Problemi e Soluzioni di un sistemista informatico » Uncategorized

if (isInNet(host, “172.17.0.0″, “255.255.0.0″)){
return “DIRECT”;
}
if (isInNet(host, “172.22.0.0″, “255.255.0.0″)){
return “DIRECT”;
}
if (isInNet(host, “192.168.0.0″, “255.255.255.0″)){
return “DIRECT”;
}
if (isInNet(host, “10.10.0.0″, “255.255.0.0″)){
return “DIRECT”;
}
if (isInNet(host, “159.213.89.64″, “255.255.255.224″)){
return “DIRECT”;
}

if (dnsDomainIs(host, “.pippo.it”)) {
return “DIRECT”;
}
if (dnsDomainIs(host, “.pluto.it”)) {
return “DIRECT”;
}

if (
shExpMatch(host,”*.pippo.it”) ||
shExpMatch(host,”www.topolino.it”)
) {
return “DIRECT”;
}

return “PROXY squid.prvprato1:3128; PROXY squid01.prvprato1:3128; PROXY squid02.prvprato1:3128″;
// DIRECT”;
}

Configurazione di Postfix + Ldap

admin — Thu, 13 Nov 2008 15:31:50 +0000

main.cf

mail_owner = postfix
#
myhostname = proxy-tmp.pippo.it

mydomain = pippo.it
myorigin = $mydomain
mydestination = $myhostname, localhost.$mydomain, localhost

mynetworks = 127.0.0.0/8 172.21.1.15/32 192.168.0.20/32 192.168.0.25/32 192.168.0.21/32 192.168.0.22/32

helpful_warnings = yes
inet_protocols = ipv4

#If this parameter is non-empty (the default), then the Postfix SMTP server will reject mail for unknown local users.
#To turn off local recipient checking in the Postfix SMTP server, specify “local_recipient_maps =” (i.e. empty).
local_recipient_maps =

local_transport = error:local mail delivery is disabled
virtual_alias_maps = hash:/etc/postfix/virtual

relay_domains =
relay_recipient_maps =
parent_domain_matches_subdomains = debug_peer_list smtpd_access_maps

# Filtri sul “client” smtp che si connette al server
#La connessione può avvenire dall’interno (solo x mail2k3 e le macchine in MZ e i server in DMZ) oppure da internet
# Il default o comunque l’ultima opzione è permettere l’accesso perchè se si connettono da internet non posso specificarli a mano.
##Devo specificare in access_client chi può fare cosa fra gli indirizzi che conosco.
smtpd_client_restrictions =
permit_mynetworks,
check_client_access hash:/etc/postfix/maps/access_client
reject_rbl_client sbl.spamhaus.org,
reject_rbl_client zen.spamhaus.org,
permit

## Necessario per specificare il “next hop” verso exchange x mail in ricezione
transport_maps = hash:/etc/postfix/transport

# Filtri sul “RCPT TO” quindi sull’indirizzo di destinazione
smtpd_recipient_restrictions =
check_recipient_access ldap:/etc/postfix/maps/ldap-access.cf,
check_recipient_access hash:/etc/postfix/maps/access_recipient,
permit_mynetworks,
reject_non_fqdn_recipient,
reject_invalid_hostname,
reject

## Controllo degli header (da implementare)
header_checks = regexp:/etc/postfix/header_checks

readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
html_directory = no
setgid_group = postdrop
command_directory = /usr/sbin
manpage_directory = /usr/local/man
daemon_directory = /usr/libexec/postfix
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
queue_directory = /var/spool/postfix
data_directory = /var/lib/postfix
debug_peer_level = 4
———————————————————————————–
maps/access_recipient:

pippo.it 551 Indirizzo inesistente. Si prega di Telefonare al +39 055.5449
——————————————————————————————
maps/ldap-access.cf

version = 3
server_host = dc01.pippo.local
search_base = dc=pippo, dc=local
query_filter = (&(proxyAddresses=*smtp:%s*)(&(!(userAccountControl:1.2.840.113556.1.4.803:=2)))(objectClass=*)(!(displayNamePrintable=nomail)))

result_attribute = mail

### ATTENZIONE – Questa è la parte + importante e NON DOCUMENTATA! Occorre che la risposta ### sia: ” OK username o mail”

result_format = OK %s
bind = yes
bind_dn = CN=utente,CN=Users,DC=pippo,DC=local
bind_pw = password
#debuglevel = 1

——————————————————————————————–

##################################################################
ATTENZIONE – Questa è la parte + importante e NON DOCUMENTATA! Occorre che la risposta sia:
“OK username o mail”
e NON vicevers come è documentato:
“username o mail OK”
##################################################################

Installa postfix con mysql e ldap

admin — Tue, 04 Nov 2008 11:26:50 +0000

OpenLdap:
env CPPFLAGS=”-I/usr/local/include -I/usr/local/ssl/include -I/usr/local/ssl/include/openssl” LDFLAGS=”-L/usr/local/lib -L/usr/local/ssl/lib” ./configure –with-wrappers –disable-slapd
make depend
make
make install

Postfix:
make -f Makefile.init makefiles CCARGS=”-I/usr/local/include -DHAS_LDAP -DHAS_MYSQL -I/usr/include -I/usr/include/mysql” AUXLIBS=”-L/usr/local/lib -lldap -L/usr/lib -llber -L/usr/lib/mysql -lmysqlclient -lz -lm”
make
make install

Robocopy – backup e script

admin — Wed, 24 Sep 2008 20:21:51 +0000

Scaricare robocopy da:

http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

Il resourse kit è compatibile con Windows XP e Windows Server 2003 ma l’eseguibile (robocopy.exe) funziona anche su altri sistemi (windows 2000 per es.)

A chi interessa solo eseguibile e documentazione può trovalo nel seguente link:

robocopy

Con l’installazione standard gli eseguibili finiscono in

C:\Programmi\Windows Resource Kits\Tools\

Una guida dettagliata di tutti i parametri è la seguente:

http://www.ss64.com/nt/robocopy.html

Robocopy è una utility eccezionale e può essere usata anche con una comoda GUI liberamente scaricabile

qui

Nel seguente sito c’è un buon esempio di utilizzo automatico:

http://korel.com.au/vbs/robocopy-log-scanner/

Di seguito elenco alcuni usi “classici” di robocopy come strumento di backup:

robocopy.exe “C:\Documents and Settings\Utente\” E:\Mirror\ /E /COPYALL /ZB LOG:e:\log.log /XO

sysprep in 3 mosse

admin — Fri, 12 Sep 2008 07:29:36 +0000

da lanciare una volta installato e configurato il pc:

c:\sysprep\sysprep.exe -mini -quiet -reseal

ghostare il pc

Al riavvio re-inserire tutti i dati e FARE ATTENZIONE… NON FUNZIONA LA MASCHERA X LA PASS DI ADMINISTRATOR, Il pc mantiene quella della macchina ghostata!

Saluti

Problemi allo spooler di stampa

admin — Thu, 11 Sep 2008 01:31:03 +0000

Per risolvere:
eliminare tutti i driver delle stampanti (terze parti) e le stampanti
stesse.
riavviare
testare lo spooler
re-installare le stampanti

–
Il messaggio e’ stato analizzato alla ricerca di virus o
contenuti pericolosi da MailScanner, ed e’
risultato non infetto.

Condivisione e Protezione file su Windows XP

admin — Wed, 10 Sep 2008 13:46:06 +0000

Oggi il problema era diventare proprietario di file e cartelle su windows XP

Alla fine, grazie al buon…

http://www.upyou.it/sections+print+20/gestione-permessi-rete-windows-xp.html

ho trovato la soluzione:

disattivare

“Utilizza condivisione file semplice”

nel menu

-> opzioni cartella -> visualizzazioni

v. img

Installa squid 2.5-STABLE4 dai sorgenti

admin — Sat, 06 Sep 2008 21:41:38 +0000


./configure --prefix=/usr/lib/squid --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --datadir=/usr/share/doc/squid-2.5.STABLE --libdir=/usr/lib/squid --sysconfdir=/etc/squid --enable-gnuregex --enable-delay-pools --enable-err-language=Italian --enable-kill-parent-hack --enable-linux-netfilter --enable-auth="basic ntlm" --enable-basic-auth-helpers="getpwnam LDAP MSNT multi-domain-NTLM SASL SMB winbind" --enable-ntlm-auth-helpers="SMB winbind" --enable-digest-auth-helpers="password" --enable-external-acl-helpers="ip_user ldap_group unix_group wbinfo_group winbind_group"

Installare mplayer dai sorgenti

admin — Sat, 06 Sep 2008 21:40:12 +0000

./configure --enable-gui --language=it,en --codecsdir=/usr/local/lib/codecs --win32codecsdir=/usr/local/lib/codecs --xanimcodecsdir=/usr/local/lib/codecs --realcodecsdir=/usr/local/lib/codecs

make

make install

Installare Openssh dai sorgenti

admin — Sat, 06 Sep 2008 21:38:52 +0000

./configure --sysconfdir=/etc/ssh --with-tcp-wrappers --with-md5-passwords make -j 7 make install


controllare che il file /etc/ld.so.conf contenga le path delle librerie epoi lanciare

ldconfig
Questo di seguito è il file /etc/rc.d/rc.sshd
####################/etc/rc.d/rc.sshd#####################################
root@proxy2:~# cat /etc/rc.d/rc.sshd

#!/bin/sh

# Start/stop/restart the secure shell server:
sshd_start() {

  # Create host keys if needed.

  if [ ! -r /etc/ssh/ssh_host_key ]; then

    /usr/local/bin/ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key -N ''

  fi

  if [ ! -f /etc/ssh/ssh_host_dsa_key ]; then

    /usr/local/bin/ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''

  fi

  if [ ! -f /etc/ssh/ssh_host_rsa_key ]; then

    /usr/local/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''

  fi

  /usr/local/sbin/sshd -f /etc/ssh/sshd_config

}
sshd_stop() {

  killall sshd

}
sshd_restart() {

  if [ -r /var/run/sshd.pid ]; then

    echo "WARNING: killing listener process only.  To kill every sshd process, you must"

    echo "         use 'rc.sshd stop'.  'rc.sshd restart' kills only the parent sshd to"

    echo "         allow an admin logged in through sshd to use 'rc.sshd restart' without"

    echo "         being cut off.  If sshd has been upgraded, new connections will now"

    echo "         use the new version, which should be a safe enough approach."

    kill `cat /var/run/sshd.pid`

  else

    killall sshd

  fi

  sleep 1

  sshd_start

}
case "$1" in

'start')

  sshd_start

  ;;

'stop')

  sshd_stop

  ;;

'restart')

  sshd_restart

  ;;

*)

  echo "usage $0 start|stop|restart"

esac
################################# FINE ######################################################
decommentare le seguenti righe nel file

/etc/ssh/sshd_config
HostKey /etc/ssh/ssh_host_rsa_key

HostKey /etc/ssh/ssh_host_dsa_key
lanciare

ln -s /etc/ssh/moduli /usr/local/etc/

Riavviare sshd

Installa Openssl dai sorgenti

admin — Sat, 06 Sep 2008 21:38:09 +0000


./config -shared

make

make test

make install

export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:/usr/lib/pkgconfig:/usr/local/ssl/lib/pkgconfig
[salvare in /etc/rc.d/rc.local]
controllare che il file /etc/ld.so.conf contenga le path delle librerie epoi lanciare

ldconfig

export PATH=$PATH:/usr/local/apache/bin:/usr/local/mysql/bin export PKG_CONFIG_PATH=$PKG_CONFIG_PATH:/usr/local/lib/pkgconfig:/usr/lib/pkgconfig:/usr/local/ssl/lib/pkgconfig

Installa apache php mysql dai sorgenti

admin — Sat, 06 Sep 2008 21:37:29 +0000

tar -zxvf mysql-standard-5.0.16-linux-i686-glibc23.tar.gz shell> groupadd mysql shell> useradd -g mysql mysql shell> cd /usr/local shell> gunzip < /PATH/TO/MYSQL-VERSION-OS.tar.gz | tar xvf - shell> ln -s FULL-PATH-TO-MYSQL-VERSION-OS mysql shell> cd mysql shell> scripts/mysql_install_db --user=mysql shell> chown -R root . shell> chown -R mysql data shell> chgrp -R mysql . shell> bin/mysqld_safe --user=mysql &


mkdir /var/log/mysql

root@lnx498:/usr/local/mysql# ln -s /usr/local/mysql/data/lnx498.err /var/log/mysql/
cp support-files/mysql.server /etc/rc.d/rc.mysqld
tar -zxvf apache_1.3.34.tar.gz
tar -jxvf php-4.4.1.tar.bz2
cd apache_1.3.34

./configure --enable-module=so

make

make install

cd ../php_XXX

env CFLAGS="-DEAPI" ./configure --with-mysql=/usr/local/mysql --with-openssl=/usr/local/ssl --with-apxs=/usr/local/apache/bin/apxs --enable-mbstring --with-mm=/usr/local

make

make install
modifica /usr/local/lib/php.ini

metti register_global = On
##############mod_php.conf#####################################################

#

# mod_php - PHP Hypertext Preprocessor module

#
# Load the PHP module:

LoadModule php4_module libexec/libphp4.so
# Tell Apache to feed all *.php files through the PHP module:

AddType application/x-httpd-php .php
# This will display PHP files in colored syntax form.  Use with caution.

#AddType application/x-httpd-php-source .phps

################################################################################
da aggiungere in fondo a httpd.conf
ricordati di agg /usr/local/apache/bin:/usr/local/mysql/bin alla PATH
tar -jxvf phpMyAdmin-2.7.0.tar.bz2

mv phpMyAdmin-2.7.0 phpMyAdmin

root@lnx498:/Dati/Software/Linux/phpmyadmin# mv phpMyAdmin phpmyadmin root@lnx498:/Dati/Software/Linux/phpmyadmin# mv phpmyadmin/ /usr/local/apache/htdocs/

Installare Oracle 9.2.0.4 su Slackware 10

admin — Sat, 06 Sep 2008 21:35:08 +0000

Oracle9204OnSlackware10

Come compilare con gtk glib

admin — Sat, 06 Sep 2008 21:24:06 +0000

env PKG_CONFIG_PATH=/usr/local/lib/pkgconfig LD_LIBRARY_PATH=/usr/local/lib \ ./configure