I-DNS kunye ne-DHCP evulekileyoSUSE 13.2 "Harlequin" -Iinethiwekhi ze-SMB

Isalathiso ngokubanzi sothotho: Iinethiwekhi zekhompyuter zee-SMEs: Intshayelelo

Eyona njongo iphambili kweli nqaku kukubonisa ukuba singafezekisa njani I-DNS kunye ne-DHCP server kwi-OpenSUSE ngesixhobo sayo esihle sokumisela iYaST, kunye nako konke -okanye phantse-ngokubonisa kwayo.

Siyakuthembisa ukufakela okupheleleyo kusetyenziswa ujongano lomzobo, ngaphandle kwa-Yonke imigaqo inokukhetha, akunjalo?- kwisibini seekhonsoli ukujonga ukusebenza ngokuchanekileyo kwesibini Ukubopha9 + ISC-DHCP-Server, iqwalaselwe kusetyenziswa YaST - Enye into yokuSeta isixhobo Siseti yezixhobo ezilungileyo kakhulu kulawulo lwesoftware kunye noqwalaselo lwenkqubo.

Inkonzo yokuqala -kwaye okona kubalulekileyo kwiikhrayitheriya zethu- ekufuneka zenziwe kwinethiwekhi ye-SME, yinkonzo DNS - DHCP. Ukuba asifuni kuqwalasela ngesandla iiparameter zenethiwekhi nganye yeendawo zokusebenzela, akufuneki senze ngaphandle kwenkonzo ye-DHCP, njengoko kuchaziwe kamva. Kukho inkonzo yexesha okanye NTP.

I-DNS: imvelaphi

Ngo-Epreli 2013 sipapashe kwi DesdeLinux uthotho lwamanqaku ama-5 anikezelwe ekuphumezeni i-DNS ephambili kwi-Debian:

• I-Master Master ye-Primary ye-LAN kwi-Debian 6.0 (I)
• I-Master Master ye-Primary ye-LAN kwi-Debian 6.0 (II)
• I-Master Master ye-Primary ye-LAN kwi-Debian 6.0 (III)
• I-Master Master ye-Primary ye-LAN kwi-Debian 6.0 (IV)
• I-Master Master ye-Primary ye-LAN kwi-Debian 6.0 (V)

Ukudityaniswa kwamanqaku angentla apha kwifomathi ye-HTML kuye kwanikelwa ukuba kukhutshelwe nangona bekubhaliwe-buya ngoko-Ukukhutshwa kweDebian "Squeeze", iinkcazo kunye neekhonsepthi ezigqunywe kuzo zihlala zivumelekile.

Kungenxa yoko le nto singazukwazisa ngokusesikweni umba we-DNS. Funda la manqaku ukuba unemibuzo, apho ikwabonelela ngonxibelelwano kuluncwadi olukhethekileyo lwe-DNS.

En Vula, ezona folda zibalulekileyo kunye neefayile ezinxulumene nale nkonzo zezi:

• lovimba /etc/igama.conf
• ifolda / njl / igama.d
• lovimba / njl / sysconfig / igama
• iprogram / usr / sbin / named-checkconf, / usr / sbin / named-checkzone, / usr / sbin / named-compilezone, / usr / sbin / named--printprint
• ifolda / usr / share / doc / iipakeji / ukubopha /
• ifolda / var / lib / igama /
• ifolda / var / lib / igama / dyn /
• lovimba /etc/init.d/namagama
• ikhonkco lokomfuziselo / usr / sbin / ebizwa ngegama
  

DHCP

Injongo yeNkqubo yoLungiselelo lweMikhosi yeDynamic- Iprogram yokuQinisekisa iMicrosoft (DHCP), kukunikezela iiparameter zoqwalaselo lwenethiwekhi esembindini -ukusebenzisa iseva ye-DHCP- endaweni yokumisela ngesandla indawo nganye yokusebenza. Ikhompyuter elungiselelwe ukusebenzisa i-DHCP ayinakulawula kwidilesi ye-IP emileyo. Le khomputha yomxhasi iqulunqwe ngendlela evumela ukuba uqwalaselo lwenethiwekhi ngokuzenzekelayo, ngokwemiyalelo yeseva.

Inkonzo ye-DHCP yenza ubomi bube lula kuBalawuli beeNethiwekhi. Ngokumisela umncedisi we-DHCP, unokuchaza iiparameter ezinje ngegama lesizinda, isango, ixesha okanye ixesha leseva, iiseva ze-DNS, iseva yeWINS ukuba isetyenzisiwe, sasaza idilesi ye-IP- usasazoIdilesi ye-IP kunye nemaski yenethiwekhi yekhompyuter yomthengi, igama lekhompyuter yomthengi, kunye nezinye iiparameter.

Naluphi na utshintsho, nditsho notshintsho olukhulu kwiiparameter ezinxulumene needilesi ze-IP kunye noseto lwenethiwekhi, zinokuphunyezwa embindini, ukuba sihlela okanye sitshintsha useto lweseva ye-DHCP.

Ngokwesiqhelo, iseva ye-DHCP igcina irekhodi elipheleleyo leedilesi ze-IP okanye ukuqeshisa, kwaye ngokubanzi ipharamitha ephambili yidilesi ye-MAC yekhadi yenethiwekhi nganye okanye i-NIC - Ikhadi loNxibelelwano lweNethiwekhi. Kwi-OpenSUSE, iidilesi ze-IP eziqeshiweyo okanye ukuqeshisa okunikezwe yi-DHCP kugcinwa kwi /var/lib/dhcp/db/dhcpd.leases.

Iphakheji Dhcp-uxwebhu, efakwe kwifolda / usr / share / doc / iipakeji / dhcp-doc, inikezela ngamaxwebhu amahle kakhulu -ngesiNgesi- malunga nale nkonzo.

Ifayile yoqwalaselo lomncedisi we-DHCP yile /etc/dhcpd.conf. Enye ifayile yoqwalaselo ye-DHCP yile / njl / sysconfig / dhcpd, kwaye kulapho uchaza khona ukuba yeyiphi imbonakalo yenethiwekhi -okanye yeyiphi inethiwekhi- iserver iya kuphendula.

Kwaye kuba sikumbindi we inkqubo, sinefayile /usr/lib/systemd/system/dhcpd.service.

Njengoko besithembisile ukungayisebenzisi ikhonsoli, imibuzo eshiyekileyo siyishiyele abathandi be ukutshatyalaliswa. Ukurekhoda Ikhonsoli ayilumi.

Iingcebiso

Nangona sithembisile ukungayisebenzisi ikhonsoli ngaphandle kwamaxesha ambalwa, sicebisa sebenzisa le miyalelo ilandelayo -njengengcambu-Umva kokuba inkonzo ye-DNS-DHCP inike idilesi enye ye-IP eguqukayo, ethatha ukuba bakugqibile ukufakela okupheleleyo kwezi nkonzo kwaye bakwixesha lokuhlola.

• ubume benkquboctl egama lenkonzo
• inkqubo ye-systemctl dhcpd.inkonzo
• isimo se-systemctl dhcp-server.service
• igama-ijenali /var/lib/igama/dyn/desdelinux.fanX.jnl

Kubagulayo «inguqulelo»Sicebisa ukuba ujonge-ngakumbi kwimihla yezihloko- kwiifayile:

• /etc/init.d/namagama
• /etc/init.d/nfs
• /etc/init.d/cifs
• /etc/init.d/rpmconfigcheck

kwaye ngokubanzi kuzo zonke iifayile kwifolda / njl njl.

Imibuzo ye-DNS eyenziwe ngabaxhasi beWindows

Kwakhona, nakwikhonsoli, sebenzisa njengomsebenzisi Ingcambu umyalelo:

• Ijenali-f

Thatha ixesha ukubukela abaxhasi beWindows ngokuqhubekayo bebuza i-DNS kwiindawo ezingaphandle kwe-Enterprise LAN. Kumzekelo ophuhliswe kweli nqaku, akukho mkhombisi-ndlela ubandakanyweyo- phambili, ngenjongo ecacileyo yokubonisa eli nqaku leenkqubo zokusebenza zeMicrosoft® yeWindows.

I-kernel efaka i-openSUSE ngemeko-bume ye-desktop

• Kukhetho lwethu ukusebenzisa isiseko esizinzileyo kangangoko kwi iiseva. Emva koko sicebisa Inkqubo yokukufezekisa.

Njengoko sikhetha ufakelo nge-LXDE desktop, vulaSUSE ukufakela ngokungagqibekanga i «i-kernel-desktop»Ilungiselelwe iidesktops.

Ukuba kamva sifuna ukusebenzisa ikernel esemgangathweni - i-kernel-defaultKuphela kufuneka siyifake nge-YaST Package Manager, qala inkqubo kwakhona, khetha «Izinketho eziphambili ze-openSUSE»Kwiskrini sasekhaya, kwaye ukhethe i i-kernel-default. Iinguqulelo zombini zeenkozo ziyafana.

Okokugqibela, kufuneka sisuse i-kernel-desktop ngomphathi wePakethe enye, ukusukela GRUB eyijonga isexesheni ngakumbi kune i-kernel-default, kwaye ukuba ikho, iya kuhlala ikhetha njengokhetho lokuqala. Kuba asithandi "ukungcolisa ujikeleze" i GRUBSikhetha ukususa i-desktop kernel, kuba asizukuphinda siyisebenzise.

QaphelaXa sisusa inkqubo kwi i-kernel-desktop, Zonke iinguqulelo ezifakiweyo zala kernel zisuswa ngokuzenzekelayo. Singayijonga kwakhona ngokukhetha "Iinketho eziphambili ze-OpenSUSE" kwiscreen sasekhaya.

Ingcebiso ebalulekileyo

• Sukungena kwi-adventure yokuphumeza inkonzo ye-DNS-DHCP ngayo nayiphi na inkqubo yokusebenza, ngaphandle kokuba kucace gca malunga neengcinga ezisisiseko zethiyori. Ngeenkonzo ezibaluleke kakhulu kwinethiwekhi njenge-DNS, iimpazamo zokuqonda zihlawula kakhulu kwimeko yemveliso.

Iinkonzo esinokuzikhubaza ukugcina izixhobo

Ngokusebenzisa imodyuli yeYaST «yoMphathi weNkonzo», xa ukufakela konke kugqityiwe kwaye ukugcina izixhobo zehardware, sinokukhubaza uthotho lweenkonzo, kule meko, ezingafunekiyo. Imizekelo:

• iikomityi: Inkqubo yokuprinta Inkqubo Eqhelekileyo Yoshicilelo lwe Unix
• I-lvm2-lvmetad: Imethadatha yedemon yolawulo loMqulu, kuphela xa singasebenzisi imiqulu esengqiqweni
• IModemManager: Umphathi weModem

Izifinyezo

Ndilutshaba lweenguqulelo, kulungile?

• GRUB: umyalelo wekhonsoli GRkwaye Uyazisa Bootloader
• NTP: NEnkqubo Tukuba lisetyenziswe Pinkqubo. Iprotocol esetyenziselwa ukungqinelanisa iiwotshi zeekhompyuter ezahlukeneyo kuthungelwano
• LAN: Inethiwekhi yendawo yengingqi - Lyendawo Aisizathu NEnkqubo
• SPF: «Inkqubo-sikhokelo yoMgaqo-nkqubo wabaThumeli«. Inkqubo ye-Anti SPAM evumela iserver yeposi ukuba iqinisekise ukuba imvelaphi ye-SMTP iyasebenza kwidilesi yokuthumela i-imeyile.
• TSIGUtyikityo lwentengiselwano- Tiransaction SIGindalo. Ichaziwe kwi RFC 2845 "Uqinisekiso lokuGqitywa kweNtengiselwano oluyimfihlo lwe-DNS«
• UUIDIsazisi esiBalaseleyo Isazisi esiManyeneyo ngokubanzi

Ukufakwa kwenyathelo ngenyathelo ngemifanekiso

Sibambe izikrini ezingama-71 zizonke ukubonisa inyathelo ngenyathelo ngokuthembeka ngangokunokwenzeka. Kuzo zonke izikrini zokufaka, i-OpenSUSE iququzelela umsebenzi wethu ngobukho beqhosha loNcedo- Nceda-ihlala ibekwe ezantsi ngasekhohlo.

Asiyi kunika nkcazo yesikrini ngasinye njengoko sithathwa njengesiqhelo. Njengoko ilizwi lihamba, «Ifoto ixabisa iwaka lamagama«.

Inkxaso yofakelo

Njengendlela yokufakela singasebenzisa umfanekiso weDVD njengaleyo sasiyisebenzisa ukwenza le post vulaSUSE-13.2-DVD-x86_64.iso, okanye uhlobo oluphambili. Ukuba izixhobo azinaso isidlali seDVD, okanye ukuba kulula ngakumbi kuthi ukuba sisebenzise imemori- umqhubi wepeni, sinokuyenza njengoko kubonisiwe kwinqaku Imemori ye-Autostart yokufaka i-Debian, i-CentOS, okanye i-OpenSUSE. Emva kokufaka inkqubo yokusebenza, ukulungiselela imemori onokuyifaka kunye nokusebenzisa inkqubo Umbhali wemifanekiso ngu Studio Studio.

Nangona kunjalo sicebisa test ekuqaleni kumatshini obonakalayo.

Ukufakwa, ukubhengezwa koovimba kunye nohlaziyo lwenkqubo

• Siyacebisa kwiseva ebonakalayo dns.desdelinux.umlandeli malunga nee-megabyte ezingama-768 ze-RAM kunye ne-20 GiB hard drive. Imemori kungenxa yokuba siza kuyenza kunye nomzobo womzobo.
• Kulo 05 umfanekisoNgokumalunga noqwalaselo lwenethiwekhi, asichazi naliphi na igama lomSebenzi kuba loo msebenzi ngulowo uzakufakwa. Ukuba ubhengeza enye iseva, iya kuthathelwa ingqalelo njengombuyisi- phambili, kwaye sifuna ukumilisela inkonzo ngale ndlela ukujonga ukunyanzelwa kweeNkqubo zeMicrosoft® zokuSebenza kukhangelo lwabo kwiisayithi ezikwi-Intanethi.
• Senza ubumbeko olwenziwe ngokobuqu lokwahlulahlula ngokokuthanda kwethu. Zive ukhululekile ukukhetha nokwenza oko ukhetha.
• 15 umfanekiso"Iinketho zeFstab". Sikhetha ukuba izahlulelo zibekwe ngokwe LABEL yazo - LABEL kwaye hayi ngokwe-UUID yayo, lukhetho olungagqibekanga. Emva kokufaka inkqubo funda imixholo yefayile / etc / fstab.
• Umncedisi we-NTP wokudibanisa ixesha ngokuchanekileyo yi-Host Hypervisor apho i-DNS-DHCP iseva isebenza khona.
• Ngendlela efanayo ukuba sikhethe i-LXDE desktop kuba iyazifanela iimfuno zethu, unokukhetha nayiphi na enye enikezelwa ngumfakeli we Vula.
• Igama lomsebenzisi okhethiweyo «buzz»Kukunika imbeko kulwabiwo lwethu esiluthandayo. Kodwa akukho nto. 😉
• Kulo 22 umfanekisoQaphela ukuba sivula izibuko le-SSH kwi-Firewall, kwaye sikwazi inkonzo ye-SSH.
• Nceda uthathe ixesha lakho xa ukhetha isoftware ukuyifaka. Umphathi obalaseleyo wePhakheji kufanelekile ukuhambahamba, njengoko kubonisiwe kwi 23 umfanekiso.
• Imifanekiso 35, 36, 37 no-38Emva kokufaka isistim yokusebenza kwiDVD okanye kwenye inkxaso, into yokuqala ekufuneka siyenzile kukwazisa oovimba bokuhlaziya inkqubo yethu, nokuba yeyasekhaya okanye ikwi-Intanethi. Kwimeko yethu, sikhubaza iindawo zokugcina ezahlukeneyo ezivulwaSUSE kwiiseva zayo ezikwi-Intanethi, kwaye songeza ezethu zaseKhaya. Ngokufanelekileyo, sinendawo yokugcina izinto database, pakisha umntu, Yongezelele, I-Oss y non-oss, Wanele umsebenzi ocetywayo, kwaye wasenza idesika ngawo wonke umthetho. 😉
• Imifanekiso 39 kunye ne40Iqala kwaye iphele ngohlaziyo loMlawuli wePakeji ye YaST. Kwiskrini sokuqala sishiya ukhetho olungagqibekanga. Siqakraze nje iqhosha Faka.
• Imifanekiso 41, 42 no-43Emva kokuba uMphathi wePakethe ezihlaziya yena, ivula isikrini kunye neephakeji ezivela kuyo yonke inkqubo eza kuhlaziywa. Kuyo, samkela ukhetho olungagqibekanga.
• 44 umfanekisoIsikrini esiqhelekileyo sokuphelisa iseshoni kwi-LXDE.

Ukufakwa kunye nokucwangciswa kwe-DNS kunye neenkonzo ze-DHCP kwi-OpenSUSE

• 47 umfanekisoMasingalibali ukuvelisa isitshixo semfihlo kuhlaziyo olunamandla lweendawo ze-DNS, eziyi desdelinux.umlandeli y 10.168.192.in- kongeza.arpa.
• 49 umfanekiso: Masiqwalasele ibhokisi ebonakala phezulu «Useto lommandla desdelinux.umlandeli«. Sivumela uhlaziyo olunamandla kunye notshintsho lommandla kwinethiwekhi yendawo akukho enye into.
• 53 umfanekiso: Ukuba sibonisa uluhlu «Tipo:»Kwiirekhodi ze-DNS, siya kufumanisa ukuba singabhengeza oku kulandelayo:
  • A: IPv4 igama lesizinda eliguquliweyo
  • ÅÅÅÅ : IPv6 igama lesizinda eliguquliweyo
  • CNAMEii-alias zegama lesizinda
  • NS: igama lomncedisi
  • MX: ukuhanjiswa kweposi
  • I-SRV: Irejista yenkonzo ye-SRV, esetyenziswa ngokubanzi kuLawulo olusebenzayo kunye nezinye iinkonzo
  • TXT: Ukubhaliswa kombhalo
  • SPFIsakhelo somgaqo-nkqubo wabathumeli
• 54 umfanekiso: ukuvulaSUSE kwenza ubomi bethu bube lula ngokungafuneki ukuba sibhengeze iirekhodi ze-DNS eziguqukayo. Sikwakuvumela ukuvuseleleka kwendawo eguqukayo eguqukayo kunye notshintsho lommandla wothungelwano lwasekhaya.
• 55 umfanekisoEmva kokugqiba ukucwangciswa kwe-DNS, akukho nto ibhetele kunokujonga ukusebenza kwayo kunye noqwalaselo oluchanekileyo, ngokusebenzisa imiyalelo embalwa yekhonsoli elula.
• 56 umfanekiso: Ngaphambi kokumisela i-DHCP, kufuneka sinikezele ujongano lwenethiwekhi esiza kulukhetha kuloo nkonzo- inokuba yindawo enye okanye nangaphezulu- iZone kwiFirewall. Sikhetha iZowuni yangaphakathi eyiLAN yethu.
• Imifanekiso 61 kunye ne62: Ukubhengeza i-DNS eguqukayo kufuneka siye kwi «Ingcali Ukuqwalaselwa kweServer DHCP«.
• 63 umfanekiso: Sikhetha i-subnet kwaye ucofe kwiqhosha «Advanced«, Kwaye ukhethe ukhetho«Ulawulo oluphambili lwe-TSIG«.
• 64 umfanekiso: Sikhetha iqhosha le-TSIG elenziwe ngexesha loqwalaselo lwe-DNS. Ukuba awuzange ukwenze oko, unokukwenza ngoku kwaye uphinde uqwalasele uhlaziyo olunamandla lweendawo ze-DNS ngokokhiye owenziwe apha.
• 65 umfanekiso: Sibuyela kwi-subnet ekhethiweyo kwaye ngoku sicofa kwiqhosha «Hlela«.
• 66 umfanekiso: Sikhetha Uluhlu lomdla wethu kwaye ucofe ku «I-DNS enamandla«.
• 68 umfanekiso: Siqala iqela opensuse-desktop.desdelinux.umlandeli leyo yinto yenqaku lethu elilandelayo, leyo siyifakayo kwaye siyilungiselele kunye dns.desdelinux.umlandeli iyasebenza, kwaye sijonga imiyalelo embalwa yekhonsoli elula, ukuba i-DHCP ihlaziye ngokuchanekileyo i-DNS, kunye nokuba iirekhodi zangaphambili kunye nezokuguqula i-DNS zaloo mthengi zibuyisiwe.

Sijoyine kwi-adventure elandelayo!