. , , ,

,,,

Webmin/Alterator — ,

- ()

-02068982-230102-14-10

Webmin/Alterator

-051

2010


- ()

__________________ / .. /

___ ___________20___.

() . 051

1 : Webmin/Alterator

-10-95/ 29 2010.

2 : .

3 ( ):

3.1

3.2

3.3

3.4

3.5

3.6

4 :

-

-

5 :

5.1 , ...

5.2 , ...

6 :

____ __________ 20___.

___________________ ..-.. ..,

___ __________20___.

_________________________________/ ../


, , , , WEBMIN, ALTERATOR, LINUX, , .

, .

, , , .

.

, .


BSD Berkley Software Distributions license;

GPL General Public License;

PHP Personal Home Page;

;

;

;

;

;

;

;

.


1.

1.1

1.2

1.3

1.4

1.5

1.6

1.7

1.8

2. Webmin/Alterator

2.1

2.2

2.3

2.4

2.5 ()

2.6

2.7

3

3.1

3.2 SMB

3.3 DNS

3.4 NFS

3.5

4.

4.1 Webmin

4.2 Webmin

4.3 Alterator

5.

5.1

5.2

5.3

5.4

5.5

5.6


IT-, , , . , , , IT-. , , .

UNIX- : , , , . . , , , , Windows-. .

Webmin - , unix- , . -. , , , - Apache, , , , .

Webmin - - , - . Webmin Perl . , - .

, Webmin/Alterator, :

, , ;

, ;

.

. , .

.

, , , . , Alterator, , .

, - . :

, ;

;

;

;

;

.

 


1.

. , , , .

1.1

 

, . .

, , , , .

: Webmin/Alterator .

1.2

1.1 .


1.1 ,

1.3

, :

, ;

;

.

. , , web-. , . , .

, , , , .

1.2.

, , , , , .

1.3.


1.2 - , .

1.3

1.4 cPanel

cPanel -. -, , , 2082 ( 2083/SSL).

cPanel , Apache, MySQL, PHP, exim.

: , 25 . 50 .

cPanel , , . , cPanel .

2008 :

Red Hat Enterprise Linux ( );

CentOS ( );

FreeBSD ( ).

cPanel Linux, , . FreeBSD Cpanel (), .

1.4 cPanel.

DirectAdmin

DirectAdmin -, 2003 JBMC Software. DirectAdmin -.

DirectAdmin : FreeBSD, GNU/Linux ( CentOS, Red Hat, Fedora, Debian).

: MySQL, Dovecot, Exim, Apache, PHP, Perl, BIND.

, DirectAdmin API .

(0.95) DA 1 2003 . 1.336, 28 2009 .

:

(\ , ).

(virtual-hosts, DNS).

.

.

( ).

.

DirectAdmin :

.

.

.

.

:

.

.

.

1.5 DirectAdmin.


1.5

1.4 :

;

;

.

, Webmin/Alterator :

;

;

, , , ;

Webmin - , BSD;

Alterator .

.

1.6

Webmin/Alterator . , .

:

;

, ;

;

.

.

1.7

, (-);

;

;

;

, ;

;

ISO (ISO/IEC 17799, ISO 27000, ISO/IEC 27001, ISO 8601, ISO 9241);

;

;

, , TCP/IP.

.

, , .

- , Webmin.

Webmin , BSD (Berkley Software Distributions license).

Webmin . Webmin GPL (General Public License).

.

. , .

.

, , .

, . - .

, .

.

, - .

.

, . .

, , , 6.10.1-88.

1.8

, , , . , . .


2 Webmin/Alterator

, , .

2.1

, , . , .

, , . , .

2.1 .

2.1

5 :

, . , , . .

, , , . . . , .

, . .

, . .

, . . , .

2.2

. , , . , . , .

2.2 .


2.2

2.3

, .

, . .

Webmin/Alterator , .

, .

2.4

Webmin - , unix- , . -. , , , - Apache, , , , .

Webmin - - , - . Webmin Perl . , - .

Webmin'a - . , . Webmin -, , , , . Webmin , , .


2.5 ()

Alterator . Scheme, C sh+awk. .

Alterator : backend frontend. . .

Scheme. . Shell, Perl Ruby .

2.3 Alterator

 

2.6

- , , .

- NFS.

- , , .

- , RPM .

- IP-, DNS, .

- firewall .

- Web- Apache.

- , , MySQL PostgreSQL.

- Windows- Samba.

2.7

, - , . .

.


3.

, , .

3.1

, , . (), , , . Linux , , "login:". -, : . : , , . , , , "", - Linux .

Linux : , , . : , , , , , . -, , . , , . , "" " ".

, , . , (), ( ) , . , , , .

C : - . - account, "". , , . , Linux : - . Linux , , .

(account) - , Linux . , . .

- , . , "login:". , . .

(login name) - , .

Linux c - UID (User ID). UID - , . , . Linux , . , UID "0" "100" .

, . . , , , - GID (Group ID). Linux - . , , . , .

( ) . , . , - , .

Linux , , . . , , .

: . - ( ). , . Linux , , . , , bash.

( , , ) - , Linux "" . :

,

- ,

.

""

Linux , - "0". UID=0 root (., ""). root - "" Linux, root Linux, . UID , , , . root . root , : .

3.2 SMB

SMB, CIFS , , . NetBIOS , SMB- , "" , "" . NetBIOS , TCP/IP; NetBIOS TCP/IP, NBT. WINS ( IP-) , .

SMB, OSI, . SMB :

. .

. - , , , , , , , .

. .

. SMB : ; ; ; ; ; ; ; .

SMB . , , :

;

;

;

;

.

SMB . SMB √ DOS Server Message Blocks, .

SMB

Richard Shape Samba SMB -. , SMB . , .

SMB . . : , .

SMB

3.1 SMB. SMB SMB. , , (TID) √ TID (0xFFFF) . , .

SMB 3.1.

3.1 SMB

()
0xFF 'SMB' 1
COM 1 , 0x00 0xFF
RCLS 1
REH 1
ERR 2
REB 1
RES 14
TID 2 ID ; ID , .
PID 2 ID
UID 2
MID 2 ID;

SMB

, , SMB. , , (ID COM: SMBopen ) (SMBsplretq), . SMB, , . , GetServerAttributes (SMBdskattr) WCT BCC 0. 3.2.

3.2 - SMB

WCT 1
VWV (, WCT)
BCC 2
DATA (, BCC)

3.3 DNS

(Domain Name System) , , Internet, IP- , ; IP- .

. , . . , . , .. -, , , , .

; , - , . , - ( ) . . , Name- -; Name-, Name- " ".

, : ".". ( Name- ), . - . . , .

; Internet; .

, "www...". :

.

, , .

.

, ; , "".

"" , , ".".

"..", .

, DNS.

. , , DNS- , , . , , , , ( ) , , . , , ().

, DNS IP-. IP-, DNS , IP-. freebsd.org. - , FreeBSD Unix. FTP-, , .

"" "". "" :

com - commercial ();

edu - educational ();

gov - goverment ();

mil - military ();

net - network (, );

org - organization ( ).

3.4 NFS

NFS . , ( , FTP). , , , NFS , - .

NFS - RPC Sun Microsystems. NFS- NFS-, RPC-. NFS- NFS- , RPC, NFS , . , , NFS . , NFS- . , NFS- , . NFS- , , . NFS- .

1. , NFS ( NFS-). : , , , NFS-.

2. NFS- RFC- NFS- . NFS UDP, TCP.

3. NFS- NFS- UDP- 2049. , , NFS- , , NFS 2049.

4. NFS- NFS- , .

5. , . NFS-, NFS- . . Unix (multithreading), . , . NFS ( nf sd), . NFS-.

6. , NFS-, , , RPC-, RPC-. NFS , . Unix NFS , : , - (biod), NFS-.

Unix NFS-, NFS-, . NFS- , , Microsoft. , IBM, NFS-.

NFS , NFS, RPC , RPC .

NFS- NFS- , . NFS- (mount daemon) NFS-. NFS .

(lock manager) (status monitor) . NFS, , . ( NFS ).

3.5

, .


4.

4.1 Webmin

Webmin .

https://<ip->:10000 (https, SSL). . :

( ) ;

.

4.1 .

4.1

, , .

(System) . , , . , , , Bootup Shutdown. Servers. "Software Packages". , , debfind.net, DEB Internet.

(Servers) , . BIND DHCP. Samba -- - Windows . Webmin SMTP Sendmail, - .

(Networking) , , firewalling ( ). , , Webmin, .

(Hardware) , . Logical Volume Management (LVM) , Linux .

(Cluster) , . cluster -- , . , , . , , . - , , , , .

(Others) , . "SSH/Telnet Login" "File Manager" , JRE. "Perl Modules" Perl, CPAN . "File Manager" , Explorer, ( ). "SSH/Telnet Login" - , .

4.2 .

.

File Manager

File Manager (Other). . , . explorer Windows: - , - , - .

Webmin, The Users and Groups ( ), System (), , UNIX ..

, UNIX , , . , Samba , UNIX. Webmin , , , .

4.3.

System and Server Status

. , . , e-mail - . , , web DNS .

System and Server Status 4.4.

, Webmin . .

4.5.

 

4.2 Webmin

, , . . PDC logon scripts - , , . , , . PDC (roaming profiles). windows ( , , .) . .. , . . , ( ), - PDC.

. , smb. conf, .

Samba 4.6. :

;

Unix Windows;

;

.

- .

4.10.

4.3 Alterator

4.11 Alterator.


4.11 Alterator

 

4.4

, . , , . .


5.

Webmin/Alterator.

5.1

: .

, Webmin, :

, , ;

, ;

.

Webmin, , GPU.

5.2

:

- ;

- .

.

:

,

i .

:

,

i .

, 5.1.

5.1

(.) b(.) t(/) D
1. 120 150 132 6
2. 180 200 188 4
3. 180 200 188 4
4. 220 250 232 6
5. 50 70 58 4
6. 70 100 82 6
: 820 970 880 12,49

880 - 5 ( 22 ). 5 %, , , .

 

5.3

5 , 1 1 2010 .

22. 8 . :

.

, .

, :

.

, .

5.2 .

5.2

, .
1. 64
2. 44
3. 49
4. 220
5. 71
6. 88
: 536

5.4

, , i- () / 1 /.

:

,

- , .;

- , .;

- , .

10000 ./.

880 .

, , 1,15, , 176 :

.

12% .

, :

.

26% .

:

.

, , (.), - , (..):

C = .. * . ,

- :

.. = / ,

, , ./;

, .;

( 0,9-0,95).

:

= - ,

, .

= 12*22*8 = 2112 .

( 15 % ),

= 0,15*2112=316,8 .

= 2112 316,8 = 1795,2 .

:

= /+ / + + + + + ;

, , :

/ = .

, , :

/ = / * 12 % = 10350 * 0,12 = 1242 .

=0,26 * ( / + /) = 0,26 * (10350+1242) = 3013,92 .

.

= +

:

C = 25000 ;

3 .

= = .

:

, . 0.

= 8333,33+0=8333,33 .

3% :

= * 0,03 = 25000 * 0,03 = 750 .

1% :

= 0,01 * 25000 = 250 .

:

C = * W * S,

W = 0,45 × , ;

S = 2,28 . 1 / .

C = 2112* 0,45*2,28=2166,91 .

:

= 10350+1242+3013,92+8333,33+750+250+2166,91=26106,17 .

- :

.. = ./.

:

= 880 .;

:

. = 880*16,16=14219,04 .

(60%). (, , ..)

= × 0,6 = 57500*1,2=34500 .

5.3.

5.3

57500,00
6900,00
16744,00
14219,04
34500,00
: 129863,04

, 129 863,04 .

5.5

5. 4.

5.4

, , (.)

 1

, , (.)

 120000

, (.)

 129863,04

, (%)

 100

, (%)

 20

, (%)

 26

, ()

 5

:

;

;

;

;

;

.

:

:

:

.

:


:

:

:

1 .

5.6

, , . .

, 880 /., 1 . 129 863,04 .

, .


6.

, , , , , , , , , , .

Webmin/Alterator

Webmin;

Alterator.

, , :

, ;

;

;

.


1.         .., .. , , " " - : - , 2010. - 35 .

2.         .. . 230102 / .. . - : , 2008. - 27.

3.         ., . PERL, PHP, APACHE MySQL WEB-. : , 2002. 534 .

4.         . LINUX: . : BHV, 1998. 1000 .

5.         . UNIX. : BHV--,1997. 500 . .. - : , 2007. - 12 .

6.         2.2.2./2.41340-03. - .

7.         2.2.4.548-96. .

8.         12.2.032-78 . . .

9.         , ., . - , 2009 . - 616 .

10.      . ., . . , . . , . . . . - , 2007 . - 336 .

11.      41-01-03. , .

12.      12.0.003 74 . . .

13.      12.1.038-82 . .

14.      2.2.4.1294-03.- .

15.      2.2.4.1191-03. .

16.      12.4.15485. . . , .

17.      50571.3-94. . .

18.      50571.21-2000 , .

19.      12.0.003-74 (1999). . . .

20.      12.1.002-84 (1999). . . .

21.      12.1.004-91 . . .

22.      12.2.2006-05. , .

23.      .. Linux- . - , 2008 .- 624 .

24.      . . - , 2007.- 992 .

25.      Samba - [. ] http://domaintimes.net/forum/showthread.php?t=3015

26.      Nagios [. ] http://wiki.nagios.org/index.php/Main_Page


smb.conf

# This is the main Samba configuration file. You should read the

# smb.conf(5) manual page in order to understand the options listed

# here. Samba has a huge number of configurable options (perhaps too

# many!) most of which are not shown in this example

#

# Any line which starts with a ; (semi-colon) or a # (hash)

# is a comment and is ignored. In this example we will use a #

# for commentry and a ; for parts of the config file that you

# may wish to enable

#

# NOTE: Whenever you modify this file you should run the command "testparm"

# to check that you have not made any basic syntactic errors.

#

#======================= Global Settings =====================================

[global]

# workgroup = Make sure it matches YOUR OWN NT-Domain-Name or Workgroup-Name

workgroup = workgroup

# server string is the equivalent of the NT Description field

server string = Samba Server

# This option is important for security. It allows you to restrict

# connections to machines which are on your local network. The

# following example restricts access to two C class networks and

# the "loopback" interface. For more examples of the syntax see

# the smb.conf man page

; hosts allow = 192.168.1. 192.168.2. 127.

# if you want to automatically load your printer list rather

# than setting them up individually then you'll need this

printcap name = /etc/printcap

load printers = yes

# It should not be necessary to spell out the print system type unless

# yours is non-standard. Currently supported print systems include:

# bsd, sysv, plp, lprng, aix, hpux, qnx

; printing = bsd

# Uncomment this if you want a guest account, you must add this to /etc/passwd

# otherwise the user "nobody" is used

; guest account = pcguest

# this tells Samba to use a separate log file for each machine

# that connects

log file = /var/log/samba/%m.log

# all log information in one file

# log file = /var/log/samba/smbd.log

# Put a capping on the size of the log files (in Kb).

max log size = 50

# Security mode. Most people will want user level security. See

# security_level.txt for details.

# Use password server option only with security = server

; password server = <NT-Server-Name>

# Password Level allows matching of _n_ characters of the password for

# all combinations of upper and lower case.

; password level = 8

; username level = 8

# You may wish to use password encryption. Please read

# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.

# Do not enable this option unless you have read those documents

; encrypt passwords = yes

; smb passwd file = /etc/samba/smbpasswd

# The following are needed to allow password changing from Windows to

# update the Linux system password also.

# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.

# NOTE2: You do NOT need these to allow workstations to change only

# the encrypted SMB passwords. They allow the Unix password

# to be kept in sync with the SMB password.

; unix password sync = Yes

; passwd program = /usr/bin/passwd %u

; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*

# Unix users can map to different SMB User names

; username map = /etc/samba/smbusers

# Using the following line enables you to customise your configuration

# on a per machine basis. The %m gets replaced with the netbios name

# of the machine that is connecting

; include = /etc/samba/smb.conf.%m

# Most people will find that this option gives better performance.

# See speed.txt and the manual pages for details

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Configure Samba to use multiple interfaces

# If you have multiple network interfaces then you must list them

# here. See the man page for details.

; interfaces = 192.168.12.2/24 192.168.13.2/24

# Configure remote browse list synchronisation here

# request announcement to, or browse list sync from:

#a specific host or from / to a whole subnet (see below)

; remote browse sync = 192.168.3.25 192.168.5.255

# Cause this host to announce itself to local subnets here

; remote announce = 192.168.1.255 192.168.2.44

# Browser Control Options:

# set local master to no if you don't want Samba to become a master

# browser on your network. Otherwise the normal election rules apply

; local master = no

# OS Level determines the precedence of this server in master browser

# elections. The default value should be reasonable

; os level = 33

# Domain Master specifies Samba to be the Domain Master Browser. This

# allows Samba to collate browse lists between subnets. Don't use this

# if you already have a Windows NT domain controller doing this job

; domain master = yes

# Preferred Master causes Samba to force a local browser election on startup

# and gives it a slightly higher chance of winning the election

; preferred master = yes

# Enable this if you want Samba to be a domain logon server for

# Windows95 workstations.

; domain logons = yes

# if you enable domain logons then you may want a per-machine or

# per user logon script

# run a specific logon batch file per workstation (machine)

; logon script = %m.bat

# run a specific logon batch file per username

; logon script = %U.bat

# Where to store roving profiles (only for Win95 and WinNT)

# %L substitutes for this servers netbios name, %U is username

# You must uncomment the [Profiles] share below

; logon path = \\%L\Profiles\%U

# All NetBIOS names must be resolved to IP Addresses

# 'Name Resolve Order' allows the named resolution mechanism to be specified

# the default order is "host lmhosts wins bcast". "host" means use the unix

# system gethostbyname() function call that will use either /etc/hosts OR

# DNS or NIS depending on the settings of /etc/host.config, /etc/nsswitch.conf

# and the /etc/resolv.conf file. "host" therefore is system configuration

# dependant. This parameter is most often of use to prevent DNS lookups

# in order to resolve NetBIOS names to IP Addresses. Use with care!

# The example below excludes use of name resolution for machines that are NOT

# on the local network segment

# - OR - are not deliberately to be known via lmhosts or via WINS.

; name resolve order = wins lmhosts bcast

# Windows Internet Name Serving Support Section:

# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server

; wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client

#Note: Samba can be either a WINS Server, or a WINS Client, but NOT both

; wins server = w.x.y.z

# WINS Proxy - Tells Samba to answer name resolution queries on

# behalf of a non WINS capable client, for this to work there must be

# at least oneWINS Server on the network. The default is NO.

; wins proxy = yes

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names

# via DNS nslookups. The built-in default for versions 1.9.17 is yes,

# this has been changed in version 1.9.18 to no.

dns proxy = no

# Case Preservation can be handy - system default is _no_

# NOTE: These can be set on a per share basis

; preserve case = no

; short preserve case = no

# Default case is normally upper case for all DOS files

; default case = lower

# Be very careful with case sensitivity - it can break things!

; case sensitive = no

#============================ Share Definitions ==============================

idmap uid = 16777216-33554431

idmap gid = 16777216-33554431

template shell = /bin/false

username map = /etc/samba/smbusers

winbind use default domain = no

[homes]

comment = Home Directories

browseable = no

writeable = yes

# Un-comment the following and create the netlogon directory for Domain Logons

; [netlogon]

; comment = Network Logon Service

; path = /home/netlogon

; guest ok = yes

; writable = no

; share modes = no

# Un-comment the following to provide a specific roving profile share

# the default is to use the user's home directory

;[Profiles]

; path = /home/profiles

; browseable = no

; guest ok = yes

# NOTE: If you have a BSD-style print system there is no need to

# specifically define each individual printer

[printers]

comment = All Printers

path = /var/spool/samba

browseable = no

# Set public = yes to allow user 'guest account' to print

printable = yes

# This one is useful for people to share files

;[tmp]

; comment = Temporary file space

; path = /tmp

; read only = no

; public = yes

# A publicly accessible directory, but read only, except for people in

# the "staff" group

;[public]

; comment = Public Stuff

; path = /home/samba

; public = yes

; read only = yes

; write list = @staff

# Other examples.

#

# A private printer, usable only by fred. Spool data will be placed in fred's

# home directory. Note that fred must have write access to the spool directory,

# wherever it is.

;[fredsprn]

; comment = Fred's Printer

; valid users = fred

; path = /homes/fred

; printer = freds_printer

; public = no

; writable = no

; printable = yes

# A private directory, usable only by fred. Note that fred requires write

# access to the directory.

;[fredsdir]

; comment = Fred's Service

; path = /usr/somewhere/private

; valid users = fred

; public = no

; writable = yes

; printable = no

# a service which has a different directory for each machine that connects

# this allows you to tailor configurations to incoming machines. You could

# also use the %u option to tailor it by user name.

# The %m gets replaced with the machine name that is connecting.

;[pchome]

; comment = PC Directories

; path = /usr/pc/%m

; public = no

; writable = yes

# A publicly accessible directory, read/write to all users. Note that all files

# created in the directory by users will be owned by the default user, so

# any user with access can delete any other user's files. Obviously this

# directory must be writable by the default user. Another user could of course

# be specified, in which case all files would be owned by that user instead.

;[public]

; path = /usr/somewhere/else/public

; public = yes

; only guest = yes

; writable = yes

; printable = no

# The following two entries demonstrate how to share a directory so that two

# users can place files there that will be owned by the specific users. In this

# setup, the directory should be writable by both users and should have the

# sticky bit set on it to prevent abuse. Obviously this could be extended to

# as many users as required.

;[myshare]

; comment = Mary's and Fred's stuff

; path = /usr/somewhere/shared

; valid users = mary fred

; public = no

; writable = yes

; printable = no

; create mask = 0765

- ()

 

 

 

! , , , .
. , :