Ldap client, 87 Ldap commands | HP UX Internet Express Software

modifying an external newsfeed, 231 modifying article expiration definition, 244 modifying client authentication groups, 236 modifying CNFS entries, 240

modifying expired article retention period, 245 modifying newsfeed defaults, 231

nnrpd daemon, 226

reloading configuration file, 247 removing a client access definition, 234 removing an external newsfeed, 231 specifying configuration data, 226 starting, 247

updating local active file, 232

updating the active configuration file, 228 viewing log files, 246

Web site, 31 InterNIC

Web site, 35 IP packet handling

statistics, 184 IRC server

administration, 248 configuring, 248 controlling, 248 Web site, 31

J

Jabber

Web site, 31

Java class library

,164

K

kernel tuning attribute values, 27

L

LDAP, 32

see also LDAP directory server

see also LDAP Module for System Authentication see also OpenLDAP Directory Server authentication, 87

configuring, 72

extended schema for UNIX account, 70 indexing attributes, 71

modifying entry in server database, 86 multiple servers, 65

Web site, 32 LDAP Browser, 196 installing, 197

prerequisites, 196 searching the directory, 204 user configuration file, 205

LDAP client, 87 LDAP commands

ldapmodify, 86 ldapsearch, 86

LDAP directory server, 65

see also OpenLDAP Directory Server

administration, 195 distinguished name, 195 entry, 195

high availability, 65, 195 modify entry, 86 object class, 196

relative distinguished name, 195 utilities, 78

LDAP module configuration, 73 configuring group attributes, 75 configuring password attributes, 74 defining system parameters, 73

LDAP Module for System Authentication, 65 access control, 78

adding user in C2 environment, 77 authentication actions, 87 creating branches, 69

default configuration, 66 exporting users, 77 files modified, 87 importing users, 77 importing users from NIS, 77 managing, 65

restarting, 76 starting, 76 stopping, 76 testing, 76

ldap_add_group utility, 78, 83 ldap_add_user utility, 78, 81 ldap_check utility, 78, 81 ldap_del_group utility, 78, 84 ldap_del_user utility, 82

,78

ldap_disable utility, 78, 86 ldap_enable utility, 78, 85 ldap_get_group utility, 78, 85 ldap_get_user utility, 78, 82 ldap_mod_group utility, 78, 84 ldap_passwd utility, 78, 85 ldap_sync_user utility, 78, 83 ldapcd daemon, 85

clearing cache, 85 ldapdc daemon, 88

Lightweight Directory Access Protocol see LDAP Lkr_Usr_ group, 41

log file (FireScreen) viewing, 183 login account, 23

login script template, 44 Lynx

Web site, 31

M

mail access administration, 132 mail delivery administration, 90 mail filter

adding, 109 configuring, 108 creating, 110

279

Image 279

HP UX Internet Express Software manual Ldap client, 87 Ldap commands, Log file FireScreen viewing, 183 login account, 279

Contents

Abstract Internet Express for Tru64 Unix VersionPage Contents User Authentication Mail Delivery Administration Mail Access Administration 132 Web Services Administration 155 XML Component Administration 164Network Security Administration 167 Ldap Directory Server Administration 195 Proxy Services Administration 190 OpenSLP Administration 207 FTP Server Administration 213Samba File and Print Server Administration 216 Internet Relay Chat Administration 248 InterNetNews Server Administration 225 Twiki 266 PostgreSQL Database and MySQL Administration 249Bind Domain Name Server Administration 260 Jabber 265 About This Document Intended AudienceDocument Organization User input CommandTypographic Conventions Computer output Reading the Documentation Reading Documentation Using the Administration UtilityReading Documentation Using the Public Web Server Related Information On a PC Reading Documentation from the Internet Express CD-ROMReading Reference Pages for Internet Express Components On a Tru64 Unix System Internet electronic mail readerscomment@zk3.dec.com Readers CommentsReading the Open Source Software Component Documentation # man -M /usr/news/man active.5 Readers Comments Using the Administration Utility Using the Administration Utility Administration Utility Menu Options and Tasks Using the Administration Utility Main Menu Register Online Registering Your Internet Express InstallationNavigating the Administration Utility Using Administration Utility Forms Sample Administration Utility Form 8081 Internet Express Accessing Administration ServersInternet Express Accounts and Ports Port Number Description Accessing the Internet Express Login Account Accessing and Managing the Internet MonitorManaging Internet Express in a TruCluster Environment Installing and Removing Components Using Internet Express Services in a ClusterTruCluster Impact on Internet Express Administration Port number from the current Web server Installing and Removing ComponentsKeywords for URL Line Hostname of the local host Performing Web-Based System Management Accessing Web-Based System Management Tools Accessing Web-Based System Management Tools Tuning Kernel Attribute Values Using the Administration Utility Where to Find More Information Internet Express and AlphaServer Products Web SitesOpen Source Software Web Sites GnuPG ExpectFirefox FreeRADIUS Majordomo Automated Internet Mailing Lists Manager IRC ServerJabber Lynx Web Browser Perl MySQLOpenLDAP OpenSLP Samba File and Print Server PostgreSQL Relational Database Management SystemProcmail Mail Filtering Language Pure-FTP Server System Security Web Sites Microsoft Other Useful Web SitesApplications InterNIC Encompass Manage Users Menu User Administration Overview of User Accounts User Administration Overview of User Accounts Assigning Passwords to User AccountsPurging Obsolete Passwords Specifying User Names Searching for User Accounts Searching for User Accounts Selecting User Accounts Assigning Users to Groups Shows the Create Named User Account form Creating Captive Accounts for Named Users Creating a Named User Account Creating Captive Accounts for Generic Users Creating Generic User Accounts Creating a Noncaptive Account for a Unix System User Creating a Noncaptive Account for a Unix System User To create a group, see Section Creating Groups Creating a System User Account Creating Groups Creating Groups Displaying User Account Information Displaying User Account Information Deleting User Accounts Changing Groups for User Accounts Changing Groups for User Accounts User Administration Changing the Password for an Account Changing the Password for an Account Changing Mail Services for Users Assigning Regular Delivery Mail Service Assigning POP with Password Mail ServiceChanging Mail Services for Users Assigning Cyrus Imap with Password Mail Service Assigning the Cyrus Imap Mail Service Managing the .users.list File Assigning Apop with Password Mail ServiceManaging the iass Account Changing the iass Account Forwarding Address Removing the .users.list File Managing the User Self-Administration FeatureListing User Accounts and Passwords Purging Passwords for User Accounts Managing the User Self-Administration Feature Enabling and Disabling the User Self-Administration Feature Manage User Self-Administration Menu Configure Web Server for Self-Administration Form Modifying the Web Server Configuration Modify Web Server Configuration Enabling and Disabling Login Delays Adding Groups Managing User Self-Administration Groups Adding Groups Deleting and Modifying Groups Enabling and Disabling Groups Customizing the User Self-Administration Feature User Administration User Authentication Managing the Ldap Module for System AuthenticationManaging the Ldap Module for System Authentication User Authentication Example 1 Security Matrix Enabled for Ldap Ldap Caching Daemon Example 2 Ldap Caching Daemon Configuration File Value of searchbase Value of machinedn Value of machinepass Creating Branches Userbranch ou=accounts,searchbase Extended Ldap Schema for Unix Account Information Indexing Attributes for the Directory Servers Configuring the Ldap Module for System Authentication Adding Indices for OpenLDAPLdap Database Index Types Modifying the Ldap Module Configuration Configuring the Ldap Module for System AuthenticationDefining Ldap System Parameters Configuring Ldap Password Attributes Configuring Ldap Group Attributes Testing the Ldap Module Configuration Importing and Exporting Users from /etc/passwdEnabling and Disabling the Ldap Module Adding an Ldap User in a C2 Environment Importing Users into the Directory ServerImporting Users from NIS Exporting Users from the Directory Server Access Control Ldap Database Utilities Authentication mechanism Remove login names from specified groupRemove login names from all groups File in which to store search results the default is Checking the Ldap Server Configuration Extracting Users from the /etc/passwd FileAdding a User Entry Retrieving a User Entry Deleting a User Entry Synchronizing with a Password File Adding a Group EntryLdapsyncuser -b branch filename Deleting a Group Entry Maintaining Group Membership Ldapgetgroup -b branch -f input-file Setting a Users Password in the Ldap Directory ServerRetrieving a Group Entry Starting the ldapcd Daemon Modifying Entries in an Ldap Database Maintaining the Ldap Directory Server Using Ldap CommandsStopping the ldapcd Daemon Adding Entries to an Ldap Database Actions Performed by the Ldap Client Authentication Actions PerformedFiles Modified by theLDAP Module for System Authentication Overview of the Ldap Client Etc/ldapusers.allow Operation of login/suBehavior of the the ldapdc Daemon Debugging ldapdc # su user1 Bogofilter to filter spam Section Bogofilter Spam Filter Mail Delivery AdministrationSendmail Server Administration Mail Delivery Administration Ldap see Section Configuring Ldap Configuring the System as a Standalone Mail SystemConfiguring the System as a Mail Client Configuring the System as a Mail Server Creating and Deleting Host Aliases for a Mail Server Sendmail Server Administration Changing the Sendmail Server Configuration Creating and Deleting Pseudo Domain Aliases Configuring Mail ProtocolsPSInet see Section Configuring the X.25 Protocol Through Section Configuring the X.25 Protocol Configuring the DECnet Phase IV Protocol Configuring the MTS Protocol Configuring the DECnet/OSI Protocol Configuring the X.25 Protocol Configuring the Uucp Protocol Accessing the Configure Masquerading Form Configuring Masquerading Root Postmaster News Uucp Mailer-daemon Rdist Nobody Daemon Pop Imap Configuring Your System for Masquerading Example 4 Sample Virtual Domain Table Configuring Virtual Domains # makemap btree virtusertable virtusertable Enabling Anti-Virus Enabling Procmail as a Local Mailer Configuring Relaying Configuring Anti-Spam Example 5 Sample Access Database for the Sendmail Server Configuring the Access Database Configuring an Access Database Configuring Checking on Senders Information Configuring Ldap Shows the Configure Ldap form Configuring Mail Filters Milter Socket inet1066@myhost.com,T=C5mS10sR10sE5m Socket local/var/run/f1.sockSocket inet1099@remotehost.com Socket inet61066@myhost.com Sample -p local/var/run/example1.sock Adding a Queue Configuring Queues # sendmail -bt -q queue-name Modifying a Queue GroupDeleting a Queue Group Configuring Queue Performance Queue TimersGeneral Queue Properties Configuring Trusted Layer Security Sendmail TimersSendmail Tunable Parameters Certicate Authority Abbreviation Certificate Authority Certificate DefaultsCertificate Issuer One that issues certificates a CA TLS Certificate Values Enabling Support Using the Access Database Side VERIFYbits CIname Sendmail Server AdministrationMarked as permanent Failure marked as temporary Configuring Mailbox Access Controlling the Sendmail ServerRelay or Subject Creating a Majordomo Mailing List Majordomo Mailing List AdministrationMajordomo Mailing List Administration Viewing the Sendmail Server Log Changing List Owner or Charter Changing a Majordomo Mailing List Configuration Changing Subscription Parameters Changing Administration Parameters Changing Message Content Parameters Changing Digest Parameters Changing Command Access Parameters Changing List Restriction Parameters Changing Moderated List Parameters Mailman MailmanDeleting a Majordomo List Changing Address Processing Parameters Managing Mailman Creating the Initial Mailman List Using a ScriptCreate a Mailing List Deleting a Mailing List Mailman Mailing List Administration Menu Training Bogofilter Bogofilter Spam FilterMailman Scripts Mailman Log Files Bogofilter/wordlist.db Using Bogofilter with procmailFiltering with Bogofilter Filter Integration with Other Tools Mutt Integration with Bogofilter Pine Integration with BogofilterMail Transport Agent MTA Integration with Bogofilter Bogofilter Spam Filter Controlling the POP2 Server Mail Access AdministrationPOP Mail Server Administration Controlling the POP3 Server Imap Mail Server Administration Imap Mail Server AdministrationViewing the POP Mail Server Log Setting Up a Unix User Account for UW Imap Setting Up a Unix User Account for Cyrus ImapConverting Imap Mail Folders Usr/dt/bin/mailcv -I -t -f ./bar duke Controlling the Cyrus Imap ServerControlling the UW Imap Server Usr/dt/bin/mailcv -evdt -I -f foldername directoryname user Viewing the Imap Server Log Configuring SSL for UW-IMAP IMP Webmail Administration IMP Webmail Administration Enabling and Disabling IMP Webmail Accessing the IMP Webmail Administration Menu Enable/Disable IMP Webmail Managing Mail Server Settings IMP Mail Server Settings Modifying the Mail Server ListAdding a Mail Server IMP Mail Server List Settings Managing Mailbox Settings Modifying a Mail ServerDeleting a Mail Server IMP Mailbox Settings Managing Compose Settings Managing Message Settings IMP Compose SettingsPreference settings IMP Message Settings Managing Logging Settings IMP Logging Settings Preference Driver Settings Managing Preference Driver Settings Setting Description Allow usage of folders Managing Miscellaneous IMP SettingsManaging Horde Settings Miscellaneous IMP Settings Horde Settings Managing Turba Settings Have access to their addressbook Using IMP Upgrade ToolsIMP Turba Settings Setting Description Enabled Upgrading IMP Databases Upgrading IMP Configurations IMP Database Upgrade Settings Accessing IMP Webmail Additional Webmail DocumentationNew Preference Table Web Services Administration Secure Web Server AdministrationSecure Web Server Administration Internet Express Ports and URLs Accessing the Secure Web Servers Server Changing Configuration ParametersConfiguration Files for Secure Web Servers Web Server Management Httpd.conf Srm.conf Access.conf Changing the Password for the Administration Web Server Ht//Dig Search Tool Administration Ht//Dig Search Tool AdministrationCreating the Search Index Ht//Dig Indexing and Search Administration Link to Ht//Dig Search Index Updated Ht//Dig Configuration File Message Searching the Index DocumentationHttp//hostname/htdig/search.html XML Component Administration Directories and Subsets for XML ComponentsDirectories and Subsets for XML Components Managing the Apache Axis Server Apache Axis Server AdministrationApache Cocoon Servlet Administration Apache Axis Server Administration Managing the Apache Cocoon Servlet Enabling and Disabling the Cocoon ServletViewing the Cocoon Log Files Network Services Wrapped by Internet Express Network Security AdministrationTCP Wrapper Administration Network Services Wrapped by Internet Express Modifying Access to a Wrapped Network Service Controlling Access to Other Network Services Network Service Access Options Testing TCP Security Modifications FireScreen Administration Menu FireScreen Administration FireScreen Administration Installing FireScreen Etc/rc.config file Checking FireScreen Installation Prerequisites FireScreen Administration Install FireScreen Page with Gateway Screening Enabled Configuring FireScreen Configure FireScreen Menu Setting Command-Line Options Set Options Confirmation Adding a Screening Rule Setting the Screening Mode Add New Screening Rule Form Deleting a Screening Rule Checking Syntax of Screening Rules Starting FireScreen Starting and Stopping FireScreen Stopping FireScreen Start/Stop FireScreen Form with Restart Option Enabled Viewing FireScreen Status Viewing FireScreen Screening RulesViewing the FireScreen Log Snort Intrusion Detection System Viewing FireScreen StatisticsUsr/internet/docs/snort Snort documentation Snort -vd -l ./log Configuring Snort DecoderConfiguring Snort Preprocessor Option Disable Decode Alert FreeRADIUS Server Administration Running SnortViewing Alert Messages Users File Considerations While Installing FreeRADIUSUnderstanding FreeRADIUS Configuration Files Starting and Stopping the FreeRADIUS Server Configure --disable-shared make make install Clients.conf fileRadiusd.conf file Viewing FreeRADIUS Log File Controlling the Dante Socks Server Proxy Services AdministrationDante Socks Server Administration Proxy Services Administration Squid Proxy/Caching Server Administration Squid Proxy/Caching Server AdministrationConfiguring the Dante Socks Server Accessing Dante Socks Information Configuring the Squid Proxy/Caching Server Reinitializing the Disk CacheManaging the Squid Proxy/Caching Server Rotating Log Files Displaying Access Statistics Controlling the Squid Proxy/Caching Server Ldap Directory Server Administration Understanding the Ldap Directory SchemaUnderstanding the Ldap Directory Schema Using the Ldap Browser Ldap Directory Server AdministrationExample 6 Ldap Standard Object Class Definition for Person Creating or Editing Frequently Used Connections Installing and Running the Ldap BrowserConnecting to an Ldap Server Managing Frequently Used Connections Connecting to an Ldap Server using SSL Using the Main Browsing Window Disconnecting from an Ldap ServerReconnecting to an Ldap Server Viewing a Directory Entry in a Separate Window Controlling Client-Side Schema CheckingOpening a New Main Window Closing a Main Window Copying a Directory Entry Adding a New Directory EntryModifying a Directory Entry Deleting a Directory Entry Modifying Attributes Renaming a Directory EntryMoving a Directory Entry Adding Attributes Modifying Entry Templates Deleting AttributesManaging Directory Entry Templates Creating Entry Templates Viewing the Object Class Schema Viewing the Attribute SchemaSearching the Directory Managing the OpenLDAP Directory Server Managing and Using the OpenLDAP Directory ServerUser Configuration File Configuring the OpenLDAP Directory Server Ldap Directory Server Administration OpenSLP Administration Configuration Files and ExamplesOpenSLP Overview Configuring OpenSLP Using the OpenSLP Configuration and Registration FilesConfiguring Optional Security Configuring OpenSLP Running the Services Considerations for Using SLP APIs Running the Example Configuration Documentation Documentation OpenSLP Administration Creating or Modifying an Anonymous Pure-FTP User Account FTP Server AdministrationAdministering Pure-FTP Server Administering Pure-FTP Server Upload /data/ftp /pub yes ftp daemon Enabling or Disabling Anonymous Pure-FTP AccessFTP Server Administration Enabling or Disabling chroot Enabling or Disabling Pure-FTP server Displaying Active Pure-FTP Users Samba File and Print Server Administration Samba File and Print Server AdministrationOptions for Modifying the smb.conf Configuration File Understanding the smb.conf Configuration File Workgroup Understanding the smb.conf Configuration File Add the following value Administering the Samba Server Using the Swat Program Configuring the Samba Server Using the Swat ProgramAdministering the Samba Server Using the Swat Program Samba File and Print Server Administration Configure the Samba Server Menu Configuring Global Variables Configuring Share ParametersManage passwords see Section Administering Passwords Viewing the Status of the Server Viewing the Current ConfigurationAdministering Passwords Controlling Printers Samba File and Print Server Administration 225 InterNetNews Server Administration Specifying INN Configuration Data InterNetNews Server AdministrationINN Daemons Configuring an External Newsfeed Configuring an External Newsfeed Days 12 GB Displaying an External NewsfeedRecommended Spool Space for News Articles Article Retention Period Adding an External Newsfeed Typically, a newsfeed has the following flags set Modifying Newsfeed Defaults Modifying an External NewsfeedRemoving an External Newsfeed Updating the Local Active File Managing Client Access Displaying Client Access Groups Adding a Client Access GroupAccess Groups Form Fields Removing a Client Access Group Modifying an Existing Client Access Group Client Authentication Groups Menu Fields Displaying Client Authentication GroupsManaging Client Authentication Groups Adding Client Authentication Groups Usr/bin/news/auth/passwd Modifying Client Authentication Groups Configuring Storage Options Configuring Storage OptionsConfiguring Storage Method Entries Deleting Client Authentication Groups Options on the Configure Storage Menu Adding a New Storage Method ClassModifying a Storage Method Class Adding New Cnfs Entries Configuring the Cnfs Storage MethodDeleting a Storage Method Class Displaying Cnfs Entries Modifying Cnfs Entries Managing Article Expiration Managing Article ExpirationDisplaying Article Expiration Definitions Deleting Cnfs Entries Specific newsgroup for example, rec.photo Adding an Article Expiration Definition Managing Article Expiration Specifying an Article Expiration Definition Modifying an Article Expiration Definition Managing Local Newsgroups Managing Local NewsgroupsDeleting an Article Expiration Definition Modifying the Retention Period for Expired Articles Viewing INN Log Files Creating Local NewsgroupsDeleting Local Newsgroups Controlling the INN Server Controlling the INN Server Controlling the IRC Server Internet Relay Chat AdministrationConfiguring IRC Internet Relay Chat Administration Starting and Stopping PostgreSQL Server PostgreSQL Database and MySQL AdministrationInstalling PostgreSQL Installing PostgreSQL Viewing the PostgreSQL Log File PostgreSQL Database and MySQL Administration Administering PostgreSQL Accounts Administering PostgreSQL AccountsImportant Files and Directories PostgreSQL Files and Directories Setting up a Crontab Entry for Vacuuming DatabasesUsing Existing PostgreSQL Accounts Running the Postmaster Startup Script Setting up a Crontab Entry for Vacuuming Databases PostgreSQL Database and MySQL Administration Setup Vacuum Crontab Form Scaling PostgreSQL #/sbin/init.d/postgres stop#/sbin/init.d/postgres start #/sbin/sysconfig -q ipc #ps -ef grep postmasterScaling PostgreSQL MySQL Directories Administering MySQLDirectories and Files Established by MySQL Installation Starting and Stopping MySQL MySQL Log Files Starting and Stopping the MySQL Server Using a Command LineMySQL Configuration Files Viewing the MySQL Error Log Bind Files and Directories Bind Domain Name Server AdministrationBind Overview Important Bind Files and Directories Bind Binary File Directories Enabling Bind Running the Bind Startup Script Running the Bind Startup ScriptBind Documentation Enter /sbin/init.d/named start Enter /sbin/rcinet start Http//ops.ietf.org/dns/dynupd/secure-ddns-howto.html Jabber Controlling the Jabber ServerControlling the Jabber Server Twiki Starting TWikiTwiki Sample client server configuration Sample client server configurationStunnel Sample mail filter Section Mail Filter Example Sendmail Supplemental InformationCreating a Certificate of Authority Background OpenSSL Certificate Creation Mail Filter Example Mail Filter Example Sendmail Supplemental Information Smfiversion Glossary Glossary 273 FTP See also Https 275 See TCP/IP Symbols IndexIndex Decus see Encompass deinstall.sh script Web site, 30 external newsfeed adding277 Index Ldap client, 87 Ldap commands Log file FireScreen viewing, 183 login account279 Index OpenLDAP Project Web site Poppassd server controlling281 Screening mode, 178 screening rule FireScreen 283 TIN