En installation af likewise-open på en Ubundu-lucid desktop
Linuxbruger@linuxbox:~$ sudo apt-get install likewise-open
[sudo] password for Linuxbruger:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
krb5-config krb5-user libgssrpc4 libkadm5clnt-mit7
Suggested packages:
krb5-doc likewise-open-gui
The following NEW packages will be installed:
krb5-config krb5-user libgssrpc4 libkadm5clnt-mit7 likewise-open
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 3.402kB of archives.
After this operation, 10,1MB of additional disk space will be used.
Do you want to continue [Y/n]? y
Hvis man på nuværrende tidspunkt prøver at Join domainet vil man få nedestående error.
Linuxbruger@linuxbox:~$ sudo domainjoin-cli join AD-Domain.local administrator
Joining to AD Domain: AD-Domain.local
With Computer DNS Name: linuxbox.AD-Domain.local
administrator@AD-Domain.LOCAL's password:
Error: Lsass Error [code 0x00080047]
40286 (0x9D5E) LW_ERROR_LDAP_SERVER_DOWN - Unknown error
Configurations scriptet kan ikke finde LDAP servern
Linuxbruger@linuxbox:~$ ping AD-Domain.local
ping: unknown host AD-Domain.local
For at løse dette problem ligger vi domain navnet og en ip på en DC ind i hosts filen.
Linuxbruger@linuxbox:~$ sudo vi /etc/hosts
10.10.100.3 AD-Domain.local
Herefter er det også nødvedig at ændre i nsswitch.conf
Linuxbruger@linuxbox:~$ sudo vi /etc/nsswitch.conf
ændre linjen:
hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4
til
hosts: files dns
Genstart maskinen.
Linuxbruger@linuxbox:~$ sudo reboot
Nu er det mulig at JOIN domainet.
Linuxbruger@linuxbox:~$ sudo domainjoin-cli join AD-Domain.local administrator
[sudo] password for Linuxbruger:
Joining to AD Domain: AD-Domain.local
With Computer DNS Name: linuxbox.AD-Domain.local
administrator@AD-Domain.LOCAL's password:
Warning: System restart required
Your system has been configured to authenticate to Active Directory for the
first time. It is recommended that you restart your system to ensure that all
applications recognize the new settings.
SUCCESS
You should reboot this system before attempting GUI logins as a domain user.
Linuxbruger@linuxbox:~$
Vi genstarter iigen ;-)
Linuxbruger@linuxbox:~$ sudo reboot
og nu kan man logge ind med sin Windows Credentials og browse windows netværet med disse, dog har man ikke admin rettigheder på den lokale linux-box, dette kan dog ændres ved at tilføje ens bruger-id til via visudo.
AD-Domain\ADbruger@linuxbox:~$ ssh Linuxbruger@localhost
Linuxbruger@linuxbox:~$ sudo visudo
tilføj for en enkelt bruger
AD-Domain\\ADbruger ALL=(ALL) ALL
eller som grupper
%AD-Domain\\Dksil01_all ALL=(ALL) ALL
%AD-Domain\\domain^admins ALL=(ALL) ALL
Hvorved at man undgåer nedestående fejl.
T-NERD\ADbruger@linuxbox:~$ sudo su
[sudo] password for AD-Domain\ADbruger:
Your password will expire in 9 days
Your password will expire in 9 days
AD-Domain\ADbruger is not in the sudoers file. This incident will be reported
Linuxbruger@linuxbox:~$ sudo domainjoin-cli join AD-Domain.local administrator
Joining to AD Domain: AD-Domain.local
With Computer DNS Name: linuxbox.AD-Domain.local
This email address is being protected from spambots. You need JavaScript enabled to view it.'s password:
Error: Lsass Error [code 0x00080047]
40286 (0x9D5E) LW_ERROR_LDAP_SERVER_DOWN - Unknown error
Her er lidt om hvordan, jeg har opsat en debian server med asterisk til at benytte et par bluetooth mobiler som bærelinje for softphones.
Bluetooth
http://rc98.net/cellxfer - passkey-agent ( skyldes at nokia 6310i ikke kan søge efter andet end bluetooth audiodevices, og derfor skal paring startes fra debian boxen)
http://www.voipphreak.ca/2008/page/9/ opsætning af chan_mobile til bluetooth
http://www.voip-info.org/wiki/view/chan_mobile
http://www.saghul.net/blog/2007/08/29/howto-review-chan_mbile/
debian asterisk 1.6 install script
http://www.k1lnx.net/wiki/index.php/Asterisk_1.6_install_on_Debian_Lenny
http://www.k1lnx.net/wiki/index.php/Setting_up_streaming_Music_On_Hold
http://www.the-asterisk-book.com/unstable/faxserver-mit-iaxmodem-und-hylafax.html asterisk fax server
En god måde at tilføje sine harddiske til /det/fstab er via UUID.
En harddisk's UUID kan nemt findes ved som Root køre kommandoen blkid, men først skal disken partitioneres og formateres.
fdisk -l
fdisk /dev/sdb
Brug m til at se hjælp, men ellers n opretter en nu partition og w gemmer partitions informationerne
Derefter skal disken formateres og herved opstår sdb1 og dennes UUID.
Der findes lidt forskellige kommandoer til dette formål.
mkfs mkfs.cramfs mkfs.ext3 mkfs.ext4dev mkfs.msdos mkfs.reiserfs mkfs.xfs
mkfs.bfs mkfs.ext2 mkfs.ext4 mkfs.minix mkfs.ntfs mkfs.vfat
mkfs.ext3 /dev/sdb1
Nu kan UUID findes ved at køre.
blkid
/dev/sdb1: UUID="e6b1a4b3-8294-44bf-a030-33887bdfe6b1" TYPE="ext4"
/dev/sda: TYPE="promise_fasttrack_raid_member"
/dev/mapper/pdc_edfbhjgj1: UUID="3d515f29-d232-443b-8abe-c876c0b60c10" TYPE="ext4"
/dev/mapper/pdc_edfbhjgj5: UUID="7b107b57-e449-4c39-8d5a-bb07bb55bcef" TYPE="swap"
Som man kan se har jeg 2 diske i denne maskine.
/dev/sda er en WD Raption 10000 RPM sata harddisk, hvilket angiver sig selv lidt anderledes i linux systemet, via /dev/mapper/pdc_xxxxxxx
/dev/sdb1 er en standard 250GB harddisk hvor jeg har udviklingsdata liggende.
Fstab på denne maskine ser sådan ud
cat /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid -o value -s UUID' to print the universally unique identifier
# for a device; this may be used with UUID= as a more robust way to name
# devices that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
proc /proc proc defaults 0 0
# / was on /dev/sda1 during installation
UUID=3d515f29-d232-443b-8abe-c876c0b60c10 / ext4 errors=remount-ro 0 1
# swap was on /dev/sda5 during installation
UUID=7b107b57-e449-4c39-8d5a-bb07bb55bcef none swap sw 0 0
/dev/scd0 /media/cdrom0 udf,iso9660 user,noauto,exec,utf8 0 0
#Ekstra disk
UUID=e6b1a4b3-8294-44bf-a030-33887bdfe6b1 /data ext4 defaults 0 2
Når man tester mail konfigruationer er Telnet altid en god vej, men når man skal lege med email headers er mutt guld værd.
på debian installeres mutt ved:
apt-get install mutt
herefter skal man oprette en .muttrc file hvor man kan definere forskellige ting for mutt klienten.
vi .muttrc
# Customized headers
unmy_hdr * # remove all extra headers first.
my_hdr From: Nyhedemail fra Net-help.dk <This email address is being protected from spambots. You need JavaScript enabled to view it.>
my_hdr Sender: "Gud" <This email address is being protected from spambots. You need JavaScript enabled to view it.>
my_hdr Reply-To: ""et har jeg aldrig sagt" <dev-Null@net-help.dk>
Denne konfig vil gøre at Mutt email bliver afsendt fra This email address is being protected from spambots. You need JavaScript enabled to view it. på vejne af This email address is being protected from spambots. You need JavaScript enabled to view it. og alle reply's på disse email vil blive sendt til This email address is being protected from spambots. You need JavaScript enabled to view it..
mutt kan også konfigureres til mange andre fine ting.
Her er et par linjer til en smb.conf hvis man har behov for at share en mappe uden at der skal være login.
Det kan være praktisk steder hvor lidt større filer skal udveksel mellem forskellige afdelinger som f.eks ikke har adgang til de samme drev.
Denne eksempel er hentet fra et deployment share i et test miljø, hvor folk kan lave unattended installationer fra, hvilket er grunden til at folk har write access.
#======================= Global Settings =======================
[global]
####### Authentication #######
security = user
map to guest = bad user
guest account = nobody
[Deploy]
comment = whatever you want to call it
path = /DeploymentShare
public = yes
writable = yes
printable = no
create mask = 0777
directory mask = 0777
force create mode = 0777
force directory mode = 0777
force user = nobody
force group = nogroup
Page 9 of 14