each end of the connection. When the client attempts to open a new channel, the clients sends the channel number along with the request. This information is stored by the server and is used to direct communication to that channel. This is done so that different types of sessions do not affect one another and so that when a given session ends, its channel can be closed without disrupting the primary SSH connection. </div><div class="para"> @@ -1847,9 +1847,9 @@ atd.service loaded active running Job spooling tools The client and server negotiate the characteristics of each channel automatically, depending on the type of service the client requests and the way the user is connected to the network. This allows great flexibility in handling different types of remote connections without having to change the basic infrastructure of the protocol. </div></div></div></div><div class="section" id="s1-ssh-configuration"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.2. Configuring OpenSSH</h2></div></div></div><div class="para"> In order to perform tasks described in this section, you must have superuser privileges. To obtain them, log in as <code class="systemitem">root</code> by typing: - </div><pre class="screen"><code class="command">su -</code></pre><div class="section" id="s2-ssh-configuration-configs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.1. Configuration Files</h3></div></div></div><a id="idm263489798464" class="indexterm"></a><div class="para"> + </div><pre class="screen"><code class="command">su -</code></pre><div class="section" id="s2-ssh-configuration-configs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.1. Configuration Files</h3></div></div></div><a id="idm225459860448" class="indexterm"></a><div class="para"> There are two different sets of configuration files: those for client programs (that is, <code class="command">ssh</code>, <code class="command">scp</code>, and <code class="command">sftp</code>), and those for the server (the <code class="command">sshd</code> daemon). - </div><a id="idm263489794688" class="indexterm"></a><a id="idm263498097872" class="indexterm"></a><div class="para"> + </div><a id="idm225458982368" class="indexterm"></a><a id="idm225464718256" class="indexterm"></a><div class="para"> System-wide SSH configuration information is stored in the <code class="filename">/etc/ssh/</code> directory as described in <a class="xref" href="#table-ssh-configuration-configs-system">Table 8.1, “System-wide configuration files”</a>. User-specific SSH configuration information is stored in <code class="filename">~/.ssh/</code> within the user's home directory as described in <a class="xref" href="#table-ssh-configuration-configs-user">Table 8.2, “User-specific configuration files”</a>. </div><div class="table" id="table-ssh-configuration-configs-system"><h6>Table 8.1. System-wide configuration files</h6><div class="table-contents"><table summary="System-wide configuration files" border="1"><colgroup><col width="38%" class="filename" /><col width="63%" class="description" /></colgroup><thead><tr><th class=""> File @@ -1937,11 +1937,11 @@ atd.service loaded active running Job spooling tools Contains host keys of SSH servers accessed by the user. This file is very important for ensuring that the SSH client is connecting to the correct SSH server. </td></tr></tbody></table></div></div><br class="table-break" /><div class="para"> For information concerning various directives that can be used in the SSH configuration files, see the <code class="filename">ssh_config</code>(5) and <code class="filename">sshd_config</code>(5) manual pages. - </div></div><div class="section" id="s2-ssh-configuration-sshd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.2. Starting an OpenSSH Server</h3></div></div></div><a id="idm263466485968" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>Make sure you have relevant packages installed</h2></div><div class="admonition"><div class="para"> + </div></div><div class="section" id="s2-ssh-configuration-sshd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.2. Starting an OpenSSH Server</h3></div></div></div><a id="idm225492108864" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>Make sure you have relevant packages installed</h2></div><div class="admonition"><div class="para"> To run an OpenSSH server, you must have the <span class="package">openssh-server</span> package installed. See <a class="xref" href="#sec-Installing">Section 6.2.4, “Installing Packages”</a> for more information on how to install new packages in Fedora 24. - </div></div></div><a id="idm263479254992" class="indexterm"></a><div class="para"> + </div></div></div><a id="idm225447757088" class="indexterm"></a><div class="para"> To start the <code class="command">sshd</code> daemon in the current session, type the following at a shell prompt as <code class="systemitem">root</code>: - </div><pre class="screen">~]# <code class="command">systemctl start sshd.service</code></pre><a id="idm263479250704" class="indexterm"></a><div class="para"> + </div><pre class="screen">~]# <code class="command">systemctl start sshd.service</code></pre><a id="idm225458566480" class="indexterm"></a><div class="para"> To stop the running <code class="command">sshd</code> daemon in the current session, use the following command as <code class="systemitem">root</code>: </div><pre class="screen">~]# <code class="command">systemctl stop sshd.service</code></pre><div class="para"> If you want the daemon to start automatically at the boot time, type as <code class="systemitem">root</code>: @@ -1957,7 +1957,7 @@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed.</pre><div class="para"> To prevent this, you can backup the relevant files from the <code class="filename">/etc/ssh/</code> directory (see <a class="xref" href="#table-ssh-configuration-configs-system">Table 8.1, “System-wide configuration files”</a> for a complete list), and restore them whenever you reinstall the system. - </div></div><div class="section" id="s2-ssh-configuration-requiring"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.3. Requiring SSH for Remote Connections</h3></div></div></div><a id="idm263488670192" class="indexterm"></a><a id="idm263488668752" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-configuration-requiring"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.3. Requiring SSH for Remote Connections</h3></div></div></div><a id="idm225452265632" class="indexterm"></a><a id="idm225452264192" class="indexterm"></a><div class="para"> For SSH to be truly effective, using insecure connection protocols should be prohibited. Otherwise, a user's password may be protected using SSH for one session, only to be captured later while logging in using Telnet. Some services to disable include <code class="command">telnet</code>, <code class="command">rsh</code>, <code class="command">rlogin</code>, and <code class="command">vsftpd</code>. </div><div class="para"> These services are not installed by default in Fedora. If required, to make sure these services are not running, type the following commands at a shell prompt: @@ -1971,7 +1971,7 @@ It is also possible that the RSA host key has just been changed.</pre><div class <code class="command">systemctl disable rlogin.service</code> <code class="command">systemctl disable vsftpd.service</code></pre><div class="para"> See <a class="xref" href="#ch-Services_and_Daemons">Chapter 7, <em>Services and Daemons</em></a> for more information on how to configure services in Fedora. - </div></div><div class="section" id="s2-ssh-configuration-keypairs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.4. Using Key-based Authentication</h3></div></div></div><a id="idm263499702080" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-configuration-keypairs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.2.4. Using Key-based Authentication</h3></div></div></div><a id="idm225461218272" class="indexterm"></a><div class="para"> To improve the system security even further, generate SSH key pairs and then enforce key-based authentication by disabling password authentication. To do so, open the <code class="filename">/etc/ssh/sshd_config</code> configuration file in a text editor such as <span class="application"><strong>vi</strong></span> or <span class="application"><strong>nano</strong></span>, and change the <code class="option">PasswordAuthentication</code> option as follows: </div><pre class="screen">PasswordAuthentication no</pre><div class="para"> If you are working on a system other than a new default installation, check that <code class="command">PubkeyAuthentication no</code> has <span class="bold bold"><strong>not</strong></span> been set. If connected remotely, not using console or out-of-band access, testing the key-based log in process before disabling password authentication is advised. @@ -1983,9 +1983,9 @@ It is also possible that the RSA host key has just been changed.</pre><div class If you complete the steps as <code class="systemitem">root</code>, only <code class="systemitem">root</code> will be able to use the keys. </div></div></div><div class="note"><div class="admonition_header"><h2>Backup your ~/.ssh/ directory</h2></div><div class="admonition"><div class="para"> If you reinstall your system and want to keep previously generated key pairs, backup the <code class="filename">~/.ssh/</code> directory. After reinstalling, copy it back to your home directory. This process can be done for all users on your system, including <code class="systemitem">root</code>. - </div></div></div><div class="section" id="s3-ssh-configuration-keypairs-generating"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.2.4.1. Generating Key Pairs</h4></div></div></div><a id="idm263482374240" class="indexterm"></a><a id="idm263482372800" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="s3-ssh-configuration-keypairs-generating"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.2.4.1. Generating Key Pairs</h4></div></div></div><a id="idm225469219232" class="indexterm"></a><a id="idm225363031936" class="indexterm"></a><div class="para"> To generate an RSA key pair for version 2 of the SSH protocol, follow these steps: - </div><a id="idm263393689664" class="indexterm"></a><div class="procedure"><ol class="1"><li class="step"><div class="para"> + </div><a id="idm225363029568" class="indexterm"></a><div class="procedure"><ol class="1"><li class="step"><div class="para"> Generate an RSA key pair by typing the following at a shell prompt: </div><pre class="screen">~]$ <code class="command">ssh-keygen -t rsa</code> Generating public/private rsa key pair. @@ -2015,9 +2015,9 @@ The key's randomart image is: </div><pre class="screen">~]$ <code class="command">ls -ld ~/.ssh</code> drwx------. 2 USER USER 54 Nov 25 16:56 /home/USER/.ssh/</pre></li><li class="step"><div class="para"> To copy the public key to a remote machine, issue a command in the following format: <pre class="synopsis"> <code class="command">ssh-copy-id <em class="replaceable"><code>user@hostname</code></em></code></pre> This will copy the most recently modified <code class="filename">~/.ssh/id*.pub</code> public key if it is not yet installed. Alternatively, specify the public key's file name as follows: <pre class="synopsis"><code class="command">ssh-copy-id -i <code class="filename">~/.ssh/id_rsa.pub</code> <em class="replaceable"><code>user@hostname</code></em></code></pre> This will copy the content of <code class="filename">~/.ssh/id_rsa.pub</code> into the <code class="filename">~/.ssh/authorized_keys</code> file on the machine to which you want to connect. If the file already exists, the keys are appended to its end. - </div></li></ol></div><a id="idm263470611376" class="indexterm"></a><a id="idm263472112576" class="indexterm"></a><div class="para"> + </div></li></ol></div><a id="idm225451779968" class="indexterm"></a><a id="idm225451778528" class="indexterm"></a><div class="para"> To generate an ECDSA key pair for version 2 of the SSH protocol, follow these steps: - </div><a id="idm263472110096" class="indexterm"></a><div class="procedure"><ol class="1"><li class="step"><div class="para"> + </div><a id="idm225451515520" class="indexterm"></a><div class="procedure"><ol class="1"><li class="step"><div class="para"> Generate an ECDSA key pair by typing the following at a shell prompt: </div><pre class="screen">~]$ <code class="command">ssh-keygen -t ecdsa</code> Generating public/private ecdsa key pair. @@ -2052,7 +2052,7 @@ drwx------. 2 USER USER 54 Nov 25 16:56 /home/USER/.ssh/</pre></li><li class="st See <a class="xref" href="#s3-ssh-configuration-keypairs-agent">Section 8.2.4.2, “Configuring ssh-agent”</a> for information on how to set up your system to remember the passphrase. </div><div class="important"><div class="admonition_header"><h2>Never share your private key</h2></div><div class="admonition"><div class="para"> The private key is for your personal use only, and it is important that you never give it to anyone. - </div></div></div></div><div class="section" id="s3-ssh-configuration-keypairs-agent"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.2.4.2. Configuring ssh-agent</h4></div></div></div><a id="idm263488130288" class="indexterm"></a><a id="idm263488128688" class="indexterm"></a><div class="para"> + </div></div></div></div><div class="section" id="s3-ssh-configuration-keypairs-agent"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">8.2.4.2. Configuring ssh-agent</h4></div></div></div><a id="idm225366646704" class="indexterm"></a><a id="idm225461385760" class="indexterm"></a><div class="para"> To store your passphrase so that you do not have to enter it each time you initiate a connection with a remote machine, you can use the <code class="command">ssh-agent</code> authentication agent. To save your passphrase for a certain shell prompt, use the following command: </div><pre class="screen">~]$ <code class="command">ssh-add</code> Enter passphrase for /home/USER/.ssh/id_rsa:</pre><div class="para"> @@ -2383,9 +2383,9 @@ id_rsa-cert.pub 100% 1498 1.5KB/s 00:00</pre> To test if a key has been revoked, query the revocation list for the presence of the key. Use a command as follows: <pre class="synopsis">ssh-keygen -Qf /etc/ssh/revoked_keys ~/.ssh/id_rsa.pub</pre> </div><div class="para"> A user can revoke a CA certificate by changing the <code class="command">cert-authority</code> directive to <code class="command">revoke</code> in the <code class="filename">known_hosts</code> file. - </div></div></div><div class="section" id="s1-ssh-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.4. OpenSSH Clients</h2></div></div></div><a id="idm263452978672" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>Make sure you have relevant packages installed</h2></div><div class="admonition"><div class="para"> + </div></div></div><div class="section" id="s1-ssh-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.4. OpenSSH Clients</h2></div></div></div><a id="idm225418573984" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>Make sure you have relevant packages installed</h2></div><div class="admonition"><div class="para"> To connect to an OpenSSH server from a client machine, you must have the <span class="package">openssh-clients</span> package installed. See <a class="xref" href="#sec-Installing">Section 6.2.4, “Installing Packages”</a> for more information on how to install new packages in Fedora 24. - </div></div></div><div class="section" id="s2-ssh-clients-ssh"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.1. Using the ssh Utility</h3></div></div></div><a id="idm263429873552" class="indexterm"></a><a id="idm263429871952" class="indexterm"></a><div class="para"> + </div></div></div><div class="section" id="s2-ssh-clients-ssh"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.1. Using the ssh Utility</h3></div></div></div><a id="idm225456145872" class="indexterm"></a><a id="idm225474127904" class="indexterm"></a><div class="para"> The <code class="command">ssh</code> utility allows you to log in to a remote machine and execute commands there. It is a secure replacement for the <code class="command">rlogin</code>, <code class="command">rsh</code>, and <code class="command">telnet</code> programs. </div><div class="para"> Similarly to the <code class="command">telnet</code> command, log in to a remote machine by using the following command: @@ -2425,7 +2425,7 @@ Original contents retained as /home/USER/.ssh/known_hosts.old</pre> USER(a)penguin.example.com's password: Fedora release 20 (Heisenbug)</pre><div class="para"> After you enter the correct password, the user name will be displayed, and you will return to your local shell prompt. - </div></div><div class="section" id="s2-ssh-clients-scp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.2. Using the <code class="command">scp</code> Utility</h3></div></div></div><a id="idm263480821280" class="indexterm"></a><a id="idm263480819680" class="indexterm"></a><a id="idm263480817600" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-clients-scp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.2. Using the <code class="command">scp</code> Utility</h3></div></div></div><a id="idm225454901648" class="indexterm"></a><a id="idm225470127472" class="indexterm"></a><a id="idm225366827856" class="indexterm"></a><div class="para"> <code class="command">scp</code> can be used to transfer files between machines over a secure, encrypted connection. In its design, it is very similar to <code class="command">rcp</code>. </div><div class="para"> To transfer a local file to a remote system, use a command in the following form: @@ -2445,7 +2445,7 @@ taglist.vim 100% 144KB 144.5KB/s 00:00</pre For instance, to download the <code class="filename">.vimrc</code> configuration file from the remote machine, type: </div><pre class="screen">~]$ <code class="command">scp USER@penguin.example.com:.vimrc .vimrc</code> USER(a)penguin.example.com's password: -.vimrc 100% 2233 2.2KB/s 00:00</pre></div><div class="section" id="s2-ssh-clients-sftp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.3. Using the <code class="command">sftp</code> Utility</h3></div></div></div><a id="idm263449143744" class="indexterm"></a><a id="idm263449142144" class="indexterm"></a><div class="para"> +.vimrc 100% 2233 2.2KB/s 00:00</pre></div><div class="section" id="s2-ssh-clients-sftp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.4.3. Using the <code class="command">sftp</code> Utility</h3></div></div></div><a id="idm225420213568" class="indexterm"></a><a id="idm225420211968" class="indexterm"></a><div class="para"> The <code class="command">sftp</code> utility can be used to open a secure, interactive FTP session. In its design, it is similar to <code class="command">ftp</code> except that it uses a secure, encrypted connection. </div><div class="para"> To connect to a remote system, use a command in the following form: @@ -2488,7 +2488,7 @@ sftp></pre><div class="para"> For a complete list of available commands, see the <code class="filename">sftp</code>(1) manual page. </div></div></div><div class="section" id="s1-ssh-beyondshell"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.5. More Than a Secure Shell</h2></div></div></div><div class="para"> A secure command line interface is just the beginning of the many ways SSH can be used. Given the proper amount of bandwidth, X11 sessions can be directed over an SSH channel. Or, by using TCP/IP forwarding, previously insecure port connections between systems can be mapped to specific SSH channels. - </div><div class="section" id="s2-ssh-beyondshell-x11"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.5.1. X11 Forwarding</h3></div></div></div><a id="idm263440619872" class="indexterm"></a><div class="para"> + </div><div class="section" id="s2-ssh-beyondshell-x11"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.5.1. X11 Forwarding</h3></div></div></div><a id="idm225499911136" class="indexterm"></a><div class="para"> To open an X11 session over an SSH connection, use a command in the following form: </div><pre class="screen"><code class="command">ssh -Y <em class="replaceable"><code>username</code></em>@<em class="replaceable"><code>hostname</code></em></code></pre><div class="para"> For example, to log in to a remote machine named <code class="systemitem">penguin.example.com</code> with <code class="systemitem">USER</code> as a user name, type: @@ -2503,7 +2503,7 @@ USER(a)penguin.example.com's password:</pre><div class="para"> X11 forwarding can be very useful. For example, X11 forwarding can be used to create a secure, interactive session of the <span class="application"><strong>Print Settings</strong></span> utility. To do this, connect to the server using <span class="application"><strong>ssh</strong></span> and type: </div><pre class="screen">~]$ <code class="command">system-config-printer &</code></pre><div class="para"> The <span class="application"><strong>Print Settings</strong></span> tool will appear, allowing the remote user to safely configure printing on the remote system. - </div></div><div class="section" id="s2-ssh-beyondshell-tcpip"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.5.2. Port Forwarding</h3></div></div></div><a id="idm263488210672" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s2-ssh-beyondshell-tcpip"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">8.5.2. Port Forwarding</h3></div></div></div><a id="idm225453811584" class="indexterm"></a><div class="para"> SSH can secure otherwise insecure <code class="systemitem">TCP/IP</code> protocols via port forwarding. When using this technique, the SSH server becomes an encrypted conduit to the SSH client. </div><div class="para"> Port forwarding works by mapping a local port on the client to a remote port on the server. SSH can map any port from the server to any port on the client. Port numbers do not need to match for this technique to work. @@ -2525,7 +2525,7 @@ USER(a)penguin.example.com's password:</pre><div class="para"> Using port forwarding to forward connections in this manner allows any user on the client system to connect to that service. If the client system becomes compromised, the attacker also has access to forwarded services. </div><div class="para"> System administrators concerned about port forwarding can disable this functionality on the server by specifying a <code class="option">No</code> parameter for the <code class="option">AllowTcpForwarding</code> line in <code class="filename">/etc/ssh/sshd_config</code> and restarting the <code class="command">sshd</code> service. - </div></div></div></div></div><div class="section" id="s1-openssh-additional-resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.6. Additional Resources</h2></div></div></div><a id="idm263483339408" class="indexterm"></a><a id="idm263483337968" class="indexterm"></a><div class="para"> + </div></div></div></div></div><div class="section" id="s1-openssh-additional-resources"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">8.6. Additional Resources</h2></div></div></div><a id="idm225455906752" class="indexterm"></a><a id="idm225366587552" class="indexterm"></a><div class="para"> For more information on how to configure or connect to an OpenSSH server on Fedora, see the resources listed below. </div><h3 id="bh-OpenSSH-Resources-Installed">Installed Documentation</h3><div class="itemizedlist"><ul><li class="listitem"><div class="para"> <code class="systemitem">sshd</code>(8) — The manual page for the <code class="systemitem">sshd</code> daemon documents available command line options and provides a complete list of supported configuration files and directories. @@ -2545,7 +2545,7 @@ USER(a)penguin.example.com's password:</pre><div class="para"> <a href="http://www.openssh.com/">OpenSSH Home Page</a> — The OpenSSH home page containing further documentation, frequently asked questions, links to the mailing lists, bug reports, and other useful resources. </div></li><li class="listitem"><div class="para"> <a href="http://www.openssl.org/">OpenSSL Home Page</a> — The OpenSSL home page containing further documentation, frequently asked questions, links to the mailing lists, and other useful resources. - </div></li></ul></div></div><div class="footnotes"><br /><hr width="100" align="left" /><div id="ftn.idm263472237792" class="footnote"><div class="para"><a href="#idm263472237792" class="para"><sup class="para">[1] </sup></a> + </div></li></ul></div></div><div class="footnotes"><br /><hr width="100" align="left" /><div id="ftn.idm225453576832" class="footnote"><div class="para"><a href="#idm225453576832" class="para"><sup class="para">[1] </sup></a> A multiplexed connection consists of several signals being sent over a shared, common medium. With SSH, different channels are sent over a common secure connection. </div></div></div></div><div xml:lang="en-US" class="chapter" id="ch-TigerVNC" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 9. TigerVNC</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-vnc-server">9.1. VNC Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-vnc-installation">9.1.1. Installing VNC Server</a></span></dt><dt><span class="section"><a href="#s3-configuring-vnc-server">9.1.2. Configuring VNC Server</a></span></dt><dt><span class="section"><a href="#s4-starting-vncserver">9.1.3. Starting VNC Server</a></span></dt><dt><span class="section"><a href="#terminating-vnc-session">9.1.4. Terminating a VNC Session</a></span></dt></dl></dd><dt><span class="section"><a href="#s5-vnc-viewer">9.2. VNC Viewer</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-vncviewer">9.2.1. Installing VNC Viewer</a></span></dt><dt><span class="section"><a href="#s6-connecting-vnc -viewer">9.2.2. Connecting to VNC Server</a></span></dt><dt><span class="section"><a href="#s1-using_ssh">9.2.3. Connecting to VNC Server Using SSH</a></span></dt></dl></dd><dt><span class="section"><a href="#s9-additional-sources">9.3. Additional Resources</a></span></dt></dl></div><div class="para"> <code class="systemitem">TigerVNC</code> (Tiger Virtual Network Computing) is a system for graphical desktop sharing which allows you to remotely control other computers. @@ -2697,15 +2697,15 @@ success</pre> <code class="filename">vncviewer(1)</code> — The <acronym class="acronym">VNC</acronym> viewer manual pages. </div></li><li class="listitem"><div class="para"> <code class="filename">vncpasswd(1)</code> — The <acronym class="acronym">VNC</acronym> password manual pages. - </div></li></ul></div></div></div></div><div class="part" id="part-Servers"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part IV. Servers</h1></div></div></div><div class="partintro" id="idm263443486880"><div></div><div class="para"> + </div></li></ul></div></div></div></div><div class="part" id="part-Servers"><div class="titlepage"><div><div text-align="center"><h1 class="title">Part IV. Servers</h1></div></div></div><div class="partintro" id="idm225475853360"><div></div><div class="para"> This part discusses various topics related to servers such as how to set up a web server or share files and directories over a network. - </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Web_Servers">10. Web Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Mail_Servers">11. Mail Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-email-protocols">11.1. Email Protocols</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-protocols-send">11.1.1. Mail Transport Protocols</a></span></dt><dt><span class="section"><a href="#s2-email-protocols-client">11.1.2. Mail Access Protocols</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-types">11.2. Email Program Classifications</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-types-mta">11.2.1. Mail Transport Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mda">11.2.2. Mail Delivery Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mua">11.2.3. Mail User Agent</a></span></dt></dl></dd><d t><span class="section"><a href="#s1-email-mta">11.3. Mail Transport Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-mta-postfix">11.3.1. Postfix</a></span></dt><dt><span class="section"><a href="#s2-email-mta-sendmail">11.3.2. Sendmail</a></span></dt><dt><span class="section"><a href="#s2-email-mta-fetchmail">11.3.3. Fetchmail</a></span></dt><dt><span class="section"><a href="#s2-email-switchmail">11.3.4. Mail Transport Agent (MTA) Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mda">11.4. Mail Delivery Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-procmail-configuration">11.4.1. Procmail Configuration</a></span></dt><dt><span class="section"><a href="#s2-email-procmail-recipes">11.4.2. Procmail Recipes</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mua">11.5. Mail User Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-security">11.5.1. Securing Communication</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-additional-resources">11.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-installed-docs">11.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-email-useful-websites">11.6.2. Useful Websites</a></span></dt><dt><span class="section"><a href="#s2-email-related-books">11.6.3. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Directory_Servers">12. Directory Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-OpenLDAP">12.1. OpenLDAP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ldap-introduction">12.1.1. Introduction to LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-installation">12.1.2. Installing the OpenLDAP Suite</a></span></dt><dt><span class="section"><a href="#s2-ldap-configuration">12.1.3. Configuring an OpenLDAP Ser ver</a></span></dt><dt><span class="section"><a href="#s2-selinux-openldap">12.1.4. SELinux Policy for Applications Using LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-running">12.1.5. Running an OpenLDAP Server</a></span></dt><dt><span class="section"><a href="#s2-ldap-pam">12.1.6. Configuring a System to Authenticate Using OpenLDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-resources">12.1.7. Additional Resources</a></span></dt><dt><span class="section"><a href="#s3-ldap-related-books">12.1.8. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-File_and_Print_Servers">13. File and Print Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba">13.1. Samba</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba-Introduction_to_Samba">13.1.1. Introduction to Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba_Daemons_and_Related_Services">13.1.2. Samba Dae mons and Related Services</a></span></dt><dt><span class="section"><a href="#sect-Samba-Connecting_to_a_Samba_Share">13.1.3. Connecting to a Samba Share</a></span></dt><dt><span class="section"><a href="#sect-Mounting_the_Samba_Share">13.1.4. Mounting the Share</a></span></dt><dt><span class="section"><a href="#sect-Samba-Configuring_a_Samba_Server">13.1.5. Configuring a Samba Server</a></span></dt><dt><span class="section"><a href="#sect-Samba-Starting_and_Stopping">13.1.6. Starting and Stopping Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba-Server_Types_and_the_smb.conf_File">13.1.7. Samba Server Types and the <code class="filename">smb.conf</code> File</a></span></dt><dt><span class="section"><a href="#sect-Samba-Security_Modes">13.1.8. Samba Security Modes</a></span></dt><dt><span class="section"><a href="#sect-Samba-Account_Information-Databases">13.1.9. Samba Account Information Databases</a></span></dt><dt><span class="section"><a href="#sect-Samb a-Network_Browsing">13.1.10. Samba Network Browsing</a></span></dt><dt><span class="section"><a href="#sect-Samba_with_CUPS_Printing_Support">13.1.11. Samba with CUPS Printing Support</a></span></dt><dt><span class="section"><a href="#sect-Samba_Distribution_Programs">13.1.12. Samba Distribution Programs</a></span></dt><dt><span class="section"><a href="#sect-Samba-Resources">13.1.13. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-FTP">13.2. FTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ftp-protocol">13.2.1. The File Transfer Protocol</a></span></dt><dt><span class="section"><a href="#s2-ftp-servers">13.2.2. FTP Servers</a></span></dt><dt><span class="section"><a href="#s3-ftp-vsftpd-conf">13.2.3. Files Installed with <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-start">13.2.4. Starting and Stopping <code class="command">vsftpd</code> </a></span></dt><dt><span cl ass="section"><a href="#s2-ftp-vsftpd-conf">13.2.5. <code class="command">vsftpd</code> Configuration Options</a></span></dt><dt><span class="section"><a href="#s2-ftp-resources">13.2.6. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Printer_Configuration">13.3. Printer Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_Printer_Config">13.3.1. Starting the Printers Configuration Tool</a></span></dt><dt><span class="section"><a href="#sec-Setting_Printer">13.3.2. Starting Printer Setup</a></span></dt><dt><span class="section"><a href="#sec-Adding_Other_Printer">13.3.3. Adding a Local Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-jetdirect-printer">13.3.4. Adding an AppSocket/HP JetDirect printer</a></span></dt><dt><span class="section"><a href="#s1-printing-ipp-printer">13.3.5. Adding an IPP Printer</a></span></dt><dt><span class="section"><a href="#sec-printing-LPDLPR-printer" >13.3.6. Adding an LPD/LPR Host or Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-smb-printer">13.3.7. Adding a Samba (SMB) printer</a></span></dt><dt><span class="section"><a href="#s1-printing-select-model">13.3.8. Selecting the Printer Model and Finishing</a></span></dt><dt><span class="section"><a href="#s1-printing-test-page">13.3.9. Printing a Test Page</a></span></dt><dt><span class="section"><a href="#s1-printing-edit">13.3.10. Modifying Existing Printers</a></span></dt><dt><span class="section"><a href="#s1-printing-additional-resources">13.3.11. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_the_chrony_Suite">14. Configuring NTP Using the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Introduction_to_the_chrony_Suite">14.1. Introduction to the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-differences_between_ntpd _and_chronyd">14.1.1. Differences Between ntpd and chronyd</a></span></dt><dt><span class="section"><a href="#sect-Choosing_between_NTP_daemon">14.1.2. Choosing Between NTP Daemons</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Understanding_chrony_and-its_configuration">14.2. Understanding chrony and Its Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Understanding_chronyd">14.2.1. Understanding chronyd</a></span></dt><dt><span class="section"><a href="#sect-Understanding_chronyc">14.2.2. Understanding chronyc</a></span></dt><dt><span class="section"><a href="#sect-Understanding_the_chrony_configuration_commands">14.2.3. Understanding the chrony Configuration Commands</a></span></dt><dt><span class="section"><a href="#sect-Security_with_chronyc">14.2.4. Security with chronyc</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chrony">14.3. Using chrony</a></span></dt><dd><dl><dt><span class="section"><a hr ef="#sect-Installing_chrony">14.3.1. Installing chrony</a></span></dt><dt><span class="section"><a href="#sect-Checking_the_Status_of_chronyd">14.3.2. Checking the Status of chronyd</a></span></dt><dt><span class="section"><a href="#sect-Starting_chronyd">14.3.3. Starting chronyd</a></span></dt><dt><span class="section"><a href="#sect-Stopping_chronyd">14.3.4. Stopping chronyd</a></span></dt><dt><span class="section"><a href="#sect-Checking_if_chrony_is_synchronized">14.3.5. Checking if chrony is Synchronized</a></span></dt><dt><span class="section"><a href="#sect-Manually_Adjusting-the-System_Clock">14.3.6. Manually Adjusting the System Clock</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Setting_up_chrony_for_different_environments">14.4. Setting Up chrony for Different Environments</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_which_is_infrequently_connected">14.4.1. Setting Up chrony for a System Which i s Infrequently Connected</a></span></dt><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_in_an_isolated_network">14.4.2. Setting Up chrony for a System in an Isolated Network</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chronyc">14.5. Using chronyc</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Using_chronyc_chronyc_to_control_chronyd">14.5.1. Using chronyc to Control chronyd</a></span></dt><dt><span class="section"><a href="#sect-Using_chronyc_for_remote_administration">14.5.2. Using chronyc for Remote Administration</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-additional_resources">14.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-chrony-docs-inst">14.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-chrony_Online_Documentation">14.6.2. Online Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter "><a href="#ch-Configuring_NTP_Using_ntpd">15. Configuring NTP Using ntpd</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Introduction_to_NTP">15.1. Introduction to NTP</a></span></dt><dt><span class="section"><a href="#s1-NTP_Strata">15.2. NTP Strata</a></span></dt><dt><span class="section"><a href="#s1-Understanding_NTP">15.3. Understanding NTP</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_Drift_File">15.4. Understanding the Drift File</a></span></dt><dt><span class="section"><a href="#s1-UTC_timezones_and_DST">15.5. UTC, Timezones, and DST</a></span></dt><dt><span class="section"><a href="#s1-Authentication_Options_for_NTP">15.6. Authentication Options for NTP</a></span></dt><dt><span class="section"><a href="#s1-Managing_the_Time_on_Virtual_Machines">15.7. Managing the Time on Virtual Machines</a></span></dt><dt><span class="section"><a href="#s1-Understanding_Leap_Seconds">15.8. Understanding Leap Seconds</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Configuration_File">15.9. Understanding the ntpd Configuration File</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Sysconfig_File">15.10. Understanding the ntpd Sysconfig File</a></span></dt><dt><span class="section"><a href="#s1-Disabling_chrony">15.11. Disabling chrony</a></span></dt><dt><span class="section"><a href="#s1-Checking_if_the_NTP_Daemon_is_Installed">15.12. Checking if the NTP Daemon is Installed</a></span></dt><dt><span class="section"><a href="#s1-Installing_the_NTP_Daemon_ntpd">15.13. Installing the NTP Daemon (ntpd)</a></span></dt><dt><span class="section"><a href="#s1-Checking_the_status_of_NTP">15.14. Checking the Status of NTP</a></span></dt><dt><span class="section"><a href="#s1-Configure_the_Firewall_to_Allow_Incoming_NTP_Packets">15.15. Configure the Firewall to Allow Incoming NTP Packets</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Change_the_firewall_s ettings">15.15.1. Change the Firewall Settings</a></span></dt><dt><span class="section"><a href="#s2-Open_Ports_in_the_firewall_for_ntp_packets">15.15.2. Open Ports in the Firewall for NTP Packets</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configure_ntpdate_Servers">15.16. Configure ntpdate Servers</a></span></dt><dt><span class="section"><a href="#s1-Configure_NTP">15.17. Configure NTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Configure_Access_Control_to_an_NTP_service">15.17.1. Configure Access Control to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Configure_Rate_Limiting_Access_to_an_NTP_Service">15.17.2. Configure Rate Limiting Access to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Peer_Address">15.17.3. Adding a Peer Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Server_Address">15.17.4. Adding a Server Address</a></span></dt><dt><span class="sectio n"><a href="#s2_Adding_a_Broadcast_or_Mutlticast_Server_Address">15.17.5. Adding a Broadcast or Multicast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Manycast_Client_Address">15.17.6. Adding a Manycast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Broadcastclient_Address">15.17.7. Adding a Broadcast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_manycastserver_Address">15.17.8. Adding a Manycast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_multicastclient_Address">15.17.9. Adding a Multicast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_burst_option">15.17.10. Configuring the Burst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_iburst_Option">15.17.11. Configuring the iburst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Symmetric_Authentication_Using_a_ Key">15.17.12. Configuring Symmetric Authentication Using a Key</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Poll_Interval">15.17.13. Configuring the Poll Interval</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Server_Preference">15.17.14. Configuring Server Preference</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Time-To-Live_for_NTP_Packets">15.17.15. Configuring the Time-to-Live for NTP Packets</a></span></dt><dt><span class="section"><a href="#s2_Configuring_The_Version_of_NTP_to_use">15.17.16. Configuring the NTP Version to Use</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configuring_the_Hardware_Clock_update">15.18. Configuring the Hardware Clock Update</a></span></dt><dt><span class="section"><a href="#s1-Configuring_Clock_Sources">15.19. Configuring Clock Sources</a></span></dt><dt><span class="section"><a href="#s1-ntpd_additional-resources">15.20. Additional Resources</a></span>< /dt><dd><dl><dt><span class="section"><a href="#s2-ntpd-docs-inst">15.20.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-ntpd_useful-websites">15.20.2. Useful Websites</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_PTP_Using_ptp4l">16. Configuring PTP Using ptp4l</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_PTP">16.1. Introduction to PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Understanding_PTP">16.1.1. Understanding PTP</a></span></dt><dt><span class="section"><a href="#sec-Advantages_of_PTP">16.1.2. Advantages of PTP</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_PTP">16.2. Using PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_for_Driver_and_Hardware_Support">16.2.1. Checking for Driver and Hardware Support</a></span></dt><dt><span class="section"><a href="#sec-Installing_PTP">16.2.2. Installing PTP</a></span></dt><dt><span class="section"><a href="#sec-Starting_ptp4l">16.2.3. Starting ptp4l</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Specifying_a_Configuration_File">16.3. Specifying a Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Using_the_PTP_Management_Client">16.4. Using the PTP Management Client</a></span></dt><dt><span class="section"><a href="#sec-Synchronizing_the_Clocks">16.5. Synchronizing the Clocks</a></span></dt><dt><span class="section"><a href="#sec-Verifying_Time_Synchronization">16.6. Verifying Time Synchronization</a></span></dt><dt><span class="section"><a href="#sec-Serving_PTP_Time_with_NTP">16.7. Serving PTP Time with NTP</a></span></dt><dt><span class="section"><a href="#sec-Serving_NTP_Time_with_PTP">16.8. Serving NTP Time with PTP</a></span></dt><dt><span class="section"><a href="#sec-Synchronize_to_PTP_or_NTP_Time_Using_timemaster">16.9. Synchronize to PTP or NTP Time Using timemaster</a></s pan></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_timemaster_as_a_Service">16.9.1. Starting timemaster as a Service</a></span></dt><dt><span class="section"><a href="#sec-Understanding_the_timemaster_Configuration_File">16.9.2. Understanding the timemaster Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Configuring_timemaster_Options">16.9.3. Configuring timemaster Options</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Improving_Accuracy">16.10. Improving Accuracy</a></span></dt><dt><span class="section"><a href="#sec-PTP_additional_resources">16.11. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-PTP-docs-inst">16.11.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#sec-PTP_useful-websites">16.11.2. Useful Websites</a></span></dt></dl></dd></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch-Web_Servers" lang="en-US"><div class="titl epage"><div><div><h2 class="title">Chapter 10. Web Servers</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></div><a id="idm263489621904" class="indexterm"></a><a id="idm263489618464" class="indexterm"></a><div class="para"> + </div><div class="toc"><p><strong>Table of Contents</strong></p><dl class="toc"><dt><span class="chapter"><a href="#ch-Web_Servers">10. Web Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Mail_Servers">11. Mail Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-email-protocols">11.1. Email Protocols</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-protocols-send">11.1.1. Mail Transport Protocols</a></span></dt><dt><span class="section"><a href="#s2-email-protocols-client">11.1.2. Mail Access Protocols</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-types">11.2. Email Program Classifications</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-types-mta">11.2.1. Mail Transport Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mda">11.2.2. Mail Delivery Agent</a></span></dt><dt><span class="section"><a href="#s2-email-types-mua">11.2.3. Mail User Agent</a></span></dt></dl></dd><d t><span class="section"><a href="#s1-email-mta">11.3. Mail Transport Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-mta-postfix">11.3.1. Postfix</a></span></dt><dt><span class="section"><a href="#s2-email-mta-sendmail">11.3.2. Sendmail</a></span></dt><dt><span class="section"><a href="#s2-email-mta-fetchmail">11.3.3. Fetchmail</a></span></dt><dt><span class="section"><a href="#s2-email-switchmail">11.3.4. Mail Transport Agent (MTA) Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mda">11.4. Mail Delivery Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-procmail-configuration">11.4.1. Procmail Configuration</a></span></dt><dt><span class="section"><a href="#s2-email-procmail-recipes">11.4.2. Procmail Recipes</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-mua">11.5. Mail User Agents</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-security">11.5.1. Securing Communication</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-email-additional-resources">11.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-email-installed-docs">11.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-email-useful-websites">11.6.2. Useful Websites</a></span></dt><dt><span class="section"><a href="#s2-email-related-books">11.6.3. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Directory_Servers">12. Directory Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-OpenLDAP">12.1. OpenLDAP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ldap-introduction">12.1.1. Introduction to LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-installation">12.1.2. Installing the OpenLDAP Suite</a></span></dt><dt><span class="section"><a href="#s2-ldap-configuration">12.1.3. Configuring an OpenLDAP Ser ver</a></span></dt><dt><span class="section"><a href="#s2-selinux-openldap">12.1.4. SELinux Policy for Applications Using LDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-running">12.1.5. Running an OpenLDAP Server</a></span></dt><dt><span class="section"><a href="#s2-ldap-pam">12.1.6. Configuring a System to Authenticate Using OpenLDAP</a></span></dt><dt><span class="section"><a href="#s2-ldap-resources">12.1.7. Additional Resources</a></span></dt><dt><span class="section"><a href="#s3-ldap-related-books">12.1.8. Related Books</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-File_and_Print_Servers">13. File and Print Servers</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba">13.1. Samba</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Samba-Introduction_to_Samba">13.1.1. Introduction to Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba_Daemons_and_Related_Services">13.1.2. Samba Dae mons and Related Services</a></span></dt><dt><span class="section"><a href="#sect-Samba-Connecting_to_a_Samba_Share">13.1.3. Connecting to a Samba Share</a></span></dt><dt><span class="section"><a href="#sect-Mounting_the_Samba_Share">13.1.4. Mounting the Share</a></span></dt><dt><span class="section"><a href="#sect-Samba-Configuring_a_Samba_Server">13.1.5. Configuring a Samba Server</a></span></dt><dt><span class="section"><a href="#sect-Samba-Starting_and_Stopping">13.1.6. Starting and Stopping Samba</a></span></dt><dt><span class="section"><a href="#sect-Samba-Server_Types_and_the_smb.conf_File">13.1.7. Samba Server Types and the <code class="filename">smb.conf</code> File</a></span></dt><dt><span class="section"><a href="#sect-Samba-Security_Modes">13.1.8. Samba Security Modes</a></span></dt><dt><span class="section"><a href="#sect-Samba-Account_Information-Databases">13.1.9. Samba Account Information Databases</a></span></dt><dt><span class="section"><a href="#sect-Samb a-Network_Browsing">13.1.10. Samba Network Browsing</a></span></dt><dt><span class="section"><a href="#sect-Samba_with_CUPS_Printing_Support">13.1.11. Samba with CUPS Printing Support</a></span></dt><dt><span class="section"><a href="#sect-Samba_Distribution_Programs">13.1.12. Samba Distribution Programs</a></span></dt><dt><span class="section"><a href="#sect-Samba-Resources">13.1.13. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-FTP">13.2. FTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-ftp-protocol">13.2.1. The File Transfer Protocol</a></span></dt><dt><span class="section"><a href="#s2-ftp-servers">13.2.2. FTP Servers</a></span></dt><dt><span class="section"><a href="#s3-ftp-vsftpd-conf">13.2.3. Files Installed with <code class="command">vsftpd</code> </a></span></dt><dt><span class="section"><a href="#s2-ftp-vsftpd-start">13.2.4. Starting and Stopping <code class="command">vsftpd</code> </a></span></dt><dt><span cl ass="section"><a href="#s2-ftp-vsftpd-conf">13.2.5. <code class="command">vsftpd</code> Configuration Options</a></span></dt><dt><span class="section"><a href="#s2-ftp-resources">13.2.6. Additional Resources</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Printer_Configuration">13.3. Printer Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_Printer_Config">13.3.1. Starting the Printers Configuration Tool</a></span></dt><dt><span class="section"><a href="#sec-Setting_Printer">13.3.2. Starting Printer Setup</a></span></dt><dt><span class="section"><a href="#sec-Adding_Other_Printer">13.3.3. Adding a Local Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-jetdirect-printer">13.3.4. Adding an AppSocket/HP JetDirect printer</a></span></dt><dt><span class="section"><a href="#s1-printing-ipp-printer">13.3.5. Adding an IPP Printer</a></span></dt><dt><span class="section"><a href="#sec-printing-LPDLPR-printer" >13.3.6. Adding an LPD/LPR Host or Printer</a></span></dt><dt><span class="section"><a href="#s1-printing-smb-printer">13.3.7. Adding a Samba (SMB) printer</a></span></dt><dt><span class="section"><a href="#s1-printing-select-model">13.3.8. Selecting the Printer Model and Finishing</a></span></dt><dt><span class="section"><a href="#s1-printing-test-page">13.3.9. Printing a Test Page</a></span></dt><dt><span class="section"><a href="#s1-printing-edit">13.3.10. Modifying Existing Printers</a></span></dt><dt><span class="section"><a href="#s1-printing-additional-resources">13.3.11. Additional Resources</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_NTP_Using_the_chrony_Suite">14. Configuring NTP Using the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Introduction_to_the_chrony_Suite">14.1. Introduction to the chrony Suite</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-differences_between_ntpd _and_chronyd">14.1.1. Differences Between ntpd and chronyd</a></span></dt><dt><span class="section"><a href="#sect-Choosing_between_NTP_daemon">14.1.2. Choosing Between NTP Daemons</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Understanding_chrony_and-its_configuration">14.2. Understanding chrony and Its Configuration</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Understanding_chronyd">14.2.1. Understanding chronyd</a></span></dt><dt><span class="section"><a href="#sect-Understanding_chronyc">14.2.2. Understanding chronyc</a></span></dt><dt><span class="section"><a href="#sect-Understanding_the_chrony_configuration_commands">14.2.3. Understanding the chrony Configuration Commands</a></span></dt><dt><span class="section"><a href="#sect-Security_with_chronyc">14.2.4. Security with chronyc</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chrony">14.3. Using chrony</a></span></dt><dd><dl><dt><span class="section"><a hr ef="#sect-Installing_chrony">14.3.1. Installing chrony</a></span></dt><dt><span class="section"><a href="#sect-Checking_the_Status_of_chronyd">14.3.2. Checking the Status of chronyd</a></span></dt><dt><span class="section"><a href="#sect-Starting_chronyd">14.3.3. Starting chronyd</a></span></dt><dt><span class="section"><a href="#sect-Stopping_chronyd">14.3.4. Stopping chronyd</a></span></dt><dt><span class="section"><a href="#sect-Checking_if_chrony_is_synchronized">14.3.5. Checking if chrony is Synchronized</a></span></dt><dt><span class="section"><a href="#sect-Manually_Adjusting-the-System_Clock">14.3.6. Manually Adjusting the System Clock</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Setting_up_chrony_for_different_environments">14.4. Setting Up chrony for Different Environments</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_which_is_infrequently_connected">14.4.1. Setting Up chrony for a System Which i s Infrequently Connected</a></span></dt><dt><span class="section"><a href="#sect-Setting_up_chrony_for_a_system_in_an_isolated_network">14.4.2. Setting Up chrony for a System in an Isolated Network</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-Using_chronyc">14.5. Using chronyc</a></span></dt><dd><dl><dt><span class="section"><a href="#sect-Using_chronyc_chronyc_to_control_chronyd">14.5.1. Using chronyc to Control chronyd</a></span></dt><dt><span class="section"><a href="#sect-Using_chronyc_for_remote_administration">14.5.2. Using chronyc for Remote Administration</a></span></dt></dl></dd><dt><span class="section"><a href="#sect-additional_resources">14.6. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-chrony-docs-inst">14.6.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-chrony_Online_Documentation">14.6.2. Online Documentation</a></span></dt></dl></dd></dl></dd><dt><span class="chapter "><a href="#ch-Configuring_NTP_Using_ntpd">15. Configuring NTP Using ntpd</a></span></dt><dd><dl><dt><span class="section"><a href="#s1-Introduction_to_NTP">15.1. Introduction to NTP</a></span></dt><dt><span class="section"><a href="#s1-NTP_Strata">15.2. NTP Strata</a></span></dt><dt><span class="section"><a href="#s1-Understanding_NTP">15.3. Understanding NTP</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_Drift_File">15.4. Understanding the Drift File</a></span></dt><dt><span class="section"><a href="#s1-UTC_timezones_and_DST">15.5. UTC, Timezones, and DST</a></span></dt><dt><span class="section"><a href="#s1-Authentication_Options_for_NTP">15.6. Authentication Options for NTP</a></span></dt><dt><span class="section"><a href="#s1-Managing_the_Time_on_Virtual_Machines">15.7. Managing the Time on Virtual Machines</a></span></dt><dt><span class="section"><a href="#s1-Understanding_Leap_Seconds">15.8. Understanding Leap Seconds</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Configuration_File">15.9. Understanding the ntpd Configuration File</a></span></dt><dt><span class="section"><a href="#s1-Understanding_the_ntpd_Sysconfig_File">15.10. Understanding the ntpd Sysconfig File</a></span></dt><dt><span class="section"><a href="#s1-Disabling_chrony">15.11. Disabling chrony</a></span></dt><dt><span class="section"><a href="#s1-Checking_if_the_NTP_Daemon_is_Installed">15.12. Checking if the NTP Daemon is Installed</a></span></dt><dt><span class="section"><a href="#s1-Installing_the_NTP_Daemon_ntpd">15.13. Installing the NTP Daemon (ntpd)</a></span></dt><dt><span class="section"><a href="#s1-Checking_the_status_of_NTP">15.14. Checking the Status of NTP</a></span></dt><dt><span class="section"><a href="#s1-Configure_the_Firewall_to_Allow_Incoming_NTP_Packets">15.15. Configure the Firewall to Allow Incoming NTP Packets</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Change_the_firewall_s ettings">15.15.1. Change the Firewall Settings</a></span></dt><dt><span class="section"><a href="#s2-Open_Ports_in_the_firewall_for_ntp_packets">15.15.2. Open Ports in the Firewall for NTP Packets</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configure_ntpdate_Servers">15.16. Configure ntpdate Servers</a></span></dt><dt><span class="section"><a href="#s1-Configure_NTP">15.17. Configure NTP</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-Configure_Access_Control_to_an_NTP_service">15.17.1. Configure Access Control to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Configure_Rate_Limiting_Access_to_an_NTP_Service">15.17.2. Configure Rate Limiting Access to an NTP Service</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Peer_Address">15.17.3. Adding a Peer Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Server_Address">15.17.4. Adding a Server Address</a></span></dt><dt><span class="sectio n"><a href="#s2_Adding_a_Broadcast_or_Mutlticast_Server_Address">15.17.5. Adding a Broadcast or Multicast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Manycast_Client_Address">15.17.6. Adding a Manycast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_Broadcastclient_Address">15.17.7. Adding a Broadcast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_manycastserver_Address">15.17.8. Adding a Manycast Server Address</a></span></dt><dt><span class="section"><a href="#s2_Adding_a_multicastclient_Address">15.17.9. Adding a Multicast Client Address</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_burst_option">15.17.10. Configuring the Burst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_iburst_Option">15.17.11. Configuring the iburst Option</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Symmetric_Authentication_Using_a_ Key">15.17.12. Configuring Symmetric Authentication Using a Key</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Poll_Interval">15.17.13. Configuring the Poll Interval</a></span></dt><dt><span class="section"><a href="#s2_Configuring_Server_Preference">15.17.14. Configuring Server Preference</a></span></dt><dt><span class="section"><a href="#s2_Configuring_the_Time-To-Live_for_NTP_Packets">15.17.15. Configuring the Time-to-Live for NTP Packets</a></span></dt><dt><span class="section"><a href="#s2_Configuring_The_Version_of_NTP_to_use">15.17.16. Configuring the NTP Version to Use</a></span></dt></dl></dd><dt><span class="section"><a href="#s1-Configuring_the_Hardware_Clock_update">15.18. Configuring the Hardware Clock Update</a></span></dt><dt><span class="section"><a href="#s1-Configuring_Clock_Sources">15.19. Configuring Clock Sources</a></span></dt><dt><span class="section"><a href="#s1-ntpd_additional-resources">15.20. Additional Resources</a></span>< /dt><dd><dl><dt><span class="section"><a href="#s2-ntpd-docs-inst">15.20.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#s2-ntpd_useful-websites">15.20.2. Useful Websites</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#ch-Configuring_PTP_Using_ptp4l">16. Configuring PTP Using ptp4l</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Introduction_to_PTP">16.1. Introduction to PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Understanding_PTP">16.1.1. Understanding PTP</a></span></dt><dt><span class="section"><a href="#sec-Advantages_of_PTP">16.1.2. Advantages of PTP</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Using_PTP">16.2. Using PTP</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-Checking_for_Driver_and_Hardware_Support">16.2.1. Checking for Driver and Hardware Support</a></span></dt><dt><span class="section"><a href="#sec-Installing_PTP">16.2.2. Installing PTP</a></span></dt><dt><span class="section"><a href="#sec-Starting_ptp4l">16.2.3. Starting ptp4l</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Specifying_a_Configuration_File">16.3. Specifying a Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Using_the_PTP_Management_Client">16.4. Using the PTP Management Client</a></span></dt><dt><span class="section"><a href="#sec-Synchronizing_the_Clocks">16.5. Synchronizing the Clocks</a></span></dt><dt><span class="section"><a href="#sec-Verifying_Time_Synchronization">16.6. Verifying Time Synchronization</a></span></dt><dt><span class="section"><a href="#sec-Serving_PTP_Time_with_NTP">16.7. Serving PTP Time with NTP</a></span></dt><dt><span class="section"><a href="#sec-Serving_NTP_Time_with_PTP">16.8. Serving NTP Time with PTP</a></span></dt><dt><span class="section"><a href="#sec-Synchronize_to_PTP_or_NTP_Time_Using_timemaster">16.9. Synchronize to PTP or NTP Time Using timemaster</a></s pan></dt><dd><dl><dt><span class="section"><a href="#sec-Starting_timemaster_as_a_Service">16.9.1. Starting timemaster as a Service</a></span></dt><dt><span class="section"><a href="#sec-Understanding_the_timemaster_Configuration_File">16.9.2. Understanding the timemaster Configuration File</a></span></dt><dt><span class="section"><a href="#sec-Configuring_timemaster_Options">16.9.3. Configuring timemaster Options</a></span></dt></dl></dd><dt><span class="section"><a href="#sec-Improving_Accuracy">16.10. Improving Accuracy</a></span></dt><dt><span class="section"><a href="#sec-PTP_additional_resources">16.11. Additional Resources</a></span></dt><dd><dl><dt><span class="section"><a href="#sec-PTP-docs-inst">16.11.1. Installed Documentation</a></span></dt><dt><span class="section"><a href="#sec-PTP_useful-websites">16.11.2. Useful Websites</a></span></dt></dl></dd></dl></dd></dl></div></div><div xml:lang="en-US" class="chapter" id="ch-Web_Servers" lang="en-US"><div class="titl epage"><div><div><h2 class="title">Chapter 10. Web Servers</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="section"><a href="#s1-The_Apache_HTTP_Server">10.1. The Apache HTTP Server</a></span></dt><dd><dl><dt><span class="section"><a href="#s2-apache-changes">10.1.1. Notable Changes</a></span></dt><dt><span class="section"><a href="#s2-apache-version2-migrating">10.1.2. Updating the Configuration</a></span></dt><dt><span class="section"><a href="#s2-apache-running">10.1.3. Running the httpd Service</a></span></dt><dt><span class="section"><a href="#s2-apache-editing">10.1.4. Editing the Configuration Files</a></span></dt><dt><span class="section"><a href="#s2-apache-dso">10.1.5. Working with Modules</a></span></dt><dt><span class="section"><a href="#s2-apache-virtualhosts">10.1.6. Setting Up Virtual Hosts</a></span></dt><dt><span class="section"><a href="#s2-apache-mod_ssl">10.1.7. Setting Up an SSL Server</a></span></dt><dt><span class="section"><a href="#s2-apache-resources">10.1.8. Additional Resources</a></span></dt></dl></dd></dl></div><a id="idm225461661152" class="indexterm"></a><a id="idm225461657664" class="indexterm"></a><div class="para"> A <em class="firstterm">web server</em> is a network service that serves content to a client over the web. This typically means web pages, but any other documents can be served as well. Web servers are also known as HTTP servers, as they use the <em class="firstterm">hypertext transport protocol</em> (<acronym class="acronym">HTTP</acronym>). - </div><div xml:lang="en-US" class="section" id="s1-The_Apache_HTTP_Server" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">10.1. The Apache HTTP Server</h2></div></div></div><a id="idm263489623344" class="indexterm"></a><div class="para"> + </div><div xml:lang="en-US" class="section" id="s1-The_Apache_HTTP_Server" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title">10.1. The Apache HTTP Server</h2></div></div></div><a id="idm225461662592" class="indexterm"></a><div class="para"> The web server available in Fedora is the Apache HTTP server daemon, <code class="systemitem">httpd</code>, an open source web server developed by the <a href="http://www.apache.org/">Apache Software Foundation</a>. In Fedora 19 the Apache server was updated to <span class="application"><strong>Apache HTTP Server 2.4</strong></span>. This section describes the basic configuration of the <code class="systemitem">httpd</code> service, and covers some advanced topics such as adding server modules, setting up virtual hosts, or configuring the secure HTTP server. </div><div class="para"> There are important differences between the Apache HTTP Server 2.4 and version 2.2, and if you are upgrading from a release prior to Fedora 19, you will need to update the <code class="systemitem">httpd</code> service configuration accordingly. This section reviews some of the newly added features, outlines important changes, and guides you through the update of older configuration files. - </div><div class="section" id="s2-apache-changes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">10.1.1. Notable Changes</h3></div></div></div><a id="idm263476132608" class="indexterm"></a><div class="para"> + </div><div class="section" id="s2-apache-changes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">10.1.1. Notable Changes</h3></div></div></div><a id="idm225437114272" class="indexterm"></a><div class="para"> The Apache HTTP Server version 2.4 has the following changes compared to version 2.2: </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term">httpd Service Control</span></dt><dd><div class="para"> With the migration away from SysV init scripts, server administrators should switch to using the <code class="command">apachectl</code> and <code class="command">systemctl</code> commands to control the service, in place of the <code class="command">service</code> command. The following examples are specific to the <code class="systemitem">httpd</code> service. @@ -2768,14 +2768,14 @@ success</pre> </div></dd><dt class="varlistentry"><span class="term">mod_authz_ldap</span></dt><dd><div class="para"> <span class="application"><strong>httpd 2.4</strong></span> provides LDAP support in sub-package <span class="package">mod_ldap</span> using <span class="application"><strong>mod_authnz_ldap</strong></span>. </div></dd></dl></div> - </div></dd></dl></div></div><div class="section" id="s2-apache-version2-migrating"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">10.1.2. Updating the Configuration</h3></div></div></div><a id="idm263471286464" class="indexterm"></a><div class="para"> + </div></dd></dl></div></div><div class="section" id="s2-apache-version2-migrating"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">10.1.2. Updating the Configuration</h3></div></div></div><a id="idm225447920384" class="indexterm"></a><div class="para"> To update the configuration files from the Apache HTTP Server version 2.2, take the following steps: </div><div class="procedure"><ol class="1"><li class="step"><div class="para"> Make sure all module names are correct, since they may have changed. Adjust the <code class="option">LoadModule</code> directive for each module that has been renamed. </div></li><li class="step"><div class="para"> Recompile all third party modules before attempting to load them. This typically means authentication and authorization modules. </div></li><li class="step"><div class="para"> - <a id="idm263474367872" class="indexterm"></a> + <a id="idm225472960080" class="indexterm"></a> If you use the <code class="systemitem">mod_userdir</code> module, make sure the <code class="option">UserDir</code> directive indicating a directory name (typically <code class="literal">public_html</code>) is provided. </div></li><li class="step"><div class="para"> If you use the Apache HTTP Secure Server, edit the <code class="filename">/etc/httpd/conf.d/ssl.conf</code> to enable the Secure Sockets Layer (SSL) protocol. @@ -2789,19 +2789,19 @@ Syntax OK</pre><div class="para"> </div><pre class="screen">~]# <code class="command">dnf install httpd</code></pre><div class="para"> For more information on the concept of targets and how to manage system services in Fedora in general, see <a class="xref" href="#ch-Services_and_Daemons">Chapter 7, <em>Services and Daemons</em></a>. - </div><div class="section" id="s3-apache-running-starting"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.1. Starting the Service</h4></div></div></div><a id="idm263449336720" class="indexterm"></a><div class="para"> + </div><div class="section" id="s3-apache-running-starting"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.1. Starting the Service</h4></div></div></div><a id="idm225400862208" class="indexterm"></a><div class="para"> To run the <code class="systemitem">httpd</code> service, type the following at a shell prompt as <code class="systemitem">root</code>: </div><pre class="screen">~]# <code class="command">systemctl start httpd.service</code></pre><div class="para"> If you want the service to start automatically at boot time, use the following command: </div><pre class="screen">~]# <code class="command">systemctl enable httpd.service</code> ln -s '/usr/lib/systemd/system/httpd.service' '/etc/systemd/system/multi-user.target.wants/httpd.service'</pre><div class="note"><div class="admonition_header"><h2>Using the secure server</h2></div><div class="admonition"><div class="para"> If running the Apache HTTP Server as a secure server, a password may be required after the machine boots if using an encrypted private SSL key. - </div></div></div></div><div class="section" id="s3-apache-running-stopping"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.2. Stopping the Service</h4></div></div></div><a id="idm263492650384" class="indexterm"></a><div class="para"> + </div></div></div></div><div class="section" id="s3-apache-running-stopping"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.2. Stopping the Service</h4></div></div></div><a id="idm225468484560" class="indexterm"></a><div class="para"> To stop the running <code class="systemitem">httpd</code> service, type the following at a shell prompt as <code class="systemitem">root</code>: </div><pre class="screen">~]# <code class="command">systemctl stop httpd.service</code></pre><div class="para"> To prevent the service from starting automatically at boot time, type: </div><pre class="screen">~]# <code class="command">systemctl disable httpd.service</code> -rm '/etc/systemd/system/multi-user.target.wants/httpd.service'</pre></div><div class="section" id="s3-apache-running-restarting"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.3. Restarting the Service</h4></div></div></div><a id="idm263478884240" class="indexterm"></a><div class="para"> +rm '/etc/systemd/system/multi-user.target.wants/httpd.service'</pre></div><div class="section" id="s3-apache-running-restarting"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.3. Restarting the Service</h4></div></div></div><a id="idm225461183136" class="indexterm"></a><div class="para"> There are three different ways to restart a running <code class="systemitem">httpd</code> service: </div><div class="orderedlist"><ol><li class="listitem"><div class="para"> To restart the service completely, enter the following command as <code class="systemitem">root</code>: @@ -2817,7 +2817,7 @@ rm '/etc/systemd/system/multi-user.target.wants/httpd.service'</pre></div><div c This causes the running <code class="systemitem">httpd</code> service to reload its configuration file. Any requests currently being processed will continue to use the old configuration. </div></li></ol></div><div class="para"> - </div></div><div class="section" id="s3-apache-running-status"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.4. Verifying the Service Status</h4></div></div></div><a id="idm263482551536" class="indexterm"></a><div class="para"> + </div></div><div class="section" id="s3-apache-running-status"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.3.4. Verifying the Service Status</h4></div></div></div><a id="idm225453418496" class="indexterm"></a><div class="para"> To verify that the <code class="systemitem">httpd</code> service is running, type the following at a shell prompt: </div><pre class="screen">~]# <code class="command">systemctl is-active httpd.service</code> active</pre></div></div><div class="section" id="s2-apache-editing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title">10.1.4. Editing the Configuration Files</h3></div></div></div><div class="para"> @@ -2827,25 +2827,25 @@ active</pre></div></div><div class="section" id="s2-apache-editing"><div class=" </th><th class=""> Description </th></tr></thead><tbody><tr><td class=""> - <a id="idm263442333392" class="indexterm"></a> + <a id="idm225445533600" class="indexterm"></a> <code class="filename">/etc/httpd/conf/httpd.conf</code> </td><td class=""> The main configuration file. </td></tr><tr><td class=""> - <a id="idm263482553728" class="indexterm"></a> + <a id="idm225453420064" class="indexterm"></a> <code class="filename">/etc/httpd/conf.d/</code> </td><td class=""> An auxiliary directory for configuration files that are included in the main configuration file. </td></tr></tbody></table></div></div><br class="table-break" /><div class="para"> Although the default configuration should be suitable for most situations, it is a good idea to become at least familiar with some of the more important configuration options. Note that for any changes to take effect, the web server has to be restarted first. See <a class="xref" href="#s3-apache-running-restarting">Section 10.1.3.3, “Restarting the Service”</a> for more information on how to restart the <code class="systemitem">httpd</code> service. - </div><a id="idm263472250464" class="indexterm"></a><div class="para"> + </div><a id="idm225491476496" class="indexterm"></a><div class="para"> To check the configuration for possible errors, type the following at a shell prompt: </div><pre class="screen">~]# <code class="command">apachectl configtest</code> Syntax OK</pre><div class="para"> To make the recovery from mistakes easier, it is recommended that you make a copy of the original file before editing it. - </div><div class="section" id="s3-apache-httpdconf-directives"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.4.1. Common httpd.conf Directives</h4></div></div></div><a id="idm263472255184" class="indexterm"></a><div class="para"> + </div><div class="section" id="s3-apache-httpdconf-directives"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title">10.1.4.1. Common httpd.conf Directives</h4></div></div></div><a id="idm225473505632" class="indexterm"></a><div class="para"> The following directives are commonly used in the <code class="filename">/etc/httpd/conf/httpd.conf</code> configuration file: - </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term"> <a id="idm263482596704" class="indexterm"></a> + </div><div class="variablelist"><dl class="variablelist"><dt class="varlistentry"><span class="term"> <a id="idm225445816560" class="indexterm"></a> <code class="option"><Directory></code> </span></dt><dd><div class="para"> The <code class="option"><Directory></code> directive allows you to apply certain directives to a particular directory only. It takes the following form: </div><pre class="programlisting"><Directory <em class="replaceable"><code>directory</code></em>> @@ -2860,7 +2860,7 @@ Syntax OK</pre><div class="para"> AllowOverride None Order allow,deny Allow from all -</Directory></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263443443456" class="indexterm"></a> +</Directory></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225420188672" class="indexterm"></a> <code class="option"><IfDefine></code> </span></dt><dd><div class="para"> The <code class="option">IfDefine</code> directive allows you to use certain directives only when a particular parameter is supplied on the command line. It takes the following form: </div><pre class="programlisting"><IfDefine [<span class="optional">!</span>]<em class="replaceable"><code>parameter</code></em>> @@ -2870,7 +2870,7 @@ Syntax OK</pre><div class="para"> The <em class="replaceable"><code>parameter</code></em> can be supplied at a shell prompt using the <code class="option">-D</code><em class="replaceable"><code>parameter</code></em> command line option (for example, <code class="command">httpd -DEnableHome</code>). If the optional exclamation mark (that is, <code class="literal">!</code>) is present, the enclosed directives are used only when the parameter is <span class="emphasis"><em>not</em></span> specified. </div><div class="example" id="example-apache-httpdconf-ifdefine"><h6>Example 10.2. Using the <IfDefine> directive</h6><div class="example-contents"><pre class="programlisting"><IfDefine EnableHome> UserDir public_html -</IfDefine></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263475659456" class="indexterm"></a> +</IfDefine></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225434273648" class="indexterm"></a> <code class="option"><IfModule></code> </span></dt><dd><div class="para"> The <code class="option"><IfModule></code> directive allows you to use certain directive only when a particular module is loaded. It takes the following form: </div><pre class="programlisting"><IfModule [<span class="optional">!</span>]<em class="replaceable"><code>module</code></em>> @@ -2881,7 +2881,7 @@ Syntax OK</pre><div class="para"> </div><div class="example" id="example-apache-httpdconf-ifmodule"><h6>Example 10.3. Using the <IfModule> directive</h6><div class="example-contents"><pre class="programlisting"><IfModule mod_disk_cache.c> CacheEnable disk / CacheRoot /var/cache/mod_proxy -</IfModule></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263393674160" class="indexterm"></a> +</IfModule></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225460384000" class="indexterm"></a> <code class="option"><Location></code> </span></dt><dd><div class="para"> The <code class="option"><Location></code> directive allows you to apply certain directives to a particular URL only. It takes the following form: </div><pre class="programlisting"><Location <em class="replaceable"><code>url</code></em>> @@ -2894,7 +2894,7 @@ Syntax OK</pre><div class="para"> Order deny,allow Deny from all Allow from .example.com -</Location></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263475281792" class="indexterm"></a> +</Location></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225437603840" class="indexterm"></a> <code class="option"><Proxy></code> </span></dt><dd><div class="para"> The <code class="option"><Proxy></code> directive allows you to apply certain directives to the proxy server only. It takes the following form: </div><pre class="programlisting"><Proxy <em class="replaceable"><code>pattern</code></em>> @@ -2906,7 +2906,7 @@ Syntax OK</pre><div class="para"> Order deny,allow Deny from all Allow from .example.com -</Proxy></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263515272880" class="indexterm"></a> +</Proxy></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225364127424" class="indexterm"></a> <code class="option"><VirtualHost></code> </span></dt><dd><div class="para"> The <code class="option"><VirtualHost></code> directive allows you apply certain directives to particular virtual hosts only. It takes the following form: </div><pre class="programlisting"><VirtualHost <em class="replaceable"><code>address</code></em>[<span class="optional">:<em class="replaceable"><code>port</code></em></span>]…> @@ -2932,12 +2932,12 @@ Syntax OK</pre><div class="para"> ServerName penguin.example.com ErrorLog logs/penguin.example.com-error_log CustomLog logs/penguin.example.com-access_log common -</VirtualHost></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263452655040" class="indexterm"></a> +</VirtualHost></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225398720208" class="indexterm"></a> <code class="option">AccessFileName</code> </span></dt><dd><div class="para"> The <code class="option">AccessFileName</code> directive allows you to specify the file to be used to customize access control information for each directory. It takes the following form: - </div><pre class="programlisting">AccessFileName <em class="replaceable"><code>filename</code></em>…</pre><a id="idm263475172352" class="indexterm"></a><a id="idm263475175024" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">AccessFileName <em class="replaceable"><code>filename</code></em>…</pre><a id="idm225430654912" class="indexterm"></a><a id="idm225463137168" class="indexterm"></a><div class="para"> The <em class="replaceable"><code>filename</code></em> is a name of the file to look for in the requested directory. By default, the server looks for <code class="filename">.htaccess</code>. - </div><a id="idm263475178000" class="indexterm"></a><a id="idm263457517536" class="indexterm"></a><div class="para"> + </div><a id="idm225463140144" class="indexterm"></a><a id="idm225458115792" class="indexterm"></a><div class="para"> For security reasons, the directive is typically followed by the <code class="literal">Files</code> tag to prevent the files beginning with <code class="filename">.ht</code> from being accessed by web clients. This includes the <code class="filename">.htaccess</code> and <code class="filename">.htpasswd</code> files. </div><div class="example" id="example-apache-httpdconf-accessfilename"><h6>Example 10.7. Using the AccessFileName directive</h6><div class="example-contents"><pre class="programlisting">AccessFileName .htaccess @@ -2945,31 +2945,31 @@ Syntax OK</pre><div class="para"> Order allow,deny Deny from all Satisfy All -</Files></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263457518976" class="indexterm"></a> +</Files></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225474335920" class="indexterm"></a> <code class="option">Action</code> </span></dt><dd><div class="para"> The <code class="option">Action</code> directive allows you to specify a CGI script to be executed when a certain media type is requested. It takes the following form: </div><pre class="programlisting">Action <em class="replaceable"><code>content-type</code></em> <em class="replaceable"><code>path</code></em></pre><div class="para"> The <em class="replaceable"><code>content-type</code></em> has to be a valid MIME type such as <code class="literal">text/html</code>, <code class="literal">image/png</code>, or <code class="literal">application/pdf</code>. The <em class="replaceable"><code>path</code></em> refers to an existing CGI script, and must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/cgi-bin/process-image.cgi</code>). - </div><div class="example" id="example-apache-httpdconf-action"><h6>Example 10.8. Using the Action directive</h6><div class="example-contents"><pre class="programlisting">Action image/png /cgi-bin/process-image.cgi</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263458727440" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-action"><h6>Example 10.8. Using the Action directive</h6><div class="example-contents"><pre class="programlisting">Action image/png /cgi-bin/process-image.cgi</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225464789360" class="indexterm"></a> <code class="option">AddDescription</code> </span></dt><dd><div class="para"> The <code class="option">AddDescription</code> directive allows you to specify a short description to be displayed in server-generated directory listings for a given file. It takes the following form: </div><pre class="programlisting">AddDescription "<em class="replaceable"><code>description</code></em>" <em class="replaceable"><code>filename</code></em>…</pre><div class="para"> The <em class="replaceable"><code>description</code></em> should be a short text enclosed in double quotes (that is, <code class="literal">"</code>). The <em class="replaceable"><code>filename</code></em> can be a full file name, a file extension, or a wildcard expression. - </div><div class="example" id="example-apache-httpdconf-adddescription"><h6>Example 10.9. Using the AddDescription directive</h6><div class="example-contents"><pre class="programlisting">AddDescription "GZIP compressed tar archive" .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263439876512" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-adddescription"><h6>Example 10.9. Using the AddDescription directive</h6><div class="example-contents"><pre class="programlisting">AddDescription "GZIP compressed tar archive" .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225460256560" class="indexterm"></a> <code class="option">AddEncoding</code> </span></dt><dd><div class="para"> The <code class="option">AddEncoding</code> directive allows you to specify an encoding type for a particular file extension. It takes the following form: </div><pre class="programlisting">AddEncoding <em class="replaceable"><code>encoding</code></em> <em class="replaceable"><code>extension</code></em>…</pre><div class="para"> The <em class="replaceable"><code>encoding</code></em> has to be a valid MIME encoding such as <code class="literal">x-compress</code>, <code class="literal">x-gzip</code>, etc. The <em class="replaceable"><code>extension</code></em> is a case sensitive file extension, and is conventionally written with a leading dot (for example, <code class="literal">.gz</code>). </div><div class="para"> This directive is typically used to instruct web browsers to decompress certain file types as they are downloaded. - </div><div class="example" id="example-apache-httpdconf-addencoding"><h6>Example 10.10. Using the AddEncoding directive</h6><div class="example-contents"><pre class="programlisting">AddEncoding x-gzip .gz .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263518252512" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addencoding"><h6>Example 10.10. Using the AddEncoding directive</h6><div class="example-contents"><pre class="programlisting">AddEncoding x-gzip .gz .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225470270784" class="indexterm"></a> <code class="option">AddHandler</code> </span></dt><dd><div class="para"> The <code class="option">AddHandler</code> directive allows you to map certain file extensions to a selected handler. It takes the following form: </div><pre class="programlisting">AddHandler <em class="replaceable"><code>handler</code></em> <em class="replaceable"><code>extension</code></em>…</pre><div class="para"> The <em class="replaceable"><code>handler</code></em> has to be a name of previously defined handler. The <em class="replaceable"><code>extension</code></em> is a case sensitive file extension, and is conventionally written with a leading dot (for example, <code class="literal">.cgi</code>). </div><div class="para"> This directive is typically used to treat files with the <code class="filename">.cgi</code> extension as CGI scripts regardless of the directory they are in. Additionally, it is also commonly used to process server-parsed HTML and image-map files. - </div><div class="example" id="example-apache-httpdconf-addhandler"><h6>Example 10.11. Using the AddHandler option</h6><div class="example-contents"><pre class="programlisting">AddHandler cgi-script .cgi</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263480812384" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addhandler"><h6>Example 10.11. Using the AddHandler option</h6><div class="example-contents"><pre class="programlisting">AddHandler cgi-script .cgi</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225458963984" class="indexterm"></a> <code class="option">AddIcon</code> </span></dt><dd><div class="para"> The <code class="option">AddIcon</code> directive allows you to specify an icon to be displayed for a particular file in server-generated directory listings. It takes the following form: </div><pre class="programlisting">AddIcon <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>pattern</code></em>…</pre><div class="para"> @@ -2986,34 +2986,34 @@ Syntax OK</pre><div class="para"> <code class="option">^^BLANKICON^^</code> </td><td class=""> Represents a blank line. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-addicon"><h6>Example 10.12. Using the AddIcon directive</h6><div class="example-contents"><pre class="programlisting">AddIcon /icons/text.png .txt README</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263519048528" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-addicon"><h6>Example 10.12. Using the AddIcon directive</h6><div class="example-contents"><pre class="programlisting">AddIcon /icons/text.png .txt README</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225449007936" class="indexterm"></a> <code class="option">AddIconByEncoding</code> </span></dt><dd><div class="para"> The <code class="option">AddIconByEncoding</code> directive allows you to specify an icon to be displayed for a particular encoding type in server-generated directory listings. It takes the following form: </div><pre class="programlisting">AddIconByEncoding <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>encoding</code></em>…</pre><div class="para"> The <em class="replaceable"><code>path</code></em> refers to an existing icon file, and must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/icons/compressed.png</code>). The <em class="replaceable"><code>encoding</code></em> has to be a valid MIME encoding such as <code class="literal">x-compress</code>, <code class="literal">x-gzip</code>, etc. - </div><div class="example" id="example-apache-httpdconf-addiconbyencoding"><h6>Example 10.13. Using the AddIconByEncoding directive</h6><div class="example-contents"><pre class="programlisting">AddIconByEncoding /icons/compressed.png x-compress x-gzip</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263481340384" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addiconbyencoding"><h6>Example 10.13. Using the AddIconByEncoding directive</h6><div class="example-contents"><pre class="programlisting">AddIconByEncoding /icons/compressed.png x-compress x-gzip</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225477004192" class="indexterm"></a> <code class="option">AddIconByType</code> </span></dt><dd><div class="para"> The <code class="option">AddIconByType</code> directive allows you to specify an icon to be displayed for a particular media type in server-generated directory listings. It takes the following form: </div><pre class="programlisting">AddIconByType <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>content-type</code></em>…</pre><div class="para"> The <em class="replaceable"><code>path</code></em> refers to an existing icon file, and must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/icons/text.png</code>). The <em class="replaceable"><code>content-type</code></em> has to be either a valid MIME type (for example, <code class="literal">text/html</code> or <code class="literal">image/png</code>), or a wildcard expression such as <code class="literal">text/*</code>, <code class="literal">image/*</code>, etc. - </div><div class="example" id="example-apache-httpdconf-addiconbytype"><h6>Example 10.14. Using the AddIconByType directive</h6><div class="example-contents"><pre class="programlisting">AddIconByType /icons/video.png video/*</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263489417760" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addiconbytype"><h6>Example 10.14. Using the AddIconByType directive</h6><div class="example-contents"><pre class="programlisting">AddIconByType /icons/video.png video/*</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225468231488" class="indexterm"></a> <code class="option">AddLanguage</code> </span></dt><dd><div class="para"> The <code class="option">AddLanguage</code> directive allows you to associate a file extension with a specific language. It takes the following form: </div><pre class="programlisting">AddLanguage <em class="replaceable"><code>language</code></em> <em class="replaceable"><code>extension</code></em>…</pre><div class="para"> The <em class="replaceable"><code>language</code></em> has to be a valid MIME language such as <code class="literal">cs</code>, <code class="literal">en</code>, or <code class="literal">fr</code>. The <em class="replaceable"><code>extension</code></em> is a case sensitive file extension, and is conventionally written with a leading dot (for example, <code class="literal">.cs</code>). </div><div class="para"> This directive is especially useful for web servers that serve content in multiple languages based on the client's language settings. - </div><div class="example" id="example-apache-httpdconf-addlanguage"><h6>Example 10.15. Using the AddLanguage directive</h6><div class="example-contents"><pre class="programlisting">AddLanguage cs .cs .cz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263433366464" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addlanguage"><h6>Example 10.15. Using the AddLanguage directive</h6><div class="example-contents"><pre class="programlisting">AddLanguage cs .cs .cz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225393712480" class="indexterm"></a> <code class="option">AddType</code> </span></dt><dd><div class="para"> The <code class="option">AddType</code> directive allows you to define or override the media type for a particular file extension. It takes the following form: </div><pre class="programlisting">AddType <em class="replaceable"><code>content-type</code></em> <em class="replaceable"><code>extension</code></em>…</pre><div class="para"> The <em class="replaceable"><code>content-type</code></em> has to be a valid MIME type such as <code class="literal">text/html</code>, <code class="literal">image/png</code>, etc. The <em class="replaceable"><code>extension</code></em> is a case sensitive file extension, and is conventionally written with a leading dot (for example, <code class="literal">.cs</code>). - </div><div class="example" id="example-apache-httpdconf-addtype"><h6>Example 10.16. Using the AddType directive</h6><div class="example-contents"><pre class="programlisting">AddType application/x-gzip .gz .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263423762672" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-addtype"><h6>Example 10.16. Using the AddType directive</h6><div class="example-contents"><pre class="programlisting">AddType application/x-gzip .gz .tgz</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225404077600" class="indexterm"></a> <code class="option">Alias</code> </span></dt><dd><div class="para"> The <code class="option">Alias</code> directive allows you to refer to files and directories outside the default directory specified by the <code class="option">DocumentRoot</code> directive. It takes the following form: </div><pre class="programlisting">Alias <em class="replaceable"><code>url-path</code></em> <em class="replaceable"><code>real-path</code></em></pre><div class="para"> The <em class="replaceable"><code>url-path</code></em> must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/images/</code>). The <em class="replaceable"><code>real-path</code></em> is a full path to a file or directory in the local file system. - </div><a id="idm263489422528" class="indexterm"></a><div class="para"> + </div><a id="idm225461919792" class="indexterm"></a><div class="para"> This directive is typically followed by the <code class="option">Directory</code> tag with additional permissions to access the target directory. By default, the <code class="literal">/icons/</code> alias is created so that the icons from <code class="filename">/var/www/icons/</code> are displayed in server-generated directory listings. </div><div class="example" id="example-apache-httpdconf-alias"><h6>Example 10.17. Using the Alias directive</h6><div class="example-contents"><pre class="programlisting">Alias /icons/ /var/www/icons/ @@ -3022,13 +3022,13 @@ Syntax OK</pre><div class="para"> AllowOverride None Order allow,deny Allow from all -<Directory></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263457998736" class="indexterm"></a> +<Directory></pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225467753760" class="indexterm"></a> <code class="option">Allow</code></span></dt><dd><div class="para"> The <code class="option">Allow</code> directive allows you to specify which clients have permission to access a given directory. It takes the following form: </div><pre class="programlisting">Allow from <em class="replaceable"><code>client</code></em>…</pre><div class="para"> The <em class="replaceable"><code>client</code></em> can be a domain name, an IP address (both full and partial), a <em class="replaceable"><code>network</code></em>/<em class="replaceable"><code>netmask</code></em> pair, or <code class="literal">all</code> for all clients. - </div><div class="example" id="example-apache-httpdconf-allow"><h6>Example 10.18. Using the Allow directive</h6><div class="example-contents"><pre class="programlisting">Allow from 192.168.1.0/255.255.255.0</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263487466672" class="indexterm"></a> - <code class="option">AllowOverride</code> </span></dt><dd><a id="idm263487467312" class="indexterm"></a><a id="idm263487469920" class="indexterm"></a><div class="para"> + </div><div class="example" id="example-apache-httpdconf-allow"><h6>Example 10.18. Using the Allow directive</h6><div class="example-contents"><pre class="programlisting">Allow from 192.168.1.0/255.255.255.0</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225437880480" class="indexterm"></a> + <code class="option">AllowOverride</code> </span></dt><dd><a id="idm225441879536" class="indexterm"></a><a id="idm225441883056" class="indexterm"></a><div class="para"> The <code class="option">AllowOverride</code> directive allows you to specify which directives in a <code class="filename">.htaccess</code> file can override the default configuration. It takes the following form: </div><pre class="programlisting">AllowOverride <em class="replaceable"><code>type</code></em>…</pre><div class="para"> The <em class="replaceable"><code>type</code></em> has to be one of the available grouping options as described in <a class="xref" href="#table-apache-httpdconf-allowoverride">Table 10.4, “Available AllowOverride options”</a>. @@ -3064,24 +3064,24 @@ Syntax OK</pre><div class="para"> <code class="option">Options</code>[<span class="optional">=<em class="replaceable"><code>option</code></em>,…</span>] </td><td class=""> Allows the use of the <code class="option">Options</code> directive. Additionally, you can provide a comma-separated list of options to customize which options can be set using this directive. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-allowoverride"><h6>Example 10.19. Using the AllowOverride directive</h6><div class="example-contents"><pre class="programlisting">AllowOverride FileInfo AuthConfig Limit</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263496964800" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-allowoverride"><h6>Example 10.19. Using the AllowOverride directive</h6><div class="example-contents"><pre class="programlisting">AllowOverride FileInfo AuthConfig Limit</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225443708080" class="indexterm"></a> <code class="option">BrowserMatch</code> </span></dt><dd><div class="para"> The <code class="option">BrowserMatch</code> directive allows you to modify the server behavior based on the client's web browser type. It takes the following form: </div><pre class="programlisting">BrowserMatch <em class="replaceable"><code>pattern</code></em> <em class="replaceable"><code>variable</code></em>…</pre><div class="para"> The <em class="replaceable"><code>pattern</code></em> is a regular expression to match the User-Agent HTTP header field. The <em class="replaceable"><code>variable</code></em> is an environment variable that is set when the header field matches the pattern. </div><div class="para"> By default, this directive is used to deny connections to specific browsers with known issues, and to disable keepalives and HTTP header flushes for browsers that are known to have problems with these actions. - </div><div class="example" id="example-apache-httpdconf-browsermatch"><h6>Example 10.20. Using the BrowserMatch directive</h6><div class="example-contents"><pre class="programlisting">BrowserMatch "Mozilla/2" nokeepalive</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263474821920" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-browsermatch"><h6>Example 10.20. Using the BrowserMatch directive</h6><div class="example-contents"><pre class="programlisting">BrowserMatch "Mozilla/2" nokeepalive</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225427578544" class="indexterm"></a> <code class="option">CacheDefaultExpire</code> </span></dt><dd><div class="para"> The <code class="option">CacheDefaultExpire</code> option allows you to set how long to cache a document that does not have any expiration date or the date of its last modification specified. It takes the following form: </div><pre class="programlisting">CacheDefaultExpire <em class="replaceable"><code>time</code></em></pre><div class="para"> The <em class="replaceable"><code>time</code></em> is specified in seconds. The default option is <code class="literal">3600</code> (that is, one hour). - </div><div class="example" id="example-apache-httpdconf-cachedefaultexpire"><h6>Example 10.21. Using the CacheDefaultExpire directive</h6><div class="example-contents"><pre class="programlisting">CacheDefaultExpire 3600</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263488083232" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-cachedefaultexpire"><h6>Example 10.21. Using the CacheDefaultExpire directive</h6><div class="example-contents"><pre class="programlisting">CacheDefaultExpire 3600</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225461561472" class="indexterm"></a> <code class="option">CacheDisable</code> </span></dt><dd><div class="para"> The <code class="option">CacheDisable</code> directive allows you to disable caching of certain URLs. It takes the following form: </div><pre class="programlisting">CacheDisable <em class="replaceable"><code>path</code></em></pre><div class="para"> The <em class="replaceable"><code>path</code></em> must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/files/</code>). - </div><div class="example" id="example-apache-httpdconf-cachedisable"><h6>Example 10.22. Using the CacheDisable directive</h6><div class="example-contents"><pre class="programlisting">CacheDisable /temporary</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263477862016" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-cachedisable"><h6>Example 10.22. Using the CacheDisable directive</h6><div class="example-contents"><pre class="programlisting">CacheDisable /temporary</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225500904960" class="indexterm"></a> <code class="option">CacheEnable</code> </span></dt><dd><div class="para"> The <code class="option">CacheEnable</code> directive allows you to specify a cache type to be used for certain URLs. It takes the following form: </div><pre class="programlisting">CacheEnable <em class="replaceable"><code>type</code></em> <em class="replaceable"><code>url</code></em></pre><div class="para"> @@ -3102,17 +3102,17 @@ Syntax OK</pre><div class="para"> <code class="option">fd</code> </td><td class=""> The file descriptor cache. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-cacheenable"><h6>Example 10.23. Using the CacheEnable directive</h6><div class="example-contents"><pre class="programlisting">CacheEnable disk /</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263452913680" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-cacheenable"><h6>Example 10.23. Using the CacheEnable directive</h6><div class="example-contents"><pre class="programlisting">CacheEnable disk /</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225475480592" class="indexterm"></a> <code class="option">CacheLastModifiedFactor</code> </span></dt><dd><div class="para"> The <code class="option">CacheLastModifiedFactor</code> directive allows you to customize how long to cache a document that does not have any expiration date specified, but that provides information about the date of its last modification. It takes the following form: </div><pre class="programlisting">CacheLastModifiedFactor <em class="replaceable"><code>number</code></em></pre><div class="para"> The <em class="replaceable"><code>number</code></em> is a coefficient to be used to multiply the time that passed since the last modification of the document. The default option is <code class="literal">0.1</code> (that is, one tenth). - </div><div class="example" id="example-apache-httpdconf-cachelastmodifiedfactor"><h6>Example 10.24. Using the CacheLastModifiedFactor directive</h6><div class="example-contents"><pre class="programlisting">CacheLastModifiedFactor 0.1</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263423721904" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-cachelastmodifiedfactor"><h6>Example 10.24. Using the CacheLastModifiedFactor directive</h6><div class="example-contents"><pre class="programlisting">CacheLastModifiedFactor 0.1</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225442706624" class="indexterm"></a> <code class="option">CacheMaxExpire</code> </span></dt><dd><div class="para"> The <code class="option">CacheMaxExpire</code> directive allows you to specify the maximum amount of time to cache a document. It takes the following form: </div><pre class="programlisting">CacheMaxExpire <em class="replaceable"><code>time</code></em></pre><div class="para"> The <em class="replaceable"><code>time</code></em> is specified in seconds. The default option is <code class="literal">86400</code> (that is, one day). - </div><div class="example" id="example-apache-httpdconf-cachemaxexpire"><h6>Example 10.25. Using the CacheMaxExpire directive</h6><div class="example-contents"><pre class="programlisting">CacheMaxExpire 86400</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263444501728" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-cachemaxexpire"><h6>Example 10.25. Using the CacheMaxExpire directive</h6><div class="example-contents"><pre class="programlisting">CacheMaxExpire 86400</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225491322416" class="indexterm"></a> <code class="option">CacheNegotiatedDocs</code> </span></dt><dd><div class="para"> The <code class="option">CacheNegotiatedDocs</code> directive allows you to enable caching of the documents that were negotiated on the basis of content. It takes the following form: </div><pre class="programlisting">CacheNegotiatedDocs <em class="replaceable"><code>option</code></em></pre><div class="para"> @@ -3129,53 +3129,53 @@ Syntax OK</pre><div class="para"> <code class="option">Off</code> </td><td class=""> Disables caching the content-negotiated documents. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-cachenegotiateddocs"><h6>Example 10.26. Using the CacheNegotiatedDocs directive</h6><div class="example-contents"><pre class="programlisting">CacheNegotiatedDocs On</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263456273120" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-cachenegotiateddocs"><h6>Example 10.26. Using the CacheNegotiatedDocs directive</h6><div class="example-contents"><pre class="programlisting">CacheNegotiatedDocs On</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225492843376" class="indexterm"></a> <code class="option">CacheRoot</code> </span></dt><dd><div class="para"> The <code class="option">CacheRoot</code> directive allows you to specify the directory to store cache files in. It takes the following form: - </div><pre class="programlisting">CacheRoot <em class="replaceable"><code>directory</code></em></pre><a id="idm263456278528" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">CacheRoot <em class="replaceable"><code>directory</code></em></pre><a id="idm225449973792" class="indexterm"></a><div class="para"> The <em class="replaceable"><code>directory</code></em> must be a full path to an existing directory in the local file system. The default option is <code class="filename">/var/cache/mod_proxy/</code>. - </div><div class="example" id="example-apache-httpdconf-cacheroot"><h6>Example 10.27. Using the CacheRoot directive</h6><div class="example-contents"><pre class="programlisting">CacheRoot /var/cache/mod_proxy</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263449968112" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-cacheroot"><h6>Example 10.27. Using the CacheRoot directive</h6><div class="example-contents"><pre class="programlisting">CacheRoot /var/cache/mod_proxy</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225459944016" class="indexterm"></a> <code class="option">CustomLog</code> </span></dt><dd><div class="para"> The <code class="option">CustomLog</code> directive allows you to specify the log file name and the log file format. It takes the following form: - </div><pre class="programlisting">CustomLog <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>format</code></em></pre><a id="idm263514629936" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">CustomLog <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>format</code></em></pre><a id="idm225439891168" class="indexterm"></a><div class="para"> The <em class="replaceable"><code>path</code></em> refers to a log file, and must be relative to the directory that is specified by the <code class="option">ServerRoot</code> directive (that is, <code class="filename">/etc/httpd/</code> by default). The <em class="replaceable"><code>format</code></em> has to be either an explicit format string, or a format name that was previously defined using the <code class="option">LogFormat</code> directive. - </div><div class="example" id="example-apache-httpdconf-customlog"><h6>Example 10.28. Using the CustomLog directive</h6><div class="example-contents"><pre class="programlisting">CustomLog logs/access_log combined</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263514637504" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-customlog"><h6>Example 10.28. Using the CustomLog directive</h6><div class="example-contents"><pre class="programlisting">CustomLog logs/access_log combined</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225422669568" class="indexterm"></a> <code class="option">DefaultIcon</code> </span></dt><dd><div class="para"> The <code class="option">DefaultIcon</code> directive allows you to specify an icon to be displayed for a file in server-generated directory listings when no other icon is associated with it. It takes the following form: </div><pre class="programlisting">DefaultIcon <em class="replaceable"><code>path</code></em></pre><div class="para"> The <em class="replaceable"><code>path</code></em> refers to an existing icon file, and must be relative to the directory specified by the <code class="option">DocumentRoot</code> directive (for example, <code class="literal">/icons/unknown.png</code>). - </div><div class="example" id="example-apache-httpdconf-defaulticon"><h6>Example 10.29. Using the DefaultIcon directive</h6><div class="example-contents"><pre class="programlisting">DefaultIcon /icons/unknown.png</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263475580496" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-defaulticon"><h6>Example 10.29. Using the DefaultIcon directive</h6><div class="example-contents"><pre class="programlisting">DefaultIcon /icons/unknown.png</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225443689472" class="indexterm"></a> <code class="option">DefaultType</code> </span></dt><dd><div class="para"> The <code class="option">DefaultType</code> directive allows you to specify a media type to be used in case the proper MIME type cannot be determined by the server. It takes the following form: </div><pre class="programlisting">DefaultType <em class="replaceable"><code>content-type</code></em></pre><div class="para"> The <em class="replaceable"><code>content-type</code></em> has to be a valid MIME type such as <code class="literal">text/html</code>, <code class="literal">image/png</code>, <code class="literal">application/pdf</code>, etc. - </div><div class="example" id="example-apache-httpdconf-defaulttype"><h6>Example 10.30. Using the DefaultType directive</h6><div class="example-contents"><pre class="programlisting">DefaultType text/plain</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263392120336" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-defaulttype"><h6>Example 10.30. Using the DefaultType directive</h6><div class="example-contents"><pre class="programlisting">DefaultType text/plain</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225471864688" class="indexterm"></a> <code class="option">Deny</code> </span></dt><dd><div class="para"> The <code class="option">Deny</code> directive allows you to specify which clients are denied access to a given directory. It takes the following form: </div><pre class="programlisting">Deny from <em class="replaceable"><code>client</code></em>…</pre><div class="para"> The <em class="replaceable"><code>client</code></em> can be a domain name, an IP address (both full and partial), a <em class="replaceable"><code>network</code></em>/<em class="replaceable"><code>netmask</code></em> pair, or <code class="literal">all</code> for all clients. - </div><div class="example" id="example-apache-httpdconf-deny"><h6>Example 10.31. Using the Deny directive</h6><div class="example-contents"><pre class="programlisting">Deny from 192.168.1.1</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263480364128" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-deny"><h6>Example 10.31. Using the Deny directive</h6><div class="example-contents"><pre class="programlisting">Deny from 192.168.1.1</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225394073504" class="indexterm"></a> <code class="option">DirectoryIndex</code> </span></dt><dd><div class="para"> The <code class="option">DirectoryIndex</code> directive allows you to specify a document to be served to a client when a directory is requested (that is, when the URL ends with the <code class="literal">/</code> character). It takes the following form: </div><pre class="programlisting">DirectoryIndex <em class="replaceable"><code>filename</code></em>…</pre><div class="para"> The <em class="replaceable"><code>filename</code></em> is a name of the file to look for in the requested directory. By default, the server looks for <code class="filename">index.html</code>, and <code class="filename">index.html.var</code>. - </div><div class="example" id="example-apache-httpdconf-directoryindex"><h6>Example 10.32. Using the DirectoryIndex directive</h6><div class="example-contents"><pre class="programlisting">DirectoryIndex index.html index.html.var</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263478006384" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-directoryindex"><h6>Example 10.32. Using the DirectoryIndex directive</h6><div class="example-contents"><pre class="programlisting">DirectoryIndex index.html index.html.var</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225439282288" class="indexterm"></a> <code class="option">DocumentRoot</code> </span></dt><dd><div class="para"> The <code class="option">DocumentRoot</code> directive allows you to specify the main directory from which the content is served. It takes the following form: - </div><pre class="programlisting">DocumentRoot <em class="replaceable"><code>directory</code></em></pre><a id="idm263422988320" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">DocumentRoot <em class="replaceable"><code>directory</code></em></pre><a id="idm225439286544" class="indexterm"></a><div class="para"> The <em class="replaceable"><code>directory</code></em> must be a full path to an existing directory in the local file system. The default option is <code class="filename">/var/www/html/</code>. - </div><div class="example" id="example-apache-httpdconf-documentroot"><h6>Example 10.33. Using the DocumentRoot directive</h6><div class="example-contents"><pre class="programlisting">DocumentRoot /var/www/html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263491546528" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-documentroot"><h6>Example 10.33. Using the DocumentRoot directive</h6><div class="example-contents"><pre class="programlisting">DocumentRoot /var/www/html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225450555056" class="indexterm"></a> <code class="option">ErrorDocument</code> </span></dt><dd><div class="para"> The <code class="option">ErrorDocument</code> directive allows you to specify a document or a message to be displayed as a response to a particular error. It takes the following form: </div><pre class="programlisting">ErrorDocument <em class="replaceable"><code>error-code</code></em> <em class="replaceable"><code>action</code></em></pre><div class="para"> The <em class="replaceable"><code>error-code</code></em> has to be a valid code such as <code class="literal">403</code> (Forbidden), <code class="literal">404</code> (Not Found), or <code class="literal">500</code> (Internal Server Error). The <em class="replaceable"><code>action</code></em> can be either a URL (both local and external), or a message string enclosed in double quotes (that is, <code class="literal">"</code>). </div><div class="example" id="example-apache-httpdconf-errordocument"><h6>Example 10.34. Using the ErrorDocument directive</h6><div class="example-contents"><pre class="programlisting">ErrorDocument 403 "Access Denied" -ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263464021536" class="indexterm"></a> +ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225497189440" class="indexterm"></a> <code class="option">ErrorLog</code> </span></dt><dd><div class="para"> The <code class="option">ErrorLog</code> directive allows you to specify a file to which the server errors are logged. It takes the following form: - </div><pre class="programlisting">ErrorLog <em class="replaceable"><code>path</code></em></pre><a id="idm263464026848" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">ErrorLog <em class="replaceable"><code>path</code></em></pre><a id="idm225445371840" class="indexterm"></a><div class="para"> The <em class="replaceable"><code>path</code></em> refers to a log file, and can be either absolute, or relative to the directory that is specified by the <code class="option">ServerRoot</code> directive (that is, <code class="filename">/etc/httpd/</code> by default). The default option is <code class="filename">logs/error_log</code> - </div><div class="example" id="example-apache-httpdconf-errorlog"><h6>Example 10.35. Using the ErrorLog directive</h6><div class="example-contents"><pre class="programlisting">ErrorLog logs/error_log</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263477625936" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-errorlog"><h6>Example 10.35. Using the ErrorLog directive</h6><div class="example-contents"><pre class="programlisting">ErrorLog logs/error_log</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225469922704" class="indexterm"></a> <code class="option">ExtendedStatus</code> </span></dt><dd><div class="para"> The <code class="option">ExtendedStatus</code> directive allows you to enable detailed server status information. It takes the following form: </div><pre class="programlisting">ExtendedStatus <em class="replaceable"><code>option</code></em></pre><div class="para"> @@ -3192,19 +3192,19 @@ ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" <code class="option">Off</code> </td><td class=""> Disables generating the detailed server status. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-extendedstatus"><h6>Example 10.36. Using the ExtendedStatus directive</h6><div class="example-contents"><pre class="programlisting">ExtendedStatus On</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263465014912" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-extendedstatus"><h6>Example 10.36. Using the ExtendedStatus directive</h6><div class="example-contents"><pre class="programlisting">ExtendedStatus On</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225393309776" class="indexterm"></a> <code class="option">Group</code> </span></dt><dd><div class="para"> The <code class="option">Group</code> directive allows you to specify the group under which the <code class="systemitem">httpd</code> service will run. It takes the following form: </div><pre class="programlisting">Group <em class="replaceable"><code>group</code></em></pre><div class="para"> The <em class="replaceable"><code>group</code></em> has to be an existing UNIX group. The default option is <code class="option">apache</code>. </div><div class="para"> Note that <code class="option">Group</code> is no longer supported inside <code class="option"><VirtualHost></code>, and has been replaced by the <code class="option">SuexecUserGroup</code> directive. - </div><div class="example" id="example-apache-httpdconf-group"><h6>Example 10.37. Using the Group directive</h6><div class="example-contents"><pre class="programlisting">Group apache</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263484050496" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-group"><h6>Example 10.37. Using the Group directive</h6><div class="example-contents"><pre class="programlisting">Group apache</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225453209376" class="indexterm"></a> <code class="option">HeaderName</code> </span></dt><dd><div class="para"> The <code class="option">HeaderName</code> directive allows you to specify a file to be prepended to the beginning of the server-generated directory listing. It takes the following form: </div><pre class="programlisting">HeaderName <em class="replaceable"><code>filename</code></em></pre><div class="para"> The <em class="replaceable"><code>filename</code></em> is a name of the file to look for in the requested directory. By default, the server looks for <code class="filename">HEADER.html</code>. - </div><div class="example" id="example-apache-httpdconf-headername"><h6>Example 10.38. Using the HeaderName directive</h6><div class="example-contents"><pre class="programlisting">HeaderName HEADER.html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263478222704" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-headername"><h6>Example 10.38. Using the HeaderName directive</h6><div class="example-contents"><pre class="programlisting">HeaderName HEADER.html</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225457231136" class="indexterm"></a> <code class="option">HostnameLookups</code> </span></dt><dd><div class="para"> The <code class="option">HostnameLookups</code> directive allows you to enable automatic resolving of IP addresses. It takes the following form: </div><pre class="programlisting">HostnameLookups <em class="replaceable"><code>option</code></em></pre><div class="para"> @@ -3227,17 +3227,17 @@ ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" Disables resolving the IP address for each connection. </td></tr></tbody></table></div></div><br class="table-break" /><div class="para"> Note that when the presence of hostnames is required in server log files, it is often possible to use one of the many log analyzer tools that perform the DNS lookups more efficiently. - </div><div class="example" id="example-apache-httpdconf-hostnamelookups"><h6>Example 10.39. Using the HostnameLookups directive</h6><div class="example-contents"><pre class="programlisting">HostnameLookups Off</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263491069584" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-hostnamelookups"><h6>Example 10.39. Using the HostnameLookups directive</h6><div class="example-contents"><pre class="programlisting">HostnameLookups Off</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225470777504" class="indexterm"></a> <code class="option">Include</code> </span></dt><dd><div class="para"> The <code class="option">Include</code> directive allows you to include other configuration files. It takes the following form: - </div><pre class="programlisting">Include <em class="replaceable"><code>filename</code></em></pre><a id="idm263463868944" class="indexterm"></a><div class="para"> + </div><pre class="programlisting">Include <em class="replaceable"><code>filename</code></em></pre><a id="idm225452981472" class="indexterm"></a><div class="para"> The <code class="option">filename</code> can be an absolute path, a path relative to the directory specified by the <code class="option">ServerRoot</code> directive, or a wildcard expression. All configuration files from the <code class="filename">/etc/httpd/conf.d/</code> directory are loaded by default. - </div><div class="example" id="example-apache-httpdconf-include"><h6>Example 10.40. Using the Include directive</h6><div class="example-contents"><pre class="programlisting">Include conf.d/*.conf</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263463874816" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-include"><h6>Example 10.40. Using the Include directive</h6><div class="example-contents"><pre class="programlisting">Include conf.d/*.conf</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225473172208" class="indexterm"></a> <code class="option">IndexIgnore</code> </span></dt><dd><div class="para"> The <code class="option">IndexIgnore</code> directive allows you to specify a list of file names to be omitted from the server-generated directory listings. It takes the following form: </div><pre class="programlisting">IndexIgnore <em class="replaceable"><code>filename</code></em>…</pre><div class="para"> The <em class="replaceable"><code>filename</code></em> option can be either a full file name, or a wildcard expression. - </div><div class="example" id="example-apache-httpdconf-indexignore"><h6>Example 10.41. Using the IndexIgnore directive</h6><div class="example-contents"><pre class="programlisting">IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263483471088" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-indexignore"><h6>Example 10.41. Using the IndexIgnore directive</h6><div class="example-contents"><pre class="programlisting">IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225439079216" class="indexterm"></a> <code class="option">IndexOptions</code> </span></dt><dd><div class="para"> The <code class="option">IndexOptions</code> directive allows you to customize the behavior of server-generated directory listings. It takes the following form: </div><pre class="programlisting">IndexOptions <em class="replaceable"><code>option</code></em>…</pre><div class="para"> @@ -3342,7 +3342,7 @@ ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" <code class="option">XHTML</code> </td><td class=""> Enables the use of XHTML 1.0 instead of the default HTML 3.2. - </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-indexoptions"><h6>Example 10.42. Using the IndexOptions directive</h6><div class="example-contents"><pre class="programlisting">IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable Charset=UTF-8</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263441920640" class="indexterm"></a> + </td></tr></tbody></table></div></div><br class="table-break" /><div class="example" id="example-apache-httpdconf-indexoptions"><h6>Example 10.42. Using the IndexOptions directive</h6><div class="example-contents"><pre class="programlisting">IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable Charset=UTF-8</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225472731728" class="indexterm"></a> <code class="option">KeepAlive</code> </span></dt><dd><div class="para"> The <code class="option">KeepAlive</code> directive allows you to enable persistent connections. It takes the following form: </div><pre class="programlisting">KeepAlive <em class="replaceable"><code>option</code></em></pre><div class="para"> @@ -3361,33 +3361,33 @@ ErrorDocument 404 /404-not_found.html</pre></div></div><br class="example-break" Disables the keep-alive connections. </td></tr></tbody></table></div></div><br class="table-break" /><div class="para"> Note that when the persistent connections are enabled, on a busy server, the number of child processes can increase rapidly and eventually reach the maximum limit, slowing down the server significantly. To reduce the risk, it is recommended that you set <code class="option">KeepAliveTimeout</code> to a low number, and monitor the <code class="filename">/var/log/httpd/logs/error_log</code> log file carefully. - </div><div class="example" id="example-apache-httpdconf-keepalive"><h6>Example 10.43. Using the KeepAlive directive</h6><div class="example-contents"><pre class="programlisting">KeepAlive Off</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm263462667424" class="indexterm"></a> + </div><div class="example" id="example-apache-httpdconf-keepalive"><h6>Example 10.43. Using the KeepAlive directive</h6><div class="example-contents"><pre class="programlisting">KeepAlive Off</pre></div></div><br class="example-break" /></dd><dt class="varlistentry"><span class="term"> <a id="idm225434499136" class="indexterm"></a> <code class="option">KeepAliveTimeout</code> </span></dt><dd><div class="para"> The <code class="option">KeepAliveTimeout</code> directive allows you to specify the amount of time to wait for another request before closing the connection. It takes the following form: </div><pre class="programlisting">KeepAliveTimeout <em class="replaceable"><code>time</code></em></pre><di

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

docs-commits June 2016