Pro Ubuntu Server Administration (Expert's Voice in Linux)

Pro Ubuntu Server Administration teaches you advanced Ubuntu system building. After reading this book, you will be able to manage anything from simple file servers to multiple virtual servers to high–availability clusters. This is the capstone volume of the Apress Ubuntu trilogy that includes Beginning Ubuntu Linux, Third Edition and Beginning Ubuntu Server LTS Administration: From Novice to Professional, Second Edition . You will be able to make Ubuntu technology shine in a Fortune 500 environment and let Ubuntu server become the backbone of your infrastructure. Topics covered include Performance monitoring and optimization High–availability clustering Advanced Lightweight Directory Access Protocol (LDAP) integrated networking What you’ll learn Monitor Ubuntu Server software and the hardware it is running on. Make Ubuntu Server fly by careful optimization. Learn how to craft high–availability clusters. Ease your way into large–scale LDAP networking. Acquire the skills to adjust Ubuntu Server to the security needs of a Fortune 500 environment. Run your own Ubuntu application server. Who this book is for Anyone who administers Linux servers and wants to know enough about Ubuntu to make it fly. 1430216220......Page 1 Contents......Page 6 Foreword......Page 14 About the Author......Page 16 About the Technical Reviewer......Page 17 Introduction......Page 18 What's So Special About an Enterprise Installation?......Page 19 Connection to a SAN......Page 20 Preparing for the Installation in a Network......Page 21 Which RAID?......Page 22 Choosing a File System......Page 23 Installing Ubuntu Server......Page 25 Starting the Installation......Page 26 Creating a Software- Based RAID Solution......Page 27 Creating LVM Logical Volumes on Top of a Software RAID Device......Page 34 Completing the Installation......Page 40 Setting Up NIC Bonding......Page 42 Setting Up Multipathing......Page 44 Summary......Page 46 Setting Up a Clonezilla Imaging Server......Page 47 Setting Up Diskless Remote Boot in Linux......Page 48 Installing the DRBL Software......Page 49 Configuring the DRBL Software......Page 50 Setting Up the DHCP Server......Page 51 Completing Clonezilla Configuration......Page 53 Configuring the Clients for Cloning......Page 54 Setting Up the Server for Cloning......Page 55 Cloning the Client......Page 57 Summary......Page 61 Interpreting What Your Computer Is Doing: top......Page 62 CPU Monitoring with top......Page 63 CPU Performance Monitoring......Page 65 Memory Monitoring with top......Page 66 Process Monitoring with top......Page 67 Analyzing CPU Performance......Page 68 Finding Memory Problems......Page 74 Monitoring Storage Performance......Page 82 Monitoring Network Performance......Page 90 Performance Baselining......Page 97 Summary......Page 98 About /proc and sysctl......Page 99 Applying a Simple Test......Page 101 Understanding CPU Performance......Page 103 Optimizing CPU Performance......Page 104 Understanding Memory Performance......Page 107 Optimizing Memory Usage......Page 108 Understanding Storage Performance......Page 112 Optimizing the I/O Scheduler......Page 113 Tuning Kernel Parameters......Page 114 Optimizing TCP/IP......Page 116 Some Hints on Samba and NFS Performance Optimization......Page 121 Generic Network Performance Optimization Tips......Page 122 Summary......Page 123 Understanding File Systems......Page 124 Inodes and Directories......Page 125 Superblocks, Inode Bitmaps, and Block Bitmaps......Page 127 Journaling......Page 129 Indexing......Page 130 Optimizing Ext2/Ext3......Page 131 Tuning XFS......Page 139 What About ReiserFS?......Page 143 Summary......Page 145 Starting with Nagios......Page 146 Location of the Configuration Files......Page 150 The Master Configuration File: nagios.cfg......Page 151 Creating Essential Nagios Configuration Files......Page 153 Configuring NRPE on the Monitored Server......Page 167 Configuring the Nagios Server to Use NRPE......Page 169 Managing Nagios......Page 170 Summary......Page 174 CHAPTER 7: Creating an Open Source SAN......Page 175 Installing Required Software......Page 177 Setting Up the Distributed Replicated Block Device......Page 178 Configuring the iSCSI Target......Page 183 Configuring the iSCSI Initiator......Page 187 Setting Up the Base Cluster from /etc/ha.d/ha.cf......Page 189 Configuring Cluster Resources......Page 194 Backing Up the Cluster Configuration......Page 201 Configuring STONITH......Page 205 Heartbeat Beyond the Open Source SAN......Page 208 Summary......Page 209 Using the LDAP Directory......Page 210 Introducing OpenLDAP......Page 214 Installing OpenLDAP......Page 215 Configuring the Server......Page 216 Adding Information to the LDAP Database......Page 228 Using ldapsearch to Verify Your Configuration......Page 230 Using LDAP Management Commands......Page 233 Modifying Entries in the LDAP Database......Page 234 Changing a Password......Page 235 Configuring PAM for LDAP Authentication......Page 236 Setting Up nsswitch.conf to Find LDAP Services......Page 241 Summary......Page 243 Setting Up Samba the Easy Way......Page 244 Defining the Share......Page 245 Testing Access to the Share......Page 248 Preparing LDAP to Work with Samba......Page 249 Telling Samba to Use LDAP......Page 251 Changing the Samba Configuration File......Page 254 Creating Workstation Accounts......Page 256 Making Samba a Member of the Active Directory Domain......Page 257 Authenticating Linux Users on Windows with Winbind......Page 258 Summary......Page 260 Understanding the Components of a Mail Solution......Page 261 Configuring the Postfix MTA......Page 262 Handling Inbound and Outbound Mail......Page 263 Installing Postfix and Configuring the Initial Settings......Page 268 Configuring Postfix Further......Page 269 Managing Postfix Components......Page 274 Configuring Global Settings......Page 276 Configuring a Simple Postfix Mail Server......Page 279 Tuning Postfix with Lookup Tables......Page 281 Using Postfix Management Tools......Page 285 Receiving E-mail Using IMAP or POP3......Page 286 Fetching E-mail Using Cyrus IMAPd......Page 287 Filtering Incoming E-mail with procmail......Page 290 Getting E-mail with POP3 Using Qpopper......Page 291 Summary......Page 292 Managing Cryptography......Page 293 Public and Private Keys......Page 294 The Need for a Certificate Authority......Page 295 Creating a Certificate Authority and Server Certificates......Page 296 AppArmor Components......Page 302 Installing and Starting AppArmor......Page 305 Creating and Managing AppArmor Profiles......Page 306 Monitoring AppArmor's Status......Page 311 Summary......Page 314 Installing and Configuring OpenVPN......Page 315 VPN Networking......Page 316 Generating Certificates......Page 317 Configuring the VPN Server......Page 325 Configuring a Linux VPN Client......Page 328 Summary......Page 332 Configuring an NTP Time Server......Page 333 How NTP Works......Page 334 Customizing Your NTP Server......Page 339 Understanding Kerberos......Page 341 Installing and Configuring Kerberos......Page 342 Configuring Generic Kerberos Settings......Page 344 Configuring Simple Kerberos Applications......Page 351 Logging In with Kerberos......Page 352 Summary......Page 353 CHAPTER 14: Ubuntu Server Troubleshooting......Page 354 Identifying the Problem......Page 355 Working with init=/bin/bash......Page 362 Rescue a Broken System......Page 364 Working with a Knoppix Rescue CD......Page 368 Common Problems and How to Fix Them......Page 371 Grub Errors......Page 372 No Master Boot Record......Page 375 Partition Problems......Page 376 LVM Logical Volume Problems......Page 379 Kernel Problems......Page 386 File System Problems......Page 389 Lost Administrator Password......Page 391 Summary......Page 392 B......Page 393 C......Page 394 E......Page 397 G......Page 398 I......Page 399 L......Page 400 M......Page 401 N......Page 402 O......Page 403 P......Page 404 R......Page 405 S......Page 406 T......Page 408 X......Page 409 Building on lessons taught in Beginning Ubuntu Server Administration, Sander van Vugt’s newest book Pro Ubuntu Server Administration teaches advanced Ubuntu system building. Topics covered include managing simple file servers, virtual servers, performance monitoring and optimization, high-availability clusters, and advanced LDAP integrated networking. Ubuntu continues to lead the market in Linux server deployments—it currently has ? of the market; which is a much larger share than both SUSE and Red Hat. This is a necessary title for system administrators that need intermediate-advanced networking techniques.