Littafin Adireshi tare da LDAP [2]: NTP da dnsmasq

Barka dai abokai !. Mun fara aiwatarwa da daidaita ayyuka. Tabbas ya zama dole mu zama masu sauki Littafin Adireshi dangane da OpenLDAP, sami sabis na asali don aiki yadda ya kamata. Daga cikin su muna da ayyuka DNS ko «DKasance Name System« DHCP ko » Dyamin Host Configam Pladabi«, Kuma zuwa NTP ko «Nzanewa Tsunan Pladabi".

Tsarin aiki wanda muke amfani dashi shine Debian 6 "Matsi". Yawancin hanyoyin da aka bayyana za'a iya amfani dasu Ubuntu 12.04 "daidai", kuma a cikin Debian 7 "Wheezy".

Kodayake da alama abin wasa ne - a zahiri labaranmu suna da ɗan tsayi - ma'anoni, kuma nazarin masu karatu ya zama dole. Kuna iya wasu kuma basu karanta su ba kai tsaye suka tafi "kaza da shinkafa tare da kaza." Babban kuskure. Kuma ba ina nufin gogaggun ne ba, domin su, da zarar sun ga taken suna sanin ko suna da sha’awa ko a’a.

Muna komawa ga waɗanda suka fara a cikin jagorancin Cibiyoyin Sadarwar Kasuwanci. Muna roƙe su da su karanta ma'anar su bi hanyoyin, kuyi bincike cikin ɓangarorin ma'anar waɗanda ba lallai bane layukan umarni ko lamba, sannan su bi sauran labarin.

Wannan zai adana su da mu lokaci mai tsawo wajen yin tambayoyi da amsa tambayoyin da amsoshin su daidai suke a ɓangaren waɗannan ma'anoni da gabatarwar. 🙂

Har ila yau, muna so mu ce a lokaci daya, cewa harshe mai mahimmanci kuma mafi mahimmanci ga mai kula da hanyar sadarwa ko kuma masanin kimiyyar kwamfuta, shine Harshen Turanci. :-) Ba koyaushe za mu iya samar da fassarori ba, tunda mu ba ƙwararru ba ne a cikin harshen Turanci.

Tabbas, kafin ci gaba, muna bayar da shawarar sosai karanta Gabatarwar zuwa wannan jerin labaran.

Ma'anar ma'ana

An ɗauko daga Wikipedia:

dnsmasq. Yana da nauyi DNS, TFTP da uwar garken DHCP. Manufarta ita ce samar da sabis na DNS da DHCP zuwa cibiyar sadarwar yanki. Aikace-aikace kyauta ne na yarjejeniya ta DNS wanda ke karɓar buƙatu daga abokan ciniki waɗanda ke buƙatar adireshin IP dangane da sunan inji. Sabis zai amsa waɗannan buƙatun ta hanyar samar da IP.

DNS Domain Name System (o DNS, a cikin Mutanen Espanya, tsarin sunan yankin). Tsarin tsari ne na keɓaɓɓun tsarin kwamfuta, sabis ko duk wata hanyar haɗi da intanet ko hanyar sadarwa mai zaman kanta. Wannan tsarin yana ba da bayanai daban-daban tare da sunayen yanki waɗanda aka sanya wa kowane mahalarta. Babban mahimmin aikinta shine fassara (warware) sunaye masu fahimtar mutum zuwa cikin masu gano binary masu alaƙa da kwamfutocin da aka haɗa da hanyar sadarwar, wannan don ganowa da magance waɗannan kwamfutocin a duk duniya.

DHCP (gajerun kalmomi don Dyamin Host Configam Protocol) yarjejeniya ce ta hanyar sadarwa wacce ke ba da damar nodes a kan hanyar sadarwa IP sami sigogin saitin sa kai tsaye. Yarjejeniyar iri ce abokin ciniki / uwar garke a cikin abin da saba keɓaɓɓe yana da jerin adiresoshin IP masu ƙarfi kuma yana sanya su ga abokan ciniki yayin da suka sami 'yanci, suna sanin a kowane lokaci waɗanda suka mallaki wannan IP ɗin, tsawon lokacin da suka same shi da kuma wanda aka sanya shi a lokacin.

NTP o Network Time Protocol, yarjejeniya ce da aka tsara don aiki tare da agogon wuraren aiki a cikin hanyar sadarwa. Sigo na 3 na wannan yarjejeniya Tsarin Intanet ne, wanda aka tsara a cikin RFC 1305. Yarjejeniyar NTP ta 4 muhimmiyar gyara ce game da ƙa'idar da aka ambata, kuma tana kan ci gaba, amma ba a riga an tsara ta a cikin RFC ba. An bayyana fasali mai sauƙi na NTP (SNTP) na 4 a cikin RFC 2030

ISC-DHCP-SERVER (Dabariyar Software na Intanet na DHCP Server). Sabar DHCP uwar garke ce wacce ke aiwatar da kyauta na yarjejeniyar DHCP wanda ke karɓar buƙatu daga abokan cinikin da ke neman daidaitawar hanyar sadarwar IP. Sabis ɗin zai amsa waɗannan buƙatun ta hanyar samar da sigogi waɗanda ke bawa abokan ciniki damar daidaita kansu. Domin PC ta nemi sanayya daga sabar, a cikin tsarin sadarwar PC, zaɓi zaɓi don samun adireshin IP ta atomatik.

Kerberos tsarin tabbatar mai amfani ne, wanda ke da manufa biyu:

• Hana makullin aikawa ta hanyar hanyar sadarwa, tare da Hadarin fitowar su.
• Tsara bayanan mai amfani, tare da adana bayanan mai amfani guda ɗaya don ɗaukacin cibiyar sadarwar.

Kerberos, a matsayin yarjejeniya ta tsaro, yana amfani da Symmetric Key Cryptography, wanda ke nufin cewa mabuɗin da aka yi amfani da shi don ɓoye maɓallin ɗaya ne da aka yi amfani da shi don yanke ko tabbatar da masu amfani. Wannan yana bawa kwamfutoci biyu damar amfani da hanyar sadarwa mara tsaro don tabbatar da asalinsu ga junan su. Bayan haka Kerberos ya taƙaita damar yin amfani da masu amfani da izini kawai kuma yana tabbatar da buƙatun zuwa sabis, ɗauka buɗe muhallin da aka rarraba, wanda masu amfani da ke wuraren aiki ke samun waɗannan sabis ɗin akan sabar da aka rarraba a cikin hanyar sadarwa.

Wace aiwatar da ayyukan DNS da DHCP za mu ci gaba?

Zamu ci gaba guda biyu: daya bisa nura_m_inuwa, kuma a cikin labarai masu zuwa wanda yayi daidai da Indulla9 da kuma ISC-DHCP-Sabar. Ga waɗanda suke so su koya dalla-dalla yadda za a aiwatar da saita DNS, muna ba da shawarar karanta labarin «Yadda ake girka da saita Primary Master DNS na LAN akan Debian 6.0»

Me yasa muke buƙatar sabis na DNS, DHCP da NTP?

• DNS: Don adana bayanai tare da sunayen rundunonin da adiresoshin IP ɗin su, na kwamfutocin da za a haɗa su da cibiyar sadarwar mu, ta yadda za mu iya kiran su da sunayen su, maimakon adiresoshin IP ɗin su.
• DHCP: Guji motsawa zuwa wurin da kwamfutar abokin ciniki take, don saita adireshin IP ɗinta da sigogin da suka dace. Ta hanyar DHCP muna saita adireshin IP na abokin ciniki ta atomatik, mashin dinta, ƙofar, uwar garken DNS ga wanda yakamata ta tuntuɓi, adireshin IP na uwar garken wasiku a kan LAN ɗinmu, nau'in kumburi, uwar garken sunan NetBIOS da sauran sigogi da yawa . Babu shakka, tare da wannan sabis ɗin, zamu iya kauce wa kurakuran sanyi na hannu na irin wannan muhimmin al'amari kan kwamfutocin kwastomomi.
• NTP: Idan nan gaba kaɗan muka yanke shawarar haɗa Kerberos zuwa sabarmu ta LDAP, za mu buƙaci wannan sabis ɗin. Kerberos ya dogara sosai akan yarjejeniyar NTP da sabis na DNS.

Shin za mu haɗa ayyukan DNS da sabis na DHCP zuwa sabar LDAP?

Amsar a yanzu itace A'A. Da farko BA. Batun OpenLDAP ɗan fasaha ne a karan kansa. Kuma idan muka rikitar da rayuwarmu da irin wannan hadewar a farkon, ba zamu yi nisa ba. Lura cewa KYAUTA, yi amfani da dnsmasq. zuntyal yayin amfani da Indulla9 da kuma DHCP Server ba tare da haɗa su tare da sabar ba LDAP.

Bari mu tafi daga sauki zuwa hadadden don kar mu shiga tsakanin ƙafafun dawakan. 🙂

Misali na hanyar sadarwa

Lan: 10.10.10.0/24
Dominio: amigos.cu
Servidor: mildap.amigos.cu
Sistema Operativo Servidor: Debian 6 "Squeeze
Dirección IP del servidor: 10.10.10.15
Cliente 1: debian7.amigos.cu
Cliente 2: raring.amigos.cu
Cliente 3: suse13.amigos.cu
Cliente 4: seven.amigos.cu

Dnsmasq uwar garken

Mun girka kuma mun saita:

: ~ # ƙwarewa shigar dnsmasq: ~ # mv /etc/dnsmasq.conf /etc/dnsmasq.conf.original

Muna shirya fayil ɗin wanda yanzu babu komai / da sauransu / dnsmasq.conf kuma mun bar shi tare da abubuwan da ke tafe:

: ~ # nano /etc/dnsmasq.conf
# Kada ku taɓa wucewa sunaye ba tare da ɗumbin # ko yankin da ake buƙata yankin ba = abokai.cu # Kada ku wuce adiresoshin a cikin sararin adireshin # unrouted. bogus-priv # Tambayi masu sanya sunayen a cikin # umarnin da suka bayyana a cikin fayil din # /etc/resolv.conf tsauraran tsari # Amsoshin tambayoyin zasu fito ne daga # / etc / runduna ko daga DHCP. na gida = / localnet /
# IDO TARE DA GABA
dubawa = eth1
fadada-rundunoni # Canza zangon gwargwadon bukatunku # da kuma lokacin haya na # adireshin IP
dhcp-range = 10.10.10.150,10.10.10.200,12h # Zaɓuɓɓuka don RANGE # Sabar lokaci
dhcp-zaɓi = zaɓi: ntp-server, 10.10.10.15

# IP na uwar garken NTP iri daya ne da na dnsmasq
dhcp-zaɓi = 42,0.0.0.0

# Zaɓuɓɓuka masu zuwa sune waɗanda Samba ya ba da shawarar su
# ISC-DHCP-Server sabobin akan shafinku
# http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt
# An daidaita su don shari'ar inda sabba Samba # ke gudana akan sabar dnsmasq ɗin. # Zaku iya damun wasu ko dukansu, idan kuna amfani da # Windows abokan ciniki da kuma sabar Samba akan LAN dinku. # dhcp-zaɓi = 19,0 # zaɓi ip-turawa kashe dhcp-zaɓi = 44,0.0.0.0 # NetBIOS-over-TCP / IP sunan uwar garken. wins
dhcp-zabin = 45,0.0.0.0 # NetBIOS Mai Rarraba Rarraba Datagram Server dhcp-zabin = 46,8 # NetBIOS Node Nau'in

Don ƙarin koyo game da dnsmasq, muna ba da shawarar karanta fayil ɗin a hankali dnsmasq.conf, wanda muke kira yaya dnsmasq.conf. asali. Ba'al ɗin Taliya ne game da wannan sabis ɗin. Yana cikin Turanci.

Mun sake kunna sabis:

:~# service dnsmasq restart
Restarting DNS forwarder and DHCP server: dnsmasq.


Muna bayyana tsayayyun adiresoshin IP na sabobin akan LAN ɗinmu a cikin fayil ɗin / sauransu / runduna daga sabar kanta inda dnsmasq.

: ~ # Nano / sauransu / runduna
27.0.0.1 localhost 10.10.10.15 mildap.amigos.cu mildap 10.10.10.1 gandalf.amigos.cu gandalf 10.10.10.5 miwww.amigos.cu miwww

Duk lokacin da muka kara suna da IP a cikin fayil din / sauransu / runduna , dole ne mu tilasta sake shigar da sabis ɗin don ƙarin rukunin rundunar ya san da umarnin rundunar, tono y nslookup, duka a kan sabar kanta, da kuma sauran wuraren aiki waɗanda suka sami IP daga wannan sabar:

: ~ # sabis dnsmasq da-sake lodawa

Note: Fayil inda dnsmasq adana adiresoshin IP ɗin da aka bayar ko Lissafin haya, shine shi /var/lib/misc/dnsmasq.leases.

NTP uwar garke

An nemi tushen farko"Tsara uwar garke tare da GNU / Linux. Janairu 2012. Marubuci: Joel Barrios Dueñas ».

Mun girka kuma mun saita:

:~# aptitude install ntp
:~# cp /etc/ntp.conf /etc/ntp.conf.original
:~# cp /dev/null /etc/ntp.conf


Muna shirya fayil ɗin wanda yanzu babu komai /etc/ntp.conf kuma mun bar shi tare da abubuwan da ke tafe:

# An saita manufofin tsoho don kowane # uwar garken lokaci da aka yi amfani da shi: ana ba da damar aiki tare da lokaci # tare da tushe, amma ba tare da barin tushen # ya yi tambaya ba (noquery), ko gyara sabis ɗin akan tsarin # (nomodify) da raguwa samar da log # saƙonni (notrap). takura tsoho nomodify notrap noquery # Bada dukkan damar shiga tsarin # komar komputa. takura 127.0.0.1 # An ba da damar cibiyar sadarwar gida suyi aiki tare da sabar # amma ba tare da basu damar canza tsarin tsarin # ba, kuma ba tare da amfani da su a matsayin daidai don aiki tare ba. rictuntata 10.10.10.0 mask 255.255.255.0 nomodify notrap # Lamarin gida mara izini. # Wannan kwatancen direba ne wanda ake amfani dashi azaman # madadin lokacin da babu takamaiman rubutattun rubutu a # samu. fudge 127.127.1.0 stratum 10 uwar garke 127.127.1.0 # Bambancin fayil. driftfile / var / lib / ntp / drift broadcastdelay 0.008 ## IDAN KANA DA INCET INTERNET ACCESS # Jerin stratum 1 ko kuma sabobin lokaci guda # # Serversarin sabobin a: # http://kopernix.com/?q=ntp # http://www.eecis.udel.edu/~mills/ntp/servers.html ## Idan kana da damar yanar gizo, to ba damuwa na layuka 2 masu zuwa # saer 3.pool.ntp.org #server 3.pool.ntp.org #server 0.pool.ntp.org # Izini da za a sanya wa kowane lokacin sabar. # A cikin misalan, ba a ba da izinin tushe suyi tambaya ba, # gyara sabis ɗin akan tsarin, ko aika rajista # saƙonni. ## Idan kana da damar shiga yanar gizo, to ba damuwa wadannan layuka 1 masu zuwa # takaita 2.pool.ntp.org mask 3 nomodify notrap noquery # takura 0.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery #restrict 1.pool.ntp.org mask 255.255.255.255 nomodify notrap noquery # Yada labarai ga kwastomomi yana aiki
mai watsa shirye-shirye

Mun sake kunna sabis na NTP:

:~# service ntp restart
Stopping NTP server: ntpd.
Starting NTP server: ntpd.

NTP abokin ciniki

:~# aptitude install ntp
:~# cp /etc/ntp.conf /etc/ntp.conf.original
:~# cp /dev/null /etc/ntp.conf


Muna shirya fayil ɗin wanda yanzu babu komai /etc/ntp.conf kuma mun bar shi tare da abubuwan da ke tafe:

sabar mildap.amigos.cu

Bincike akan Abokin ciniki

Misali, bari mu dauki abokin cinikinmu debian7.amigos.cu, wanda a baya muka shigar da kunshin openssh-server.

tushen @ debian7: ~ # ssh debian 7
kalmar sirri @ debian7:: - - root = debian7: ~ # idanconfig
eth0 Link encap: Ethernet HWaddr 52: 54: 00: 8f: ee: f6  
          inet addr: 10.10.10.153 Bcast: 10.10.10.255 Mask: 255.255.255.0
          inet6 addr: fe80 :: 5054: ff: fe8f: eef6 / 64 Tsarin: Haɗa UP BROADCAST RUNNING MULTICAST MTU: 1500 Metric: 1 RX fakiti: 4967 kurakurai: 0 kika: 0 overruns: 0 firam: 0 TX fakitoci: 906 kuskure: 0 ya fadi: 0 ya mamaye: mai kawo 0: 0 karo: 0 txqueuelen: 1000 RX bytes: 6705409 (6.3 MiB) TX bytes: 93635 (91.4 KiB) Katsewa: 10 Adireshin tushe: 0x6000 lo Link encap: Local Loopback inet addr: 127.0.0.1. 255.0.0.0 Mask: 6 inet1 addr: :: 128/16436 Spepe: Mai watsa shiri UP LOOPBACK RUNNING MTU: 1 Metric: 8 RX fakitoci: 0 kurakurai: 0 kika aika: 0 overruns: 0 frame: 8 TX fakitoci: 0 kurakurai: 0 kika aika : 0 overruns: 0 mai ɗaukar hoto: 0 haɗuwa: 0 txqueuelen: 480 RX bytes: 480.0 (480 B) TX bytes: 480.0 (XNUMX B)

Mun riga mun tabbatar da cewa kun sami adireshin IP daga dnsmasq sanyawa akan sabarmu ta OpenLDAP. Saboda haka, wannan sabis ɗin yana aiki daidai. Yanzu bari mu bincika sabis na NTP, wanda zai iya ɗaukar sakanni da yawa:

: ~ # ntpdate -u mildap.amigos.cu
25 Jan 20:07:00 na kwanan wata [4608]: uwar garken lokacin aiki 10.10.10.15 biya diyya -0.633909 sec

Game da sabis na NTP, komai yana aiki Yayi.

Sauran cak:

tushen @ debian7: ~ # tono gandalf.amigos.cu

; << >> DiG 9.8.4-rpz2 + rl005.12-P1 << >> gandalf.amigos.cu [----] ;; SASHE NA TAMBAYA :; gandalf.amigos.cu. CIKIN A [----] ;; RASHIN AMSA: gandalf.amigos.cu. 0 A CIKIN 10.10.10.1 [----] tushen @ debian7: ~ # tono gandalf
[----] ;; SASHE NA TAMBAYA :; gandalf. CIKIN A [----] ;; SASAN AMSA: gandalf. 0 A CIKIN 10.10.10.1 [----] tushen @ debian7: ~ # tono miwww
[----] ;; SASHE NA TAMBAYA :; miwww. CIKIN A [----] ;; SASAN AMSA: miwww. 0 A CIKIN 10.10.10.5 [----] tushen @ debian7: ~ # tona debian7
[----] ;; SASHE NA TAMBAYA :; debian7. CIKIN A [----] ;; SASAN AMSA: debian7. 0 A CIKIN 10.10.10.153 [----] tushen @ debian7: ~ # dauki nauyin mildap
mildap.amigos.cu yana da adireshin 10.10.10.15 Mai watsa shiri mildap.amigos.cu ba a samo shi ba: 5 (REFUSED) Mai watsa shiri mildap.amigos.cu ba a samo ba: 5 (REFUSED) tushen @ debian7: ~ # dauki bakuncin mildap.amigos.cu
mildap.amigos.cu yana da adireshin 10.10.10.15 Mai watsa shiri mildap.amigos.cu.amigos.cu ba a samo ba: 5 (REFUSED) Mai watsa shiri mildap.amigos.cu.amigos.cu ba a samo shi ba: 5 (An ƙi)

Kuma tunda ayyukan biyu sun girka kuma sun daidaita aiki sosai, muna rufe hanyoyin sadarwa na yau har zuwa kashi na gaba na labarin kan yadda ake aiwatar da ayyukan DNS da DHCP ta hanyar sabunta DNS, bisa ga Bind9 da ISC-DHCP-Server, ga waɗanda suke sarrafawa kaɗan manyan hanyoyin sadarwa masu rikitarwa.

Har sai lokaci na gaba, abokai !!!