Technische Dokumentation Geoportal Raumordnung Baden- Württemberg

Transkript

1 Technische Dokumentation Geoportal Raumordnung Baden- Württemberg terrestris GmbH & Co. KG Geoinformation + Planung Pützchens Chaussee 56 Gölzstraße Bonn Tübingen Tel.: Tel.: Fax: info@terrestris.de info@geoinformation-planung.de Internet: ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 1/74

2 Dokumentenhistorie Versio n Datum Änderungen Durch V Geoinfo/terrestris V Überarbeitung, Anpassung Spezifikation Server Geoinfo V Überarbeitung, Anpassung Spezifikation Downloadmodul Terrestris V Tabelle Softwareversionen, S.1 geoinfo/terrestris V Ergänzung Kap. 2 - Abbildung Serverkonfiguration und Kap 2.19 Umkonfiguration bei Serverausfall V Korrektur Abbildung 1 - Kennzeichnung aktiver Komponenten geoinfo V Nachführung geplanter OS-Upgrade in Tabelle S.1 geoinfo ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 2/74

3 Inhaltsverzeichnis 1. Versionsübersicht installierter Softwarekomponenten Serverinstallation Architektur Geoportal-Raumordnung Xen-Installation Hetzner-Server Ipfire-Installation: Serverloft-Server Ipfire-Installation: Datenbankserver Mapserver Webserver Katalogserver Firewall/VPN-Server Konfiguration des Hostsystems bei Hetzner Konfiguration des Hostsystems bei Serverloft Datensicherung und Wiederherstellung VPN Serverabsicherung Apache Logfiles Zugriffsstatistiken Überwachungsserver Nagios Installation der Nagios-Plugins NRPE Xinetd Umkonfigurationen im Fall des Ausfalls eines Servers Ausfall Server 1 (Hetzner) Ausfall Server 2 (Serverloft) Dokumentation der Softwaremodule Erläuterung der Datei- und Ordnerstruktur Generelle Struktur Drupal Ordnerstruktur Kartenviewer Dateistruktur Absicherung Dienste Dateistruktur Geodaten-Upload Dateistruktur Geodaten Download Dateistruktur CSW-Suchmodul Dateistruktur CSW-Suchmodul Dateistruktur Geometadaten Export Moduls Theme des Geoportal Raumordnung BW...73 ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 3/74

4 1. Versionsübersicht installierter Softwarekomponenten Software Stand zum Geplante Upgrades in 2014 (Stand ) Xen Apache Tomcat OS Debian Squeeze Ubuntu LTS Nagios Drupal PostgreSQL PostGIS UMN Mapserver Openlayers MapFish --> GeoEXT ExtJS Mapfish Print GeoNetwork OpenSource GeoServer n.v Webalizer Stand zum Stand zum Stand zum ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 4/74

5 2. Serverinstallation Das Hosting eines Webservers wird durch die Arbeitsgemeinschaft geoinformation+planung/terrestris GmbH&Co.KG abgewickelt. Die Hardwarekonifguration sieht folgendermaßen aus: Dedizierter Server IntelCore 2 Quad. Arbeitsspeicher >= 8 GB. 2 Festplatten in Raid 1 (zur unmittelbaren Plattenspiegelung). Linux OS (z.b. Debian). Der Webserver, Mapserver, Datenbankserver und Katalogserver sind mit XEN virtualisiert. Webserver und Mapserver stehen auf beiden Servern im Loadbalancing zur Verfügung. Der Katalogserver auf dem Hetznerserver stellt die Metadaten des Geoportal Raumordnung BW zur Verfügung, der Katalogserver auf dem Server bei Serveloft bindet externe Katalogserver in das Portal ein. Der Datenbankserver befindet sich in einem aktiv/passiv Zustand: Auf dem Hetznerserver befindet sich der DB-Server, der im Normalfall alle Anfragen bearbeitet, auf dem Serverloft-Server befindet sich eine Kopie, die im Ausfall des Hetznerservers einzubinden ist (siehe 2.19) Architektur Geoportal-Raumordnung Abb. 1: Architekturskizze des Geoportals Raumordnung 2.2. Xen-Installation Installation des Server läuft über das Rescue-System von Hetzner. Dort kann ein eigenes Partitionsschema erstellt werden. Alle Partitionen, außer Swap und Boot-Partition liegen auf dem LVM. Netzwerk Dom0 (Hetzner) /etc/sysctl.conf: net.ipv4.ip_forward=1 ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 5/74

6 net.ipv4.conf.default.proxy_arp=1 /etc/xen/xend-config.sxp: #(network-script network-bridge) #(vif-script vif-bridge) #(network-script network-route) #(vif-script vif-route) ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 6/74

7 /etc/xen/scripts/vif-common.sh: ip_of() { #ip addr show "$1" awk "/^.*inet.*$1\$/{print \$2}" sed -n '1 s,/.*,,p' ip -4 -o addr show primary dev $1 awk '$3 == "inet" {print $4; exit}' sed 's#/.*##' } /etc/sysctl config net.ipv4.ip_forward=1 net.ipv4.conf.all.rp_filter=1 net.ipv4.icmp_echo_ignore_broadcasts=1 net.ipv4.conf.default.proxy_arp=1 Erstellen virtueller Maschinen mit xen-tools. Siehe xen-tools.conf: Datenpartition Anlegen einer 200 Gigabyte großen Partition für die Daten. lvcreate --name data --size 200G vg0 mkfs -t xfs /dev/vg0/data Diese Partition wir in die DomU (db1) eingehangen: Eintrag in /etc/fstab der DomU: /dev/sda4 /data xfs noatime Hetzner-Server Alle virtuellen Maschinen haben eine feste IP-Adresse und wurden mit folgendem Kommandos erstellt: xen-create-image --hostname=www1 --ip= xen-create-image --hostname=db1 --ip= xen-create-image --hostname=cat1 --ip= xen-create-image --hostname=mapserver1 ip= Xen Konfig-Dateien im SVN. ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 7/74

8 Ipfire-Installation: Die Konfiguration wird über den Setup-Assistenten von IPFire erledigt: setup Dort wird der Menüpunkt Netzwerk aufgerufen und die Netzwerkkarten zugeordnet: green: IP-Adresse: Subnetzmaske: red: statisch IP-Adresse: Subnetzmaske: Einstellen des DNS und Gateway unter DNS und Gateway-Einstellungen: Primärer DNS: Sekundärer DNS: Standard-Gateway: Dort werden die OpenVPN- und Ipsec-Verbindungen eingerichtet. Nach erfolgreicher Einrichtung sollte der Zugang zum Webinterface und SSH von außen gesperrt werden. Ab da ist ein Zugriff über: möglich Serverloft-Server Alle virtuellen Maschinen haben eine feste IP-Adresse und wurden mit folgender Konfiguration erstellt: xen-create-image --hostname=www1 --ip= xen-create-image --hostname=db1 --ip= xen-create-image --hostname=cat1 --ip= xen-create-image --hostname=mapserver1 ip= Ipfire-Installation: Die Konfiguration wird über den Setup-Assistenten von IPFire erledigt: setup Dort wird der Menüpunkt Netzwerk aufgerufen und die Netzwerkkarten zugeordnet: ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 8/74

9 green: IP-Adresse: Subnetzmaske: red: statisch IP-Adresse: Subnetzmaske: Einstellen des DNS und Gateway unter DNS und Gateway-Einstellungen: Primärer DNS: Sekundärer DNS: Standard-Gateway: Dort werden die OpenVPN- und Ipsec-Verbindungen eingerichtet. Nach erfolgreicher Einrichtung sollte der Zugang zum Webinterface und SSH von außen gesperrt werden. Ab da ist ein Zugriff über: möglich Datenbankserver Arbeitsspeicher: 2500MB Installierte Software: ii adduser add and remove users and groups ii apt lenny2 Advanced front-end for dpkg ii apt-utils lenny2 APT utility programs ii aptitude ~lenny1 terminal-based package manager ii autotools-dev Update infrastructure for config.{guess,sub} ii avahi-daemon lenny2 Avahi mdns/dns-sd daemon ii base-files 5lenny7 Debian base system miscellaneous files ii base-passwd Debian base system master password and group ii bash The GNU Bourne Again SHell ii bind9-host 1:9.5.1.dfsg.P3-1+lenny1 Version of 'host' bundled with BIND 9.X ii binutils ~cvs The GNU assembler, linker and binary utiliti ii bsdmainutils collection of more utilities from FreeBSD ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 9/74

10 ii bsdutils 1: Basic utilities from 4.4BSD-Lite ii build-essential 11.4 Informational list of build-essential packag ii bzip lenny1 highquality block-sorting file compressor - ii ca-certificates Common CA certificates ii comerr-dev common error description library - headers a ii coreutils The GNU core utilities ii cpio lenny1 GNU cpio -- a program to manage archives of ii cpp 4: The GNU C preprocessor (cpp) ii cpp The GNU C preprocessor ii cron 3.0pl1-105 management of regular background processing ii dbus lenny1 simple interprocess messaging system ii dbus-x lenny1 simple interprocess messaging system (X11 de ii debconf Debian configuration management system ii debconf-i18n full internationalization support for debcon ii debian-archive-keyring ~lenny1 GnuPG archive keys of the Debian archive ii debianutils 2.30 Miscellaneous utilities specific to Debian ii defoma Debian Font Manager -- automatic font config ii dhcp3-client lenny4 DHCP client ii dhcp3-common lenny4 common files used by all the dhcp3* packages ii diff File comparison utilities ii dmidecode Dump Desktop Management Interface data ii dpkg b1 Debian package management system ii dpkg-dev Debian package development tools ii e2fslibs ext2 filesystem libraries ii e2fsprogs ext2/ext3/ext4 file system utilities ii ed The classic unix line editor ii ethtool display or change Ethernet device settings ii file Determines file type using "magic" numbers ii findutils utilities for finding files--find, xargs ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 10/74

11 ii fontconfig generic font configuration library - support ii fontconfig-config generic font configuration library - configu ii ftp The FTP client ii g++ 4: The GNU C++ compiler ii g The GNU C++ compiler ii gcc 4: The GNU C compiler ii gcc-4.2-base The GNU Compiler Collection (base package) ii gcc The GNU C compiler ii gcc-4.3-base The GNU Compiler Collection (base package) ii gdal-bin Geospatial Data Abstraction Library - Utilit ii gnupg lenny1 GNU privacy guard - a free PGP replacement ii gpgv lenny1 GNU privacy guard - signature verification t ii grep 2.5.3~dfsg-6 GNU grep, egrep and fgrep ii groff-base GNU troff text-formatting system (base syste ii gsfonts 1:8.11+urwcyr1.0.7~pre44-3 Fonts for the Ghostscript interpreter(s) ii gsfonts-x Make Ghostscript fonts available to X11 ii gzip lenny1 The GNU compression utility ii hostname 2.95 utility to set/show the host name or domain ii ifupdown nmu1 high level tools to configure network interf ii info 4.11.dfsg.1-4 Standalone GNU Info documentation browser ii initscripts 2.86.ds1-61 Scripts for initializing and shutting down t ii iproute networking and traffic control tools ii iptables administration tools for packet filtering an ii iputils-ping 3: lenny1 Tools to test the reachability of network ho ii irb lenny1 Interactive Ruby (for Ruby 1.8) ii java-common 0.30 Base of all Java packages ii less Pager program similar to more ii libacl Access control list shared library ii libasound ALSA library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 11/74

12 ii libattr1 1: Extended attribute shared library ii libaudio Network Audio System - shared libraries ii libavahi-common-data lenny2 Avahi common data files ii libavahi-common lenny2 Avahi common library ii libavahi-core lenny2 Avahi's embeddable mdns/dns-sd library ii libbind9-40 1:9.5.1.dfsg.P3-1+lenny1 BIND9 Shared Library used by BIND ii libblkid block device id library ii libbz lenny1 highquality block-sorting file compressor l ii libc lenny6 GNU C Library: Shared libraries ii libc6-dev lenny6 GNU C Library: Development Libraries and Hea ii libcap1 1: support for getting/setting POSIX.1e capabil ii libcap support for getting/setting POSIX.1e capabil ii libcomerr common error description library ii libconsole 1:0.2.3dbs-65.1 Shared libraries for Linux console and font ii libcurl3-gnutls lenny4 Multiprotocol file transfer library (GnuTLS ii libcurl4-gnutls-dev lenny4 Development files and documentation for libc ii libcwidget highlevel terminal interface library for C+ ii libdaemon lenny1 lightweight C library for daemons - runtime ii libdb Berkeley v4.5 Database Libraries [runtime] ii libdb Berkeley v4.6 Database Libraries [runtime] ii libdbus lenny1 simple interprocess messaging system ii libdevmapper : The Linux Kernel Device Mapper userspace lib ii libdns45 1:9.5.1.dfsg.P3-1+lenny1 DNS Shared Library used by BIND ii libdrm Userspace interface to kernel DRM services - ii libedit2 2.11~ BSD editline and history libraries ii libept Highlevel library for managing Debian packa ii libexpat lenny3 XML parsing C library - runtime library ii libfontconfig generic font configuration library - runtime ii libfontenc1 1: X11 font encoding library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 12/74

13 ii libfreetype lenny4 FreeType 2 font engine, shared library files ii libgcc1 1: GCC support library ii libgcrypt LGPL Crypto library - runtime library ii libgcrypt11-dev LGPL Crypto library - development files ii libgdal Geospatial Data Abstraction Library ii libgdal1-dev Geospatial Data Abstraction Library - Develo ii libgdbm GNU dbm database routines (runtime version) ii libgeos Geometry engine for Geographic Information S ii libgeos-c Geometry engine for Geographic Information S ii libgeos-dev Geometry engine for GIS - Development files ii libgif-dev library for GIF images (development) ii libgif library for GIF images (library) ii libgl1-mesa-glx A free implementation of the OpenGL API -- G ii libglib The GLib library of C routines ii libglib2.0-data Common files for GLib library ii libglu1-mesa The OpenGL utility library (GLU) ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library ii libgnutls-dev lenny2 the GNU TLS library - development files ii libgnutls lenny2 the GNU TLS library - runtime library ii libgomp GCC OpenMP (GOMP) support library ii libgpg-error-dev library for common error values and messages ii libgpg-error library for common error values and messages ii libgpm General Purpose Mouse - shared library ii libhdf4g 4.1r4-22 The Hierarchical Data Format library -- libr ii libhdf4g-dev 4.1r4-22 The Hierarchical Data Format library -- deve ii libhdf5-serial Hierarchical Data Format 5 (HDF5) - runtime ii libhdf5-serial-dev Hierarchical Data Format 5 (HDF5) - developm ii libice6 2: X11 Inter-Client Exchange library ii libicu lenny2 International Components for Unicode ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 13/74

14 ii libidn GNU libidn library, implementation of IETF I ii libidn11-dev Development files GNU libidn, implementation ii libisc45 1:9.5.1.dfsg.P3-1+lenny1 ISC Shared Library used by BIND ii libisccc40 1:9.5.1.dfsg.P3-1+lenny1 Command Channel Library used by BIND ii libisccfg40 1:9.5.1.dfsg.P3-1+lenny1 Config File Handling Library used by BIND ii libjasper-dev lenny1 Development files for the JasPer JPEG-2000 l ii libjasper lenny1 The JasPer JPEG-2000 runtime library ii libjpeg62 6b-14 The Independent JPEG Group's JPEG runtime li ii libjpeg62-dev 6b-14 Development files for the IJG JPEG library ii libkadm dfsg.4~beta1-5lenny4 MIT Kerberos administration runtime librarie ii libkeyutils Linux Key Management Utilities (library) ii libkrb5-dev 1.6.dfsg.4~beta1-5lenny4 Headers and development libraries for MIT Ke ii libkrb dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries ii liblcms dfsg-1+lenny2 Color management library ii libldap lenny2 OpenLDAP libraries ii libldap2-dev lenny2 OpenLDAP development libraries ii liblocale-gettext-perl Using libc functions for internationalizatio ii liblockfile NFSsafe locking library, includes dotlockfi ii libltdl lenny1 A system independent dlopen wrapper for GNU ii libltdl3-dev lenny1 A system independent dlopen wrapper for GNU ii liblwres40 1:9.5.1.dfsg.P3-1+lenny1 Lightweight Resolver Library used by BIND ii libmagic File type determination library using "magic ii libmng Multiple-image Network Graphics library ii libmpfr1ldbl dfsg.1-2 multiple precision floating-point computatio ii libmysqlclient15-dev a-24+lenny4 MySQL database development files ii libmysqlclient15off a-24+lenny4 MySQL database client library ii libncurses shared libraries for terminal handling ii libncursesw shared libraries for terminal handling (wide ii libnetcdf-dev 1: Development kit for NetCDF ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 14/74

15 ii libnetcdf4 1: An interface for scientific data access to l ii libnewt lenny1 Not Erik's Windowing Toolkit - text mode win ii libnss-mdns NSS module for Multicast DNS name resolution ii libodbcinstq1c Qtbased ODBC configuration library ii libogdi ~beta1-3.1 Open Geographic Datastore Interface Library ii libpam-modules lenny1 Pluggable Authentication Modules for PAM ii libpam-runtime lenny1 Runtime support for the PAM library ii libpam0g lenny1 Pluggable Authentication Modules library ii libpcre Perl 5 Compatible Regular Expression Library ii libpng lenny4 PNG library - runtime ii libpng12-dev lenny4 PNG library - development ii libpopt lib for parsing cmdline parameters ii libpq-dev lenny1 header files for libpq5 (PostgreSQL library) ii libpq lenny1 PostgreSQL C client library ii libqt3-mt 3:3.3.8b-5 Qt GUI Library (Threaded runtime version), V ii libreadline-ruby lenny1 Readline interface for Ruby 1.8 ii libreadline GNU readline and history libraries, run-time ii librecode Shared library on which recode is based ii libruby lenny1 Libraries necessary to run Ruby 1.8 ii libsasl dfsg1-23+lenny1 Cyrus SASL - authentication abstraction libr ii libselinux SELinux shared libraries ii libsepol Security Enhanced Linux policy library for c ii libsigc c2a typesafe Signal Framework for C++ - runtime ii libslang The S- Lang programming library - runtime ver ii libsm6 2: X11 Session Management library ii libsqlite SQLite 3 shared library ii libsqlite3-dev SQLite 3 development files ii libss command-line interface parsing library ii libssl-dev 0.9.8g-15+lenny9 SSL development libraries, header files and ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 15/74

16 ii libssl g-15+lenny9 SSL shared libraries ii libstdc The GNU Standard C++ Library v3 ii libstdc dev The GNU Standard C++ Library v3 (development ii libtasn Manage ASN.1 structures (runtime) ii libtasn1-3-dev Manage ASN.1 structures (development) ii libtext-charwidth-perl b1 get display widths of characters on the term ii libtext-iconv-perl b1 converts between character sets in Perl ii libtext-wrapi18n-perl internationalized substitute of Text::Wrap ii libtiff Tag Image File Format (TIFF) library ii libtiff4-dev Tag Image File Format library (TIFF), develo ii libtiffxx0c Tag Image File Format (TIFF) library -- C++ ii libtimedate-perl Time and date functions for Perl ii libtool lenny1 Generic library support script ii libusb : userspace USB programming library ii libuuid universally unique id library ii libvolume-id lenny3 libvolume_id shared library ii libwrap0 7.6.q-16 Wietse Venema's TCP wrappers library ii libx11-6 2: X11 client-side library ii libx11-data 2: X11 client-side library ii libxapian Search engine library ii libxau6 1: X11 authorisation library ii libxcb-xlib X C Binding, Xlib/XCB interface library ii libxcb X C Binding ii libxcursor1 1: X cursor management library ii libxdamage1 1: X11 damaged region extension library ii libxdmcp6 1: X11 Display Manager Control Protocol library ii libxerces-c2-dev lenny1 validating XML parser library for C++ (devel ii libxerces-c lenny1 validating XML parser library for C++ ii libxext6 2: X11 miscellaneous extension library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 16/74

17 ii libxfixes3 1: X11 miscellaneous 'fixes' extension library ii libxfont1 1: X11 font rasterisation library ii libxft FreeType-based font drawing library for X ii libxi6 2: X11 Input extension library ii libxinerama1 2: X11 Xinerama extension library ii libxml dfsg-5+lenny1 GNOME XML library ii libxmu6 2: X11 miscellaneous utility library ii libxmuu1 2: X11 miscellaneous micro-utility library ii libxrandr2 2: X11 RandR extension library ii libxrender1 1: X Rendering Extension client library ii libxt6 1: X11 toolkit intrinsics library ii libxtst6 2: X11 Testing -- Resource extension library ii libxxf86vm1 1: X11 XFree86 video mode extension library ii linux-libc-dev lenny1 Linux support headers for userspace developm rc linux-modules xen-amd lenny4 Linux modules on AMD64 ii locales lenny6 GNU C Library: National Language (locale) da ii locate maintain and query an index of a directory t ii lockfile-progs Programs for locking and unlocking files and ii login 1: lenny1 system login tools ii logrotate Log rotation utility ii lsb-base Linux Standard Base 3.2 init script function ii lzma Compression method of 7z format in 7-Zip pro ii make The GNU version of the "make" utility. ii makedev creates device files in /dev ii man-db online manual pager ii manpages Manual pages about using a GNU/Linux system ii mawk a pattern scanning and text processing langu ii mc 2:4.6.2~git midnight commander - a powerful file manager ii mime-support MIME files 'mime.types' & 'mailcap', and sup ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 17/74

18 ii mktemp tool for creating temporary files ii module-init-tools tools for managing Linux kernel modules ii mount Tools for mounting and manipulating filesyst ii mysql-common a-24+lenny4 MySQL database common files ii nano free Pico clone with some new features ii ncurses-base basic terminal type definitions ii ncurses-bin terminal-related programs and man pages ii net-tools The NET-3 networking toolkit ii netbase 4.34 Basic TCP/IP networking system ii netcat-traditional TCP/IP swiss army knife ii netcdf-doc 1: Documentation for NetCDF ii ntpdate 1:4.2.4p4+dfsg-8lenny3 client for setting system time from NTP serv ii nullmailer 1: simple relay-only mail transport agent ii odbcinst1debian Support library and helper program for acces ii openssh-blacklist list of default blacklisted OpenSSH RSA and ii openssh-blacklist-extra list of non-default blacklisted OpenSSH RSA ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh/rcp repla ii openssh-server 1:5.1p1-5 secure shell server, an rshd replacement ii openssl 0.9.8g-15+lenny9 Secure Socket Layer (SSL) binary and related ii openssl-blacklist list of blacklisted OpenSSL RSA keys ii passwd 1: lenny1 change and administer password and group dat ii patch Apply a diff file to an original ii perl lenny2 Larry Wall's Practical Extraction and Report ii perl-base lenny2 minimal Perl system ii perl-modules lenny2 Core Perl modules rc pgpool connection pool server and replication proxy ii pkg-config manage compile and link flags for libraries ii postgis geographic objects support for PostgreSQL -- ii postgresql lenny1 object-relational SQL database, version 8.3 ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 18/74

19 ii postgresql-8.3-postgis geographic objects support for PostgreSQL 8. ii postgresql-client lenny1 frontend programs for PostgreSQL 8.3 ii postgresql-client-common 94lenny1 manager for multiple PostgreSQL client versi ii postgresql-common 94lenny1 PostgreSQL database-cluster manager ii procps 1: /proc file system utilities ii proj Cartographic projection filter and library ii python An interactive high-level object-oriented la ii python-minimal A minimal subset of the Python language (def ii python lenny1 An interactive high-level object-oriented la ii python2.5-minimal lenny1 A minimal subset of the Python language (ver ii rdoc lenny1 Generate documentation from Ruby source file ii readline-common GNU readline and history libraries, common f ii recode Character set conversion utility ii rsyslog enhanced multi-threaded syslogd ii ruby-dev 4.2 Header files for compiling extension modules ii ruby lenny1 Interpreter of object-oriented scripting lan ii ruby1.8-dev lenny1 Header files for compiling extension modules ii rubygems package management framework for Ruby librar ii rubygems package management framework for Ruby librar ii sed The GNU sed stream editor ii sgml-base 1.26 SGML infrastructure and SGML catalog file su ii ssh 1:5.1p1-5 secure shell client and server (metapackage) ii ssl-cert simple debconf wrapper for OpenSSL ii sudo 1.6.9p17-3 Provide limited super user privileges to spe ii sun-java6-bin lenny1 Sun Java(TM) Runtime Environment (JRE) 6 (ar ii sun-java6-jdk lenny1 Sun Java(TM) Development Kit (JDK) 6 ii sun-java6-jre lenny1 Sun Java(TM) Runtime Environment (JRE) 6 (ar ii sysv-rc 2.86.ds1-61 System-V-like runlevel change mechanism ii sysvinit 2.86.ds1-61 System-V-like init utilities ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 19/74

20 ii sysvinit-utils 2.86.ds1-61 System-V-like utilities ii tar lenny1 GNU version of the tar archiving utility ii tasksel 2.78 Tool for selecting tasks for installation on ii tasksel-data 2.78 Official tasks used for installation of Debi ii tcpd 7.6.q-16 Wietse Venema's TCP wrapper utilities ii traceroute Traces the route taken by packets over an IP ii ttf-dejavu Metapackage to pull in ttf-dejavu-core and t ii ttf-dejavu-core Vera font family derivate with additional ch ii ttf-dejavu-extra Vera font family derivate with additional ch ii tzdata 2010j-0lenny1 time zone and daylight-saving time data ii ucf Update Configuration File: preserve user cha ii udev lenny3 /dev/ and hotplug management daemon ii unixodbc ODBC tools libraries ii unixodbc-dev ODBC libraries for UNIX (development files) ii unzip Dearchiver for.zip files ii update-inetd 4.31 inetd configuration file updater ii util-linux Miscellaneous system utilities ii util-linux-locales Locales files for util-linux ii vim-common 1: lenny2 Vi IMproved - Common files ii vim-tiny 1: lenny2 Vi IMproved - enhanced vi editor - compact v ii wget lenny2 retrieves files from the web ii whiptail lenny1 Displays user-friendly dialog boxes from she ii x11-common 1: X Window System (X.Org) infrastructure ii xauth 1: X authentication utility ii xfonts-encodings 1: Encodings for X.Org fonts ii xfonts-utils 1:7.4+1 X Window System font utility programs ii xinetd 1: replacement for inetd with many enhancements ii xml-core 0.12 XML infrastructure and XML catalog file supp ii zlib1g 1: dfsg-12 compression library - runtime ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 20/74

21 ii zlib1g-dev compression library - development 1: dfsg Mapserver Arbeitsspeicher: 1500MB Installierte Software: ii adduser add and remove users and groups ii apache2-mpm-worker lenny7 Apache HTTP Server - high speed threaded mod ii apache2-utils lenny8 utility programs for webservers ii apache2.2-common lenny7 Apache HTTP Server common files ii apt lenny2 Advanced front-end for dpkg ii apt-utils lenny2 APT utility programs ii aptitude ~lenny1 terminal-based package manager rc autofs debian-2.1 kernelbased automounter for Linux ii autotools-dev Update infrastructure for config.{guess,sub} ii base-files 5lenny7 Debian base system miscellaneous files ii base-passwd Debian base system master password and group ii bash The GNU Bourne Again SHell ii binutils ~cvs The GNU assembler, linker and binary utiliti ii bsdmainutils collection of more utilities from FreeBSD ii bsdutils 1: Basic utilities from 4.4BSD-Lite ii build-essential 11.4 Informational list of build-essential packag ii bzip lenny1 highquality block-sorting file compressor - ii ca-certificates Common CA certificates ii comerr-dev common error description library - headers a ii coreutils The GNU core utilities ii cpio lenny1 GNU cpio -- a program to manage archives of ii cpp 4: The GNU C preprocessor (cpp) ii cpp The GNU C preprocessor ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 21/74

22 ii cron 3.0pl1-105 management of regular background processing ii debconf Debian configuration management system ii debconf-i18n full internationalization support for debcon ii debian-archive-keyring ~lenny1 GnuPG archive keys of the Debian archive ii debianutils 2.30 Miscellaneous utilities specific to Debian ii defoma Debian Font Manager -- automatic font config ii dhcp3-client lenny4 DHCP client ii dhcp3-common lenny4 common files used by all the dhcp3* packages ii diff File comparison utilities ii dmidecode Dump Desktop Management Interface data ii dpkg b1 Debian package management system ii dpkg-dev Debian package development tools ii e2fslibs ext2 filesystem libraries ii e2fsprogs ext2/ext3/ext4 file system utilities ii ed The classic unix line editor ii ethtool display or change Ethernet device settings ii file Determines file type using "magic" numbers ii findutils utilities for finding files--find, xargs ii fontconfig generic font configuration library - support ii fontconfig-config generic font configuration library - configu ii g++ 4: The GNU C++ compiler ii g The GNU C++ compiler ii gcc 4: The GNU C compiler ii gcc-4.2-base The GNU Compiler Collection (base package) ii gcc The GNU C compiler ii gcc-4.3-base The GNU Compiler Collection (base package) ii gdal-bin Geospatial Data Abstraction Library - Utilit ii gnupg lenny1 GNU privacy guard - a free PGP replacement ii gpgv lenny1 GNU privacy guard - signature verification t ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 22/74

23 ii grep 2.5.3~dfsg-6 GNU grep, egrep and fgrep ii groff-base GNU troff text-formatting system (base syste ii gzip lenny1 The GNU compression utility ii hostname 2.95 utility to set/show the host name or domain ii ifupdown nmu1 high level tools to configure network interf ii info 4.11.dfsg.1-4 Standalone GNU Info documentation browser ii initscripts 2.86.ds1-61 Scripts for initializing and shutting down t ii iproute networking and traffic control tools ii iptables administration tools for packet filtering an ii iputils-ping 3: lenny1 Tools to test the reachability of network ho ii less Pager program similar to more ii libacl Access control list shared library ii libapache2-mod-fcgid 1:2.2-1 an alternative module compat with mod_fastcg ii libapr lenny2 The Apache Portable Runtime Library ii libaprutil dfsg-8+lenny5 The Apache Portable Runtime Utility Library ii libattr1 1: Extended attribute shared library ii libaudio Network Audio System - shared libraries ii libblkid block device id library ii libbz lenny1 highquality block-sorting file compressor l ii libc lenny6 GNU C Library: Shared libraries ii libc6-dev lenny6 GNU C Library: Development Libraries and Hea ii libcap1 1: support for getting/setting POSIX.1e capabil ii libcomerr common error description library ii libconsole 1:0.2.3dbs-65.1 Shared libraries for Linux console and font ii libcurl3-gnutls lenny4 Multiprotocol file transfer library (GnuTLS ii libcurl4-gnutls-dev lenny4 Development files and documentation for libc ii libcwidget highlevel terminal interface library for C+ ii libdb Berkeley v4.5 Database Libraries [runtime] ii libdb Berkeley v4.6 Database Libraries [runtime] ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 23/74

24 ii libdevmapper : The Linux Kernel Device Mapper userspace lib ii libdrm Userspace interface to kernel DRM services - ii libedit2 2.11~ BSD editline and history libraries ii libept Highlevel library for managing Debian packa ii libevent1 1.3e-3 An asynchronous event notification library ii libexpat lenny3 XML parsing C library - runtime library ii libexpat1-dev lenny3 XML parsing C library - development kit ii libfcgi-dev Header files of FastCGI ii libfcgi0ldbl Shared library of FastCGI ii libfontconfig generic font configuration library - runtime ii libfontconfig1-dev generic font configuration library - develop ii libfreetype lenny4 FreeType 2 font engine, shared library files ii libfreetype6-dev lenny4 FreeType 2 font engine, development files ii libgcc1 1: GCC support library ii libgcrypt LGPL Crypto library - runtime library ii libgcrypt11-dev LGPL Crypto library - development files ii libgd2-xpm ~rc1~dfsg-3+lenny1 GD Graphics Library version 2 ii libgd2-xpm-dev ~rc1~dfsg-3+lenny1 GD Graphics Library version 2 (development v ii libgdal Geospatial Data Abstraction Library ii libgdal1-dev Geospatial Data Abstraction Library - Develo ii libgdbm GNU dbm database routines (runtime version) ii libgeos Geometry engine for Geographic Information S ii libgeos-c Geometry engine for Geographic Information S ii libgeos-dev Geometry engine for GIS - Development files ii libgif-dev library for GIF images (development) ii libgif library for GIF images (library) ii libgl1-mesa-glx A free implementation of the OpenGL API -- G ii libglib The GLib library of C routines ii libglib2.0-data Common files for GLib library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 24/74

25 ii libglu1-mesa The OpenGL utility library (GLU) ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library ii libgnutls-dev lenny2 the GNU TLS library - development files ii libgnutls lenny2 the GNU TLS library - runtime library ii libgomp GCC OpenMP (GOMP) support library ii libgpg-error-dev library for common error values and messages ii libgpg-error library for common error values and messages ii libgpm General Purpose Mouse - shared library ii libgssglue mechanism-switch gssapi library ii libhdf4g 4.1r4-22 The Hierarchical Data Format library -- libr ii libhdf4g-dev 4.1r4-22 The Hierarchical Data Format library -- deve ii libhdf5-serial Hierarchical Data Format 5 (HDF5) - runtime ii libhdf5-serial-dev Hierarchical Data Format 5 (HDF5) - developm ii libice6 2: X11 Inter-Client Exchange library ii libicu lenny2 International Components for Unicode ii libidn GNU libidn library, implementation of IETF I ii libidn11-dev Development files GNU libidn, implementation ii libjasper-dev lenny1 Development files for the JasPer JPEG-2000 l ii libjasper lenny1 The JasPer JPEG-2000 runtime library ii libjpeg62 6b-14 The Independent JPEG Group's JPEG runtime li ii libjpeg62-dev 6b-14 Development files for the IJG JPEG library ii libkadm dfsg.4~beta1-5lenny4 MIT Kerberos administration runtime librarie ii libkeyutils Linux Key Management Utilities (library) ii libkrb5-dev 1.6.dfsg.4~beta1-5lenny4 Headers and development libraries for MIT Ke ii libkrb dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries ii liblcms dfsg-1+lenny2 Color management library ii libldap lenny2 OpenLDAP libraries ii libldap2-dev lenny2 OpenLDAP development libraries ii liblocale-gettext-perl Using libc functions for internationalizatio ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 25/74

26 ii liblockfile NFS-safe locking library, includes dotlockfi ii libltdl lenny1 A system independent dlopen wrapper for GNU ii libltdl3-dev lenny1 A system independent dlopen wrapper for GNU ii libmagic File type determination library using "magic ii libmng Multiple-image Network Graphics library ii libmpfr1ldbl dfsg.1-2 multiple precision floating-point computatio ii libmysqlclient15-dev a-24+lenny4 MySQL database development files ii libmysqlclient15off a-24+lenny4 MySQL database client library ii libncurses shared libraries for terminal handling ii libncurses5-dev developer's libraries and docs for ncurses ii libncursesw shared libraries for terminal handling (wide ii libnetcdf-dev 1: Development kit for NetCDF ii libnetcdf4 1: An interface for scientific data access to l ii libnewt lenny1 Not Erik's Windowing Toolkit - text mode win ii libnfsidmap An nfs idmapping library ii libodbcinstq1c Qt-based ODBC configuration library ii libogdi ~beta1-3.1 Open Geographic Datastore Interface Library ii libpam-modules lenny1 Pluggable Authentication Modules for PAM ii libpam-runtime lenny1 Runtime support for the PAM library ii libpam0g lenny1 Pluggable Authentication Modules library ii libpam0g-dev lenny1 Development files for PAM ii libpcre Perl 5 Compatible Regular Expression Library ii libpng lenny4 PNG library - runtime ii libpng12-dev lenny4 PNG library - development ii libpopt lib for parsing cmdline parameters ii libpq-dev lenny1 header files for libpq5 (PostgreSQL library) ii libpq lenny1 PostgreSQL C client library ii libpthread-stubs pthread stubs not provided by native libc ii libpthread-stubs0-dev pthread stubs not provided by native libc, d ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 26/74

27 ii libqt3-mt 3:3.3.8b-5 Qt GUI Library (Threaded runtime version), V ii libreadline GNU readline and history libraries, run-time ii libreadline5-dev GNU readline and history libraries, developm ii librecode Shared library on which recode is based ii librpcsecgss allows secure rpc communication using the rp ii libsasl dfsg1-23+lenny1 Cyrus SASL - authentication abstraction libr ii libselinux SELinux shared libraries ii libsepol Security Enhanced Linux policy library for c ii libsigc c2a typesafe Signal Framework for C++ - runtime ii libslang The S- Lang programming library - runtime ver ii libsm6 2: X11 Session Management library ii libsqlite SQLite 3 shared library ii libsqlite3-dev SQLite 3 development files ii libss commandline interface parsing library ii libssl-dev 0.9.8g-15+lenny9 SSL development libraries, header files and ii libssl g-15+lenny9 SSL shared libraries ii libstdc The GNU Standard C++ Library v3 ii libstdc dev The GNU Standard C++ Library v3 (development ii libtasn Manage ASN.1 structures (runtime) ii libtasn1-3-dev Manage ASN.1 structures (development) ii libtext-charwidth-perl b1 get display widths of characters on the term ii libtext-iconv-perl b1 converts between character sets in Perl ii libtext-wrapi18n-perl internationalized substitute of Text::Wrap ii libtiff Tag Image File Format (TIFF) library ii libtiff4-dev Tag Image File Format library (TIFF), develo ii libtiffxx0c Tag Image File Format (TIFF) library -- C++ ii libtimedate-perl Time and date functions for Perl ii libtool lenny1 Generic library support script ii libusb : userspace USB programming library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 27/74

28 ii libuuid universally unique id library ii libvolume-id lenny3 libvolume_id shared library ii libwrap0 7.6.q-16 Wietse Venema's TCP wrappers library ii libx11-6 2: X11 client-side library ii libx11-data 2: X11 client-side library ii libx11-dev 2: X11 client-side library (development headers ii libxapian Search engine library ii libxau-dev 1: X11 authorisation library (development heade ii libxau6 1: X11 authorisation library ii libxcb-xlib X C Binding, Xlib/XCB interface library ii libxcb-xlib0-dev X C Binding, Xlib/XCB interface library, dev ii libxcb X C Binding ii libxcb1-dev X C Binding, development files ii libxcursor1 1: X cursor management library ii libxdamage1 1: X11 damaged region extension library ii libxdmcp-dev 1: X11 authorisation library (development heade ii libxdmcp6 1: X11 Display Manager Control Protocol library ii libxerces-c2-dev lenny1 validating XML parser library for C++ (devel ii libxerces-c lenny1 validating XML parser library for C++ ii libxext6 2: X11 miscellaneous extension library ii libxfixes3 1: X11 miscellaneous 'fixes' extension library ii libxft FreeType-based font drawing library for X ii libxi6 2: X11 Input extension library ii libxinerama1 2: X11 Xinerama extension library ii libxml dfsg-5+lenny1 GNOME XML library ii libxml2-dev dfsg-5+lenny1 Development files for the GNOME XML library ii libxmu6 2: X11 miscellaneous utility library ii libxmuu1 2: X11 miscellaneous micro-utility library ii libxpm-dev 1: X11 pixmap library (development headers) ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 28/74

29 ii libxpm4 1: X11 pixmap library ii libxrandr2 2: X11 RandR extension library ii libxrender1 1: X Rendering Extension client library ii libxslt1-dev XSLT processing library - development kit ii libxslt XSLT processing library - runtime library ii libxt6 1: X11 toolkit intrinsics library ii libxxf86vm1 1: X11 XFree86 video mode extension library ii linux-libc-dev lenny1 Linux support headers for userspace developm rc linux-modules xen-amd lenny4 Linux modules on AMD64 ii locales lenny6 GNU C Library: National Language (locale) da ii locate maintain and query an index of a directory t ii lockfile-progs Programs for locking and unlocking files and ii login 1: lenny1 system login tools ii logrotate Log rotation utility ii lsb-base Linux Standard Base 3.2 init script function ii lzma Compression method of 7z format in 7-Zip pro ii make The GNU version of the "make" utility. ii makedev creates device files in /dev ii man-db on-line manual pager ii manpages Manual pages about using a GNU/Linux system ii mawk a pattern scanning and text processing langu ii mc 2:4.6.2~git midnight commander - a powerful file manager ii mime-support MIME files 'mime.types' & 'mailcap', and sup ii mktemp tool for creating temporary files ii module-init-tools tools for managing Linux kernel modules ii mount Tools for mounting and manipulating filesyst ii mysql-common a-24+lenny4 MySQL database common files ii nano free Pico clone with some new features ii ncurses-base basic terminal type definitions ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 29/74

30 ii ncurses-bin terminal-related programs and man pages ii net-tools The NET- 3 networking toolkit ii netbase 4.34 Basic TCP/IP networking system ii netcat-traditional TCP/IP swiss army knife ii netcdf-doc 1: Documentation for NetCDF ii nfs-common 1: lenny2 NFS support files common to client and serve ii ntpdate 1:4.2.4p4+dfsg-8lenny3 client for setting system time from NTP serv ii nullmailer 1: simple relay-only mail transport agent ii odbcinst1debian Support library and helper program for acces ii openssh-blacklist list of default blacklisted OpenSSH RSA and ii openssh-blacklist-extra list of non-default blacklisted OpenSSH RSA ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh/rcp repla ii openssh-server 1:5.1p1-5 secure shell server, an rshd replacement ii openssl 0.9.8g-15+lenny9 Secure Socket Layer (SSL) binary and related ii openssl-blacklist list of blacklisted OpenSSL RSA keys ii passwd 1: lenny1 change and administer password and group dat ii patch Apply a diff file to an original ii perl lenny2 Larry Wall's Practical Extraction and Report ii perl-base lenny2 minimal Perl system ii perl-modules lenny2 Core Perl modules ii pkg-config manage compile and link flags for libraries ii portmap RPC port mapper ii postgis geographic objects support for PostgreSQL -- ii procps 1: /proc file system utilities ii proj Cartographic projection filter and library ii python An interactive high-level object-oriented la ii python-minimal A minimal subset of the Python language (def ii python lenny1 An interactive high-level object-oriented la ii python2.5-minimal lenny1 A minimal subset of the Python language (ver ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 30/74

31 ii readline-common GNU readline and history libraries, common f ii recode Character set conversion utility ii rsync fast remote file copy program (like rcp) ii rsyslog enhanced multi-threaded syslogd ii screen lenny1 terminal multiplexor with VT100/ANSI termina ii sed The GNU sed stream editor ii sgml-base 1.26 SGML infrastructure and SGML catalog file su ii ssh 1:5.1p1-5 secure shell client and server (metapackage) ii ssl-cert simple debconf wrapper for OpenSSL ii sudo 1.6.9p17-3 Provide limited super user privileges to spe ii sysv-rc 2.86.ds1-61 System- V-like runlevel change mechanism ii sysvinit 2.86.ds1-61 System- V-like init utilities ii sysvinit-utils 2.86.ds1-61 System- V-like utilities ii tar lenny1 GNU version of the tar archiving utility ii tasksel 2.78 Tool for selecting tasks for installation on ii tasksel-data 2.78 Official tasks used for installation of Debi ii tcpd 7.6.q-16 Wietse Venema's TCP wrapper utilities ii traceroute Traces the route taken by packets over an IP ii ttf-dejavu Metapackage to pull in ttf-dejavu-core and t ii ttf-dejavu-core Vera font family derivate with additional ch ii ttf-dejavu-extra Vera font family derivate with additional ch ii tzdata 2010j-0lenny1 time zone and daylight-saving time data ii ucf Update Configuration File: preserve user cha ii udev lenny3 /dev/ and hotplug management daemon ii unixodbc ODBC tools libraries ii unixodbc-dev ODBC libraries for UNIX (development files) ii unzip Dearchiver for.zip files ii update-inetd 4.31 inetd configuration file updater ii util-linux Miscellaneous system utilities ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 31/74

32 ii util-linux-locales Locales files for util-linux ii vim-common 1: lenny2 Vi IMproved - Common files ii vim-tiny 1: lenny2 Vi IMproved - enhanced vi editor - compact v ii wget lenny2 retrieves files from the web ii whiptail lenny1 Displays user-friendly dialog boxes from she ii x11-common 1: X Window System (X.Org) infrastructure ii x11proto-core-dev X11 core wire protocol and auxiliary headers ii x11proto-input-dev X11 Input extension wire protocol ii x11proto-kb-dev X11 XKB extension wire protocol ii xauth 1: X authentication utility ii xfsprogs lenny1 Utilities for managing the XFS filesystem ii xinetd 1: replacement for inetd with many enhancements ii xml-core 0.12 XML infrastructure and XML catalog file supp ii xtrans-dev X transport library (development files) ii zip Archiver for.zip files ii zlib1g 1: dfsg-12 compression library - runtime ii zlib1g-dev 1: dfsg-12 compression library - development 2.7. Webserver Arbeitsspeicher: 1500MB Auf dem 2. Server bei Serverloft wird das Verzeichnis /var/drupal/sites/ geoportal-raumordnung-bw.de/files über NFS vom 1. Server< bei Hetzner eingebunden. Installierte Software: ii adduser add and remove users and groups ii apache lenny7 Apache HTTP Server metapackage ii apache2-mpm-prefork lenny7 Apache HTTP Server - traditional non-threade ii apache2-utils lenny8 utility programs for webservers ii apache2.2-common lenny7 Apache ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 32/74

33 HTTP Server common files ii apt lenny2 Advanced front-end for dpkg ii apt-utils lenny2 APT utility programs ii aptitude ~lenny1 terminal-based package manager ii autoconf automatic configure script builder rc autofs debian-2.1 kernel-based automounter for Linux ii automake 1: A tool for generating GNU Standards-complian ii automake1.4 1:1.4-p6-13 A tool for generating GNU Standards-complian ii autotools-dev Update infrastructure for config.{guess,sub} ii base-files 5lenny7 Debian base system miscellaneous files ii base-passwd Debian base system master password and group ii bash The GNU Bourne Again SHell ii binutils ~cvs The GNU assembler, linker and binary utiliti ii bsdmainutils collection of more utilities from FreeBSD ii bsdutils 1: Basic utilities from 4.4BSD-Lite ii build-essential 11.4 Informational list of build-essential packag ii bzip lenny1 highquality block-sorting file compressor - ii ca-certificates Common CA certificates ii coreutils The GNU core utilities ii cpio lenny1 GNU cpio -- a program to manage archives of ii cpp 4: The GNU C preprocessor (cpp) ii cpp The GNU C preprocessor ii cron 3.0pl1-105 management of regular background processing ii debconf Debian configuration management system ii debconf-i18n full internationalization support for debcon ii debian-archive-keyring ~lenny1 GnuPG archive keys of the Debian archive ii debianutils 2.30 Miscellaneous utilities specific to Debian ii defoma Debian Font Manager -- automatic font config ii dhcp3-client lenny4 DHCP client ii dhcp3-common lenny4 common ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 33/74

34 files used by all the dhcp3* packages ii diff File comparison utilities ii djvulibre-desktop lenny1 Desktop support for the DjVu image format ii dmidecode Dump Desktop Management Interface data ii dpkg b1 Debian package management system ii dpkg-dev Debian package development tools ii e2fslibs ext2 filesystem libraries ii e2fsprogs ext2/ext3/ext4 file system utilities ii ed The classic unix line editor ii ethtool display or change Ethernet device settings ii file Determines file type using "magic" numbers ii findutils utilities for finding files--find, xargs ii fontconfig generic font configuration library - support ii fontconfig-config generic font configuration library - configu ii g++ 4: The GNU C++ compiler ii g The GNU C++ compiler ii gcc 4: The GNU C compiler ii gcc-4.2-base The GNU Compiler Collection (base package) ii gcc The GNU C compiler ii gcc-4.3-base The GNU Compiler Collection (base package) ii gdal-bin Geospatial Data Abstraction Library - Utilit ii ghostscript 8.62.dfsg.1-3.2lenny5 The GPL Ghostscript PostScript/PDF interpret ii gnupg lenny1 GNU privacy guard - a free PGP replacement ii gpgv lenny1 GNU privacy guard - signature verification t ii grep 2.5.3~dfsg-6 GNU grep, egrep and fgrep ii groff-base GNU troff text-formatting system (base syste ii gs-common 8.62.dfsg.1-3.2lenny5 Dummy package depending on ghostscript ii gsfonts 1:8.11+urwcyr1.0.7~pre44-3 Fonts for the Ghostscript interpreter(s) ii gzip lenny1 The GNU compression utility ii hicolor-icon-theme ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 34/74

35 default fallback theme for FreeDesktop.org i ii hostname 2.95 utility to set/show the host name or domain ii ifupdown nmu1 high level tools to configure network interf ii imagemagick 7: dfsg2-1~lenny3 image manipulation programs ii info 4.11.dfsg.1-4 Standalone GNU Info documentation browser ii initscripts 2.86.ds1-61 Scripts for initializing and shutting down t ii iproute networking and traffic control tools ii iptables administration tools for packet filtering an ii iputils-ping 3: lenny1 Tools to test the reachability of network ho ii less Pager program similar to more ii libacl Access control list shared library ii libapache-mod-security Tighten web applications security for Apache ii libapache2-mod-php dfsg.1-1+lenny9 server-side, HTML-embedded scripting languag ii libapr lenny2 The Apache Portable Runtime Library ii libaprutil dfsg-8+lenny5 The Apache Portable Runtime Utility Library ii libatk The ATK accessibility toolkit ii libatk1.0-data Common files for the ATK accessibility toolk ii libattr1 1: Extended attribute shared library ii libblkid block device id library ii libbz lenny1 highquality block-sorting file compressor l ii libc-client2007b 7:2007b~dfsg-4+lenny3 c- client library for mail protocols - librar ii libc lenny6 GNU C Library: Shared libraries ii libc6-dev lenny6 GNU C Library: Development Libraries and Hea ii libcairo The Cairo 2D vector graphics library ii libcap1 1: support for getting/setting POSIX.1e capabil ii libcomerr common error description library ii libconsole 1:0.2.3dbs-65.1 Shared libraries for Linux console and font ii libcroco a generic Cascading Style Sheet (CSS) parsin ii libcups lenny8 Common UNIX Printing System(tm) - libs ii libcupsimage lenny8 Common ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 35/74

36 UNIX Printing System(tm) - image libs ii libcurl3-gnutls lenny4 Multiprotocol file transfer library (GnuTLS ii libcwidget highlevel terminal interface library for C+ ii libdatrie Double-array trie library ii libdb Berkeley v4.5 Database Libraries [runtime] ii libdb Berkeley v4.6 Database Libraries [runtime] ii libdevmapper : The Linux Kernel Device Mapper userspace lib ii libdirectfb direct frame buffer graphics - shared librar ii libdjvulibre lenny1 Runtime support for the DjVu image format ii libedit2 2.11~ BSD editline and history libraries ii libept Highlevel library for managing Debian packa ii libevent1 1.3e-3 An asynchronous event notification library ii libexpat lenny3 XML parsing C library - runtime library ii libfontconfig generic font configuration library - runtime ii libfontenc1 1: X11 font encoding library ii libfreetype lenny4 FreeType 2 font engine, shared library files ii libgcc1 1: GCC support library ii libgcrypt LGPL Crypto library - runtime library ii libgd2-xpm ~rc1~dfsg-3+lenny1 GD Graphics Library version 2 ii libgdal Geospatial Data Abstraction Library ii libgdbm GNU dbm database routines (runtime version) ii libgeos Geometry engine for Geographic Information S ii libgeos-c Geometry engine for Geographic Information S ii libgif library for GIF images (library) ii libglib The GLib library of C routines ii libglib2.0-data Common files for GLib library ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library ii libgnutls lenny2 the GNU TLS library - runtime library ii libgomp GCC OpenMP (GOMP) support library ii libgpg-error ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 36/74

37 library for common error values and messages ii libgpm General Purpose Mouse - shared library ii libgraphviz rich set of graph drawing tools ii libgs dfsg.1-3.2lenny5 The Ghostscript PostScript/PDF interpreter L ii libgsf lenny2 Structured File Library - runtime version ii libgsf-1-common lenny2 Structured File Library - common files ii libgssglue mechanism-switch gssapi library ii libgtk ~lenny2 The GTK+ graphical user interface library ii libgtk2.0-bin ~lenny2 The programs for the GTK+ graphical user int ii libgtk2.0-common ~lenny2 Common files for the GTK+ graphical user int ii libhdf4g 4.1r4-22 The Hierarchical Data Format library -- libr ii libhdf5-serial Hierarchical Data Format 5 (HDF5) - runtime ii libice6 2: X11 Inter-Client Exchange library ii libicu lenny2 International Components for Unicode ii libidn GNU libidn library, implementation of IETF I ii libilmbase nmu2 several utility libraries from ILM used by O ii libjasper lenny1 The JasPer JPEG-2000 runtime library ii libjpeg62 6b-14 The Independent JPEG Group's JPEG runtime li ii libkeyutils Linux Key Management Utilities (library) ii libkrb dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries ii liblcms dfsg-1+lenny2 Color management library ii libldap lenny2 OpenLDAP libraries ii liblocale-gettext-perl Using libc functions for internationalizatio ii liblockfile NFSsafe locking library, includes dotlockfi ii libltdl lenny1 A system independent dlopen wrapper for GNU ii libltdl3-dev lenny1 A system independent dlopen wrapper for GNU ii libmagic File type determination library using "magic ii libmagick10 7: dfsg2-1~lenny3 image manipulation library ii libmpfr1ldbl dfsg.1-2 multiple precision floating-point computatio ii libmysqlclient15off a-24+lenny4 MySQL ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 37/74

38 database client library ii libncurses shared libraries for terminal handling ii libncursesw shared libraries for terminal handling (wide ii libneon27-gnutls An HTTP and WebDAV client library (GnuTLS en ii libnetcdf4 1: An interface for scientific data access to l ii libnewt lenny1 Not Erik's Windowing Toolkit - text mode win ii libnfsidmap An nfs idmapping library ii libogdi ~beta1-3.1 Open Geographic Datastore Interface Library ii libopenexr lenny3 runtime files for the OpenEXR image library ii libpam-modules lenny1 Pluggable Authentication Modules for PAM ii libpam-runtime lenny1 Runtime support for the PAM library ii libpam0g lenny1 Pluggable Authentication Modules library ii libpango Layout and rendering of internationalized te ii libpango1.0-common Modules and configuration files for the Pang ii libpaper-utils nmu1 library for handling paper characteristics ( ii libpaper nmu1 library for handling paper characteristics ii libpcre Perl 5 Compatible Regular Expression Library ii libpixman pixelmanipulation library for X and cairo ii libpng lenny4 PNG library - runtime ii libpopt lib for parsing cmdline parameters ii libpq lenny1 PostgreSQL C client library ii libreadline GNU readline and history libraries, run-time ii librecode Shared library on which recode is based ii librpcsecgss allows secure rpc communication using the rp ii librsvg lenny1 SAXbased renderer library for SVG files (ru ii libsasl dfsg1-23+lenny1 Cyrus SASL - authentication abstraction libr ii libselinux SELinux shared libraries ii libsepol Security Enhanced Linux policy library for c ii libserf highperformance asynchronous HTTP client li ii libsigc c2a type- ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 38/74

39 safe Signal Framework for C++ - runtime ii libslang The S- Lang programming library - runtime ver ii libsm6 2: X11 Session Management library ii libsqlite SQLite 3 shared library ii libss command-line interface parsing library ii libssl-dev 0.9.8g-15+lenny8 SSL development libraries, header files and ii libssl g-15+lenny8 SSL shared libraries ii libstdc The GNU Standard C++ Library v3 ii libstdc dev The GNU Standard C++ Library v3 (development ii libsvn dfsg1-5 Shared libraries used by Subversion ii libsysfs interface library to sysfs ii libt Type 1 font rasterizer library - runtime ii libtasn Manage ASN.1 structures (runtime) ii libtext-charwidth-perl b1 get display widths of characters on the term ii libtext-iconv-perl b1 converts between character sets in Perl ii libtext-wrapi18n-perl internationalized substitute of Text::Wrap ii libthai-data lenny1 Data files for Thai language support library ii libthai lenny1 Thai language support library ii libtiff Tag Image File Format (TIFF) library ii libtimedate-perl Time and date functions for Perl ii libtool lenny1 Generic library support script ii libts touch screen library ii libusb : userspace USB programming library ii libuuid universally unique id library ii libvolume-id lenny3 libvolume_id shared library ii libwmf lenny1 Windows metafile conversion library ii libwrap0 7.6.q-16 Wietse Venema's TCP wrappers library ii libx11-6 2: X11 client-side library ii libx11-data 2: X11 client-side library ii libxapian Search ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 39/74

40 engine library ii libxau6 1: X11 authorisation library ii libxcb-render-util git1-1 utility libraries for X C Binding -- renderii libxcb-render X C Binding, render extension ii libxcb-xlib X C Binding, Xlib/XCB interface library ii libxcb X C Binding ii libxcomposite1 1: X11 Composite extension library ii libxcursor1 1: X cursor management library ii libxdamage1 1: X11 damaged region extension library ii libxdmcp6 1: X11 Display Manager Control Protocol library ii libxerces-c lenny1 validating XML parser library for C++ ii libxext6 2: X11 miscellaneous extension library ii libxfixes3 1: X11 miscellaneous 'fixes' extension library ii libxfont1 1: X11 font rasterisation library ii libxft FreeType-based font drawing library for X ii libxi6 2: X11 Input extension library ii libxinerama1 2: X11 Xinerama extension library ii libxml dfsg-5+lenny1 GNOME XML library ii libxmuu1 2: X11 miscellaneous micro-utility library ii libxpm4 1: X11 pixmap library ii libxrandr2 2: X11 RandR extension library ii libxrender1 1: X Rendering Extension client library ii libxt6 1: X11 toolkit intrinsics library ii linux-libc-dev lenny1 Linux support headers for userspace developm rc linux-modules xen-amd lenny4 Linux modules on AMD64 ii locales lenny6 GNU C Library: National Language (locale) da ii locate maintain and query an index of a directory t ii lockfile-progs Programs for locking and unlocking files and ii login 1: lenny1 system login tools ii logrotate Log ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 40/74

41 rotation utility ii lsb-base Linux Standard Base 3.2 init script function ii lynx 2.8.7dev9-2.1 Textmode WWW Browser (transitional package) ii lynx-cur 2.8.7dev9-2.1 Textmode WWW Browser with NLS support (deve ii lzma Compression method of 7z format in 7-Zip pro ii m a macro processing language ii make The GNU version of the "make" utility. ii makedev creates device files in /dev ii man-db online manual pager ii manpages Manual pages about using a GNU/Linux system ii mawk a pattern scanning and text processing langu ii mc 2:4.6.2~git midnight commander - a powerful file manager ii mime-support MIME files 'mime.types' & 'mailcap', and sup ii mktemp tool for creating temporary files ii mlock 7:2007b~dfsg-4+lenny3 mailbox locking program ii mod-security-common Tighten web applications security - common f ii module-init-tools tools for managing Linux kernel modules ii mount Tools for mounting and manipulating filesyst ii mysql-common a-24+lenny4 MySQL database common files ii nano free Pico clone with some new features ii ncurses-base basic terminal type definitions ii ncurses-bin terminal-related programs and man pages ii net-tools The NET-3 networking toolkit ii netbase 4.34 Basic TCP/IP networking system ii netcat-traditional TCP/IP swiss army knife ii nfs-common 1: lenny2 NFS support files common to client and serve ii nfs-kernel-server 1: lenny2 support for NFS kernel server ii ntpdate 1:4.2.4p4+dfsg-8lenny3 client for setting system time from NTP serv ii nullmailer 1: simple relay-only mail transport agent ii odbcinst1debian ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 41/74

42 Support library and helper program for acces ii openssh-blacklist list of default blacklisted OpenSSH RSA and ii openssh-blacklist-extra list of non-default blacklisted OpenSSH RSA ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh/rcp repla ii openssh-server 1:5.1p1-5 secure shell server, an rshd replacement ii openssl 0.9.8g-15+lenny8 Secure Socket Layer (SSL) binary and related ii openssl-blacklist list of blacklisted OpenSSL RSA keys ii passwd 1: lenny1 change and administer password and group dat ii patch Apply a diff file to an original ii perl lenny2 Larry Wall's Practical Extraction and Report ii perl-base lenny2 minimal Perl system ii perl-modules lenny2 Core Perl modules ii php-pear dfsg.1-1+lenny9 PEAR - PHP Extension and Application Reposit ii php-xml-htmlsax cvs SAX parser for HTML and other badly formed X ii php-xml-parser PHP PEAR module for parsing XML ii php-xml-rss RSS parser ii php-xml-serializer swissarmy knife for reading and writing XML ii php-xml-util a XML utility for php-pear ii php dfsg.1-1+lenny9 server-side, HTML-embedded scripting languag ii php5-cli dfsg.1-1+lenny9 command-line interpreter for the php5 script ii php5-common dfsg.1-1+lenny9 Common files for packages built from the php ii php5-dev dfsg.1-1+lenny9 Files for PHP5 module development ii php5-gd dfsg.1-1+lenny9 GD module for php5 ii php5-imap dfsg.1-1+lenny9 IMAP module for php5 ii php5-ldap dfsg.1-1+lenny9 LDAP module for php5 ii php5-pgsql dfsg.1-1+lenny9 PostgreSQL module for php5 ii phppgadmin webbased administration tool for PostgreSQL ii portmap RPC port mapper ii postgis geographic objects support for PostgreSQL -- ii postgresql-client lenny1 front- ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 42/74

43 end programs for PostgreSQL (supported ii postgresql-client lenny1 frontend programs for PostgreSQL 8.3 ii postgresql-client-common 94lenny1 manager for multiple PostgreSQL client versi ii postgresql-doc lenny1 documentation for the PostgreSQL database ma ii postgresql-doc lenny1 documentation for the PostgreSQL database ma ii procps 1: /proc file system utilities ii proj Cartographic projection filter and library ii psfontmgr PostScript font manager -- part of Defoma, D ii python An interactive high-level object-oriented la ii python-minimal A minimal subset of the Python language (def ii python lenny1 An interactive high-level object-oriented la ii python2.5-minimal lenny1 A minimal subset of the Python language (ver ii readline-common GNU readline and history libraries, common f ii recode Character set conversion utility ii rsync fast remote file copy program (like rcp) ii rsyslog enhanced multi-threaded syslogd ii screen lenny1 terminal multiplexor with VT100/ANSI termina ii sed The GNU sed stream editor ii sgml-base 1.26 SGML infrastructure and SGML catalog file su ii shtool portable shell tool from the GNU project ii ssh 1:5.1p1-5 secure shell client and server (metapackage) ii ssl-cert simple debconf wrapper for OpenSSL ii subversion 1.5.1dfsg1-5 Advanced version control system ii sudo 1.6.9p17-3 Provide limited super user privileges to spe ii sysv-rc 2.86.ds1-61 System-V-like runlevel change mechanism ii sysvinit 2.86.ds1-61 System-V-like init utilities ii sysvinit-utils 2.86.ds1-61 System-V-like utilities ii tar lenny1 GNU version of the tar archiving utility ii tasksel 2.78 Tool for selecting tasks for installation on ii tasksel-data 2.78 ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 43/74

44 Official tasks used for installation of Debi ii tcpd 7.6.q-16 Wietse Venema's TCP wrapper utilities ii traceroute Traces the route taken by packets over an IP ii ttf-dejavu Metapackage to pull in ttf-dejavu-core and t ii ttf-dejavu-core Vera font family derivate with additional ch ii ttf-dejavu-extra Vera font family derivate with additional ch ii tzdata 2010j-0lenny1 time zone and daylight-saving time data ii ucf Update Configuration File: preserve user cha ii udev lenny3 /dev/ and hotplug management daemon ii unixodbc ODBC tools libraries ii unzip Dearchiver for.zip files ii update-inetd 4.31 inetd configuration file updater ii util-linux Miscellaneous system utilities ii util-linux-locales Locales files for util-linux ii vim 1: lenny2 Vi IMproved - enhanced vi editor ii vim-common 1: lenny2 Vi IMproved - Common files ii vim-runtime 1: lenny2 Vi IMproved - Runtime files ii vim-tiny 1: lenny2 Vi IMproved - enhanced vi editor - compact v ii wget lenny2 retrieves files from the web ii whiptail lenny1 Displays user-friendly dialog boxes from she ii x-ttcidfont-conf 31 TrueType and CID fonts configuration for X ii x11-common 1: X Window System (X.Org) infrastructure ii xauth 1: X authentication utility ii xfonts-encodings 1: Encodings for X.Org fonts ii xfonts-utils 1:7.4+1 X Window System font utility programs ii xinetd 1: replacement for inetd with many enhancements ii xml-core 0.12 XML infrastructure and XML catalog file supp ii zip Archiver for.zip files ii zlib1g 1: dfsg-12 compression library - runtime ii zlib1g-dev 1: dfsg-12 ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 44/74

45 compression library - development 2.8. Katalogserver Arbeitsspeicher: 1024MB Hier ist als zusätzliche Software GeoNetwork Opensource und das Mapfish Print Modul in einer Tomcat Umgebung installiert Installierte Software: ii adduser add and remove users and groups ii ant Java based build tool like make ii ant-gcj Java based build tool like make ii ant-optional Java based build tool like make - optional l ii ant-optional-gcj Java based build tool like make - API docume ii apt lenny2 Advanced front-end for dpkg ii apt-utils lenny2 APT utility programs ii aptitude ~lenny1 terminal-based package manager ii autofs debian-2.1 kernel-based automounter for Linux ii avahi-daemon lenny2 Avahi mdns/dns-sd daemon ii base-files 5lenny7 Debian base system miscellaneous files ii base-passwd Debian base system master password and group ii bash The GNU Bourne Again SHell ii bind9-host 1:9.5.1.dfsg.P3-1+lenny1 Version of 'host' bundled with BIND 9.X ii binutils ~cvs The GNU assembler, linker and binary utiliti ii bsdmainutils collection of more utilities from FreeBSD ii bsdutils 1: Basic utilities from 4.4BSD-Lite ii build-essential 11.4 Informational list of build-essential packag ii bzip lenny1 highquality block-sorting file compressor - ii ca-certificates Common CA certificates ii coreutils The GNU core utilities ii cpio lenny1 GNU cpio -- a program to manage archives of ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 45/74

46 ii cpp 4: The GNU C preprocessor (cpp) ii cpp The GNU C preprocessor ii cron 3.0pl1-105 management of regular background processing ii dbus lenny1 simple interprocess messaging system ii dbus-x lenny1 simple interprocess messaging system (X11 de ii debconf Debian configuration management system ii debconf-i18n full internationalization support for debcon ii debian-archive-keyring ~lenny1 GnuPG archive keys of the Debian archive ii debianutils 2.30 Miscellaneous utilities specific to Debian ii defoma Debian Font Manager -- automatic font config ii dhcp3-client lenny4 DHCP client ii dhcp3-common lenny4 common files used by all the dhcp3* packages ii diff File comparison utilities ii dmidecode Dump Desktop Management Interface data ii dpkg b1 Debian package management system ii dpkg-dev Debian package development tools ii e2fslibs ext2 filesystem libraries ii e2fsprogs ext2/ext3/ext4 file system utilities ii ed The classic unix line editor ii ethtool display or change Ethernet device settings ii file Determines file type using "magic" numbers ii findutils utilities for finding files--find, xargs ii fontconfig generic font configuration library - support ii fontconfig-config generic font configuration library - configu ii g++ 4: The GNU C++ compiler ii g The GNU C++ compiler ii gcc 4: The GNU C compiler ii gcc-4.2-base The GNU Compiler Collection (base package) ii gcc The GNU C compiler ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 46/74

47 ii gcc-4.3-base The GNU Compiler Collection (base package) ii gcj-4.3-base The GNU Compiler Collection (gcj base packag ii gnupg lenny1 GNU privacy guard - a free PGP replacement ii gpgv lenny1 GNU privacy guard - signature verification t ii grep 2.5.3~dfsg-6 GNU grep, egrep and fgrep ii groff-base GNU troff text-formatting system (base syste ii gsfonts 1:8.11+urwcyr1.0.7~pre44-3 Fonts for the Ghostscript interpreter(s) ii gsfonts-x Make Ghostscript fonts available to X11 ii gzip lenny1 The GNU compression utility ii hicolor-icon-theme default fallback theme for FreeDesktop.org i ii hostname 2.95 utility to set/show the host name or domain ii ifupdown nmu1 high level tools to configure network interf ii info 4.11.dfsg.1-4 Standalone GNU Info documentation browser rc initramfs-tools 0.92o tools for generating an initramfs ii initscripts 2.86.ds1-61 Scripts for initializing and shutting down t ii iproute networking and traffic control tools ii iptables administration tools for packet filtering an ii iputils-ping 3: lenny1 Tools to test the reachability of network ho ii java-common 0.30 Base of all Java packages ii jsvc 1.0.2~svn wrapper to launch Java applications as daemo ii less Pager program similar to more ii libacl Access control list shared library ii libapr lenny2 The Apache Portable Runtime Library ii libaprutil dfsg-8+lenny5 The Apache Portable Runtime Utility Library ii libasound ALSA library ii libatk The ATK accessibility toolkit ii libatk1.0-data Common files for the ATK accessibility toolk ii libattr1 1: Extended attribute shared library ii libavahi-common-data lenny2 Avahi common data files ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 47/74

48 ii libavahi-common lenny2 Avahi common library ii libavahi-core lenny2 Avahi's embeddable mdns/dns-sd library ii libbcel-java Analyze, create, and manipulate (binary) Jav ii libbind9-40 1:9.5.1.dfsg.P3-1+lenny1 BIND9 Shared Library used by BIND ii libblkid block device id library ii libbz lenny1 highquality block-sorting file compressor l ii libc lenny6 GNU C Library: Shared libraries ii libc6-dev lenny6 GNU C Library: Development Libraries and Hea rc libc6-xen lenny6 GNU C Library: Shared libraries [Xen version ii libcairo The Cairo 2D vector graphics library ii libcap1 1: support for getting/setting POSIX.1e capabil ii libcap support for getting/setting POSIX.1e capabil ii libcomerr common error description library ii libcommons-beanutils-java 1.8.0~beta-1 utility for manipulating JavaBeans ii libcommons-collections-java A set of abstract data type interfaces and i ii libcommons-collections3-java A set of abstract data type interfaces and i ii libcommons-daemon-java 1.0.2~svn library to launch Java applications as daemo ii libcommons-dbcp-java Database Connection Pooling Services ii libcommons-digester-java Rule based XML Java object mapping tool ii libcommons-el-java Implementation of the JSP2.0 Expression Lang ii libcommons-fileupload-java File upload capability to your servlets and ii libcommons-io-java Common useful IO related classes ii libcommons-launcher-java cross platform java application launcher ii libcommons-logging-java commmon wrapper interface for several loggin ii libcommons-modeler-java convenience library to use Java Management E ii libcommons-pool-java pooling implementation for Java objects ii libcommons-validator-java 1: ease and speed development and maintenance o ii libconsole 1:0.2.3dbs-65.1 Shared libraries for Linux console and font ii libcups lenny8 Common UNIX Printing System(tm) - libs ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 48/74

49 ii libcwidget highlevel terminal interface library for C+ ii libdaemon lenny1 lightweight C library for daemons - runtime ii libdatrie Double-array trie library ii libdb Berkeley v4.6 Database Libraries [runtime] ii libdbus lenny1 simple interprocess messaging system ii libdevmapper : The Linux Kernel Device Mapper userspace lib ii libdirectfb direct frame buffer graphics - shared librar ii libdns45 1:9.5.1.dfsg.P3-1+lenny1 DNS Shared Library used by BIND ii libecj-java Eclipse Java compiler (library) ii libecj-java-gcj Eclipse Java compiler (native library) ii libedit2 2.11~ BSD editline and history libraries ii libept Highlevel library for managing Debian packa ii libevent1 1.3e-3 An asynchronous event notification library ii libexpat lenny3 XML parsing C library - runtime library ii libfontconfig generic font configuration library - runtime ii libfontenc1 1: X11 font encoding library ii libfreetype lenny4 FreeType 2 font engine, shared library files ii libgcc1 1: GCC support library ii libgcj-bc Link time only library for use with gcj ii libgcj-common 1: Java runtime library (common files) ii libgcj Java runtime library for use with gcj ii libgcj9-0-awt AWT peer runtime libraries for use with gcj ii libgcj9-jar Java runtime library for use with gcj (jar f ii libgcrypt LGPL Crypto library - runtime library ii libgdbm GNU dbm database routines (runtime version) ii libglib The GLib library of C routines ii libglib2.0-data Common files for GLib library ii libgmp3c2 2:4.2.2+dfsg-3 Multiprecision arithmetic library ii libgnutls lenny2 the GNU TLS library - runtime library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 49/74

50 ii libgomp GCC OpenMP (GOMP) support library ii libgpg-error library for common error values and messages ii libgpm General Purpose Mouse - shared library ii libgssglue mechanism-switch gssapi library ii libgtk ~lenny2 The GTK+ graphical user interface library ii libgtk2.0-bin ~lenny2 The programs for the GTK+ graphical user int ii libgtk2.0-common ~lenny2 Common files for the GTK+ graphical user int ii libice6 2: X11 Inter-Client Exchange library ii libisc45 1:9.5.1.dfsg.P3-1+lenny1 ISC Shared Library used by BIND ii libisccc40 1:9.5.1.dfsg.P3-1+lenny1 Command Channel Library used by BIND ii libisccfg40 1:9.5.1.dfsg.P3-1+lenny1 Config File Handling Library used by BIND ii libjaxp1.3-java Java XML parser and transformer APIs (DOM, S ii libjaxp1.3-java-gcj Java XML parser and transformer APIs (DOM, S ii libjpeg62 6b-14 The Independent JPEG Group's JPEG runtime li ii libkeyutils Linux Key Management Utilities (library) ii libkrb dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries ii libldap lenny2 OpenLDAP libraries ii liblocale-gettext-perl Using libc functions for internationalizatio ii liblockfile NFSsafe locking library, includes dotlockfi ii liblog4j1.2-java Logging library for java ii liblog4j1.2-java-gcj Logging library for java (native code) ii libltdl lenny1 A system independent dlopen wrapper for GNU ii liblwres40 1:9.5.1.dfsg.P3-1+lenny1 Lightweight Resolver Library used by BIND ii libmagic File type determination library using "magic ii libmpfr1ldbl dfsg.1-2 multiple precision floating-point computatio ii libmx4j-java An open source implementation of the JMX(TM) ii libmysqlclient15off a-24+lenny4 MySQL database client library ii libncurses shared libraries for terminal handling ii libncursesw shared libraries for terminal handling (wide ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 50/74

51 ii libneon27-gnutls An HTTP and WebDAV client library (GnuTLS en ii libnewt lenny1 Not Erik's Windowing Toolkit - text mode win ii libnfsidmap An nfs idmapping library ii libnss-mdns NSS module for Multicast DNS name resolution ii liboro-java 2.0.8a-4 Regular expression library for Java ii libpam-modules lenny1 Pluggable Authentication Modules for PAM ii libpam-runtime lenny1 Runtime support for the PAM library ii libpam0g lenny1 Pluggable Authentication Modules library ii libpango Layout and rendering of internationalized te ii libpango1.0-common Modules and configuration files for the Pang ii libpcre Perl 5 Compatible Regular Expression Library ii libpixman pixelmanipulation library for X and cairo ii libpng lenny4 PNG library - runtime ii libpopt lib for parsing cmdline parameters ii libpq lenny1 PostgreSQL C client library ii libreadline GNU readline and history libraries, run-time ii libregexp-java regular expression library for Java ii librpcsecgss allows secure rpc communication using the rp ii libsasl dfsg1-23+lenny1 Cyrus SASL - authentication abstraction libr ii libselinux SELinux shared libraries ii libsepol Security Enhanced Linux policy library for c ii libserf highperformance asynchronous HTTP client li ii libservlet2.3-java Servlet 2.3 and JSP 1.2 Java classes and doc ii libservlet2.4-java Servlet 2.4 and JSP 2.0 Java classes and doc ii libsigc c2a typesafe Signal Framework for C++ - runtime ii libslang The S- Lang programming library - runtime ver ii libsm6 2: X11 Session Management library ii libsqlite SQLite 3 shared library ii libss command-line interface parsing library ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 51/74

52 ii libssl-dev 0.9.8g-15+lenny9 SSL development libraries, header files and ii libssl g-15+lenny9 SSL shared libraries ii libstdc The GNU Standard C++ Library v3 ii libstdc dev The GNU Standard C++ Library v3 (development ii libstruts1.2-java Java Framework for MVC web applications ii libsvn dfsg1-5 Shared libraries used by Subversion ii libsysfs interface library to sysfs ii libtasn Manage ASN.1 structures (runtime) ii libtext-charwidth-perl b1 get display widths of characters on the term ii libtext-iconv-perl b1 converts between character sets in Perl ii libtext-wrapi18n-perl internationalized substitute of Text::Wrap ii libthai-data lenny1 Data files for Thai language support library ii libthai lenny1 Thai language support library ii libtiff Tag Image File Format (TIFF) library ii libtimedate-perl Time and date functions for Perl ii libtomcat5.5-java Java Servlet engine -- core libraries ii libts touch screen library ii libusb : userspace USB programming library ii libuuid universally unique id library ii libvolume-id lenny3 libvolume_id shared library ii libwrap0 7.6.q-16 Wietse Venema's TCP wrappers library ii libx11-6 2: X11 client-side library ii libx11-data 2: X11 client-side library ii libxapian Search engine library ii libxau6 1: X11 authorisation library ii libxcb-render-util git1-1 utility libraries for X C Binding -- renderii libxcb-render X C Binding, render extension ii libxcb-xlib X C Binding, Xlib/XCB interface library ii libxcb X C Binding ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 52/74

53 ii libxcomposite1 1: X11 Composite extension library ii libxcursor1 1: X cursor management library ii libxdamage1 1: X11 damaged region extension library ii libxdmcp6 1: X11 Display Manager Control Protocol library ii libxerces2-java lenny1 Validating XML parser for Java with DOM leve ii libxerces2-java-gcj lenny1 Validating XML parser for Java with DOM leve ii libxext6 2: X11 miscellaneous extension library ii libxfixes3 1: X11 miscellaneous 'fixes' extension library ii libxfont1 1: X11 font rasterisation library ii libxft FreeType-based font drawing library for X ii libxi6 2: X11 Input extension library ii libxinerama1 2: X11 Xinerama extension library ii libxml dfsg-5+lenny1 GNOME XML library ii libxmuu1 2: X11 miscellaneous micro-utility library rc libxp6 1:1.0.0.xsf1-2 X Printing Extension (Xprint) client library ii libxrandr2 2: X11 RandR extension library ii libxrender1 1: X Rendering Extension client library rc libxt6 1: X11 toolkit intrinsics library ii libxtst6 2: X11 Testing -- Resource extension library rc linux-image xen lenny4 Linux image on i686, oldstyle Xen sup ii linux-libc-dev lenny1 Linux support headers for userspace developm rc linux-modules xen lenny4 Linux modules on i686 ii locales lenny6 GNU C Library: National Language (locale) da ii locate maintain and query an index of a directory t ii lockfile-progs Programs for locking and unlocking files and ii login 1: lenny1 system login tools ii logrotate Log rotation utility ii lsb-base Linux Standard Base 3.2 init script function ii lzma Compression method of 7z format in 7-Zip pro ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 53/74

54 ii make The GNU version of the "make" utility. ii makedev creates device files in /dev ii man-db online manual pager ii manpages Manual pages about using a GNU/Linux system ii mawk a pattern scanning and text processing langu ii mktemp tool for creating temporary files ii module-init-tools tools for managing Linux kernel modules ii mount Tools for mounting and manipulating filesyst ii mysql-common a-24+lenny4 MySQL database common files ii nano free Pico clone with some new features ii ncurses-base basic terminal type definitions ii ncurses-bin terminal-related programs and man pages ii net-tools The NET-3 networking toolkit ii netbase 4.34 Basic TCP/IP networking system ii netcat-traditional TCP/IP swiss army knife ii nfs-common 1: lenny2 NFS support files common to client and serve ii ntpdate 1:4.2.4p4+dfsg-8lenny3 client for setting system time from NTP serv ii nullmailer 1: simple relay-only mail transport agent ii odbcinst1debian Support library and helper program for acces ii openssh-blacklist list of default blacklisted OpenSSH RSA and ii openssh-blacklist-extra list of non-default blacklisted OpenSSH RSA ii openssh-client 1:5.1p1-5 secure shell client, an rlogin/rsh/rcp repla ii openssh-server 1:5.1p1-5 secure shell server, an rshd replacement ii openssl 0.9.8g-15+lenny9 Secure Socket Layer (SSL) binary and related ii passwd 1: lenny1 change and administer password and group dat ii patch Apply a diff file to an original ii perl lenny2 Larry Wall's Practical Extraction and Report ii perl-base lenny2 minimal Perl system ii perl-modules lenny2 Core Perl modules ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 54/74

55 ii portmap RPC port mapper ii procps 1: /proc file system utilities ii readline-common GNU readline and history libraries, common f ii rhino 1.7R1-2 JavaScript engine written in Java ii rsyslog enhanced multi-threaded syslogd ii sed The GNU sed stream editor ii sgml-base 1.26 SGML infrastructure and SGML catalog file su ii ssh 1:5.1p1-5 secure shell client and server (metapackage) ii subversion 1.5.1dfsg1-5 Advanced version control system ii sudo 1.6.9p17-3 Provide limited super user privileges to spe rc sun-java5-bin Sun Java(TM) Runtime Environment (JRE) 5.0 ( rc sun-java5-demo Sun Java(TM) Development Kit (JDK) 5.0 demos rc sun-java5-jdk Sun Java(TM) Development Kit (JDK) 5.0 rc sun-java5-jre Sun Java(TM) Runtime Environment (JRE) 5.0 ( ii sun-java6-bin lenny1 Sun Java(TM) Runtime Environment (JRE) 6 (ar ii sun-java6-jdk lenny1 Sun Java(TM) Development Kit (JDK) 6 ii sun-java6-jre lenny1 Sun Java(TM) Runtime Environment (JRE) 6 (ar ii sysv-rc 2.86.ds1-61 System-V-like runlevel change mechanism ii sysvinit 2.86.ds1-61 System-V-like init utilities ii sysvinit-utils 2.86.ds1-61 System-V-like utilities ii tar lenny1 GNU version of the tar archiving utility ii tasksel 2.78 Tool for selecting tasks for installation on ii tasksel-data 2.78 Official tasks used for installation of Debi ii tcpd 7.6.q-16 Wietse Venema's TCP wrapper utilities ii tomcat Servlet and JSP engine ii tomcat5.5-admin Java Servlet engine -- admin & manager web i ii tomcat5.5-webapps Java Servlet engine -- documentation and exa ii traceroute Traces the route taken by packets over an IP ii tzdata 2010j-0lenny1 time zone and daylight-saving time data ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 55/74

56 ii ucf Update Configuration File: preserve user cha ii udev lenny3 /dev/ and hotplug management daemon ii unixodbc ODBC tools libraries ii unzip Dearchiver for.zip files ii update-inetd 4.31 inetd configuration file updater ii util-linux Miscellaneous system utilities ii util-linux-locales Locales files for util-linux ii vim 1: lenny2 Vi IMproved - enhanced vi editor ii vim-common 1: lenny2 Vi IMproved - Common files ii vim-runtime 1: lenny2 Vi IMproved - Runtime files ii vim-tiny 1: lenny2 Vi IMproved - enhanced vi editor - compact v ii wget lenny2 retrieves files from the web ii whiptail lenny1 Displays user-friendly dialog boxes from she ii x-ttcidfont-conf 31 TrueType and CID fonts configuration for X ii x11-common 1: X Window System (X.Org) infrastructure ii xauth 1: X authentication utility ii xfonts-encodings 1: Encodings for X.Org fonts ii xfonts-utils 1:7.4+1 X Window System font utility programs ii xinetd 1: replacement for inetd with many enhancements ii xml-core 0.12 XML infrastructure and XML catalog file supp ii zip Archiver for.zip files ii zlib1g 1: dfsg-12 compression library - runtime ii zlib1g-dev 1: dfsg-12 compression library - development ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 56/74

57 2.9. Firewall/VPN-Server Arbeitspeicher 300MB Verwendet wird hier die Linux-Distribution IPFire. Dieses erlaubt eine einfache Konfiguration der Dienste: Firewall VPN über eine grafische Oberfläche Konfiguration des Hostsystems bei Hetzner Software: enthält nur eine minimales Debian Lenny + Xen 3.4 Netzwerk: auto lo iface lo inet loopback # xenbri auto xenbri iface xenbri inet manual pre-up brctl addbr xenbri up ifconfig xenbri promisc up bridge_fd 1 bridge_stp off bridge_hello 1 post-up ethtool -K xenbri tx off down ifconfig xenbri down post-down brctl delbr xenbri # device: eth0 auto eth0 iface eth0 inet static address netmask gateway pointopoint iface eth0 inet6 static address 2a01:4f8:101:264:1::1 netmask 64 pre-up /etc/network/ipv6rules.conf up ip -6 route add 2a01:4f8:101:260::1 dev eth0 down ip -6 route del 2a01:4f8:101:260::1 dev eth0 up ip -6 route add default via 2a01:4f8:101:260::1 dev eth0 down ip -6 route del default via 2a01:4f8:101:260::1 dev eth0 Firewall IPv4: ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 57/74

58 #!/bin/bash iptables -F iptables -I INPUT -i eth+ -p tcp --syn -j DROP iptables -I FORWARD -i eth+ -p tcp --syn -j DROP iptables -I INPUT -p icmp -j ACCEPT iptables -I FORWARD -p icmp -j ACCEPT iptables -I INPUT -i eth+ -p udp --dport 500 -d j ACCEPT iptables -I FORWARD -i eth+ -p udp --dport 500 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 444 -s d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 444 -s d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 22 -j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 22 -j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 2222:2225 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 2222:2225 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 80 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 80 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 443 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 443 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport s d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport s d j ACCEPT Firewall Ipv6: #!/bin/bash ip6tables -F ip6tables -I INPUT -i eth+ -p tcp --syn -j DROP ip6tables -I FORWARD -i eth+ -p tcp --syn -j DROP ip6tables -I INPUT -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP ip6tables -I FORWARD -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP ip6tables -I OUTPUT -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP ip6tables -A INPUT -p icmpv6 -j ACCEPT ip6tables -A FORWARD -p icmpv6 -j ACCEPT ip6tables -I INPUT -i eth+ -p tcp --dport 22 -s 2a01:198:6c6::/64 -j ACCEPT ip6tables -I FORWARD -i eth+ -p tcp --dport 22 -s 2a01:198:6c6::/64 -j ACCEPT ip6tables -I INPUT -i eth+ -p tcp --dport 80 -d 2a01:4f8:101:264:2::1/128 -j ACCEPT ip6tables -I FORWARD -i eth+ -p tcp --dport 80 -d 2a01:4f8:101:264:2::1/128 -j ACCEPT ip6tables -I INPUT -i eth+ -p tcp --dport 443 -d 2a01:4f8:101:264:2::1/128 -j ACCEPT ip6tables -I FORWARD -i eth+ -p tcp --dport 443 -d 2a01:4f8:101:264:2::1/128 -j ACCEPT ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 58/74

59 2.11. Konfiguration des Hostsystems bei Serverloft Software: enthält nur eine minimales Debian Lenny + Xen 3.4 Netzwerk: auto lo iface lo inet loopback # xenbri auto xenbri iface xenbri inet manual pre-up brctl addbr xenbri up ifconfig xenbri promisc up bridge_fd 1 bridge_stp off bridge_hello 1 post-up ethtool -K xenbri tx off down ifconfig xenbri down post-down brctl delbr xenbri # device: eth0 auto eth0 iface eth0 inet static address netmask broadcast gateway post-up /sbin/ip tunnel add he-ipv6 mode sit remote local ttl 255 post-up /sbin/ip link set he-ipv6 up post-up /sbin/ip addr add 2001:470:25:295::2/64 dev he-ipv6 post-up /sbin/ip route add ::/0 dev he-ipv6 post-up /sbin/ip addr add 2001:470:26:295::/64 dev xenbri post-up /etc/network/ipv6rules.conf post-up /etc/network/ipv4rules.conf Firewall Ipv4: #!/bin/bash iptables -F iptables -I INPUT -i eth+ -p tcp --syn -j DROP iptables -I FORWARD -i eth+ -p tcp --syn -j DROP iptables -I INPUT -p icmp -j ACCEPT iptables -I FORWARD -p icmp -j ACCEPT iptables -I INPUT -i eth+ -p udp --dport 500 -d j ACCEPT iptables -I FORWARD -i eth+ -p udp --dport 500 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 444 -s d j ACCEPT ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 59/74

60 iptables -I FORWARD -i eth+ -p tcp --dport 444 -s d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 22 -j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 22 -j ACCEPT iptables -I INPUT -i eth+ -p udp --dport 53 -d j ACCEPT iptables -I FORWARD -i eth+ -p udp --dport 53 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 53 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 53 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --d[[cat2 Serverloft Geoportal RO BW (cat2)]] [[db2 Serverloft Geoportal RO BW (db2)]] [[ipfire-xen Serverloft Geoportal RO BW (ipfire-xen)]] [[mapserver2 Serverloft Geoportal RO BW (mapserver2)]] [[www2 Serverloft Geoportal RO BW (www2)]]port 80 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 80 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport 443 -d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport 443 -d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport s d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport s d j ACCEPT iptables -I INPUT -i eth+ -p tcp --dport d j ACCEPT iptables -I FORWARD -i eth+ -p tcp --dport d j ACCEPT Firewall Ipv6: #!/bin/bash ip6tables -F ip6tables -I INPUT -i he-ipv6 -p tcp --syn -j DROP ip6tables -I FORWARD -i he-ipv6 -p tcp --syn -j DROP ip6tables -A INPUT -p icmpv6 -j ACCEPT ip6tables -A FORWARD -p icmpv6 -j ACCEPT ip6tables -I INPUT -i he-ipv6 -p tcp --dport 22 -s 2a01:198:6c6::/64 -j ACCEPT ip6tables -I FORWARD -i he-ipv6 -p tcp --dport 22 -s 2a01:198:6c6::/64 -j ACCEPT ip6tables -I INPUT -i eth+ -p udp --dport 53 -d 2001:470:26:295:216:3eff:fe81:e6f8/128 -j ACCEPT ip6tables -I FORWARD -i eth+ -p udp --dport 53 -d 2001:470:26:295:216:3eff:fe81:e6f8/128 -j ACCEPT ip6tables -I INPUT -i eth+ -p tcp --dport 53 -d 2001:470:26:295:216:3eff:fe81:e6f8/128 -j ACCEPT ip6tables -I FORWARD -i eth+ -p tcp --dport 53 -d 2001:470:26:295:216:3eff:fe81:e6f8/128 -j ACCEPT ip6tables -I INPUT -i he-ipv6 -p tcp --dport 80 -d ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 60/74

61 2001:470:26:295:216:3eff:fe60:a940/128 -j ACCEPT ip6tables -I FORWARD -i he-ipv6 -p tcp --dport 80 -d 2001:470:26:295:216:3eff:fe60:a940/128 -j ACCEPT ip6tables -I INPUT -i he-ipv6 -p tcp --dport 443 -d 2001:470:26:295:216:3eff:fe60:a940/128 -j ACCEPT ip6tables -I FORWARD -i he-ipv6 -p tcp --dport 443 -d 2001:470:26:295:216:3eff:fe60:a940/128 -j ACCEPT ip6tables -A INPUT -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP ip6tables -A FORWARD -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP ip6tables -A OUTPUT -s ::/0 -d ::/0 -m rt --rt-type 0 -j DROP Datensicherung und Wiederherstellung Das Backup auf den FTP läuft mit dem Skript Tatarus aus der Dom0. Dazu werden zur Laufzeit Snapshots der virtuellen Maschinen erstellt und gebackupt: Konfigurationsskripte im svn. Es wird ein Vollbackup Sonntags erstellt, täglich wird ein inkrementielles Backup erstellt. Hierzu werden die Skripte tartarus und charon benutzt. Tartarus erstellt dabei ein Snapshot des LVM-Volumes und erstellt ein verschlüsseltes Backup auf dem FTP-Server. Charon löscht alle Backups, die älter als 14 Tage sind. Konfiguration von tartarus unter /etc/tartarus Mountverzeichnis der Snapshots unterhalb /snap Verzeichnis für inkrementielle Backups /var/spool/tartarus/timestamps Zur Wiederherstellung werden die Backups auf dem Zielserver entpackt, hierzu ist das Verschlüsselungspasswort nötig. Es sind keine weiteren Schritte nötig VPN Die Server von Serverloft und Hetzner werden über ein VPN, Ipsec miteinander verbunden. Ein Zugriff zur Einrichtung der virtuellen Maschinen läuft ebenfalls über VPN (OpenVPN oder Ipsec) Serverabsicherung Die beiden Server sind mehrstufig abgesichert. Auf dem Hostsystem befindet sich eine IPTables Firewall, die Anfragen nur an bestimmte Ports durchläßt. Alle Anfragen werden an eine Firewall-Server weitergeleitet und von da an die entsprechenden Zielserver. ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 61/74

62 Datenbankserver und Mapserver sind von außen nicht direkt erreichbar. Die Abwehr von DOS-Attacken übernimmt das Modul mod_security von Apache Weitere Informationen zur Firewallkonfiguration stehen in der Serverkonfiguration Apache Logfiles Die nutzerbezogenen IP-Adressen erfolgt entsprechend dem Lösungsvorschlag Beispielhafter Leitfaden zur Online-Anonymisierung von nutzerbezogenen IP- Adressen in Zugriffsprotokollen von WebServern (Copyright 2008 bei T-Systems Enterprise Services GmbH, Frankfurt/Main und Innenministerium Baden- Württemberg, Stuttgart). Für statistische Zwecke und zur ständigen Verbesserung des Portals werden bei jedem Zugriff auf den Web-Server des Portals folgende Zugriffsdaten anonymisiert protokolliert: IP-Adresse des Zugriffs ( anonymisiert) Datum und Uhrzeit des Zugriffs die gewünschte Zugriffsmethode/Funktion die Eingabewerte des Zugriffs (zum Beispiel die Zieldatei) der Name der angeforderten Datei die beim Zugriff verwendete Clientsoftware die Statusmeldung des Web-Servers (zum Beispiel Datei übertragen, Datei nicht gefunden, Kommando nicht ausgeführt). Ein Logrotate findet einmal täglich statt. Die Logfiles werden 1 Tag vorgehalten. Die Logs der beiden Server werden 1 x täglich mit dem Skript logresolvemerge.pl aus dem Softwarepaket awstats gemergt Zugriffsstatistiken Die Zugriffsstatistiken werden aufgrund der anonymisierten Logfiles des Apache erstellt. Dazu werden die Logfiles der beiden Webserver jede Nacht gemergt und die Statistik mit Webalizer neu erstellt. Die Zugriffsstatistik im Webalizer reicht bis zu 12 Monate zurück und wird vom Auftragnehmer vierteljährlich als html dem Auftraggeber zur Verfügung gestellt Überwachungsserver Der Überwachungsserver wird mit Nagios und dem Webfrontend Centreon betrieben. Der Server wird von geoinformation+planung betrieben und betreut. ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 62/74

63 Im Falle eines Ausfalls auf einem der Server des Geoportal Raumordnung BW, gehen direkt Mails an die Administratoren bei geoinformation+planung und Terrestris raus Nagios Einrichtung von Nagios auf den DomU's Zugriff auf Statusinformationen über nrpe und xinetd: apt-get install libssl-dev openssl build-essential xinetd groupadd nagios useradd -c "Nagios Check" nagios -g nagios usermod -s `which nologin` nagios echo "nrpe 5666/tcp" >>/etc/services Installation der Nagios-Plugins cd /usr/local/src tar xzf /irgendwo_auf_der_platte/nagios-plugins-version.tar.gz cd nagios-plugins-version./configure && make && make install NRPE tar.gz/download cd /usr/local/src tar xzf /irgendwo_auf_der_platte/nrpe-version.tar.gz cd nrpe-version./configure && make all cp /usr/local/src/nrpe-version/src/nrpe /usr/local/nagios/ Xinetd cat <<EOF >/etc/xinetd.d/nrpe # default: on # description: NRPE (Nagios Remote Plugin Executor) service nrpe { flags = REUSE socket_type = stream wait = no user = nagios group = nagios server = /usr/local/nagios/nrpe server_args = -c /usr/local/nagios/nrpe.cfg --inetd log_on_failure += USERID ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 63/74

64 } EOF disable = no only_from = chown nagios:nagios /usr/local/nagios/nrpe.cfg /etc/init.d/xinetd restart Umkonfigurationen im Fall des Ausfalls eines Servers Im Falle des Ausfalls eines Servers müssen die Funktionen, die nur von einem Server bereitgestellt werden von dem andern übernommen werden. Dies betrifft v.a. die beiden Serverdienste: Webservers Mapserver Alle anderen Komponenten : Datenbankserver Katalogserver sind auf beiden Servern vorhanden Ausfall Server 1 (Hetzner) In diesem Fall muss der zweite Server (Serverloft) noch die Funktion des Webservers übernehmen. Es sind folgende Schritte durchzuführen: 1. Einspielen der aktuellen Drupal-DB. Diese wird täglich auf dem 1. DB- Server ausgespielt (Server 1/Hetzner) und auf dem 2.DB-Server (Server 2/Serverloft) als SQL bereitgestellt. 2. Verringern des Arbeitsspeichers des Mapservers (auf Server 2/Serverloft): Dies erfolgt in der Konfigurationsdatei des virtuellen Servers: /etc/xen/mapserver1.cfg. Dort den memory-wert anpassen, 1 GB sollte reichen. Folgende Zeile auskommentieren (#) 'ip= ,mac=00:16:3f:62:a9:40,script=vif-route' Danach den Mapserver mit folgenden Befehl stoppen: xm shutdown mapserver1 3. Vergrößern des Arbeitsspeichers des Webservers: Dies erfolgt in der Konfigurationsdatei des virtuellen Speichers: /etc/xen/www1.cfg Dort den memory-wert anpassen, 1.2 GB sollten reichen. Kommentarzeichen vor folgender Zeile entfernen ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 64/74

65 #'ip= ,mac= 00:16:3F:62:A9:40,script=vif-route' Danach den Webserver mit den folgenden Befehlen neu starten: xm shutdown www1 stoppen xm create /etc/xen/www1.cfg xm create /etc/xen/mapserver1.cfg 4. DNS-Eintrag zu erneuern. Dies kann nur der Hauptadmin unter: Login ist root Unter Server BIND DNS-Server auswählen. Dann auf geoportal-raumordnung.de klicken. Unter Adresse den Eintrag auswählen und auf stellen. Oben rechts mit Apply Zone die Einstellungen übernehmen Ausfall Server 2 (Serverloft) In diesem Fall muss der erste Server (Hetzner) noch die Funktion des Webservers übernehmen. Es sind folgende Schritte durchzuführen: 1. Verringern des Arbeitsspeichers des Webservers (auf Server 1/Hetzner): Dies erfolgt in der Konfigurationsdatei des virtuellen Speichers: /etc/xen/mapserver1.cfg Dort den memory-wert anpassen, 1 GB sollte reichen. Danach den Webserver neu starten: xm shutdown www1 xm create /etc/xen/webserver1.cfg Wichtig ist hierbei den virtuellen Server zu stoppen und neu zu starten. Ein xm reboot www1 führt nicht zum Erfolg. 2. Vergrößern des Arbeitsspeichers des Mapservers (auf Server 1/Hetzner): Dies erfolgt in der Konfigurationsdatei des virtuellen Servers: /etc/xen/mapserver1.cfg. Dort den memory-wert anpassen, 1.2 GB sollten reichen. Folgende Zeile auskommentieren (#) 'ip= ,mac=00:16:3f:62:a9:40,script=vif-route' Danach den Mapserver mit den folgenden Befehlen neu starten: xm shutdown mapserver1 xm create /etc/xen/mapserver1.cfg Wichtig ist hierbei den virtuellen Server zu stoppen und neu zu starten. Ein xm reboot mapserver1 führt nicht zum Erfolg. ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 65/74

66 3. Unter auf Netzwerk Hosts bearbeiten den Stift neben mapserver.geoportal-raumordnung.de anklicken, dann die IP durch ersetzen. Damit ist der Mapserver wieder richtig erreichbar. Alle unter bzw beschrieben Änderungen müssen nach Behebung des Serverausfalls wieder rückgängig gemacht werden. 3. Dokumentation der Softwaremodule 3.1. Erläuterung der Datei- und Ordnerstruktur Im Hauptverzeichnis des Portal-Servers liegen unterhalb des Drupal-Hauptordners /var/drupal im Modulverzeichnis die Einzelnen Komponenten des Geoportals. Diese sind: Kartenviewer (sites/ Secure Services zur Diensteabsicherung (sites/all/modules/secure_services) Shape-Upload (sites/all/modules/shape_upload_geoportal_ro_bw) Shape-Download (sites/all/modules/shape_download_geoportal_ro_bw) CSW-Suchmodul (sites/all/modules/geo_csw_search) ISO19139 Export-Modul (sites/all/modules/geo_metadata_export) Theme des Geoportal Raumordnung BW (sites/ Generelle Struktur Drupal Folgende Struktur in Drupal (var/drupal) liegt vor: 1. Verzeichnis modules: Core-Module von Drupal 2. Verzeichnis themes: Core-Themes von Drupal 3. Verzeicnis sites/all: Module und Themes, die für alle Installation auf diesen Server verfügbar sind 4. Verzeichnis sites/all/modules: Modulverzeichnis für installationsspezifische Module, hier liegen die Module, die im Rahmen dieses Projektes genutzt und/oder entwickelt wurden 5. Verzeichnis sites/ Module und Themes, die nur verfügbar sind, wenn Drupal über die URL aufgerufen wird 6. Verzeichnis sites/ Hier liegt das Theme für das Geoportal Raumordnung BW (ext_theme) ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 66/74

67 7. Verzeichnis sites/ Verzeichnis in dem Abbildungen, Dateien, ISO19139 Export der Metadaten liegen, die über das Portal aufgerufen werden können 8. Verzeichnis sites/ Konfigurationsdatei für die Drupalinstallation des Geoportal-Rauordnung BW Alle weiteren Verzeichnis sind Standardverzeichnisse von Drupal und wurden nicht für das Geoportal Raumordnung BW angepasst. Eine weitergehende Dokumentation zu diesen Verzeichnissen und Dateien findet sich unter Ordnerstruktur Kartenviewer Im Unterordner sites/pub.geoportal-raumordnung-bw.de/themes/ext_theme befinden sich alle Komponenten, die für den Kartenviewer benötigt werden. Als Startseite des Kartenviewers fungiert die Datei page-node-1139.tpl.php. Darin sind neben Metadata-Tags für Suchmaschinen, den eingebundenen JavaScriptund CSS-Dateien vor allem bestimmte Bereiche, die in der Anzeige einzelner Komponenten benötigt werden als HTML-div definiert. Um den Kartenviewer als Stand-Alone Lösung zu nutzen, müssen aus dieser Datei alle Verweise auf andere Elemente des CMS entfernt werden. Grundsätzlich unterscheiden wir im Folgenden zwischen Ordnern und Dateien der verwendeten Standard-Software sowie derer, die speziell für das Geoportal Raumordnung programmiert wurden. Es wurde insbesondere darauf geachtet, den Quellcode der Basissoftware nicht anzupassen, sondern wenn erforderlich, lediglich Ableitungen aus dem Quellcode in die eigene Programmierung zu integrieren. Beim CSS wurden falls erforderlich - Standard-Formatierungen der zugrunde liegenden ExtJS Biblithek in einer eigenen CSS-Datei definiert. Durch das spätere Einbinden der eigenen CSS-Dateien überschreiben diese die allgemeinen Definitionen. Abb. 2. Ordnerstruktur der Komponente Kartenviewer Ordner CSS Im Ordner CSS sind vor allem die beiden Css-Dateien, die Abweichungen des Layouts im Geoportal gegenüber den Standard-Ext Einstellungen beinhalten. Dies sind die Dateien raumordnung.css style.css ArGe Geoinformation + Planung / terrestris GmbH & Co. KG 67/74