mkdir -p /var/spool/postfix/var/run/saslauthd

/etc/default/saslauthd dosyasını biraz değiştirmemiz gerekiyor, yapmanız gereken değişiklik; START satırını yes ve  OPTIONS=”-c” yi OPTIONS=”-c -m /var/spool/postfix/var/run/saslauthd -r” olarak değiştirin.

vi /etc/default/saslauthd 

#
# Settings for saslauthd daemon
## Should saslauthd run automatically on startup? (default: no)
START=yes# Which authentication mechanisms should saslauthd use? (default: pam)
#
# Available options in this Debian package:
# getpwent  — use the getpwent() library function
# kerberos5 — use Kerberos 5
# pam       — use PAM
# rimap     — use a remote IMAP server
# shadow    — use the local shadow password file
# sasldb    — use the local sasldb database file
# ldap      — use LDAP (configuration is in /etc/saslauthd.conf)
#
# Only one option may be used at a time. See the saslauthd man page
# for more information.
#
# Example: MECHANISMS=”pam”
MECHANISMS=”pam”# Additional options for this mechanism. (default: none)
# See the saslauthd man page for information about mech-specific options.
MECH_OPTIONS=”"# How many saslauthd processes should we run? (default: 5)
# A value of 0 will fork a new process for each connection.
THREADS=5# Other options (default: -c)
# See the saslauthd man page for information about these options.
#
# Example for postfix users: “-c -m /var/spool/postfix/var/run/saslauthd”
# Note: See /usr/share/doc/sasl2-bin/README.Debian
OPTIONS=”-c -m /var/spool/postfix/var/run/saslauthd -r”

/etc/pam.d/smtp dosyasını oluşturalım ve doğru database bilgilerini girdiğimizden emin olun;

vi /etc/pam.d/smtp

auth    required   pam_mysql.so user=mail_admin passwd=mail_admin_sifre host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1
account sufficient pam_mysql.so user=mail_admin passwd=mail_admin_sifre host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1

vi /etc/postfix/sasl/smtpd.conf

pwcheck_method: saslauthd
mech_list: plain login
allow_plaintext: true
auxprop_plugin: mysql
sql_hostnames: 127.0.0.1
sql_user: mail_admin
sql_passwd: mail_admin_sifre
sql_database: mail
sql_select: select password from users where email = ‘%u’

Yeniden başlatalım;

/etc/init.d/postfix restart
/etc/init.d/saslauthd restart 

Courier’ in Konfigürasyonu

vi /etc/courier/authdaemonrc

komutu ile dosyamızı açalım ve authmodulelist parametresini değiştirilerim;

[...]
authmodulelist=”authmysql”
[...]

/etc/courier/authmysqlrc dosyasının öncelikle bir yedeğini alalım, sonrada boş bir dosya oluşturalım,

cp /etc/courier/authmysqlrc /etc/courier/authmysqlrc_orig
cat /dev/null > /etc/courier/authmysqlrc

vi /etc/courier/authmysqlrc

dosyayı açın ve aşağıdakileri dosyaya kopyalayın;

 MYSQL_SERVER localhost
MYSQL_USERNAME mail_admin
MYSQL_PASSWORD mail_admin_sifre
MYSQL_PORT 0
MYSQL_DATABASE mail
MYSQL_USER_TABLE users
MYSQL_CRYPT_PWFIELD password
#MYSQL_CLEAR_PWFIELD password
MYSQL_UID_FIELD 5000
MYSQL_GID_FIELD 5000
MYSQL_LOGIN_FIELD email
MYSQL_HOME_FIELD “/home/vmail”
MYSQL_MAILDIR_FIELD CONCAT(SUBSTRING_INDEX(email,’@',-1),’/',SUBSTRING_INDEX(email,’@',1),’/')
#MYSQL_NAME_FIELD
MYSQL_QUOTA_FIELD quota 

restart zamanı;

/etc/init.d/courier-authdaemon restart
/etc/init.d/courier-imap restart
/etc/init.d/courier-imap-ssl restart
/etc/init.d/courier-pop restart
/etc/init.d/courier-pop-ssl restart

Hemen testimizi yapalim;

mail:/etc/postfix# telnet localhost pop3
Trying 127.0.0.1…
Connected to localhost.localdomain.
Escape character is ‘^]’.
+OK Hello there.
quit
+OK Better luck next time.
Connection closed by foreign host.

Buda tamamdir…

/etc/aliases tanımları

vi /etc/aliases

[...]
postmaster: root
root: postmaster@dinopsys.net
[...]

Aliases’ larda değişiklik yaptıktan sonra newaliases komutunu calistirmak gerekiyor.

newaliases

/etc/init.d/postfix restart

Devamı 4′ te

Öncelikle MySQL root userı için bir şifre belirleyelim bu güvenliğimiz için gerekli;

mysqladmin -u root password dinopsys

yukarıdaki komut ile birlikte artık mysql root userinin şifresi “dinopsys” tir.

mysqladmin -u root -p create mail

bu komut ile de mail isimli bir database oluşturalım.

ve MySQL shell’ ine geçip gerekli kullanıcı tanımlamalarını yapalım;

GRANT SELECT, INSERT, UPDATE, DELETE ON mail.* TO ‘mail_admin’@'localhost’ IDENTIFIED BY ‘mail_admin_sifre’;
GRANT SELECT, INSERT, UPDATE, DELETE ON mail.* TO ‘mail_admin’@'localhost.localdomain’ IDENTIFIED BY ‘mail_admin_sifre’;
FLUSH PRIVILEGES; 

yukarıdaki komutlarda; mail_admin isimli db kullanicisinin mail_admin_sifre sifresi ile mail db’ sine erisim yetkisini tanimladik.

USE mail;

CREATE TABLE domains (
domain varchar(50) NOT NULL,
PRIMARY KEY (domain) )
TYPE=MyISAM;

CREATE TABLE forwardings (
source varchar(80) NOT NULL,
destination TEXT NOT NULL,
PRIMARY KEY (source) )
TYPE=MyISAM;

CREATE TABLE users (
email varchar(80) NOT NULL,
password varchar(20) NOT NULL,
quota INT(10) DEFAULT ‘10485760′,
PRIMARY KEY (email)
) TYPE=MyISAM;

CREATE TABLE transport (
domain varchar(128) NOT NULL default ”,
transport varchar(128) NOT NULL default ”,
UNIQUE KEY domain (domain)
) TYPE=MyISAM;

quit;

Simdi olusturdugumuz tablolara bakalim;

domains tablosu, domainlerin kayitli olacağı tablo örneğin dinopsys.net

forwardings tablosu,yönlendirmeler için, örneğin  fikri@dinopsys.net mailina gelen maillari fd@dinopsys.net adresine yonlendirmek icin..

users tablosu, kullanıcılar(emaillar) için

transport farkli smtp lere taşıımak için…

Şimdi postfixi mysql ile çalışacak şekilde konfigüre edelim,

vi /etc/mysql/my.cnf

my.cnf dosyasini acin ve bu satirin aktif olduğuna emin olun

[...]
bind-address            = 127.0.0.1
[...]

Eger my.cnf de herhangi bir değişiklik yaparsanız MySQL’ i aşağıdaki komutla yeniden başlatın

/etc/init.d/mysql restart

Aşağıdaki dosyaları sırasıyla oluşturun;

vi /etc/postfix/mysql-virtual_domains.cf

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT domain AS virtual FROM domains WHERE domain=’%s’
hosts = 127.0.0.1

 vi /etc/postfix/mysql-virtual_forwardings.cf

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT destination FROM forwardings WHERE source=’%s’
hosts = 127.0.0.1

vi /etc/postfix/mysql-virtual_mailboxes.cf

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT CONCAT(SUBSTRING_INDEX(email,’@',-1),’/',SUBSTRING_INDEX(email,’@',1),’/') FROM users WHERE email=’%s’
hosts = 127.0.0.1

 vi /etc/postfix/mysql-virtual_email2email.cf

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT email FROM users WHERE email=’%s’
hosts = 127.0.0.1

vi /etc/postfix/mysql-virtual_transports.cf 

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT transport FROM transport WHERE domain=’%s’
hosts = 127.0.0.1

vi /etc/postfix/mysql-virtual_mailbox_limit_maps.cf

user = mail_admin
password = mail_admin_sifre
dbname = mail
query = SELECT quota FROM users WHERE email=’%s’
hosts = 127.0.0.1

Oluşturduğumuz bu dosyaların modlarını ayarlıyalım;

chmod o= /etc/postfix/mysql-virtual_*.cf
chgrp postfix /etc/postfix/mysql-virtual_*.cf

Simdi vmail kullanıcı ve grubunu /home/vmail home dizini olmak sekliyle oluşturalım;

groupadd -g 5000 vmail
useradd -g vmail -u 5000 vmail -d /home/vmail -m

Şimdi Postfix ayarlarımızı yapacağız; mail.dinopsys.net gördüğünüz yerleri kendi domaininizle değiştirebilirsiniz;

postconf -e ‘myhostname = mail.dinopsys.net’
postconf -e ‘mydestination = mail.dinopsys.net, localhost, localhost.localdomain’
postconf -e ‘mynetworks = 127.0.0.0/8′
postconf -e ‘virtual_alias_domains =’
postconf -e ‘virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf’
postconf -e ‘virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf’
postconf -e ‘virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf’
postconf -e ‘virtual_mailbox_base = /home/vmail’
postconf -e ‘virtual_uid_maps = static:5000′
postconf -e ‘virtual_gid_maps = static:5000′
postconf -e ’smtpd_sasl_auth_enable = yes’
postconf -e ‘broken_sasl_auth_clients = yes’
postconf -e ’smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination’
postconf -e ’smtpd_use_tls = yes’
postconf -e ’smtpd_tls_cert_file = /etc/postfix/smtpd.cert’
postconf -e ’smtpd_tls_key_file = /etc/postfix/smtpd.key’
postconf -e ‘transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf’
postconf -e ‘virtual_create_maildirsize = yes’
postconf -e ‘virtual_mailbox_extended = yes’
postconf -e ‘virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf’
postconf -e ‘virtual_mailbox_limit_override = yes’
postconf -e ‘virtual_maildir_limit_message = “The user you are trying to reach is over quota.”‘
postconf -e ‘virtual_overquota_bounce = yes’
postconf -e ‘proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps’

SSL Sertifikası oluşturalım;

cd /etc/postfix
openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509

çıkan sorulara cevap verelim…

smtpd.key’ in modunu ayarlıyalım;

chmod o= /etc/postfix/smtpd.key

Devamı Part  3 te..

Aşağıdaki düzeltmeyi yapınız;

pico +1283 ow-shared.pl

komutu ile ow-shared.pl dosyasinin 1283. satirina gidin;

sub openwebmailerror {
my ($file, $linenum, $msg)=@_;
$msg = ow::htmltext::str2html($msg);
my $mailgid=getgrnam(‘mail’);

bu sekilde bir kac satir kod goreceksiniz.

Bu kodlari asagidaki gibi degistirin;

sub openwebmailerror {
require “modules/htmltext.pl”;
my ($file, $linenum, $msg)=@_;
$msg = ow::htmltext::str2html($msg);
my $mailgid=getgrnam(‘mail’);

Daha sonra dosyayı kaydedip çıkın ve browserınızdan tekrar deneyin hatanın giderildiğini göreceksiniz.

1. Giriş

Bu yazımızda da daha öncekiler gibi server ip adresi 192.168.1.5 ve server ismi mail.dinopsys.net olacaktır.

2. Postfix, Courier, MySQL ve Saslauthd Kurulumu

Bu paketlerin kurulumu için aşağıdaki komutu çalıştırın ve çıkacak soruya enter diyerek olumlu cevap verin.

apt-get install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl postfix-tls libsasl2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl phpmyadmin apache2 libapache2-mod-php5 php5 php5-mysql

paketlerin download işlemi bitip kurulum başladığında size bazı sorular sorulacak bu soruları aşağıdaki gibi cevaplayın;

Create directories for web-based administration ? <– No
General type of configuration? <– Internet Site
Mail name? <– mail.dinopsys.net
SSL certificate required <– Ok

3. Kota Yamasının Postfix’ e Uygulanması

apt-get install build-essential dpkg-dev fakeroot debhelper libgdbm-dev libldap2-dev libpcre3-dev libssl-dev libsasl2-dev postgresql-dev po-debconf dpatch libdb4.3-dev libmysqlclient15-dev lsb-release libcdb-dev

cd /usr/src
apt-get source postfix

 Buraya kadar hersey normal şimdi ufak bir kontrol yapmanız gerekiyor -> Postfix versiyonu… Bizim test için kurduğumuz 2.3.8 sizde versiyonunuzu görmek için şu komutu kullanabilirsiniz;

postconf -d | grep mail_version

Benim sunucumda bu sorgunun çıktısı;

mail:~# postconf -d | grep mail_version
mail_version = 2.3.8
milter_macro_v = $mail_name $mail_version

)

şeklinde… Versiyonunuz 2.3.8 ise buyrun burdan devam edelim…

wget http://vda.sourceforge.net/VDA/postfix-2.3.8-vda.patch.gz
gunzip postfix-2.3.8-vda.patch.gz
cd postfix-2.3.8
patch -p1 < ../postfix-2.3.8-vda.patch
dpkg-buildpackage

Bu komutun sonunda;

(WARNING: Failed to sign .dsc and .changes file)

böyle bir hata görürseniz dikkate almayın…

Şimdi yeni postfix paketimizi kuralım;

cd ..
dpkg -i postfix_2.3.8-2_i386.deb
dpkg -i postfix-mysql_2.3.8-2_i386.deb

Giris

Eger mevcut bir Debian 4.0 isletim sisteminiz yok ise ve bu makaleyi uygulamak istiyorsaniz ancak Debian 4.0′ in nasil kurulacagi hakkinda bir bilginiz yok ise lutfen onceki makalelerimiz arasinda Debian 4.0 Etch Kurulumu – Resimli Anlatim yazimizi okuyunuz.

Konumuza donecek olursak bu makalede de her zamanki 192.168.1.5 ip adresini servera verecegim, ayrica serverin hostname i debian.dinopsys.net olacak.

Sunucunuzda bir statik ip niz yok ise, yani ip yi dhcp servisinden aliyorsaniz oncelikle bunu statik olarak degistirmemiz lazim;

vi /etc/network/interfaces

# /etc/network/interfaces — configuration file for ifup(8), ifdown(8)

# The loopback interface
auto lo
iface lo inet loopback

# The first network card – this entry was created during the Debian installation
# (network, broadcast and gateway are optional)
auto eth0
iface eth0 inet static
        address 192.168.1.5
        netmask 255.255.255.0
        network 192.168.1.0
        broadcast 192.168.1.255
        gateway 192.168.1.1

# Dosya sonu

Daha sonrasinda yaptigimiz degisikligin aktif olmasi icin network servisimizi yeniden baslatmamiz gerekir;

/etc/init.d/networking restart

Dns cozumleme isimizi resolv.conf dosyasi yapiyor bu dosyaya dogru dns adresleri girmemiz gerekir;

vi /etc/resolv.conf

search dinopsys
nameserver 212.175.22.98
nameserver 212.175.16.24

seklinde resolv.conf dosyamizida ayarladik.

hosts dosyasina yeni ayarladigimiz ip adresimizi girelim;

vi /etc/hosts

127.0.0.1       localhost.localdomain   localhost
192.168.1.5   debian.dinopsys.net     debian

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

# dosya sonu

Gerekli Paketlerin Kurulumu

Oncelikle paket databaseimizi guncelleyelim

apt-get update

ve vmware’ i sistemimize kuralim

apt-get install linux-headers-`uname -r` libx11-6 libx11-dev x-window-system-core x-window-system xspecs libxtst6 psmisc build-essential

 Ilgili sorulari asagidaki gibi cevapliyalim;

Please keep only the resolutions you would like the X server to use. Removing all of them is the same as removing none, since in both cases the X server will attempt to use the highest possible resolution.

Video modes to be used by the X server:

<–Accept the default values

Simdi virtual makinelerimi nereye kurmak istiyorsam orda bir dizin olusturuyorum

mkdir /vm

kok dizine vm isimli bir klasor olusturdum. Bu birazda partition sisteminizle alakali nerede cok yeriniz var ise orada dizin olusturmanizi tavsiye ederim.

VMware’ in Download Edilmesi

http://www.vmware.com/download/server/
sitesine girerek vmware server’ in ucretsiz versiyonunu kayit olup indirelim. Serial leri almayi unutmayin

cd /tmp

wget [ VMware Linux binary dosyasinin adresini buraya yazin ]

tar xvfz VMware-server-*.tar.gz

cd vmware-server-distrib
./vmware-install.pl

VMware size birkac soru soracak bu sorulari default sekliyle birakiyoruz;

Creating a new installer database using the tar3 format.

Installing the content of the package.

In which directory do you want to install the binary files?
[/usr/bin] <– /usr/bin

What is the directory that contains the init directories (rc0.d/ to rc6.d/)?
[/etc] <– /etc

What is the directory that contains the init scripts?
[/etc/init.d] <– /etc/init.d

In which directory do you want to install the daemon files?
[/usr/sbin] <– /usr/sbin

In which directory do you want to install the library files?
[/usr/lib/vmware] <– /usr/lib/vmware

The path “/usr/lib/vmware” does not exist currently. This program is going to
create it, including needed parent directories. Is this what you want?
[yes] <– yes

In which directory do you want to install the manual files?
[/usr/share/man] <– /usr/share/man

In which directory do you want to install the documentation files?
[/usr/share/doc/vmware] <– /usr/share/doc/vmware

The path “/usr/share/doc/vmware” does not exist currently. This program is
going to create it, including needed parent directories. Is this what you want?
[yes] <– yes

The installation of VMware Server 1.0.2 build-39867 for Linux completed
successfully. You can decide to remove this software from your system at any
time by invoking the following command: “/usr/bin/vmware-uninstall.pl”.

Before running VMware Server for the first time, you need to configure it by
invoking the following command: “/usr/bin/vmware-config.pl”. Do you want this
program to invoke the command for you now? [yes] <– yes

Making sure services for VMware Server are stopped.

Stopping VMware services:
Virtual machine monitor done

You must read and accept the End User License Agreement to continue.
Press enter to display it. <– [ENTER]

….. snip [LICENCE TEXT] ……

Do you accept? (yes/no) <– yes

Configuring fallback GTK+ 2.4 libraries.

In which directory do you want to install the mime type icons?
[/usr/share/icons] <– /usr/share/icons

The path “/usr/share/icons” does not exist currently. This program is going to
create it, including needed parent directories. Is this what you want?
[yes] <– yes

What directory contains your desktop menu entry files? These files have a
.desktop file extension. [/usr/share/applications] <– /usr/share/applications

In which directory do you want to install the application’s icon?
[/usr/share/pixmaps] <– /usr/share/pixmaps

Trying to find a suitable vmmon module for your running kernel.

None of the pre-built vmmon modules for VMware Server is suitable for your
running kernel. Do you want this program to try to build the vmmon module for
your system (you need to have a C compiler installed on your system)? [yes] <– yes

Using compiler “/usr/bin/gcc”. Use environment variable CC to override.

What is the location of the directory of C header files that match your running
kernel? [/lib/modules/2.6.18-4-486/build/include]<– /lib/modules/2.6.8-2-386/build/include

[...]

Do you want networking for your virtual machines? (yes/no/help) [yes] <– yes

Configuring a bridged network for vmnet0.

The following bridged networks have been defined:

. vmnet0 is bridged to eth0

Do you wish to configure another bridged network? (yes/no) [no] <– no

Do you want to be able to use NAT networking in your virtual machines? (yes/no)
[yes] <– yes

Configuring a NAT network for vmnet8.

Do you want this program to probe for an unused private subnet? (yes/no/help)
[yes] <– yes

Probing for an unused private subnet (this can take some time)…

The subnet 172.16.191.0/255.255.255.0 appears to be unused.

The following NAT networks have been defined:

. vmnet8 is a NAT network on private subnet 172.16.191.0.

Do you wish to configure another NAT network? (yes/no) [no] <– no

Do you want to be able to use host-only networking in your virtual machines?
[yes] <– yes

Configuring a host-only network for vmnet1.

Do you want this program to probe for an unused private subnet? (yes/no/help)
[yes] <– yes

Probing for an unused private subnet (this can take some time)…

The subnet 172.16.98.0/255.255.255.0 appears to be unused.

The following host-only networks have been defined:

. vmnet1 is a host-only network on private subnet 172.16.98.0.

Do you wish to configure another host-only network? (yes/no) [no] <– no

[...]

Please specify a port for remote console connections to use [902] <– 902

Restarting internet superserver: inetd.
Configuring the VMware VmPerl Scripting API.

Building the VMware VmPerl Scripting API.

Using compiler “/usr/bin/gcc”. Use environment variable CC to override.

Installing the VMware VmPerl Scripting API.

The installation of the VMware VmPerl Scripting API succeeded.

Generating SSL Server Certificate

In which directory do you want to keep your virtual machine files?
[/var/lib/vmware/Virtual Machines] <– /var/vm

Please enter your 20-character serial number.

Type XXXXX-XXXXX-XXXXX-XXXXX or ‘Enter’ to cancel: <– serial’ i buraya giriniz

Starting VMware services:
Virtual machine monitor done
Virtual ethernet done
Bridged networking on /dev/vmnet0 done
Host-only networking on /dev/vmnet1 (background) done
Host-only networking on /dev/vmnet8 (background) done
NAT service on /dev/vmnet8 done

The configuration of VMware Server 1.0.2 build-39867 for Linux for this running
kernel completed successfully.

Tebrikler VMware-Server kurulumunu tamamladiniz

Devami bir sonraki makalede…

Dinopsys mail grubundan Okay son gunlerde Vm isine bir hayli kafayi takmis durumda sIk, sIk bize sorular ve teklif sunuyor, eh bende firsati kacirmak istemedim ve virtualization olaylarina hep beraber bir bakalim istedim. Ilk kurulum XEN, daha sonra VMware ve digerlerini kuracagiz.

Bu makalede kurulacak tum paketler Debian repository’ den kurulacaktir. Ekstra programlara ihtiyacimiz yoktur.

• Xen Kurulumu
• Xen Konfigurasyonu

Kurulum

dinopsyst:~# apt-get install linux-image-2.6-xen-vserver-686 xen-hypervisor-3.0.3-1-i386-pae xen-tools xen-linux-system-2.6.18-4-xen-vserver-686 linux-headers-2.6-xen-vserver-686 libc6-xen

ihtiyacim olacak paketleri kuruyorum.

Eger islemcisini hard olarak virtualization destegine sahipse;

dinopsys:~# apt-get install xen-ioemu-3.0.3-1

paketini kurabilirsiniz.

Eger grafikal ortamda xeni konfigure etmek istiyorsaniz xenman kurabilirsiniz.

dinopsys:~# apt-get install xenman

dinopsys:~# vi /etc/modules

Dosyasinin sonuna

loop max_loop=64
satirini ekliyorum.

Hersey tamam simdi reboot atim yeni kernel imajimi ve liblerimin aktif olmasini saglamam gerekiyor.

dinopsys:~# reboot

Konfigurasyon

Sunucumuz yeniden acildi ve hersey tamam, simdi basit bir kac ayarlama yapmamiz gerekiyor. Oncelikle network ayarlarini yapmamiz lazim, tercihim bridge olucak sekilde ayarlamak.

dinopsys:~# vi /etc/xen/xend-config.sxp

70. satira gidin ve (network-script network-bridge)

basindaki # i kaldirin.

#
# To bridge network traffic, like this:
#
# dom0: fake eth0 -> vif0.0 -+
#                            |
#                          bridge -> real eth0 -> the network
#                            |
# domU: fake eth0 -> vifN.0 -+
#
# use
#
(network-script network-bridge)
#

Simdi Xen’ e restart atiyorum ve yeni konfigurasyonun aktif olmasini sagliyorum.

dinopsys:~# etc/init.d/xend restart

dinopsys:~# ifconfig | less

peth0     Link encap:Ethernet  HWaddr FE:FF:FF:FF:FF:FF
*cut*
vif0.0    Link encap:Ethernet  HWaddr FE:FF:FF:FF:FF:FF
*cut*
xenbr0    Link encap:Ethernet  HWaddr FE:FF:FF:FF:FF:FF

Yeni interfacelerinizi gordunuz mu?

Eger goremediyseniz birseyler yanlis gitmis demektir ve Xen’ i debug modda calistirarak ve/veya loglara bakarak hatalari bulabilirisiniz.

dinopsys:~# vi /etc/xen-tools/xen-tools.conf

dir = /home/xen

kernel = /boot/vmlinuz-2.6.18-4-xen-vserver-686
initrd = /boot/initrd.img-2.6.18-4-xen-vserver-686

Yeni dizin yaratiyorum

dinopsys:~# mkdir /home/xen

ve ilk domainimi olusturuyorum

dinopsys:~# xen-create-image –debootstrap –hostname xen-etch –dhcp –dist=etch

Hostname’ i xen-etch olan Debian Etch kurulumu ve networkte dhcp serverim oldugu icin dhcp den ip almasini istedim.  Eger sizin networkunuzde dhcp yok ise –ip=ip_adresi  –gateway=gateway_adresi parametrelerini kullanabilirsiniz.

Bu islemin bitmesi biraz zaman alacak rahat olun ve arkaniza yaslanip bekleyin.

Creating Xen configuration file
Done
All done 

Hersey tamam simdi domaini baslatalim

dinopsys:~# xm create /etc/xen/xen-etch.cfg  

dinopsys:~# xm list

Name                                      ID Mem(MiB) VCPUs State   Time(s)
Domain-0                                   0      358     1 r—–    315.5
xen-etch                                   2      128     1 ——      3.7

evet burda ve calisiyor simdi login olalim;

xm console xen-etch

/etc/pure-ftpd/db/mysql.conf dosyasinin duzenlenmesi;

cp /etc/pure-ftpd/db/mysql.conf /etc/pure-ftpd/db/mysql.conf_orig

mysql.conf dosyasini yedekledim her ihtimale karsi.
cat /dev/null > /etc/pure-ftpd/db/mysql.conf
vi /etc/pure-ftpd/db/mysql.conf

MYSQLSocket      /var/run/mysqld/mysqld.sock
#MYSQLServer     localhost
#MYSQLPort       3306
MYSQLUser       pureftpd
MYSQLPassword   fikri
MYSQLDatabase   pureftpd
#MYSQLCrypt md5, cleartext, crypt() or password() – md5 is VERY RECOMMENDABLE uppon cleartext
MYSQLCrypt      md5
MYSQLGetPW      SELECT Password FROM ftpd WHERE User=”\L” AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MYSQLGetUID     SELECT Uid FROM ftpd WHERE User=”\L” AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MYSQLGetGID     SELECT Gid FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MYSQLGetDir     SELECT Dir FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MySQLGetQTASZ   SELECT QuotaSize FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)
MySQLGetQTAFS   SELECT QuotaFiles FROM ftpd WHERE User=”\L”AND status=”1″ AND (ipaccess = “*” OR ipaccess LIKE “\R”)

dosya sonu…

Dosya bu sekilde duzenledikten sonra kaydedip cikalim. Database ismine, database kullanicisina ve sifresine dikkat edelim. Makaleden bagimsiz birseyler belirlediyseniz duzenlemeyi unutmayin.

echo “yes” > /etc/pure-ftpd/conf/ChrootEveryone

Chroot secenegi her kullanicinin kendi dir’ inda kalmasini saglar ve boylelikle kullanicilar kendileri ile alakasiz dizinleri gezemezler.

echo “yes” > /etc/pure-ftpd/conf/CreateHomeDir

CreateHomeDir ise her yeni kullaniciya HomeDiR’ i olusturur.

vi /etc/default/pure-ftpd-common

# Configuration for pure-ftpd
# (this file is sourced by /bin/sh, edit accordingly)

# STANDALONE_OR_INETD
# valid values are “standalone” and “inetd”.
# Any change here overrides the setting in debconf.
STANDALONE_OR_INETD=standalone

# VIRTUALCHROOT:
# whether to use binary with virtualchroot support
# valid values are “true” or “false”
# Any change here overrides the setting in debconf.
VIRTUALCHROOT=false

# UPLOADSCRIPT: if this is set and the daemon is run in standalone mode,
# pure-uploadscript will also be run to spawn the program given below
# for handling uploads. see /usr/share/doc/pure-ftpd/README.gz or
# pure-uploadscript(8)

# example: UPLOADSCRIPT=/usr/local/sbin/uploadhandler.pl
UPLOADSCRIPT=

# if set, pure-uploadscript will spawn $UPLOADSCRIPT running as the
# given uid and gid
UPLOADUID=
UPLOADGID=

#dosya sonu

STANDALONE_OR_INETD seceneginin Standalone olduguna emin olun.

vi /etc/inetd.conf

[...]
#ftp     stream  tcp     nowait  root    /usr/sbin/tcpd /usr/sbin/pure-ftpd-wrapper
[...]

/etc/init.d/openbsd-inetd restart
/etc/init.d/pure-ftpd-mysql restart

Servislere restart atiyoruz.

5. Kullanici ekleme ve test etme

mysql -u root -p

USE pureftpd;

INSERT INTO `ftpd` (`User`, `status`, `Password`, `Uid`, `Gid`, `Dir`, `ULBandwidth`, `DLBandwidth`, `comment`, `ipaccess`, `QuotaSize`, `QuotaFiles`) VALUES (‘dinopsys’, ‘1′, MD5(‘qazxsw’), ‘2007′, ‘2007′, ‘/home/www.dinopsys.net’, ‘100′, ‘100′, ”, ‘*’, ‘50′, ‘0′);

MySQL’ e root olarak giris yaptim, Pureftpd db sine baglandim, dinopsys kullanici isimli qazxsw sifreli 2007 idli user ve gruba bagli home dizini /home/www.dinopsys.net olan 100 Kbps upload ve download limiti olan, herhangi bir ip adresinden ftpye erisebilen ve 50 mb kotasi olan bir kullanici olusturdum.

quit;

komutuyla db den ayrildim.

ls -l /home

server1:/etc/default# ls -l /home
total 8
drwxr-xr-x 2 ftpuser       ftpgroup      4096 2007-05-04 11:21 www.dinopsys.net

Evet klasorumde olusmus hayirli olsun…

• MySQL Destekli PureFtpd Kurulumu
• PhpMyAdmin Kurulumu
• MySQL Kurulumu
• PureFTPd MySQL Db’ si olusturma

islemlerimi yapacagiz.

1. MySQL ve PhpMyAdmin Kurulumu

apt-get install mysql-server mysql-client libmysqlclient15-dev phpmyadmin apache2

komutuyla ihtiyacim olan paketleri kuruyorum, hemen ardindan ilk isim MySQL root password’ unu atamak oluyor.

mysqladmin -u root password dinopsys

MySQL root sifremi dinopsys olarak atadim.

2. MySQL Destekli PureFTPd’ nin Kurulmasi

apt-get install pure-ftpd-mysql

komutuyla direk kurulumumu yapiyorum.

Ftp icin bir user ve user grubuna ihtiyacimiz var..

groupadd -g 2007 ftpgroup
useradd -u 2007 -s /bin/false -d /bin/null -c “dinopsys pureftpd user” -g ftpgroup ftpuser

komutlari ile 2007 id’ li kullanici ve grubu olusturdum.

3. Pure-Ftpd icin MySQL Database

mysql -u root -p

CREATE DATABASE pureftpd;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@'localhost’ IDENTIFIED BY ‘fikri’;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@'localhost.localdomain’ IDENTIFIED BY ‘fikri’;
FLUSH PRIVILEGES;

MySQL’ e root olarak baglandim. pureftpd ismiyle db olusturdum. Db ye erisim icin fikri sifresi ile pureftpd kullanicisi olusturdum ve select, insert, update, delete, create, drop gibi yetkileri verdim.

USE pureftpd;

CREATE TABLE ftpd (
User varchar(16) NOT NULL default ”,
status enum(‘0′,’1′) NOT NULL default ‘0′,
Password varchar(64) NOT NULL default ”,
Uid varchar(11) NOT NULL default ‘-1′,
Gid varchar(11) NOT NULL default ‘-1′,
Dir varchar(128) NOT NULL default ”,
ULBandwidth smallint(5) NOT NULL default ‘0′,
DLBandwidth smallint(5) NOT NULL default ‘0′,
comment tinytext NOT NULL,
ipaccess varchar(15) NOT NULL default ‘*’,
QuotaSize smallint(5) NOT NULL default ‘0′,
QuotaFiles int(11) NOT NULL default 0,
PRIMARY KEY (User),
UNIQUE KEY User (User)
) TYPE=MyISAM;

quit;

pureftpd db’ sine gecis yaptim ve ftpd ismiyle bir tablo olusturdum, quit komutu ile MySQL’ den ayrildim. Tablodaki fieldlara dikkat ederseniz neler yapabilecegimiz konusunda az cok fikir sahibi olabilirsiniz.

/etc/proftpd/proftpd.conf dosyasini aciyoruz ve  UseIPv6 secenegini off yapiyoruz;

vi /etc/proftpd/proftpd.conf

[...]
UseIPv6                         off
[...]

Ayni dosyada asagidaki degisiklikleri yapiyoruz;

[...]
DefaultRoot ~# The passwords in MySQL are encrypted using CRYPT
SQLAuthTypes            Plaintext Crypt
SQLAuthenticate         users groups# used to connect to the database
# databasename@host database_user user_password
SQLConnectInfo  ftp@localhost proftpd dinopsysftp# Here we tell ProFTPd the names of the database columns in the “usertable”
# we want it to interact with. Match the names with those in the db
SQLUserInfo     ftpuser userid passwd uid gid homedir shell# Here we tell ProFTPd the names of the database columns in the “grouptable”
# we want it to interact with. Again the names match with those in the db
SQLGroupInfo    ftpgroup groupname gid members# set min UID and GID – otherwise these are 999 each
SQLMinID        500

# create a user’s home directory on demand if it doesn’t exist
SQLHomedirOnDemand on

# Update count every time user logs in
SQLLog PASS updatecount
SQLNamedQuery updatecount UPDATE “count=count+1, accessed=now() WHERE userid=’%u’” ftpuser

# Update modified everytime user uploads or deletes a file
SQLLog  STOR,DELE modified
SQLNamedQuery modified UPDATE “modified=now() WHERE userid=’%u’” ftpuser

# User quotas
# ===========
QuotaEngine on
QuotaDirectoryTally on
QuotaDisplayUnits Mb
QuotaShowQuotas on

SQLNamedQuery get-quota-limit SELECT “name, quota_type, per_session, limit_type, bytes_in_avail, bytes_out_avail, bytes_xfer_avail, files_in_avail, files_out_avail, files_xfer_avail FROM ftpquotalimits WHERE name = ‘%{0}’ AND quota_type = ‘%{1}’”

SQLNamedQuery get-quota-tally SELECT “name, quota_type, bytes_in_used, bytes_out_used, bytes_xfer_used, files_in_used, files_out_used, files_xfer_used FROM ftpquotatallies WHERE name = ‘%{0}’ AND quota_type = ‘%{1}’”

SQLNamedQuery update-quota-tally UPDATE “bytes_in_used = bytes_in_used + %{0}, bytes_out_used = bytes_out_used + %{1}, bytes_xfer_used = bytes_xfer_used + %{2}, files_in_used = files_in_used + %{3}, files_out_used = files_out_used + %{4}, files_xfer_used = files_xfer_used + %{5} WHERE name = ‘%{6}’ AND quota_type = ‘%{7}’” ftpquotatallies

SQLNamedQuery insert-quota-tally INSERT “%{0}, %{1}, %{2}, %{3}, %{4}, %{5}, %{6}, %{7}” ftpquotatallies

QuotaLimitTable sql:/get-quota-limit
QuotaTallyTable sql:/get-quota-tally/update-quota-tally/insert-quota-tally

RootLogin off
RequireValidShell off
[...]

/etc/proftpd/modules.conf dosyasini aciyoruz ve LoadModule mod_sql_postgres.c satirinin basina # koymak kaydi ile kapatiyoruz.

vi /etc/proftpd/modules.conf

[...]
#LoadModule mod_sql_postgres.c
[...]

ve yaptigimiz ayarlarin gecerli olmasi icin simdi proftpd yi yeniden baslatiyoruz;

/etc/init.d/proftpd restart  

5. Database’ e Kullanici Eklemek ve Test Etmek

mysql -u root -p

Komutu ile mysql shelline rootu olarak login oluyoruz ve

USE ftp;

komutu ile ftp database’ ine gecis yapiyoruz.

INSERT INTO `ftpgroup` (`groupname`, `gid`, `members`) VALUES (‘ftpgroup’, 2007, ‘ftpuser’);

Kullanici ve grup eklerken 2007 den farkli bir id kullandiysaniz lutfen ona gore duzenleyin.

ftpgroup tablosu ile isimiz bitti. Simdi yeni kullanici olusturmak istiyoruz ve bunun icin ftpquotalimits ve ftpuser tablolarini kullanmamiz gerekiyor. Ornek olarak dinopsysuser kullanici isimli 15MB kotasi olan sifresi dinopsys olan bir kullanici olusturuyoruz.

INSERT INTO `ftpquotalimits` (`name`, `quota_type`, `per_session`, `limit_type`, `bytes_in_avail`, `bytes_out_avail`, `bytes_xfer_avail`, `files_in_avail`, `files_out_avail`, `files_xfer_avail`) VALUES (‘dinopsysuser’, ‘user’, ‘true’, ‘hard’, 15728640, 0, 0, 0, 0, 0);

INSERT INTO `ftpuser` (`id`, `userid`, `passwd`, `uid`, `gid`, `homedir`, `shell`, `count`, `accessed`, `modified`) VALUES (1, ‘dinopsysuser’, ‘dinopsys’, 2007, 2007, ‘/home/www.dinopsys.net’, ‘/sbin/nologin’, 0, ”, ”);

quit;

komutu ile tekrar sistem shelline donuyoruz. Tekrar uyarmakta fayda goruyorum; eger makaleye bagli kalmadan kurulum yapiyorsaniz ve user-group olustururken 2007 disinda bir id verdiyseniz buralari o id ye gore duzenleyin.

Simdi ne yaptigimiza gelelim;

/home dizini altinda www.dinopsys.net dizininde dinopsysuser kullanicina dinopsys sifresi ile 15 MB lik bir alan tanimladik.

ls -l /home

komutu ile home dizinine bakiyoruz ve www.dinopsys.net dizinin otomatik olarak olusturuldugunu ve haklarinin ftpuser – ftpgroup’ a verildigini goruyoruz.

server1:~# ls -l /home/
total 8
drwxr-xr-x 2 ftp           nogroup       4096 2007-05-03 08:50 ftp
drwxr-xr-x 2 ftpuser       ftpgroup      4096 2007-05-03 11:18 www.dinopsys.net

Dilerseniz user ekleme cikarma islemlerini makalenin basinda kurdugumuz PMA ile yapabilirsiniz.

Kolay gelsin.

Bu makalede Debian 4.0 Etch uzerine;

• MySQL Kurulumu
• PhpMyAdmin Kurulumu
• MySQL Destekli ProFTPd Kurulumu
• Apache2 Kurulumu

yapacagiz.

1. MySQL ve PhpMyAdmin Kurulumu

apt-get install mysql-server mysql-client libmysqlclient15-dev phpmyadmin apache2

komutu ile tek satirda istedigim programlarin kurulmasini sagliyorum.

Kurulum isleminin ardindan benim icin buyuk risk tasiyan database root sifremi ayarliyorum;

mysqladmin -u root password dinopsys

mysql root sifremi dinopsys olarak atadim.

2. Mysql destekli ProFTPd Kurulumu

apt-get install proftpd-mysql

kurulum icin yukaridaki gerekli komutu calistiriyorum ve bana sordugu soruya;

Run proftpd from inetd or standalone? <– standalone

seklinde yanit veriyorum.

Simdi bir ftpgroup ismiyle grup, ftpuser ismiylede user olusturacagim;

groupadd -g 2007 ftpgroup
useradd -u 2007 -s /bin/false -d /bin/null -c “proftpd user” -g ftpgroup ftpuser

yukaridaki komutlarla id si 2007 olan kullanici ve gruplarimi olusturdum.

3. ProFtp icin MySQL database’ i olusturalim

mysql -u root -p

komutu ile sifremizi girerek mysql’ e root olarak login olalim.

Sirasiyla;

create database ftp;
GRANT SELECT, INSERT, UPDATE, DELETE ON ftp.* TO ‘proftpd’@'localhost’ IDENTIFIED BY ‘dinopsysftp’;
GRANT SELECT, INSERT, UPDATE, DELETE ON ftp.* TO ‘proftpd’@'localhost.localdomain’ IDENTIFIED BY ‘dinopsysftp’;
FLUSH PRIVILEGES;

database imizi olusturduk kullanici adi ve sifrenizi belirttik. Simdi gerekli database tablolarini olusturalim;

USE ftp;

CREATE TABLE ftpgroup (
groupname varchar(16) NOT NULL default ”,
gid smallint(6) NOT NULL default ‘5500′,
members varchar(16) NOT NULL default ”,
KEY groupname (groupname)
) TYPE=MyISAM COMMENT=’ProFTP group table’;

CREATE TABLE ftpquotalimits (
name varchar(30) default NULL,
quota_type enum(‘user’,'group’,'class’,'all’) NOT NULL default ‘user’,
per_session enum(‘false’,'true’) NOT NULL default ‘false’,
limit_type enum(’soft’,'hard’) NOT NULL default ’soft’,
bytes_in_avail int(10) unsigned NOT NULL default ‘0′,
bytes_out_avail int(10) unsigned NOT NULL default ‘0′,
bytes_xfer_avail int(10) unsigned NOT NULL default ‘0′,
files_in_avail int(10) unsigned NOT NULL default ‘0′,
files_out_avail int(10) unsigned NOT NULL default ‘0′,
files_xfer_avail int(10) unsigned NOT NULL default ‘0′
) TYPE=MyISAM;

CREATE TABLE ftpquotatallies (
name varchar(30) NOT NULL default ”,
quota_type enum(‘user’,'group’,'class’,'all’) NOT NULL default ‘user’,
bytes_in_used int(10) unsigned NOT NULL default ‘0′,
bytes_out_used int(10) unsigned NOT NULL default ‘0′,
bytes_xfer_used int(10) unsigned NOT NULL default ‘0′,
files_in_used int(10) unsigned NOT NULL default ‘0′,
files_out_used int(10) unsigned NOT NULL default ‘0′,
files_xfer_used int(10) unsigned NOT NULL default ‘0′
) TYPE=MyISAM;

CREATE TABLE ftpuser (
id int(10) unsigned NOT NULL auto_increment,
userid varchar(32) NOT NULL default ”,
passwd varchar(32) NOT NULL default ”,
uid smallint(6) NOT NULL default ‘5500′,
gid smallint(6) NOT NULL default ‘5500′,
homedir varchar(255) NOT NULL default ”,
shell varchar(16) NOT NULL default ‘/sbin/nologin’,
count int(11) NOT NULL default ‘0′,
accessed datetime NOT NULL default ‘0000-00-00 00:00:00′,
modified datetime NOT NULL default ‘0000-00-00 00:00:00′,
PRIMARY KEY (id),
UNIQUE KEY userid (userid)
) TYPE=MyISAM COMMENT=’ProFTP user table’;

quit;

ftpgroup, ftpquotalimits, ftpquotatallies, ftpuser tablolarini olusturduk. Daha sonra phpmyadmin vasitasi ile user ekleyecegiz, silecegiz, duzenleyecegiz.