Installing NFR
Preparing Your Machine
Installing Operating System Patches
NFR recommends using the latest set of patches for your operating system. Vendors
generally issue patches for good reasons, so it makes sense to keep your system current.
Creating an Account for NFR
You must create a user account for NFR. Running NFR as root or any other
trusted system user creates potential security problems that do not exist with a new,
non-privileged NFR user account.
»To create the NFR user account:
- Create the user account using the account creation tools (for example, vipw
or useradd) available on your system . For example:
# useradd nfr
- Make the user a non-privileged user.
- Make the user a member of an NFR group.
Installing NFR
»To install the NFR software:
- Login to your machine and become the NFR user.
- Make the NFR user's home directory your current directory:
% cd ~nfr
- Uncompress the NFR distribution:
% zcat nfr-XXX-src.tar.Z | tar xvf -
This creates a directory for the NFR software and copies all of the files in the
distribution archive into that directory.
The name of the directory that NFR creates includes version information in the directory
(for example, nfr-1230). NFR creates a subdirectory under this directory (nfr) to hold the
NFR software. Because the NFR user's home directory and the version info will differ
on different machines, this documentation uses the following syntax the NFR home
directory:
$NFRHOME
For example, on your machine. $NFRHOME could be /usr/home/nfr/nfr-1124/nfr and on another
machine it could be /usr/local/bin/nfr/nfr-1230/nfr.
- If you are using a compiler other than the one normally included with your operating
system, you must update the makefile to use your compiler.
- Edit the correct makefile:
% cd $NFRHOME/include
% vi Makefile-platform
where platform is the operating system on which your are running NFR.
- Update the compiler directive to reflect your compiler:
CC=gcc
- If you need to change other makefile options (for example, compiler flags) edit this
makefile. Do not edit other makefiles, as your changes will be lost during the
installation process.
- Update the makefile configuration to know about your NFR user and install directory:
- Edit the makefile configuration file:
% vi $NFRHOME/include/Makefile-config
- Update the NFR_USER and NFR_GROUP variables to reflect the user name and group you
created to run NFR:
NFR_USER=nfr
NFR_GROUP=nfr
- If you want to install NFR in a directory other than $NFRHOME/install, update the
INSTALLDIR variable to reflect the directory:
INSTALLDIR=$(NFR)/install
- Update the HTTPD variable to reflect the path to your Web server:
HTTPD=/usr/contrib/bin/httpd
- Compile the NFR software:
% cd $NFRHOME
% bin/fixmake
% make
- Install the NFR software:
% make install
»To finish installing the NFR software:
- Become root.
- If you are running o BSD/OS, FreeBSD, or another operating system that uses the Berkeley
packet filter (BPF), you must install a patch to your operating system and recompile the
kernel. The NFR distribution includes these patches for several operating
systems.
- Use the following files to patch your operating system:
BSD/OS
$NFRHOME/os/bsdi/bpf.*
FreeBSD
$NFRHOME/os/freebsd/bpf.*
- Recompile your kernel. Refer to your operating system documentation for more
information on patching your operating system and recompiling your kernel.
- Add the NFR startup scripts to your startup scripts.
If your system uses rc.local:
- Edit the rc.local file:
# vi /etc/rc.local
- At the end of the file, include the information in the NFR startup command script:
:r $NFRHOME/install/nfrstart.rc
- Update the NFRHOME variable to reflect the directory where you installed NFR:
NFRHOME=/usr/home/nfr
If your system uses rc?.d:
- Edit the NFR startup script:
# vi $NFRHOME/install/nfrstart.sh
- Update the NFRHOME variable to reflect the directory where you installed NFR:
NFRHOME=/usr/home/nfr
- Copy the startup script to the initialization scripts directory:
# cp $NFRHOME/install/nfrstart.sh /etc/init/d/nfrstart
- Link the startup script so that the operating sytem starts NFR:
# ln /etc/init.d/nfrstart etc/rc2.d/S99nfr
Before you can use NFR, you must configure some information about your network, as
explained in Configuring NFR.
|