shared libraries: liblzma.so.0: cannot open shared object file: No such file or這個問題將導致zypper指令往後無法執行！解決的方法如下：
directory
1. Install:# zypper in gsynaptics2. 檢查/etc/X11/xorg.conf在InputDevice的section中應該會有"SHMConfig" "on"75 Section "InputDevice"76 Driver "synaptics"77 Identifier "Mouse[1]"78 Option "Buttons" "5"79 Option "Device" "/dev/input/mice"80 Option "Emulate3Buttons" "on"81 Option "HorizScrollDelta" "0"82 Option "InputFashion" "Mouse"83 Option "Name" "Synaptics;Touchpad"84 Option "Protocol" "explorerps/2"85 Option "SHMConfig" "on"86 Option "Vendor" "Sysp"87 Option "ZAxisMapping" "4 5"88 EndSection3. 不用重新開機至"電腦"->"控制中心"->"硬體" 點選Touchpad or Mouse就可以設定了。
params.c:OpenConfFile() - Unable to open configuration file "/etc/samba/dhcp.conf":Permission denied
linux-8zbb:/etc/samba # tail -f /var/log/samba/log.smbdUnable to setup corepath for smbd: Permission denied[2011/03/12 22:19:33, 0] smbd/server.c:1134(main)smbd version 3.5.7-1.17.1-2505-SUSE-SL11.4-x86_64 started.Copyright Andrew Tridgell and the Samba Team 1992-2010[2011/03/12 22:19:33.539756, 0] passdb/secrets.c:73(secrets_init)Failed to open /etc/samba/secrets.tdb[2011/03/12 22:19:33.540823, 0] passdb/secrets.c:73(secrets_init)Failed to open /etc/samba/secrets.tdb[2011/03/12 22:19:33.541149, 0] smbd/server.c:1234(main)ERROR: smbd can not open secrets.tdb
1. linux-8zbb:~ # zypper in sipcalcRetrieving repository 'OpenSUSE 11.3 update' metadata [done]Building repository 'OpenSUSE 11.3 update' cache [done]Loading repository data...Reading installed packages...Resolving package dependencies...The following NEW package is going to be installed:sipcalc1 new package to install.Overall download size: 29.0 KiB. After the operation, additional 58.0 KiB will be used.Continue? [y/n/?] (y): yRetrieving package sipcalc-1.1.5-0.pm.2.1.x86_64 (1/1), 29.0 KiB (58.0 KiB unpacked)Retrieving: sipcalc-1.1.5-0.pm.2.1.x86_64.rpm [done (15.7 KiB/s)]Installing: sipcalc-1.1.5-0.pm.2.1 [done]Additional rpm output:warning: /var/cache/zypp/packages/Packman_opensuse_11.3/x86_64/sipcalc-1.1.5-0.pm.2.1.x86_64.rpm: Header V3 DSA/SHA1 Signature, key ID 9a795806: NOKEY2. linux-8zbb:~ # sipcalc 10.10.10.1/23 <- 指定某個IP subnet-[ipv4 : 10.10.10.1/23] - 0[CIDR]Host address - 10.10.10.1Host address (decimal) - 168430081Host address (hex) - A0A0A01Network address - 10.10.10.0Network mask - 255.255.254.0Network mask (bits) - 23Network mask (hex) - FFFFFE00Broadcast address - 10.10.11.255Cisco wildcard - 0.0.1.255Addresses in network - 512Network range - 10.10.10.0 - 10.10.11.255Usable range - 10.10.10.1 - 10.10.11.254linux-8zbb:~ # sipcalc eth0 <- 針對目前的interface-[int-ipv4 : eth0] - 0[CIDR]Host address - 10.10.10.253Host address (decimal) - 168430333Host address (hex) - A0A0AFDNetwork address - 10.10.10.0Network mask - 255.255.255.0Network mask (bits) - 24Network mask (hex) - FFFFFF00Broadcast address - 10.10.10.255Cisco wildcard - 0.0.0.255Addresses in network - 256Network range - 10.10.10.0 - 10.10.10.255Usable range - 10.10.10.1 - 10.10.10.254
1. Uncompress 2010_1215_RT3572_Linux_STA_v2.5.0.0.DPO.bz22. Plug in WUSB600N to your Linux box.3. To execute "demsg" command to examine the vendor id and product id of WUSB600N. (it should be 1737/0079)4. Added {USB_DEVICE(0×1737,0×0079)}, /* Linksys WUSB600N v2 */ to the /common/rtusb_dev_id.c file5. Modified /os/linux/config.mk file to give you WPA encryption:# Support Wpa_SupplicantHAS_WPA_SUPPLICANT=y# Support Native WpaSupplicant for Network MagangerHAS_NATIVE_WPA_SUPPLICANT_SUPPORT=y6. # make && make install && reboot7. After system reboot successfully then plug in the WUSB600N to the Linux box again, and to execute "ifconfig -a" command then you will see the new device ra0
Pdsh is a an efficient, multithreaded remote shell client which executes commands on multiple remote hosts in parallel. Pdsh implements dynamically loadable modules for extended functionality such as new remote shell services and remote host selection.
1. Install pdsh on the Server.
2. Import ssh key of Server1 to the node1 and node2.
3. Add hostname-to-IPaddress of node1/node2 in /etc/hosts on Server1.
4. To execute: pdsh -w ssh:root@node[1,2] ls 2> /dev/null then node1 and node2 will to execute ls command and report to the Server1 as following:
lawrence@suse:~/.ssh> pdsh -w ssh:root@node[1,2] ls 2> /dev/null
node1: anaconda-ks.cfg
node1: Desktop
node1: id_rsa.pub
node1: install.log
node1: install.log.syslog
node2: anaconda-ks.cfg
node2: bin
node2: conf-examples
node2: cpulimit-1.1.tar.gz
node2: cpulimit.tar.gz
node2: Desktop
node2: id_rsa.pub
node2: install.log
node2: install.log.syslog
node2: mibs
node2: mibs_20100925.rar
5. Combine multiple commands:
lawrence@suse:~/.ssh> pdsh -w ssh:root@node[1,2] "cd /tmp;ls" 2> /dev/null
node1: pulse-Bk60xcI9xlDq
node1: virtual-root.pHV8bR
node2: etherXXXXWj7KYw
node2: gconfd-root
node2: keyring-RdVKdK
node2: mapping-root
node2: scim-panel-socket:0-root
1. 準備某一Linux版本的live CD，Fedora 14是個不錯的選擇！2. 用Live CD開完機後，確定預升級的檔案系統處於無掛載的狀態。3. 利用tune2fs加上ext4的attribute：# tune2fs -O extents,uninit_bg,dir_index [device file]4.檢查檔案系統：# fsck -pf [device file]5. 掛載:# mount -t ext4 [device file] [mount point]6. 修改/etc/fstab後，重新開機。
1. 相容Ext32. 單一檔案大小可到16TB，檔案系統可支援到1EB3. 新的存放方式，增加檔案讀寫速度
1. 開啟/boot/grub/menu.lst2. 新增kernel參數如下:2.1 noht -> 不work....2.2 maxcpus=1 -> work!
echo "0" > /sys/devices/system/node/node0/cpu1/online
全速:
echo "performance" > /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
低速省電:
echo "powersave" > /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
userspace:
echo "userspace" > /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
(需配合cpuspeed daemon)
ondemand:
echo "ondemand" > /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor
1. 買個Prolific PL2303的USB to RS232 console: 似乎很多家都是用他的chipset，至少我手邊的兩家不同廠商都是。2. 到這裡下載driver，請注意它有區分10.6.x與104.x/10.5.x！裝錯版本可是驅動不了的！
3. 裝好driver後將Mac開機後，插入USB to RS232 consoel。4. 至/dev目錄去檢查是否有多出一個usb device file，for example: /dev/tty.usbxxx。5. 開啟Mac終端機。6. 輸入 screen /dev/tty.usbxxx 9600，9600就是你的baud rate，至於怎麼用screen command請參考我以前的筆記。
1. 簡單且實用2. 跨平台(Windows/Mac/Linux/Mobile)3. 2GB免費空間
1. zypper in docutils2. tar jxvf nautilus-dropbox-0.6.3.tar.bz2 -C /usr/local/src/3. cd /usr/local/src/nau*4. ./configure && make && make install
linux-8zbb:~ # zypper rr `zypper lr | awk '/No/{ print $3 }'`Repository 'openSUSE' not found by alias, number or URI.Removing repository 'Packman repository (openSUSE_11.1)' [done]Repository 'Packman repository (openSUSE_11.1)' has been removed.Removing repository 'openSUSE 11.2-0' [done]Repository 'openSUSE 11.2-0' has been removed.Removing repository 'opensuse11.2_oss' [done]Repository 'opensuse11.2_oss' has been removed.Removing repository 'opensuse11.2_update' [done]Repository 'opensuse11.2_update' has been removed.Removing repository 'opensuse_11.2_non-oss' [done]Repository 'opensuse_11.2_non-oss' has been removed.Removing repository 'opensuse 11.3 iso' [done]Repository 'opensuse 11.3 iso' has been removed.Removing repository 'packman' [done]Repository 'packman' has been removed.Removing repository 'openSUSE-11.1-Debug' [done]Repository 'openSUSE-11.1-Debug' has been removed.Removing repository 'openSUSE-11.1-Non-Oss' [done]Repository 'openSUSE-11.1-Non-Oss' has been removed.Removing repository 'openSUSE-11.1-Oss' [done]Repository 'openSUSE-11.1-Oss' has been removed.Removing repository 'openSUSE-11.1-Source' [done]Repository 'openSUSE-11.1-Source' has been removed.Removing repository 'openSUSE-11.1-Update' [done]Repository 'openSUSE-11.1-Update' has been removed.
1. 解析度只有1024*7682. 沒有3D特效3. 有開啟3D特效的user account，登入GNOME後，畫面一片空白
ATI doesn’t provide anymore repository for their binary drivers, so we have to build them on each needed system. When the 11.3 hits the street, the procedure was complex and not so easy, now with their 10.7 ( 8.753 ) version, it’s doable.
Terminator, multiple terminals in one window. The goal of this project is to produce a useful tool for arranging terminals. It is inspired by programs such as gnome-multi-term, quadkonsole, etc. in that the main focus is arranging terminals in grids (tabs is the most common default method, which Terminator also supports).
Ctrl-Shift-E: 新增terminal並垂直切割Ctrl-Shift-O: 新增terminal並水平切割Ctrl-Shift-P: 回到上一個terminalCtrl-Shift-N: 至下一個terminalCtrl-Shift-W: 關閉目前的terminalCtrl-Shift-Q: 結束terminatorF11: 全螢幕顯示
/usr/sbin/install_bcm43xx_firmware
# zypper in rhythmbox2. 將音樂同步到iPod中:
我是透過ibook，這應該沒什麼好說的。 :p3.開啟rhythmbox:
開啟rhythmbox後，馬上偵測到了我的iPod，並可以播放音樂了，中文顯示沒問題，也能把專輯封面顯示出來感覺就好像是用iTune播放，hey OpenSUSE11.3 is awesome!
#zypper ar -f http://download.virtualbox.org/virtualbox/rpm/opensuse/11.3 vbox
# zypper in VirtualBox-3.2
# useradd(usermod) -G vboxusers lawrence
./skype: error while loading shared libraries: libQtGui.so.4: cannot open shared object file: No such file or directory
zypper install libQtGui.so.4z
修改step3中的radiusd.conf，讓FreeRADIUS知道要用LDAPs做認證。測試:
# vi /etc/radiusd.conf
........................
ldap {
# set this to 'yes' to use TLS encrypted connections
# to the LDAP database by using the StartTLS extended
# operation.
# The StartTLS operation is supposed to be used with normal
# ldap connections instead of using ldaps (port 689) connections
start_tls = yes
tls_cacertfile = /etc/openldap/cacerts/client.pem
#tls_cacertdir = /usr/local/etc/openldap/ssl/
# tls_certfile = /path/to/radius.crt
# tls_keyfile = /path/to/radius.key
# tls_randfile = /path/to/rnd
tls_require_cert = "demand"
........................
}
219 User-Name = "ldapuser"Note: x.x.x.x 代表LDAP Server的FQDN或IP address。
220 User-Password = "123456"
221 NAS-IP-Address = 255.255.255.255
222 NAS-Port = 0
223 Processing the authorize section of radiusd.conf
224 modcall: entering group authorize for request 0
225 modcall[authorize]: module "preprocess" returns ok for request 0
226 modcall[authorize]: module "chap" returns noop for request 0
227 modcall[authorize]: module "mschap" returns noop for request 0
228 rlm_realm: No '@' in User-Name = "ldapuser", looking up realm NULL
229 rlm_realm: No such realm "NULL"
230 modcall[authorize]: module "suffix" returns noop for request 0
231 rlm_eap: No EAP-Message, not doing EAP
232 modcall[authorize]: module "eap" returns noop for request 0
233 users: Matched entry DEFAULT at line 152
234 users: Matched entry DEFAULT at line 206
235 modcall[authorize]: module "files" returns ok for request 0
236 rlm_ldap: - authorize
237 rlm_ldap: performing user authorization for ldapuser
238 radius_xlat: '(uid=ldapuser)'
239 radius_xlat: 'dc=example,dc=com'
240 rlm_ldap: ldap_get_conn: Checking Id: 0
241 rlm_ldap: ldap_get_conn: Got Id: 0
242 rlm_ldap: attempting LDAP reconnection
243 rlm_ldap: (re)connect to x.x.x.x:389, authentication 0
244 rlm_ldap: setting TLS CACert File to /etc/openldap/cacerts/client.pem
245 rlm_ldap: setting TLS Require Cert to demand
246 rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to demand
247 rlm_ldap: starting TLS
248 rlm_ldap: bind as / to x.x.x.x:389
249 rlm_ldap: waiting for bind result ...
250 rlm_ldap: Bind was successful
251 rlm_ldap: performing search in dc=example,dc=com, with filter (uid=ldapuser)
252 rlm_ldap: Added password {crypt}$1$/vvYrM2W$omOGg5A7NQVDxGcTb6afR1 in check items
253 rlm_ldap: looking for check items in directory...
254 rlm_ldap: looking for reply items in directory...
255 rlm_ldap: user ldapuser authorized to use remote access
256 rlm_ldap: ldap_release_conn: Release Id: 0
257 modcall[authorize]: module "ldap" returns ok for request 0
258 modcall: leaving group authorize (returns ok) for request 0
259 rad_check_password: Found Auth-Type LDAP
260 auth: type "LDAP"
261 Processing the authenticate section of radiusd.conf
262 modcall: entering group LDAP for request 0
263 rlm_ldap: - authenticate
264 rlm_ldap: login attempt by "ldapuser" with password "123456"
265 rlm_ldap: user DN: uid=ldapuser,ou=People,dc=example,dc=com
266 rlm_ldap: (re)connect to x.x.x.x:389, authentication 1
267 rlm_ldap: setting TLS CACert File to /etc/openldap/cacerts/client.pem
268 rlm_ldap: setting TLS Require Cert to demand
269 rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to demand
270 rlm_ldap: starting TLS
271 rlm_ldap: bind as uid=ldapuser,ou=People,dc=example,dc=com/123456 to x.x.x.x:389
272 rlm_ldap: waiting for bind result ...
273 rlm_ldap: Bind was successful
274 rlm_ldap: user ldapuser authenticated succesfully
275 modcall[authenticate]: module "ldap" returns ok for request 0
276 modcall: leaving group LDAP (returns ok) for request 0
277 Sending Access-Accept of id 190 to x.x.x.x port 32896
# autoexpect此時系統會產生一個autoexpect的shell環境，並將使用者的動作紀錄起來，離開時請輸入exit指令，之後系統會產生個script.exp的紀錄檔（By default）。
原始script.exp（僅截取錄製的部份）:set timeout -1spawn $env(SHELL)match_max 100000expect -exact "]2;lawrence@X60:~/Desktop]1;X60lawrence@X60:~/Desktop> "send -- "ssh root@10"expect -exact [K"send -- ""expect -exact [K"send -- "127.0.0.1\r"expect -exact "127.0.0.1\rThe authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.\rRSA key fingerprint is fa:19:31:7a:ac:04:41:af:4c:38:b7:58:16:a3:14:f8.\rAre you sure you want to continue connecting (yes/no)? "send -- "yes\r"expect -exact "yes\rWarning: Permanently added '127.0.0.1' (RSA) to the list of known hosts.\r\rPassword: "send -- "1234\r"expect -exact "\rLast login: Fri Mar 12 17:06:12 2010\r\rHave a lot of fun...\r[1m[31mX60:~ # [m"send -- "vmstat -n 1 5\r"expect -exact "vmstat -n 1 5\rprocs -----------memory---------- ---swap-- -----io---- -system-- -----cpu------\rr b swpd free buff cache si so bi bo in cs us sy id wa st\r14 0 25644 20660 26124 464024 0 1 17 23 881 255 7 3 89 1 0\r0 0 25644 20148 26124 464536 0 0 0 0 1725 2206 6 2 93 0 0\r0 0 25644 20404 26124 464264 0 0 0 0 1877 2234 3 3 95 0 0\r0 0 25644 20404 26124 464224 0 0 0 0 1736 2186 4 1 95 0 0\r0 0 25644 20404 26124 464224 0 0 0 0 1628 2168 3 2 95 0 0\r[1m[31mX60:~ # [m"send -- "ex"expect -exact [K"send -- ""expect -exact [K"send -- "logout\r"expect -exact "logout\rConnection to 127.0.0.1 closed.\r\r]2;lawrence@X60:~/Desktop]1;X60lawrence@X60:~/Desktop> "send -- "exit\r"expect eof問題1:The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.\rRSA key fingerprint is fa:19:31:7a:ac:04:41:af:4c:38:b7:58:16:a3:14:f8.\rAre you sure you want to continue connecting (yes/no)? "預設SSH Server/Client連接時，會去紀錄對方的金鑰，也就是因為這個原因，讓expect沒有得到預期的輸出，因為SSH第n次連線後就不需要紀錄彼此的金鑰了。問題2:Last login: Fri Mar 12 17:06:12 2010\r\rHave a lot of fun...\r^[\[1m^[\[31mX60:~ # ^[(B^[\[m"每次登入系統的時間一定會是不一樣的，所以把它也註解掉。問題3:procs -----------memory---------- ---swap-- -----io---- -system-- -----cpu------\rr b swpd free buff cache si so bi bo in cs us sy id wa st\r14 0 25644 20660 26124 464024 0 1 17 23 881 255 7 3 89 1 0\r0 0 25644 20148 26124 464536 0 0 0 0 1725 2206 6 2 93 0 0\r0 0 25644 20404 26124 464264 0 0 0 0 1877 2234 3 3 95 0 0\r0 0 25644 20404 26124 464224 0 0 0 0 1736 2186 4 1 95 0 0\r0 0 25644 20404 26124 464224 0 0 0 0 1628 2168 3 2 95 0 0\r^[\[1m^[\[31mX60:~ # ^[(B^[\[m"當然不需要上一次vmstat的輸出結果，所以也需要註解掉。修改過後：set timeout -1spawn $env(SHELL)match_max 100000expect -exact "]2;lawrence@X60:~/Desktop]1;X60lawrence@X60:~/Desktop> "send -- "ssh root@10"expect -exact [K"send -- ""expect -exact [K"send -- "127.0.0.1\r"expect -exact "Password: "send -- "1234\r"expect -exact "#"send -- "vmstat -n 1 5\r"expect -exact "#"send -- "ex"expect -exact [K"send -- ""expect -exact [K"send -- "logout\r"expect -exact "logout\rConnection to 127.0.0.1 closed.\r\r]2;lawrence@X60:~/Desktop]1;X60lawrence@X60:~/Desktop> "send -- "exit\r"expect eof
lawrence@X60:~/Desktop> ./script2.expspawn /bin/bashlawrence@X60:~/Desktop> ssh root@127.0.0.1Password:Last login: Mon Mar 22 16:11:29 2010 from localhostHave a lot of fun...X60:~ # vmstat -n 1 5procs -----------memory---------- ---swap-- -----io---- -system-- -----cpu------r b swpd free buff cache si so bi bo in cs us sy id wa st0 0 31016 27124 23500 454188 0 1 16 23 880 303 7 3 89 1 00 0 31016 29204 23500 451648 0 0 0 20 1815 1834 2 3 95 0 00 0 31016 29204 23500 451676 0 0 0 0 1821 1878 2 2 96 0 00 0 31016 29700 23500 451232 0 0 0 0 1763 2029 3 2 95 0 00 0 31016 29700 23500 451184 0 0 0 0 1807 2241 2 2 95 0 0X60:~ # logoutConnection to 127.0.0.1 closed.lawrence@X60:~/Desktop> exitexitlawrence@X60:~/Desktop>
# hddtemp -d /dev/hda -S 60Mar 19 15:08:54 server hddtemp[3253]: /dev/hda: ST320011A: 33 CMar 19 15:09:54 server hddtemp[3253]: /dev/hda: ST320011A: 33 C
# vi /etc/sysconfig/hddtempHDDTEMP_OPTIONS="-l 192.168.0.1 -d /dev/hda -S 60"#-l: listen on a specific interface (in TCP/IP daemon mode)#-d: run hddtemp in TCP/IP daemon mode (port 7634 by default.)#-S: log temperature to syslog every s seconds.# /etc/init.d/hddtemp start# chkconfig hddtemp on
# while true; do date +%F-%H-%M-%S;nc 192.168.0.1 7634;echo"";sleep 1; done2010-03-19-15-13-23|/dev/hda|ST320011A|33|C|2010-03-19-15-13-24|/dev/hda|ST320011A|33|C|2010-03-19-15-13-25|/dev/hda|ST320011A|33|C|2010-03-19-15-13-26|/dev/hda|ST320011A|33|C|2010-03-19-15-13-27|/dev/hda|ST320011A|33|C
1 ddns-update-style interim;2 ignore client-updates;3 option opt-43 code 43 = ip-address;45 subnet 192.168.1.0 netmask 255.255.255.0 {67 # --- default gateway8 option routers 192.168.1.1;9 option subnet-mask 255.255.255.0;1011 option nis-domain "domain.org";12 option domain-name "domain.org";13 option domain-name-servers 192.168.1.1;1415 option time-offset -18000; # Eastern Standard Time16 # option ntp-servers 192.168.1.1;17 # option netbios-name-servers 192.168.1.1;18 # --- Selects point-to-point node (default is hybrid). Don't change this unless19 # -- you understand Netbios very well20 # option netbios-node-type 2;2122 range dynamic-bootp 192.168.1.128 192.168.1.254;23 default-lease-time 21600;24 max-lease-time 43200;25 option opt-43 = "192.168.1.100";2627 # we want the nameserver to appear at a fixed address28 #host ns {29 # next-server marvin.redhat.com;30 # hardware ethernet 12:34:56:78:AB:CD;31 # fixed-address 207.175.42.254;32 #}33 }
# /etc/init.d/dhcpd restart# chkconfig dhcpd on
1 #!/bin/bash2 while (true)3 do4 lftp $1 -u ftp,ftp -e "cd /pub;get file;bye"5 lftp $1 -u ftp,ftp -e "cd /pub;put file;bye"6 done
Line4: 以ftp account登入到FTP Server，並透過-e的指令將多個指令合併依序執行(切換到pub/抓取file/登出FTP)。Line5: 以ftp account登入到FTP Server，並透過-e的指令將多個指令合併依序執行(切換到pub/上傳file/登出FTP)。
server1:~/bin # ./ftpcon.sh 192.168.0.1
rootu1u2lawmysqlTOTAL=5
# yum install openswan*
修改Kernel相關參數，使得之後跑ipsec verify時不會出錯。# vi /etc/sysctl.conf*********************************************************************# example entries for /etc/sysctl.conf# forwarding is needed for subnet or l2tp connectionsnet.ipv4.ip_forward = 1# rp_filter is stupid and cannot deal decrypted packets "appearing out of# nowhere"net.ipv4.conf.default.rp_filter = 0# when using 1 interface for two networks, and in some other cases with# NETKEY, the kernel thinks it can be clever but breaks things.net.ipv4.conf.all.send_redirects = 0net.ipv4.conf.default.send_redirects = 0net.ipv4.icmp_ignore_bogus_error_responses = 1net.ipv4.conf.all.log_martians = 0net.ipv4.conf.default.log_martians = 0# these are non-ipsec specific security policies you should usenet.ipv4.conf.default.accept_source_route = 0net.ipv4.conf.all.accept_redirects = 0net.ipv4.conf.default.accept_redirects = 0*********************************************************************#sysctl -p
# cp/usr/share/doc/openswan-doc*/examples /etc/ipsec.d/hosttohost.conf# vi /etc/hosttohost.conf*********************************************************************# sample connections# This file is RCSID $Id: examples,v 1.5 1999/12/13 02:38:16 henry Exp $# sample tunnel (manually or automatically keyed)# Here we just use ESP for both encryption and authentication, which is# the simplest and often the best method.conn sample# left security gateway (public-network address)left=10.12.95.3# next hop to reach right#leftnexthop=10.44.55.66# subnet behind left (omit if left end of the tunnel is just the s.g.)leftsubnet=172.17.1.0/24# right s.g., subnet behind it, and next hop to reach leftright=10.12.95.2#rightnexthop=10.88.77.66rightsubnet=172.17.2.0/24# (manual) SPI number#spi=0x200# (manual) encryption/authentication algorithm and parameters to itesp=3des-md5-96#espenckey=[192 bits]#espauthkey=[128 bits]authby=secretauto=add*********************************************************************
# vi /etc/ipsec.secrets*********************************************************************include /etc/ipsec.d/*.secrets10.12.95.3 10.12.95.2 : PSK "1234567890"10.12.95.2 10.12.95.3 : PSK "1234567890"
# vi /etc/ipsec.conf*********************************************************************# /etc/ipsec.conf - Openswan IPsec configuration file## Manual: ipsec.conf.5## Please place your own config files in /etc/ipsec.d/ ending in .confversion 2.0 # conforms to second version of ipsec.conf specification# basic configurationconfig setup# Debug-logging controls: "none" for (almost) none, "all" for lots.# klipsdebug=none# plutodebug="control parsing"# For Red Hat Enterprise Linux and Fedora, leave protostack=netkeyprotostack=netkeynat_traversal=yesvirtual_private=oe=off# Enable this if you see "failed to find any available worker"nhelpers=0#You may put your configuration (.conf) file in the "/etc/ipsec.d/" and uncomment this.include /etc/ipsec.d/*.conf
# /etc/init.d/ipsec start/usr/libexec/ipsec/addconn Non-fips mode set in /proc/sys/crypto/fips_enabledipsec_setup: Starting Openswan IPsec U2.6.21/K2.6.18-164.6.1.el5...ipsec_setup: multiple ip addresses, using 10.12.95.3 on eth0ipsec_setup: /usr/libexec/ipsec/addconn Non-fips mode set in /proc/sys/crypto/fips_enabled
# ipsec verifyChecking your system to see if IPsec got installed and started correctly:Version check and ipsec on-path [OK]Linux Openswan U2.6.21/K2.6.18-164.6.1.el5 (netkey)Checking for IPsec support in kernel [OK]NETKEY detected, testing for disabled ICMP send_redirects [OK]NETKEY detected, testing for disabled ICMP accept_redirects [OK]Checking for RSA private key (/etc/ipsec.secrets) [OK]Checking that pluto is running [OK]Two or more interfaces found, checking IP forwarding [OK]Checking NAT and MASQUERADEing [N/A]Checking for 'ip' command [OK]Checking for 'iptables' command [OK]Opportunistic Encryption DNS checks:Looking for TXT in forward dns zone: centos.example.com [MISSING]Does the machine have at least one non-private address? [FAILED]
# ipsec auto --up sample104 "sample" #1: STATE_MAIN_I1: initiate003 "sample" #1: received Vendor ID payload [Openswan (this version) 2.6.21 ]003 "sample" #1: received Vendor ID payload [Dead Peer Detection]003 "sample" #1: received Vendor ID payload [RFC 3947] method set to=109106 "sample" #1: STATE_MAIN_I2: sent MI2, expecting MR2003 "sample" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected108 "sample" #1: STATE_MAIN_I3: sent MI3, expecting MR3003 "sample" #1: received Vendor ID payload [CAN-IKEv2]004 "sample" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_128 prf=oakley_sha group=modp2048}117 "sample" #2: STATE_QUICK_I1: initiate004 "sample" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0xca7bd686 <0x193e1d71 xfrm="3DES_0-HMAC_MD5" natoa="none" natd="none" dpd="">
# ping 172.17.2.100 -I 172.17.1.100 -c 10PING 172.17.2.100 (172.17.2.100) from 172.17.1.100 : 56(84) bytes of data.64 bytes from 172.17.2.100: icmp_seq=1 ttl=64 time=1.65 ms64 bytes from 172.17.2.100: icmp_seq=2 ttl=64 time=0.716 ms64 bytes from 172.17.2.100: icmp_seq=3 ttl=64 time=1.16 ms64 bytes from 172.17.2.100: icmp_seq=4 ttl=64 time=1.41 ms64 bytes from 172.17.2.100: icmp_seq=5 ttl=64 time=1.24 ms64 bytes from 172.17.2.100: icmp_seq=6 ttl=64 time=1.17 ms64 bytes from 172.17.2.100: icmp_seq=7 ttl=64 time=1.52 ms64 bytes from 172.17.2.100: icmp_seq=8 ttl=64 time=0.544 ms64 bytes from 172.17.2.100: icmp_seq=9 ttl=64 time=0.796 ms64 bytes from 172.17.2.100: icmp_seq=10 ttl=64 time=1.58 m
openswan-doc-2.6.21-5.el5_4.1openswan-2.6.21-5.el5_4.1
wget http://softlayer.dl.sourceforge.net/project/ss5/ss5/3.7.9-1/ss5-3.7.9-1.tar.gz
tar zxvf ss5-3.7.9-1.tar.gz
[root@server2 src]# tar zxvf ss5-3.7.9-1.tar.gz[root@server2 ss5-3.7.9]# ./configure[root@server2 ss5-3.7.9]# make[root@server2 ss5-3.7.9]# make install
找到auth與permit並將註解取消，注意我並沒有enable使用者需做認證的機制。[root@server2 ~]# vi /etc/opt/ss5/ss5.conf
# SHost SPort Authenticationauth 0.0.0.0/0 - -# Auth SHost SPort DHost DPort Fixup Group Band ExpDatepermit - 0.0.0.0/0 - 0.0.0.0/0 - - - - -
[root@server2 ~]# chkconfig --add ss5[root@server2 ~]# chkconfig ss5 on[root@server2 ~]# /etc/init.d/ss5 startdoneting ss5... [ OK ][root@server2 ~]#
最後可透過FireFox來測試Socks4/5.
工具->選項->進階->設定->手動設定Proxy:SOCKS主機: x.x.x.x Port: 1080並選擇SOCKS v4或是SOCKS v5
Server: exportfs *:/tmpClient: mount 192.168.0.254:/tmp /mnt/nfs
Server: exportfs *:/tmpClient: mount -o nfsvers=2 192.168.0.254:/tmp /mnt/nfs
Server: exportfs -o fsid=o *:/tmpClient: mount -t nfs4 192.168.0.254:/tmp /mnt/nfs
cat /proc/sys/net/ipv4/ip_no_pmtu_disc0 代表pmtud enable (default)1 代表pmtud disable
opensuse:~ # ping 10.12.64.220 -s 1450PING 10.12.64.220 (10.12.64.220) 1450(1478) bytes of data.From 10.12.95.3: icmp_seq=1 Frag needed and DF set (mtu = 1400)From 10.12.95.3 icmp_seq=1 Frag needed and DF set (mtu = 1400)1458 bytes from 10.12.64.220: icmp_seq=2 ttl=63 time=2.85 ms1458 bytes from 10.12.64.220: icmp_seq=3 ttl=63 time=4.97 ms1458 bytes from 10.12.64.220: icmp_seq=4 ttl=63 time=3.48 ms
1 #!/bin/bash23 vsftp_conf="/etc/vsftpd/vsftpd.conf"45 if [ -f $vsftp_conf ]; then6 if [ $# -ne 1 ]; then7 echo "Parameters is not allow"8 echo "usage: $0 on or $0 off"9 exit 110 fi1112 case "$1" in13 on) CMD='YES';;14 off) CMD='NO';;15 *)16 echo "format error!"17 exit 118 ;;19 esac2021 if [ $CMD = 'YES' ]; then22 sed 's/^.*anonymous_enable=.*/anonymous_enable=YES/' $vsftp_conf > /tmp/$$.vsftpd.conf23 mv -f /tmp/$$.vsftpd.conf $vsftp_conf24 /etc/init.d/vsftpd restart25 else26 sed 's/^.*anonymous_enable=.*/anonymous_enable=NO/' $vsftp_conf > /tmp/$$.vsftpd.conf27 mv -f /tmp/$$.vsftpd.conf $vsftp_conf28 /etc/init.d/vsftpd restart29 fi30 else echo "$vsftp_conf is not exist"31 fi
列5 先判斷/etc/vsftpd/vsftpd.conf是否存在，若不存在則回報檔案不存在。(列30)列6 判斷所傳入的引數是否為1個，若不是則回報錯誤並結束。 (列7~10)列12-19 使用case，判斷是on, off或是格式有誤。列21-24 若為on則設定anonymous_enable=YES，並重新啟動vsftpd。列25-28 若為off則設定anonymous_enable=NO，並重新啟動vsftpd。
[root@centos bin]# ./vsftpd.sh onShutting down vsftpd: [ OK ]Starting vsftpd for vsftpd: [ OK ][root@centos bin]# ftp localhostConnected to localhost.localdomain.220 (vsFTPd 2.0.5)530 Please login with USER and PASS.530 Please login with USER and PASS.KERBEROS_V4 rejected as an authentication typeName (localhost:root): ftp331 Please specify the password.Password:230 Login successful.Remote system type is UNIX.Using binary mode to transfer files.ftp>
[root@centos bin]# ./vsftpd.sh offShutting down vsftpd: [ OK ]Starting vsftpd for vsftpd: [ OK ][root@centos bin]# ftp localhostConnected to localhost.localdomain.220 (vsFTPd 2.0.5)530 Please login with USER and PASS.530 Please login with USER and PASS.KERBEROS_V4 rejected as an authentication typeName (localhost:root): ftp331 Please specify the password.Password:530 Login incorrect.Login failed.ftp>
1. 沒有提供Trial version2. 目前似乎沒有for Linux的版本
1. 預設的中文字型不好看。2. 即使我已經裝了Adobe flash player，還是不能播放Youtube的影片。
# monitor session 1 source interface Gi 0/11如此一來port 10就會成為port 11的mirror port。
# monitor session 1 destination interface Gi 0/10
1. OpenSSH:由上可知OpenSSH可由TCP wrappers託管，但是NFS與Apache則不行。（有自己的安全機制)
[root@centos ~]# ldd /usr/sbin/sshd | grep libwrap
libwrap.so.0 => /lib/libwrap.so.0 (0x003f9000)
2. NFS:
[root@centos ~]# ldd /usr/sbin/rpc.nfsd | grep libwrap
3. Apache:
[root@centos ~]# ldd /usr/sbin/httpd | grep libwrap
Netifera is a new modular open source platform for creating network security tools. This project provides many advantages for both security developers and researchers who want to implement new tools as well as the community of users of these tools.Netifera website
# mkdir -p /mnt/iso/1Step2. 掛載ISO檔：
# mount -o loop /mnt/nfs/CentOS-5.4*.iso /mnt/iso/1Step3. 安裝createrepo套件：
# yum install createrepoStep4. 產生來源repository：
# cd /mnt/isoStep5. 建立新repository設定檔：
# createrepo .
Step6. 準備升級：# vi /etc/yum.repos.d/centos54.repo[CentOS5.4 Repository]
baseurl=file:///mnt/iso
enabled=1
先將原本的repos全部rename成xxx.repo.bak成功的話就可看到下圖顯示準備更新成CentOS5.4的套件：
# yum clean all
# yum update
LinuxCommandAlso please let me know your favorite websites for learning Linux command line in the comments.
O'Reilly's Linux Command Directory
The Linux CookBook
Ols3 shell script
Apple MAC OSX 10.6.2 [未使用，好想用呀~哭]
CentOS 5.4 [使用中]
Ubuntu 9.10 [未使用]
OpenSUSE 11.2 [使用中]
Fedora 12 [快要出了]
Windows 7 [恩...]
Step1. Yast->Software->Software Repositories->Add->Local ISO Image添加OpenSUSE11.2镜像。遺憾的是.....我竟然在X Window幹下此等蠢事，zypper dup會將有衝突的軟件強制刪除，沒想到在Firefox開啟的狀態下，造成系統crash導致更新尚未完成！重開機後整個系統爛掉，唉！我可不能panic呀，冷靜下來進入failsafe mode重新再執行一次zypper dup，沒想到卻回報無法找到來源，原來還需要讓Kernel把loop的模組掛起來，於是便執行modprobe loop，如此一來就可以繼續升級的動作了。
Step2. 手動移除OpenSUSE 11.1的repositories
Step3. # zypper dup
# zypper ar http://ftp.gwdg.de/pub/linux/misc/packman/suse/11.2/ packmanUpdate2_安裝S10e(Broadcom Corporation BCM4312 802.11b/g)的wireless module:
# zypper ar http://download.opensuse.org/distribution/11.2/repo/oss/ opensuse11.2_oss
# zypper ar http://download.opensuse.org/distribution/11.2/repo/non-oss/opensuse_11.2_non-oss
# zypper ar http://download.opensuse.org/update/11.2/ opensuse11.2_update
# zypper in broadcom-wl*
# yum list updates
# yum update
copy / paste original vdi檔。
Windows->cmd->vboxmanage clonehd "original vdi" "new vdi"
OpenSUSE: ln -s /usr/share/fonts/truetype/uming.ttf
Ubuntu: ln -s /usr/share/fonts/truetype/arphic/uming.ttf
#!/bin/bash
select VAR in a1 a2 a3 a4 a5 exit
do
case $VAR in
a1) read -p "Delete a1? (y/Y/n/N)" FLAG
if [ $FLAG = y -o $FLAG = Y ]; then
rm -f ./a1
fi;;
a2) read -p "Delete a2? (y/Y/n/N)" FLAG
if [ $FLAG = y -o $FLAG = Y ]; then
rm -f ./a2
fi;;
a3) read -p "Delete a3? (y/Y/n/N)" FLAG
if [ $FLAG = y -o $FLAG = Y ]; then
rm -f ./a3
fi;;
a4) read -p "Delete a4? (y/Y/n/N)" FLAG
if [ $FLAG = y -o $FLAG = Y ]; then
rm -f ./a4
fi;;
a5) read -p "Delete a5? (y/Y/n/N)" FLAG
if [ $FLAG = y -o $FLAG = Y ]; then
rm -f ./a5
fi;;
exit) exit;;
esac
done
#!/bin/bash太久沒寫了腦袋打結了一下。
function re () {
local tmp
tmp=$1
if [ $tmp -eq 1 ]; then
total=1
else
re $(($tmp-1))
total=$(($tmp*$total))
fi
}
read -p "Data=" VAR
re $VAR
echo "$VAR!=$total"
d1.txt====================abc:12bob:25cdc:36OK:121Tomy:99Jack:108d2.txt====================Jack:9cdc:8OK:11Tomy:22bob:5abc:88試寫一 script 來處理 d1.txt d2.txt 使其變成abc:12:88bob:25:5cdc:36:8Jack:108:9OK:121:11Tomy:99:22
