2006隨手札記

Advanced User Administration

1.Network Users (NIS, LDAP, Winbind, SMB)

#authconfig-tui (加入nis server) [圖形介面: #system-config-authentication]
Configuration file: /etc/nsswitch.conf

#getent passwd(查users)

2.ACLs(Access Control Lists)

(1) #vi /etc/fstab 加入acl
#mount
---略---
/dev/xvda2 on /home type ext3 (rw,usrquota,acl)

或手動
#mount -o remount,acl /home

檢查是否有套用acl
[root@server118 home]# tune2fs -l /dev/xvda2 |grep options
Default mount options: user_xattr acl
[root@server118 home]#


(2)設定ACLs

#getfacl [file|directory]

#setfacl -m u:frodo:rw /home/public
#setfacl -x u:frodo /home/public

%Automatic ACL setting
#setfacl -m d:u:student:rw /home/public

%public目錄下所建立的檔案或目錄都會自動加上 u:student:rw 的權限


3. Quota System

(1)#vi /etc/fstab 加入userquota
#mount
---略---
/dev/xvda2 on /home type ext3 (rw,usrquota,acl)

#quotacheck -cugm /home
-c: new scan
-u: usr quotas
-g: group quotas
-m: Don’t try to remount filesystem read-only

(2)quotaon, quotoff, edquota

[root@server118 home]# quotaoff /home
[root@server118 home]# su - student
[student@server118 ~]$ quota
quota: Can't open quotafile /home/aquota.user: Permission denied
quota: Quota file not found or has wrong format.
[student@server118 ~]$

[root@server118 home]# quotaon /home
[root@server118 home]# su - student
[student@server118 ~]$ quota
Disk quotas for user student (uid 500):
Filesystem blocks quota limit grace files quota limit grace
/dev/xvda2 192 2048 4096 23 30 40
[student@server118 ~]$

[root@server118 home]# edquota student
Disk quotas for user student (uid 500):
Filesystem blocks soft hard inodes soft hard
/dev/xvda2 192 2048 4096 23 30 40

%套用user的quota設定
#edquota -p user1 user2
EX:
#edquota -p student joe

%establish a grace period
#edquota -t
Grace period before enforcing soft limits for users:
Time units may be: days, hours, minutes, or seconds
Filesystem Block grace period Inode grace period
/dev/xvda2 7days 7days


(3)reporting quota status

#repquota -a (only root)
[root@server118 home]# repquota -a
*** Report for user quotas on device /dev/xvda2
Block grace time: 7days; Inode grace time: 7days
Block limits File limits
User used soft hard grace used soft hard grace
----------------------------------------------------------------------
root -- 35852 0 0 7 0 0
student -- 192 2048 4096 23 30 40
may -- 120 0 0 14 0 0
karl -- 64 0 0 8 0 0
joe -- 124 0 0 14 0 0
mary -- 64 0 0 8 0 0
jen -- 64 0 0 8 0 0
u3 -- 76 2048 4096 10 30 40

%warnquota
％當user使用超過quota寄信給user, 副本給root(manager)
％sendmail必須開啟且己設定完成, 信才會寄出去

#vi /etc/quotatab
---略---
# Example of description
/dev/loop0: This is loopback device
#/dev/hda4: Your home directory
/dev/xvda2: /home

#vi /etc/warnquota.conf
---略---
# values can be quoted:
MAIL_CMD = "/usr/sbin/sendmail -t"
FROM =
# but they don't have to be:
SUBJECT = NOTE: You are exceeding your allocated disk space limits
CC_TO = "root@server1.example.com"
# If you set this variable CC will be used only when user has less than
# specified grace time left (examples of possible times: 5 seconds, 1 minute,
# 12 hours, 5 days)
# CC_BEFORE = 2 days
SUPPORT = "root@server1.example.com"
PHONE = "(009) 995-9999"


%當user超過quota, sendmail會寄信給user(student), 提醒使用者

[student@server118 ~]$ mail
Mail version 8.1 6/6/93. Type ? for help.
"/var/spool/mail/student": 2 messages 1 new
1 root@server1.example Sat Aug 1 00:09 22/996 "test procmail"
>N 2 root@server118.examp Sun Aug 9 14:50 27/1085 "NOTE: You are exceeding your allocated disk space limi"
From root@server118.example.com Sun Aug 9 14:50:39 2009
Date: Sun, 9 Aug 2009 14:50:38 +0800
From: root
Reply-To: root@myhost.com
Subject: NOTE: You are exceeding your allocated disk space limits
To: student@server118.example.com
Cc: root@server118.example.com

Your disk usage has exceeded the agreed limits on this server
Please delete any unnecessary files on following filesystems:

/home (/dev/xvda2)

Block limits File limits
Filesystem used soft hard grace used soft hard grace
/dev/xvda2 +- 4096 2048 4096 6days 24 30 40

root@localhost