1. UNIX AND LINUX SYSTEM ADMINISTRATION HANDBOOK Fourth Edition Evi Nemeth Garth Snyder Trent R. Hein Ben Whaley with Terry Morreale, Ned McClain, Ron Jachim, David Schweikert, and Tobi Oetiker PRENTICE HALL Upper Saddle River, NJ Boston Indianapolis San Francisco New York Toronto Montreal London Munich Paris Madrid Capetown Sydney Tokyo Singapore Mexico City

2. UNIX LINUX 4- , , , - 2012

3. 50 681.3.07 . .. . .-. .. .. . .-. .. : info@williamspublishmg.com, http://www.williamspublishing.com , , , , , , , .50 Unix Linux: , 4- . : . . .: .. , 2012. 1312 .: . . . . ISBN 978-5-8459-1740-9 (.) 32.973.26-018.2.75 . , , , Prentice Hall, Inc. Authorized translation from the English language edition published by Prentice Hall, Inc., Copyright 2011Pearson Education, Inc. All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording or by any information storage retrieval system, withoutpermission from the Publisher. Red Hat Enterprise Linux and the Red Hat SHADOWMAN logo are registered trademarks of Red Hat Inc.,and such trademarks are used with permission. Ubuntu is a registered trademark of Canonical Limited, and is used with permission. SUSE and openSUSE are registered trademarks of Novell Inc. in the United States and other countries. Oracle Solaris and OpenSolaris are registered trademarks of Oracle and/or its affiliates. All rights reserved. HP-UX is a registered trademark of Hewlett-Packard Company. (HP-UX) AIX is a trademark of IBM Corp., registered in the U.S. and other countries. Russian language edition published by Williams Publishing House according to the Agreement with R&IEnterprises International, Copyright 2012 - , , , Unix Linux: 4- . .. .. .. 07.12.2011. 70x100/16. Times. . . . . 105,78. .-. . 96,3. 1000 . 27034. CtP , . 197110, -, ., 15. . . , 127055, . , . , . 43, . 1SBN 978-5-8459-1740-9 (.) , 2012SBN 978-0-13-148005-6 (.) Pearson Education, Inc., 2011

4. I. 41 1. 43 2. 70 3. 119 4. : 145 5. 163 6. 184 7. 218 8. 252 9. 330 10. 339 11. Syslog 388 12. 412 13. 464 II. 493 14. TCP/IP 495 15. 558 16. 577 17. 597 18. Network File System 735 19. 764 20. 787 21. 907 22. 943 23. - 1001 III. 1025 24. 1027 25. X Window System 1055 26. 1076 27. 1129 28. 1141 29. 1157 30. Windows 1180 31. 1208 32. , 1228 1278 AIX 1288 1291

5. 34 35 36 38 39 I. 41 1. 431.1. 44 44 44 45 45 45 45 46 46 46 1.2. 46 1.3. Linux UNIX 48 1.4. Linux 491.5. , 51 Linux- 51 UNIX- 531.6. 541.7. 541.8. 551.9. 56 56 man: 57 58 GNU- Texinfo 581.10. 59 59 60 60 RFC - 60 Linux 601.11. 611.12. 62 63 64 661.13. 671.14. 67 68

6. 7 681.15. 69 2. 70 2.1. 71 71 72 73 74 2.2. bash- 78 79 81 82 84 84 86 88 2.3. 89 90 91 91 92 93 , 942.4. Perl 96 97 97 98 98 99 99 101 Perl 101 102 103 105 Perl 106 Perl 1072.5. PYTHON 108 Python 109 , , , , , 111 112 1132.6. 1152.7. 117 bash 117 117 Perl 117 Python 1172.8. 118

7. 8 3. 1193.1. 119 120 120 121 121 121 ( ) 122 123 1233.2. 1243.3. GRUB: 125 126 1273.4. 128 GRUB 128 SPARC 128 HP-UX 129 AIX 1293.5. 129 init 130 131 Red Hat 133 SUSE 135 Ubuntu Upstart 136 HP-UX 137 AIX 1383.6. SOLARIS 139 Solaris 139 : SMF 1423.7. 142 shutdown: 143 halt reboot: 1443.8. 144 4. : 1454.1. UNIX 146 146 147 147 setuid setgid 1484.2. 149 150 SELinux: Linux- 151 POSIX (Linux) 151 152 Kerberos 152 1524.3. 153

8. 9 153 root 155 su: 155 sudo: su 156 1594.4. 1604.5. 161 5. 1635.1. 163 (PID) 164 (PPID) 164 (UID) (EUID) 165 (GID) (EGID) 165 166 1665.2. 1665.3. 1675.4. : kill 1705.5. 1715.6. : nice renice 1725.7. : ps 1735.8. top, prstat topas 1775.9. /r 1785.10. : strace, truss tusc 1795.11. , - 1815.12. 1825.13. 182 6. 1846.1. 186 186 1866.2. 1876.3. 1896.4. 192 193 193 194 195 195 1956.5. 196 196 setuid setgid 197 198 ls: 198 chmod: 200

9. 10 chown chgrp: 201 umask: 202 Linux 2026.6. 203 UNIX- ACL 204 ACL 205 ACL 205 POSIX ACL 206 NFSv4ACL 2106.7. 216 7. 2187.1. /etc/passwd 219 220 223 224 225 GECOS 226 226 2267.2. /etc/shadow /etc/security/passwd 2277.3. /etc/grou 2307.4. : 232 passwd group 233 233 233 235 235 235 2367.5. useradd 236 useradd Ubuntu 237 useradd SUSE 238 useradd Red Hat 238 useradd Solaris 239 useradd HP-UX 240 useradd AIX 240 useradd 2427.6. newusers (Linux) 2437.7. 2437.8. 2457.9. 2467.10. 2477.11. 247 LDAP Active Directory 247 248 2497.12. 250

10. 117.13. 250 8. 2528.1. 253 Linux 253 Solaris 254 HP-UX 254 AIX 2558.2. 255 256 - 2588.3. 259 261 SATA 262 SCSI 262 SCSI 265 : SCSI SATA? 2658.4. 2668.5. 269 269 270 273 274 hdparm: (Linux) 275 SMART 2768.6. 278 279 Windows 281 GPT: GUID 281 Linux 282 Solaris 283 HP-UX 2838.7. RAID: 283 RAID 284 RAID 284 287 RAID 5 288 mdadm: RAID Linux 2898.8. 292 292 Linux 294 HP-UX 298 AIX 3008.9. 301 Linux: ext 302 HP-UX: VxFS HFS 303 JFS2 AIX 303 303 304 mkfs: 305

11. 12 fsck: 305 306 307 USB- 310 3108.10. ZFS: 311 ZFS 311 : Solaris 312 313 314 315 316 318 NFS, CIFS SCSI 318 3198.11. 320 SAN 322 iSCSI: SCSI IP 323 iSCSI 324 iSCSI 3248.12. 328 9. 3309.1. cron: 3309.2. crontab- 3319.3. crontab- 3339.4. Vixie-cron 3349.5. cron 335 335 336 337 3389.6. 338 10. 33910.1. 340 340 340 341 341 342 342 343 343 344 345 346 34610.2. , 347 : CD_R/RW, DVDR/RW, DVD-RAM Blu- 347

12. 13 348 349 : 8- DDS/DAT 349 DLT/S-DLT 349 AIT SAIT 350 VXA/VXA-X 350 LTO 351 (, ) 351 351 352 352 35310.3. 354 355 35510.4. dump: 356 356 restore: 359 361 36210.5. 36310.6. 363 tar: 363 dd: 364 ZFS 36510.7. 36610.8. Bacula 367 , Bacula 367 Bacula 369 Bacula 369 Bacula 370 371 : bacula-dir.conf 372 : bacula-sd.conf 375 : bconsole.conf 377 377 Bacula 378 378 378 379 Windows 382 Bacula 382 Bacula 383 Bacula 38310.9. 384 ADSM/TSM 384 Veritas NetBackup 385 EMC NetWorker 385 386

13. 14 10.10. 38610.11. 386 11. Syslog 38811.1. 389 390 39211.2. Syslog: 393 Syslog 394 syslogd 394 398 Syslog 400 Syslog 400 40111.3. AIX 402 Syslog AIX 40411.4. logrotate: 40511.5. 40711.6. 40811.7. 410 12. 41212.1. Linux OpenSolaris 413 413 Linux 414 414 Kickstart Red Hat Enterprise Linux 415 AutoYaST: SUSE 417 Ubuntu 41812.2. Solaris 420 JumpStart 421 42512.3. HP-UX 426 Ignite-UX 42912.4. AIX 42912.5. 43012.6. Linux- 431 rpm: RPM 432 dpkg: .deb Ubuntu 43312.7. Linux 434 435 Red Hat Network 436 APT: 437 apt-get 438 439 apt-get 440 yum: RPM 441 Zypper SUSE: ! 441

14. 1512.8. UNIX 442 Solaris 443 HP-UX 444 AIX 44612.9. 446 447 447 Subversion 448 Git 45012.10. 454 454 456 456 45712.11. 458 cfengine: 458 LCFG: 459 Template Tree 2: cfengine 459 DMTF/CIM: 46012.12. nfs 460 461 462 46212.13. 46312.14. 463 13. 46413.1. 46513.2. 466 467 468 469 46913.3. Linux 470 linux 470 linux 472 , 472 472 473 Linux 47413.4. Solaris 475 Solaris 476 /etc/system 477 Solaris 478 Solaris- 47813.5. HP-UX 48013.6. AIX 480 481 48213.7. 483

15. 16 Linux 483 Solaris 48513.8. Linux- udev 486 sysfs: Linux 486 udevadm 487 48813.9. 49113.10. 492 II. 493 14. TCP/IP 49514.1. TCP/IP 495 496 49714.2. 498 IPv4 IPv6 499 500 Ethernet 50114.3. 502 (MAC) 502 IP- 503 504 504 50414.4.I- 505 IPv4 505 506 , 507 CIDR: 508 509 NAT 510 IPv6 51114.5. 513 513 ICMP 51514.6. ARP: 51514.7. DHCP: 516 DHCP 517 DHCP 518 DHCP, ISC 51814.8. 520 IP- 520 ICMP 520 520 ICMP- 521 IP- 521 522 522

16. 1714.9. : 52314.10. 524 IP- 525 ifconfig: 526 528 route: 529 DNS 53014.11. 53114.12. Linux 532 NetworkManager 532 Ubuntu 533 SUSE 534 Red Hat 535 Linux 536 Linux TCP/IP 537 , 540 Linux NAT 54014.13. Solaris 541 Solaris 541 Solaris 543 DHCP Solaris 544 ndd: TCP/IP Solaris 545 Solaris 546 Solaris 546 NAT Solaris 547 54814.14. HP-UX 548 HP-UX 548 HP-UX 549 DHCP HP-UX 551 HP-UX 55114.15. AIX 553 : AIX 55514.16. 55514.17. 557 15. 55815.1. 55915.2. 561 - 562 563 563 56415.3. 564 RIP RIPng 565 OSPF 566 EIGRP 566 IS-IS: 567 RDP NDP 567 BGP 567

17. 18 15.4. 56715.5. 569 route: RIP 569 gated: 570 Quagga: 570 ramd: HP-UX 571 XORP 571 57215.6. Cisco 57215.7. 57515.8. 576 16. 57716.1. Ethernet: 578 Ethernet 579 Ethernet 580 580 582 Ethernet 58316.2. : 587 58916.3. DSL : 58916.4. 59016.5. 591 591 591 59216.6. 593 593 594 594 59416.7. 59416.8. 595 595 596 / 59616.9. 59616.10. 596 17. 59717.1. DNS 598 DNS 59917.2. DNS 599 600 600 601 60217.3. DNS : 602

18. 19 DNS 602 DNS 605 17.4. 607 608 60917.5. DNS 610 611 61217.6. DNS 612 612 613 614 614 615 61517.7. DNS 61617.8. DNS 618 619 620 SOA 623 NS 625 626 PTR 626 MX 627 CNAME 628 CNAME 629 SRV 630 TXT 632 IPv6 632 SPF 633 DKIM ADSP 635 SSHFP 638 DNSSEC 639 : 63917.9. BIND 641 641 BIND 643 643 include 645 options 646 acl 652 key (TSIG) 653 trusted-keys 653 server 654 masters 655 logging 655 statistics 655 zone 656 controls rdnc 659 DNS view 660

19. 20 17.10. BIND 661 662 , 663 The Internet Systems Consortium (isc.org) 66617.11. NSD/Unbound 668 NSD 668 NSD 670 nsd 675 Unbound 67617.12. 682 683 BIND 68417.13. 686 BIND 687 688 chroot 689 TSIG TKEY 689 TSIG BIND 690 TSIG NSD 692 DNSSEC 692 DNSSEC 696 DNSSEC 697 DNSSEC 698 699 701 DNSSEC 704 DLV: 705 DNSSEC 706 DNSSEC 707 DNSSEC 70917.14. Microsoft DNS 71117.15. 711 BIND 712 NSD Unbound 717 718 720 dig 721 722 DNS 723 72517.16. 725 Linux 726 Solaris 728 HP-UX 729 AIX 73017.17. 731 731 731 732

20. 21 RFC 73217.18. 733 18. Network File System 73518.1. NFS 735 , 736 736 73618.2. NFS 737 737 738 738 738 739 740 4 741 root nobody 742 4 743 74318.3. NFS 744 share dfstab (Solaris, HP-UX) 745 exports exports (Linux, AIX) 747 exports AIX 747 exports Linux 748 nfsd: 75018.4. NFS 751 NFS 753 75418.5 NFS 4 75518.6. nfsstat: NFS 75518.7. NFS 75618.8. 757 758 759 759 760 automount 760 automount 761 (V3; , Linux) 761 Linux 76218.9. 76218.10. 763 19. 76419.1. 76519.2. 766 NFS 766 767 rdist: 767

21. 22 rsync: 770 77219.3. LDAP: 773 LDAP 774 LDAP 775 LDAP 776 OpenLDAP: LDAP- 776 389 Directory Server: LDAP- 777 LDAP /etc/passwd /etc/group 778 LDAP- 779 LDAP 78019.4. NIS: 781 NIS 781 NIS 782 NIS 78419.5. 784 nscd: 78519.6. 78619.7. 786 20. 78720.1. 788 789 790 791 791 792 792 , 79320.2. 793 79320.3. SMTP 795 796 SMTP 797 SMTP 79720.4. 798 79920.5. 802 804 804 805 805 806 806 80620.6. : 807 808 809 809 809

22. 23 810 /DCC 810 SpamAssassin 811 812 812 813 SPF Sender ID 813 DomainKeys, DKIM ADSP 814 815 MailScanner 815 amavisd-new 816 81920.7. 82020.8. sendmail 821 822 sendmail 823 82420.9. sendmail 825 m4 825 sendmail 826 , .mc 82720.10. sendmail 828 828 829 835 835 sendmail 837 838 , 840 sendmail 841 amavisd sendmail 84220.11. sendmail 843 843 844 845 846 sendmail ( ) 847 847 SASL: 848 TLS: 84820.12. sendmail 849 849 849 850 850 850 85120.13. , 853

23. 24 853 854 20.14. Exim 855 EXIM 856 Exim 857 Exim 858 Exim 859 Exim 859 861 866 867 868 accept 869 dnslookup 870 872 retry 873 873 873 amavisd Exim 873 874 875 20.15. Postfix 876 Postfix 876 878 Postfix 878 Postfix 879 883 885 888 amavisd 890 89120.16. DKIM 893 DKIM: DomainKeys Identified Mail 893 DKIM 894 DKIM amavisd-new 896 DKIM sendmail 897 DKIM Exim 898 DKIM Postfix 90020.17. 90020.18. 901 901 sendmail 902 Exim 902 902 RFC 90320.19. 903 , sendmail 904 , Exim 905 , Postfix 905

24. 25 21. 90721.1. 90821.2. ping: 909 21.3. SmokePing: ping 911 21.4. traceroute: IP- 912 21.5. netstat: 915 915 917 918 919 91921.6. 92121.7. 922 tcpdump: 923 Wireshark TShark: tcpdump 92421.8. Netalizr ICSI 92621.9. 92621.10. SNMP: 928 SNMP 928 SNMP 930 RMON: MIB 93021.11. NET-SNMP 93121.12. 932 NET-SNMP 932 SNMP 933 Nagios: 934 : 935 93621.13. NetFlow: 937 NetFlow nfdump NfSen 937 NetFlow Cisco router 93921.14. 94021.15. 941 22. 94322.1. UNIX 94422.2. 945 945 946 94722.3. 947 948 948 949 949 949 950 951

25. 26 951 951 951 952 22.4. 952 953 954 954 954 22.5. : 954 955 955 Linux 958 22.6. SETUID 959 22.7. chroot 960 22.8. 961 nmap: 961 Nessus: 962 John the Ripper: 963 hosts_access: 964 : 964 Snort: 965 OSSEC: 96622.9. 969 Linux (SELinux) 96922.10. 970 Kerberos: 971 PGP: 972 SSH: 972 Stunnel 97622.11. 978 , 979 979 , 980 98122.12. Linux 981 , 982 982 iptables 983 98322.13. IPFilter UNIX 98522.14. 988 IPSEC 989 98922.15. 989 990 99122.16. 993

26. 27 CERT 993 SecurityFocus.com BugTraq 994 994 SANS 994 995 - 99622.17. 99622.18. 99822.19. 999 23. - 100123.1. - 1001 1002 1002 HTTP 1003 1004 1005 100623.2. - 1008 1008 Apache 1009 Apache 1010 Apache 1011 1011 101123.3. 1012 1013 Apache 101523.4. Secure Sockets Layes 1016 Certificate Signing Request 1016 - Apache SSL 101823.5. - 1018 Squid - 1019 Squid 1020 - Apache 102023.6. 1022 1022 1022 102323.7. 1023 III. 1025 24. 102724.1. 1028 1029 1029 1030 1031 1031

27. 28 1032 103224.2. 103224.3. 103324.4. linux 1035 n 1035 n 1036 n virt-install 1037 n 1038 KVM 1039 KVM 104024.5. solans 104224.6. AIX 104524.7. Integrity Virtual Machines HP-UX 1047 104724.8. VMware: 104924.9. - Amazon 104924.10. 105424.11. 1054 25. X Window System 105525.1. 105725.2. - 1058 DISPLAY 1059 1060 SSH 106125.3. - 1063 Device 1065 Monitor 1065 Screen 1066 InputDevice 1066 ServerLayout 1068 xrandr: - 1068 106925.4. - 1070 X 1070 - - 107025.5. 1072 KDE 1073 GNOME 1073 : GNOME KDE? 107425.6. 107425.7. 1074 26. 107626.1. 1077 1077 107826.2. CUPS 1078

28. 29 1078 1079 1080 1080 1080 1081 CUPS 1082 1083 1083 1084 1084 1085 1085 1086 26.3. 1087 kprinter: printing 1088 Konqueror 1088 26.4. System V 1089 1089 1090 1 1090 lpsched lpshut: 1091 lpadmin: 1091 lpadmin 1094 lpstat: 1094 cancel: 1095 accept reject: 1095 enable disable: 1096 lpmove: 1096 1096 , 109726.5. BSD ADC 1098 BSD 1098 1099 lpd: 1100 1: 1100 lpq: 1100 lprm: 1101 1: 1101 /etc/printcap 1103 printcap 110426.6. 1108 1108 110926.8. 111026.8. 1111 PostScript 1112 PCL 1112 PDF 1113 XPS 1113

29. 30 PJL 1114 PDL- 111426.9. PPD 111526.10. 111626.11. 1118 1118 GDI- 1119 1119 1120 1120 1121 112126.12. 1124 1125 1125 1125 1126 112726.13. 112726.14. 1127 21. 112927.1. 113027.2. 1131 1133 1134 113527.3. 1135 1136 113727.4. 113827.5. 113827.6. 113927.7. 1139 28. 114128.1. 114228.2. 114428.3. : 1144 1145 1146 SAN 1147 1147 1148 1148 , 1148 1150 1150

30. 31 1151 1151 1151 1152 115228.4. : 115328.5. , 115428.6. 1155 29. 115729.1. 115929.2. , 116029.3. 116129.4. 1162 1162 1166 1166 1168 1170 1172 xdd: 1174 sar: 1174 nmon nmon_analyser: AIX 1175 Linux- - 1175 oprofile: Linux 117629.5. ! ! 117729.6. 117829.7. 1179 30. Windows 118030.1. UNIX Windows 118030.2. 1181 X Server Windows 1182 VNC: 1183 RDP Windows 118430.3. Windows Windows- 1184 1185 Microsoft Office 118530.4. Windows 118630.5. Windows 118730.6. Samba CIFS 1187 Samba: CIFS UNIX 1188 Samba 1189 1190 1191 1191 1192 MS DFS 1193 smbclient: CIFS 1194

31. 32 30.7. Samba 1195 Windows 1197 119730.8. Samba 119830.9. Active Directory 1200 Active Directory 1201 Kerberos Active Directory 1202 Samba Active Directory 1203 1205 winbind 120630.10. 120630.11. 1206 31. 1208 31.1. RS-232C 120931.2. 1211 DB-9 1211 RJ-45 121231.3. 121331.4. 121331.5. 1214 31.6. setserial: Linux 121531.7. 121631.8. 1216 1217 /etc/ttytype 1218 /etc/gettytab 1218 /etc/gettydefs 1219 /etc/inittab 1219 Upstart Ubuntu 122131.9. 122231.10. stty: 122331.11. tset: 122431.12. 122531.13. 122531.14. 122631.15. 1227 32. , 122832.1. 1228 1229 1230 123132.2. 1235 : 1235 1236 1237 1238

32. 33 1238 1239 1240 1241 32.3. 1241 1241 1242 1242 32.4. 1242 1243 1243 1244 1244 1244 32.5. 1244 1245 1245 1245 1246 1250 , , ! 125032.6. 1251 32.7. 1260 1260 1261 126132.8. 1262 1262 1263 1264 1265 1266 126732.9. 1267 ITIL: Information Technology Infrastructure Library 1270 NIST: 127032.10. 1271 1271 1272 1273 127332.11. , 127432.12. 127632.13. 1276 1278 AIX 1288 1291

33. 40- Wonderland ( ). , , - EMail Connection 30 . sailingevi@gmail.com NeXT Sun , , , -. garth@garthsnyder.com . Applied Trust Engineering, . . trent@atrust.com (Enterprise Architecture) Applied Trust Engineering, (. , ). 2004 . ben@atrust.com

34. (Terry Morreale) Applied Trust. , : CISSP, GIAC Gold Certified Incident Handler ITILv3 Foundations. , . - (Ned McClain) (ned@atrust.com) Applied Trust Engineering. . , . . CISSP, ITIL. (arkingseal.com). (Ron Jachim) ( ), -. 20 UNIX , Ford Motor Company. , , . (David Schweikert) Open SystemsAG () , . 1 500 UNIX 100 . Mailgraph ( ) Postgrey ( Postfix); . david.schweikert.ch. (Tobi Oetiker) - . (Swiss Federal Institute of Technology), UNIX- . 2006 OETIKER+PARTNER AG, UNIX- , (MRTG, RRDtool SmokePing) . 2006 (SAGEOutstanding Achievement Award) MRTG RRDtool; . tobi.oetiker.ch.

35. , .. 1983 , , , UNIX. (Massachusetts Computer Company MASSCOMP), UNIX-, . , , . , . ? : . , . , , , , , , UUCP . System V, ( ) UNIX ( Berkeley UNIX). ( ) . 1989 UNIXSystem