📄 00000000.htm
字号:
---- <BR>Additional info for Mac OS X (Server) <BR>What follows are instruction specifically for users of Mac OS X (Server and <BR>Client). As the OS is new, and currently in a state of flux, consider these <BR>instrustions as a helpful guide which may be subtley flawed for now. As the <BR>OS continues towards release, and we become more familiar with it, we will u <BR>pdate this section accordingly. If you have suggestions, or find errors, ple <BR>ase feel free to share . <BR>There are differences in the installation of xinetd on Mac OS X Server 1.x a <BR>nd Mac OS X. When these differences are apparent, it will be so noted. Other <BR> unix installs will be similar to MOSX(S), except the startup methods, and t <BR>heir mileage will vary. <BR>Everything that follows needs to be done as root to function as indicated. <BR>Some filenames and paths may need to be changed to protect the innocent. <BR>The compile and install <BR>Download the source to a convenient directory (ie /usr/local/src/). <BR>Decompress the archive and copy the necessary config files from /usr/libexec <BR>∶<I> </I><BR> tar xzvf xinetd-N.N.N.N.tar.gz <BR> cd xinetd-N.N.N.N/ <BR> cp /usr/libexec/config.* ./ <BR>Then download the necessary patch from Macsecurity and place it in the xinet <BR>d-N.N.N.N directory. <BR>Then do the following: <BR> cd /path/to/xinetd-N.N.N.N <BR> tar zxvf xinetd-N.N.N.N-osx.patch.tar.gz <BR> patch -p 1 -l < xinetd-N.N.N.N-osx.patch <BR>The next thing to do is run ./configure with whatever options you'd like (li <BR>bwrap support, different command paths). If compiling with libwrap support, <BR>see the section of tutorial called "Compiling with libwrap support". Typical <BR> for MOSX(S): <BR> ./configure --sbindir=/usr/sbin --mandir=/usr/share/man <BR>Hopefully this will proceed with no errors. Assuming this is so, you need to <BR> make two minor modifications to two Makefiles. You'll want to do these modi <BR>fications with vi, as pico has a tendency to chop long lines in a way that b <BR>reaks the Makefiles. <BR>In /path/to/xinetd-N.N.N.N/Makefile find a line that starts out "CFLAGS =" a <BR>nd insert "-traditional-cpp" into the list of arguments. Then, find a sectio <BR>n that begins with makelibs: Append a line after that which contains ; done. <BR> Type in $(RANLIB) libs/lib/*.a <BR>This section should now look as follows: <BR>makelibs: <BR>for lib in $(MANDATORY_LIBS) ; do \ <BR> ( cd libs/src/$$lib ; make install "INSTALL=$(INSTALL_CMD)" <BR> "DEFS=$(LIB_DEFS)" RANLIB=true "CC=$(CC)" DEBUG=-O ) \ <BR> ; done <BR> $(RANLIB) libs/lib/*.a <BR>In /path/to/xinetd-N.N.N.N/xinetd/Makefile again find the "CFLAGS =" line, a <BR>nd add "-traditional-cpp" to the list of arguments. <BR>Follow this up with the following in /path/to/xinetd-N.N.N.N/: <BR>make <BR>make install <BR>xinetd is now installed. All that remains is to configure it, and that has a <BR>lready been discussed at length in this document. Once you think you have a <BR>good xinetd.conf file created and in place, it is suggested that you run xin <BR>etd from the command line with the '-d' debug flag. This will help you great <BR>ly in solving any problems that may arise. Also, remember to add the "groups <BR> = yes" attribute to each service definition. <BR>Starting the daemon at startup <BR>Most admins will want to start xinetd from startup. Here again, there is a d <BR>ifference between Mac OS X Server, and Mac OS X. <BR>In Mac OS X Server, there are a few ways to do this. One way is to edit the <BR>/etc/1700_IPServices file and add a line for xinetd (look at the lines for i <BR>netd for a clue on how to proceed). It is possible to run both inetd and xin <BR>etd at the same time, though both may not run the same services (FIFO). <BR>In Mac OS X, the way to do it, is to create a StartupItem for xinetd. To do <BR>this follow these directions: <BR>cd /System/Library/StartupItems <BR>cp -R IPServices SecureIPServices <BR>cd SecureIPServices <BR>mv IPServices SecureIPServices <BR>Edit the file SecureIPServices. Delete everything after 'ConsoleMessage "Sta <BR>rting TCP/IP services"'. Modify the remaining text to appear as follows, tak <BR>ing care that the stated paths are the actual paths to the specified file(s) <BR>. <BR>## <BR># Run the Internet super-server. <BR>## <BR>. /etc/rc.common <BR>ConsoleMessage "Starting Secure TCP/IP services" <BR>/usr/local/sbin/xinetd <BR>Edit StartupParameters.plist to look like the following: <BR>{ <BR>Description = "Secure Internet services"; <BR>Provides = ("SecureSuperServer" <BR> ); <BR>Requires = ("Resolver"); <BR>Uses = ("NetworkTime"); <BR>OrderPreference = "None"; <BR>Messages = <BR>{ <BR>start = "Starting secure internet services"; <BR>stop = "Stopping secure internet services"; <BR>}; <BR>} <BR>That's it. Xinetd will now startup at boot time. <BR>Compiling with libwrap support <BR>If you're compiling with libwrap (./configure --with-libwrap) support, then <BR>you'll need to make sure the necessary libraries are installed in there prop <BR>er place(s). Look for tcpd.h in /usr/include or /usr/local/include, and libw <BR>rap.a in /usr/lib or /usr/local/lib; if they're not there, you'll need to ge <BR>t them there. How you do this differs between the two versions of Mac OS X. <BR>For Mac OS X Server, follow these directions (excerpted from Joshua Marker's <BR> article on installing SSH1 on Mac OS X server on Stepwise): <BR>cd /System/Developer/Source/Commands/tcp_wrappers/ <BR>make RC_ARCHS=ppc install <BR>mkdir -p /usr/local/lib <BR>mkdir -p /usr/local/include <BR>cp /tmp/tcp_wrappers/Release/usr/local/lib/libwrap.a \ <BR>/usr/local/lib/libwrap.a <BR>ranlib /usr/local/lib/libwrap.a <BR>cp /System/Developer/Source/Commands/tcp_wrappers/tcp_wrappers/tcpd.h \ <BR>/usr/local/include/ <BR>For Mac OS X, these are the directions (excerpted from Joshua Marker's artic <BR>le on installing SSH1 on Mac OS X on Stepwise): <BR>wget <A HREF="ftp://ftp.stepwise.com/pub/macosx/unix/tcp_wrappers-7.6-4.tar.gz">ftp://ftp.stepwise.com/pub/macosx/unix/tcp_wrappers-7.6-4.tar.gz</A> <BR>gnutar -xzf tcp_wrappers-7.6-4.tar.gz <BR>cd tcp_wrappers-4 <BR>make RC_A
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -