msgid "" msgstr "" "Project-Id-Version: Skolelinux architecture document\n" "POT-Creation-Date: 2001-02-09 01:25+0100\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #: index.docbook:24 #, no-c-format msgid "Skolelinux - Architecture" msgstr "Skolelinux - Arkitekturbeskrivelse" #: index.docbook:28 #, no-c-format msgid "" "Petter Reinholdtsen " "
pere@hungry.com
" msgstr "" "Petter Reinholdtsen " "
pere@hungry.com
" #: index.docbook:51 #, no-c-format msgid "" "Skolelinux is the Debian-edu project's Custom Debian Distribution (CDD) in development. What this means is that Skolelinux is a version of Debian whose out-" "of-the box environment gives you a completely configured school-network (In " "Norway, where Skolelinux was started, the main target group is schools " "serving the 6-16 years age bracket). This document describes the network " "architecture and services provided by a Skolelinux installation." msgstr "" #: index.docbook:58 #, no-c-format msgid "Network" msgstr "Nettverk" #: index.docbook:62 #, fuzzy, no-c-format msgid "" "&figNetworkArch; The figure is a sketch of the assumed network topology. The " "default setup of a Skolelinux assumes that there is one (and only one) main-" "server, while allowing the inclusion of both normal workstations and thin-" "client-servers (with associated thin-clients). The number of workstations " "can be as large or small as you want (starting from none to a lot). The same " "goes for the thin-client-serves, each of which is on a seperate network so " "that the traffic between the thin-clients and the thin-client-server doesn't " "affect the rest of the network services." msgstr "" "&figNetworkArch; Figuren viser en skisse over antatt nettverkstopologi. N� " "et Skolelinux-nettverk settes opp med default-oppsett, s�antas det �v�e kun " "en tjener, en eller flere arbeidsstasjoner og LTSP-tjenere, og ingen eller " "flere LTSP-klienter. LTSP-klientene er p�separate nettverk, for �unng�at " "trafikken mellom LTSP-tjener og klienter p�irker andre tjenester i " "nettverket." #: index.docbook:68 #, fuzzy, no-c-format msgid "" "The reason that there can only be one main-server in each school network is " "that the main-server provides DHCP, and there can be only one machine doing " "so in each network. It is possible to move the services of the main-server " "to other machines by setting up the service on another machine, and " "subsequently updating the DNS-configuration pointing the DNS alias for that " "service to the right computer." msgstr "" "Et nettverk kan kun ha en DHCP-tjener. Dette er �saken til at det aldri " "m�v�e mer enn en tjener p�samme nettverk. Tjenestene p�tjeneren kan flyttes " "til andre maskiner ved �flytte oppsett og tjeneste, og deretter oppdatere " "DNS-oppsettet slik at DNS-aliaset peker til riktig maskin." #: index.docbook:72 #, fuzzy, no-c-format msgid "" "In order to simplify the standard setup of Skolelinux the Internet " "connection runs over a seperate router. It is possible to set up Debian with " "both a modem as an ISDN connection, however no attempt is made to make such " "a setup work out-of-the box for Skolelinux (the setup needed to adjust " "default situation to this should be documented seperately)." msgstr "" "Det forventes av forbindelsen ut p�Internet g� via en separat router. Denne " "forutsetningen gjres for �forenkle det standardiserte oppsettet i " "Skolelinux. Det er mulig �sette opp Debian b�e med modem og ISDN-" "forbindelsen, men det gjres ikke forsk p��f�dette til �fungere ut av boksen " "med Skolelinux. Slik oppsett m�tilpasses hver enkelt installasjon, og " "dokumenteres separat." #: index.docbook:78 #, no-c-format msgid "Services" msgstr "Tjenester" #: index.docbook:82 #, fuzzy, no-c-format msgid "" "With the exception of the control of the thin-clients, all services are " "initially set up on one central computer (the main-server). Because of " "performance reasons the thin-client-server should be a sepperate machine " "(though it is possible to install both the main-server and thin-client-" "server profiles on the same machine), All services are allocated a dedicated " "DNS-name and are offered exclusivly over IPv4. The allocated DNS name makes " "it easy to move individual machines from the main-server to a different " "machine, by simply stopping the service on the main-server, and changing the " "DNS configuration to point to the new location of the service (which should " "be setup on that machine first off course)." msgstr "" "Vi tilbyr kun tjenester via IPv4. Alle tjenester settes i utgangspunktet opp " "p�en sentral maskin (skolelinux-tjeneren), med unntak av styring av tynne " "klienter som anbefales spredt til andre maskiner av ytelses-hensyn. Alle " "tjenestene f� tildelt et eget DNS-navn, slik at en kan flytte enkelt-" "tjenester fra hovedtjeneren og til andre maskiner ved �stoppe tjenesten " "p�skolelinux-tjeneren og endre i DNS-oppsettet til �peke p�den nye maskinen." #: index.docbook:86 #, no-c-format msgid "" "To ensure security all connections where passwords are transmitted over the " "network are encrypted, so no passwords are send over the network as plain " "text." msgstr "" #: index.docbook:90 #, fuzzy, no-c-format msgid "" "Below is a list of the services that are set up by default in a Skolelinux " "networki, with the DNS name of eache service given in square brackets. Where " "possible the DNS name correspond to the service name in /etc/" "services, where this is not possible the common name of the " "service is used as the DNS name. All configuration files will, if possible, " "refer to the service by name (without the domain name) thus making it easy " "for schools to change either their domain (if they have an own DNS domain), " "or their ip-adress." msgstr "" "Flgende tjenester settes opp [med DNS-navnet i hakeparentes]. DNS-navnet " "skal stemme over ens med tjenestenavnet i /etc/services. Der dette mangler " "brukes det allment brukte navnet p�tjenesten som DNS-navn. Alle oppsettfiler " "skal s�sant det er mulig referere til tjenestene ved navn, og uten " "domenenavn, slik at det er enklere �endre domenenavn p�de skolene som har " "eget DNS-domene, og enklere �endre IP-nummer p�de skolene som nsker det." #: index.docbook:94 #, no-c-format msgid "Centralized logging [syslog]" msgstr "Sentralisert logging [syslog]" #: index.docbook:94 #, no-c-format msgid "DNS(Bind?)[domain]" msgstr "DNS (Bind?) [domain]" #: index.docbook:94 #, no-c-format msgid "Automatic networkconfiguration of machines(DHCP)[bootps]" msgstr "Automatisk nettverksoppsett av maskiner (DHCP)[bootps]" #: index.docbook:94 #, no-c-format msgid "Clocksynchronization (NTP)[ntp]" msgstr "Klokkesynkronisering (NTP) [ntp]" #: index.docbook:94 #, no-c-format msgid "Home directories via network file system (SMB/NFS/Appletalk)[homes]" msgstr "Hjemmeomr�er via nettverksfilsystem (SMB/NFS/Appletalk) [homes]" #: index.docbook:94 #, no-c-format msgid "Elektronic postoffice(Limacute) [postoffice]" msgstr "Elektronisk postkontor [postoffice]" #: index.docbook:94 #, no-c-format msgid "Directoryservice(OpenLDAP)[ldap]" msgstr "Katalogtjeneste (OpenLDAP) [ldap]" #: index.docbook:94 #, no-c-format msgid "Webserver (Apache/PHP/eZ)[www]" msgstr "webtjener (Apache/PHP/eZ) [www]" #: index.docbook:94 #, no-c-format msgid "SQL server (PostgreSQL)[database]" msgstr "SQL tjener (PostgreSQL) [database]" #: index.docbook:94 #, no-c-format msgid "Central backup (?) [backup]" msgstr "Sentral backup (?) [backup]" #: index.docbook:94 #, no-c-format msgid "Web-cache / proxy (Squid)[webcache]" msgstr "web-cache / proxy (Squid) [webcache]" #: index.docbook:94 #, no-c-format msgid "Printing(CUPS) [ipp]" msgstr "Utskrift (CUPS) [ipp]" #: index.docbook:94 #, no-c-format msgid "Remote login (OpenSSH) [ssh]" msgstr "Fjerninnlogging (OpenSSH) [ssh]" #: index.docbook:94 #, no-c-format msgid "Automatic configuring [cfengine]" msgstr "Automatisert oppsettstyring [cfengine]" #: index.docbook:94 #, no-c-format msgid "Thin client servers (LTSP) [ltsp-server-\\#]" msgstr "Tjenere for tynne klienter (LTSP) [ltsp-server-\\#]" #: index.docbook:94 #, fuzzy, no-c-format msgid "" "Machine- and service surveillance with error reporting, + status and history " "on the web. Error reporting by mail." msgstr "" "Maskin- og tjenesteoverv�ning med feilrapportering, + statusoversikt og " "historikk p�web. Feilrapportering via mail." #: index.docbook:192 #, no-c-format msgid "" "Each user stores his personal files in his home folder which is made " "availble by the server. Home folders are accessible from all machines, " "giving users access to the same files regardless of which machine they are " "using. The server is operating system agnostic in offering access using NFS " "for Unix Clients, SMB for Windows clients, and Appletalk for Macintosh " "clients." msgstr "" #: index.docbook:196 #, fuzzy, no-c-format msgid "" "By default e-mail is set up for local delivery (i.e. within the school) " "only, though e-mail delivery to the wider Internet may be set up if the " "school has a fixed Internet-connection. Mailinglists are set up based on the " "user database, giving each class their own mailinglist. Clients are set up " "to deliver mail to the server (using smarthost), and users " "can access their personal mail through either POP3 or IMAP." msgstr "" "Intern postkontor-tjeneste settes opp, med lokal levering og tilgang til " "personlig mail vha. POP og IMAP. Mail kan settes opp til �levere til " "Internet hvis skolen har fastlinje til nettet. Vi setter opp mailinglister " "basert p�brukerdatabasen, slik at hver klasse har tilgang til egne " "mailinglister. Alle klienter settes om til �levere mail til tjeneren (dvs " "bruker smarthost)." #: index.docbook:200 #, no-c-format msgid "" "All services are accesible using the same username and password, thanks to " "the central user database for authentication and authorization." msgstr "" #: index.docbook:204 #, fuzzy, no-c-format msgid "" "To increase performance on frequently accessed sites a web proxy that caches " "files locally (Squid) is used. In conjunction with blocking web-traffic in " "the router this also enables control of Internet access on individual " "machines." msgstr "" "Tilgang til WWW settes opp til �g�via en web-proxy (Squid), med lokal " "mellomlagring av filer. Dette ker ytelsen p�ofte brukte sider, og muliggjr " "sammen med sperring av web-trafikk i router tilgangskontroll til Internet " "pr. maskin." #: index.docbook:208 #, no-c-format msgid "" "Network configuration on the clients is done automatigically using DHCP. " "Normal clients are allocated IP adresses in the private subnet 10.0.2.0/23, " "while thin clients are connected to the corresponding thin-client-server via " "the seperate subnet 192.168.0.0/24 (this to ensure that the network traffic " "of the thin clients doesn't interfere with the rest of the network services)." msgstr "" #: index.docbook:212 #, no-c-format msgid "" "Centralized logging is set up so that all machines send their syslog " "messages to the server. The syslog service is set up so that it only accepts " "incoming messages from the local network." msgstr "" "Sentralisert logging settes opp slik at alle maskinene sender sine syslog-" "meldinger til tjeneren. syslog-tjenesten settes opp slik at den kun " "aksepterer innkommende meldinger fra lokalnettet." #: index.docbook:216 #, fuzzy, no-c-format msgid "" "By default the DNS server is set up with a domain for internal use only (*." "intern), until a real (external) DNS domain can be set up. " "The DNS server is set up as caching DNS server so that all machines on the " "network can use it as the main DNS Server." msgstr "" "Tjeneren settes opp som DNS-tjener for et DNS-domene som kun brukes internt " "(*.intern.), og fram til et virkelig (eksternt) DNS-domene " "kan settes opp. Denne DNS-tjeneren fungerer i tillegg som cachene DNS-" "tjener, slik at alle maskiner p�nettet kan settes opp til �ha denne som sin " "hoved-DNS-tjener." #: index.docbook:220 #, fuzzy, no-c-format msgid "" "Pupils and teachers have the possibilty to publish websites. The webserver " "provides mechanisms for authenticating users, and for limiting access to " "individual pages and subdiretories to certain users and groups. Users will " "have the possibility to create dynamic webpages, as the webserver will be " "programmable on the server side." msgstr "" "Det settes opp en webtjener med publiseringslsning for bruk av elever og " "l�ere. Websystemet skal ha mekanismer for �kunne autentisere brukerne, og " "�begrense tilgangen til enkeltsider og underkataloger til enkeltbrukere og " "grupper av brukere. Websystemet skal v�e programmerbart p�tjenersiden, slik " "at brukerne kan lage dynamiske websider." #: index.docbook:224 #, fuzzy, no-c-format msgid "" "Information on users and machines can be changed in one central location, " "and is made accessible to all computers on the network automatically. To " "achieve this a centralized directory server is set up. The directory will " "have information on users, user groups, machines, and groups of machines. To " "avoid user confusion there won't be any difference between file groups, " "mailing lists, and network groups. This implies that groups of machines " "which have to be network groups, have the same namespace as user groups and " "mailinglists." msgstr "" "Det settes opp en sentralisert katalogtjener slik at informasjon om brukere " "og maskiner kan endres p�et sentralt sted, og automatisk gjres tilgjengelig " "p�alle maskinene p�nettverket. Katalogen skal inneholde informasjon om " "brukere, brukergrupper, maskiner og maskingrupper. For brukere skal det ikke " "v�e skille mellom filgrupper, mailinglister og nettgrupper, for " "�unng�forvirring om hvilken gruppetype en bruker er lagt inn i. Dette " "inneb�er at maskingrupper som m�v�e nettgrupper, har samme navnerom som " "brukergrupper og mailinglister." #: index.docbook:228 #, fuzzy, no-c-format msgid "" "Administration of services and users will by and large be via web, and " "follow established standards, functioning well in the webbrowsers which are " "part of Skolelinux. The delegation of certain tasks to individual users or " "user groups will be made possible by the administration systems." msgstr "" "Administrasjonen av tjenester og brukere skal stort sett v�e webbasert, og " "flge etablerte standarder og fungere med de nettleserne som flger med " "Skolelinux. Det webbaserte administrasjonssystemet skal h�dtere delegering " "av enkelte oppgaver til enkeltbrukere eller grupper av brukere." #: index.docbook:232 #, fuzzy, no-c-format msgid "" "In order to avoid certain problems with NFS, and to make it simpler to debug " "problems, the clocks of the different machines need to be synchronized. To " "achieve this the Skolelinux server is set up as a local Network Time " "Protocol (NTP) server, and all workstations and clients are set up to " "synchronize their clock with the server. The server itselve should " "synchronize its clock via NTP against machines on the Internet, thus " "ensuring the whole network has the correct time." msgstr "" "Lik klokke p�alle maskiner er en ndvendighet for �unng�endel problemer n� en " "bruker NFS og gjr det enklere �feilske endelproblemer. For �holde klokkene " "synkronisert p�tvers av maskinene, s�settes Skolelinux-tjeneren opp som en " "lokal Network Time Protocol-tjener. Alle arbeidsstasjoner og klienter settes " "opp til �synkronisere sin klokke med tjeneren. Tjeneren br settes opp til a " "synkronisere sin klokke via NTP mot maskiner p�Internet med riktig klokke, " "slik at hele nettverket f� riktig klokke." #: index.docbook:236 #, fuzzy, no-c-format msgid "" "Printers are connected where convenient, either directly onto the network, " "or connected to a server, workstation or thin-client-server. Access to " "printers can be controled for individual users according to the groups they " "belong to, this will be achieved by using quota and acces control for " "printers." msgstr "" "Skrivere kobles opp der det passer best, enten direkte p�nettet, tilkoblet " "tjener, arbeidsstasjoner eller LTSP-tjenere. Skrivere skal ha kvotestyring " "og adgangskontroll, der enkeltbrukere gis differensiert adgang etter hvilke " "grupper de tilhrer." #: index.docbook:241 #, no-c-format msgid "Thin client services" msgstr "Tjenester for tynne klienter" #: index.docbook:245 #, no-c-format msgid "" "A thin client setup enables a ordinary PC to function as an (X-)terminal. " "This means that that machine boots from a diskette or directly from the " "server using network-PROM without using the local client harddrive. The thin " "client setup used is that of the Linux Terminal Server Project (LTSP)." msgstr "" #: index.docbook:249 #, fuzzy, no-c-format msgid "" "Thin clients are a good way to make use of older, weaker machines as they " "effectively run all programs on the LTSP-Server. This works as follows: The " "service uses DHCP and TFTP to connect to the network and boot from the " "network. Next, the file system is mounted via NFS from the LTSP-server, and " "finally X11 is started and connected to the same LTSP-server by XDMCP, thus " "ensuring that all programs are run on the LTSP-server." msgstr "" "Tjenesten bruker DHCP og TFTP for �komme p�nett og �for �boote fra nettet. " "Deretter monteres filsystem via NFS fra en LTSP-tjener og X11 startes opp og " "kobles til samme LTSP-tjeneren vha XDMCP. Resultatet er en arbeidsstasjon " "der alle programmene kjrer p�en LTSP-tjener." #: index.docbook:253 #, no-c-format msgid "" "The thin client server is set up to receive syslog from the thin clients, " "and forward these messages to the central syslog recipient." msgstr "" "Tynnklient-tjeneren settes opp til �motta syslog fra tynnklientene, og til " "�videreformidle disse meldingene til det sentrale syslog-mottaket." #: index.docbook:253 #, no-c-format msgid "" "Oops, the thin clients don't have uniqe names across LTSP servers. How can " "we identify which client is logged onto what on the central server?" msgstr "" "Hm, tynnklientene har ikke unike navn p�tvers av LTSP-tjenerne. Hvordan " "identifiserer vi hvilket tynnklient som logget hva til den sentrale maskinen?" #: index.docbook:265 #, no-c-format msgid "Administration" msgstr "Drift" #: index.docbook:269 #, no-c-format msgid "" "All the linux machines that are installed by means of the Skolelinux CD will " "be administrable from a central computer, most likely the server. It will be " "possible to login to all machines by ssh, and thereby have full access to " "the machines" msgstr "" "Alle linux-maskinene som installeres ved hjelp av Skolelinux-CDen skal la " "seg administrere fra en sentral maskin, fortrinnsvis tjenermaskinen. En skal " "kunne logge inn p�alle maskinene vha ssh, og dermed ha full tilgang til " "maskinene." #: index.docbook:273 #, no-c-format msgid "" "We use cfengine to edit configuration files. These files are updated from " "the server to the clients. In order to change the client configuration, it " "suffices to edit the server configuration and let the automatation " "distribute the changes." msgstr "" "Vi bruker cfengine til �redigere oppsettfiler. Disse filene oppdateres fra " "tjeneren til klientene. For �endre oppsett p�klientene s�er det nok �endre " "p�oppsettet p�tjeneren og la automatikken spre endringene." #: index.docbook:277 #, no-c-format msgid "" "All user information is kept in an SQL database. Updates of user accounts " "are made against this database. The information is exported to an LDAP " "directory which is used by the clients for user authentication." msgstr "" "Informasjon om alle brukerne ligger i SQL-database. Oppdatering av brukere " "skjer mot denne databasen. Informasjonen eksporteres til en LDAP-katalog som " "brukes av klientene for brukerautentisering." #: index.docbook:283 #, no-c-format msgid "Installation" msgstr "Installasjon" #: index.docbook:287 #, no-c-format msgid "Installation is possible either from a CD or by a diskette from server." msgstr "" "Installasjon skal kunne foreg�enten fra CD, eller vha. diskett fra tjener." #: index.docbook:291 #, no-c-format msgid "" "The aim is to be able to install a server from CD, and install clients over " "the network by booting all other machines from the network. The installation " "has to work without access to the Internet." msgstr "" "M�et er at en skal kunne installere en tjener fra CD, og resten av klientene " "over nettet ved �boote alle de andre maskinene fra nettet. Installasjon " "m�fungere helt uten tilgang til Internet." #: index.docbook:295 #, fuzzy, no-c-format msgid "" "The installation should not ask any questions, with the exception of desired " "language (e.g. Norwegian Bokmal, Nynorsk, Sami) and machine profile (server, " "workstation, thin client server). All other configuration will be set up " "automatically with reasonable values, to be changed from a centrally " "location by the system administrator subsequent to the installation." msgstr "" "Installasjonen skal ikke stille sprsm�, med unntak av sprsm� om spr�form " "(bokm�, nynorsk, samisk) og maskinprofil (tjener, arbeidsstasjon, tjener for " "tynne klienter). Alt annet oppsett skal vi sette automatisk til rimelige " "verdier, og la systemadministrator endre fra sentralt sted etter " "installasjonen." #: index.docbook:301 #, no-c-format msgid "File system access configuration" msgstr "Kontooppsett p�filsystemet" #: index.docbook:305 #, no-c-format msgid "" "Each Skolelinux user account is assigned a section of the file system on the " "file server. This section (home directory) contains the user's configuration " "files, documents, email and web pages. Some of the files should be set to " "have read access for other users on the system, some should be readable by " "everyone on the internet, and some should not be accessible for reading by " "anyone but the user." msgstr "" "En brukerkonto i Skolelinux har et omr�e p�filsystemet til filtjeneren " "tilknyttet seg. Dette omr�et inneholder brukerens oppsettfiler, dokumenter, " "email og websider. Noen av filene skal v�e lesbare for andre brukere, noen " "skal v�e lesbare for alle p�web, og noen av filene skal ikke v�e lesbare for " "andre enn brukeren selv." #: index.docbook:309 #, no-c-format msgid "" "To ensure that all disks that are used for user directories or shared " "directories can be uniquely named across all the computers in the " "installation, they can be mounted as /skole/host/directory/. Initially, " "one directory is created on the file server, /skole/tjener/home0/, in which all the user accounts are created. More directories may " "then be created when needed, to accomodate particular user groups or " "particular patterns of usage." msgstr "" "For �sikre at alle disker som brukes til brukeromr�er eller fellesomr�er kan " "navngis unikt p�tvers av alle maskinene i en installasjon, s�kan disse " "monteres som /skole/maskin/" "omr�e/. I utgangspunktet opprettes et " "omr�e p�filtjeneren, /skole/tjener/home0/, der alle " "brukerkontoer opprettes. Ved behov kan det opprettes flere omr�er, enten for " "bestemte brukergrupper, eller for bestemte bruksmnstre." #: index.docbook:313 #, no-c-format msgid "" "To enable shared file access control using the file groups, each user must " "be assigned a primary group with no other members. The name of this private " "group should be identical to the username. More info on private groups is available from Redhat. This allows " "for all new files created by the user to be set with full access for the " "file's group. Together with set-gid bit on directories and inheritance of " "rights, this enables controlled file sharing between the members of a file " "group. Therefore, the users' umask should be 00X. If all " "users initially should be able to read newly created files, then X=2. If " "only the relevant group should be given initial read access then X=7. ." msgstr "" "For �muliggjre tilgangskontroll av fildeling ved bruk av filgruppene, " "s�m�hver bruker ha som sin prim�gruppe en gruppe der ingen andre brukere er " "medlem. Denne private gruppen skal ha samme navn som brukeren den tilhrer " " Mer info " "om private grupper er tilgjengelig fra RedHat . Denne private gruppen muliggjr at alle nye filer som brukeren " "oppretter opprettes med full tilgang til filens gruppe. Sammen med set-gid " "bit p�kataloger og arv av rettigheter muliggjr dette kontrollert fildeling " "mellom medlemmene i en filgruppe. Brukernes umask skal derfor v�e 00X" #: index.docbook:328 #, no-c-format msgid "" "The initial access settings for newly created files is a matter of policy. " "They may either be set to give read access to everybody, which can later be " "removed by explicit user action, or they may be initially blocked, " "necessiating user action to make them accessible. The first approach " "encourages knowledge sharing, and makes the system more transparent, whereas " "the second method decreases the risk of unwanted spreading of sensitive " "information. The problem with the first solution is that it is not apparent " "to the users that the material they create will be accessible to all other " "users. This is detectable only upon inspection of other users' directories, " "where one can see that the files are readable. The problem with the second " "solution is that few people are likely to make their files accessible, even " "if they do not contain sensitive information and the content would be " "helpful to inquisitive users who want to learn how others have solved " "particular problems (typically configuration issues)." msgstr "" "X=2 hvis alle brukere i utgangspunktet skal f�lese nyopprettede filer og X=7 " "hvis kun relevant gruppe i utgangspunktet skal f�lese nyopprettede filer." #: index.docbook:332 #, no-c-format msgid "" "Suggestion: The files are initially set to be readable by all, but " "particular directories are created in which the content is initially " "blocked. This will simplify deciding whether the file should be made " "readable or not. Concretely, umask should be set to 002, and ~/ created with priviliges 0775, ~/priv/ given " "0750,and ~/pub/ given 0775. Files that should not be " "readable by others should be put in ~/priv/, whereas " "public files will be put in ~/pub/. Other files will " "initially be accessible, but may be blocked as needed." msgstr "" "Det er et politisk sprsm� hvordan tilgangen til nyopprettede filer " "p�brukerens omr�e skal v�e. De kan enten v�e lesbare for alle og sperres med " "en aktiv handling fra brukeren, eller de kan v�e sperret i utgangspunktet og " "m�gjres tilgjengelig for alle ved en aktiv handling. Den frste tiln�mingen " "legger opp til kunnskapsdeling og gjr systemet mer gjennomsiktig. Den andre " "gjr det mindre sannsynlig at informasjon kommer p�avveie. Problemet med den " "frste lsningen er at det er lite synlig for brukerne at det de lagrer er " "tilgjengelig for alle de andre brukerne. Dette oppdages frst n� en forsker " "�se i de andre brukernes omr�er, og en ser at filene der er lesbare. " "Problemet med den andre lsningen er at de f�reste vil gjre sine filer " "tilgjengelig, selv om de ikke inneholder flsom informasjon og at innholdet " "ville hjulpet nysgjerrige brukere som vil l�e hvordan andre brukere har lst " "sine problemer (typisk oppsettfiler)." #: index.docbook:336 #, no-c-format msgid "" "ssh requires that the home directory can only be written to by the owner, " "thus the maximum access privilege for ~/ is 755." msgstr "" "Forslag: Filene er i utgangspunktet lesbare for alle, men det opprettes " "kataloger der innholdet vil v�e skjult for alle for � gjre det enklere " "�velge om filene skal v�e tilgjengelige eller ikke. Konkret da at umask " "settes til 002, og at det opprettes ~/ med rettigheter " "0775, ~/priv/ med 0750 og ~/pub/ " "med 0775. Filer som skal v�e skjult legges i priv, filer som skal v�e " "offentlige legges i ~/pub/. De andre er i " "utgangspunktet tilgjengelige, men kan sperres ved behov." #: index.docbook:340 #, no-c-format msgid "" "- access to home directories (*~/.)? - home directories - shared directories?" msgstr "" "ssh krever at hjemmeomr�et ikke skal v�e skrivbart for andre eier. Det gir " "max 755 som rettighet p�~/" #: index.docbook:346 #, no-c-format msgid "Keywords" msgstr "- tilgang til hjemmeomr�er (~/.)? - hjemmeomr�er - fellesomr�er?" #: index.docbook:350 #, no-c-format msgid "" "These are random notes concerning things which should be included in this " "document." msgstr "Stikkord" #: index.docbook:354 #, no-c-format msgid "" "Centralized user database with grouping and the ability to control which " "groups have access to which machines." msgstr "" "Dette er tilfeldige notater over ting som skal inn i resten av dokumentet" #: index.docbook:354 #, no-c-format msgid "" "Grouping of machines and ability to control access to network services for " "these groups (acces blocking to Internet via squid)" msgstr "" "sentralisert brukerdatabase med gruppering og mulighet for �styre hvilke " "grupper som f� bruke (logge inn p� hvilke maskiner." #~ msgid "" #~ "Skolelinux is a Debian-based Linux distribution aimed at the pupil " #~ "network in schools (In Norway, the main target group is schools serving " #~ "the 6-16 years age bracket). This document describes how this network " #~ "should be constructed, and how the network services should work." #~ msgstr "" #~ "Skolelinux er en Debian-basert Linux-distribusjon beregnet " #~ "p�elevnettverket i grunnskolen (6-16 �). Dette dokumentet beskriver " #~ "hvordan dette nettverket skal bygget opp, og hvordan tjenestene i dette " #~ "nettverket skal fungere." #~ msgid "" #~ "Passwords will never besent as plain text over the network. All " #~ "connections where passwords are transmitted over the network shall be " #~ "encrypted." #~ msgstr "" #~ "Det skal aldri sendes passord i klartekst over nettet. Alle forbindelser " #~ "der det sendes passord over nettet skal v�e kryptert." #~ msgid "" #~ "The server allocates file systems over the network and offers home " #~ "directories to all workstations. We use NFS for Unix clients, SMB for " #~ "Windows clients and Appletalk for Macintosh clients. All personal files " #~ "will be stored in the home directory, so the users have access to the " #~ "same files no matter which machine they are working on." #~ msgstr "" #~ "Tjeneren deler ut filsystem over nettet, og tilbyr brukernes hjemmeomr�er " #~ "til alle arbeidsstasjoner. Vi bruker NFS mot Unix-klienter, SMB mot " #~ "Windows-klienter og Appletalk mot Macintosh-klienter. Alle personlige " #~ "filer skal lages p�hjemmeomr�et, slik at brukere har tilgang til de samme " #~ "filene uansett hvilken maskin de jobber mot." #~ msgid "" #~ "A central user database is set up for authentication and authorization, " #~ "so that the username and password is the same for all services requiring " #~ "login." #~ msgstr "" #~ "Det settes opp en sentral brukerdatabase for autentisering og " #~ "autorisering, slik at en har samme brukernavn og passord p�alle tjenester " #~ "som krever innlogging." #~ msgid "" #~ "IP numbers for the clients are allocated via DHCP. We choose a private IP " #~ "network, and allocate IP in this network. We have chosen to use subnet " #~ "10.0.2.0/23. Thin clients are connected to the LTSP server via a separate " #~ "subnet 192.168.0.0/24 connected to each LTSP server." #~ msgstr "" #~ "IP-nummer til klientene deles ut via DHCP. Vi velger et privat IP-nett, " #~ "og deler ut IP i dette nettet. Vi har valgt �bruke subnett 10.0.2.0/23. " #~ "Tynne klienter kobles til LTSP-tjeneren via et separat subnett " #~ "192.168.0.0/24 tilkoblet hver enkelt LTSP-tjener." #~ msgid "" #~ "The setup for thin clients is based on the Linux Terminal Server Project " #~ "(LTSP). This is a system which enables a PC to function as an X terminal. " #~ "This allows machines to boot from diskette or via network-PROM directly " #~ "from a server without using the local client harddrive." #~ msgstr "" #~ "Oppsettet for tynne klienter er basert p�The Linux Terminal Server " #~ "Project (LTSP). Dette er et system som lar en PC fungere som X-terminal. " #~ "Det lar maskiner boote fra disket eller nettkort-PROM direkte fra en " #~ "tjenermaskin uten �brukeklientens lokale harddisk." #~ msgid "appended paragraph 1" #~ msgstr "" #~ "gruppering av maskiner og mulighet for �regulere tilgangen til " #~ "nettverkstjenester for disse gruppene (blokkere tilgang til Internet via " #~ "squid?)"