I-SWL Network (II): Ubuntu 12.04 ne-ClearOS. Ukuqinisekiswa kwe-LDAP

Sanibonani zihlobo !. Imayelana nokwenza inethiwekhi enamakhompyutha amaningi wedeskithophu ane-Ubuntu 12.04 Precise Pangolin, kanye neseva eguquguqukayo Sula i-ClearOS. Ngamanye amagama, inethiwekhi ene-Free Software kuphela.

Kubalulekile ukufunda ngaphambili:

  • Isingeniso kuNethiwekhi eneSoftware yamahhala (I): Ukwethulwa kwe-ClearOS

Sizobona:

Isibonelo senethiwekhi

  • Isilawuli Sesizinda, i-DNS, i-DHCP: I-ClearOS Enterprise 5.2sp1.
  • Igama Lesilawuli: centos
  • Igama Lesizinda: abangani.cu
  • Isilawuli IP: 10.10.10.60
  • ---------------
  • Uhlobo lobuntu: Ubuntu Desktop 12.04.2 Precise.
  • Igama leqembu: okuqondile
  • Ikheli le-IP: Kusetshenziswa i-DHCP

eqondile-dhcp-ip

Silungiselela Ubuntu bethu

Siguqula ifayela /etc/lightdm/lightdm.conf ukwamukela ukungena ngesandla, futhi sikushiya nokuqukethwe okulandelayo:

[SeatDefaults] greeter-session = united-greeter user-session = ubuntu greeter-show-manual-login = true greeter-fihla-users = true allow-guest = false

Ngemuva kokugcina izinguquko, siqala kabusha ifayela le- Khanyisa kukhonsoli efakwe ngu Ctrl+Alt+F1 futhi kuyo senza, ngemuva kokungena ngemvume, isevisi ye-sudo lightdm restart.

Silungiselela iklayenti le-LDAP

Kufanele sibe nedatha yeseva ye-OpenLDAP esiseduze, esiyithola kusixhumi esibonakalayo se-web ku «Uhla lwemibhalo »->« Isizinda ne-LDAP":

I-LDAP Base DN: dc = abangane, dc = cu LDAP Bind DN: cn = umphathi, cn = ngaphakathi, dc = abangani, dc = cu LDAP Bopha Iphasiwedi: kLGD + Mj + ZTWzkD8W

Sifaka amaphakheji adingekayo:

sudo apt-get ukufaka i-ldap-auth-client ngomunwe

Ngesikhathi senqubo yokufaka bazosibuza imibuzo eminingana, okumele siyiphendule kahle. Izimpendulo zingaba kulesi sibonelo:

Isihlonzi se-LDAP Uniform Resource Identifier: ldap: //10.10.10.60 Igama elidumile lesisekelo sosesho: dc = friends, dc = cu LDAP version to use: 3 Make local root Database admin: Yebo Ingabe i-database ye-LDAP idinga ukungena ngemvume? Ayikho i-akhawunti ye-LDAP yezimpande: cn = umphathi, cn = ngaphakathi, dc = abangani, dc = cu Iphasiwedi ye-akhawunti ye-LDAP: kLGD + Mj + ZTWzkD8W

Uma sinamaphutha kuzimpendulo ezedlule, siyakhipha:

i-dpkg-reconfigure ldap-auth-config
## Izimpendulo
Isihlonzi se-LDAP Server Uniform Resource Identifier: ldap: //10.10.10.60 Igama elidumile lesisekelo sosesho: dc = friends, dc = cu LDAP version to use: 3 Make local root Database admin: Yebo Ingabe i-database ye-LDAP idinga ukungena ngemvume? Ayikho i-akhawunti ye-LDAP yezimpande: cn = umphathi, cn = ngaphakathi, dc = abangani, dc = cu Iphasiwedi ye-akhawunti ye-LDAP: kLGD + Mj + ZTWzkD8W I-crypt yendawo ongayisebenzisa lapho ushintsha amaphasiwedi: md5

Siguqula ifayili /etc/nsswitch.conf, bese silishiya nokuqukethwe okulandelayo:

# /etc/nsswitch.conf # # Isibonelo sokucushwa kokusebenza kwe-GNU Name Service Shintsha. # Uma unamaphakeji athi `glibc-doc-reference 'and` info', zama: #` info libc "Name Service switch" 'ukuthola ulwazi ngaleli fayela. passwd:         i-compat ldap
iqembu:          i-compat ldap
isithunzi:         i-compat

izingosi: amafayela mdns4_minimal [NOTFOUND = buyela] dns mdns4 amanethiwekhi: amafayela ama-protocols: db amafayela services: db files ethers: db files rpc: db files netgroup: nis

Siguqula ifayili le /etc/pam.d/common-session ukuze lizenzele ngokuzenzakalela amafolda womsebenzisi lapho lingena ngemvume, uma lingekho:

[----]
isikhathi sidingeka pam_mkhomedir.so skel = / etc / skel / umask = 0022

### Umugqa ongenhla kufanele ufakwe NGAPHAMBI
# nanka amamojula ephakeji ngalinye (ibhulokhi "Eyinhloko") [----]

Sisebenzisa ikhonsoli, Ukuhlola nje, pam-auth-update:

eqondile-pam-auth-update

Siyahlola:

: ~ $ ukunyakaza komunwe
Login: strides Name: Strides El Rey Directory: / home / strides Shell: / bin / bash Akukaze kungenwe ngemvume. Ayikho imeyili. Alikho icebo. : ~ $ Sudo getent passwd strides
Iziteleka: x: 1006: 63000: Iziteleka u-El Rey: / ikhaya / amagxathu: / bin / bash: ~ $ Sudo getent passwd legolas
i-legolas: x: 1004: 63000: I-Legolas I-Elf: / ikhaya / i-legolas: / bin / bash

Siqala kabusha Ubuntu bethu ngoba izinguquko ezenziwe zibalulekile:

ukuqala kabusha kwe-sudo

Ngemuva kokuqalisa kabusha, singangena ngemvume nganoma imuphi umsebenzisi obhaliswe ku-ClearOS OpenLDAP. Kungathatha isikhathi ukuphuma lapho siyiqeda okokuqala.

Sincoma bese kuthi lokhu okulandelayo kwenziwe:

  • Yenza abasebenzisi bangaphandle babe yilungu lamaqembu afanayo adalwe umsebenzisi wasendaweni ngesikhathi sokufakwa kwe-Ubuntu yethu.
  • Usebenzisa umyalo ngithanda, kwenziwa njenge- izimpande, unikeze izimvume zokusebenza ezidingekayo kubasebenzisi bangaphandle.
  • Dala ibhukumaka enekheli https://centos.amigos.cu:81/?user kuFirefox, ukufinyelela ikhasi lakho ku-ClearOS, futhi ukwazi, ngaphezu kokushintsha iphasiwedi yethu, shintsha noma ungeze idatha kuphrofayela yethu yomsebenzisi.
  • Faka i-OpenSSH-Server ukuze ukwazi ukufinyelela Ubuntu bethu kusuka kwenye ikhompyutha.

Imibuzo embalwa yokugcina kubasebenzisi be-Ubuntu:

  • Kungani ifakwa ngokuzenzakalela nomsebenzisi wezimpande ngaphandle kwephasiwedi?
  • Kungani enguqulweni yakho yeServer, ngokuzenzakalela, ngingasebenzisa ukufaneleka noma ukuthola kahle, ngenkathi ngokuzenzakalela kunguqulo yakho yeDeskithophu, ngingasebenzisa kuphela ukutholwa, futhi uma ngifuna ukusebenzisa ukufaneleka kufanele ngiyifake?
  • Kungani i-AppArmor ifakwa ngokuzenzakalela? I-Red Hat neziphuma zikuvumela ukuthi ukhethe i-Selinux enikwe amandla noma cha.
  • Kungani ungasebenzisi ifayili / etc / inittab elamukelwa kabanzi ngokunye ukusatshalaliswa kwe-GNU / Linux futhi likhululekile lapho sidinga ukusebenzisa i-Remote Access Server?

Futhi umsebenzi uphelile namuhla, Abangane !!!

ipayipi


Amazwana ayi-16, shiya okwakho

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.

  1.   O_Pixote_O kusho

    Ungenze ngaba nelukuluku lokuzama, kuze kube manje ngizame iZentyal kuphela.

    I-PS: Izixhumanisi "esizobona:" azisebenzi noma azisebenzi kimi.

  2.   UFederico Antonio Valdés Toujague kusho

    Ngokusobala, le bhulogi ayivakashelwa kakhulu abasebenzisi be-Ubuntu. 🙂

    1.    eliotime3000 kusho

      Yebo, abasebenzisi be-Ubuntu iningi labasebenzisi beWindows. yingakho ukungabikho okukhulu.

      Futhi ngendlela, i-athikili enhle.

      1.    UFederico Antonio Valdés Toujague kusho

        Siyabonga ngenkampani, u-Elio !!!. Iqiniso ukuthi ngaleli zinga lokufunda, ngicabanga ukuthi ngeke ngiphinde ngizame ukuphinda okuhlangenwe nakho. Futhi qaphela ukuthi ngiyaphinda ukuthi ngibheka Ubuntu njengobulungile. Sizobona.

  3.   Mario kusho

    Ngizophendula njengomsebenzisi we-debian kanye nobuntu ngoba bobabili babelana ngokufana okuthile ngezansi kakhulu:
    1. impande ikhubaziwe (uma ungenayo iphasiwedi), ungayisebenzisa nge-passwd, noma ubhale iSudo bash, nokuyinto efanayo. Mhlawumbe ikhutshaziwe ngezizathu ezilula. Lapho impande ikhona, ukuphepha kuyathuthukiswa, ngokungalungi (futhi pro ngasikhathi sinye) ukuthi amafayili ayo akhiqiziwe angawo. Iya uchaze i-newbie chmod (nezinombolo), chgrp futhi chown ukuze abasebenzisi abajwayelekile babelane ngamafayela nezimpande. Kungakho iSudo sisetshenziselwa ukuvimbela ukukhungatheka komsebenzisi nokucindezeleka kwe-sysadmin.
    Noma kunjalo, ekufakweni kwe-netinstall kwe-debian njenge-ubuntu ongayikhetha, uyafuna ukudala umsebenzisi wezimpande? ngemiphumela efanayo (i-Sudo ayisebenzi, hlela / njll / ama-sudoers).
    2. ngesizathu esifanayo sokuthi i-synaptic noma i-traceroute ayisabandakanywa. Abanye bathi ngenxa yokushoda kwendawo (ngaleso sikhathi yayisatshalaliswa kuma-700mb cds), abanye bathi bambalwa abantu (ideskithophu) abayisebenzisayo. Ngihlala ngikhumbula ukufaka konke lokhu okuthathu.
    3. I-SElinux ne-Apparmor zivunyelwe noma zafakwa ngokuzenzakalela kuma-distros afana ne-fedora, centos kanye ne-ubuntu. Ukubuyela kuphoyinti 1, ukuzisebenzisa kungaba yikhanda lomsebenzisi noma i-sysadmin, kepha kuthola ukuphepha. Ku-Ubuntu Apparmor kuvunyelwe impela. Kepha ngesikhathi engizama ngaso i-SElinux kuCentos, kwaba nzima kakhulu kwabanye abasebenzisi ukufaka nokuphatha amafayela nge-samba.
    4. ISysvinit isivele ithathelwa indawo ngama-distros amaningana, futhi kwaphela iminyaka embalwa. UDebian noGentoo bayabagcina, kepha i-RHEL, iFedora (systemd) noma i-ubuntu (phezulu) ayinayo. Ku- http://0pointer.de/blog/projects/why.html Ungabona ezinye izindlela nokuthi kungani ushintsho. Ukuhlelwa kahle kanye ne-udev kubhekele iqiniso lokuthi manje i-eth0 ibizwa ngento efana ne-enp2s1 (angiyithandi), imiqondo emidala iyashiywa.

    1.    UFederico Antonio Valdés Toujague kusho

      UMario: Imibono efana neyakho yilokho esikuthemba futhi iyilokho okudingekayo ukucacisa abaningi. Ungicacisele imininingwane ethile. Lapho ngisebenzise Ubuntu -little, ngaphandle kuka-8.04- ngihlala ngifaka iphasiwedi empandeni; Ngifaka ukufaneleka nokunye, kanye ne-Synaptic kuzinguqulo zakamuva. Futhi kuyiqiniso ukuthi imiqondo emidala iyashiywa. Isimanjemanje. Ngiyabonga kakhulu ngokuphawula !!!

      1.    Mario kusho

        akunankinga, yileyo mibuzo ehlakaniphile ekwenza useshe okuningi kwimemori ukuthola imiqondo ebengiyikhohliwe (gentoo), imikhonzo!

        1.    eliotime3000 kusho

          Ngiyathanda ukusebenzisa i-Debian kanye ne-Slackware ne-Arch. Noma kufanele ngivume ukuthi i-SystemD iyisimangaliso ekuqaleni.

  4.   Euphoria kusho

    Ngiyabonga kakhulu ngama-athikili, angijwayele ukuphawula yize ngifunde cishe zonke izindatshana futhi lokhu kubonakala kuthakazelisa kakhulu, uma ngiqala ukucushwa okunje ekhaya :)

    Ukubingelela nokubonga futhi.

    1.    UFederico A. Valdés Toujague kusho

      Ngiyabonga ngokuphawula !!!.

  5.   manueresi kusho

    ngokungangabazeki, izinhlelo zokusebenza zisebenza kwiklayenti noma kuseva ye-LDAP. Ngicabanga ukuthi kuklayenti, uma kungenjalo, kuzodingeka ngenze ngokweqile iseva ... Akungabazeki okuncane

    1.    UFederico A. Valdés Toujague kusho

      Funda izici eziyinhloko ze-ClearOS ku-athikili edlule. Akuhloselwe ukuba kube iseva yohlelo lokusebenza yakudala. Esikhundleni salokho, Ingqalasizinda kanye Nemisebenzi Eyisisekelo Yenethiwekhi. Vele ungakha uhlelo lwewebhu olususelwa ku-Apache ongayifaka. Ngokwami ​​angiluncomi lolo hlobo lwesixazululo. Ngincamela ukuba neseva eyodwa yohlelo lokusebenza noma ngaphezulu.

      Imvamisa, izinhlelo zokusebenza zisebenza ohlangothini lwekhasimende.

      Angazi ukuthi ngabe izinhlobo zakamuva ze-ClearOS zine-server ye-Thin Client. Kubonakala kimi ukuthi akuyona ifilosofi yakhe.

      1.    manueresi kusho

        Kulungile, ngiyizamile eminyakeni eminingi edlule lapho bekuyiClarkconnect ... futhi ngicabanga ukuthi njengoba usho kungaphezulu kwenethiwekhi kanye neseva yengqalasizinda. Ngizoqhubeka okwamanje neZentyal yami ... futhi ngizoqhubeka nokufuna iseva yohlelo lokusebenza.

      2.    martin kusho

        I-athikili yakho iyathakazelisa kakhulu ngingumsebenzisi we-Ubuntu kepha muva nje ngiyaqala ukubona okuthile kwezobuchwepheshe njengamanje nginomshini omdala othile futhi bengicabanga ngento enjengaleyo ukuthola inzuzo yangempela kuyo, ngiyabonga ukuthi ungisizile kulokho okufanele ngikufune

        1.    UFederico A. Valdés Toujague kusho

          Inhloso yethu enkulu ukusiza ekusetshenzisweni kwe-SWL. Ngethemba futhi uthole okuthile okusetshenziswayo komshini wakudala kulokhu okuthunyelwe.

  6.   Euphoria kusho

    Umbuzo, ngabe unakho okokufundisa kokuthi ungasisebenzisa kanjani isizinda esithengiwe (kulokhu ku-bluehost) nge-IP enamandla ukuyenza ifake okufana neseva yakho?

    Phendula ngokucaphuna