(1) (FTTH DSL CATV) (2) IP DHCP / (3) (4) 2 ( ) FFFTP FFFTP Download ffftp-1.92.exe (620,256 ) 2

Transcription

1 Linux Star and Moon...2 Vine Linux (1)...3 (2)...3 (3)...11 IP...12 Apache Apache PHP Apache...26 Webmin...28 Samba Samba samba /etc/samba/smb.conf Samba Samba Samba Samba Windos Samba security( )...38 SWAT WEB Samba (SWAT) SWAT Windows Samba...49 Anonymous FTP Vine Linux Linux Anonymous FTP ProFTPD...51 telnet H15/11/6

2 (1) (FTTH DSL CATV) (2) IP DHCP / (3) (4) 2 ( ) FFFTP FFFTP Download ffftp-1.92.exe (620,256 ) 2

3 Vine Linux 2.5 Star and Moon VineLinux (1) VineLinux FDD VineLinux2.5 CD-ROM CD-ROM F12 CD-ROM 1 Windows Linux ( ) CDROM BIOS CDROM Vine CDROM Linux CDROM PCMCIA CDROM 1.44M DOS (CDROM e )e: >cd dosutils ( a ) e: >rawrite.exe -n -f e: images boot.img -d a: Linux (2) a. FDD VineLinux boot: Enter 3

4 b. VineLinux Japnese c. Japanese 106-key Japanes d. VineLinux e. Gene 2 Button Mouse(PS/2) 3 4

5 f. System Installer g. h. Disk Druid i. /dev/hda6 Linux /boot ex2 / ex2 /dev/hda MB NTFS /dev/hda2 /dev/hda5 vfat 39MB ex2 /boot /dev/hda6 swap 926MB swap SWAP /dev/hda7 vfat 2047MB ex2 / /dev/hda8 vfat 47MB vfat SYSSL 5

6 j. /hda5 6

7 k Asia/Tokyo l root 7

8 m :[MD5 ] [ ] [NIS ] NIS l. m. Generic Multisync(Hsync 31-64KHz) TFT Generic LCD Panel

9 n. [X ] o. p. 9

10 q. r. VineLinux2.5 Linux System Selectore2 FDD System Selectore2 (U) System Selectore System Selectore OK 10

11 (3) Star and Moon Vine Linux Mozill Mozill ( ) Vine Linux [kterm.sh] #apt-get update apt-get update #apt-get upgrade apt-get getupgrade [Y]Enter apt-get getupgrade # ( 1 ) Webmin 11

12 IP Star and Moon kterm Window ifconfig IP Network Configuration Network Configuration IP Linux linux.server.org Window IP ( ) IP linux.server( ) Linux( ) IP /etc/hosts eth0 IP ( IP ) ON dhcp none IP ifconfig IP 12

13 Apache Star and Moon Apache (Redhat /etc/httpd/conf) httpd.conf ServerAdmin conf log ServerRoot /usr/local/apache ErrorLog logs/error_log TransferLog logs/access_log PidFile /var/run/httpd.pid DNS ServerName HTML DocumentRoot "/home/httpd/html" Apache httpd.conf srm.conf access.conf Apache Apache magic mime.type Apache Apache 4.1 Apache Apache1.3 httpd.conf httpd httpd.conf Directory Files AllowOverride Options DirectoryIndex AddModule VirtualHost.htaccess WebDAV mod_rewrite mod_setenvif mod gzip mod bandwidth (1) apache nobody nobody apache nobody Apache apache Apache FTP upload # useradd -s /bin/false -d /home/html/apache apache /home/html/apache apache apache apache root apache # chown -R apache /home/html /apache 13

14 4.2 apache(httpd) apache httpd.conf Star and Moon LockFile /usr/apache/run/httpd.lock PidFile /usr/apache/run/httpd.pid ScoreBoardFile /usr/apache/run/httpd.scoreboard User apache Group apache # ServerName ServerAdmin admin@syns.net ServerName apachectl restart nobody httpd apache httpd <Directory directory>... </Directory> <Directory> </Directory> Directory? * <Directory /usr/local/httpd/htdocs> Options Indexes FollowSymLinks </Directory> /usr/local/httpd/htdocs Options Indexes" "FollowSymLinks" "" "" Document Root <Directory ~ "^/www/.*/[0-9]{3}"> Document Root /www/ <Files filename>... </Files> <Files> <Directory> </Files> <Directory>.htaccess <Location> filename ~ <Files ~ ".(gif jpe?g png)$">.htaccess <Directory> <Location> <Files> AllowOverride.htaccess AccessFileName.htaccess Override None.htaccess Override All Override AuthConfig (AuthDBMGroupFile, AuthDBMUserFile, AuthGroupFile, AuthName, AuthType, AuthUserFile and require). FileInfo 14

15 (AddEncoding, AddLanguage, AddType, Star and Moon DefaultType and LanguagePriority). Indexes (AddDescription, AddIcon, AddIconByEncoding, AddIconByType, DefaultIcon, DirectoryIndex, FancyIndexing, HeaderName, IndexIgnore, IndexOptions and ReadmeName). Limit (allow, deny and order) iria1.07s9a BrowserMatch "Iria/1.07s9a" bbroken ( ) <Limit GET POST> order allow,deny deny from env=bbroken allow from all </Limit> /24 deny from allow from all Options (Options and XBitHack). <Directory /usr/local/httpd/htdocs> AllowOverride None </Directory> Override.htaccess None All Options [+ -]option [+ -]option.. Options option None All MultiViews ExecCGI CGI FollowSymLinks Includes IncludesNOEXEC #exe CGI #include Indexes URL DirectoryIndex index.html MultiViews Content negotiated MultiViews 15

16 SymLinksIfOwnerMatch ID Option option Options all + - all option + option options - option option, + - : <Directory /web/docs> Options Indexes FollowSymLinks </Directory> <Directory /web/docs/spec> Options Includes </Directory> Includes /web/docs/spec Options + - <Directory /web/docs> Options Indexes FollowSymLinks </Directory> <Directory /web/docs/spec> Options +Includes -Indexes </Directory> FollowSymLinks Includes /web/docs/spec DirectoryIndex File File... URL "/index.html" "/" File index.html DirectoryIndex index.html index.shtml index.htm index.html index.shtml index.htm "/" 3 AddModule module module... Compatibility: AddModule Apache1.2 ClearModuleList VirtualHost Apache mod_vhost_alias.so LoadModule vhost_alias_module libexec/mod_vhost_alias.so AddModule mod_vhost_alias.c NameVirtualHost <VirtualHost > DocumentRoot /var/apache/htdocs/www ServerName </VirtualHost> <VirtualHost > DocumentRoot /var/apache/htdocs/host-a/ ServerName host.syns.net </VirtualHost> 1 IP (non-ip-virtualhost) IP WWW NIC NameVirtualHost IP VirtualHost ServerName IP Web IP non-ip 16

17 <VirtualHost > DocumentRoot /var/apache/htdocs/www ServerNamewww.syns.net </VirtualHost> <VirtualHost > DocumentRoot/var/apache/htdocs/host-a/ ServerNamehost.syns.net </VirtualHost> VirtualHost IP IP IP WWW NIC IP.htaccess.htaccess httpd.conf web httpd.conf httpd.conf htaccess AccessFileName.htaccess.htaccess 1) CGI SSI CGI SSI OK.htaccess Options Includes execcgi AddType text/x-server-parsed-html.shtml AddType application/x-httpd-cgi.cgi.pl 4.3 PHP DirectoryIndex index.phtml index.html AddType application/x-httpd-php3.php3 4.4 HTML <meta http-equiv=" "> Redirect / Redirect /fuga/ auth ( ) URL "401 Authorization Required" ) ErrorDocument 401 /auth_err.html ErrorDocument 403 "403 " 4.6 ID htpasswd AuthUserFile /home/mydir/public_html/ htpasswd AuthGroupFile /dev/null AuthName "Authorization Users" AuthType Basic <Limit POST GET PUT> require valid-user </Limit> <Files.htaccess> order deny,allow deny from all </File> 17

18 18 Star and Moon WebDAV :dav_mod ( )mod_dav tar.gz $./configure --with-apxs=/usr/apache/bin/apxs webdav apxs ( NetBSD ) $ make $ su # make install httpd.conf LoadModule dav_module /usr/apache/libexec/libdav.so AddModule mod_dav.c mod_dav DAVLockDB /usr/apache/run/davlock <Location /DAV> DAV On </Location> DAV On <Location> <Direvtry> SSL SSL <Location> <LimitExcept GET HEAD OPTIONS></LimitExcept> <Limit GET PUT POST DELETE PROPFIND PROPPATCH MKCOL COPY MOVE LOCK UNLOCK> </Limit> <LimitExcept GET HEAD OPTIONS> AuthType Basic AuthName "WebDAV Secutity" AuthUserFile /etc/apache/davuser Require valid-user </LimitExcept> Apache.htaccess DAV mod_rewrite mod_setenvif CGI JAVA Apache mod_rewrite mod_setenvif mod_rewrite Solaris apache [ RefereURL] URL RefererURL RewriteEngine on RewriteCond %{HTTP_REFERER} ^$ RewriteCond %{HTTP_REFERER}!^[ RefererURL1].*$ [NC] RewriteCond %{HTTP_REFERER}!^[ RefererURL2].*$ [NC] RewriteRule ^(.*)$ - [F] RewriteRule.*.gz$ - [F].gz RewriteRule ^/$ /www/ [R] URL"/" /www/ HTTP_REFERER HTTP_USER_AGENT REQUEST_FILENAME,HTTP_HOST mod_setenvif Apache mod_setenvif Apache [ Referer URL] SetEnvIf REFERER "[ Referer URL]" Lilith Order deny,allow

19 deny from all allow from env=lilith [ Referer URL] SetEnvIf REFERER "[ Referer URL]" Lilith Order Allow,Deny allow from all deny from env=lilith.htaccess httpd.conf <Directory /usr/local/httpd/htdocs/direct_limit> Options Indexes FollowSymLinks RewriteEngine on RewriteCond %{HTTP_REFERER} ^$ RewriteCond %{HTTP_REFERER}!^[ RefererURL].*$ [NC] RewriteRule ^(.*)$ - [F] </Directory> mod_setenvif mod_rewite mod gzip mod_gzip.c apache (patch & update) # /usr/apache/bin/apxs -i -a -c mod_gzip.c Solaris /usr/ucb/cc Sun gcc # mv /usr/ucb/cc /usr/ucb/cc_old # ln -s /usr/local/bin/gcc /usr/ucb/cc # /usr/apache/bin/apxs -i -a -c mod_gzip.c # rm /usr/ucb/cc # mv /usr/ucb/cc_old /usr/ucb/cc LogFormat LogFormat "%h %l %u %t "%r " %>s %b mod_gzip: %{mod_gzip_compression_ratio}npct." common_with_mod_gzip ( ) CustomLog IfModule CustomLog /var/apache/logs/access_log common_with_mod_gzip <IfModule mod_gzip.c> mod_gzip_on Yes mod_gzip_minimum_file_size 300 mod_gzip_maximum_file_size 0 mod_gzip_maximum_inmem_size mod_gzip_keep_workfiles No mod_gzip_temp_dir /tmp mod_gzip_item_include file.html$ mod_gzip_item_include file.jsp$ mod_gzip_item_include file.php$ mod_gzip_item_include file.cgi$ mod_gzip_item_include file.txt$ mod_gzip_item_include file.shtml$ mod_gzip_item_include mime ^text/.* mod_gzip_item_include mime ^application/x-httpd-php mod_gzip_item_include mime ^httpd/unix-directory$ mod_gzip_item_include handler ^perl-script$ mod_gzip_item_include handler ^server-status$ mod_gzip_item_include handler ^server-info$ mod_gzip_item_exclude file.css$ 19

20 mod_gzip_item_exclude file.js$ mod_gzip_item_exclude mime ^image/.* </IfModule> ( ) access_log mod_gzip: 73pct. 73% gif mod gzip mod bandwidth http # /usr/apache/bin/apxs -c mod_bandwidth.c # /usr/apache/bin/apxs -i -a mod_bandwidth.so apx apx httpd.conf mod_bandwidth # mkdir /usr/apache/bindwidth # mkdir mkdir /usr/apache/bindwidth/link # mkdir mkdir /usr/apache/bindwidth/master # chown -R apache:apache mkdir /usr/apache/bindwidth httpd.conf LoadModule bandwidth_module libexec/mod_bandwidth.so AddModule mod_bandwidth.c <IfModule mod_bandwidth.c> BandWidthModule On BandWidthDataDir /usr/apache/bindwidth BandWidthPulse </IfModule> <Directory "/var/apahce/htdocs/bandlimit_dir"> BandWidth /24 0 BandWidth all </Directory> <Directory "/var/apahce/htdocs/file"> LargeFileLimit MinBandWidth all </Directory> bandlimit_dir /24 8Mbyte/sec file 1000KByte 8Mbyte/sec BandWidthPulse BandWidth IP IP / rate 0 MinBandWidth rate LargeFileLimit filesize KBytes 20

21 4.7 Star and Moon (1) Perl URL URL Netscape Explorer access_log URL referer_log agent_log agent_log TransferLog LogFormat 3 CustomLog LogFormat # TransferLog logs/access_log # # LogFormat <format_string> <command> LogFormat "%h %l %u %t "%r " %>s %b" common LogFormat "%{Referer}i -> %U" referer # agent_log # LogFormat "%{User-agent}i" agent CustomLog access_log common CustomLog referer_log referer # agent # CustiomLog agent_log agent (2)GIF/JPG GIF JPG HTML GIF/JPG # GIF/JPG object-is-image SetEnvIf Request_URI ".(gif) (jpg)$" object-is-image # object-is-image # CustomLog <directory> <command> <ENV> CustomLog access_log common env=!object-is-image CustomLog referer_log referer env=!object-is-image (3)CGI AddHandler <Direcotry> Options ExecCGI CGI <Directory> <Directory > </Directory> <Directory> Options None/All / Options Includes SSI Options ExecCGI ServerName ScriptAlias /cgi-bin/ "/home/httpd/html/cgi-bin" AccessConfig /dev/null ResourceConfig /dev/null 21

22 AddHandler cgi-script.cgi Star and Moon # CGI ExecCGI <Directory "/home/httpd/html"> Options Indexes FollowSymLinks ExecCGI AllowOverride None Order allow,deny Allow from all </Directory> (4) FlollowSymLinks/FlollowSymLinksIfOwnerMatch FollowSymLinks SymLinksIfOwnerMatch <Directory "/home/httpd/html"> # Options Indexes FollowSymLinks ExecCGI Options Indexes -FollowSymLinks +SymLinksIfOwnerMatch ExecCGI AllowOverride None Order allow,deny Allow from all </Directory> (5) FlollowSymLinks/FlollowSymLinksIfOwnerMatch FlollowSymLinks FlollowSymLinksIfOwnerMatch <Directory /> Options FollowSymLinks </Directory> <Directory /home/httpd/html> Options -FollowSymLinks +SymLinksIfOwnerMatch </Directory> DocumentRoot Alias RewriteRule AllowOverride URL overrides (.htaccess Apache.htaccess AllowOverride None <Directory /> AllowOverride None </Directory> (6) DirectoryIndex index DirectoryIndex index.html index.shtml (7) MaxRequestsPerChild MaxRequestPerChild 22

23 23 Star and Moon MaxRequestsPerChild ,000 KeepAliveTimeout 60 # httpd.conf # # standalone( )/Inetd( ) ServerType standalone # Apache # httpd.conf ServerRoot ServerRoot "/usr/local/apache" # PidFile /usr/local/apache/logs/httpd.pid # # NFS # #LockFile /var/run/httpd.lock # Timeout 300 # Port 80 # webuser webgroup apache # webuser web User webuser Group webgroup # ServerAdmin info@domain.co.jp # DNS ServerName # HTML DocumentRoot "/home/httpd/html" <Directory /> Options FollowSymLinks AllowOverride None </Directory> <Directory "/home/httpd/html"> Options Indexes -FollowSymLinks ExecCGI AllowOverride None Order allow,deny Allow from all </Directory> # UserDir public_html <Directory "/home/*/public_html">

24 Options Indexes ExecCGI AllowOverride None order deny,allow allow from all </Directory> Star and Moon # URL DirectoryIndex index.html # # AccessFileName access.conf # AccessFileName.htaccess <Files ~ "^.ht"> Order allow,deny Deny from all </Files> DefaultType text/plain # DNS # on off IP (on/off) # on == DNS, off == DNS HostnameLookups on # ErrorLog /usr/local/apache/logs/error_log # # TransferLog logs/access_log # error_log LogLevel warn # # CustomLog <directory> <command> LogFormat "%h %l %u %t "%r " %>s %b" common LogFormat "%{Referer}i -> %U" referer LogFormat "%{User-agent}i" agent #.gif,.jpg SetEnvIf Request_URI ".(gif) (jpg)$" object-is-image CustomLog access_log common env=!object-is-image CustomLog referer_log referer env=!object-is-image CustomLog agent_log agent env=!object-is-image # ScriptAlias /cgi-bin/ "/home/httpd/html/cgi-bin/" <Directory "/home/httpd/html/cgi-bin"> AllowOverride None Options None Order allow,deny Allow from all </Directory> # INDEX ReadmeName 24

25 HeaderName ReadmeName README HeaderName HEADER # AddType application/x-tar.tgz # handler-name #.cgi CGI AddHandler cgi-script.cgi AddType text/html.shtml AddHandler server-parsed.shtml 25

26 4.8 Apache VineLinux Apache www Apache httpd.conf /etc/httpd/conf httpd.conf (gedit) /etc/httpd/conf httpd.conf root / etc httpd conf httpd.conf httpd.cont httpd.conf #ServerName ServerName Apache apachectl Apache [root]# /usr/local/apache/bin/apachectl configtest Syntax OK [root]# Syntax OK ServerName SererName [root@]# /usr/local/apache/bin/apachectl configtest Syntax error on line 274 of /usr/local/apache/conf/httpd.conf: Invalid command 'SererName', perhaps mis-spelled or defined by a module not included in the server configuration [root@]# Warning Apache Apache Apache Apache apachectl [root]# /usr/local/apache/bin/apachectl start [root]# ServerName ServerName httpd: cannot determine local host name. Use the ServerName directive to set it manually. /usr/local/apache/bin/apachectl start: httpd could not be started It Worked! The Apache Web Server is Installed on this Web Site! Apache 26

27 User apache HostnameLookups off HostnameLookups on #AddHandler cgi-script.cgi # httpd kterm.sh [httpd.start] httpd [httpd.restart] Star and Moon www Apache httpd.conf [/root]#setup [ ] [Tab] [ ] httpd [Space] [httpd] * [Tab] [ ] 27

28 Webmin Star and Moon Webmin Vine Linux Webmin DNS Samba NFS Apache Postfix Web Webmin URL Window Window OK Webmin Window root root Window OK Window OK Webmin Window Webmin Webmin webmin Webmin webmin Webmin [localhost:10000] Webmin 28

29 29 Star and Moon

30 Samba Samba( ) UNIX UNIX Windows NT/2000 / GPL(GNU General Public License) Samba Andrew Tridgell 1992 Linux Linux Sun HP UNIX Samba 1000 UNIX Samba Linux Windows NT/2000 Samba Quantum Andrew Tridgell VA Software Jeremy Allison ( ) Samba 3.0 Windows Active Directory Linux Window users Windows XP Vine Linux Linux user TIGGER PC:windowsXP/2000/98/ME IP: ,10 Samba user share Linux Vine Linux IP: Samba Samba # rpm -qa grep samba samba _ja_1.2-0vl1 samba-client _ja_1.2-0vl1 samba-common _ja_1.2-0vl1 6.2 Samba Samba Samba X samba ja-12.i586.rpm X Samba 30

31 6.3 ( ) [root]# rpm -qa grep samba samba _ja_1.2-0vl1 samba-client _ja_1.2-0vl1 samba-common _ja_1.2-0vl1 (3 ) rpm -e rpm -e rpm -qa grep samba [root]# rpm -e samba ja-10 [root]# rpm -e samba-client ja-10 [root]# rpm -e samba-common ja samba (1)Samba CD-ROM [ ] [ ] [CD ] CD CD Auto-run CD [OK] (2)CD-ROM(samba ja-12.i586.rpm) (3) /tmp (4)CD-ROM CD-ROM CD-ROM [root]# umount /dev/cdrom [root]#cd /tmp (4) / samba ja-12.i586.rpm Samba root [root]# rpm -ivh samba ja-12.i586.rpm Preparing... ########################################### [100%] 1:samba ########################################### [100%] [root]# 6.5 /etc/samba/smb.conf Linux Samba FTP Samba Web Samba smb.conf(/etc /etc/samba ) SWAT Web Samba smb.conf [global] workgroup = N-GROUP --> (1) Windows server string = Samba Server --> (2) security = user --> (3) 31

32 encrypt passwords = yes --> (4) socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF= > (5) ; interfaces = / /24 --> (6) map to guest = Bad User --> (7) guest ok = Yes coding system = euc --> (8) client code page = > (9) [homes] --> (10) LINUX comment = Home Directories browseable = no --> Windows Windows home ( yes) writable = yes --> [samba] comment = Kyoyu -->(11) path = /home/samba --> (a) read only = no --> (b) guest only = yes --> (c) guest ok = yes --> (d) [public] comment = Public space; anyone can write any files. path = /home/samba/public force group = public writeable = Yes force create mode = 0664 force directory mode = 0775 guest ok = Yes (1) Windows (2) Windows Linux "Samba Server" "Samba %h" (3) user: Linux (Samba ) share: Linux (Samba ) domain: Windows (4) Windows95 OSR2,Windows98,Windows Me,WindowsNT4.0/2000 (5) (6) NIC ; 32

33 (7) guest Bad User: Never: (8) euc: Linux "????" sjis: Windows Shift JIS Linux cap: Machintosh,Netatalk (9) Windows 932 (10) [homes] Linux (11) Linux samba /home/samba (a) Windows Linux (b) (c) guest ok = yes guest (d) yes Samba smb.conf smb.conf SWAT 6.6 smb.conf testparm #testparm samba 6.7 Windows95 Linux /etc/passwd Windows98 WindowsNT 4.0 Windows2000 Windows Linux 2 Windows samba JB Windows samba samba Windows Linux Windows98 SAMBA Samba /etc/passwd 33

34 Samba Samba Samba Samba Linux samba # useradd -m share share # smbpasswd -a share New SMB password:xxxxxx Retype New SMB password:xxxxxx Password changed for user share. Linux Samba (smb.conf ) /etc/samba /etc # mksmbpasswd.sh < /etc/passwd > /etc/samba/smbpasswd # chmod 600 /etc/samba/smbpasswd share # smbpasswd share New SMB password:xxxxxx Retype New SMB password:xxxxxx Password changed for user share. Samba Linux Samba Samba /etc/passwd cat /etc/passwd mksmbpasswd.sh > /etc/samba/smbpasswd chmod 600 /etc/samba/smbpasswd root / Samba Samba smbpasswd username (username ) Samba Samba Samba smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd service smb restart smb smb ntsysv chkconfig serviceconf passwd Samba pam_smbpass PAM passwd Linux Samba 34

35 pam_cracklib.so /etc/pam.d/system-auth password required /lib/security/pam_smbpass.so nullok use_authtok try_first_pass 6.8 Samba Samba Samba # /etc/rc.d/init.d/smb start Windows Linux 6.9 # ntsysv smb 6.10 Samba [root]# /usr/sbin/smbd -D [root]# /usr/sbin/nmbd -D 6.11 Samba [root]# smbclient -L Linux( ) 6.12 Samba smbstatus utmp Samba Samba smbstatus Samba : smbstatus [root]# smbstatus Samba version ja-12 Service uid gid pid machine monyo monyo monyo misa ( ) Fri Jun 22 00:44: Locked files: Pid DenyMode R/W Oplock Name DENY_NONE RDWR EXCLUSIVE+BATCH /home/monyo/lion.txt Fri Jun 22 00:45: DENY_NONE RDWR EXCLUSIVE+BATCH /home/monyo/.txt Fri Jun 22 00:46: DENY_WRITE RDONLY EXCLUSIVE+BATCH /home/monyo/chargen.exe Fri Jun 22 00:44: Share mode memory usage (bytes): (99%) free + 296(0%) used + 104(0%) overhead = (100%) total 35

36 SWAT (STATUS) Samba smbstatus cron Samba utmp Samba utmp utmp configure --with-utmp configure Samba Linux Samba Samba with-utmp Samba smb.conf 1 utmp [global] utmp = yes last 2 Samba Samba : last last grep smb monyo smb/0 misa Sun Jun 1710:28-11:36 (01:08) smbguest smb/2 misa Sun Jun 1710:27-11:36 (01:08) monyo smb/0 misa Sun Jun 1710:27-10:27 (00:00) smbguest smb/0 mayuka Sat Jun 1623:05-23:15 (00:10) smbguest smb/1 yukako Sat Jun 1622:48-11:36 (12:48) smbguest smb/0 yukako Sat Jun 1622:48-22:58 (00:10) Samba utmp directory [global] utmp = yes utmp directory = /var/log/samba/ utmpx wtmpx touch /var/log/samba/utmpx last -f : last -f %last -f /var/log/samba/utmpx tako smb/1 misa Thu Jun 2123:54 still logged in utmp utmp smbguest : ac 36

37 %ac -d smbguest Jun 2 total 1.81 Jun 3 total 0.95 Jun 4 total 0.30 Jun 6 total 0.05 Jun 9 total 7.03 Jun 16 total 2.35 Jun 17 total Windos Windows Samba TCP/IP Microsoft Samba WindowsXP Samba Windows XP [ ] [ ] [ ] [ ] " : " " Wondows98/WindowsNT(ServicePack3 samba root Windows95/98 lmhosts Windows lmhosts Vine Linux samba VSL samba WindowsNT Winodws95 lmhosts Winnt system32 WINS LMHOSTS ON LMHOSTS ServicePack3 (Service pack3 VSL PC ) [HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services Rdr Parameters] 37

38 "EnablePlainTextPassword"=dword: Check 1 VlineLinux Check 2 VlineLinux Check 3 windows Check 4 Samba 6.15 Samba security( ) 4 user share server domain security = user / / uid security = share tree connection ( ) security = server Samba SMB Samba PDC Windows NT Server Samba smb.conf Samba NT Samba NT encrypt passwords = yes smbpasswd smb.conf [global] security = server workgroup = EXAMPLE password server = HOST1PASSSERV2 EXAMPLE NT HOST1 NT PASSSERV2 DNS NetBIOS 38

39 NT UNIX samba security = domain Samba Windows (SAM) NT NT Samba security = server Samba Remote Procedure Call(RPC) SAMBA NT Samba WindowsNT (SRVMGR.EXE) WindowsNT SAMBA NetBIOS Samba NT smbpasswd -j GROUP -r PDCname GROUP NT PDCname NT smbpasswd: Joined domain GROUP. /etc/samba/smb.conf [global] security = domain domain logins = yes encrypt passwords = yes workgroup = GROUP password server = PDCname GROUP NT PDCname NT SAMBA PDC PDC SAMBA SAMBA PDC Samba Samba /etc/samba/smb.conf [global] security = user domain logins = yes WindowsNT OS encrypt passwd = yes 39

40 smb passwd file = /etc/samba/smbpasswd os level = 34 3 local master = yes preferred master = yes domain master = yes logon script = %U.bat PATH [netlogon] comment = The domain logon service path = /export/samba/logon public = no writeable = no browsable = no touch /export/samba logon smb restart 40

41 SWAT 7.1 WEB Samba (SWAT) swat xinetd SWAT F/W xinetd xinetd xinetd /etc/xinetd.d/swat /etc/xinetd.d/swat [root]# cd /etc/xinetd.d [root]# more swat service swat { disable = no port = 901 socket_type = stream wait = no only_from = user = root server = /usr/sbin/swat log_on_failure += USERID } only_from SWAT SWAT only_from only_from = / xxx /etc/xinetd.d/swat root [root]# chkconfig swat on [root]# service xinetd restart xinetd : [ OK ] xinetd : [ OK ] 7.2 SWAT Vine Linux SWAT (1)/etc/inetd.conf swat stream tcp nowait.400 root /usr/sbin/swat swat (2) # /etc/rc.d/init.d/inet restart (3)/etc/hosts.allow swat: (4) #cd /var #mkdir share #chmod a+w #chown share share #chgrp share share 41

42 (5) Vine Linux (Mozilla) Windows samba IP LAN root Linux root SWAT 42

43 GLOBALS coding system euc client code page 932 workgroup N-GROUP netbios name SMBATALK server string %L: Samba %v on %h 43

44 interfaces security USER encrypt passwords Yes Star and Moon [ SHARE] Linux share [ ] (share Linux /var/share ) 44

45 share path /var/share guest account nobody writeable Yes guest ok Yes [ STATUS] (PASSWORD) share

46 smbd smbd nmbd nmbd smbd/nmbd share ******** ******** LinuxSmba] share 46

47 47 Star and Moon

48 7.3 Windows Star and Moon smb.conf TCP/IP IP WindowsNT Linux Samba Linux (1) Windows98 Microsoft " Microsoft TCP/IP(NIC) TCP/IP IP DNS Linux smb.conf Windows98 Samba Windows98 (2) Windows2000 Samba Windows2000 Samba Samba (3) : Linux NetBIOS Server /home/public Server public (4) Linux (Samba) Windows98/Me SMB ( ) Windows NT OS Linux UNIX OS SMB Samba Windows98 [ ] [ ] regedit HKEY_LOCAL_MACHNE System CurrentControlSet Services VxD Vnetsup [ ] [ ] [DWORD ] EnablePlainTextPassword Windows Samba Windows98 WindowsNT4.0 Windows2000 SAMBA 48

49 7.4 Samba Star and Moon Windows Linux ( ) Linux Windows (1) 1.samba-client _ja_1.2_ovl1 2.samba-common _ja_1.2_ovl1 3.samba _ja_1.2_ovl1 #rpm-ivh/mnt/cdrom/vine/rpms/ samba _ja_1.2_ovl1.i386.rpm (2) #mkdir /home/public (3) 777 #chmod 1777 /home/public 777 #ls -al /home/public (4)Samba smb.conf /etc/smb.conf global home pninters [global] coding system = SJIS Shift JIS EUC Extended UNIX Code JIS7 CAP Macintosh ecrypt passwords client code page = 932 map to guest workgroup = Windows security = share encrypt passwords = yes socket options server string dns proxy DNS guest account os level [public] path = writeable = yes force user = root create mask = 0666 guest ok = yes (5)smb.com #testparm 49

50 (6)Samba #/etc/rc.d/init.d/smb start Star and Moon Samba #/etc/rc.d/init.d/smb stop (7)Samba [/root]#setup [ ] [Tab] [ ] Enter httpd [Space] [smb] * [Tab] Enter [Tab] [ ] Enter Samba /etc/hosts localhost.localdomain localhost sam.domein.com sam 2 IP 50

51 Anonymous FTP Star and Moon Anonymous FTP FTP 8.1 Vine Linux 2.6 XXXXXXX IP LAN URL YYYYYYYYYY ZZZZZZZZZZ 8.2 Linux Anonymous FTP Vine Linux anonymous ftp ftp ProFTPD /etc/inetd.conf FTP /etc/inetd.conf (upgrade ) Vine ProFTPD inetd /etc/inetd.conf ftp (Vine ) ftp # #ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -l-a #ftp stream tcp nowait root /usr/sbin/tcpd in.proftpd -l-a # /etc/rc.d/init.d/inet restart 8.3 ProFTPD /etc/rc.d/init.d/proftpd start Vine ProFTPD /sbin/chkconfig --add proftpd ProFTPD Vine 2.0 wu-ftpd FTP Apache ProFTPD ProFTPD unix unix OS FTP ProFTPD GNU Public License(GPL) 51

52 GPL ProFTPD Apache ".htaccess" ".ftpaccess" FTP anonymous FTP Production Version: 1.2.5rc1 Released: 12/19/2001 ftp://ftp.infoscience.co.jp/pub/proftpd/distrib/ tar tar -xzf proftpd tar.gz "proftpd-1.0.1" README configure make make install INSTALL /usr/local/sbin /etc /usr/local/bin configure --prefix=[prefix-dir] configure --prefix=/usr proftpd /usr/sbin /usr/bin /etc/proftpd.conf inetd (proftpd inetd ) FTP anonymous/guest proftpd.conf 52

53 8.4 FTP proftpd Vine Linux (gedit) proftpd #rpm -q proftpd Star and Moon proftpd #rpm -q proftpd proftpd vl1 (1)inetd.conf Vine Linux (gedit) inetd.conf inetd.conf /etc/inetd.conf inetd.conf #ftp stream tcp nowait root /usr/sbin/tcpdin.proftpd # (2)proftpd.conf /etc/proftpd.conf proftpd.conf ServerType standalone ServerType inetd (3)inetd /etc/rc.d/init.d/inetrestart FTP (4)proftpd [/root]#setup [ ] [Tab] [ ] httpd [Space] [proftpd] [*] [Tab] [ ] 53

54 telnet Telnet Vine Linux Windows Telnet Host Name Linux ls root TELNET SSH TELNET /etc/inetd.conf telnet "#" # telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd inetd # /etc/rc.d/init.d/inet restart root ssh ssh root root /etc/ssh/sshd_config 38 PermitRootLogin yes PermitRootLogin no ssh reload # /etc/rc.d/init.d/sshd reload 54

55 10 Star and Moon 10.1 Windows Print Screen X xwd -root -out XWD XWD jpeg png RedHat7.3 ImageMagic import -? import -screen.jpg.jpg.png.gif.pct TIFF display GUI 10.2 WW URL GNOME -> -> ->gedit SHIFT SHIFT+SPACE 55