User Tools
настройка_сети_для_использования_kerberos
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
настройка_сети_для_использования_kerberos [2010/10/05 11:37] val |
— (current) | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Настройка сети для использования KERBEROS ====== | ||
| - | |||
| - | ==== Настройка DNS сервера ==== | ||
| - | |||
| - | [[Сервис DNS]] | ||
| - | |||
| - | === FreeBSD === | ||
| - | <code> | ||
| - | [server:~] # cat /etc/rc.conf | ||
| - | ... | ||
| - | named_enable="YES" | ||
| - | ... | ||
| - | |||
| - | [server:~] # cat /etc/namedb/named.conf | ||
| - | options { | ||
| - | directory "/etc/namedb"; | ||
| - | pid-file "/var/run/named/pid"; | ||
| - | }; | ||
| - | |||
| - | zone "." { | ||
| - | type hint; | ||
| - | file "named.root"; | ||
| - | }; | ||
| - | |||
| - | zone "corpX.un" { | ||
| - | type master; | ||
| - | file "master/corpX.un"; | ||
| - | }; | ||
| - | |||
| - | zone "X.168.192.IN-ADDR.ARPA" { | ||
| - | type master; | ||
| - | file "master/corpX.rev"; | ||
| - | }; | ||
| - | </code> | ||
| - | |||
| - | === Ubuntu === | ||
| - | <code> | ||
| - | root@server:~# apt-get install bind9 | ||
| - | |||
| - | root@server:~# cat /etc/bind/named.conf.local | ||
| - | zone "corpX.un" { | ||
| - | type master; | ||
| - | file "/var/cache/bind/corpX.un"; | ||
| - | }; | ||
| - | |||
| - | zone "X.168.192.in-addr.arpa" { | ||
| - | type master; | ||
| - | file "/var/cache/bind/corpX.rev"; | ||
| - | }; | ||
| - | </code> | ||
| - | |||
| - | ==== Описание файлов зон ==== | ||
| - | |||
| - | === FreeBSD === | ||
| - | <code> | ||
| - | server# cd /etc/namedb/master/ | ||
| - | </code> | ||
| - | |||
| - | === Ubuntu === | ||
| - | <code> | ||
| - | server# cd /var/cache/bind/ | ||
| - | </code> | ||
| - | |||
| - | === FreeBSD/Ubuntu === | ||
| - | <code> | ||
| - | server# cat corpX.un | ||
| - | </code><code> | ||
| - | $TTL 3h | ||
| - | @ SOA server root.server 1 1d 12h 1w 3h | ||
| - | NS server | ||
| - | server A 192.168.X.10 | ||
| - | gate A 192.168.X.1 | ||
| - | _kerberos._udp SRV 01 00 88 server | ||
| - | _kerberos._tcp SRV 01 00 88 server | ||
| - | _kpasswd._udp SRV 01 00 464 server | ||
| - | _kerberos-adm._tcp SRV 01 00 749 server | ||
| - | _kerberos TXT CORPX.UN | ||
| - | </code><code> | ||
| - | server# cat corpX.rev | ||
| - | </code><code> | ||
| - | $TTL 3h | ||
| - | @ SOA server.corpX.un. root.server.corpX.un. 1 1d 12h 1w 3h | ||
| - | NS server.corpX.un. | ||
| - | 10 PTR server.corpX.un. | ||
| - | 1 PTR gate.corpX.un. | ||
| - | </code><code> | ||
| - | |||
| - | server# named-checkconf -z | ||
| - | </code> | ||
| - | |||
| - | ==== Запуск сервиса ==== | ||
| - | |||
| - | === FreeBSD === | ||
| - | <code> | ||
| - | [server:~] # /etc/rc.d/named start | ||
| - | </code> | ||
| - | |||
| - | === Ubuntu === | ||
| - | <code> | ||
| - | root@server:~# /etc/init.d/bind9 restart | ||
| - | </code> | ||
| - | |||
| - | |||
| - | ==== Настройки DNS клиентов ==== | ||
| - | <code> | ||
| - | server# cat /etc/resolv.conf | ||
| - | domain corpX.un | ||
| - | nameserver 127.0.0.1 | ||
| - | |||
| - | gate# cat /etc/resolv.conf | ||
| - | domain corpX.un | ||
| - | nameserver 192.168.X.10 | ||
| - | |||
| - | client1# cat /etc/resolv.conf | ||
| - | domain corpX.un | ||
| - | nameserver 192.168.X.10 | ||
| - | </code> | ||
| - | |||
| - | ==== Проверки (на gate client1 и server) ==== | ||
| - | <code> | ||
| - | # host ya.ru | ||
| - | # host gate.corpX.un | ||
| - | # host server.corpX.un | ||
| - | # host 192.168.X.10 | ||
| - | # host 192.168.X.1 | ||
| - | # dig TXT _kerberos.corpX.un | ||
| - | # dig SRV _kerberos._tcp.corpX.un | ||
| - | </code> | ||
| - | |||
| - | ===== Cинхронизация времени (может потребоваться рестарт служб NIS, NFS и RPCBIND) ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | # cp /usr/share/zoneinfo/Europe/Moscow /etc/localtime | ||
| - | |||
| - | # ntpdate time.apple.com | ||
| - | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | # cp /usr/share/zoneinfo/Europe/Moscow /etc/localtime | ||
| - | |||
| - | # ntpdate time.apple.com | ||
| - | </code> | ||
настройка_сети_для_использования_kerberos.1286264266.txt.gz · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
