Open Source for Windows Administrators (Administrator's Advantage Series)

689 Pages·2005·9.81 MB·English

by  Christian Gross

O S F
PEN OURCE OR
W A
INDOWS DMINISTRATORS
LIMITED WARRANTY AND DISCLAIMER OF LIABILITY
THE DVD THAT ACCOMPANIES THE BOOK MAY BE USED ON A SINGLE PC
ONLY. THE LICENSE DOES NOT PERMIT THE USE ON A NETWORK (OF ANY
KIND). YOU FURTHER AGREE THAT THIS LICENSEGRANTS PERMISSION TO
USE THE PRODUCTS CONTAINED HEREIN, BUT DOES NOT GIVE YOU RIGHT
OF OWNERSHIP TO ANY OF THE CONTENT OR PRODUCT CONTAINED ON
THIS DVD. USE OF THIRD-PARTY SOFTWARE CONTAINED ON THIS DVD IS
LIMITED TO AND SUBJECT TO LICENSING TERMS FOR THE RESPECTIVE
PRODUCTS.
CHARLES RIVER MEDIA, INC. (“CRM”) AND/OR ANYONE WHO HAS BEEN
INVOLVED IN THE WRITING, CREATION, OR PRODUCTION OF THE ACCOM-
PANYING CODE (“THE SOFTWARE”) OR THE THIRD-PARTY PRODUCTS CON-
TAINED ON THE DVD OR TEXTUAL MATERIAL IN THE BOOK, CANNOT AND
DO NOT WARRANT THE PERFORMANCE OR RESULTS THAT MAY BE
OBTAINED BY USING THE SOFTWARE OR CONTENTS OF THE BOOK. THE
AUTHOR AND PUBLISHER HAVE USED THEIR BEST EFFORTS TO ENSURE
THE ACCURACY AND FUNCTIONALITY OF THE TEXTUAL MATERIAL AND
PROGRAMS CONTAINED HEREIN. WE HOWEVER, MAKE NO WARRANTY OF
ANY KIND, EXPRESS OR IMPLIED, REGARDING THE PERFORMANCE OF
THESE PROGRAMS OR CONTENTS. THE SOFTWARE IS SOLD “AS IS” WITH-
OUT WARRANTY (EXCEPT FOR DEFECTIVE MATERIALS USED IN
MANUFACTURING THE DISK OR DUE TO FAULTY WORKMANSHIP).
THE AUTHOR, THE PUBLISHER, DEVELOPERS OF THIRD-PARTY SOFTWARE,
AND ANYONE INVOLVED IN THE PRODUCTION AND MANUFACTURING OF
THIS WORK SHALL NOT BE LIABLE FOR DAMAGES OF ANY KIND ARISING
OUT OF THE USE OF (OR THE INABILITY TO USE) THE PROGRAMS, SOURCE
CODE, OR TEXTUAL MATERIAL CONTAINED IN THIS PUBLICATION. THIS
INCLUDES, BUT IS NOT LIMITED TO, LOSS OF REVENUE OR PROFIT, OR
OTHER INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
USE OF THE PRODUCT.
THE SOLE REMEDY IN THE EVENT OF A CLAIM OF ANY KIND IS EXPRESSLY
LIMITED TO REPLACEMENT OF THE BOOK AND/OR DVD, AND ONLY AT THE
DISCRETION OF CRM.
THE USE OF “IMPLIED WARRANTY” AND CERTAIN “EXCLUSIONS” VARIES
FROM STATE TO STATE, AND MAY NOT APPLY TO THE PURCHASER OF
THIS PRODUCT.
O S F
PEN OURCE OR
W A
INDOWS DMINISTRATORS
C G
HRISTIAN ROSS
CHARLES RIVER MEDIA, INC.
Hingham, Massachusetts
Copyright 2005 by CHARLESRIVERMEDIA, INC.
All rights reserved.
No part of this publication may be reproduced in any way, stored in a retrieval system of any type, or trans-
mitted by any means or media, electronic or mechanical, including, but not limited to, photocopy, recording,
or scanning, without prior permission in writingfrom the publisher.
Editor: David Pallai
Cover Design: Tyler Creative
CHARLESRIVERMEDIA, INC.
10 Downer Avenue
Hingham, Massachusetts 02043
781-740-0400
781-740-8816 (FAX)
[email protected]
www.charlesriver.com
This book is printed on acid-free paper.
Christian Gross. Open Source for Windows Administrators.
ISBN: 1-58450-347-5
eISBN: 1-58450-662-8
All brand names and product names mentioned in this book are trademarks or service marks of their respec-
tive companies. Any omission or misuse (of any kind) of service marks or trademarks should not be regarded
as intent to infringe on the property of others. The publisher recognizes and respects all marks used by com-
panies, manufacturers, and developers as a means to distinguish their products.
Library of Congress Cataloging-in-Publication Data
Gross, Christian.
Open source for Windows administrators / Christian Gross.
p. cm.
Includes bibliographical references and index.
ISBN 1-58450-347-5 (pbk. with dvd-rom : alk. paper)
1. Operating systems (Computers) 2. Client/server computing. I. Title.
QA76.76.O63G7679 2005
005.4’3—dc22
2005004608
05 7 6 5 4 3 2 First Edition
CHARLESRIVERMEDIAtitles are available for site license or bulk purchase by institutions, user groups, corpora-
tions, etc. For additional information, please contact the Special Sales Department at 781-740-0400.
Requests for replacement of a defective DVD must be accompanied by the original disc, your mailing address,
telephone number, date of purchase, and purchase price. Please state the nature of the problem, and send the
information to CHARLESRIVERMEDIA, INC., 10 Downer Avenue, Hingham, Massachusetts 02043. CRM’s sole
obligation to the purchaser is to replace the disc, based on defective materials or faulty workmanship, but not
on the operation or functionality of the product.
Contents
1 Introduction to Open Source 1
About this Book 1
The Origins of Open Source 2
The Three Cs 3
Should an Administrator Care About Open Source? 4
Understanding the Open Source Licenses 5
What Hardware and Software Should an Administrator Use? 8
Understanding Open Source Packages 9
Summary 13
2 Writing Scripts Using a Shell and Its Associated Tools 15
About this Chapter 15
Understanding the Windows Shell 16
Filesystems 16
Mounting a Device in a Directory 17
Modern File Management in Windows 19
Windows Shell and Environment 20
Integration: Registry 23
Project: Cygwin 33
Additional Notes 34
Impatient Installation 36
v
vi Contents
Deployment: File Server Variant 41
Deployment: Automated Installation of Cygwin 43
Deployment: Tweaking the Environment 47
Technique: Understanding Command-Line Applications 51
Technique: Managing Files and Directories 52
Technique: Running the Shell 53
Technique: Getting Help Using man 54
Technique: Editing Files with Vi (VIM) 55
Technique: Writing BASH Scripts 59
Technique: Using Regular Expressions 89
Technique: Some Additional Commands 94
Technique: Using awkto Process Data 98
Summary 108
3 Using Python to Write Scripts 109
About this Chapter 109
Project: Python 110
Additional Notes 112
Impatient Installation 112
Deployment: Simple Python Distribution 114
Deployment: Python.org Distribution 117
Deployment: External Python Modules 117
Technique: Learning the Python Shell 131
Technique: Writing Python Code 134
Technique: Interacting with the Environment 151
Technique: Integrating with BASH Scripts 163
Summary 164
4 Managing Security Using Encryption and Privacy Tools 167
About this Chapter 167
Securing a Windows Computer 168
Managing a Windows Computer Security Policy 168
Managing Updates 172
Contents vii
Project: GNU Privacy Guard and Windows Privacy Tray 181
Additional Notes 184
Impatient Installation 185
Deployment 187
Technique: Trusting Content Using PKI 191
Technique: Creating and Deleting Keys 192
Technique: Encrypting and Decrypting Content 198
Technique: Passing the Passphrase on the Console 199
Technique: Signing Documents 200
Technique: I Lost My Public or Private Key, Help! 201
Technique: Using WinPT 202
Project: OpenPGP Public Key Server 204
Impatient Installation 204
Deployment 204
Technique: Adding Keys to the Key Server 206
Technique: Deleting Keys from the Key Server 207
Project: STunnel and OpenSSL 208
Impatient Installation 210
Deployment 211
Technique: Generating a Server Certificate 213
Technique: Signing a Certificate By a CA 215
Technique: Becoming a Signing Authority 217
Technique: Enabling SSL on a Non-SSL Enabled Application 221
Technique: Redirecting a Port 223
Technique: Port Redirection and Authentication 224
Project: OpenVPN 226
Additional Notes 228
Deployment and Impatient Installation 228
Technique: Installing OpenVPN as a Service 229
Technique: Creating a Static Key 230
Technique: Creating a Peer-to-Peer Network 231
Technique: Setting Up a Network 234
viii Contents
Technique: Using Certificates for Authentication 243
Technique: Disabling a VPN User 245
Summary 247
5 Running Tasks on a Local Computer 249
About this Chapter 249
Automated Script Execution 250
Computer Startup and Shutdown Scripts 250
Profile and Login Scripts 252
Running Tasks Periodically 255
Project: XYNTService 261
Additional Notes 262
Impatient Installation and Deployment 262
Technique: Running a Console Program 263
Technique: Restarting the Processes 264
Technique: Restarting Services and XYNTService 265
Project: VNC Server 266
Additional Notes 267
Impatient Installation 268
Deployment 269
Technique: Tweaking the Server 272
Project: Unison 275
Additional Notes 277
Deployment and Impatient Installation 278
Technique: Setting Up a Unison Server 278
Technique: Running a Client Process 279
Technique: How Unison Synchronizes 281
Technique: Selectively Synchronizing Files and Paths 283
Technique: Backing Up Original Versions of the Files 285
Project: 7-Zip 286
Additional Notes 287
Impatient Installation 288
Contents ix
Deployment 288
Technique: Expanding an Archive from the Console 289
Technique: Creating and Updating an Archive from the Console 290
Technique: Assigning a Password 291
Technique: Creating a Self-Extracting Archive 291
Tweaking Your Environment 293
Additional Notes 293
Summary 294
6 Authentication and Managing Files 295
About this Chapter 295
Why Linux? 296
Project: OpenLDAP 296
Impatient Installation 298
Deployment: OpenLDAP Server 302
Technique: Initializing the OpenLDAP security 304
Technique: Structuring an LDAP Database 306
Technique: Managing LDAP Database Content Using LDIF Files 307
Technique: Manipulating LDAP Data in a Script 319
Technique: Securing the LDAP Server 321
Technique: Replicated Directory Service 327
Technique: Indexing 330
Technique: Some Common Configuration Tips 330
Project: Samba 332
Additional Notes 335
Documentation 336
Impatient Installation 336
Deploying Samba 347
Technique: Starting and Restarting Samba 352
Technique: Guest File Sharing 353
Technique: Sharing Files Using File-Based Security 355
Technique: Managing a Closed Group Global Share 365