Greetings,
Despite being rather Linux proficient, I am still somewhat new to e-smith and it's architectural design methodologies. I have recently installed SME 6, and have a few questions regarding configuration. Please pardon me if these questions seem overly simple or have been answered elsewhere (I was unable to find relevent results at either e-smith.org or contribs.org, nor through creative google searches).
1> It is my understanding that e-smith is designed to function as both an ntp client /and/ server. Having enabled ntp on my new e-smith server, ntp was apparently not configured to listen on port 123 for local network clients. I am hesitant to start mucking around with ntpd configuration files directly, as I fear that my changes will either break something or be lost upon first reboot. Is there somewhere specifically I should be looking for configuration of ntp as a server daemon?
2> I am migrating services from several hosts to a single e-smith server. These services include NTP, Mail, Web and DNS services (previously provided by an Engarde Linux box), and Samba, FTP, LDAP and Jabber services (hosted on a manually hardened RedHat box). I intend to use only SSMTP, IMAPS and POP3S services for access to mail on this e-smith box, and although there are several documents available regarding such a configuration with older versions of e-smith (i.e. 5.x), none appear to be relevent to 6.0. Specifically:
- Stunnel is already installed on the box, and services are already defined in /etc/services for SSMTP, IMAPS, and POP3s
- Although I can manually create a certificate (cd /usr/share/ssl/certs ; make stunnel.pem), and manually start stunnel through rc.local, there seems to be some mechanism in place that may do some or all of this for me (/etc/e-smith/events/actions/imap-pem-cert) which would imply that there is a better or more consistent way to configure these services on an e-smith server
- cvm and e-smith-cvm-unix are installed, though there doesn't appear to be any configuration via the server-manager that would enable/allow SSMTP
Thanks in advance for any insight anyone might provide!
Cheers,
./dr.kaos
[%sig%]