White space fix only. Translators can ignore.

Approved by:	gjb (mentor)
This commit is contained in:
Dru Lavigne 2013-01-25 00:30:28 +00:00
parent 38301f322a
commit edf0e27a19
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=40744

View file

@ -340,22 +340,27 @@ server-program-arguments</programlisting>
<entry>tcp, tcp4</entry> <entry>tcp, tcp4</entry>
<entry>TCP IPv4</entry> <entry>TCP IPv4</entry>
</row> </row>
<row> <row>
<entry>udp, udp4</entry> <entry>udp, udp4</entry>
<entry>UDP IPv4</entry> <entry>UDP IPv4</entry>
</row> </row>
<row> <row>
<entry>tcp6</entry> <entry>tcp6</entry>
<entry>TCP IPv6</entry> <entry>TCP IPv6</entry>
</row> </row>
<row> <row>
<entry>udp6</entry> <entry>udp6</entry>
<entry>UDP IPv6</entry> <entry>UDP IPv6</entry>
</row> </row>
<row> <row>
<entry>tcp46</entry> <entry>tcp46</entry>
<entry>Both TCP IPv4 and v6</entry> <entry>Both TCP IPv4 and v6</entry>
</row> </row>
<row> <row>
<entry>udp46</entry> <entry>udp46</entry>
<entry>Both UDP IPv4 and v6</entry> <entry>Both UDP IPv4 and v6</entry>
@ -635,12 +640,14 @@ server-program-arguments</programlisting>
requests from the <acronym>NFS</acronym> requests from the <acronym>NFS</acronym>
clients.</entry> clients.</entry>
</row> </row>
<row> <row>
<entry><application>mountd</application></entry> <entry><application>mountd</application></entry>
<entry>The <acronym>NFS</acronym> mount daemon which <entry>The <acronym>NFS</acronym> mount daemon which
carries out the requests that &man.nfsd.8; passes on carries out the requests that &man.nfsd.8; passes on
to it.</entry> to it.</entry>
</row> </row>
<row> <row>
<entry><application>rpcbind</application></entry> <entry><application>rpcbind</application></entry>
<entry> This daemon allows <entry> This daemon allows
@ -662,6 +669,7 @@ server-program-arguments</programlisting>
<sect2 id="network-configuring-nfs"> <sect2 id="network-configuring-nfs">
<title>Configuring <acronym>NFS</acronym></title> <title>Configuring <acronym>NFS</acronym></title>
<indexterm> <indexterm>
<primary>NFS</primary> <primary>NFS</primary>
<secondary>configuration</secondary> <secondary>configuration</secondary>
@ -799,8 +807,8 @@ mountd_flags="-r"</programlisting>
<screen>&prompt.root; <userinput>/etc/rc.d/mountd onereload</userinput></screen> <screen>&prompt.root; <userinput>/etc/rc.d/mountd onereload</userinput></screen>
<para>Please refer to <xref linkend="configtuning-rcd"/> for more <para>Please refer to <xref linkend="configtuning-rcd"/> for
information about using rc scripts.</para> more information about using rc scripts.</para>
<para>Alternatively, a reboot will make FreeBSD set everything <para>Alternatively, a reboot will make FreeBSD set everything
up properly. A reboot is not necessary though. up properly. A reboot is not necessary though.
@ -1155,6 +1163,7 @@ Exports list on foobar:
<sect2> <sect2>
<title>What Is It?</title> <title>What Is It?</title>
<indexterm><primary>NIS</primary></indexterm> <indexterm><primary>NIS</primary></indexterm>
<indexterm><primary>Solaris</primary></indexterm> <indexterm><primary>Solaris</primary></indexterm>
<indexterm><primary>HP-UX</primary></indexterm> <indexterm><primary>HP-UX</primary></indexterm>
@ -1237,6 +1246,7 @@ Exports list on foobar:
domainname does not have anything to do with domainname does not have anything to do with
<acronym>DNS</acronym>.</entry> <acronym>DNS</acronym>.</entry>
</row> </row>
<row> <row>
<entry><application>rpcbind</application></entry> <entry><application>rpcbind</application></entry>
@ -1247,6 +1257,7 @@ Exports list on foobar:
will be impossible to run an NIS server, or to act as will be impossible to run an NIS server, or to act as
an NIS client.</entry> an NIS client.</entry>
</row> </row>
<row> <row>
<entry><application>ypbind</application></entry> <entry><application>ypbind</application></entry>
@ -1259,6 +1270,7 @@ Exports list on foobar:
on a client machine, it will not be able to access the on a client machine, it will not be able to access the
NIS server.</entry> NIS server.</entry>
</row> </row>
<row> <row>
<entry><application>ypserv</application></entry> <entry><application>ypserv</application></entry>
<entry>Should only be running on NIS servers; this is <entry>Should only be running on NIS servers; this is
@ -1274,6 +1286,7 @@ Exports list on foobar:
<application>ypbind</application> process on the <application>ypbind</application> process on the
client.</entry> client.</entry>
</row> </row>
<row> <row>
<entry><application>rpc.yppasswdd</application></entry> <entry><application>rpc.yppasswdd</application></entry>
<entry>Another process that should only be running on <entry>Another process that should only be running on
@ -1404,21 +1417,25 @@ Exports list on foobar:
<entry><hostid role="ipaddr">10.0.0.2</hostid></entry> <entry><hostid role="ipaddr">10.0.0.2</hostid></entry>
<entry>NIS master</entry> <entry>NIS master</entry>
</row> </row>
<row> <row>
<entry><hostid>coltrane</hostid></entry> <entry><hostid>coltrane</hostid></entry>
<entry><hostid role="ipaddr">10.0.0.3</hostid></entry> <entry><hostid role="ipaddr">10.0.0.3</hostid></entry>
<entry>NIS slave</entry> <entry>NIS slave</entry>
</row> </row>
<row> <row>
<entry><hostid>basie</hostid></entry> <entry><hostid>basie</hostid></entry>
<entry><hostid role="ipaddr">10.0.0.4</hostid></entry> <entry><hostid role="ipaddr">10.0.0.4</hostid></entry>
<entry>Faculty workstation</entry> <entry>Faculty workstation</entry>
</row> </row>
<row> <row>
<entry><hostid>bird</hostid></entry> <entry><hostid>bird</hostid></entry>
<entry><hostid role="ipaddr">10.0.0.5</hostid></entry> <entry><hostid role="ipaddr">10.0.0.5</hostid></entry>
<entry>Client machine</entry> <entry>Client machine</entry>
</row> </row>
<row> <row>
<entry><hostid>cli[1-11]</hostid></entry> <entry><hostid>cli[1-11]</hostid></entry>
<entry> <entry>
@ -1517,6 +1534,7 @@ Exports list on foobar:
<sect4> <sect4>
<title>Setting Up a NIS Master Server</title> <title>Setting Up a NIS Master Server</title>
<indexterm> <indexterm>
<primary>NIS</primary> <primary>NIS</primary>
<secondary>server configuration</secondary> <secondary>server configuration</secondary>
@ -1531,18 +1549,23 @@ Exports list on foobar:
<procedure> <procedure>
<step> <step>
<para><programlisting>nisdomainname="test-domain"</programlisting> <para><programlisting>nisdomainname="test-domain"</programlisting>
This line will set the NIS domainname to This line will set the NIS domainname to
<literal>test-domain</literal> <literal>test-domain</literal>
upon network setup (e.g., after reboot).</para> upon network setup (e.g., after reboot).</para>
</step> </step>
<step> <step>
<para><programlisting>nis_server_enable="YES"</programlisting> <para><programlisting>nis_server_enable="YES"</programlisting>
This will tell FreeBSD to start up the NIS server This will tell FreeBSD to start up the NIS server
processes when the networking is next brought processes when the networking is next brought
up.</para> up.</para>
</step> </step>
<step> <step>
<para><programlisting>nis_yppasswdd_enable="YES"</programlisting> <para><programlisting>nis_yppasswdd_enable="YES"</programlisting>
This will enable the <command>rpc.yppasswdd</command> This will enable the <command>rpc.yppasswdd</command>
daemon which, as mentioned above, will allow users to daemon which, as mentioned above, will allow users to
change their NIS password from a client change their NIS password from a client
@ -1570,6 +1593,7 @@ Exports list on foobar:
<sect4> <sect4>
<title>Initializing the NIS Maps</title> <title>Initializing the NIS Maps</title>
<indexterm> <indexterm>
<primary>NIS</primary> <primary>NIS</primary>
<secondary>maps</secondary> <secondary>maps</secondary>
@ -1661,6 +1685,7 @@ ellington has been setup as an YP master server without any errors.</screen>
<sect4> <sect4>
<title>Setting up a NIS Slave Server</title> <title>Setting up a NIS Slave Server</title>
<indexterm> <indexterm>
<primary>NIS</primary> <primary>NIS</primary>
<secondary>slave server</secondary> <secondary>slave server</secondary>
@ -1785,7 +1810,9 @@ Don't forget to update map ypservers on ellington.</screen>
another server.</para> another server.</para>
<sect4> <sect4>
<title>Setting Up a NIS Client</title> <indexterm> <title>Setting Up a NIS Client</title>
<indexterm>
<primary>NIS</primary> <secondary>client <primary>NIS</primary> <secondary>client
configuration</secondary> configuration</secondary>
</indexterm> <para>Setting up a FreeBSD machine to be a NIS </indexterm> <para>Setting up a FreeBSD machine to be a NIS
@ -2006,6 +2033,7 @@ basie&prompt.root;</screen>
</sect2info> </sect2info>
<title>Using Netgroups</title> <title>Using Netgroups</title>
<indexterm><primary>netgroups</primary></indexterm> <indexterm><primary>netgroups</primary></indexterm>
<para>The method shown in the previous section works reasonably <para>The method shown in the previous section works reasonably
@ -2097,6 +2125,7 @@ basie&prompt.root;</screen>
employees are allowed to log onto these employees are allowed to log onto these
machines.</entry> machines.</entry>
</row> </row>
<row> <row>
<!-- gluttony was omitted because it was too fat --> <!-- gluttony was omitted because it was too fat -->
<entry><hostid>pride</hostid>, <hostid>greed</hostid>, <entry><hostid>pride</hostid>, <hostid>greed</hostid>,
@ -2106,6 +2135,7 @@ basie&prompt.root;</screen>
department are allowed to login onto these department are allowed to login onto these
machines.</entry> machines.</entry>
</row> </row>
<row> <row>
<entry><hostid>one</hostid>, <hostid>two</hostid>, <entry><hostid>one</hostid>, <hostid>two</hostid>,
<hostid>three</hostid>, <hostid>four</hostid>, <hostid>three</hostid>, <hostid>four</hostid>,
@ -2509,6 +2539,7 @@ nis_client_flags="-S <replaceable>NIS domain</replaceable>,<replaceable>server</
<sect2> <sect2>
<title>Password Formats</title> <title>Password Formats</title>
<indexterm> <indexterm>
<primary>NIS</primary> <primary>NIS</primary>
<secondary>password formats</secondary> <secondary>password formats</secondary>
@ -2585,6 +2616,7 @@ nis_client_flags="-S <replaceable>NIS domain</replaceable>,<replaceable>server</
<sect2> <sect2>
<title>What Is DHCP?</title> <title>What Is DHCP?</title>
<indexterm> <indexterm>
<primary>Dynamic Host Configuration Protocol</primary> <primary>Dynamic Host Configuration Protocol</primary>
<see>DHCP</see> <see>DHCP</see>
@ -2619,6 +2651,7 @@ nis_client_flags="-S <replaceable>NIS domain</replaceable>,<replaceable>server</
<sect2> <sect2>
<title>How It Works</title> <title>How It Works</title>
<indexterm><primary>UDP</primary></indexterm> <indexterm><primary>UDP</primary></indexterm>
<para>When <command>dhclient</command>, the DHCP client, is <para>When <command>dhclient</command>, the DHCP client, is
executed on the client machine, it begins broadcasting executed on the client machine, it begins broadcasting
@ -2644,7 +2677,9 @@ nis_client_flags="-S <replaceable>NIS domain</replaceable>,<replaceable>server</
<command>dhclient</command>. DHCP client support is provided <command>dhclient</command>. DHCP client support is provided
within both the installer and the base system, obviating the within both the installer and the base system, obviating the
need for detailed knowledge of network configurations on any need for detailed knowledge of network configurations on any
network that runs a DHCP server.</para> <indexterm> network that runs a DHCP server.</para>
<indexterm>
<primary><application>sysinstall</application></primary> <primary><application>sysinstall</application></primary>
</indexterm> </indexterm>
@ -2749,6 +2784,7 @@ dhclient_flags=""</programlisting>
<sect2> <sect2>
<title>Files</title> <title>Files</title>
<indexterm> <indexterm>
<primary>DHCP</primary> <primary>DHCP</primary>
<secondary>configuration files</secondary> <secondary>configuration files</secondary>
@ -2757,33 +2793,33 @@ dhclient_flags=""</programlisting>
<listitem> <listitem>
<para><filename>/etc/dhclient.conf</filename></para> <para><filename>/etc/dhclient.conf</filename></para>
<para><command>dhclient</command> requires a configuration <para><command>dhclient</command> requires a configuration
file, <filename>/etc/dhclient.conf</filename>. Typically file, <filename>/etc/dhclient.conf</filename>.
the file contains only comments, the defaults being Typically the file contains only comments, the defaults
reasonably sane. This configuration file is described by being reasonably sane. This configuration file is
the &man.dhclient.conf.5; described by the &man.dhclient.conf.5; manual
manual page.</para> page.</para>
</listitem> </listitem>
<listitem> <listitem>
<para><filename>/sbin/dhclient</filename></para> <para><filename>/sbin/dhclient</filename></para>
<para><command>dhclient</command> is statically linked and <para><command>dhclient</command> is statically linked and
resides in <filename>/sbin</filename>. The resides in <filename>/sbin</filename>. The
&man.dhclient.8; manual page gives more information about &man.dhclient.8; manual page gives more information
<command>dhclient</command>.</para> about <command>dhclient</command>.</para>
</listitem> </listitem>
<listitem> <listitem>
<para><filename>/sbin/dhclient-script</filename></para> <para><filename>/sbin/dhclient-script</filename></para>
<para><command>dhclient-script</command> is the <para><command>dhclient-script</command> is the
FreeBSD-specific DHCP client configuration script. It is FreeBSD-specific DHCP client configuration script. It
described in &man.dhclient-script.8;, but should not need is described in &man.dhclient-script.8;, but should not
any user modification to function properly.</para> need any user modification to function properly.</para>
</listitem> </listitem>
<listitem> <listitem>
<para><filename>/var/db/dhclient.leases.<replaceable>interface</replaceable></filename></para> <para><filename>/var/db/dhclient.leases.<replaceable>interface</replaceable></filename></para>
<para>The DHCP client keeps a database of valid leases in <para>The DHCP client keeps a database of valid leases
this file, which is written as a log. in this file, which is written as a log.
&man.dhclient.leases.5; gives a slightly longer &man.dhclient.leases.5; gives a slightly longer
description.</para> description.</para>
</listitem> </listitem>
@ -2795,8 +2831,8 @@ dhclient_flags=""</programlisting>
<para>The DHCP protocol is fully described in <ulink <para>The DHCP protocol is fully described in <ulink
url="http://www.freesoft.org/CIE/RFC/2131/">RFC url="http://www.freesoft.org/CIE/RFC/2131/">RFC
2131</ulink>. An informational resource has also been set up 2131</ulink>. An informational resource has also been set
at <ulink url="http://www.dhcp.org/"></ulink>.</para> up at <ulink url="http://www.dhcp.org/"></ulink>.</para>
</sect2> </sect2>
<sect2 id="network-dhcp-server"> <sect2 id="network-dhcp-server">
@ -2819,6 +2855,7 @@ dhclient_flags=""</programlisting>
<sect3> <sect3>
<title>DHCP Server Installation</title> <title>DHCP Server Installation</title>
<indexterm> <indexterm>
<primary>DHCP</primary> <primary>DHCP</primary>
<secondary>installation</secondary> <secondary>installation</secondary>
@ -2862,6 +2899,7 @@ dhclient_flags=""</programlisting>
<sect3> <sect3>
<title>Configuring the DHCP Server</title> <title>Configuring the DHCP Server</title>
<indexterm> <indexterm>
<primary>DHCP</primary> <primary>DHCP</primary>
<secondary>dhcpd.conf</secondary> <secondary>dhcpd.conf</secondary>
@ -2986,6 +3024,7 @@ dhcpd_ifaces="dc0"</programlisting>
<sect3> <sect3>
<title>Files</title> <title>Files</title>
<indexterm> <indexterm>
<primary>DHCP</primary> <primary>DHCP</primary>
<secondary>configuration files</secondary> <secondary>configuration files</secondary>
@ -3063,6 +3102,7 @@ dhcpd_ifaces="dc0"</programlisting>
<sect2> <sect2>
<title>Overview</title> <title>Overview</title>
<indexterm><primary>BIND</primary></indexterm> <indexterm><primary>BIND</primary></indexterm>
<para>&os; utilizes, by default, a version of BIND (Berkeley <para>&os; utilizes, by default, a version of BIND (Berkeley
@ -3272,6 +3312,7 @@ dhcpd_ifaces="dc0"</programlisting>
<sect2> <sect2>
<title>How It Works</title> <title>How It Works</title>
<para>In &os;, the BIND daemon is called <para>In &os;, the BIND daemon is called
<application>named</application>.</para> <application>named</application>.</para>
@ -3725,6 +3766,7 @@ zone "1.168.192.in-addr.arpa" {
<sect3> <sect3>
<title>Zone Files</title> <title>Zone Files</title>
<indexterm> <indexterm>
<primary>BIND</primary> <primary>BIND</primary>
<secondary>zone files</secondary> <secondary>zone files</secondary>
@ -3966,6 +4008,7 @@ mail IN A 192.168.1.5</programlisting>
<sect2> <sect2>
<title>Caching Name Server</title> <title>Caching Name Server</title>
<indexterm> <indexterm>
<primary>BIND</primary> <primary>BIND</primary>
<secondary>caching name server</secondary> <secondary>caching name server</secondary>
@ -3979,24 +4022,25 @@ mail IN A 192.168.1.5</programlisting>
<sect2> <sect2>
<title><acronym <title><acronym
role="Domain Name Security Extensions">DNSSEC</acronym></title> role="Domain Name Security Extensions">DNSSEC</acronym></title>
<indexterm> <indexterm>
<primary>BIND</primary> <primary>BIND</primary>
<secondary>DNS security extensions</secondary> <secondary>DNS security extensions</secondary>
</indexterm> </indexterm>
<para>Domain Name System Security Extensions, or <acronym <para>Domain Name System Security Extensions, or <acronym
role="Domain Name Security Extensions">DNSSEC</acronym> for role="Domain Name Security Extensions">DNSSEC</acronym>
short, is a suite of specifications to protect resolving name for short, is a suite of specifications to protect resolving
servers from forged <acronym>DNS</acronym> data, such as name servers from forged <acronym>DNS</acronym> data, such
spoofed <acronym>DNS</acronym> records. By using digital as spoofed <acronym>DNS</acronym> records. By using digital
signatures, a resolver can verify the integrity of the record. signatures, a resolver can verify the integrity of the
Note that <acronym record. Note that <acronym
role="Domain Name Security Extensions">DNSSEC</acronym> only role="Domain Name Security Extensions">DNSSEC</acronym>
provides integrity via digitally signing the Resource only provides integrity via digitally signing the Resource
Records (<acronym role="Resource Record">RR</acronym>s). It Records (<acronym role="Resource Record">RR</acronym>s).
provides neither confidentiality nor protection against false It provides neither confidentiality nor protection against
end-user assumptions. This means that it cannot protect false end-user assumptions. This means that it cannot
against people going to <hostid protect against people going to <hostid
role="domainname">example.net</hostid> instead of <hostid role="domainname">example.net</hostid> instead of <hostid
role="domainname">example.com</hostid>. The only thing role="domainname">example.com</hostid>. The only thing
<acronym>DNSSEC</acronym> does is authenticate that the data <acronym>DNSSEC</acronym> does is authenticate that the data
@ -4610,6 +4654,7 @@ $include Kexample.com.+005+nnnnn.ZSK.key ; ZSK</programlisting>
following commands:</para> following commands:</para>
<screen>&prompt.root; <userinput>/usr/local/etc/rc.d/apache22 configtest</userinput></screen> <screen>&prompt.root; <userinput>/usr/local/etc/rc.d/apache22 configtest</userinput></screen>
<screen>&prompt.root; <userinput>service apache22 configtest</userinput></screen> <screen>&prompt.root; <userinput>service apache22 configtest</userinput></screen>
<note> <note>
@ -4626,6 +4671,7 @@ $include Kexample.com.+005+nnnnn.ZSK.key ; ZSK</programlisting>
mechanisms:</para> mechanisms:</para>
<screen>&prompt.root; <userinput>/usr/local/etc/rc.d/apache22 start</userinput></screen> <screen>&prompt.root; <userinput>/usr/local/etc/rc.d/apache22 start</userinput></screen>
<screen>&prompt.root; <userinput>service apache22 start</userinput></screen> <screen>&prompt.root; <userinput>service apache22 start</userinput></screen>
<para>The <command>httpd</command> service can be tested by <para>The <command>httpd</command> service can be tested by
@ -5166,6 +5212,7 @@ DocumentRoot /www/someotherdomain.tld
<application>Samba</application>:</para> <application>Samba</application>:</para>
<programlisting>swat stream tcp nowait/400 root /usr/local/sbin/swat swat</programlisting> <programlisting>swat stream tcp nowait/400 root /usr/local/sbin/swat swat</programlisting>
<para>As explained in <xref linkend="network-inetd-reread"/>, <para>As explained in <xref linkend="network-inetd-reread"/>,
the <application>inetd</application> configuration must be the <application>inetd</application> configuration must be
reloaded after this configuration file is changed.</para> reloaded after this configuration file is changed.</para>
@ -5289,6 +5336,7 @@ DocumentRoot /www/someotherdomain.tld
the following command:</para> the following command:</para>
<screen>&prompt.root; <userinput>smbpasswd -a username</userinput></screen> <screen>&prompt.root; <userinput>smbpasswd -a username</userinput></screen>
<note> <note>
<para>The recommended backend is now <para>The recommended backend is now
<literal>tdbsam</literal>, and the following command <literal>tdbsam</literal>, and the following command
@ -5323,6 +5371,7 @@ DocumentRoot /www/someotherdomain.tld
<para>Or, for fine grain control:</para> <para>Or, for fine grain control:</para>
<programlisting>nmbd_enable="YES"</programlisting> <programlisting>nmbd_enable="YES"</programlisting>
<programlisting>smbd_enable="YES"</programlisting> <programlisting>smbd_enable="YES"</programlisting>
<note> <note>
@ -5339,8 +5388,8 @@ Starting SAMBA: removing stale tdbs :
Starting nmbd. Starting nmbd.
Starting smbd.</screen> Starting smbd.</screen>
<para>Please refer to <xref linkend="configtuning-rcd"/> for more <para>Please refer to <xref linkend="configtuning-rcd"/> for
information about using rc scripts.</para> more information about using rc scripts.</para>
<para><application>Samba</application> actually consists of <para><application>Samba</application> actually consists of
three separate daemons. You should see that both the three separate daemons. You should see that both the
@ -5445,6 +5494,7 @@ Starting smbd.</screen>
<sect3> <sect3>
<title>Basic Configuration</title> <title>Basic Configuration</title>
<indexterm><primary>ntpdate</primary></indexterm> <indexterm><primary>ntpdate</primary></indexterm>
<para>If you only wish to synchronize your clock when the <para>If you only wish to synchronize your clock when the