Email Egroupware Activedirectory

Email + EGroupWare + Active Directory
alexandrob
19/02/2008
Demostra de maneira objetiva e não cansativa, uma maneira de configurar todas as

ferramentas para um servidor de email, com um plus, que refere-se a autenticação dos
usuários em uma base Active Directory e integração com o Egroupware.
Por: Alexandro Batista
Apresentação, definições e necessidades

POSTFIX-2.4.6 + SASL-2.1.22 + DOVECOT-1.0.10 + CLAMAV-0.92 + SPAMASSASSIN-3.2.3 +
APACHE-2.2.6 + PHP-5.2.4 + POSTGRESQL-8.2 + EGROUPWARE-1.4 + ACTIVE DIRECTORY.
Autor: Alexandro Batista

Colaboração: Claudio Cabreira
Licença: CC (Creative Commons) - Atribuição - Não Comercial - Compartilhado com a mesma
Licença Versão: 0.1
Após algum tempo estudando a forma de conectar os serviços de correio em uma base LDAP/AD,
observei enumeros modos ou maneiras de preparar os serviços e colocá-los em pleno funcionamento.
Toda a documentação vista e revista, por mim, e que estão disponibilizadas na internet, poucas buscam
de forma clara e direta, ajustar os serviços de correio com uma base LDAP/AD, apresentando assim
várias camadas de software, tornando uma configuração muito extensa e podendo ter problemas de
segurança no futuro.
Com este, tento ser o mais breve e simples na configuração para os serviços de correio. Utilizando os
pacotes de conexão LDAP/AD dos serviços utilizados, eliminando configurações em softwares
adicionais e desnecessários.
Ampliando as configurações, demonstro como configurar o eGroupWare.
Obs.: O foco de deste tem referência na integração com AD, acredita-se que já esteja configurado o
DOMÍNIO AD e o serviço de DNS ativo e funcionando, o tópico referente ao bind9 é meramente
ilustrativo e para conhecimento.
Requisitos:
• Nível intermediário para compreensão;

• Servidor LDAP/AD e DNS instalado, configurado e funcionando;
• DEBIAN instalado a partir do CD netinst (lenny).
Ajustes iniciais
• 01. REMOVER PACOTES:
# apt-get remove exim4 exim4-base exim4-daemon-light exim4-config at mailx --purge
02. Atualizar o sistema:
# apt-get update
# apt-get upgrade
03. Instalar pacotes:
# apt-get install ssh vim ntpdate gcc g++ openssl gpm make libncurses5-dev
Configurar o ambiente:
04. Ajustar o sistema:
# vi /etc/hosts
• 10.0.0.1 nome.dominio.org nome

•
# vi /etc/network/interfaces
• auto eth0
iface eth0 inet static
address 10.0.0.1
netmask 255.255.255.0
network 10.0.0.0
broadcast 10.0.0.255
gateway 10.0.0.2
•
# vi /etc/resolv.conf
• domain dominio.org
search dominio.org
nameserver 10.0.0.1
nameserver 127.0.0.1
•
# vi /etc/nsswitch.conf
• hosts: dns files

•
# apt-get update
# apt-get upgrade
• Configurando BIND
• 05. Instalar pacotes:
Estou instalando o Bind neste servidor pois irei utilizar o serviço DNS dele, porém, pode-se
utilizar o DNS no server onde o LDAP/AD está alocado, caso isto ocorra pule as configurações
do BIND.
# apt-get install bind9 apache2 php5 php5-gd php5-pgsql php5-cli php5-common php5-
cgi php5-ldap php5-mcrypt php-log php-fpdf php-pear php5-imap
OBS.: php5-imap - habilitar com suporte a maildir.
Caso deseje alterar a configuração, usar o comando "dpkg-reconfigure libc-client2002edebian".
• Configurar o bind9
• Edite o arquivo:
# vi /etc/bind/named.conf.local
• zone "dominio.org"{
type master;
file "/etc/bind/arquivo/dominio.org.db";
};
zone "0.0.10.in-addr.arpa"{
type master;
file "/etc/bind/arquivo/dominio.org.rev";
};
•
Edite o arquivo:
# vi /etc/bind/named.conf.options
• directory "/etc/bind";
version "Not avaliable";
transfer-format many-answers;
query-source address * port 53;
•
# mkdir -p /etc/bind/arquivo
Crie e edite o arquivo:
# vi /etc/bind/arquivo/dominio.db
• $TTL 43200
• @ IN SOA nome.dominio.org hostmaster.dominio.org. (
• 2008010301 ; serial
• 1H ; refresh
• 15M ; retry
• 14D ; expire
• 12H ; default_ttl
• )
• @ IN NS nome.dominio.org.
• @ IN MX 1 mail.dominio.org
• @ IN A 10.0.0.1
• @ IN TXT "v=spf1 ip4:10.0.0.1 mx -all"
• nome.dominio.org IN TXT "v=spf1 a -all"
• ;
• ;IPS INTERNOS
• ;nome IN A IP
• nome IN A 10.0.0.1
• www IN A 10.0.0.1
•
# vi /etc/bind/arquivo/dominio.rev
• $TTL 43200
• @ IN SOA nome.dominio.org hostmaster.dominio.org. (
• 2008010301 ; serial
• 1H ; refresh
• 15M ; retry
• 14D ; expire
• 12H ; default_ttl
• )
• @ IN NS nome.dominio.org.
• @ IN A 10.0.0.1
• ;
• ;IPS INTERNOS
• ;000 IN PTR nome.dominio.
• 1 IN PTR nome.dominio.org.
•
# chown -R bind:bind /etc/bind/arquivo
# /etc/init.d/bind9 restart
Configurando o Apache2
• Configurar o apache2:
# mkdir -p /home/www/dominio
# chown -R www-data:www-data /home/www/dominio
# cp /etc/apache2/sites-available/default /etc/apache2/sites-available/dominio
# vi /etc/apache2/sites-available/dominio
• NameVirtualHost *
<VirtualHost *>
ServerAdmin webmaster@localhost
DocumentRoot /home/www/dominio/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /home/www/dominio/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
# This directive allows us to have apache2's default start page
# in /apache2-default/, but still have / go to the right place
#RedirectMatch ^/$ /apache2-default/
</Directory>
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,

# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/access.log combined

ServerSignature On
Alias /doc/ "/usr/share/doc/"

<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
</VirtualHost>
•
# a2ensite
dominio
# rm /etc/apache2/sites-enabled/000-default
# /etc/init.d/apache2 restart
Instalando e configurando o Postgres

• 06. Instalar pacotes:
# apt-get install postgresql-8.2 postgresql-contrib-8.2 libpq-dev
Edite e altere:
# vi /etc/postgresql/8.2/main/postgresql.conf
• listen_addresses = '*'
password_encryption = on
autovacuum_naptime = 1min
autovacuum_vacuum_threshold = 500
autovacuum_analyze_threshold = 250
autovacuum_vacuum_scale_factor = 0.2
autovacuum_analyze_scale_factor = 0.1
autovacuum_freeze_max_age = 200000000
autovacuum_vacuum_cost_delay = -1
autovacuum_vacuum_cost_limit = -1
•
# vi /etc/postgresql/8.2/main/pg_hba.conf
Edite e adicione antes das outras entradas:
• host egroupware egroupware 127.0.0.1/32 password

host all all 10.0.0.0/8 md5
•
# su - postgres
$ psql postgres
# alter user postgres with encrypted password 'senhapgsql';
# \q
# logout
# /etc/init.d/postgresql-8.2 restart
Criar base de dados e garantir as permissões do usuário para o egroupware:
$ createuser --no-adduser --no-createdb -P egroupware
Digite a senha para a nova role: senhaegw

Digite-a novamente: senhaegw
A nova role poderá criar novas roles? (s/n) n
$ createdb --encoding=utf-8 --owner egroupware egroupware

$ logout
Instalando e configurando o Egroupware

Descompactar o arquivo eGroupWare-1.4.002.tar.gz e em seguida descompactar o arquivo

eGroupWare-egw-pear-1.4.002.tar.gz, um em cima do outro.
Mover o diretório criado egroupware para o diretório raiz da web.
# chown -R www-data:www-data /home/www/dominio/egroupware

Editar o arquivo:
# vi /etc/php5/apache2/php.ini
mbstring.func_overload = 7
magic_quotes_gpc = Off
# /etc/init.d/apache2 restart
# pear install Auth_SASL-1.0.2.tgz
(pode ser baixado em http://pear.php.net/package/Auth_SASL)
# mkdir -p /home/egroup/files
# mkdir -p /home/egroup/backup
# chown -R www-data:www-data /home/egroup/
Iniciar a configuração do egroupware em modo browser:
• Selecione a linguagem utilizada;

• Executar os testes de instalação;
• Verificar as dependências se caso necessário corrija;
• Configure o arquivo header para adequar as necessidades, lembrando que estamos utilizando o
postgres como base de dados;
• Acesse Definir/Configurar a conexão do Administrador e verifique as dependências;
• Acesse o passo 2;
• Defina o diretório para o tmp, files e backup, além, ajuste a URL;
• Ajuste o nome da máquina caso necessário;
• Ajuste o nome ou endereço para o servidor IMAP e SMTP, alem, defina o tipo de login;
• Ajuste o tipo de autenticação para ADS, nomes de usuário case-sensitive (Não), criar
automaticamente as contas de usuário com padrão para minúsculas, usuários nunca expiram;
• Defina o servidor/ip do controlador de domínio ADS;
• Defina o nome de domínio;
• Defina uma conta para administrador.
# chmod 600 /home/www/dominio/egroupware/header.inc.php
Instalando e configurando o SASL e o Postfix

# apt-get install postfix postfix-ldap dovecot-imapd dovecot-common libsasl2-2 libsasl2-modules

sasl2-bin
# adduser --system --home /home/vmail --group vmail
Configurar o sasl:
# adduser postfix sasl

# vi /etc/default/saslauthd
START=yes
MECHANISMS="ldap"
# vi /etc/saslauthd.conf
Criar e editar:
ldap_servers: ldap://10.0.0.250
ldap_version: 3
ldap_search_base: dc=dominio,dc=org
ldap_auth_method: bind
ldap_bind_dn: usuarioAD@dominio.org
ldap_bind_pw: senha
ldap_filter: (&(objectClass=user)(sAMAccountName=%u))
# /etc/init.d/saslauthd restart
# testsaslauthd -u usuarioAD -p senha -s smtp
# chmod 600 /etc/saslauthd.conf
Configurar o postfix:
# vi /etc/postfix/main.cf
myhostname = nome.dominio.org
mydomain = dominio.org
alias_maps = hash:/etc/aliases, ldap:/etc/postfix/ldap-aliases.cf
mydestination = $mydomain, $myhostname, localhost.$mydomain, localhost
mynetworks = 127.0.0.0/8, 10.0.0.0/8
####################################
default_privs = vmail
mail_spool_directory = /home/vmail
######### SASL ###################
smtpd_tls_loglevel = 1
smtpd_sasl_local_domain = $mydestination
smtpd_tls_auth_only = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_authenticated_header = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject
# vi /etc/mailname
dominio.org
# vi /etc/postfix/ldap-aliases.cf
server_host = 10.0.0.250
search_base = dc=dominio,dc=org
version = 3
scope = sub
query_filter = (&(objectclass=user)(sAMAccountName=%u))
result_attribute = sAMAccountName
#%U=minusculo / %u=Maiusculo - para criação e utilização dos diretórios dos usuários
result_format = /home/vmail/%U/Maildir/
bind = yes
bind_dn = cn=usuarioAD,cn=Users,dc=dominio,dc=org
bind_pw = senha
# chmod 600 /etc/postfix/ldap-aliases.cf
# /etc/init.d/postfix restart
Instalando e configurando o Dovecot

Configurar o dovecot:
# vi /etc/dovecot/dovecot.conf
protocols = imap
disable_plaintext_auth = no
log_path = /var/log/dovecot.log
log_timestamp = "%Y-%m-%d %H:%M:%S "
ssl_disable = no
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem
mail_location = maildir:~/Maildir
mail_extra_groups = vmail
protocol imap {
mail_plugins = quota imap_quota
mail_plugin_dir = /usr/lib/dovecot/modules/imap
imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
}
protocol pop3 {
pop3_uidl_format = %08Xu%08Xv
}
auth_username_format = %Lu
auth default {
mechanisms = plain
passdb pam {
}
passdb ldap {
args = /etc/dovecot/dovecot-ldap.conf
}
userdb passwd {
}
userdb static {
args = uid=vmail gid=vmail home=/home/vmail/%u
}
user = root
socket listen {
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}
}
plugin {
quota = maildir:storage=5120
}
# vi /etc/dovecot/dovecot-ldap.conf
hosts = 10.0.0.250
uris = ldap://10.0.0.250
dn = cn=usuarioAD,cn=Users,dc=dominio,dc=org
dnpass = senha
auth_bind = yes
ldap_version = 3
base = dc=dominio,dc=org
deref = never
scope = subtree
pass_attrs = sAMAccountName=%u
pass_filter = (&(objectClass=user)(sAMAccountName=%u))
default_pass_scheme = PLAIN-MD5
user_global_uid = vmail
user_global_gid = vmail
# /etc/init.d/dovecot restart
Restarting IMAP/POP3 mail server: dovecotWarning: Fixing permissions of /var/run/dovecot to be

world-readable
Warning: Corrected permissions for login directory /var/run/dovecot/login
# /etc/init.d/dovecot restart
Instalando e configurando o Clamav

# apt-get install clamav-base clamav-daemon clamav-freshclam clamsmtp
content_filter = scan:127.0.0.1:10025
receive_override_options = no_address_mappings
# vi /etc/postfix/master.cf
scan unix - - n - 16 smtp

-o smtp_send_xforward_command=yes
-o smtp_enforce_tls=no
127.0.0.1:10026 inet n - n - 16 smtpd
-o content_filter=
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_helo_restrictions=
-o smtpd_client_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks_style=host
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
# vi /etc/clamsmtpd.conf
OutAddress: 10026
Listen: 127.0.0.1:10025
Header: X-AV-Checked: ClamAV using ClamSMTP
# /etc/init.d/clamsmtp restart
Montar agendamento para o clamav usando o comando /usr/bin/freshclam e assim atualizar a base do
antivírus.
Instalando e configurando o Spamassassin

Instalar pacotes:
O SpamAssassin esta utilizando uma base compartilhada para consulta.
# apt-get install spamassassin spamc razor pyzor
# adduser --system --home /home/spamd --group spamd
# vi /etc/default/spamassassin
ENABLED=1
HOME="/home/spamd"
OPTIONS="-c -m 5 -u spamd -H $HOME -s $HOME/spamd.log"
# vi /etc/spamassassin/local.cf
rewrite_header Subject *****SPAM*****

add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_
autolearn=_AUTOLEARN_
add_header all Level _STARS(*)
add_header all Checker-Version SpamAssassin on _HOSTNAME_
report_safe 1
use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1
bayes_file_mode 0700
bayes_min_ham_num 100
bayes_min_spam_num 100
whitelist_from *@dominio.org
skip_rbl_checks 0
use_razor2 0
razor_config /etc/razor/razor-agent.conf
use_pyzor 1
pyzor_path /usr/bin/pyzor
# /etc/init.d/spamassassin restart
# vi /etc/postfix/master.cf
smtp inet n - - - - smtpd

-o content_filter=spamassassin
#SPAMASSASSIN
spamassassin unix - n n - - pipe
user=spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}
######### ANTI-SPAM ##########

smtpd_sender_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain,
reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_hard_error_limit = 1
bounce_queue_lifetime = 1d
maximal_queue_lifetime = 1d
smtpd_banner = $myhostname NO UCE ESMTP
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
message_size_limit = 2048000
mailbox_size_limit = 5120000
local_destination_concurrency_limit = 100
unknown_local_recipient_reject_code = 550
Para verificar e classificar se é spam ou não, utilize os comandos:
# sa-learn --spam -u spamd --dir /home/vmail/<usuario>/Maildir/.Junk/* -D

# sa-learn --ham -u spamd --dir /home/vmail/<usuario>/Maildir/.Junk/* -D
Processo de instalação do e-groupware
root@CBA-SAMBA:/# apt-get install apache
apache apache2-mpm-itk apache2-utils
apache2 apache2-mpm-perchild apache-common
apache2.2-common apache2-mpm-prefork apache-doc
apache2-common apache2-mpm-threadpool apache-perl

apache2-dev apache2-mpm-worker apache-ssl
apache2-doc apache2-prefork-dev apachetop
apache2-mpm apache2-src apache-utils
apache2-mpm-event apache2-threaded-dev
root@CBA-SAMBA:/# apt-get install apache2
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
apache2-mpm-worker apache2-utils apache2.2-common libapr1 libaprutil1 libpq5
Suggested packages:
apache2-doc
The following NEW packages will be installed:
apache2 apache2-mpm-worker apache2-utils apache2.2-common libapr1
libaprutil1 libpq5
0 upgraded, 7 newly installed, 0 to remove and 131 not upgraded.
16 not fully installed or removed.
Need to get 2207kB of archives.
After unpacking 6238kB of additional disk space will be used.
Do you want to continue [Y/n]? Y
Get:1 http://br.archive.ubuntu.com gutsy/main libapr1 1.2.7-8.2ubuntu1 [112kB]
Get:2 http://br.archive.ubuntu.com gutsy-updates/main libpq5 8.2.11-0ubuntu0.7.10

[253kB]
Get:3 http://br.archive.ubuntu.com gutsy/main libaprutil1 1.2.7+dfsg-2build1 [70.2kB]
Get:4 http://br.archive.ubuntu.com gutsy-updates/main apache2-utils 2.2.4-3ubuntu0.1

[346kB]
Get:5 http://br.archive.ubuntu.com gutsy-updates/main apache2.2-common 2.2.4-

3ubuntu0.1 [945kB]
Get:6 http://br.archive.ubuntu.com gutsy-updates/main apache2-mpm-worker 2.2.4-

3ubuntu0.1 [439kB]
Get:7 http://br.archive.ubuntu.com gutsy-updates/main apache2 2.2.4-3ubuntu0.1

[42.2kB]
Fetched 2207kB in 1m5s (33.6kB/s)

Selecting previously deselected package libapr1.
(Reading database ... 97841 files and directories currently installed.)
Unpacking libapr1 (from .../libapr1_1.2.7-8.2ubuntu1_i386.deb) ...
Selecting previously deselected package libpq5.
Unpacking libpq5 (from .../libpq5_8.2.11-0ubuntu0.7.10_i386.deb) ...
Selecting previously deselected package libaprutil1.
Unpacking libaprutil1 (from .../libaprutil1_1.2.7+dfsg-2build1_i386.deb) ...
Selecting previously deselected package apache2-utils.
Unpacking apache2-utils (from .../apache2-utils_2.2.4-3ubuntu0.1_i386.deb) ...
Selecting previously deselected package apache2.2-common.
Unpacking apache2.2-common (from .../apache2.2-common_2.2.4-

3ubuntu0.1_i386.deb) ...
Selecting previously deselected package apache2-mpm-worker.
Unpacking apache2-mpm-worker (from .../apache2-mpm-worker_2.2.4-

Selecting previously deselected package apache2.
Unpacking apache2 (from .../apache2_2.2.4-3ubuntu0.1_all.deb) ...
Setting up cups-pdf (2.4.6-3ubuntu10) ...
chown: `root:lpadmin': invalid group
dpkg: error processing cups-pdf (--configure):
subprocess post-installation script returned error exit status 1
Setting up hal (0.5.9.1-6ubuntu5) ...
adduser: The group `cdrom' does not exist.
dpkg: error processing hal (--configure):
dpkg: dependency problems prevent configuration of gnome-power-manager:
gnome-power-manager depends on hal; however:
Package hal is not configured yet.
dpkg: error processing gnome-power-manager (--configure):
dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of gnome-session:

gnome-session depends on gnome-power-manager; however:
Package gnome-power-manager is not configured yet.
dpkg: error processing gnome-session (--configure):
dpkg: dependency problems prevent configuration of gnome-core:
gnome-core depends on gnome-session (>= 2.18.2); however:
Package gnome-session is not configured yet.
dpkg: error processing gnome-core (--configure):
dpkg: dependency problems prevent configuration of gnome-mount:
gnome-mount depends on hal; however:
dpkg: error processing gnome-mount (--configure):
dpkg: dependency problems prevent configuration of gnome-volume-manager:
gnome-volume-manager depends on hal (>= 0.5.5.1); however:
gnome-volume-manager depends on gnome-mount; however:
Package gnome-mount is not configured yet.
dpkg: error processing gnome-volume-manager (--configure):
dpkg: dependency problems prevent configuration of sound-juicer:
sound-juicer depends on hal; however:
dpkg: error processing sound-juicer (--configure):
dpkg: dependency problems prevent configuration of gnome-desktop-environment:
gnome-desktop-environment depends on gnome-core (= 1:2.18.3ubuntu2); however:
Package gnome-core is not configured yet.
gnome-desktop-environment depends on gnome-power-manager (>= 2.18.3); however:

gnome-desktop-environment depends on gnome-volume-manager (>= 2.17.0);
however:
Package gnome-volume-manager is not configured yet.
gnome-desktop-environment depends on sound-juicer (>= 2.16.4); however:
Package sound-juicer is not configured yet.
dpkg: error processing gnome-desktop-environment (--configure):
dpkg: dependency problems prevent configuration of hal-cups-utils:
hal-cups-utils depends on hal; however:
dpkg: error processing hal-cups-utils (--configure):
dpkg: dependency problems prevent configuration of hwdb-client-common:
hwdb-client-common depends on hal; however:
dpkg: error processing hwdb-client-common (--configure):
dpkg: dependency problems prevent configuration of hwdb-client-gnome:
hwdb-client-gnome depends on hwdb-client-common (>= 0.6-0ubuntu23); however:
Package hwdb-client-common is not configured yet.
dpkg: error processing hwdb-client-gnome (--configure):
dpkg: dependency problems prevent configuration of hal-device-manager:
hal-device-manager depends on hal; however:
hal-device-manager depends on hwdb-client-gnome; however:
Package hwdb-client-gnome is not configured yet.
dpkg: error processing hal-device-manager (--configure):
dpkg: dependency problems prevent configuration of network-manager:
network-manager depends on hal (>= 0.5.7.1); however:

dpkg: error processing network-manager (--configure):
dpkg: dependency problems prevent configuration of network-manager-gnome:
network-manager-gnome depends on network-manager (>= 0.6.5); however:
Package network-manager is not configured yet.
dpkg: error processing network-manager-gnome (--configure):
dpkg: dependency problems prevent configuration of update-notifier:
update-notifier depends on hal; however:
dpkg: error processing update-notifier (--configure):
Setting up libapr1 (1.2.7-8.2ubuntu1) ...
Setting up libpq5 (8.2.11-0ubuntu0.7.10) ...
Setting up libaprutil1 (1.2.7+dfsg-2build1) ...
Setting up apache2-utils (2.2.4-3ubuntu0.1) ...
Setting up apache2.2-common (2.2.4-3ubuntu0.1) ...
Module alias installed; run /etc/init.d/apache2 force-reload to enable.
Module autoindex installed; run /etc/init.d/apache2 force-reload to enable.
Module dir installed; run /etc/init.d/apache2 force-reload to enable.
Module env installed; run /etc/init.d/apache2 force-reload to enable.
Module mime installed; run /etc/init.d/apache2 force-reload to enable.
Module negotiation installed; run /etc/init.d/apache2 force-reload to enable.
Module setenvif installed; run /etc/init.d/apache2 force-reload to enable.
Module status installed; run /etc/init.d/apache2 force-reload to enable.
Module auth_basic installed; run /etc/init.d/apache2 force-reload to enable.
Module authz_default installed; run /etc/init.d/apache2 force-reload to enable.

Module authz_user installed; run /etc/init.d/apache2 force-reload to enable.
Module authz_groupfile installed; run /etc/init.d/apache2 force-reload to enable.
Module authn_file installed; run /etc/init.d/apache2 force-reload to enable.
Module authz_host installed; run /etc/init.d/apache2 force-reload to enable.
Setting up apache2-mpm-worker (2.2.4-3ubuntu0.1) ...
* Starting web server apache2
apache2: bad group name www-data
...fail!
invoke-rc.d: initscript apache2, action "start" failed.
Setting up apache2 (2.2.4-3ubuntu0.1) ...
Processing triggers for libc6 ...
ldconfig deferred processing now taking place
Errors were encountered while processing:
cups-pdf
hal
gnome-power-manager
gnome-session
gnome-core
gnome-mount
gnome-volume-manager
sound-juicer
gnome-desktop-environment
hal-cups-utils
hwdb-client-common
hwdb-client-gnome
hal-device-manager
network-manager
network-manager-gnome
update-notifier
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@CBA-SAMBA:/# cd home
root@CBA-SAMBA:/home# ls
anamary gestaodepessoas michel vani viniciusjose
daniel hamilton recursoshumanos vbox wrodrigues
ecouto mferreira rservice viciniusjose
root@CBA-SAMBA:/home# cd ..
root@CBA-SAMBA:/# mkdir -p /home/www/brasilamarras
root@CBA-SAMBA:/# chown -R www-data:www-data /home/www/brasilamarras
chown: `www-data:www-data': invalid group
chown: `www-data:www-data': invalid group
root@CBA-SAMBA:/# addgroup www-data
Adding group `www-data' (GID 1014) ...
Done.
root@CBA-SAMBA:/# cp /etc/a
acpi/ adsm/ anacrontab apparmor/ apt/
adduser.conf aliases apache2/ apparmor.d/ at.deny
adjtime alternatives/ apm/ apport/ avahi/
root@CBA-SAMBA:/# cp /etc/apache2/sites-available/default /etc/apache2/sites-

available/brasilamarras
root@CBA-SAMBA:/# vi /etc/apache2/sites-available/brasilamarras
NameVirtualHost *
<VirtualHost *>
DocumentRoot /home/www/brasilamarras
<Directory />
AllowOverride None
</Directory>
<Directory /var/www/brasilamarras>
AllowOverride None
Order allow,deny
allow from all
</Directory>
AllowOverride None
Order allow,deny
Allow from all
</Directory>
# alert, emerg.
LogLevel warn
ServerSignature On

AllowOverride None
Order deny,allow
Deny from all
Allow from 192.168.0.0/255.255.255.0 ::1/254
</Directory>
</VirtualHost>
<tc/apache2/sites-available/brasilamarras" 47L, 1217C written
root@CBA-SAMBA:/# a2ensite
Which site would you like to enable?
Your choices are: brasilamarras default
Site name? brasilamarras
Site brasilamarras installed; run /etc/init.d/apache2 reload to enable.
root@CBA-SAMBA:/# rm /etc/apache2/sites-enable/000-default
rm: cannot remove `/etc/apache2/sites-enable/000-default': No such file or directory
root@CBA-SAMBA:/# rm /etc/apache2/sites-enabled/000-default
root@CBA-SAMBA:/# /etc/init.d/apache2 restart
* Restarting web server apache2
Syntax error on line 43 of /etc/apache2/sites-enabled/brasilamarras:
The specified network mask is invalid.
...fail!
NameVirtualHost *
<VirtualHost *>
<Directory />
AllowOverride None
</Directory>
AllowOverride None
Order allow,deny
allow from all
</Directory>
AllowOverride None
Order allow,deny
Allow from all
</Directory>
# alert, emerg.
LogLevel warn
ServerSignature On
AllowOverride None
Order deny,allow
Deny from all
Allow from 192.168.0.0/255.255.0.0 ::1/254
</Directory>
...fail!
root@CBA-SAMBA:/# vi /etc/apache2/sites-enabled/brasilamarras
NameVirtualHost *
<VirtualHost *>
<Directory />
AllowOverride None
</Directory>
AllowOverride None
Order allow,deny
allow from all

</Directory>
AllowOverride None
Order allow,deny
25 Allow from all
26 </Directory>
27
28 ErrorLog /var/log/apache2/error.log
29
30 # Possible values include: debug, info, notice, warn, error, crit,
31 # alert, emerg.
32 LogLevel warn
33
34 CustomLog /var/log/apache2/access.log combined
35 ServerSignature On
36
37 Alias /doc/ "/usr/share/doc/"
38 <Directory "/usr/share/doc/">
39 Options Indexes MultiViews FollowSymLinks
40 AllowOverride None
41 Order deny,allow
42 Deny from all
43 Allow from 192.168.0.0/255.255.255.0 ::1/255
44 </Directory>
45
46 </VirtualHost>
47
"/etc/apache2/sites-enabled/brasilamarras" 47L, 1219C written
...fail!
NameVirtualHost *
<VirtualHost *>
<Directory />
AllowOverride None
</Directory>
AllowOverride None
Order allow,deny
allow from all
</Directory>
AllowOverride None

Order allow,deny
Allow from all
</Directory>
# alert, emerg.
LogLevel warn
ServerSignature On
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
</VirtualHost>
root@CBA-SAMBA:/# vi /etc/apache2/sites-enabled/brasilamarras
NameVirtualHost *
<VirtualHost *>
<Directory />
AllowOverride None
</Directory>
AllowOverride None
Order allow,deny
allow from all
</Directory>
AllowOverride None
Order allow,deny
Allow from all
</Directory>
# alert, emerg.
LogLevel warn
ServerSignature On
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
</VirtualHost>
"/etc/apache2/sites-enabled/brasilamarras" 47L, 1213C written
apache2: Could not reliably determine the server's fully qualified domain name, using
192.168.0.6 for ServerName
httpd (no pid file) not running
apache2: Could not reliably determine the server's fully qualified domain name, using
192.168.0.6 for ServerName
...done.
root@CBA-SAMBA:/# apt-get install postgresql-8.2 postgresql-contrib-8.2 libpq-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
comerr-dev libc6 libc6-dev libc6-i686 libcomerr2 libkadm55 libkrb5-dev
libkrb53 libssl-dev libssl0.9.8 linux-libc-dev postgresql-client-8.2
postgresql-client-common postgresql-common zlib1g-dev
Suggested packages:
glibc-doc manpages-dev krb5-doc krb5-user postgresql-doc-8.2 oidentd
ident-server
Recommended packages:
libdbd-pg-perl
The following NEW packages will be installed:
comerr-dev libc6-dev libkadm55 libkrb5-dev libpq-dev libssl-dev
linux-libc-dev postgresql-8.2 postgresql-client-8.2 postgresql-client-common
postgresql-common postgresql-contrib-8.2 zlib1g-dev
The following packages will be upgraded:
libc6 libc6-i686 libcomerr2 libkrb53 libssl0.9.8
5 upgraded, 13 newly installed, 0 to remove and 126 not upgraded.
16 not fully installed or removed.
Need to get 20.3MB of archives.
After unpacking 44.5MB of additional disk space will be used.
Do you want to continue [Y/n]? y^HY
Get:1 http://br.archive.ubuntu.com gutsy-updates/main libc6 2.6.1-1ubuntu10 [4184kB]
Get:2 http://br.archive.ubuntu.com gutsy-updates/main libc6-i686 2.6.1-1ubuntu10

[1148kB]
Get:3 http://br.archive.ubuntu.com gutsy-updates/main libcomerr2 1.40.2-1ubuntu1.1

[34.0kB]
Get:4 http://br.archive.ubuntu.com gutsy-updates/main libkrb53 1.6.dfsg.1-7ubuntu0.1

[462kB]
Get:5 http://br.archive.ubuntu.com gutsy-updates/main libssl0.9.8 0.9.8e-5ubuntu3.2

[2825kB]
Get:6 http://br.archive.ubuntu.com gutsy-updates/main linux-libc-dev 2.6.22-16.60

[655kB]
Get:7 http://br.archive.ubuntu.com gutsy-updates/main libc6-dev 2.6.1-1ubuntu10

[3287kB]
Get:8 http://br.archive.ubuntu.com gutsy-updates/main libkadm55 1.6.dfsg.1-7ubuntu0.1

[148kB]
Get:9 http://br.archive.ubuntu.com gutsy/main zlib1g-dev 1:1.2.3.3.dfsg-5ubuntu2

[160kB]
Get:10 http://br.archive.ubuntu.com gutsy-updates/main libssl-dev 0.9.8e-5ubuntu3.2

[1943kB]
Get:11 http://br.archive.ubuntu.com gutsy-updates/main comerr-dev 2.1-1.40.2-

1ubuntu1.1 [40.6kB]
Get:12 http://br.archive.ubuntu.com gutsy-updates/main libkrb5-dev 1.6.dfsg.1-
7ubuntu0.1 [88.6kB]
Get:13 http://br.archive.ubuntu.com gutsy-updates/main libpq-dev 8.2.11-0ubuntu0.7.10

[363kB]
Get:14 http://br.archive.ubuntu.com gutsy/main postgresql-client-common 78 [41.9kB]
Get:15 http://br.archive.ubuntu.com gutsy-updates/main postgresql-client-8.2 8.2.11-

0ubuntu0.7.10 [850kB]
Get:16 http://br.archive.ubuntu.com gutsy/main postgresql-common 78 [102kB]
Get:17 http://br.archive.ubuntu.com gutsy-updates/main postgresql-8.2 8.2.11-

0ubuntu0.7.10 [3280kB]
Get:18 http://br.archive.ubuntu.com gutsy-updates/main postgresql-contrib-8.2 8.2.11-

0ubuntu0.7.10 [688kB]
Fetched 20.3MB in 13m15s (25.5kB/s)
Preconfiguring packages ...
Preparing to replace libc6 2.6.1-1ubuntu9 (using .../libc6_2.6.1-1ubuntu10_i386.deb) ...
Unpacking replacement libc6 ...
Setting up libc6 (2.6.1-1ubuntu10) ...
Preparing to replace libc6-i686 2.6.1-1ubuntu9 (using .../libc6-i686_2.6.1-

1ubuntu10_i386.deb) ...
Unpacking replacement libc6-i686 ...
Preparing to replace libcomerr2 1.40.2-1ubuntu1 (using .../libcomerr2_1.40.2-

Unpacking replacement libcomerr2 ...
Setting up libcomerr2 (1.40.2-1ubuntu1.1) ...

Preparing to replace libkrb53 1.6.dfsg.1-7build1 (using .../libkrb53_1.6.dfsg.1-
Unpacking replacement libkrb53 ...
Preparing to replace libssl0.9.8 0.9.8e-5ubuntu3 (using .../libssl0.9.8_0.9.8e-

Unpacking replacement libssl0.9.8 ...
Selecting previously deselected package linux-libc-dev.
Unpacking linux-libc-dev (from .../linux-libc-dev_2.6.22-16.60_i386.deb) ...
Selecting previously deselected package libc6-dev.
Unpacking libc6-dev (from .../libc6-dev_2.6.1-1ubuntu10_i386.deb) ...
Selecting previously deselected package libkadm55.
Unpacking libkadm55 (from .../libkadm55_1.6.dfsg.1-7ubuntu0.1_i386.deb) ...
Selecting previously deselected package zlib1g-dev.
Unpacking zlib1g-dev (from .../zlib1g-dev_1%3a1.2.3.3.dfsg-5ubuntu2_i386.deb) ...
Selecting previously deselected package libssl-dev.
Unpacking libssl-dev (from .../libssl-dev_0.9.8e-5ubuntu3.2_i386.deb) ...
Selecting previously deselected package comerr-dev.
Unpacking comerr-dev (from .../comerr-dev_2.1-1.40.2-1ubuntu1.1_i386.deb) ...
Selecting previously deselected package libkrb5-dev.
Unpacking libkrb5-dev (from .../libkrb5-dev_1.6.dfsg.1-7ubuntu0.1_i386.deb) ...
Selecting previously deselected package libpq-dev.
Unpacking libpq-dev (from .../libpq-dev_8.2.11-0ubuntu0.7.10_i386.deb) ...
Selecting previously deselected package postgresql-client-common.
Unpacking postgresql-client-common (from .../postgresql-client-common_78_all.deb) ...
Selecting previously deselected package postgresql-client-8.2.
Unpacking postgresql-client-8.2 (from .../postgresql-client-8.2_8.2.11-

0ubuntu0.7.10_i386.deb) ...
Selecting previously deselected package postgresql-common.
Unpacking postgresql-common (from .../postgresql-common_78_all.deb) ...
Selecting previously deselected package postgresql-8.2.
Unpacking postgresql-8.2 (from .../postgresql-8.2_8.2.11-0ubuntu0.7.10_i386.deb) ...
Selecting previously deselected package postgresql-contrib-8.2.

Unpacking postgresql-contrib-8.2 (from .../postgresql-contrib-8.2_8.2.11-
0ubuntu0.7.10_i386.deb) ...
Setting up libc6-i686 (2.6.1-1ubuntu10) ...
Setting up cups-pdf (2.4.6-3ubuntu10) ...
chown: `root:lpadmin': invalid group
dpkg: error processing cups-pdf (--configure):
Setting up hal (0.5.9.1-6ubuntu5) ...
adduser: The group `cdrom' does not exist.
dpkg: error processing hal (--configure):
dpkg: dependency problems prevent configuration of gnome-power-manager:
gnome-power-manager depends on hal; however:
dpkg: error processing gnome-power-manager (--configure):
dpkg: dependency problems prevent configuration of gnome-session:
gnome-session depends on gnome-power-manager; however:
dpkg: error processing gnome-session (--configure):
dpkg: dependency problems prevent configuration of gnome-core:
gnome-core depends on gnome-session (>= 2.18.2); however:
Package gnome-session is not configured yet.
dpkg: error processing gnome-core (--configure):
dpkg: dependency problems prevent configuration of gnome-mount:
gnome-mount depends on hal; however:
dpkg: error processing gnome-mount (--configure):

dpkg: dependency problems prevent configuration of gnome-volume-manager:
gnome-volume-manager depends on hal (>= 0.5.5.1); however:
gnome-volume-manager depends on gnome-mount; however:
Package gnome-mount is not configured yet.
dpkg: error processing gnome-volume-manager (--configure):
dpkg: dependency problems prevent configuration of sound-juicer:
sound-juicer depends on hal; however:
dpkg: error processing sound-juicer (--configure):
dpkg: dependency problems prevent configuration of gnome-desktop-environment:
gnome-desktop-environment depends on gnome-core (= 1:2.18.3ubuntu2); however:
Package gnome-core is not configured yet.
gnome-desktop-environment depends on gnome-power-manager (>= 2.18.3); however:
gnome-desktop-environment depends on gnome-volume-manager (>= 2.17.0);

however:
Package gnome-volume-manager is not configured yet.
gnome-desktop-environment depends on sound-juicer (>= 2.16.4); however:
Package sound-juicer is not configured yet.
dpkg: error processing gnome-desktop-environment (--configure):
dpkg: dependency problems prevent configuration of hal-cups-utils:
hal-cups-utils depends on hal; however:
dpkg: error processing hal-cups-utils (--configure):
dpkg: dependency problems prevent configuration of hwdb-client-common:

hwdb-client-common depends on hal; however:
dpkg: error processing hwdb-client-common (--configure):
dpkg: dependency problems prevent configuration of hwdb-client-gnome:
hwdb-client-gnome depends on hwdb-client-common (>= 0.6-0ubuntu23); however:
Package hwdb-client-common is not configured yet.
dpkg: error processing hwdb-client-gnome (--configure):
dpkg: dependency problems prevent configuration of hal-device-manager:
hal-device-manager depends on hal; however:
hal-device-manager depends on hwdb-client-gnome; however:
Package hwdb-client-gnome is not configured yet.
dpkg: error processing hal-device-manager (--configure):
dpkg: dependency problems prevent configuration of network-manager:
network-manager depends on hal (>= 0.5.7.1); however:
dpkg: error processing network-manager (--configure):
dpkg: dependency problems prevent configuration of network-manager-gnome:
network-manager-gnome depends on network-manager (>= 0.6.5); however:
Package network-manager is not configured yet.
dpkg: error processing network-manager-gnome (--configure):
dpkg: dependency problems prevent configuration of update-notifier:
update-notifier depends on hal; however:
dpkg: error processing update-notifier (--configure):

Setting up libkrb53 (1.6.dfsg.1-7ubuntu0.1) ...
Setting up libssl0.9.8 (0.9.8e-5ubuntu3.2) ...
Setting up linux-libc-dev (2.6.22-16.60) ...
Setting up libc6-dev (2.6.1-1ubuntu10) ...
Setting up libkadm55 (1.6.dfsg.1-7ubuntu0.1) ...
Setting up zlib1g-dev (1:1.2.3.3.dfsg-5ubuntu2) ...
Setting up libssl-dev (0.9.8e-5ubuntu3.2) ...
Setting up comerr-dev (2.1-1.40.2-1ubuntu1.1) ...
Setting up libkrb5-dev (1.6.dfsg.1-7ubuntu0.1) ...
Setting up libpq-dev (8.2.11-0ubuntu0.7.10) ...
Setting up postgresql-client-common (78) ...
Setting up postgresql-client-8.2 (8.2.11-0ubuntu0.7.10) ...
Setting up postgresql-common (78) ...
Setting up postgresql-8.2 (8.2.11-0ubuntu0.7.10) ...
Creating new cluster (configuration: /etc/postgresql/8.2/main, data:

/var/lib/postgresql/8.2/main)...
Moving configuration file /var/lib/postgresql/8.2/main/postgresql.conf to

/etc/postgresql/8.2/main...
Moving configuration file /var/lib/postgresql/8.2/main/pg_hba.conf to

Moving configuration file /var/lib/postgresql/8.2/main/pg_ident.conf to

Configuring postgresql.conf to use port 5432...
* Starting PostgreSQL 8.2 database server
...done.
Setting up postgresql-contrib-8.2 (8.2.11-0ubuntu0.7.10) ...
Errors were encountered while processing:
cups-pdf
hal
gnome-power-manager
gnome-session
gnome-core
gnome-mount
gnome-volume-manager
sound-juicer
gnome-desktop-environment
hal-cups-utils
hwdb-client-common
hwdb-client-gnome
hal-device-manager
network-manager
network-manager-gnome
update-notifier
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@CBA-SAMBA:/#
root@CBA-SAMBA:/# vi /etc/postgresql/8.2/main/postgresql.conf
# -----------------------------
# PostgreSQL configuration file
# -----------------------------
# This file consists of lines of the form:
# name = value
#
# (The '=' is optional.) White space may be used. Comments are introduced
# with '#' anywhere on a line. The complete list of option names and
# allowed values can be found in the PostgreSQL documentation. The
# commented-out settings shown in this file represent the default values.
# Please note that re-commenting a setting is NOT sufficient to revert it
# to the default value, unless you restart the server.
# Any option can also be given as a command line switch to the server,
# e.g., 'postgres -c log_connections=on'. Some options can be changed at
# run-time with the 'SET' SQL command.
# This file is read on server startup and when the server receives a
# SIGHUP. If you edit the file on a running system, you have to SIGHUP the
# server for the changes to take effect, or use "pg_ctl reload". Some
# settings, which are marked below, require a server shutdown and restart
# to take effect.
# Memory units: kB = kilobytes MB = megabytes GB = gigabytes
# Time units: ms = milliseconds s = seconds min = minutes h = hours d = days
#---------------------------------------------------------------------------
# FILE LOCATIONS
#---------------------------------------------------------------------------
# The default values of these variables are driven from the -D command line
# switch or PGDATA environment variable, represented here as ConfigDir.
#data_directory = 'ConfigDir' # use data in another directory

# (change requires restart)
hba_file = '/etc/postgresql/8.2/main/pg_hba.conf' # host-based authentication file
ident_file = '/etc/postgresql/8.2/main/pg_ident.conf' # ident configuration file
# If external_pid_file is not explicitly set, no extra PID file is written.
external_pid_file = '/var/run/postgresql/8.2-main.pid' # write an extra PID file
#---------------------------------------------------------------------------
# CONNECTIONS AND AUTHENTICATION
#---------------------------------------------------------------------------
# - Connection Settings -
#---------------------------------------------------------------------------
#---------------------------------------------------------------------------
listen_addresses = '*' # what IP address(es) to listen on;
# comma-separated list of addresses;
# defaults to 'localhost', '*' = all
port = 5432 # (change requires restart)
max_connections = 100 # (change requires restart)
# Note: increasing max_connections costs ~400 bytes of shared memory per
# connection slot, plus lock space (see max_locks_per_transaction). You
# might also need to raise shared_buffers to support more connections.
#superuser_reserved_connections = 3 # (change requires restart)
unix_socket_directory = '/var/run/postgresql' # (change requires restart)
#unix_socket_group = '' # (change requires restart)
#unix_socket_permissions = 0777 # octal
#bonjour_name = '' # defaults to the computer name
# - Security & Authentication -
#authentication_timeout = 1min # 1s-600s
ssl = true # (change requires restart)
#db_user_namespace = off
# Kerberos
#krb_server_keyfile = '' # (change requires restart)
#krb_srvname = 'postgres' # (change requires restart)
#krb_server_hostname = '' # empty string matches any keytab entry
#krb_caseins_users = off # (change requires restart)

# - TCP Keepalives -
# see 'man 7 tcp' for details
#tcp_keepalives_idle = 0 # TCP_KEEPIDLE, in seconds;
# 0 selects the system default
#tcp_keepalives_interval = 0 # TCP_KEEPINTVL, in seconds;
#tcp_keepalives_count = 0 # TCP_KEEPCNT;
#---------------------------------------------------------------------------
# RESOURCE USAGE (except WAL)
#---------------------------------------------------------------------------
# - Memory -
shared_buffers = 24MB # min 128kB or max_connections*16kB
#temp_buffers = 8MB # min 800kB
#max_prepared_transactions = 5 # can be 0 or more
# Note: increasing max_prepared_transactions costs ~600 bytes of shared memory
# per transaction slot, plus lock space (see max_locks_per_transaction).
#work_mem = 1MB # min 64kB
#maintenance_work_mem = 16MB # min 1MB
#max_stack_depth = 2MB # min 100kB
# - Free Space Map -

max_fsm_pages = 153600 # min max_fsm_relations*16, 6 bytes each
#max_fsm_relations = 1000 # min 100, ~70 bytes each
# - Kernel Resource Usage -
#max_files_per_process = 1000 # min 25
#shared_preload_libraries = '' # (change requires restart)
# - Cost-Based Vacuum Delay -
#vacuum_cost_delay = 0 # 0-1000 milliseconds
#vacuum_cost_page_hit = 1 # 0-10000 credits
#vacuum_cost_page_miss = 10 # 0-10000 credits
#vacuum_cost_page_dirty = 20 # 0-10000 credits
#vacuum_cost_limit = 200 # 0-10000 credits
# - Background writer -
#bgwriter_delay = 200ms # 10-10000ms between rounds
#bgwriter_lru_percent = 1.0 # 0-100% of LRU buffers scanned/round
#bgwriter_lru_maxpages = 5 # 0-1000 buffers max written/round
#bgwriter_all_percent = 0.333 # 0-100% of all buffers scanned/round
#bgwriter_all_maxpages = 5 # 0-1000 buffers max written/round
#---------------------------------------------------------------------------
# WRITE AHEAD LOG
#---------------------------------------------------------------------------
# - Settings -
#fsync = on # turns forced synchronization on or off
#wal_sync_method = fsync # the default is the first option
# supported by the operating system:
# open_datasync
# fdatasync
# fsync
# fsync_writethrough
# open_sync
#full_page_writes = on # recover from partial page writes
#wal_buffers = 64kB # min 32kB
#commit_delay = 0 # range 0-100000, in microseconds
#commit_siblings = 5 # range 1-1000
# - Checkpoints -
#checkpoint_segments = 3 # in logfile segments, min 1, 16MB each
#checkpoint_timeout = 5min # range 30s-1h
#checkpoint_warning = 30s # 0 is off
# - Archiving -
#archive_command = '' # command to use to archive a logfile segment
#archive_timeout = 0 # force a logfile segment switch after this
# many seconds; 0 is off
#---------------------------------------------------------------------------
# QUERY TUNING
#---------------------------------------------------------------------------
# - Planner Method Configuration -
#enable_bitmapscan = on
#enable_hashagg = on
#enable_hashjoin = on
#enable_indexscan = on
#enable_mergejoin = on
#enable_nestloop = on
#enable_seqscan = on
#enable_sort = on
#enable_tidscan = on
# - Planner Cost Constants -
#seq_page_cost = 1.0 # measured on an arbitrary scale
#random_page_cost = 4.0 # same scale as above
#cpu_tuple_cost = 0.01 # same scale as above
#cpu_index_tuple_cost = 0.005 # same scale as above
#cpu_operator_cost = 0.0025 # same scale as above
#effective_cache_size = 128MB
# - Genetic Query Optimizer -
#geqo = on
#geqo_threshold = 12
#geqo_effort = 5 # range 1-10
#geqo_pool_size = 0 # selects default based on effort
#geqo_generations = 0 # selects default based on effort

#geqo_selection_bias = 2.0 # range 1.5-2.0
# - Other Planner Options -
#default_statistics_target = 10 # range 1-1000
#constraint_exclusion = off
#from_collapse_limit = 8
#join_collapse_limit = 8 # 1 disables collapsing of explicit
# JOINs
#---------------------------------------------------------------------------
# ERROR REPORTING AND LOGGING
#---------------------------------------------------------------------------
# - Where to Log -
#log_destination = 'stderr' # Valid values are combinations of
# stderr, syslog and eventlog,
/autovacuum
#stats_command_string = on
#update_process_title = on
#stats_start_collector = on # needed for block or row stats
#stats_block_level = off
stats_row_level = on
#stats_reset_on_server_start = off # (change requires restart)
# - Statistics Monitoring -
#log_parser_stats = off
#log_planner_stats = off
#log_executor_stats = off
#log_statement_stats = off
#---------------------------------------------------------------------------
# AUTOVACUUM PARAMETERS
#---------------------------------------------------------------------------
autovacuum = on # enable autovacuum subprocess?
# 'on' requires stats_start_collector
# and stats_row_level to also be on
autovacuum_naptime = 1min # time between autovacuum runs
autovacuum_vacuum_threshold = 500 # min # of tuple updates before
# vacuum
autovacuum_analyze_threshold = 250 # min # of tuple updates before
# analyze
autovacuum_vacuum_scale_factor = 0.2 # fraction of rel size before
# vacuum
autovacuum_analyze_scale_factor = 0.1 # fraction of rel size before
# analyze
autovacuum_freeze_max_age = 200000000 # maximum XID age before forced vacuum
autovacuum_vacuum_cost_delay = -1 # default vacuum cost delay for
# autovacuum, -1 means use
# vacuum_cost_delay
autovacuum_vacuum_cost_limit = -1 # default vacuum cost limit for

# vacuum_cost_limit
#---------------------------------------------------------------------------
# CLIENT CONNECTION DEFAULTS
#---------------------------------------------------------------------------
# - Statement Behavior -
#search_path = '"$user",public' # schema names
#default_tablespace = '' # a tablespace name, '' uses
# the default
#check_function_bodies = on
#default_transaction_isolation = 'read committed'
#default_transaction_read_only = off
#statement_timeout = 0 # 0 is disabled
#vacuum_freeze_min_age = 100000000
# - Locale and Formatting -
datestyle = 'iso, mdy'
#timezone = unknown # actually, defaults to TZ
# environment setting
#timezone_abbreviations = 'Default' # select the set of available timezone
# abbreviations. Currently, there are
<tc/postgresql/8.2/main/postgresql.conf" 472L, 15410C written
root@CBA-SAMBA:/#
root@CBA-SAMBA:/# vi /etc/postgresql/8.2/main/postgresql.conf
# -----------------------------
# PostgreSQL configuration file
# -----------------------------
#
# This file consists of lines of the form:
# name = value
# (The '=' is optional.) White space may be used. Comments are introduced
# with '#' anywhere on a line. The complete list of option names and
# allowed values can be found in the PostgreSQL documentation. The
# commented-out settings shown in this file represent the default values.
# Please note that re-commenting a setting is NOT sufficient to revert it
# to the default value, unless you restart the server.
# Any option can also be given as a command line switch to the server,
# e.g., 'postgres -c log_connections=on'. Some options can be changed at
# run-time with the 'SET' SQL command.
# This file is read on server startup and when the server receives a
# SIGHUP. If you edit the file on a running system, you have to SIGHUP the
# server for the changes to take effect, or use "pg_ctl reload". Some
# settings, which are marked below, require a server shutdown and restart
# to take effect.
# Memory units: kB = kilobytes MB = megabytes GB = gigabytes
# Time units: ms = milliseconds s = seconds min = minutes h = hours d = days
#---------------------------------------------------------------------------
# FILE LOCATIONS
#---------------------------------------------------------------------------
# The default values of these variables are driven from the -D command line
# switch or PGDATA environment variable, represented here as ConfigDir.
#data_directory = 'ConfigDir' # use data in another directory
hba_file = '/etc/postgresql/8.2/main/pg_hba.conf' # host-based authentication file
#---------------------------------------------------------------------------
#---------------------------------------------------------------------------
#---------------------------------------------------------------------------
#---------------------------------------------------------------------------
listen_addresses = '*' # what IP address(es) to listen on;
# comma-separated list of addresses;
# defaults to 'localhost', '*' = all
port = 5432 # (change requires restart)
max_connections = 100 # (change requires restart)
# Note: increasing max_connections costs ~400 bytes of shared memory per
# connection slot, plus lock space (see max_locks_per_transaction). You
# might also need to raise shared_buffers to support more connections.
#superuser_reserved_connections = 3 # (change requires restart)
unix_socket_directory = '/var/run/postgresql' # (change requires restart)
#unix_socket_group = '' # (change requires restart)
#unix_socket_permissions = 0777 # octal
#bonjour_name = '' # defaults to the computer name
# - Security & Authentication -
#authentication_timeout = 1min # 1s-600s
ssl = true # (change requires restart)
#db_user_namespace = off
# Kerberos
#krb_server_keyfile = '' # (change requires restart)

#krb_srvname = 'postgres' # (change requires restart)
#krb_server_hostname = '' # empty string matches any keytab entry
#krb_caseins_users = off # (change requires restart)
# - TCP Keepalives -
# see 'man 7 tcp' for details
#tcp_keepalives_idle = 0 # TCP_KEEPIDLE, in seconds;
#tcp_keepalives_interval = 0 # TCP_KEEPINTVL, in seconds;
#tcp_keepalives_count = 0 # TCP_KEEPCNT;
#---------------------------------------------------------------------------
# RESOURCE USAGE (except WAL)
#---------------------------------------------------------------------------
# - Memory -
shared_buffers = 24MB # min 128kB or max_connections*16kB
#temp_buffers = 8MB # min 800kB
#max_prepared_transactions = 5 # can be 0 or more
# Note: increasing max_prepared_transactions costs ~600 bytes of shared memory
# per transaction slot, plus lock space (see max_locks_per_transaction).
#work_mem = 1MB # min 64kB
#maintenance_work_mem = 16MB # min 1MB

#max_stack_depth = 2MB # min 100kB
# - Free Space Map -
max_fsm_pages = 153600 # min max_fsm_relations*16, 6 bytes each
#max_fsm_relations = 1000 # min 100, ~70 bytes each
# - Kernel Resource Usage -
#max_files_per_process = 1000 # min 25
#shared_preload_libraries = '' # (change requires restart)
# - Cost-Based Vacuum Delay -
#vacuum_cost_delay = 0 # 0-1000 milliseconds
#vacuum_cost_page_hit = 1 # 0-10000 credits
#vacuum_cost_page_miss = 10 # 0-10000 credits
#vacuum_cost_page_dirty = 20 # 0-10000 credits
#vacuum_cost_limit = 200 # 0-10000 credits
# - Background writer -
#bgwriter_delay = 200ms # 10-10000ms between rounds
#bgwriter_lru_percent = 1.0 # 0-100% of LRU buffers scanned/round
#bgwriter_lru_maxpages = 5 # 0-1000 buffers max written/round
#bgwriter_all_percent = 0.333 # 0-100% of all buffers scanned/round
#bgwriter_all_maxpages = 5 # 0-1000 buffers max written/round

#---------------------------------------------------------------------------
# WRITE AHEAD LOG
#---------------------------------------------------------------------------
# - Settings -
#fsync = on # turns forced synchronization on or off
#wal_sync_method = fsync # the default is the first option
# supported by the operating system:
# open_datasync
# fdatasync
# fsync
# fsync_writethrough
# open_sync
#full_page_writes = on # recover from partial page writes
#wal_buffers = 64kB # min 32kB
#commit_delay = 0 # range 0-100000, in microseconds
#commit_siblings = 5 # range 1-1000
# - Checkpoints -
#checkpoint_segments = 3 # in logfile segments, min 1, 16MB each
#checkpoint_timeout = 5min # range 30s-1h
#checkpoint_warning = 30s # 0 is off
# - Archiving -
#archive_command = '' # command to use to archive a logfile segment
#archive_timeout = 0 # force a logfile segment switch after this

# many seconds; 0 is off
#---------------------------------------------------------------------------
# QUERY TUNING
#---------------------------------------------------------------------------
# - Planner Method Configuration -
#enable_bitmapscan = on
#enable_hashagg = on
#enable_hashjoin = on
#enable_indexscan = on
#enable_mergejoin = on
#enable_nestloop = on
#enable_seqscan = on
#enable_sort = on
#enable_tidscan = on
# - Planner Cost Constants -
#seq_page_cost = 1.0 # measured on an arbitrary scale
#random_page_cost = 4.0 # same scale as above
#cpu_tuple_cost = 0.01 # same scale as above
#cpu_index_tuple_cost = 0.005 # same scale as above
#cpu_operator_cost = 0.0025 # same scale as above
#effective_cache_size = 128MB
# - Genetic Query Optimizer -
#geqo = on
#geqo_threshold = 12
#geqo_effort = 5 # range 1-10
#geqo_pool_size = 0 # selects default based on effort
#geqo_generations = 0 # selects default based on effort
#geqo_selection_bias = 2.0 # range 1.5-2.0
# - Other Planner Options -
#default_statistics_target = 10 # range 1-1000
#constraint_exclusion = off
#from_collapse_limit = 8
#join_collapse_limit = 8 # 1 disables collapsing of explicit
# JOINs
#---------------------------------------------------------------------------
# ERROR REPORTING AND LOGGING
#---------------------------------------------------------------------------
# - Where to Log -
#log_destination = 'stderr' # Valid values are combinations of
# stderr, syslog and eventlog,
/autovacuum
#stats_command_string = on
#update_process_title = on
#stats_start_collector = on # needed for block or row stats
#stats_block_level = off
stats_row_level = on
#stats_reset_on_server_start = off # (change requires restart)
# - Statistics Monitoring -
#log_parser_stats = off
#log_planner_stats = off
#log_executor_stats = off
#log_statement_stats = off
#---------------------------------------------------------------------------
# AUTOVACUUM PARAMETERS
#---------------------------------------------------------------------------
autovacuum = on # enable autovacuum subprocess?
# 'on' requires stats_start_collector
# and stats_row_level to also be on
autovacuum_naptime = 1min # time between autovacuum runs
autovacuum_vacuum_threshold = 500 # min # of tuple updates before
# vacuum
autovacuum_analyze_threshold = 250 # min # of tuple updates before
# analyze
autovacuum_vacuum_scale_factor = 0.2 # fraction of rel size before
# vacuum
autovacuum_analyze_scale_factor = 0.1 # fraction of rel size before
# analyze
autovacuum_freeze_max_age = 200000000 # maximum XID age before forced vacuum
autovacuum_vacuum_cost_delay = -1 # default vacuum cost delay for

# vacuum_cost_delay
autovacuum_vacuum_cost_limit = -1 # default vacuum cost limit for
# vacuum_cost_limit
#---------------------------------------------------------------------------
# CLIENT CONNECTION DEFAULTS
#---------------------------------------------------------------------------
# - Statement Behavior -
#search_path = '"$user",public' # schema names
#default_tablespace = '' # a tablespace name, '' uses
# the default
#check_function_bodies = on
#default_transaction_isolation = 'read committed'
#default_transaction_read_only = off
#statement_timeout = 0 # 0 is disabled
#vacuum_freeze_min_age = 100000000
# - Locale and Formatting -
datestyle = 'iso, mdy'
#timezone = unknown # actually, defaults to TZ
# environment setting
#timezone_abbreviations = 'Default' # select the set of available timezone
# abbreviations. Currently, there are
<tc/postgresql/8.2/main/postgresql.conf" 472L, 15410C written
root@CBA-SAMBA:/# vi /etc/postgresql/8.2/main/pg
pgdata/ pg_hba.conf pg_ident.conf
root@CBA-SAMBA:/# vi /etc/postgresql/8.2/main/pg_hba.conf
# PostgreSQL Client Authentication Configuration File
# ===================================================
# Refer to the "Client Authentication" section in the
# PostgreSQL documentation for a complete description
# of this file. A short synopsis follows.
# This file controls: which hosts are allowed to connect, how clients
# are authenticated, which PostgreSQL user names they can use, which
# databases they can access. Records take one of these forms:
# local DATABASE USER METHOD [OPTION]
# host DATABASE USER CIDR-ADDRESS METHOD [OPTION]
# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
# (The uppercase items must be replaced by actual values.)
# The first field is the connection type: "local" is a Unix-domain socket,
# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an
# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket.
# DATABASE can be "all", "sameuser", "samerole", a database name, or
# a comma-separated list thereof.
# USER can be "all", a user name, a group name prefixed with "+", or
# a comma-separated list thereof. In both the DATABASE and USER fields
# you can also write a file name prefixed with "@" to include names from
# a separate file.
#
# CIDR-ADDRESS specifies the set of hosts the record matches.
# It is made up of an IP address and a CIDR mask that is an integer
# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies
# the number of significant bits in the mask. Alternatively, you can write
# an IP address and netmask in separate columns to specify the set of hosts.
# METHOD can be "trust", "reject", "md5", "crypt", "password",
# "krb5", "ident", "pam" or "ldap". Note that "password" sends passwords
# in clear text; "md5" is preferred since it sends encrypted passwords.
# OPTION is the ident map or the name of the PAM service, depending on METHOD.
# Database and user names containing spaces, commas, quotes and other special
# characters must be quoted. Quoting one of the keywords "all", "sameuser" or
# "samerole" makes the name lose its special character, and just match a
# database or username with that name.
# This file is read on server startup and when the postmaster receives
# a SIGHUP signal. If you edit the file on a running system, you have
# to SIGHUP the postmaster for the changes to take effect. You can use
# "pg_ctl reload" to do that.
# Put your actual configuration here
# ----------------------------------
# If you want to allow non-local connections, you need to add more
# "host" records. In that case you will also need to make PostgreSQL listen
# on a non-local interface via the listen_addresses configuration parameter,
# or via the -i or -h command line switches.
#
# a SIGHUP signal. If you edit the file on a running system, you have
# to SIGHUP the postmaster for the changes to take effect. You can use
# "pg_ctl reload" to do that.
# Put your actual configuration here
# ----------------------------------
# If you want to allow non-local connections, you need to add more
# "host" records. In that case you will also need to make PostgreSQL listen
# on a non-local interface via the listen_addresses configuration parameter,
# or via the -i or -h command line switches.
host egroupware egroupware 127.0.0.1/32 password
host all all 192.168.0.0/24 md5
# DO NOT DISABLE!
# If you change this first entry you will need to make sure that the
# database
# super user can access the database using some other method.
# Noninteractive
"/etc/postgresql/8.2/main/pg_hba.conf" 85L, 3687C written
root@CBA-SAMBA:/#
root@CBA-SAMBA:/# su - postgres
postgres@CBA-SAMBA:~$ psql postgres
Welcome to psql 8.2.11, the PostgreSQL interactive terminal.
Type: \copyright for distribution terms
\h for help with SQL commands

\? for help with psql commands
\g or terminate with semicolon to execute query
\q to quit
postgres=# alter user postgres with encrypted password 'cba1978';
ALTER ROLE
postgres=# \q
postgres@CBA-SAMBA:~$ logout
root@CBA-SAMBA:/# /etc/init.d/postgresql-8.2 restart
* Restarting PostgreSQL 8.2 database server
...done.
root@CBA-SAMBA:/#
root@CBA-SAMBA:/# su - postgres
postgres@CBA-SAMBA:~$ createdb --encoding=utf=8 --owner egroupware egroupware
createdb: database creation failed: ERROR: role "egroupware" does not exist
postgres@CBA-SAMBA:~$ createuser --no-adduser --no-createdb -P egroupware
Enter password for new role:
Enter it again:
Shall the new role be allowed to create more new roles? (y/n) n
CREATE ROLE
postgres@CBA-SAMBA:~$ createdb --encoding=utf=8 --owner egroupware egroupware
CREATE DATABASE
postgres@CBA-SAMBA:~$ logout
root@CBA-SAMBA:/#

Email Egroupware Activedirectory

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Email Egroupware Activedirectory

Uploaded by

Copyright:

Available Formats

Email + EGroupWare + Active Directory

Demostra de maneira objetiva e não cansativa, uma maneira de configurar todas as

Por: Alexandro Batista

Apresentação, definições e necessidades

Autor: Alexandro Batista

Ampliando as configurações, demonstro como configurar o eGroupWare.

• Nível intermediário para compreensão;

# apt-get remove exim4 exim4-base exim4-daemon-light exim4-config at mailx --purge

02. Atualizar o sistema:

03. Instalar pacotes:

04. Ajustar o sistema:

• 10.0.0.1 nome.dominio.org nome

• hosts: dns files

OBS.: php5-imap - habilitar com suporte a maildir.

Caso deseje alterar a configuração, usar o comando "dpkg-reconfigure libc-client2002edebian".

Crie e edite o arquivo:

Crie e edite o arquivo:

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

# Possible values include: debug, info, notice, warn, error, crit,

CustomLog /var/log/apache2/access.log combined

Alias /doc/ "/usr/share/doc/"

Instalando e configurando o Postgres

Edite e adicione antes das outras entradas:

• host egroupware egroupware 127.0.0.1/32 password

Criar base de dados e garantir as permissões do usuário para o egroupware:

$ createuser --no-adduser --no-createdb -P egroupware

Digite a senha para a nova role: senhaegw

$ createdb --encoding=utf-8 --owner egroupware egroupware

Instalando e configurando o Egroupware

Descompactar o arquivo eGroupWare-1.4.002.tar.gz e em seguida descompactar o arquivo

Mover o diretório criado egroupware para o diretório raiz da web.

# chown -R www-data:www-data /home/www/dominio/egroupware

Iniciar a configuração do egroupware em modo browser:

• Selecione a linguagem utilizada;

# chmod 600 /home/www/dominio/egroupware/header.inc.php

Instalando e configurando o SASL e o Postfix

# apt-get install postfix postfix-ldap dovecot-imapd dovecot-common libsasl2-2 libsasl2-modules

# adduser --system --home /home/vmail --group vmail

# adduser postfix sasl

Instalando e configurando o Dovecot

Restarting IMAP/POP3 mail server: dovecotWarning: Fixing permissions of /var/run/dovecot to be

Instalando e configurando o Clamav

# apt-get install clamav-base clamav-daemon clamav-freshclam clamsmtp

scan unix - - n - 16 smtp

Instalando e configurando o Spamassassin

O SpamAssassin esta utilizando uma base compartilhada para consulta.

# apt-get install spamassassin spamc razor pyzor

# adduser --system --home /home/spamd --group spamd

rewrite_header Subject *****SPAM*****

smtp inet n - - - - smtpd

######### ANTI-SPAM ##########

Para verificar e classificar se é spam ou não, utilize os comandos:

# sa-learn --spam -u spamd --dir /home/vmail/<usuario>/Maildir/.Junk/* -D

Processo de instalação do e-groupware

root@CBA-SAMBA:/# apt-get install apache

apache apache2-mpm-itk apache2-utils

apache2 apache2-mpm-perchild apache-common

apache2.2-common apache2-mpm-prefork apache-doc

apache2-common apache2-mpm-threadpool apache-perl

apache2-doc apache2-prefork-dev apachetop

apache2-mpm apache2-src apache-utils

root@CBA-SAMBA:/# apt-get install apache2

Reading package lists... Done

rewrite_header Subject SPAM