WebYaST 11

Chapter 4. WebYaST Configuration Modules¶

Contents

4.1. Configuring Firewall
4.2. Configuring Time Settings
4.3. Managing System Updates
4.4. Monitoring System Status
4.5. Managing System Services
4.6. System Registration
4.7. Configuring Network Settings
4.8. Enabling LDAP Authentication
4.9. Enabling Kerberos Authentication
4.10. Enabling Active Directory Authentication
4.11. Managing Software Repositories
4.12. Managing Users
4.13. Managing Groups
4.14. Configuring Mail Settings
4.15. Configuring Roles
4.16. Configuring Administrator Settings

This chapter describes all WebYaST configuration modules and their usage. The modules can be accessed from the configuration area of the WebYaST interface, see Section 3.4, “The Configuration Area”.

	Online Module Description
The question mark icon in the header of every module provides relevant online documentation.

	Concurrent Use of Configuration Modules
If a configuration module is used by two or more users at the same time, and one of the users changes and saves the configuration, a warning message is shown to other users and their configuration is updated.

4.1. Configuring Firewall¶

The Firewall WebYaST module allows you to configure firewall. The firewall can be turned on and off. Individual services can be blocked or allowed. To configure the firewall, follow these steps:

Log into the WebYaST interface of the target system and start the Firewall module.
Enable or disable the firewall using the Enabled or Disabled buttons in the header. The green highlighted button indicates the currrent status of the firewall.
The Allowed services and Blocked services groups show allowed and blocked services. Click any service to move it from one group to another.
If you want to read description of any service, stop the mouse pointer over it and wait for two seconds.

Click Save to apply changes.

	Blocking Required WebYaST Services
If a required service (webyast and webyast-ui) is about to be blocked, a warning message is shown when saving the configuration. This is done to prevent the user from blocking the access to WebYaST itself.

4.2. Configuring Time Settings¶

The Time WebYaST module allows you to configure time and date on the target system. To configure time and date, follow these steps:

Log into the WebYaST interface of the target system and start the Time module.
Choose the general Region and the specific Timezone from the drop-down lists.
If the system's hardware clock is set to UTC (Universal Time Coordinates), activate the Hardware clock is set to UTC option. If the hardware clock is set to the local time, the option should be inactive.
To set the current time manually, select Manually configure time and edit the Date and Time entries.
To synchronize system time with a network time server, select Synchronize via Network Time Protocol (NTP) and enter hostname or IP address of an NTP server.
Click Save.

	Logout After Changing System Time
The login time is limited to 2 hours. Therefore, if you change the system time by a large value, your session will automatically expire.

4.3. Managing System Updates¶

The Updates WebYaST module displays a list of available system updates. Use the list to select the updates you want to install.

To update the system, follow these steps:

Log into the WebYaST interface of the target system and start the Updates module.
If the system is up to date, click Back.
Use the checkboxes to select the updates that you want to install.
Click Update.

Alternatively, you can update your appliance from the command line with ssh and the zypper dup command.

4.4. Monitoring System Status¶

The Status WebYaST module displays status information collected by the collectd daemon, for example: Network, Memory and Disk usage, and CPU load. For each type of information, status icon and name is displayed. Click the name to display detailed status information. The specific data shown may be different in your appliance.

For these numeric data, it is possible to set limits. For more information about limits, see Section 4.4.1, “Setting Status Limits”. If the actual value exceeds this limits, the system is considered unhealthy and the status icon and the health indicator in the control panel turns red, see Section 3.2, “The System Status Area”.

The System Messages section shows system logs from the /var/log/messages file. Click System Messages to show the messages. Use the green arrows to navigate through the messages.

4.4.1. Setting Status Limits¶

To set the limit values for status data, follow these steps:

Log into the WebYaST interface of the target system and start the Status module.
Click Edit limits at the bottom of the screen.
Click the type of data you want to edit to expand it.
From the drop-down menus, select the type of limit you want to set and enter the appropriate numeric value to the corresponding field.
Click Save and Back.

4.5. Managing System Services¶

The System Services WebYaST module allows you to manage system services available on the target system. To manage the system services, follow these steps:

	Configuring the List of System Services
The list of services available in the System Services module is configurable. For more information, see the vendor documentation.

Log into the WebYaST interface of the target system and start the System Services module.
A list of available system services is shown. Using the Filter Services drop-down menu, you can limit the list to show only the running, not running, dead, started on boot, or not started on boot services. Using the Quick Search, you can search services according to their names and descriptions.
For each service, a status icon, name and a short description are shown. You can expand the information shown by clicking the little triangle on the left. A longer description, detailed status information and Start/Stop, Restart, and Start on Boot/Do Not Start on Boot buttons are shown in the expanded view.
To change both the current status and the on-boot status (enable or disable for the current runlevel) press Start or Stop button.
To restart a service without changing its on-boot status, press Restart.
To change only the on-boot status (enable or disable for the current runlevel) press Start on Boot or Do Not Start on Boot button.
The result of the requested status change is shown under the status buttons.
If you are finished, click Back.

4.6. System Registration¶

The Registration WebYaST module displays the registration status of your system and allows you to register it. To register the system:

Log into the WebYaST interface of the target system and start the Registration module.
You are asked for the Mandatory information the registration server needs. The needed information depends on the installed products. You will be asked repeatedly for any missing but needed information until it is supplied.
More detailed information is shown under Details. Not all information sent to the registration server is shown here, usually only architecture, CPU type and timezone.
Click Save.

4.7. Configuring Network Settings¶

The Network WebYaST module allows you to configure the network on the target system. To configure the network, follow these steps:

Log into the WebYaST interface of the target system and start the Network module.
In the header, select the configuration mode. You can choose between Automatic (if you want to configure the network automatically via DHCP) or Manual configuration. The selected mode is highlighted in green.
To configure the network automatically via DHCP, select the Automatic configuration mode. Enter Hostname, Domain, and deactivate the Change Hostname by DHCP option to ensure a static host name with DHCP.
To configure the network manually, select Manual configuration mode. Under DNS configuration, enter the Hostname, Domain, and specify Name servers and Search domains to use.
Under IP configuration, enter IP address and Subnet mask/Prefixlen. The prefix should be specified in the CIDR /nn format, where nn is a number between 0 and 32. Specify the Default route.

Click Save.

	Changing IP Address or Hostname
The change in network configuration is done immediately after clicking the Next button. If the hostname or IP address is changed, it may be necessary to change the URL in the browser before you can continue.

4.8. Enabling LDAP Authentication¶

The LDAP WebYaST module allows you to enable authentication via LDAP. Once configured, LDAP users are available in roles management and LDAP users are able to log in WebYaST. To enable LDAP authentication, follow these steps:

Log into the WebYaST interface of the target system and start the LDAP module.
Check the Enable LDAP Authentication option.
Set the LDAP Server Address and Base DN as provided by your administrator. It is possible to acquire the Base DN from the server with the Fetch DN button.
Check Secure Connection if a secure connection should be used.
Click Save
If you are using LDAP together with Kerberos, use the Kerberos WebYaST module to configure Kerberos. For more information, see Section 4.9, “Enabling Kerberos Authentication”.

4.9. Enabling Kerberos Authentication¶

The Kerberos WebYaST module allows you to enable authentication via Kerberos client. To enable Kerberos authentication, follow these steps:

Log into the WebYaST interface of the target system and start the Kerberos module.
Check the Enable Kerberos Authentication option.
Set the Default Domain, Default Realm, and KDC Server Address as provided by your administrator.
Click Save.

4.10. Enabling Active Directory Authentication¶

The Active Directory WebYaST module allows you to enable authentication of Active Directory users. Once configured, Active Directory users are available in roles management and Active Directory users are able to log into WebYaST. To enable Active Directory authentication, follow these steps:

Before setting Active Directory authentication, ensure that the system time is correct, preferably by NTP synchronization. Ensure that the hostname does not change - either configure DHCP to not change host names for a given IP address or set a fixed host name in the network settings.
Log into the WebYaST interface of the target system and start the Active Directory module.
Check the Enable Authentication of AD users option.
Enter Active Directory Domain to be used. If the machine is not a member of the given domain, you will be asked for Administrator User Name, Password and Machine Account.
Click Save.

4.11. Managing Software Repositories¶

The Software Repositories WebYaST module allows you to manage software repositories. You can view the list of software repositories, edit them, or add new repositories.

To view the list of software repositories, edit or delete them, follow these steps:

Log into the WebYaST interface of the target system and start the Software Repositories module.
The list of available software repositories is shown. For each repository, its status icon, name and URL are shown. Using the Filter repositories drop-down menu, you can limit the list to enabled, disabled, or all repositories. You can also limit the repositories shown in the list by entering a string in Quick Search.
Click any repository in the list to view detailed information.
Detailed view contains Alias, Name, and URL of the repository. The latter two fields are editable. The status of the repository and of its autorefresh are shown. Both can be enabled or disabled. You can also enable or disable keeping of downloaded packages.
To save the changes, click Save. To delete the selected repository, click Delete.

To add a new repository, follow these steps:

Log into the WebYaST interface of the target system and start the Software Repositories module.
Click New Repository.
Enter Alias, Name, and URL of the repository to be added. Select whether the repository should be enabled, whether its autorefresh should be enabled and whether downloaded packages should be kept.
To save the changes, click Save.

4.12. Managing Users¶

The Users WebYaST module allows you to manage local non-system users. You can view the list of users, edit them, or add new users.

To view the list of users, edit or delete users, follow these steps:

Log into the WebYaST interface of the target system and start the Users module.
The list of local non-system users is shown. For each user, its user name and full name is shown. You can limit the users shown in the list by entering a string in Filter.
Click any user in the list to view detailed information.
In the Login Settings tab, you can view and edit user's Full Name and Login Name. You can also edit the user's Password. The new password must be confirmed in Confirm Password.
In the Groups tab, you can view and edit Groups and the Default Group the selected user belongs to. You can edit groups manually or select them using the Manage Groups and Select Default Group buttons.
In the Advanced tab, you can view and edit user's Home Directory, Login Shell, and UID Number.
In the Roles tab, you can manage user's roles. Click the Manage Roles button and click individual roles to move them between Selected Roles (active) and Available Roles (inactive).
To save the changes, click Save. To delete the selected user, click Delete.

To create a new user, follow these steps:

Log into the WebYaST interface of the target system and start the Users module.
Click New User.
In the Login Settings enter user's Full Name, Login Name and Password. The password strength is indicated by the color bar. The password must be confirmed in Confirm Password.
In the Groups tab, you can add Groups and the Default Group the new user belongs to. You can add groups manually or select them using the Manage Groups and Select Default Group buttons. If not edited, the default group users is used.
In the Advanced tab, you can edit user's Home Directory, Login Shell, and UID Number. If not edited, default values are used.
In the Roles tab, you can manage user's roles. Click the Manage Roles button and click individual roles to move them between Selected Roles (active) and Available Roles (inactive).
To save the changes, click Save.

Using the Manage Groups link, you can access the Groups WebYaST module directly.

4.13. Managing Groups¶

The Groups WebYaST module allows you to manage local user groups (bot system and non-system). You can view the list of groups, edit them, or add new groups.

To view the list of groups, edit or delete groups, follow these steps:

Log into the WebYaST interface of the target system and start the Groups module.
The list of local user groups is shown. You can limit the groups shown in the list by entering a string in Filter.
Click any group in the list to view detailed information. You can view and edit Group Name, Group ID, and comma-separated list of Members.
To edit the list of members, you can use the Manage Members button. It shows a dialog with two lists of users, Selected Members and Available Members. Click any member to move it from one list to another. Save the changes with OK.
To save the changes, click Save. To delete the selected group, click Delete.

To create a new user group, follow these steps:

Log into the WebYaST interface of the target system and start the Groups module.
Click New Group.
Enter Group Name and comma-separated list of Members.
To edit the list of members, you can use the Manage Members button. It shows a dialog with two lists of users, Selected Members and Available Members. Click any member to move it from one list to another. Save the changes with OK.
To save the changes, click Save.

Using the Manage Users link, you can access the Users WebYaST module directly.

4.14. Configuring Mail Settings¶

The Mail Settings WebYaST module allows you to configure a server for outgoing mail (SMTP). To configure the SMTP server, follow these steps:

Log into the WebYaST interface of the target system and start the Mail Settings module.
In Outgoing mail server, enter the URL of the SMTP server to be used.
In Use secure connection (TLS), choose whether encryption (TLS) should be used. The available options are: Disabled, If available, and Always.
Enter your credentials for the SMTP server: User name and Password. Confirm the password by entering it in Confirm password.
You can test the mail settings by entering an e-mail address in Send test mail to and pressing Send Mail. The test mail will be also sent when clicking Save.
Click Save

4.15. Configuring Roles¶

The Roles WebYaST module allows you to view and configure user roles. To create and configure roles and to assign users to roles, follow these steps:

Log into the WebYaST interface of the target system and start the Roles module.
On the Assign Permissions tab, a table showing all available permissions and roles is shown. Permissions are in rows, roles in columns. You can click permissions to collapse or expand detailed permissions. You can collapse all permissions with Collapse all.
To create a new role, click Create Role, enter its desired Name and click the Create Role button.
Assign individual permissions to roles by checking them in the Assign Permissions table.
On the Assign Users tab, you can assign users to specific roles. The role containers are in the left. The alphabetically sorted list of users is on the right. To assign a user to a specific role, drag the user name to be assigned from the right to a role container on the left. Users can have more than one role, in such a case, a user is granted union of all permissions granted by his roles.
To remove user from a role, move the cursor over the user name in a role container and click the little cross.
You can search for specific users in the list using the search bar in the header.
Click Save to save the changes.

	Changing User Rights
After user rights are changed in the role management you should logout and login again to ensure that all changes take effect.

4.16. Configuring Administrator Settings¶

The Administrator Settings WebYaST module allows you to set password for the system administrator (root) and the e-mail address. To configure administrator settings, follow these steps:

Log into the WebYaST interface of the target system and start the Administrator Settings module.
To change the administrator password enter it in New Password and repeat it in Confirm Password. Click Save.
To configure an e-mail address to forward administrator's mail to, enter it into Forward system mail to and click Save.
To change only the administrator's mail, click Save Mail Only. To change both the administrator's password and the mail or the password only, press Save.