Dhairekitori Sevhisi neLDAP [2]: NTP uye dnsmasq

Mhoro shamwari !. Takatanga kuita nekugadzirisa masevhisi. Ehezve izvo zvinodikanwa kuti yedu yakapusa Directory Service maererano OpenLDAP, Iva nezvinodiwa zvekutanga kuti zvishande nemazvo. Pakati pavo tine masevhisi DNS kana «Ddomain Name System", DHCP kana » Dsimba Hmabvazuva Cconfiguration Protocol«, Uye ku NTP kana «NEtwork Tzita Protocol".

Iyo base yekushandisa system yatinozoshandisa ndiyo iyo Debian 6 "Svina". Mazhinji enzira dzakatsanangurwa dzinogona kushandiswa Ubuntu 12.04 "Ndizvozvo", uye mu Debian 7 "Wheezy".

Kunyangwe ichiita sediki - kutaura zvazviri zvinyorwa zvedu zvinoita kureba - tsananguro, uye kudzidza kwadzo nevaverengi kunokosha. Iwe unogona uye vamwe havatombo verenga ivo vobva vananga ku "huku nemupunga nehuku." Kukanganisa kukuru. Uye ini handisi kureva kune vane ruzivo, nekuti ivo, pavanongoona iwo musoro wenyaya, vanoziva kana vachifarira kana kwete.

Isu tinoreva kune avo vanotanga muhutungamiriri hweBusiness Networks. Isu tinovabvunza kuti vaverenge tsananguro uye vatevere zvinongedzo, vanyatsoongorora muzvikamu zvekufungidzira izvo zvisiri zvekuraira mitsara kana kodhi, vobva vatevera icho chasara chinyorwa.

Izvi zvichaponesa ivo pamwe nesu nguva yakawanda mukubvunza uye nekupindura mibvunzo ine mhinduro dzakanyatsonaka muchikamu chetsananguro idzi nesumo. 🙂

Isu tinodawo kutaura kamwechete, kuti mutauro wakakosha uye wakakosha wepurogiramu yemubati maneja kana wezvesainzi yemakomputa, ndiwo Mutauro weChirungu. :-). Hatigone kupa shanduro nguva dzose, sezvo tisiri nyanzvi mumutauro weChirungu.

Ehe, usati waenderera, isu tinokurudzira zvikuru kuverenga iyo Nhanganyaya kune dzino dzakateedzana.

Tsananguro dzinodiwa

Kutorwa kubva kuWikipedia:

dnsmasq. Iyo isina huremu DNS, TFTP uye DHCP server. Chinangwa chayo kupa DNS uye DHCP masevhisi kunharaunda yenharaunda. Iko kwemahara kuitiswa kweiyo DNS protocol inogamuchira zvikumbiro kubva kune vatengi vanokumbira IP kero zvichibva pazita remuchina. Seva ichapindura kune izvi zvikumbiro nekupa iyo IP.

DNS Domain Name System (o DNS, muchiSpanish, domain name system). Iyo hierarchical nomenclature system yemakomputa, masevhisi kana chero sosi yakabatana neinternet kana yakavanzika network. Iyi sisitimu inosanganisa ruzivo rwakasiyana nemazita echizinda akapiwa kune yega yevaipinda. Basa rayo rinonyanya kukosha ndere kuturikira (kugadzirisa) mazita anonzwisiswa nevanhu muzvinongedzo zvemabhinari zvine chekuita nemakomputa akabatana netiweki, izvi kuitira kuti ugone kutsvaga nekugadzirisa makomputa aya pasi rese.

DHCP (chirevo che Dsimba Hmabvazuva Cconfiguration Protocol) ndeye network network inobvumidza node pane network IP tora marongero ayo ekugadzirisa otomatiki. Iyo protocol yerudzi mutengi / server mune iyo server kazhinji ine runyorwa rwemasimba IP kero uye anovapa iwo vatengi sezvavanenge vasununguka, vachiziva nguva dzese kuti ndiani anga aine IP iyoyo, ane nguva yakareba sei vaine iyo uye ndiani akapihwa iyo ipapo.

NTP o Network Nguva Protocol, iprotocol yakagadzirirwa kuwiriranisa mawachi ezvitishi kuburikidza nemambure. Shanduro 3 yeiyi protocol ndeyeInternet Drafti Standard, yakarongedzwa muRFC 1305. Iyo NTP vhezheni yechina protocol ndeye kudzokororwa kwakakosha kweyakarehwa mwero, uye iri kuvandudzwa, asi haisati yarongedzwa zviri pamutemo muRFC. Iyo yakapusa vhezheni yeNTP (SNTP) vhezheni 4 inotsanangurwa muRFC 4

ISC-DHCP-SERVER (Internet Software Consortium DHCP Server). Iyo DHCP server sevha inova yemahara kuitisa yeDHCP protocol inogamuchira zvikumbiro kubva kune vatengi vanokumbira IP network kumisikidzwa. Seva inopindura izvi zvikumbiro nekupa ma parameter anotendera vatengi kuzvimisikidza Kuti PC ikumbire kumisikidzwa kubva kuseva, mune iyo PC network network, sarudza sarudzo yekuwana IP kero otomatiki.

Kerberos ndeye mushandisi yekusimbisa sisitimu, iyo ine mbiri chinangwa:

• Dzivirira makiyi kubva mukutumirwa kuburikidza nemambure, ine njodzi inotevera yekuburitswa kwavo.
• Centralize mushandisi kusimbiswa, kuchengetedza imwechete mushandisi dhatabhesi kune rese network.

Kerberos, seyambiro yekuchengetedza, inoshandisa Symmetric Key Cryptography, zvinoreva kuti kiyi inoshandiswa kunyetera ndiyo imwechete kiyi inoshandiswa kutsikisa kana kuratidza vashandisi. Izvi zvinobvumidza makomputa maviri pane isina kuchengetedzeka network kuratidza zvakachengeteka kuzivikanwa kwavo kune mumwe nemumwe. Kerberos ino ganhurira kupinda kune avo chete vanobvumidzwa vashandisi uye inosimbisa zvikumbiro kumasevhisi, ichifungidzira nzvimbo yakavhurika yakaparadzirwa, umo vashandisi vari munzvimbo dzekushandira vanowana masevhisi aya pane maseva akagoverwa kunetiweki.

Ndedzipi kumisikidza kweDNS neDHCP masevhisi atichagadzira?

Tichagadzira zviviri: iyo yakavakirwa pa dnsmasq, uye muzvinyorwa zvinotevera zvinowirirana nazvo Sunga9 and the ISC-DHCP-Server. Kune avo vanoda kudzidza zvakadzama maitiro ekushandisa uye kugadzirisa DNS, tinokurudzira kuverenga chinyorwa «Maitiro ekuisa uye kugadzirisa iyo Yekutanga Master DNS yeLAN pane Debian 6.0»

Sei tichida DNS, DHCP uye NTP services?

• DNS: Kuchengetedza dhatabhesi ine mazita evanogamuchira uye yavo IP kero, yemakomputa ayo anozobatanidzwa kune yedu yemubatanidzwa network, kuti tikwanise kuvadaidza nemazita avo, pachinzvimbo neayo IP kero.
• DHCP: Dzivisa kuenda kunzvimbo iko nekombuta yekombuta, kugadzirisa iyo IP kero uye zvinoenderana parameter. Kubudikidza neDHCP tinogadzirisa otomatiki IP kero, yayo subnet mask, iyo gedhi, iyo DNS server kune iyo yainofanira kubvunza, iyo IP kero yeiyo mail server pane yedu LAN, mhando yenode, iyo NetBIOS zita server uye mamwe akawanda ma parameter. Zviripachena, neiri sevhisi, tinogona kudzivirira manyorerwo ekugadzirisa zvikanganiso zvezvakakosha zvakadaro pamakomputa evatengi.
• NTP: Kana munguva pfupi iri kutevera tasarudza kubatanidza Kerberos kune server yedu yeLDAP, tichada sevhisi iyi. Kerberos inovimba zvakanyanya pane iyo NTP protocol uye DNS masevhisi.

Tichabatanidza sevhisi yeDNS neDHCP kune server yeLDAP?

Mhinduro yazvino ndeye NO. Pakutanga HAPANA. Iyo OpenLDAP musoro wenyaya ndewehunyanzvi pachahwo. Uye kana tikamanikidza hupenyu hwedu nemhando iyoyo yekubatanidzwa pakutanga, hatizosvika kure. Ziva kuti iyo DeleOS, shandisa dnsmasq. zentyal ukuwo uchishandisa iyo Sunga9 and the DHCP Seva pasina kuvasanganisa neiseva LDAP.

Ngatiendei kubva pane zvakapusa kuenda kune zvakaoma kuti tisapinda pakati pemakumbo emabhiza. 🙂

Semuenzaniso network

Lan: 10.10.10.0/24
Dominio: amigos.cu
Servidor: mildap.amigos.cu
Sistema Operativo Servidor: Debian 6 "Squeeze
Dirección IP del servidor: 10.10.10.15
Cliente 1: debian7.amigos.cu
Cliente 2: raring.amigos.cu
Cliente 3: suse13.amigos.cu
Cliente 4: seven.amigos.cu

Dnsmasq server

Isu tinoisa uye tinogadzirisa:

: ~ # kugona kuisa dnsmasq: ~ # mv /etc/dnsmasq.conf /etc/dnsmasq.conf.original

Isu tinogadzirisa iyo faira izvo zvaisina chinhu /etc/dnsmasq.conf uye isu tinoisiya iine zvinotevera zvirimo:

: ~ # nano /etc/dnsmasq.conf
# Usambofa wakapfuudza mazita akajeka pasina kana dot # kana iyo domain chikamu domeini-inodikanwa domain = shamwari.cu # Usapfuure kero mune isina kunyorerwa # kero nzvimbo. bogus-priv # Bvunza mazita nameservers mu # marongero avanowanikwa mune iyo faira # /etc/resolv.conf solid-order # Mhinduro kumibvunzo inongouya chete kubva ku # / etc / varidzi kana kubva kuDHCP. yemunharaunda = / localnet /
# ZISO NEZVINHU
chinongedzo = eth1
wedzera-makosi # Chinja renji zvinoenderana nezvaunoda # uyezve nguva yekuhaya ye # kero ye IP
dhcp-range = 10.10.10.150,10.10.10.200,12h # Sarudzo dzeRANGE # Nguva server
dhcp-option = sarudzo: ntp-server, 10.10.10.15

# IP ye server yeNTP yakafanana neiyo yednsmasq
dhcp-sarudzo = 42,0.0.0.0

# Dzinotevera sarudzo ndidzo dzinokurudzirwa naSamba
# ISC-DHCP-Server maseva pane rako peji
# http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt
# Ivo anoenderana nenyaya iyo iyo Samba server # inomhanya pane imwechete dnsmasq server. # Unogona kusunungura mamwe kana ese iwo, kana iwe ukashandisa # Windows vatengi uye iyo Samba server pane yako LAN. # dhcp-option = 19,0 # sarudzo ip-kutumira kure dhcp-sarudzo = 44,0.0.0.0 # NetBIOS-pamusoro-TCP / IP zita server. WINS
dhcp-sarudzo = 45,0.0.0.0 # NetBIOS Datagram Distribution Server dhcp-option = 46,8 # NetBIOS Node Type

Kuti udzidze zvakawanda nezve iyo dnsmasq, tinokurudzira kuverenga faira zvakanyatsonaka dnsmasq.conf, iyo yatinotumidza kuti sei dnsmasq.conf.original. Ndiyo Pasta Bhaibheri nezve sevhisi iyi. Icho chiri muChirungu.

Isu tinotangazve sevhisi:

:~# service dnsmasq restart
Restarting DNS forwarder and DHCP server: dnsmasq.


Isu tinozivisa yakatarwa IP kero yemaseva pane yedu LAN mune iyo faira / etc / maoko kubva kuseva pachayo uko iyo dnsmasq.

: ~ # nano / etc / hosts
27.0.0.1 localhost 10.10.10.15 mildap.amigos.cu nyoro 10.10.10.1 gandalf.amigos.cu gandalf 10.10.10.5 miwww.amigos.cu miwww

Nguva dzese dzatinowedzera zita uye IP kune iyo faira / etc / maoko , isu tinofanirwa kumanikidza kurodha patsva sevhisi kuitira kuti iyo yakawedzerwa inomiririra inozivikanwa nemirairo hondo, dig y nlookup, zvese pane sevha pachayo, uye nezvese mamwe masisitendi awana IP kubva kuseva iyi:

: ~ # sevhisi dnsmasq simba-reload

chitsamba: Iyo faira iriko dnsmasq inochengeta iyo IP kero yakapihwa kana "Leases", ndiye /var/lib/misc/dnsmasq.leases.

NTP server

Chitubu chekutanga chakabvunzwa: «Kugadziriswa kweSeva neGNU / Linux. Ndira yaNdira 2012. Munyori: Joel Barrios Dueñas ».

Isu tinoisa uye tinogadzirisa:

:~# aptitude install ntp
:~# cp /etc/ntp.conf /etc/ntp.conf.original
:~# cp /dev/null /etc/ntp.conf


Isu tinogadzirisa iyo faira izvo zvaisina chinhu /etc/ntp.conf uye isu tinoisiya iine zvinotevera zvirimo:

# Iyo default default mutemo inoisirwa chero # nguva sevha yakashandiswa: nguva yekuyananisa # pamwe nezvinobvumirwa, asi pasina kubvumira sosi # kubvunza (noquery), kana kugadzirisa sevhisi pane # system (sarudza) uye kuderera ipa log # mameseji (notrap). rambidza kusarudzika nomodify notrap noquery # Bvumira kuwana kwese kune system # kudzoka interface. bvisa 127.0.0.1 # Netiweki yemuno inobvumidzwa kuwiriranisa neseva # asi isingavabvumidze kuti vagadzirise kumisikidzwa kwe # system, uye vasingavashandisi seyakaenzana kuenderana. dzivirira 10.10.10.0 mask 255.255.255.0 nomodify notrap # Isingateedzerwe wachi yemuno. # Uyu mutyairi akateedzera anoshandiswa chete se # backup kana pasina mamwe mafonti ari # aripo. fudge 127.127.1.0 stratum 10 server 127.127.1.0 # Shanduko faira. driftfile / var / lib / ntp / drift nhepfenyuro kunonoka 0.008 ## KANA UINE INTERNET KUPINDA # Chinyorwa che stratum 1 kana mairi maseva enguva. # Zvinokurudzirwa kuve neanenge matatu maseva akanyorwa. # Mamwe maseva pa: # http://kopernix.com/?q=ntp # http://www.eecis.udel.edu/~mills/ntp/servers.html # # Kana iwe uine mukana weinternet, kusagadzikana yeanotevera matatu mitsara #server 2.pool.ntp.org #server 3.pool.ntp.org #server 3.pool.ntp.org # Mvumo yekupihwa yega yega sevha nguva. # Mune iyo mienzaniso, masosi haatenderwe kubvunza, # shandura sevhisi pane system, kana kutumira kunyoresa # meseji. ## Kana iwe uine mukana weinternet, sungisa mitsara mitatu inotevera #restrict 0.pool.ntp.org mask 1 nomodify notrap noquery #restrict 2.pool.ntp.org mask 3 nomodify notrap noquery #restrict 0pool.ntp.org mask 255.255.255.255 sarudza notrap noquery # Kuparadzirwa kune vatengi kunoitwa
radioclient

Isu tinotangazve iyo NTP sevhisi:

:~# service ntp restart
Stopping NTP server: ntpd.
Starting NTP server: ntpd.

NTP mutengi

:~# aptitude install ntp
:~# cp /etc/ntp.conf /etc/ntp.conf.original
:~# cp /dev/null /etc/ntp.conf


Isu tinogadzirisa iyo faira izvo zvaisina chinhu /etc/ntp.conf uye isu tinoisiya iine zvinotevera zvirimo:

server softap.amigos.cu

Cheki pane Mutengi

Semuenzaniso, ngatitore mutengi wedu debian7.amigos.cu, kwataimboisa iyo opensh-server package.

midzi @ debian7: ~ # ssh-debian7
midzi @ debian7 password: [----] midzi @ debian7: ~ # ifconfig
eth0 Batanidza encap: Ethernet HWaddr 52: 54: 00: 8f: ee: f6  
          inet addr: 10.10.10.153 Bcast: 10.10.10.255 Mask: 255.255.255.0
          inet6 addr: fe80 :: 5054: ff: fe8f: eef6 / 64 Makuriro: Batanidza UP BROADCAST RUNNING MULTICAST MTU: 1500 Metric: 1 RX mapaketi: 4967 zvikanganiso: 0 akadonhedza: 0 kudarika: 0 furemu: 0 TX mapaketi: 906 zvikanganiso: 0 yakadonhedza: 0 kudarika: 0 mutakuri: 0 makorokoto: 0 txqueuelen: 1000 RX byte: 6705409 (6.3 MiB) TX mabheti: 93635 (91.4 KiB) Kanganisa: 10 Base kero: 0x6000 lo Link encap: Local Loopback inet addr: 127.0.0.1. 255.0.0.0 Mask: 6 inet1 addr: :: 128/16436 Makuriro: Gadzirira ROPOPO RUNNING MTU: 1 Metric: 8 RX mapaketi: 0 zvikanganiso: 0 akadonhedza: 0 kudarika: 0 furemu: 8 TX mapaketi: 0 zvikanganiso: 0 akadonhedza : 0 inopfuura: 0 mutakuri: 0 makorokoto: 0 txqueuelen: 480 RX byte: 480.0 (480 B) TX mabheti: 480.0 (XNUMX B)

Isu takatobvumikisa kuti iwe wawana IP kero kubva ku dnsmasq yakaiswa pane yedu OpenLDAP server. Naizvozvo, iro basa rinoshanda nemazvo. Iye zvino ngatitarisei sevhisi yeNTP, iyo inogona kutora masekondi akati wandei:

: ~ # ntpdate -u softap.amigos.cu
25 Jan 20:07:00 ntpdate [4608]: nhanho yenguva server 10.10.10.15 offset -0.633909 sec

Nezve sevhisi yeNTP, zvese zvinoshanda zvakanaka.

Mamwe macheki:

midzi @ debian7: ~ # chera gandalf.amigos.cu

; << >> DiG 9.8.4-rpz2 + rl005.12-P1 << >> gandalf.amigos.cu [----] ;; CHIKAMU CHOMUBVUNZO :; gandalf.amigos.cu. IN A [----] ;; MHINDURO CHIKAMU: gandalf.amigos.cu. 0 IN A 10.10.10.1 [----] mudzi @ debian7: ~ # chera gandalf
[----] ;; CHIKAMU CHEMUBVUNZO :; gandalf. IN A [----] ;; MHINDURO CHIKAMU: gandalf. 0 IN A 10.10.10.1 [----] mudzi @ debian7: ~ # chera miwww
[----] ;; CHIKAMU CHOMUBVUNZO :; miwww. IN A [----] ;; MHINDURO CHIKAMU: miwww. 0 IN A 10.10.10.5 [----] mudzi @ debian7: ~ # chera debian7
[----] ;; CHIKAMU CHEMUBVUNZO :; debian7. IN A [----] ;; MHINDURO CHIKAMU: debian7. 0 IN A 10.10.10.153 [----] mudzi @ debian7: ~ # gamuchira nyoro
mildap.amigos.cu ine kero 10.10.10.15 Host mildap.amigos.cu haina kuwanikwa: 5 (REFUSED) Host mildap.amigos.cu haina kuwanikwa: 5 (REFUSED) root @ debian7: ~ # host softap.amigos.cu
softap.amigos.cu ine kero 10.10.10.15 Host nyoro.amigos.cu.amigos.cu haina kuwanikwa: 5 (REFUSED) Host nyoro.amigos.cu.amigos.cu haina kuwanikwa: 5 (REFUSED)

Uye sezvo masevhisi maviri akaisirwa uye akamisikidza basa nemazvo, tinovhara kutaurirana kwanhasi kudzamara chikamu chinotevera chechinyorwa chekushandisa maDNS neDHCP masevhisi nekuvandudza DNS, zvinoenderana neBind9 uye ISC-DHCP-Server, kune avo vanogadzirisa zvishoma zvakakurisa uye zvakanyanya kunetsa network.

Kusvikira nguva inotevera, shamwari !!!