- PDF 無料ダウンロード

Size: px

Start display at page:

Download ""

あやかかがんじ
5 years ago
Views:

2 /etc/passwd

3 /etc/passwd /etc/groups /etc/hosts /etc/passwd

4 /etc/passwd nobody:*:-2:-2:unprivileged User:/nohome:/noshell root:*:0:0:system Administrator:/var/root:/bin/tcsh daemon:*:1:1:system Services:/var/root:/noshell smmsp:*:25:25:sendmail User:/private/etc/mail:/noshell www:*:70:70:world Wide Web Server:/Library/WebServer:/noshell mysql:*:74:74:mysql Server:/nohome:/noshell sshd:*:75:75:sshd Privilege separation:/var/empty:/noshell unknown:*:99:99:unknown User:/nohome:/noshell

5 /etc/passwd

7 nibindd /etc/ hostconfig /etc/hostconfig NETINFOSERVER=-AUTOMATIC- emacsvi NETINFOSERVER=-YES- /etc/hostconfig sudo -s /etc/hostconfig % sudo -s Password: ***** # cp /etc/hostconfig /etc/hostconfig.dist # emacs /etc/hostconfig # exit sudo-s /etc/hostconfig

8 nidomain -l % nidomain -l tag=local udp=1033 tcp=1033 % nidomain -m test nidomain -l % nidomain -l tag=local udp=1033 tcp=1033 tag=test udp=1001 tcp=859 niutil % niutil -list -t localhost/test / 1 machines % niutil -list -t localhost/test /machines 2 myhost % niutil niutil -read -t localhost/test /machines/myhost name: myhost ip address: serves:./test niutil -list -read nidomain 1033 sudo nidomain -m test

9 niload nidump % nidump passwd -t localhost/local grep ^naito: naito:xxxxxxxxxxxxx:501:20::0:0:hisashi NAITO:/Users/naito:/bin/tcsh nidump testuser:xxxxxxxxxxxxx:502:20::0:0:test user:/users/testuser:/bin/tcsh /tmp/passwd niload % niload -m passwd -t localhost/test < /tmp/passwd % nidump passwd -t localhost/test testuser:xxxxxxxxxxxxx:502:20::0:0:testuser:/users/testuser:/bin/tcsh niutil % niutil -list -t localhost/test / 1 machines 3 users % niutil -list -t localhost/test /users 4 testuser % niutil -read -t localhost/test /users/testuser home: /Users/testuser name: testuser passwd: XXXXXXXXXXX realname: testuser shell: /bin/tcsh uid: 502

10 niutil -rparent % niutil -rparent -t localhost/local root domain: no parent % niutil -rparent -t localhost/local localhost/test

11 * /Library/SystemConfiguration/preferences.plist

12 passwd niutil % niutil -list -t xx.xxx/test / 1 machines 3 users 5 groups trusted_networks % niutil -t -createprop localhost/test / trusted_networks /24 % niutil -t -read localhost/test / master: myhost trusted_networks: /24 trusted_networks niload /32

13 top test local otherhost1 local myhost local otherhost2 top serves:./top, localhost/test test serves:./test,../top local local local otherhost1 myhost otherhost2 % niutil -t -appendprop localhost/top /machines/myhost serves./top % niutil -t -appendprop localhost/top /machines/myhost serves localhost/test % niutil -t -appendprop localhost/test /machines/myhost serves./test % niutil -t -appendprop localhost/test /machines/myhost serves../top

14 % niutil -t -rparent localhost/test /machines/myhost localhost/top root domain:no parent nibindd top test local otherhost1 local myhost local otherhost2

17 /LDAPv3/ldap.math.nagoya-u.ac.jp ldap.math.nagoya-u.ac.jp

18 math.nagoya-u.ac.jp dc=math,dc=nagoya-u,dc=ac,dc=jp o=graduate_school_of_mathematics_nagoya_university_japan math.nagoya-u.ac.jp dc=math,dc=nagoya-u,dc=ac,dc=jp ou=people,dc=math,dc=nagoya-u,dc=ac,dc=jp ou=hosts,dc=math,dc=nagoya-u,dc=ac,dc=jp uid=naito,ou=people,dc=math,dc=nagoya-u,dc=ac,dc=jp dn:dc=math,dc=nagoya-u,dc=ac,dc=jp dn:ou=people,dc=math,dc=nagoya-u,dc=ac,dc=jp dn:ou=hosts,dc=math,dc=nagoya-u,dc=ac,dc=jp dn:uid=naito,ou=people,dc=math,dc=nagoya-u,dc=ac,dc=jp cn:hisashi NAITO uid:naito homedir:/home/naito userpassword:xxxx

19 cn sn givenname mail mail

20 userpassword userpassword userpassword ou=people,dc=... ou=people naito

22 /BSD/local /BSD/xxx /BSD/local /BSD/xxx xxx

24 /home /home/foo software LocalApps /home /home/foo LocalApps System Disk System Disk Applications LocalApps HOME HOME Other Disk LocalApps Applications LocalApps nfsserver client1 and client2 /usr/local /etc/fstab /etc/vfstab /etc/fstab

25 FOO/Volumes/FOO /home /etc/exports /home client1 client2 FOO /etc/exports /Volumes/FOO client1 client2

26 mountd /etc/exports -ro -network mask /16 -maproot -mapall -maproot -mapall -maproot=bar -mapall=foo /etc/exports /home /home/foo -alldirs /etc/exports /home xxx.yyy /home client1 /home -ro -network mask exportfs -a exportfs

27 /shared /shared -mapall=foo client /shared /etc/exports /home client1 client2 /Volumes/FOO -ro client1 client2 /home FOOFOO /etc/exports /BSD/local /etc/exports

28 /home nfserver /home /home nfs rw /Volumes/FOO nfserver /Volumes/FOO /Applications/LocalApps nfs ro fstab /tmp/fstab nfsserver:/home - /home nfs - yes rw nfsserver:/volumes/foo - /Applications/LocalSoftwares nfs - yes ro /tmp/fstab % niload -m fstab -t localhost/top < /tmp/fstab

29 niutil % niutil -list -t localhost/top /mounts 5 nfsserver:/home 6 nfsserver:/volumes/foo % niutil -read -t localhost/top 5 dir: /home dump_freq: 0 name: nfsserver:/home opts: rw passno: 0 vfstype: nfs % niutil -read -t localhost/top 6fg dir: /Applications/LocalApps dump_freq: 0 name: nfsserver:/volumes/foo opts: ro passno: 0 vfstype: nfs ou=mounts,dc=... dc=math,dc=nagoya-u,dc=ac,dc=jp

30 dn: ou=mounts,dc=math,dc=nagoya-u,dc=ac,dc=jp ou: mounts objectclass: top objectclass: organizationalunit dn: cn=nfsserver:/home,ou=mounts,dc=math,dc=nagoya-u,dc=ac,dc=jp mountoption: rw mounttype: nfs cn:rabbit:/home objectclass: mount objectclass: top mountdumpfrequency: 0 mountdirectory:/home mounthost: nfsserver dn: cn=nfsserver:/volumes/foo,ou=mounts,dc=math,dc=nagoya-u,dc=ac,dc=jp mountoption: rw mounttype: nfs cn:rabbit:/home objectclass: mount objectclass: top mountdumpfrequency: 0 mountdirectory: /Applications/LocalSoftwares mounthost: nfsserver /Volumes/FOO /Applications/LocalApps

31 fools._foo._foo foo._foo rm /Developer/Tools/SplitForks /System/Library/CoreServices/FixupResourceForks FixupResourceForks

34 MD5 TLS TTLS PEAP PreShared Key 802.1x EAP TKIP WPA PPP LAN Ethernet 802.1x

36 802.1X

38 pem p12 der

40 VPN VPN PC

42 VPN VPN PC

43 VPN VPN PC

1. PKI (EDB/PKI) (Single Sign On; SSO) (PKI) ( ) Private PKI, Free Software ITRC 20th Meeting (Oct. 5, 2006) T. The University of Tokush

1. PKI (EDB/PKI) (Single Sign On; SSO) (PKI) ( ) Private PKI, Free Software ITRC 20th Meeting (Oct. 5, 2006) T. The University of Tokush PKI LAN EDB/PKI and Campus Wireless LAN Authentication EDB/PKI http://web.db.tokushima-u.ac.jp/edb-manual/pki.html http://ldap.db.tokushima-u.ac.jp/wireless/ @. E-mail: alex@ee.tokushima-u.ac.jp Id: itrc20th-20061005.tex,v