Debian | Covax Blog

Category Archives: Debian

Заметки о Debian.

Прозрачная авторизация на Apache в AD

Posted on 19.07.2018 by Covax

Имеем Debian 9.5 и AD Windows 2012.

apt install krb5-user libapache2-mod-auth-kerb msktutil apache2 php ntp ntpdate

1	apt install krb5-user libapache2-mod-auth-kerb msktutil apache2 php ntp ntpdate

mv /etc/krb5.conf /etc/krb5.conf.def

1	mv /etc/krb5.conf /etc/krb5.conf.def

nano /etc/krb5.conf

[libdefaults]
   default_realm = DOMAIN.LOCAL

[realms]
   DOMAIN.LOCAL = {
      kdc = ad1.domain.local
      kdc = ad2.domain.local
      default_domain = domain.local
      admin_server = ad1.domain.local
   }

[domain_realm]
   .domain.local = DOMAIN.LOCAL
   domain.local = DOMAIN.LOCAL

[libdefaults]

default_realm = DOMAIN.LOCAL

[realms]

DOMAIN.LOCAL = {

kdc = ad1.domain.local

kdc = ad2.domain.local

default_domain = domain.local

admin_server = ad1.domain.local

}

[domain_realm]

.domain.local = DOMAIN.LOCAL

domain.local = DOMAIN.LOCAL

Авторизируемся в AD

kinit -V admin@DOMAIN.LOCAL

1	kinit -V admin@DOMAIN.LOCAL

Включаем сервер в AD

msktutil -c -s host -s HTTP -s HTTP/debian --computer-name debian --server ad1.domain.local

1	msktutil -c -s host -s HTTP -s HTTP/debian --computer-name debian --server ad1.domain.local

chown root.www-data /etc/krb5.keytab
chmod 0640 /etc/krb5.keytab

1 2	chown root.www-data /etc/krb5.keytab chmod 0640 /etc/krb5.keytab

nano /etc/apache2/sites-enabled/000-default.conf

<Location />
 AuthType Kerberos
 AuthName "Domain Login"
 KrbMethodK5Passwd off
 Krb5Keytab /etc/krb5.keytab
 KrbServiceName HTTP/debian.domain.local@DOMAIN.LOCAL
 Require valid-user
</Location>

AuthType Kerberos

AuthName "Domain Login"

KrbMethodK5Passwd off

Krb5Keytab /etc/krb5.keytab

KrbServiceName HTTP/debian.domain.local@DOMAIN.LOCAL

Require valid-user

</Location>

Чтобы работало в FF нужно в about:config прописать

network.negotiate-auth.delegation-uris: .domain.local
network.negotiate-auth.trusted-uris: .domain.local

1 2	network.negotiate-auth.delegation-uris: .domain.local network.negotiate-auth.trusted-uris: .domain.local

Debian 8 systemd в контейнере LXC

Posted on 08.08.2017 by Covax

No Comments

apt-get update
apt-get install systemd systemd-sysv
reboot

apt-get update

apt-get install systemd systemd-sysv

reboot

Debian 8 + mosquitto + openhab2 + influxdb + grafana

Posted on 01.12.2016 by Covax

No Comments

Установка всего этого добра на Debian 8 Jessie.

apt-get update
apt-get upgrade

wget -qO - 'http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key' | apt-key add -
wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | apt-key add -
wget -qO - 'https://repos.influxdata.com/influxdb.key' | apt-key add -
wget -qO - 'https://packagecloud.io/grafana/stable/gpgkey' | apt-key add -
echo "deb http://repo.mosquitto.org/debian jessie main" | tee /etc/apt/sources.list.d/mosquitto.list
echo "deb http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee /etc/apt/sources.list.d/webupd8team-java.list
echo "deb-src http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee -a /etc/apt/sources.list.d/webupd8team-java.list
echo 'deb https://dl.bintray.com/openhab/apt-repo2 stable main' | tee /etc/apt/sources.list.d/openhab2.list
echo "deb https://repos.influxdata.com/debian jessie stable" | tee /etc/apt/sources.list.d/influxdb.list
echo "deb https://packagecloud.io/grafana/stable/debian/ jessie main" | tee /etc/apt/sources.list.d/grafana_stable.list
echo "deb-src https://packagecloud.io/grafana/stable/debian/ jessie main" | tee -a /etc/apt/sources.list.d/grafana_stable.list
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys EEA14886

apt-get install apt-transport-https
apt-get update
apt-get install mosquitto oracle-java8-installer openhab2 openhab2-addons influxdb grafana

systemctl start openhab2.service
systemctl status openhab2.service

systemctl daemon-reload
systemctl enable openhab2.service

apt-get update

apt-get upgrade

wget -qO - 'http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key' | apt-key add -

wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | apt-key add -

wget -qO - 'https://repos.influxdata.com/influxdb.key' | apt-key add -

wget -qO - 'https://packagecloud.io/grafana/stable/gpgkey' | apt-key add -

echo "deb http://repo.mosquitto.org/debian jessie main" | tee /etc/apt/sources.list.d/mosquitto.list

echo "deb http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee /etc/apt/sources.list.d/webupd8team-java.list

echo "deb-src http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee -a /etc/apt/sources.list.d/webupd8team-java.list

echo 'deb https://dl.bintray.com/openhab/apt-repo2 stable main' | tee /etc/apt/sources.list.d/openhab2.list

echo "deb https://repos.influxdata.com/debian jessie stable" | tee /etc/apt/sources.list.d/influxdb.list

echo "deb https://packagecloud.io/grafana/stable/debian/ jessie main" | tee /etc/apt/sources.list.d/grafana_stable.list

echo "deb-src https://packagecloud.io/grafana/stable/debian/ jessie main" | tee -a /etc/apt/sources.list.d/grafana_stable.list

apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys EEA14886

apt-get install apt-transport-https

apt-get update

apt-get install mosquitto oracle-java8-installer openhab2 openhab2-addons influxdb grafana

systemctl start openhab2.service

systemctl status openhab2.service

systemctl daemon-reload

systemctl enable openhab2.service

Debian 9 Stretch.

apt update
apt upgrade
apt install apt-transport-https dirmngr

wget -qO - 'http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key' | apt-key add -
wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | apt-key add -
wget -qO - 'https://repos.influxdata.com/influxdb.key' | apt-key add -
wget -qO - 'https://packagecloud.io/grafana/stable/gpgkey' | apt-key add -
echo "deb http://repo.mosquitto.org/debian stretch main" | tee /etc/apt/sources.list.d/mosquitto.list
echo "deb http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee /etc/apt/sources.list.d/webupd8team-java.list
echo "deb-src http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee -a /etc/apt/sources.list.d/webupd8team-java.list
echo 'deb https://dl.bintray.com/openhab/apt-repo2 stable main' | tee /etc/apt/sources.list.d/openhab2.list
echo "deb https://repos.influxdata.com/debian stretch stable" | tee /etc/apt/sources.list.d/influxdb.list
echo "deb https://packagecloud.io/grafana/stable/debian/ stretch main" | tee /etc/apt/sources.list.d/grafana_stable.list
echo "deb-src https://packagecloud.io/grafana/stable/debian/ stretch main" | tee -a /etc/apt/sources.list.d/grafana_stable.list
apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys EEA14886

apt update
apt install mosquitto oracle-java8-installer openhab2 openhab2-addons influxdb grafana

systemctl start openhab2.service
systemctl status openhab2.service

systemctl daemon-reload
systemctl enable openhab2.service

apt update

apt upgrade

apt install apt-transport-https dirmngr

wget -qO - 'http://repo.mosquitto.org/debian/mosquitto-repo.gpg.key' | apt-key add -

wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | apt-key add -

wget -qO - 'https://repos.influxdata.com/influxdb.key' | apt-key add -

wget -qO - 'https://packagecloud.io/grafana/stable/gpgkey' | apt-key add -

echo "deb http://repo.mosquitto.org/debian stretch main" | tee /etc/apt/sources.list.d/mosquitto.list

echo "deb http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee /etc/apt/sources.list.d/webupd8team-java.list

echo "deb-src http://ppa.launchpad.net/webupd8team/java/ubuntu trusty main" | tee -a /etc/apt/sources.list.d/webupd8team-java.list

echo 'deb https://dl.bintray.com/openhab/apt-repo2 stable main' | tee /etc/apt/sources.list.d/openhab2.list

echo "deb https://repos.influxdata.com/debian stretch stable" | tee /etc/apt/sources.list.d/influxdb.list

echo "deb https://packagecloud.io/grafana/stable/debian/ stretch main" | tee /etc/apt/sources.list.d/grafana_stable.list

echo "deb-src https://packagecloud.io/grafana/stable/debian/ stretch main" | tee -a /etc/apt/sources.list.d/grafana_stable.list

apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys EEA14886

apt update

apt install mosquitto oracle-java8-installer openhab2 openhab2-addons influxdb grafana

systemctl start openhab2.service

systemctl status openhab2.service

systemctl daemon-reload

systemctl enable openhab2.service

Связка openhab, influxdb, grafana.

$ influx
Connected to http://localhost:8086 version 1.3.1
InfluxDB shell version: 1.3.1
> CREATE DATABASE openhab_db
> CREATE USER admin WITH PASSWORD 'SuperPassword' WITH ALL PRIVILEGES
> CREATE USER openhab WITH PASSWORD 'Password1'
> CREATE USER grafana WITH PASSWORD 'Password'
> GRANT ALL ON openhab_db TO openhab
> GRANT READ ON openhab_db TO grafana
> exit

$ influx

Connected to http://localhost:8086 version 1.3.1

InfluxDB shell version: 1.3.1

> CREATE DATABASE openhab_db

> CREATE USER admin WITH PASSWORD 'SuperPassword' WITH ALL PRIVILEGES

> CREATE USER openhab WITH PASSWORD 'Password1'

> CREATE USER grafana WITH PASSWORD 'Password'

> GRANT ALL ON openhab_db TO openhab

> GRANT READ ON openhab_db TO grafana

> exit

nano /etc/influxdb/influxdb.conf

1	nano /etc/influxdb/influxdb.conf

[http]  
enabled = true  
bind-address = ":8086"
auth-enabled = true
...

[http]

enabled = true

bind-address = ":8086"

auth-enabled = true

...

nano /etc/grafana/grafana.ini

1	nano /etc/grafana/grafana.ini

[users]
# disable user signup / registration
allow_sign_up = false
...
[auth.anonymous]
# enable anonymous access
enabled = true

[users]

# disable user signup / registration

allow_sign_up = false

...

[auth.anonymous]

# enable anonymous access

enabled = true

Установка pptpd на debian в openvz

Posted on 28.06.2014 by Covax

No Comments

Загружаем модули:

modprobe ppp_mppe
modprobe ppp_deflate
modprobe zlib_deflate
modprobe ppp_async
modprobe ppp_generic
modprobe slhc
modprobe crc_ccitt

modprobe ppp_mppe

modprobe ppp_deflate

modprobe zlib_deflate

modprobe ppp_async

modprobe ppp_generic

modprobe slhc

modprobe crc_ccitt

И добавляем их в автозагрузку в /etc/modules.

Затем в ноде:

vzctl set 100 --features ppp:on --save
vzctl start 100
vzctl set 100 --devices c:108:0:rw --save
vzctl exec 100 mknod /dev/ppp c 108 0
vzctl exec 100 chmod 600 /dev/ppp

vzctl set 100 --features ppp:on --save

vzctl start 100

vzctl set 100 --devices c:108:0:rw --save

vzctl exec 100 mknod /dev/ppp c 108 0

vzctl exec 100 chmod 600 /dev/ppp

В виртуалке стандартно настраиваем pptpd.