際際滷

際際滷Share a Scribd company logo
Trang ch畛 | Khoahoc.com.vn油| Bongda.com.vn | Hotjobs.com.vn | Gamevui.com | Download.com.vn - T狸m ki畉m v t畉i ph畉n m畛m mi畛n ph鱈 | G畛i bi vi畉t | Li棚n
H畛
TRANG CH畛
TIN TRONG N働畛C
TIN QU畛C T畉
KI畉N TH畛C C油B畉N
HH WINDOWS
HH UNIX-LINUX
PH畉N C畛NG
MY TNH XCH TAY
MAIL SERVER
DATABASE
MR. MICROSOFT
M畉NG LAN, WAN
B畉O M畉T
VIRUS - SPYWARE
HACKER
CISCO LAB
MICROSOFT LAB
E-BOOKS
DOWNLOADS
TH畛μTHU畉T
TIN H畛C VN PHNG
畛油H畛A MY TNH
DOANH NGHI畛P CNTT
H畛I - P
VI畉T BI
油
QuanTriMang.comnmlkji
Search
NH TI TR畛
TRANG油CH畛 ::>> HH油UNIX足LINUX
Thi畉t油l畉p油h畛油th畛ng油m畉ng油Ubuntu油qu畉n油l箪油t畉p油trung油v畛i油LDAP -
21/3/2008 12h:10
1. Gi畛i thi畛u
Trong t動董ng lai kh担ng xa, ph畉n m畛m m達 ngu畛n m畛油v mi畛n ph鱈 r畉t c坦 th畛油s畉縮tr畛油thnh m畛t l畛a ch畛n t畉t
y畉u 畛i v畛i c叩c t畛油ch畛c/doanh nghi畛p. V畛i 動u i畛m m達 ngu畛n m畛, d畛油dng m畛油r畛ng, ho畉t 畛ng 畛n
畛nh l挑nh v畛c 畛ng d畛ng ny ang ngy cng ch畛ng t畛瓿t鱈nh kh畉Ld畛ng v hi畛u qu畉Lc畛a n坦.
H畉u h畉t c叩c t畛油ch畛c/doanh nghi畛p 畛u c畉n 畉n m畛t h畛油th畛ng m畉ng n畛i b畛油畛油h畛油tr畛Lx畛油l箪 c担ng vi畛c
th動畛ng ngy, i畛u hnh ho畉t 畛ng, ph畛i h畛p lm vi畛c
Bi vi畉t s畉縮h動畛ng d畉n c叩c b動畛c x但y d畛ng h畛油th畛ng m畉ng Ubuntu qu畉n l箪 t畉p trung v畛i LDAP, m畛t gi畉i
ph叩p hon ton c坦 th畛油thay th畉震h畛油th畛ng m畉ng Microsoft Windows v畛i Active Directory.
2. Y棚u c畉u h畛油th畛ng
Ch炭ng ta s畛油d畛ng 03 m叩y t鱈nh v畛i th担ng tin nh動油sau:
q M叩y t鱈nh Ubuntu server:
r 畛a ch畛油IP: 192.168.10.2
r DNS server: 192.168.10.2
r T棚n m叩y: ubuntu-server
q M叩y t鱈nh Ubuntu desktop 01:
r 畛a ch畛油IP: 192.168.10.12
r DNS server: 192.168.10.2
r T棚n m叩y: ubuntu-desktop01
q M叩y t鱈nh Ubuntu desktop 02:
r 畛a ch畛油IP: 192.168.10.14
r DNS server: 192.168.10.2
r T棚n m叩y: ubuntu-desktop02
3. C畉u h狸nh h畛油th畛ng
3.1. C畉u h狸nh ubuntu-server
Tr棚n m叩y ubuntu-server, ch炭ng ta th畛c hi畛n:
q Ci 畉t v c畉u h狸nh DNS server v畛i ph畉n m畛m BIND.
r Domain name: bits.com.vn
r B畛油sung 02 Host (A) record t動董ng 畛ng v畛i 02 m叩y tr畉m Ubuntu vo DNS server:
ubuntu-desktop01.bits.com.vn 192.168.10.12
ubuntu-desktop02.bits.com.vn 192.168.10.14
q Ci 畉t v c畉u h狸nh LDAP server v畛i ph畉n m畛m OpenLDAP.
r B畛油sung 02 account t動董ng 畛ng v畛i 02 m叩y tr畉m Ubuntu vo LDAP server:
NH TI TR畛
http://www.quantrimang.com/view.asp?Cat_ID=5&Cat_Sub_ID=0&news_id=44600
Account 01 - tthai:***
Account 02 - ctbach:***
C叩c b動畛c th畛c hi畛n l畉n l動畛t nh動油sau:
Ci 畉t v c畉u h狸nh DNS server v畛i ph畉n m畛m BIND
1. Ci 畉t Ubuntu server, phi棚n b畉n 7.10
Trong qu叩 tr狸nh ci 畉t, thi畉t l畉p c叩c th担ng s畛油sau:
q 畛a ch畛油IP: 192.168.10.2
q DNS server: 192.168.10.2
q Netmask: 255.255.255.0
q T棚n m叩y: ubuntu-server
q Ph畉n m畛m: ch畛n c叩c g坦i ci 畉t cho DNS server
2. C畉u h狸nh DNS server
Ph畉n m畛m d湛ng 畛油x但y d畛ng DNS server tr棚n Ubuntu l BIND (Berkeley Internet Name Domain).
Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a BIND 畛油c畉u h狸nh DNS server. C叩c b動畛c th畛c hi畛n nh動油sau:
q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a BIND:
tthai@ubuntu-server:~$ sudo -i
[sudo] password for tthai:
root@ubuntu-server:~#
root@ubuntu-server:~# mkdir /backup
root@ubuntu-server:~# cp -R /etc/bind /backup
q C畉u h狸nh BIND:
Hi畛u ch畛nh file c畉u h狸nh ch鱈nh c畛a BIND - /etc/bind/named.conf - b畉ng c叩ch b畛油sung c叩c d嘆ng sau
vo cu畛i file:
root@ubuntu-server:~# vim /etc/bind/named.conf
...
// The zone definition
zone bits.com.vn {
type master;
file /etc/bind/zones/bits.com.vn.db;
};
// The zone definition for reverse DNS
zone 10.168.192.in-addr.arpa {
type master;
file /etc/bind/zones/rev.10.168.192.in-addr.arpa;
};
Hi畛u ch畛nh file /etc/bind/named.conf.options 畛油chuy畛n (forward) nh畛ng y棚u c畉u m DNS server
ny kh担ng ph但n gi畉i 動畛c:
root@ubuntu-server:~# vim /etc/bind/named.conf.options
options {
...
forwarders {
10.238.200.1;
10.238.200.8;
10.238.200.12;
};
};
T畉o c叩c file zone:
r /etc/bind/zones/bits.com.vn.db: d湛ng cho vi畛c l動u tr畛油c叩c c畉p IP address/machine name 畛油
DNS server ny ph但n gi畉i.
r /etc/bind/zones/rev.10.168.192.in-addr.arpa: d湛ng cho m畛c 鱈ch ph但n gi畉i ng動畛c.
root@ubuntu-server:~# mkdir /etc/bind/zones
root@ubuntu-server:~# vim /etc/bind/zones/bits.com.vn.db
$TTL 604800
@ IN SOA ubuntu-server.bits.com.vn. admin.bits.com.vn.
(
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800) ; Negative Cache TTL
;
; Replace the following line as necessary:
; ns1 = DNS server name
; mail = Mail server name
; bits.com.vn. IN MX 10 mail.bits.com.vn.
@ IN NS ubuntu-server.bits.com.vn.
@ IN A 192.168.10.2
ubuntu-server.bits.com.vn. IN A 192.168.10.2
root@ubuntu-server:~# vim /etc/bind/zones/rev.10.168.192.in-
addr.arpa
; The number before IN PTR ubuntu-server.bits.com.vn is
; the machine address of the DNS server. In this case, its
; 2, as my IP address is 192.168.10.2.
$TTL 604800
@ IN SOA ubuntu-server.bits.com.vn. admin.bits.com.vn.
(
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800) ; Negative Cache TTL
;
@ IN NS ubuntu-server.bits.com.vn.
2 IN PTR ubuntu-server.bits.com.vn.
Hi畛u ch畛nh file /etc/resolv.conf 畛油li畛t k棚 danh s叩ch c叩c DNS server trong m畉ng c畛a m狸nh:
root@ubuntu-server:~# vim /etc/resolv.conf
search bits.com.vn
nameserver 192.168.10.2
q Kh畛i 畛ng l畉i d畛ch v畛ヌBIND:
root@ubuntu-server:~# /etc/init.d/bind9 restart
q Ki畛m tra DNS server v畛i ti畛n 鱈ch dig (domain information groper). dig l ti畛n 鱈ch truy v畉n d畛油li畛u
tr棚n DNS server (DNS lookup utility). Ti畛n 鱈ch ny s畉縮t狸m ki畉m tr棚n DNS server v hi畛n th畛油th担ng
tin do DNS server tr畉Lv畛.
root@ubuntu-server:~# dig bits.com.vn
B棚n c畉nh 坦, ch炭ng ta c滴ng c畉n s畛油d畛ng ti畛n 鱈ch ping 畛油ki畛m tra:
root@ubuntu-server:~# ping bits.com.vn
root@ubuntu-server:~# ping ubuntu-server
root@ubuntu-server:~# ping ubuntu-server.bits.com.vn
Ci 畉t v c畉u h狸nh LDAP server v畛i ph畉n m畛m OpenLDAP
1. Ci 畉t OpenLDAP
Ph畉n m畛m d湛ng 畛油x但y d畛ng LDAP server tr棚n Ubuntu l OpenLDAP. Ch炭ng ta s畉縮ci 畉t c叩c ph畉n
m畛m v ti畛n 鱈ch c畉n thi畉t 畛油thi畉t l畉p LDAP server, bao g畛m:
q slapd (OpenLDAP Server - OpenLDAP standalone server): ph畉n m畛m ny 動畛c d湛ng 畛油t畉o
ra m畛t standalone directory service v bao g畛m c畉Lslurpd replication server.
q ldap-utils (OpenLDAP Utilities): g坦i ny ch畛a c叩c ti畛n 鱈ch d湛ng 畛油truy c畉p LDAP server c畛c
b畛油ho畉c t畛油xa (local or remote). ldap-utils c滴ng ch畛a t畉t c畉Lc叩c ch動董ng tr狸nh c畉n thi畉t (required
client programs) 畛油truy c畉p c叩c LDAP server.
q db4.2-util (Berkeley v4.2 Database Utility): g坦i ny ch畛a c叩c c担ng c畛ヌ(tools) 動畛c d湛ng 畛油
thao t叩c (manipulating) v畛i c叩c c董油s畛油d畛油li畛u c坦 畛nh d畉ng l Berkeley v4.2 Database.
C叩c b動畛c th畛c hi畛n nh動油sau:
q C畉p nh畉t danh m畛c ph畉n m畛m (package list) tr棚n Ubuntu v ci 畉t OpenLDAP:
tthai@ubuntu-server:~$ sudo -i
[sudo] password for tthai:
root@ubuntu-server:~#
root@ubuntu-server:~# aptitude update
root@ubuntu-server:~# apt-get install slapd
root@ubuntu-server:~# apt-get install ldap-utils
root@ubuntu-server:~# apt-get install db4.2-util
L動u 箪: khi ci 畉t c叩c g坦i slapd, ldap-utils, db4.2-util, h畛油th畛ng c畉n s畛油d畛ng 挑a CD ch畛a Ubuntu
server 7.10.
2. C畉u h狸nh LDAP server
Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a OpenLDAP 畛油c畉u h狸nh LDAP server. C叩c b動畛c th畛c hi畛n nh動油
sau:
q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a OpenLDAP:
root@ubuntu-server:~# cp -R /etc/ldap /backup
q S畛油d畛ng ti畛n 鱈ch slappasswd 畛油m達 h坦a m畉t kh畉u admin v l動u chu畛i k箪 t畛洩m達 h坦a vo cu畛i
file /etc/ldap/slapd.conf:
root@ubuntu-server:~# slappasswd >> /etc/ldap/slapd.conf
New password:
Re-enter new password:
q C畉u h狸nh OpenLDAP:
Hi畛u ch畛nh file /etc/ldap/slapd.conf (file c畉u h狸nh ch鱈nh c畛a OpenLDAP) nh動油sau:
root@ubuntu-server:~# vim /etc/ldap/slapd.conf
suffix dc=bits,dc=com,dc=vn
rootdn cn=admin,dc=bits,dc=com,dc=vn
# password ny do ti畛n 鱈ch ldappasswd t畉o ra.
rootpw {SSHA}AwiGYep3HmBbL5rQka4Bchd4g8ofhnXC
directory /var/lib/ldap
# Set change password permission
access to attrs=userPassword,shadowLastChange
by dn=cn=admin,dc=bits,dc=com,dc=vn write
by anonymous auth
by self write
by * none
# Ensure read access to the base for things like
# supportedSASLMechanisms.
access to dn.base= by * read
# The admin dn has full write access, everyone else can
# read everything.
access to *
by dn=cn=admin,dc=bits,dc=com,dc=vn write
by * read
L動u 箪: gi畛油l畉i nh畛ng thi畉t l畉p m畉c 畛nh c畛a file /etc/ldap/slapd.conf kh担ng 動畛c 畛油c畉p 畛油tr棚n.
q Kh畛i ch畉y standalone LDAP server:
root@ubuntu-server:~# /etc/init.d/slapd start
Starting OpenLDAP: slapd
畉n b動畛c ny, LDAP server 達 s畉n sng. 畛油b畉t 畉u 動a server ny vo ho畉t 畛ng, ch炭ng ta c畉n
b畛油sung c叩c entry (th畛c th畛油- user, group, ou) kh畛i t畉o tr棚n server.
q B畛油sung c叩c initial entry (th畛c th畛油kh畛i t畉o):
LDAP server c坦 th畛油b畛油sung c叩c entry b畉ng c但u l畛nh ho畉c t畛油c叩c file c坦 畛nh d畉ng ldif (ldap
directory interchange format). D動畛i 但y, ch炭ng ta t畉o ra file init.ldif v l動u vo th動油m畛c /etc/ldap.
root@ubuntu-server:~# vim /etc/ldap/init.ldif
dn: dc=bits,dc=com,dc=vn
objectClass: dcObject
objectClass: organizationalUnit
dc: bits
ou: bits.com.vn
dn: cn=admin,dc=bits,dc=com,dc=vn
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword: {SSHA}AwiGYep3HmBbL5rQka4Bchd4g8ofhnXC
dn: ou=users,dc=bits,dc=com,dc=vn
objectClass: organizationalUnit
ou: users
dn: ou=groups,dc=bits,dc=com,dc=vn
objectClass: organizationalUnit
ou: groups
dn: cn=ktm,ou=groups,dc=bits,dc=com,dc=vn
objectClass: posixGroup
cn: ktm
gidNumber: 5000
L動u 箪: UID/GID trong bi vi畉t ny 動畛c thi畉t l畉p theo qui 畛nh sau:
r System account: UID < 500
r Real People in LDAP: 499 < UID < 10.000
r Local users, groups (not in LDAP): UID > 10.000
Th畛c hi畛n c叩c b動畛c nh動油sau 畛油b畛油sung entry vo LDAP server:
D畛ng d畛ch v畛ヌLDAP:
root@ubuntu-server:~# /etc/init.d/slapd stop
X坦a n畛i dung 達 t畛洩畛ng t畉o ra trong khi ci 畉t OpenLDAP:
root@ubuntu-server:~# rm -rf /var/lib/ldap/*
B畛油sung entry m畛i:
root@ubuntu-server:~# slapadd -l init.ldif
Hi畛u ch畛nh quy畛n tr棚n c董油s畛油d畛油li畛u:
root@ubuntu-server:~# chown -R openldap:openldap /var/lib/ldap
Kh畛i ch畉y d畛ch v畛ヌLDAP:
root@ubuntu-server:~# /etc/init.d/slapd start
q Ki畛m tra c叩c entry v畛a b畛油sung:
Ch炭ng ta c坦 th畛油ki畛m tra c叩c entry v畛a m畛i b畛油sung vo b畉ng c叩ch s畛油d畛ng ti畛n 鱈ch ldapsearch:
root@ubuntu-server:~# ldapsearch xLLL b dc=bits,dc=com,dc=vn
Trong 坦:
r -x: kh担ng s畛油d畛ng ph動董ng th畛c th畉m 畛nh SASL (m畉c 畛nh).
r -LLL: v担 hi畛u ho叩 vi畛c in th担ng tin LDIF.
r -b: t狸m ki畉m c董油b畉n.
N畉u c叩c thao t叩c b畛油sung entry vo LDAP server 動畛c th畛c hi畛n m畛t c叩ch ch鱈nh x叩c, ti畛n 鱈ch
ldapsearch s畉縮hi畛n th畛油th担ng tin v畛油c叩c entry ny t動董ng t畛洩nh動油n畛i dung 達 t畉o trong
file /etc/init.ldif.
V畛i c叩c b動畛c c畉u h狸nh nh動油tr棚n, ch炭ng ta 達 hon thnh thao t叩c ci 畉t v c畉u h狸nh LDAP server tr棚n
m叩y t鱈nh ubuntu-server. Ti畉p theo, ch炭ng ta ti畉n hnh c叩c thao t叩c ci 畉t v c畉u h狸nh c叩c h畛油th畛ng m叩y
tr畉m Ubuntu.
3.2. C畉u h狸nh ubuntu-desktop01
畛油m叩y tr畉m ng nh畉p v畛i ti kho畉n 動畛c t畉o ra tr棚n LDAP server, ch炭ng ta c畉n th畛c hi畛n c叩c b動畛c
c畉u h狸nh tr棚n c叩c file PAM (Pluggable Authentication Modules) v NSSWITCH (Name Service Switch)
trong Ubuntu. C叩c b動畛c th畛c hi畛n nh動油sau:
1. Ci 畉t LDAP client
C叩c ph畉n m畛m v ti畛n 鱈ch c畉n ph畉i ci 畉t tr棚n m叩y tr畉m Ubuntu l:
q libpam-ldap: th動油vi畛n d湛ng 畛油cho ph辿p x叩c th畛c (allow for authentication) qua LDAP.
q libnss-ldap: th動油vi畛n d湛ng 畛油cho ph辿p truy v畉n th担ng tin v畛油c叩c session (allow session
information) qua LDAP.
q nss-updatedb: ti畛n 鱈ch d湛ng 畛油t畉o ra m畛t c董油s畛油d畛油li畛u ti kho畉n c畛c b畛油(local database of the
user names). C董油s畛油d畛油li畛u ny 動畛c d湛ng 畛油kh畉c ph畛c tr動畛ng h畛p m畉ng b畛油gi畉m t畛c 畛油truy c畉p
(network slowdown), ho畉c b畛油ng動ng ho畉t 畛ng v狸 s畛洩c畛油(outage).
C叩c b動畛c th畛c hi畛n nh動油sau:
q C畉p nh畉t danh m畛c ph畉n m畛m (package list) tr棚n Ubuntu v ci 畉t libpam-ldap, libnss-ldap v
nss-updatedb:
ctbach@ubuntu-desktop01:~$ sudo -i
[sudo] password for ctbach:
root@ubuntu-desktop01:~#
root@ubuntu-desktop01:~# aptitude update
root@ubuntu-desktop01:~# apt-get install libpam-ldap
Khi ci 畉t th動油vi畛n ny, ch炭ng ta c畉n cung c畉p c叩c th担ng s畛:
r LDAP Server Uniform Resource Identifier: ldap://192.168.10.2
r Distinguished name of the search base: dc=bits,dc=com,dc=vn
r LDAP version to use: 3
r LDAP account for root: cn=admin,dc=bits,dc=com,dc=vn
r LDAP root account password: *
root@ubuntu-desktop01:~# apt-get install libnss-ldap
Khi ci 畉t th動油vi畛n ny, ch炭ng ta c畉n cung c畉p c叩c th担ng s畛:
q LDAP account for root: cn=admin,dc=bits,dc=com,dc=vn
q LDAP root account password: *
Ch炭 箪: m畛t h畛p tho畉i xu畉t hi畛n, th担ng b叩o r畉ng h畛油th畛ng kh担ng th畛油qu畉n l箪 file nsswitch.conf m畛t
c叩ch t畛洩畛ng. Ch炭ng ta nh畉n n炭t OK v s畉縮thay 畛i c畉u h狸nh c畛a file ny 畛油ph畉n sau.
root@ubuntu-desktop01:~# apt-get install nss-updatedb
2. C畉u h狸nh LDAP client
Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a PAM v NSSWITCH 畛油c畉u h狸nh LDAP client. C叩c b動畛c th畛c
hi畛n nh動油sau:
q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a PAM v NSSWITCH:
root@ubuntu-desktop01:~# mkdir /backup
root@ubuntu-desktop01:~# cp /etc/nsswitch.conf /backup
root@ubuntu-desktop01:~# cp -R /etc/pam /backup
q C畉u h狸nh NSSWITCH:
Hi畛u ch畛nh file /etc/nsswitch.conf (file c畉u h狸nh ch鱈nh c畛a NSSWITCH). File ny x叩c 畛nh c叩c
name service m h畛油th畛ng s畛油d畛ng 畛油truy v畉n th担ng tin (search for information). File ny c滴ng ch畛油
ra th畛油th畛洩c畛a c叩c name service 畛油h畛油th畛ng 動u ti棚n t狸m ki畉m theo m畛t th畛油t畛洩達 動畛c l畉p ra.
root@ubuntu-desktop01:~# vim /etc/nsswitch.conf
passwd: files ldap
group: files ldap
Ki畛m tra c畉u h狸nh v畛a thi畉t l畉p b畉ng c叩ch th畛c hi畛n 02 l畛nh:
root@ubuntu-desktop01:~# getent passwd
root@ubuntu-desktop01:~# getent group
02 l畛nh tr棚n s畉縮li畛t k棚 m畉t kh畉u v c叩c nh坦m tr棚n Ubuntu desktop v tr棚n LDAP server.
q C畉u h狸nh PAM:
C坦 04 file c畉u h狸nh c畛a PAM li棚n quan 畉n LDAP:
r /etc/pam.d/common-account
r /etc/pam.d/common-auth
r /etc/pam.d/common-password
r /etc/pam.d/common-session
Hi畛u ch畛nh c叩c file ny theo c叩c b動畛c nh動油sau:
r root@ubuntu-desktop01:~# cd /etc/pam.d
r root@ubuntu-desktop01:/etc/pam.d# vim ./common-account
account sufficient pam_ldap.so
account required pam_unix.so
r root@ubuntu-desktop01:/etc/pam.d# vim ./common-auth
auth sufficient pam_ldap.so
auth required pam_unix.so nullok_secure use_first_pass
r root@ubuntu-desktop01:/etc/pam.d# vim ./common-password
password sufficient pam_ldap.so
password required pam_unix.so nullok obscure min=4 max=8 md5
r root@ubuntu-desktop01:/etc/pam.d# vim ./common-session
session required pam_unix.so
session required pam_mkhomedir.so skel=/etc/skel/
session optional pam_ldap.so
session optional pam_foreground.so
q T畉o th動油m畛c d湛ng 畛油l動u tr畛油c叩c th動油m畛c home t動董ng 畛ng v畛i m畛i ti kho畉n ng nh畉p vo m叩y
tr畉m:
root@ubuntu-desktop01:~# mkdir /home/users
root@ubuntu-desktop01:~# mkdir /home/users/ktm
Ch炭 箪: n畉u kh担ng th畛c hi畛n b動畛c ny sau khi 達 t畉o ti kho畉n tr棚n LDAP, ch炭ng ta s畉縮g畉p th担ng
b叩o l畛i trong qu叩 tr狸nh ng nh畉p vo m叩y tr畉m Ubuntu.
r Authentication failed. N畉u xem trong file /var/log/auth.log, ch炭ng ta s畉縮th畉y nguy棚n nh但n
c畛a l畛i: Unable to create directory /home/users/ktm/tthai; couldnt open session for tthai.
3. T畉o ti kho畉n ng nh畉p v畛i phpLDAPadmin
畛油董n gi畉n trong vi畛c qu畉n l箪 OpenLDAP server, ch炭ng ta s畛油d畛ng phpLDAPadmin. 但y l 畛ng d畛ng
web 動畛c s畛油d畛ng 畛油thao t叩c v畛i OpenLDAP server.
C叩c b動畛c sau 但y s畉縮gi炭p ch炭ng ta ci 畉t v s畛油d畛ng phpLDAPadmin tr棚n m叩y tr畉m Ubuntu 畛油qu畉n l箪
LDAP server.
Ci 畉t phpLDAPadmin v畛i l畛nh:
root@ubuntu-desktop01:~# apt-get install phpldapadmin
C畉u h狸nh phpLDAPadmin:
root@ubuntu-desktop01:~# cp -
R /usr/share/phpldapadmin /var/www/myphpldapadmin
root@ubuntu-desktop01:~#
cp /etc/phpldapadmin/config.php /etc/phpldapadmin/first.config.php
root@ubuntu-desktop01:~# rm /var/www/myphpldapadmin/config/config.php
root@ubuntu-desktop01:~# ln 
s /etc/phpldapadmin/first.config.php /var/www/myphpldapadmin/config/config.php
root@ubuntu-desktop01:~# chmod +r /etc/phpldapadmin/first.config.php
Truy c畉p phpLDAPadmin:
q T畛油c畛a s畛油tr狸nh duy畛t, nh畉p 畛a ch畛油http://localhost/myphpldapadmin.
Nh畉n vo n炭t Login 畛油panel b棚n tr叩i, nh畉p th担ng tin ti kho畉n root:
q Login DN: cn=admin,dc=bits,dc=com,dc=vn
q Password: *
Nh畉n n炭t Authenticate 畛油ng nh畉p.
N畉u ng nh畉p vo LDAP server thnh c担ng, h畛油th畛ng s畉縮th担ng b叩o:
T畉o ti kho畉n tr棚n phpLDAPadmin:
q K鱈ch vo m畛c ou=users, ch畛n Create new entry here, ch畛n User Account. Nh畉n n炭t Process>>.
q i畛n th担ng tin li棚n quan 畉n ti kho畉n v nh畉n n炭t Process>>.
q Xem l畉i th担ng tin. Sau khi 達 ch畉c ch畉n, nh畉n n炭t Create Object.
q Sau khi t畉o xong, mn h狸nh hi畛n th畛油th担ng tin c畛a ti kho畉n v畛a t畉o s畉縮xu畉t hi畛n.
q Nh畉n n炭t Add new attribute 畛油th棚m thu畛c t鱈nh LoginShell.
Nh畉n n炭t Add 畛油hon thnh thao t叩c t畉o v hi畛u ch畛nh ti kho畉n. 畉n b動畛c ny, ch炭ng ta nh畉n n炭t
Logout v b畉t 畉u ki畛m tra kh畉Lnng ho畉t 畛ng c畛a h畛油th畛ng LDAP tr棚n Ubuntu.
3.3. C畉u h狸nh ubuntu-desktop02
Th畛c hi畛n c叩c b動畛c t動董ng t畛洩nh動油v畛i m叩y t鱈nh ubuntu-desktop01.
4. Ki畛m tra h畛油th畛ng
畛油ki畛m tra h畛油th畛ng sau khi hon thnh c叩c b動畛c c畉u h狸nh, t畛油m叩y tr畉m ubuntu, ch炭ng ta ng nh畉p
b畉ng ti kho畉n 動畛c t畉o ra tr棚n LDAP server. Trong tr動畛ng h畛p c畛a m狸nh, tr棚n m叩y ubuntu-desktop01,
sau khi h畛油th畛ng kh畛i 畛ng, ch炭ng ta nh畉p:
q Username: tthai
q Password: *
H畛油th畛ng s畉縮th担ng b叩o: Creating directory /home/users/ktm/tthai, ch炭ng ta nh畉n n炭t OK 畛油hon
thnh thao t叩c ng nh畉p.
K畉t lu畉n
S畛油d畛ng LDAP 畛油x但y d畛ng m畉ng n畛i b畛油theo m担 h狸nh client/server, v畛i c叩c m叩y t鱈nh Ubuntu l m畛t gi畉i
ph叩p qu畉n l箪 t畉p trung hi畛u qu畉Lv ti畉t ki畛m chi ph鱈. V畛i c叩c b動畛c ci 畉t 董n gi畉n, c畉u h狸nh d畛油dng,
vi畛c thi畉t k畉震h畛油th畛ng m畉ng n畛i b畛油v畛i LDAP v Ubuntu l hon ton kh畉Lthi.
Ph畛ヌl畛c 1  M畛t s畛油thao t叩c h畛u 鱈ch khi c畉u h狸nh LDAP tr棚n Ubuntu
1. C畉u h狸nh m叩y t鱈nh Ubuntu 畛油cho ph辿p account tr棚n LDAP server c坦 th畛油chuy畛n sang
(sudo) account qu畉n tr畛油h畛油th畛ng root
畛油cho ph辿p account tthai tr棚n LDAP server c坦 th畛油chuy畛n sang account root, tr棚n m叩y tr畉m Ubuntu,
ch炭ng ta th畛c hi畛n nh動油sau:
M畛油file /etc/group, b畛油sung user01 vo d嘆ng admin
# gedit /etc/group
T狸m 畉n d嘆ng admin:x:117:ctbach,administrator
B畛油sung user01 vo cu畛i d嘆ng. Sau khi b畛油sung, ch炭ng ta nh畉n 動畛c k畉t qu畉Lt動董ng t畛洩nh動油sau:
admin:x:117:ctbach,administrator,tthai
Ti畉p 畉n, c畉n c畉p nh畉t password LDAP server 畛油h畛油th畛ng Ubuntu c坦 th畛油hi畛u 動畛c password
ny:
root@ubuntu-server:~# passwd tthai
Enter login (LDAP) password: *
New password: *
Re-enter new password: *
2. S畛油d畛ng 挑a USB tr棚n Ubuntu server
畛油s畛油d畛ng 動畛c c叩c 挑a USB tr棚n Ubuntu server (giao di畛n d嘆ng l畛nh), ch炭ng ta ph畉i th畛c hi畛n thao t叩c
mount 挑a USB vo Ubuntu server.
q 畛i v畛i 挑a USB th担ng th動畛ng (kh担ng c坦 MP3):
root@ubuntu-server:~# mkdir /usb-disk
root@ubuntu-server:~# mount -t vfat /dev/sdb1 /usb-disk
q 畛i v畛i 挑a USB c坦 t鱈nh nng nghe nh畉c MP3:
root@ubuntu-server:~# mkdir /usbmp3-disk
root@ubuntu-server:~# mount -t vfat /dev/sdb /usbmp3-disk
q Khi 達 s畛油d畛ng xong, ch炭ng ta n棚n ng畉t k畉t n畛i gi畛a Ubuntu server v 挑a USB m畛t c叩ch an ton
b畉ng c叩ch:
root@ubuntu-server:~# umount /usb-disk
root@ubuntu-server:~# umount /usbmp3-disk
3. Xem l畛i ng nh畉p tr棚n m叩y tr畉m Ubuntu
畛油xem 動畛c c叩c l畛i ng nh畉p tr棚n m叩y tr畉m Ubuntu nh畉m gi炭p ch炭ng ta x叩c 畛nh nguy棚n nh但n ph叩t
sinh l畛i trong qu叩 tr狸nh Ubuntu ng nh畉p qua LDAP, ch炭ng ta m畛油file /var/log/auth.log
Ti li畛u tham kh畉o
1. OpenLDAP Server
https://help.ubuntu.com/community/OpenLDAPServer
2. LDAP Client Authentication
https://help.ubuntu.com/community/LDAPClientAuthentication
3. OpenLDAP Client Configuration Guide
http://ubuntuforums.org/showthread.php?t=597056
4. Ubuntu User Document (good)
https://help.ubuntu.com/community/UserDocumentation
5. DNS Server Setup Using Bind in Ubuntu
http://www.ubuntugeek.com/dns足server足setup足using足bind足in足ubuntu.html
6. BIND9 Administrator Reference Manual
http://www.isc.org/index.pl?/sw/bind/index.php
7. Installing phpLDAPadmin
https://help.ubuntu.com/community/InstallingphpLDAPadmin
8. An Introduction to LDAP
http://www.ldapman.org/articles/intro_to_ldap.html
9. Introduction to LDAP (good)
http://quark.humbug.org.uau/publications/ldap/ldap_tut.html
10. LDAP mini HOWTO (good)
http://www.grennan.com/ldap_HOWTO.html
11. OpenLDAP 2.2 Administrators Guide
http://www.bind9.net/manual/openldap/2.2/index.html
12. OpenLDAP Everywhere
http://www.linuxjournal.com/article/6266
13. LDAP Attributes
http://www.computerperformance.co.uk/Logon/LDAP_attributes_active_directory.htm
14. Berkeley v4.2 Database Utility
http://packages.ubuntu.com/feisty/utils/db4.2.足util
15. Berkeley Database
http://packages.ubuntu.com/edgy/doc/db3足doc
16. Berkeley Database
http://directory.fsf.org/project/BerkeleyDB/
17. Performing Backup and Recovery with Berkeley DB
http://packages.ubuntu.com/edgy/doc/db3足doc
18. Chapter 19. I/O Redirection (Advanced Bash  Scripting Guide)
http://tldp.org/LDP/abs/html/io足redirection.html
19. /etc/nsswitch.conf -- Name Service Switch File
http://www.softpanorama.org/Solaris/Reference/etc/nsswitch.shtml
-------------------------------------------------
T担 Thanh H畉i - Email: tthai@huesoft.com.vn
Ph嘆ng K畛耕thu畉t M畉ng Trung t但m C担ng ngh畛油Th担ng tin Th畛a Thi棚n Hu畉震06 L棚 L畛i, TP.
Hu畉
C叩c bi m畛i nh畉t:
M達 t畉n c担ng Excel xu畉t hi畛n tr棚n Internet - 26/3
Yahoo gia nh畉p n畛n t畉ng Google OpenSocial - 26/3
Ch鱈nh ph畛油tng c動畛ng lm vi畛c qua m畉ng - 26/3
達 c畉p gi畉y ch畛ng nh畉n 畉u t動油cho Samsung - 26/3
Indonesia: Xem web "sex" s畉縮b畛油ph畉t 100.000USD v 6 nm t湛 - 26/3
Microsoft c坦 th畛油n但ng m畛c gi叩 mua l畉i Yahoo - 26/3
Intel ra m畉t d嘆ng chip m叩y ch畛油m畛i - 26/3
Hanel tr畛油thnh OEM c畛a Intel - 26/3
Th叩ng 6, Dell ra m畉t laptop t鱈ch h畛p GPS - 26/3
Th叩ng 4, Windows XP SP3 s畉縮ra m畉t - 26/3
Chu畛t "m畉nh" cho Netbook - 26/3
Google thnh 'g達 kh畛ng l畛' nh畛油n ngon - 26/3
Netbook c畛a Intel 動畛c ti畉t l畛油v畛i t棚n 2go PC - 25/3
Microsoft h畛油tr畛LVista SP1 mi畛n ph鱈 100% - 25/3
Th但m nh畉p ch畛n th叩c lo畉n c畛a gi畛i tr畉嗣nghi畛n net - 25/3
Le l坦i 叩nh s叩ng cho qu畉ng c叩o di 畛ng - 25/3
X但y d畛ng c叩c 畛ng d畛ng b畉o m畉t: nh畉t qu叩n b畉n ghi - 25/3
Nh畛ng clip xu畉t s畉c nh畉t 2007 c畛a YouTube - 25/3
"Kh畉c tinh" c畛a EEE PC xu畉t hi畛n - 25/3
畉n 畛: BlackBerry 畛i m畉t v畛i l畛nh c畉m - 25/3
Xem ton b畛油畛油畛油畛油>>
Search
Webnmlkj www.quantrimang.comnmlkji
油In油bi油ny | Trao油畛i |
G畛i油cho油b畉n油b竪
Mobile Phones | PrePaid Credit Cards | Debt Help | Credit Card | Cheap Loan | Vietnam Travel
C叩c油bi油c湛ng油ch畛油畛油ny:
K畉t油n畛i油Linux油t畛i油m畛t油m畉ng油kh担ng油d但y 3/13/2008 9:09:00 AM
Beryl油足油L畛p油v畛瓿ho油nho叩ng油c畛a油Linux 3/5/2008 9:06:00 AM
Th畛油thu畉t油ci油offline油c叩c油g坦i油ph畉n油m畛m油trong油Ubuntu 2/2/2008 4:47:00 PM
Ci油畉t油v油c畉u油h狸nh油i畛u油khi畛n油truy油c畉p油m畉ng油v畛i油PacketFence 1/4/2008 10:11:00 AM
Tng油b畉o油m畉t油cho油Linux:油H畉n油ch畉震c叩c油d畛ch油v畛ヌkh担ng油c畉n油thi畉t 12/28/2007 11:17:00 AM
Ngn油ch畉n油truy油c畉p油m畉ng油tr叩i油ph辿p油v畛i油PacketFence 12/24/2007 1:43:00 PM
ch油 o油Konect油 m油vi c油v i油 c油 ng油 ng油Google 12/13/2007 9:09:00 AM
T狸m油hi畛u油v畛油ho叩n油畛i油kh担ng油gian油b畛油nh畛油Linux 12/10/2007 6:53:00 AM
Func油動a油qu畉n油l箪油m畉ng油vo油i畛u油khi畛n油c畛a油qu畉n油tr畛油h畛油th畛ng 12/6/2007 10:02:00 AM
B畉n油ci油畉t油tr畛c油ti畉p油openSUSE油動畛c油ra油m畉t 11/29/2007 11:44:00 AM
C畛ng油畛ng油ngu畛n油m畛油cho油坦n油Fedora油8 11/17/2007 9:51:00 AM
Fedora油8油油Video油h動畛ng油d畉n油ci油畉t 11/14/2007 10:28:00 AM
B畉o油m畉t油truy油c畉p油t畛油xa油畛i油v畛i油c叩c油m叩y油tr畉m 10/9/2007 9:42:00 AM
3油b動畛c油ci油畉t油Ubuntu油t畛油Windows 7/30/2007 8:06:00 AM
H動畛ng油d畉n油ci油畉t油LAMP油tr棚n油Ubuntu油cho油ng動畛i油m畛i油b畉t油畉u 7/14/2007 1:06:00 PM
T畛ng油b動畛c油ci油畉t油Fedora油7 6/23/2007 3:07:00 PM
Ubuntu油7.10油c坦油g狸油m畛i? 6/21/2007 4:58:00 PM
M畛t油s畛油b畉n油Linux油d畛油s畛油d畛ng 5/14/2007 9:29:00 AM
S畛油d畛ng油畛油c畛ng油ngoi油USB油cho油sao油l動u油d畛洩ph嘆ng油trong油Linux 5/4/2007 4:27:00 PM
Ci油畉t油v油c畉u油h狸nh油Spamd 4/17/2007 3:27:00 PM
Xem ton b畛油畛油畛油畛油>>
Tr畛油v畛油畉u油trang油
Trang ch畛 | Khoahoc.com.vn油| Bongda.com.vn | Hotjobs.com.vn | Gamevui.com | Ecodebank.com | G畛i bi vi畉t | Li棚n H畛
Copyright 息 2003-2007 QuanTriMang.com. All rights reverved
Designed and Developed by QuanTriMang.com

More Related Content

What's hot (19)

B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.comB畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
Brand Xanh
Dns lam
Dns lamDns lam
Dns lam
Lam Dinh
Dsd05 02a-xml-rpca
Dsd05 02a-xml-rpcaDsd05 02a-xml-rpca
Dsd05 02a-xml-rpca
Vn o Ti畉n
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application ServerPh動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
GMO-Z.com Vietnam Lab Center
Lab 9 dns server
Lab 9 dns serverLab 9 dns server
Lab 9 dns server
tinhban269
Xd email server zimbra
Xd email server zimbraXd email server zimbra
Xd email server zimbra
laonap166
Ftp clientserver
Ftp clientserverFtp clientserver
Ftp clientserver
phamngocha19971
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNHCHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
laonap166
Lab security+baiso8 netcat
Lab security+baiso8 netcatLab security+baiso8 netcat
Lab security+baiso8 netcat
xeroxk
18 dns server
18  dns server18  dns server
18 dns server
C董n Gi坦
Chapter 3 cac phuong phap cap nhat thong tin tren web
Chapter 3 cac phuong phap cap nhat thong tin tren webChapter 3 cac phuong phap cap nhat thong tin tren web
Chapter 3 cac phuong phap cap nhat thong tin tren web
xuandiencntt
Linux+04
Linux+04Linux+04
Linux+04
Duong Hieu
Cai dat squid proxy trong suot
Cai dat  squid proxy trong suotCai dat  squid proxy trong suot
Cai dat squid proxy trong suot
THT
Di味ch vu味 squid server
Di味ch vu味 squid serverDi味ch vu味 squid server
Di味ch vu味 squid server
Tan Phat Phung
Fire wall
Fire wallFire wall
Fire wall
ICTU
D畛ch v畛 DNS
D畛ch v畛 DNSD畛ch v畛 DNS
D畛ch v畛 DNS
Hanh Nguy畛n Vn
Apache http server
Apache http serverApache http server
Apache http server
Hai Dinh Tuan
B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.comB畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
B畉ng tra c畛u c叩c l畛nh c董 b畉n c畛a unix v linux s動u t畉m b畛i www.vilinux.com
Brand Xanh
Dns lam
Dns lamDns lam
Dns lam
Lam Dinh
Dsd05 02a-xml-rpca
Dsd05 02a-xml-rpcaDsd05 02a-xml-rpca
Dsd05 02a-xml-rpca
Vn o Ti畉n
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application ServerPh動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
Ph動董ng ph叩p v chi畉n l動畛c 畛i 畛ng t畉i trong Web Application Server
GMO-Z.com Vietnam Lab Center
Lab 9 dns server
Lab 9 dns serverLab 9 dns server
Lab 9 dns server
tinhban269
Xd email server zimbra
Xd email server zimbraXd email server zimbra
Xd email server zimbra
laonap166
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNHCHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
CHIA S畉 TI NGUYN TRONG LAN TRN NHI畛U H畛 I畛U HNH
laonap166
Lab security+baiso8 netcat
Lab security+baiso8 netcatLab security+baiso8 netcat
Lab security+baiso8 netcat
xeroxk
18 dns server
18  dns server18  dns server
18 dns server
C董n Gi坦
Chapter 3 cac phuong phap cap nhat thong tin tren web
Chapter 3 cac phuong phap cap nhat thong tin tren webChapter 3 cac phuong phap cap nhat thong tin tren web
Chapter 3 cac phuong phap cap nhat thong tin tren web
xuandiencntt
Cai dat squid proxy trong suot
Cai dat  squid proxy trong suotCai dat  squid proxy trong suot
Cai dat squid proxy trong suot
THT
Di味ch vu味 squid server
Di味ch vu味 squid serverDi味ch vu味 squid server
Di味ch vu味 squid server
Tan Phat Phung
Fire wall
Fire wallFire wall
Fire wall
ICTU
Apache http server
Apache http serverApache http server
Apache http server
Hai Dinh Tuan

Viewers also liked (7)

Media evaluation part 7
Media evaluation part 7Media evaluation part 7
Media evaluation part 7
ML1421
Different magazines in the uk
Different magazines in the ukDifferent magazines in the uk
Different magazines in the uk
ML1421
My pictures
My picturesMy pictures
My pictures
ML1421
Media evaluation part 5
Media evaluation part 5Media evaluation part 5
Media evaluation part 5
ML1421
Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Thu畉t ng畛 qu畉n tr畛 nh但n s畛Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Son Giap
Front cover analysis
Front cover analysisFront cover analysis
Front cover analysis
ML1421
Semiotic analysis
Semiotic analysisSemiotic analysis
Semiotic analysis
ML1421
Media evaluation part 7
Media evaluation part 7Media evaluation part 7
Media evaluation part 7
ML1421
Different magazines in the uk
Different magazines in the ukDifferent magazines in the uk
Different magazines in the uk
ML1421
My pictures
My picturesMy pictures
My pictures
ML1421
Media evaluation part 5
Media evaluation part 5Media evaluation part 5
Media evaluation part 5
ML1421
Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Thu畉t ng畛 qu畉n tr畛 nh但n s畛Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Thu畉t ng畛 qu畉n tr畛 nh但n s畛
Son Giap
Front cover analysis
Front cover analysisFront cover analysis
Front cover analysis
ML1421
Semiotic analysis
Semiotic analysisSemiotic analysis
Semiotic analysis
ML1421

Similar to Linux thietlaphethongmangubunt-45879 (20)

Qu畉n tr畛 m畉ng linux full
Qu畉n tr畛 m畉ng linux fullQu畉n tr畛 m畉ng linux full
Qu畉n tr畛 m畉ng linux full
jackjohn45
T畛 H畛C LPI 2
T畛 H畛C LPI 2T畛 H畛C LPI 2
T畛 H畛C LPI 2
Hong 畉t
B叩o C叩o Cu畛i K畛
B叩o C叩o Cu畛i K畛B叩o C叩o Cu畛i K畛
B叩o C叩o Cu畛i K畛
Ly ND
Linux Network Administration (LPI-1,LPI-2)
Linux Network Administration (LPI-1,LPI-2)Linux Network Administration (LPI-1,LPI-2)
Linux Network Administration (LPI-1,LPI-2)
laonap166
際際滷 B叩o C叩o Cu畛i K畛
際際滷 B叩o C叩o Cu畛i K畛際際滷 B叩o C叩o Cu畛i K畛
際際滷 B叩o C叩o Cu畛i K畛
Ly ND
B叩o c叩o th畛c t畉p tu畉n - VPS
B叩o c叩o th畛c t畉p tu畉n - VPSB叩o c叩o th畛c t畉p tu畉n - VPS
B叩o c叩o th畛c t畉p tu畉n - VPS
Qu但n Qu畉t Mo
Lab 8 dhcp server
Lab 8 dhcp server Lab 8 dhcp server
Lab 8 dhcp server
tinhban269
Dhcp nat out ubuntu
Dhcp nat out ubuntuDhcp nat out ubuntu
Dhcp nat out ubuntu
karickhuy
Bao cao th動味c t但味p tr但n tro味ng thai
Bao cao th動味c t但味p   tr但n tro味ng thaiBao cao th動味c t但味p   tr但n tro味ng thai
Bao cao th動味c t但味p tr但n tro味ng thai
tran thai
Openvpn nh坦m-dbrr-update2
Openvpn nh坦m-dbrr-update2Openvpn nh坦m-dbrr-update2
Openvpn nh坦m-dbrr-update2
TngH36
B叩o C叩o Th畛c T畉p PowerPoint
B叩o C叩o Th畛c T畉p PowerPointB叩o C叩o Th畛c T畉p PowerPoint
B叩o C叩o Th畛c T畉p PowerPoint
Kh担i Nguy畛n
Tailieu
TailieuTailieu
Tailieu
Hong Nguy畛n
Nh坦m 9 (1).docx
Nh坦m 9 (1).docxNh坦m 9 (1).docx
Nh坦m 9 (1).docx
KhoaPhanMinh
Bao cao thuc tap vps
Bao cao thuc tap vpsBao cao thuc tap vps
Bao cao thuc tap vps
TranQuangChien
Basic cau hinh ip tren solaris
Basic cau hinh ip tren solarisBasic cau hinh ip tren solaris
Basic cau hinh ip tren solaris
Bui Van Cuong
Basic cau hinh ip tren solaris
Basic cau hinh ip tren solarisBasic cau hinh ip tren solaris
Basic cau hinh ip tren solaris
Bui Van Cuong
Cac lenh co_ban_linux
Cac lenh co_ban_linuxCac lenh co_ban_linux
Cac lenh co_ban_linux
gofriv
Xd email server zimbra
Xd email server zimbraXd email server zimbra
Xd email server zimbra
laonap166
Ci 畉t web server (linux)-Pham Hoang Phuc-Athena
Ci 畉t web server (linux)-Pham Hoang Phuc-AthenaCi 畉t web server (linux)-Pham Hoang Phuc-Athena
Ci 畉t web server (linux)-Pham Hoang Phuc-Athena
Hong Ph炭c Ph畉m
Tom tat lenh ubuntu
Tom tat lenh ubuntuTom tat lenh ubuntu
Tom tat lenh ubuntu
nghoanganh
Qu畉n tr畛 m畉ng linux full
Qu畉n tr畛 m畉ng linux fullQu畉n tr畛 m畉ng linux full
Qu畉n tr畛 m畉ng linux full
jackjohn45
T畛 H畛C LPI 2
T畛 H畛C LPI 2T畛 H畛C LPI 2
T畛 H畛C LPI 2
Hong 畉t
B叩o C叩o Cu畛i K畛
B叩o C叩o Cu畛i K畛B叩o C叩o Cu畛i K畛
B叩o C叩o Cu畛i K畛
Ly ND
Linux Network Administration (LPI-1,LPI-2)
Linux Network Administration (LPI-1,LPI-2)Linux Network Administration (LPI-1,LPI-2)
Linux Network Administration (LPI-1,LPI-2)
laonap166
際際滷 B叩o C叩o Cu畛i K畛
際際滷 B叩o C叩o Cu畛i K畛際際滷 B叩o C叩o Cu畛i K畛
際際滷 B叩o C叩o Cu畛i K畛
Ly ND
B叩o c叩o th畛c t畉p tu畉n - VPS
B叩o c叩o th畛c t畉p tu畉n - VPSB叩o c叩o th畛c t畉p tu畉n - VPS
B叩o c叩o th畛c t畉p tu畉n - VPS
Qu但n Qu畉t Mo
Lab 8 dhcp server
Lab 8 dhcp server Lab 8 dhcp server
Lab 8 dhcp server
tinhban269
Dhcp nat out ubuntu
Dhcp nat out ubuntuDhcp nat out ubuntu
Dhcp nat out ubuntu
karickhuy
Bao cao th動味c t但味p tr但n tro味ng thai
Bao cao th動味c t但味p   tr但n tro味ng thaiBao cao th動味c t但味p   tr但n tro味ng thai
Bao cao th動味c t但味p tr但n tro味ng thai
tran thai
Openvpn nh坦m-dbrr-update2
Openvpn nh坦m-dbrr-update2Openvpn nh坦m-dbrr-update2
Openvpn nh坦m-dbrr-update2
TngH36
B叩o C叩o Th畛c T畉p PowerPoint
B叩o C叩o Th畛c T畉p PowerPointB叩o C叩o Th畛c T畉p PowerPoint
B叩o C叩o Th畛c T畉p PowerPoint
Kh担i Nguy畛n
Nh坦m 9 (1).docx
Nh坦m 9 (1).docxNh坦m 9 (1).docx
Nh坦m 9 (1).docx
KhoaPhanMinh
Bao cao thuc tap vps
Bao cao thuc tap vpsBao cao thuc tap vps
Bao cao thuc tap vps
TranQuangChien
Basic cau hinh ip tren solaris
Basic cau hinh ip tren solarisBasic cau hinh ip tren solaris
Basic cau hinh ip tren solaris
Bui Van Cuong
Basic cau hinh ip tren solaris
Basic cau hinh ip tren solarisBasic cau hinh ip tren solaris
Basic cau hinh ip tren solaris
Bui Van Cuong
Cac lenh co_ban_linux
Cac lenh co_ban_linuxCac lenh co_ban_linux
Cac lenh co_ban_linux
gofriv
Xd email server zimbra
Xd email server zimbraXd email server zimbra
Xd email server zimbra
laonap166
Ci 畉t web server (linux)-Pham Hoang Phuc-Athena
Ci 畉t web server (linux)-Pham Hoang Phuc-AthenaCi 畉t web server (linux)-Pham Hoang Phuc-Athena
Ci 畉t web server (linux)-Pham Hoang Phuc-Athena
Hong Ph炭c Ph畉m
Tom tat lenh ubuntu
Tom tat lenh ubuntuTom tat lenh ubuntu
Tom tat lenh ubuntu
nghoanganh

Linux thietlaphethongmangubunt-45879

  • 1. Trang ch畛 | Khoahoc.com.vn油| Bongda.com.vn | Hotjobs.com.vn | Gamevui.com | Download.com.vn - T狸m ki畉m v t畉i ph畉n m畛m mi畛n ph鱈 | G畛i bi vi畉t | Li棚n H畛 TRANG CH畛 TIN TRONG N働畛C TIN QU畛C T畉 KI畉N TH畛C C油B畉N HH WINDOWS HH UNIX-LINUX PH畉N C畛NG MY TNH XCH TAY MAIL SERVER DATABASE MR. MICROSOFT M畉NG LAN, WAN B畉O M畉T VIRUS - SPYWARE HACKER CISCO LAB MICROSOFT LAB E-BOOKS DOWNLOADS TH畛μTHU畉T TIN H畛C VN PHNG 畛油H畛A MY TNH DOANH NGHI畛P CNTT H畛I - P VI畉T BI 油 QuanTriMang.comnmlkji Search NH TI TR畛 TRANG油CH畛 ::>> HH油UNIX足LINUX Thi畉t油l畉p油h畛油th畛ng油m畉ng油Ubuntu油qu畉n油l箪油t畉p油trung油v畛i油LDAP - 21/3/2008 12h:10 1. Gi畛i thi畛u Trong t動董ng lai kh担ng xa, ph畉n m畛m m達 ngu畛n m畛油v mi畛n ph鱈 r畉t c坦 th畛油s畉縮tr畛油thnh m畛t l畛a ch畛n t畉t y畉u 畛i v畛i c叩c t畛油ch畛c/doanh nghi畛p. V畛i 動u i畛m m達 ngu畛n m畛, d畛油dng m畛油r畛ng, ho畉t 畛ng 畛n 畛nh l挑nh v畛c 畛ng d畛ng ny ang ngy cng ch畛ng t畛瓿t鱈nh kh畉Ld畛ng v hi畛u qu畉Lc畛a n坦. H畉u h畉t c叩c t畛油ch畛c/doanh nghi畛p 畛u c畉n 畉n m畛t h畛油th畛ng m畉ng n畛i b畛油畛油h畛油tr畛Lx畛油l箪 c担ng vi畛c th動畛ng ngy, i畛u hnh ho畉t 畛ng, ph畛i h畛p lm vi畛c Bi vi畉t s畉縮h動畛ng d畉n c叩c b動畛c x但y d畛ng h畛油th畛ng m畉ng Ubuntu qu畉n l箪 t畉p trung v畛i LDAP, m畛t gi畉i ph叩p hon ton c坦 th畛油thay th畉震h畛油th畛ng m畉ng Microsoft Windows v畛i Active Directory. 2. Y棚u c畉u h畛油th畛ng Ch炭ng ta s畛油d畛ng 03 m叩y t鱈nh v畛i th担ng tin nh動油sau: q M叩y t鱈nh Ubuntu server: r 畛a ch畛油IP: 192.168.10.2 r DNS server: 192.168.10.2 r T棚n m叩y: ubuntu-server q M叩y t鱈nh Ubuntu desktop 01: r 畛a ch畛油IP: 192.168.10.12 r DNS server: 192.168.10.2 r T棚n m叩y: ubuntu-desktop01 q M叩y t鱈nh Ubuntu desktop 02: r 畛a ch畛油IP: 192.168.10.14 r DNS server: 192.168.10.2 r T棚n m叩y: ubuntu-desktop02 3. C畉u h狸nh h畛油th畛ng 3.1. C畉u h狸nh ubuntu-server Tr棚n m叩y ubuntu-server, ch炭ng ta th畛c hi畛n: q Ci 畉t v c畉u h狸nh DNS server v畛i ph畉n m畛m BIND. r Domain name: bits.com.vn r B畛油sung 02 Host (A) record t動董ng 畛ng v畛i 02 m叩y tr畉m Ubuntu vo DNS server: ubuntu-desktop01.bits.com.vn 192.168.10.12 ubuntu-desktop02.bits.com.vn 192.168.10.14 q Ci 畉t v c畉u h狸nh LDAP server v畛i ph畉n m畛m OpenLDAP. r B畛油sung 02 account t動董ng 畛ng v畛i 02 m叩y tr畉m Ubuntu vo LDAP server: NH TI TR畛 http://www.quantrimang.com/view.asp?Cat_ID=5&Cat_Sub_ID=0&news_id=44600
  • 2. Account 01 - tthai:*** Account 02 - ctbach:*** C叩c b動畛c th畛c hi畛n l畉n l動畛t nh動油sau: Ci 畉t v c畉u h狸nh DNS server v畛i ph畉n m畛m BIND 1. Ci 畉t Ubuntu server, phi棚n b畉n 7.10 Trong qu叩 tr狸nh ci 畉t, thi畉t l畉p c叩c th担ng s畛油sau: q 畛a ch畛油IP: 192.168.10.2 q DNS server: 192.168.10.2 q Netmask: 255.255.255.0 q T棚n m叩y: ubuntu-server q Ph畉n m畛m: ch畛n c叩c g坦i ci 畉t cho DNS server 2. C畉u h狸nh DNS server Ph畉n m畛m d湛ng 畛油x但y d畛ng DNS server tr棚n Ubuntu l BIND (Berkeley Internet Name Domain). Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a BIND 畛油c畉u h狸nh DNS server. C叩c b動畛c th畛c hi畛n nh動油sau: q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a BIND: tthai@ubuntu-server:~$ sudo -i [sudo] password for tthai: root@ubuntu-server:~# root@ubuntu-server:~# mkdir /backup root@ubuntu-server:~# cp -R /etc/bind /backup q C畉u h狸nh BIND: Hi畛u ch畛nh file c畉u h狸nh ch鱈nh c畛a BIND - /etc/bind/named.conf - b畉ng c叩ch b畛油sung c叩c d嘆ng sau vo cu畛i file: root@ubuntu-server:~# vim /etc/bind/named.conf ... // The zone definition zone bits.com.vn { type master; file /etc/bind/zones/bits.com.vn.db; }; // The zone definition for reverse DNS zone 10.168.192.in-addr.arpa { type master; file /etc/bind/zones/rev.10.168.192.in-addr.arpa; }; Hi畛u ch畛nh file /etc/bind/named.conf.options 畛油chuy畛n (forward) nh畛ng y棚u c畉u m DNS server ny kh担ng ph但n gi畉i 動畛c: root@ubuntu-server:~# vim /etc/bind/named.conf.options options { ... forwarders { 10.238.200.1; 10.238.200.8; 10.238.200.12; }; }; T畉o c叩c file zone: r /etc/bind/zones/bits.com.vn.db: d湛ng cho vi畛c l動u tr畛油c叩c c畉p IP address/machine name 畛油 DNS server ny ph但n gi畉i. r /etc/bind/zones/rev.10.168.192.in-addr.arpa: d湛ng cho m畛c 鱈ch ph但n gi畉i ng動畛c.
  • 3. root@ubuntu-server:~# mkdir /etc/bind/zones root@ubuntu-server:~# vim /etc/bind/zones/bits.com.vn.db $TTL 604800 @ IN SOA ubuntu-server.bits.com.vn. admin.bits.com.vn. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800) ; Negative Cache TTL ; ; Replace the following line as necessary: ; ns1 = DNS server name ; mail = Mail server name ; bits.com.vn. IN MX 10 mail.bits.com.vn. @ IN NS ubuntu-server.bits.com.vn. @ IN A 192.168.10.2 ubuntu-server.bits.com.vn. IN A 192.168.10.2 root@ubuntu-server:~# vim /etc/bind/zones/rev.10.168.192.in- addr.arpa ; The number before IN PTR ubuntu-server.bits.com.vn is ; the machine address of the DNS server. In this case, its ; 2, as my IP address is 192.168.10.2. $TTL 604800 @ IN SOA ubuntu-server.bits.com.vn. admin.bits.com.vn. ( 1 ; Serial 604800 ; Refresh 86400 ; Retry 2419200 ; Expire 604800) ; Negative Cache TTL ; @ IN NS ubuntu-server.bits.com.vn. 2 IN PTR ubuntu-server.bits.com.vn. Hi畛u ch畛nh file /etc/resolv.conf 畛油li畛t k棚 danh s叩ch c叩c DNS server trong m畉ng c畛a m狸nh: root@ubuntu-server:~# vim /etc/resolv.conf search bits.com.vn nameserver 192.168.10.2 q Kh畛i 畛ng l畉i d畛ch v畛ヌBIND: root@ubuntu-server:~# /etc/init.d/bind9 restart q Ki畛m tra DNS server v畛i ti畛n 鱈ch dig (domain information groper). dig l ti畛n 鱈ch truy v畉n d畛油li畛u tr棚n DNS server (DNS lookup utility). Ti畛n 鱈ch ny s畉縮t狸m ki畉m tr棚n DNS server v hi畛n th畛油th担ng tin do DNS server tr畉Lv畛. root@ubuntu-server:~# dig bits.com.vn B棚n c畉nh 坦, ch炭ng ta c滴ng c畉n s畛油d畛ng ti畛n 鱈ch ping 畛油ki畛m tra: root@ubuntu-server:~# ping bits.com.vn root@ubuntu-server:~# ping ubuntu-server root@ubuntu-server:~# ping ubuntu-server.bits.com.vn Ci 畉t v c畉u h狸nh LDAP server v畛i ph畉n m畛m OpenLDAP 1. Ci 畉t OpenLDAP Ph畉n m畛m d湛ng 畛油x但y d畛ng LDAP server tr棚n Ubuntu l OpenLDAP. Ch炭ng ta s畉縮ci 畉t c叩c ph畉n m畛m v ti畛n 鱈ch c畉n thi畉t 畛油thi畉t l畉p LDAP server, bao g畛m: q slapd (OpenLDAP Server - OpenLDAP standalone server): ph畉n m畛m ny 動畛c d湛ng 畛油t畉o
  • 4. ra m畛t standalone directory service v bao g畛m c畉Lslurpd replication server. q ldap-utils (OpenLDAP Utilities): g坦i ny ch畛a c叩c ti畛n 鱈ch d湛ng 畛油truy c畉p LDAP server c畛c b畛油ho畉c t畛油xa (local or remote). ldap-utils c滴ng ch畛a t畉t c畉Lc叩c ch動董ng tr狸nh c畉n thi畉t (required client programs) 畛油truy c畉p c叩c LDAP server. q db4.2-util (Berkeley v4.2 Database Utility): g坦i ny ch畛a c叩c c担ng c畛ヌ(tools) 動畛c d湛ng 畛油 thao t叩c (manipulating) v畛i c叩c c董油s畛油d畛油li畛u c坦 畛nh d畉ng l Berkeley v4.2 Database. C叩c b動畛c th畛c hi畛n nh動油sau: q C畉p nh畉t danh m畛c ph畉n m畛m (package list) tr棚n Ubuntu v ci 畉t OpenLDAP: tthai@ubuntu-server:~$ sudo -i [sudo] password for tthai: root@ubuntu-server:~# root@ubuntu-server:~# aptitude update root@ubuntu-server:~# apt-get install slapd root@ubuntu-server:~# apt-get install ldap-utils root@ubuntu-server:~# apt-get install db4.2-util L動u 箪: khi ci 畉t c叩c g坦i slapd, ldap-utils, db4.2-util, h畛油th畛ng c畉n s畛油d畛ng 挑a CD ch畛a Ubuntu server 7.10. 2. C畉u h狸nh LDAP server Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a OpenLDAP 畛油c畉u h狸nh LDAP server. C叩c b動畛c th畛c hi畛n nh動油 sau: q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a OpenLDAP: root@ubuntu-server:~# cp -R /etc/ldap /backup q S畛油d畛ng ti畛n 鱈ch slappasswd 畛油m達 h坦a m畉t kh畉u admin v l動u chu畛i k箪 t畛洩m達 h坦a vo cu畛i file /etc/ldap/slapd.conf: root@ubuntu-server:~# slappasswd >> /etc/ldap/slapd.conf New password: Re-enter new password: q C畉u h狸nh OpenLDAP: Hi畛u ch畛nh file /etc/ldap/slapd.conf (file c畉u h狸nh ch鱈nh c畛a OpenLDAP) nh動油sau: root@ubuntu-server:~# vim /etc/ldap/slapd.conf suffix dc=bits,dc=com,dc=vn rootdn cn=admin,dc=bits,dc=com,dc=vn # password ny do ti畛n 鱈ch ldappasswd t畉o ra. rootpw {SSHA}AwiGYep3HmBbL5rQka4Bchd4g8ofhnXC directory /var/lib/ldap # Set change password permission access to attrs=userPassword,shadowLastChange by dn=cn=admin,dc=bits,dc=com,dc=vn write by anonymous auth by self write by * none # Ensure read access to the base for things like # supportedSASLMechanisms. access to dn.base= by * read # The admin dn has full write access, everyone else can # read everything. access to * by dn=cn=admin,dc=bits,dc=com,dc=vn write by * read
  • 5. L動u 箪: gi畛油l畉i nh畛ng thi畉t l畉p m畉c 畛nh c畛a file /etc/ldap/slapd.conf kh担ng 動畛c 畛油c畉p 畛油tr棚n. q Kh畛i ch畉y standalone LDAP server: root@ubuntu-server:~# /etc/init.d/slapd start Starting OpenLDAP: slapd 畉n b動畛c ny, LDAP server 達 s畉n sng. 畛油b畉t 畉u 動a server ny vo ho畉t 畛ng, ch炭ng ta c畉n b畛油sung c叩c entry (th畛c th畛油- user, group, ou) kh畛i t畉o tr棚n server. q B畛油sung c叩c initial entry (th畛c th畛油kh畛i t畉o): LDAP server c坦 th畛油b畛油sung c叩c entry b畉ng c但u l畛nh ho畉c t畛油c叩c file c坦 畛nh d畉ng ldif (ldap directory interchange format). D動畛i 但y, ch炭ng ta t畉o ra file init.ldif v l動u vo th動油m畛c /etc/ldap. root@ubuntu-server:~# vim /etc/ldap/init.ldif dn: dc=bits,dc=com,dc=vn objectClass: dcObject objectClass: organizationalUnit dc: bits ou: bits.com.vn dn: cn=admin,dc=bits,dc=com,dc=vn objectClass: simpleSecurityObject objectClass: organizationalRole cn: admin description: LDAP administrator userPassword: {SSHA}AwiGYep3HmBbL5rQka4Bchd4g8ofhnXC dn: ou=users,dc=bits,dc=com,dc=vn objectClass: organizationalUnit ou: users dn: ou=groups,dc=bits,dc=com,dc=vn objectClass: organizationalUnit ou: groups dn: cn=ktm,ou=groups,dc=bits,dc=com,dc=vn objectClass: posixGroup cn: ktm gidNumber: 5000 L動u 箪: UID/GID trong bi vi畉t ny 動畛c thi畉t l畉p theo qui 畛nh sau: r System account: UID < 500 r Real People in LDAP: 499 < UID < 10.000 r Local users, groups (not in LDAP): UID > 10.000 Th畛c hi畛n c叩c b動畛c nh動油sau 畛油b畛油sung entry vo LDAP server: D畛ng d畛ch v畛ヌLDAP: root@ubuntu-server:~# /etc/init.d/slapd stop X坦a n畛i dung 達 t畛洩畛ng t畉o ra trong khi ci 畉t OpenLDAP: root@ubuntu-server:~# rm -rf /var/lib/ldap/* B畛油sung entry m畛i: root@ubuntu-server:~# slapadd -l init.ldif Hi畛u ch畛nh quy畛n tr棚n c董油s畛油d畛油li畛u: root@ubuntu-server:~# chown -R openldap:openldap /var/lib/ldap Kh畛i ch畉y d畛ch v畛ヌLDAP: root@ubuntu-server:~# /etc/init.d/slapd start q Ki畛m tra c叩c entry v畛a b畛油sung:
  • 6. Ch炭ng ta c坦 th畛油ki畛m tra c叩c entry v畛a m畛i b畛油sung vo b畉ng c叩ch s畛油d畛ng ti畛n 鱈ch ldapsearch: root@ubuntu-server:~# ldapsearch xLLL b dc=bits,dc=com,dc=vn Trong 坦: r -x: kh担ng s畛油d畛ng ph動董ng th畛c th畉m 畛nh SASL (m畉c 畛nh). r -LLL: v担 hi畛u ho叩 vi畛c in th担ng tin LDIF. r -b: t狸m ki畉m c董油b畉n. N畉u c叩c thao t叩c b畛油sung entry vo LDAP server 動畛c th畛c hi畛n m畛t c叩ch ch鱈nh x叩c, ti畛n 鱈ch ldapsearch s畉縮hi畛n th畛油th担ng tin v畛油c叩c entry ny t動董ng t畛洩nh動油n畛i dung 達 t畉o trong file /etc/init.ldif. V畛i c叩c b動畛c c畉u h狸nh nh動油tr棚n, ch炭ng ta 達 hon thnh thao t叩c ci 畉t v c畉u h狸nh LDAP server tr棚n m叩y t鱈nh ubuntu-server. Ti畉p theo, ch炭ng ta ti畉n hnh c叩c thao t叩c ci 畉t v c畉u h狸nh c叩c h畛油th畛ng m叩y tr畉m Ubuntu. 3.2. C畉u h狸nh ubuntu-desktop01 畛油m叩y tr畉m ng nh畉p v畛i ti kho畉n 動畛c t畉o ra tr棚n LDAP server, ch炭ng ta c畉n th畛c hi畛n c叩c b動畛c c畉u h狸nh tr棚n c叩c file PAM (Pluggable Authentication Modules) v NSSWITCH (Name Service Switch) trong Ubuntu. C叩c b動畛c th畛c hi畛n nh動油sau: 1. Ci 畉t LDAP client C叩c ph畉n m畛m v ti畛n 鱈ch c畉n ph畉i ci 畉t tr棚n m叩y tr畉m Ubuntu l: q libpam-ldap: th動油vi畛n d湛ng 畛油cho ph辿p x叩c th畛c (allow for authentication) qua LDAP. q libnss-ldap: th動油vi畛n d湛ng 畛油cho ph辿p truy v畉n th担ng tin v畛油c叩c session (allow session information) qua LDAP. q nss-updatedb: ti畛n 鱈ch d湛ng 畛油t畉o ra m畛t c董油s畛油d畛油li畛u ti kho畉n c畛c b畛油(local database of the user names). C董油s畛油d畛油li畛u ny 動畛c d湛ng 畛油kh畉c ph畛c tr動畛ng h畛p m畉ng b畛油gi畉m t畛c 畛油truy c畉p (network slowdown), ho畉c b畛油ng動ng ho畉t 畛ng v狸 s畛洩c畛油(outage). C叩c b動畛c th畛c hi畛n nh動油sau: q C畉p nh畉t danh m畛c ph畉n m畛m (package list) tr棚n Ubuntu v ci 畉t libpam-ldap, libnss-ldap v nss-updatedb: ctbach@ubuntu-desktop01:~$ sudo -i [sudo] password for ctbach: root@ubuntu-desktop01:~# root@ubuntu-desktop01:~# aptitude update root@ubuntu-desktop01:~# apt-get install libpam-ldap Khi ci 畉t th動油vi畛n ny, ch炭ng ta c畉n cung c畉p c叩c th担ng s畛: r LDAP Server Uniform Resource Identifier: ldap://192.168.10.2 r Distinguished name of the search base: dc=bits,dc=com,dc=vn r LDAP version to use: 3 r LDAP account for root: cn=admin,dc=bits,dc=com,dc=vn r LDAP root account password: * root@ubuntu-desktop01:~# apt-get install libnss-ldap Khi ci 畉t th動油vi畛n ny, ch炭ng ta c畉n cung c畉p c叩c th担ng s畛: q LDAP account for root: cn=admin,dc=bits,dc=com,dc=vn q LDAP root account password: * Ch炭 箪: m畛t h畛p tho畉i xu畉t hi畛n, th担ng b叩o r畉ng h畛油th畛ng kh担ng th畛油qu畉n l箪 file nsswitch.conf m畛t
  • 7. c叩ch t畛洩畛ng. Ch炭ng ta nh畉n n炭t OK v s畉縮thay 畛i c畉u h狸nh c畛a file ny 畛油ph畉n sau. root@ubuntu-desktop01:~# apt-get install nss-updatedb 2. C畉u h狸nh LDAP client Ch炭ng ta s畉縮thao t叩c tr棚n c叩c file c畛a PAM v NSSWITCH 畛油c畉u h狸nh LDAP client. C叩c b動畛c th畛c hi畛n nh動油sau: q Sao ch辿p d畛洩ph嘆ng c叩c file c畛a PAM v NSSWITCH: root@ubuntu-desktop01:~# mkdir /backup root@ubuntu-desktop01:~# cp /etc/nsswitch.conf /backup root@ubuntu-desktop01:~# cp -R /etc/pam /backup q C畉u h狸nh NSSWITCH: Hi畛u ch畛nh file /etc/nsswitch.conf (file c畉u h狸nh ch鱈nh c畛a NSSWITCH). File ny x叩c 畛nh c叩c name service m h畛油th畛ng s畛油d畛ng 畛油truy v畉n th担ng tin (search for information). File ny c滴ng ch畛油 ra th畛油th畛洩c畛a c叩c name service 畛油h畛油th畛ng 動u ti棚n t狸m ki畉m theo m畛t th畛油t畛洩達 動畛c l畉p ra. root@ubuntu-desktop01:~# vim /etc/nsswitch.conf passwd: files ldap group: files ldap Ki畛m tra c畉u h狸nh v畛a thi畉t l畉p b畉ng c叩ch th畛c hi畛n 02 l畛nh: root@ubuntu-desktop01:~# getent passwd root@ubuntu-desktop01:~# getent group 02 l畛nh tr棚n s畉縮li畛t k棚 m畉t kh畉u v c叩c nh坦m tr棚n Ubuntu desktop v tr棚n LDAP server. q C畉u h狸nh PAM: C坦 04 file c畉u h狸nh c畛a PAM li棚n quan 畉n LDAP: r /etc/pam.d/common-account r /etc/pam.d/common-auth r /etc/pam.d/common-password r /etc/pam.d/common-session Hi畛u ch畛nh c叩c file ny theo c叩c b動畛c nh動油sau: r root@ubuntu-desktop01:~# cd /etc/pam.d r root@ubuntu-desktop01:/etc/pam.d# vim ./common-account account sufficient pam_ldap.so account required pam_unix.so r root@ubuntu-desktop01:/etc/pam.d# vim ./common-auth auth sufficient pam_ldap.so auth required pam_unix.so nullok_secure use_first_pass r root@ubuntu-desktop01:/etc/pam.d# vim ./common-password password sufficient pam_ldap.so password required pam_unix.so nullok obscure min=4 max=8 md5 r root@ubuntu-desktop01:/etc/pam.d# vim ./common-session session required pam_unix.so session required pam_mkhomedir.so skel=/etc/skel/ session optional pam_ldap.so session optional pam_foreground.so q T畉o th動油m畛c d湛ng 畛油l動u tr畛油c叩c th動油m畛c home t動董ng 畛ng v畛i m畛i ti kho畉n ng nh畉p vo m叩y tr畉m: root@ubuntu-desktop01:~# mkdir /home/users root@ubuntu-desktop01:~# mkdir /home/users/ktm
  • 8. Ch炭 箪: n畉u kh担ng th畛c hi畛n b動畛c ny sau khi 達 t畉o ti kho畉n tr棚n LDAP, ch炭ng ta s畉縮g畉p th担ng b叩o l畛i trong qu叩 tr狸nh ng nh畉p vo m叩y tr畉m Ubuntu. r Authentication failed. N畉u xem trong file /var/log/auth.log, ch炭ng ta s畉縮th畉y nguy棚n nh但n c畛a l畛i: Unable to create directory /home/users/ktm/tthai; couldnt open session for tthai. 3. T畉o ti kho畉n ng nh畉p v畛i phpLDAPadmin 畛油董n gi畉n trong vi畛c qu畉n l箪 OpenLDAP server, ch炭ng ta s畛油d畛ng phpLDAPadmin. 但y l 畛ng d畛ng web 動畛c s畛油d畛ng 畛油thao t叩c v畛i OpenLDAP server. C叩c b動畛c sau 但y s畉縮gi炭p ch炭ng ta ci 畉t v s畛油d畛ng phpLDAPadmin tr棚n m叩y tr畉m Ubuntu 畛油qu畉n l箪 LDAP server. Ci 畉t phpLDAPadmin v畛i l畛nh: root@ubuntu-desktop01:~# apt-get install phpldapadmin C畉u h狸nh phpLDAPadmin: root@ubuntu-desktop01:~# cp - R /usr/share/phpldapadmin /var/www/myphpldapadmin root@ubuntu-desktop01:~# cp /etc/phpldapadmin/config.php /etc/phpldapadmin/first.config.php root@ubuntu-desktop01:~# rm /var/www/myphpldapadmin/config/config.php root@ubuntu-desktop01:~# ln s /etc/phpldapadmin/first.config.php /var/www/myphpldapadmin/config/config.php root@ubuntu-desktop01:~# chmod +r /etc/phpldapadmin/first.config.php Truy c畉p phpLDAPadmin: q T畛油c畛a s畛油tr狸nh duy畛t, nh畉p 畛a ch畛油http://localhost/myphpldapadmin. Nh畉n vo n炭t Login 畛油panel b棚n tr叩i, nh畉p th担ng tin ti kho畉n root: q Login DN: cn=admin,dc=bits,dc=com,dc=vn q Password: * Nh畉n n炭t Authenticate 畛油ng nh畉p.
  • 9. N畉u ng nh畉p vo LDAP server thnh c担ng, h畛油th畛ng s畉縮th担ng b叩o: T畉o ti kho畉n tr棚n phpLDAPadmin: q K鱈ch vo m畛c ou=users, ch畛n Create new entry here, ch畛n User Account. Nh畉n n炭t Process>>. q i畛n th担ng tin li棚n quan 畉n ti kho畉n v nh畉n n炭t Process>>.
  • 10. q Xem l畉i th担ng tin. Sau khi 達 ch畉c ch畉n, nh畉n n炭t Create Object. q Sau khi t畉o xong, mn h狸nh hi畛n th畛油th担ng tin c畛a ti kho畉n v畛a t畉o s畉縮xu畉t hi畛n. q Nh畉n n炭t Add new attribute 畛油th棚m thu畛c t鱈nh LoginShell.
  • 11. Nh畉n n炭t Add 畛油hon thnh thao t叩c t畉o v hi畛u ch畛nh ti kho畉n. 畉n b動畛c ny, ch炭ng ta nh畉n n炭t Logout v b畉t 畉u ki畛m tra kh畉Lnng ho畉t 畛ng c畛a h畛油th畛ng LDAP tr棚n Ubuntu. 3.3. C畉u h狸nh ubuntu-desktop02 Th畛c hi畛n c叩c b動畛c t動董ng t畛洩nh動油v畛i m叩y t鱈nh ubuntu-desktop01. 4. Ki畛m tra h畛油th畛ng 畛油ki畛m tra h畛油th畛ng sau khi hon thnh c叩c b動畛c c畉u h狸nh, t畛油m叩y tr畉m ubuntu, ch炭ng ta ng nh畉p b畉ng ti kho畉n 動畛c t畉o ra tr棚n LDAP server. Trong tr動畛ng h畛p c畛a m狸nh, tr棚n m叩y ubuntu-desktop01, sau khi h畛油th畛ng kh畛i 畛ng, ch炭ng ta nh畉p: q Username: tthai q Password: * H畛油th畛ng s畉縮th担ng b叩o: Creating directory /home/users/ktm/tthai, ch炭ng ta nh畉n n炭t OK 畛油hon thnh thao t叩c ng nh畉p. K畉t lu畉n S畛油d畛ng LDAP 畛油x但y d畛ng m畉ng n畛i b畛油theo m担 h狸nh client/server, v畛i c叩c m叩y t鱈nh Ubuntu l m畛t gi畉i ph叩p qu畉n l箪 t畉p trung hi畛u qu畉Lv ti畉t ki畛m chi ph鱈. V畛i c叩c b動畛c ci 畉t 董n gi畉n, c畉u h狸nh d畛油dng, vi畛c thi畉t k畉震h畛油th畛ng m畉ng n畛i b畛油v畛i LDAP v Ubuntu l hon ton kh畉Lthi. Ph畛ヌl畛c 1 M畛t s畛油thao t叩c h畛u 鱈ch khi c畉u h狸nh LDAP tr棚n Ubuntu 1. C畉u h狸nh m叩y t鱈nh Ubuntu 畛油cho ph辿p account tr棚n LDAP server c坦 th畛油chuy畛n sang (sudo) account qu畉n tr畛油h畛油th畛ng root 畛油cho ph辿p account tthai tr棚n LDAP server c坦 th畛油chuy畛n sang account root, tr棚n m叩y tr畉m Ubuntu, ch炭ng ta th畛c hi畛n nh動油sau: M畛油file /etc/group, b畛油sung user01 vo d嘆ng admin # gedit /etc/group T狸m 畉n d嘆ng admin:x:117:ctbach,administrator B畛油sung user01 vo cu畛i d嘆ng. Sau khi b畛油sung, ch炭ng ta nh畉n 動畛c k畉t qu畉Lt動董ng t畛洩nh動油sau: admin:x:117:ctbach,administrator,tthai Ti畉p 畉n, c畉n c畉p nh畉t password LDAP server 畛油h畛油th畛ng Ubuntu c坦 th畛油hi畛u 動畛c password ny: root@ubuntu-server:~# passwd tthai
  • 12. Enter login (LDAP) password: * New password: * Re-enter new password: * 2. S畛油d畛ng 挑a USB tr棚n Ubuntu server 畛油s畛油d畛ng 動畛c c叩c 挑a USB tr棚n Ubuntu server (giao di畛n d嘆ng l畛nh), ch炭ng ta ph畉i th畛c hi畛n thao t叩c mount 挑a USB vo Ubuntu server. q 畛i v畛i 挑a USB th担ng th動畛ng (kh担ng c坦 MP3): root@ubuntu-server:~# mkdir /usb-disk root@ubuntu-server:~# mount -t vfat /dev/sdb1 /usb-disk q 畛i v畛i 挑a USB c坦 t鱈nh nng nghe nh畉c MP3: root@ubuntu-server:~# mkdir /usbmp3-disk root@ubuntu-server:~# mount -t vfat /dev/sdb /usbmp3-disk q Khi 達 s畛油d畛ng xong, ch炭ng ta n棚n ng畉t k畉t n畛i gi畛a Ubuntu server v 挑a USB m畛t c叩ch an ton b畉ng c叩ch: root@ubuntu-server:~# umount /usb-disk root@ubuntu-server:~# umount /usbmp3-disk 3. Xem l畛i ng nh畉p tr棚n m叩y tr畉m Ubuntu 畛油xem 動畛c c叩c l畛i ng nh畉p tr棚n m叩y tr畉m Ubuntu nh畉m gi炭p ch炭ng ta x叩c 畛nh nguy棚n nh但n ph叩t sinh l畛i trong qu叩 tr狸nh Ubuntu ng nh畉p qua LDAP, ch炭ng ta m畛油file /var/log/auth.log Ti li畛u tham kh畉o 1. OpenLDAP Server https://help.ubuntu.com/community/OpenLDAPServer 2. LDAP Client Authentication https://help.ubuntu.com/community/LDAPClientAuthentication 3. OpenLDAP Client Configuration Guide http://ubuntuforums.org/showthread.php?t=597056 4. Ubuntu User Document (good) https://help.ubuntu.com/community/UserDocumentation 5. DNS Server Setup Using Bind in Ubuntu http://www.ubuntugeek.com/dns足server足setup足using足bind足in足ubuntu.html 6. BIND9 Administrator Reference Manual http://www.isc.org/index.pl?/sw/bind/index.php 7. Installing phpLDAPadmin https://help.ubuntu.com/community/InstallingphpLDAPadmin 8. An Introduction to LDAP http://www.ldapman.org/articles/intro_to_ldap.html 9. Introduction to LDAP (good) http://quark.humbug.org.uau/publications/ldap/ldap_tut.html 10. LDAP mini HOWTO (good) http://www.grennan.com/ldap_HOWTO.html 11. OpenLDAP 2.2 Administrators Guide http://www.bind9.net/manual/openldap/2.2/index.html 12. OpenLDAP Everywhere
  • 13. http://www.linuxjournal.com/article/6266 13. LDAP Attributes http://www.computerperformance.co.uk/Logon/LDAP_attributes_active_directory.htm 14. Berkeley v4.2 Database Utility http://packages.ubuntu.com/feisty/utils/db4.2.足util 15. Berkeley Database http://packages.ubuntu.com/edgy/doc/db3足doc 16. Berkeley Database http://directory.fsf.org/project/BerkeleyDB/ 17. Performing Backup and Recovery with Berkeley DB http://packages.ubuntu.com/edgy/doc/db3足doc 18. Chapter 19. I/O Redirection (Advanced Bash Scripting Guide) http://tldp.org/LDP/abs/html/io足redirection.html 19. /etc/nsswitch.conf -- Name Service Switch File http://www.softpanorama.org/Solaris/Reference/etc/nsswitch.shtml ------------------------------------------------- T担 Thanh H畉i - Email: tthai@huesoft.com.vn Ph嘆ng K畛耕thu畉t M畉ng Trung t但m C担ng ngh畛油Th担ng tin Th畛a Thi棚n Hu畉震06 L棚 L畛i, TP. Hu畉 C叩c bi m畛i nh畉t: M達 t畉n c担ng Excel xu畉t hi畛n tr棚n Internet - 26/3 Yahoo gia nh畉p n畛n t畉ng Google OpenSocial - 26/3 Ch鱈nh ph畛油tng c動畛ng lm vi畛c qua m畉ng - 26/3 達 c畉p gi畉y ch畛ng nh畉n 畉u t動油cho Samsung - 26/3 Indonesia: Xem web "sex" s畉縮b畛油ph畉t 100.000USD v 6 nm t湛 - 26/3 Microsoft c坦 th畛油n但ng m畛c gi叩 mua l畉i Yahoo - 26/3 Intel ra m畉t d嘆ng chip m叩y ch畛油m畛i - 26/3 Hanel tr畛油thnh OEM c畛a Intel - 26/3 Th叩ng 6, Dell ra m畉t laptop t鱈ch h畛p GPS - 26/3 Th叩ng 4, Windows XP SP3 s畉縮ra m畉t - 26/3 Chu畛t "m畉nh" cho Netbook - 26/3 Google thnh 'g達 kh畛ng l畛' nh畛油n ngon - 26/3 Netbook c畛a Intel 動畛c ti畉t l畛油v畛i t棚n 2go PC - 25/3 Microsoft h畛油tr畛LVista SP1 mi畛n ph鱈 100% - 25/3 Th但m nh畉p ch畛n th叩c lo畉n c畛a gi畛i tr畉嗣nghi畛n net - 25/3 Le l坦i 叩nh s叩ng cho qu畉ng c叩o di 畛ng - 25/3 X但y d畛ng c叩c 畛ng d畛ng b畉o m畉t: nh畉t qu叩n b畉n ghi - 25/3 Nh畛ng clip xu畉t s畉c nh畉t 2007 c畛a YouTube - 25/3 "Kh畉c tinh" c畛a EEE PC xu畉t hi畛n - 25/3 畉n 畛: BlackBerry 畛i m畉t v畛i l畛nh c畉m - 25/3 Xem ton b畛油畛油畛油畛油>> Search Webnmlkj www.quantrimang.comnmlkji 油In油bi油ny | Trao油畛i | G畛i油cho油b畉n油b竪
  • 14. Mobile Phones | PrePaid Credit Cards | Debt Help | Credit Card | Cheap Loan | Vietnam Travel C叩c油bi油c湛ng油ch畛油畛油ny: K畉t油n畛i油Linux油t畛i油m畛t油m畉ng油kh担ng油d但y 3/13/2008 9:09:00 AM Beryl油足油L畛p油v畛瓿ho油nho叩ng油c畛a油Linux 3/5/2008 9:06:00 AM Th畛油thu畉t油ci油offline油c叩c油g坦i油ph畉n油m畛m油trong油Ubuntu 2/2/2008 4:47:00 PM Ci油畉t油v油c畉u油h狸nh油i畛u油khi畛n油truy油c畉p油m畉ng油v畛i油PacketFence 1/4/2008 10:11:00 AM Tng油b畉o油m畉t油cho油Linux:油H畉n油ch畉震c叩c油d畛ch油v畛ヌkh担ng油c畉n油thi畉t 12/28/2007 11:17:00 AM Ngn油ch畉n油truy油c畉p油m畉ng油tr叩i油ph辿p油v畛i油PacketFence 12/24/2007 1:43:00 PM ch油 o油Konect油 m油vi c油v i油 c油 ng油 ng油Google 12/13/2007 9:09:00 AM T狸m油hi畛u油v畛油ho叩n油畛i油kh担ng油gian油b畛油nh畛油Linux 12/10/2007 6:53:00 AM Func油動a油qu畉n油l箪油m畉ng油vo油i畛u油khi畛n油c畛a油qu畉n油tr畛油h畛油th畛ng 12/6/2007 10:02:00 AM B畉n油ci油畉t油tr畛c油ti畉p油openSUSE油動畛c油ra油m畉t 11/29/2007 11:44:00 AM C畛ng油畛ng油ngu畛n油m畛油cho油坦n油Fedora油8 11/17/2007 9:51:00 AM Fedora油8油油Video油h動畛ng油d畉n油ci油畉t 11/14/2007 10:28:00 AM B畉o油m畉t油truy油c畉p油t畛油xa油畛i油v畛i油c叩c油m叩y油tr畉m 10/9/2007 9:42:00 AM 3油b動畛c油ci油畉t油Ubuntu油t畛油Windows 7/30/2007 8:06:00 AM H動畛ng油d畉n油ci油畉t油LAMP油tr棚n油Ubuntu油cho油ng動畛i油m畛i油b畉t油畉u 7/14/2007 1:06:00 PM T畛ng油b動畛c油ci油畉t油Fedora油7 6/23/2007 3:07:00 PM Ubuntu油7.10油c坦油g狸油m畛i? 6/21/2007 4:58:00 PM M畛t油s畛油b畉n油Linux油d畛油s畛油d畛ng 5/14/2007 9:29:00 AM S畛油d畛ng油畛油c畛ng油ngoi油USB油cho油sao油l動u油d畛洩ph嘆ng油trong油Linux 5/4/2007 4:27:00 PM Ci油畉t油v油c畉u油h狸nh油Spamd 4/17/2007 3:27:00 PM Xem ton b畛油畛油畛油畛油>> Tr畛油v畛油畉u油trang油 Trang ch畛 | Khoahoc.com.vn油| Bongda.com.vn | Hotjobs.com.vn | Gamevui.com | Ecodebank.com | G畛i bi vi畉t | Li棚n H畛 Copyright 息 2003-2007 QuanTriMang.com. All rights reverved Designed and Developed by QuanTriMang.com