Compare commits
9 Commits
647e9c5555
...
main
Author | SHA1 | Date | |
---|---|---|---|
1eafeed5e9 | |||
f1011e625f | |||
cc63dbf51e | |||
acf9dbc9d0 | |||
9ad241eb32 | |||
28d6879ee8 | |||
bb20f9842c | |||
116065a9bd | |||
802428a5f9 |
1
sisr1/tp02-dns/.:
Normal file
1
sisr1/tp02-dns/.:
Normal file
@@ -0,0 +1 @@
|
|||||||
|
dns2-ab
|
111
sisr1/tp02-dns/dhcp/dhcpd.conf
Normal file
111
sisr1/tp02-dns/dhcp/dhcpd.conf
Normal file
@@ -0,0 +1,111 @@
|
|||||||
|
# dhcpd.conf
|
||||||
|
#
|
||||||
|
# Sample configuration file for ISC dhcpd
|
||||||
|
#
|
||||||
|
|
||||||
|
# option definitions common to all supported networks...
|
||||||
|
option domain-name "example.org";
|
||||||
|
option domain-name-servers ns1.example.org, ns2.example.org;
|
||||||
|
|
||||||
|
default-lease-time 3600;
|
||||||
|
max-lease-time 604800;
|
||||||
|
|
||||||
|
# The ddns-updates-style parameter controls whether or not the server will
|
||||||
|
# attempt to do a DNS update when a lease is confirmed. We default to the
|
||||||
|
# behavior of the version 2 packages ('none', since DHCP v2 didn't
|
||||||
|
# have support for DDNS.)
|
||||||
|
ddns-update-style none;
|
||||||
|
|
||||||
|
# If this DHCP server is the official DHCP server for the local
|
||||||
|
# network, the authoritative directive should be uncommented.
|
||||||
|
#authoritative;
|
||||||
|
|
||||||
|
# Use this to send dhcp log messages to a different log file (you also
|
||||||
|
# have to hack syslog.conf to complete the redirection).
|
||||||
|
#log-facility local7;
|
||||||
|
|
||||||
|
# No service will be given on this subnet, but declaring it helps the
|
||||||
|
# DHCP server to understand the network topology.
|
||||||
|
|
||||||
|
#subnet 10.152.187.0 netmask 255.255.255.0 {
|
||||||
|
#}
|
||||||
|
|
||||||
|
# This is a very basic subnet declaration.
|
||||||
|
|
||||||
|
subnet 192.168.2.0 netmask 255.255.255.0 {
|
||||||
|
range 192.168.2.10 192.168.2.100;
|
||||||
|
option routers 192.168.2.1;
|
||||||
|
option domain-name-servers 10.121.38.7;
|
||||||
|
option domain-name-servers 192.168.0.161;
|
||||||
|
option domain-name "dns1-ab.sio-ab.lan";
|
||||||
|
}
|
||||||
|
# option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
|
||||||
|
|
||||||
|
# This declaration allows BOOTP clients to get dynamic addresses,
|
||||||
|
# which we don't really recommend.
|
||||||
|
|
||||||
|
#subnet 10.254.239.32 netmask 255.255.255.224 {
|
||||||
|
# range dynamic-bootp 10.254.239.40 10.254.239.60;
|
||||||
|
# option broadcast-address 10.254.239.31;
|
||||||
|
# option routers rtr-239-32-1.example.org;
|
||||||
|
#}
|
||||||
|
|
||||||
|
# A slightly different configuration for an internal subnet.
|
||||||
|
#subnet 10.5.5.0 netmask 255.255.255.224 {
|
||||||
|
# range 10.5.5.26 10.5.5.30;
|
||||||
|
# option domain-name-servers ns1.internal.example.org;
|
||||||
|
# option domain-name "internal.example.org";
|
||||||
|
# option routers 10.5.5.1;
|
||||||
|
# option broadcast-address 10.5.5.31;
|
||||||
|
# default-lease-time 600;
|
||||||
|
# max-lease-time 7200;
|
||||||
|
#}
|
||||||
|
|
||||||
|
# Hosts which require special configuration options can be listed in
|
||||||
|
# host statements. If no address is specified, the address will be
|
||||||
|
# allocated dynamically (if possible), but the host-specific information
|
||||||
|
# will still come from the host declaration.
|
||||||
|
|
||||||
|
#host passacaglia {
|
||||||
|
# hardware ethernet 0:0:c0:5d:bd:95;
|
||||||
|
# filename "vmunix.passacaglia";
|
||||||
|
# server-name "toccata.example.com";
|
||||||
|
#}
|
||||||
|
|
||||||
|
# Fixed IP addresses can also be specified for hosts. These addresses
|
||||||
|
# should not also be listed as being available for dynamic assignment.
|
||||||
|
# Hosts for which fixed IP addresses have been specified can boot using
|
||||||
|
# BOOTP or DHCP. Hosts for which no fixed address is specified can only
|
||||||
|
# be booted with DHCP, unless there is an address range on the subnet
|
||||||
|
# to which a BOOTP client is connected which has the dynamic-bootp flag
|
||||||
|
# set.
|
||||||
|
host wxp1 {
|
||||||
|
hardware ethernet 08:00:27:77:70:0D;
|
||||||
|
fixed-address 192.168.2.50;
|
||||||
|
}
|
||||||
|
|
||||||
|
# You can declare a class of clients and then do address allocation
|
||||||
|
# based on that. The example below shows a case where all clients
|
||||||
|
# in a certain class get addresses on the 10.17.224/24 subnet, and all
|
||||||
|
# other clients get addresses on the 10.0.29/24 subnet.
|
||||||
|
|
||||||
|
#class "foo" {
|
||||||
|
# match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
|
||||||
|
#}
|
||||||
|
|
||||||
|
#shared-network 224-29 {
|
||||||
|
# subnet 10.17.224.0 netmask 255.255.255.0 {
|
||||||
|
# option routers rtr-224.example.org;
|
||||||
|
# }
|
||||||
|
# subnet 10.0.29.0 netmask 255.255.255.0 {
|
||||||
|
# option routers rtr-29.example.org;
|
||||||
|
# }
|
||||||
|
# pool {
|
||||||
|
# allow members of "foo";
|
||||||
|
# range 10.17.224.10 10.17.224.250;
|
||||||
|
# }
|
||||||
|
# pool {
|
||||||
|
# deny members of "foo";
|
||||||
|
# range 10.0.29.10 10.0.29.230;
|
||||||
|
# }
|
||||||
|
#}
|
20
sisr1/tp02-dns/dns1/db.sio-ab.lan
Normal file
20
sisr1/tp02-dns/dns1/db.sio-ab.lan
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA dns1-ab.sio-ab.lan. root.dns1-ab.sio-ab.lan. (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
NS dns1-ab.sio-ab.lan.
|
||||||
|
NS dns2-ab.sio-ab.lan.
|
||||||
|
A 192.168.0.162
|
||||||
|
dns1-ab.sio-ab.lan. A 192.168.0.161
|
||||||
|
;
|
||||||
|
@ IN NS localhost.
|
||||||
|
@ IN A 127.0.0.1
|
||||||
|
@ IN A 192.168.0.160
|
||||||
|
@ IN AAAA ::1
|
||||||
|
;
|
16
sisr1/tp02-dns/dns1/db.sio-ab.lan.rev
Normal file
16
sisr1/tp02-dns/dns1/db.sio-ab.lan.rev
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA dns1-ab.sio-ab.lan. root (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
;
|
||||||
|
IN NS dns1-ab.sio.lan.
|
||||||
|
IN NS dns2-ab.sio.lan.
|
||||||
|
160 IN PTR deb-dhcp-ab.sio-ab.lan.
|
||||||
|
161 IN PTR dns1-ab.sio-ab.lan.
|
||||||
|
162 IN PTR dns2-ab.sio-ab.lan.
|
20
sisr1/tp02-dns/dns1/named.conf.local
Normal file
20
sisr1/tp02-dns/dns1/named.conf.local
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
//
|
||||||
|
// Do any local configuration here
|
||||||
|
//
|
||||||
|
|
||||||
|
// Consider adding the 1918 zones here, if they are not used in your
|
||||||
|
// organization
|
||||||
|
//include "/etc/bind/zones.rfc1918";
|
||||||
|
|
||||||
|
// zone directe
|
||||||
|
zone "sio-ab.lan" {
|
||||||
|
type master;
|
||||||
|
file "/etc/bind/db.sio-ab.lan";
|
||||||
|
};
|
||||||
|
|
||||||
|
// zone inverse
|
||||||
|
zone "0.168.192.in-addr.arpa" {
|
||||||
|
type master;
|
||||||
|
notify no;
|
||||||
|
file "/etc/bind/db.sio-ab.lan.rev";
|
||||||
|
};
|
4
sisr1/tp02-dns/dns1/resolv.conf
Normal file
4
sisr1/tp02-dns/dns1/resolv.conf
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
domain sio-ab.lan
|
||||||
|
search sio-ab.lan
|
||||||
|
nameserver 192.168.0.161
|
||||||
|
nameserver 10.121.38.7
|
20
sisr1/tp02-dns/dns2/db.sio-ab.lan
Normal file
20
sisr1/tp02-dns/dns2/db.sio-ab.lan
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA dns1-ab.sio-ab.lan. root.dns1-ab.sio-ab.lan. (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
NS dns1-ab.sio-ab.lan.
|
||||||
|
NS dns2-ab.sio-ab.lan.
|
||||||
|
dns2-ab.sio-ab.lan. A 192.168.0.162
|
||||||
|
dns1-ab.sio-ab.lan. A 192.168.0.161
|
||||||
|
;
|
||||||
|
@ IN NS localhost.
|
||||||
|
;@ IN A 127.0.0.1
|
||||||
|
deb-dhcp-ab IN A 192.168.0.160
|
||||||
|
;@ IN AAAA ::1
|
||||||
|
;
|
16
sisr1/tp02-dns/dns2/db.sio-ab.lan.rev
Normal file
16
sisr1/tp02-dns/dns2/db.sio-ab.lan.rev
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA dns1-ab.sio-ab.lan. root (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
;
|
||||||
|
IN NS dns1-ab.sio.lan.
|
||||||
|
IN NS dns2-ab.sio-.lan.
|
||||||
|
160 IN PTR deb-dhcp-ab.sio-ab.lan.
|
||||||
|
161 IN PTR dns1-ab.sio-ab.lan.
|
||||||
|
162 IN PTR dns2-ab.sio-ab.lan.
|
1
sisr1/tp02-dns/dns2/hostname
Normal file
1
sisr1/tp02-dns/dns2/hostname
Normal file
@@ -0,0 +1 @@
|
|||||||
|
dns2-ab
|
7
sisr1/tp02-dns/dns2/hosts
Normal file
7
sisr1/tp02-dns/dns2/hosts
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
127.0.0.1 localhost
|
||||||
|
127.0.1.1 dns2-ab.sio.lan dns2-ab
|
||||||
|
|
||||||
|
# The following lines are desirable for IPv6 capable hosts
|
||||||
|
::1 localhost ip6-localhost ip6-loopback
|
||||||
|
ff02::1 ip6-allnodes
|
||||||
|
ff02::2 ip6-allrouters
|
24
sisr1/tp02-dns/dns2/named.conf.local
Normal file
24
sisr1/tp02-dns/dns2/named.conf.local
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
//
|
||||||
|
// Do any local configuration here
|
||||||
|
//
|
||||||
|
|
||||||
|
// Consider adding the 1918 zones here, if they are not used in your
|
||||||
|
// organization
|
||||||
|
//include "/etc/bind/zones.rfc1918";
|
||||||
|
|
||||||
|
// zone directe
|
||||||
|
zone "sio-ab.lan" {
|
||||||
|
type slave;
|
||||||
|
file "/etc/bind/db.sio-ab.lan";
|
||||||
|
masters { 192.168.0.161; };
|
||||||
|
masterfile-format text;
|
||||||
|
};
|
||||||
|
|
||||||
|
// zone inverse
|
||||||
|
zone "0.168.192.in-addr.arpa" {
|
||||||
|
type slave;
|
||||||
|
notify no;
|
||||||
|
file "/etc/bind/db.sio-ab.lan.rev";
|
||||||
|
masters { 192.168.0.161; };
|
||||||
|
masterfile-format text;
|
||||||
|
};
|
25
sisr1/tp02-dns/dns2/named.conf.options
Normal file
25
sisr1/tp02-dns/dns2/named.conf.options
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
options {
|
||||||
|
directory "/var/cache/bind";
|
||||||
|
|
||||||
|
// If there is a firewall between you and nameservers you want
|
||||||
|
// to talk to, you may need to fix the firewall to allow multiple
|
||||||
|
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
|
||||||
|
|
||||||
|
// If your ISP provided one or more IP addresses for stable
|
||||||
|
// nameservers, you probably want to use them as forwarders.
|
||||||
|
// Uncomment the following block, and insert the addresses replacing
|
||||||
|
// the all-0's placeholder.
|
||||||
|
|
||||||
|
forwarders {
|
||||||
|
10.121.38.7; // ici forwarder 1
|
||||||
|
|
||||||
|
};
|
||||||
|
|
||||||
|
//========================================================================
|
||||||
|
// If BIND logs error messages about the root key being expired,
|
||||||
|
// you will need to update your keys. See https://www.isc.org/bind-keys
|
||||||
|
//========================================================================
|
||||||
|
dnssec-validation no;
|
||||||
|
|
||||||
|
listen-on-v6 { any; };
|
||||||
|
};
|
24
sisr1/tp03-reseau-prive/srv-admin/cartes_reseau/interfaces
Normal file
24
sisr1/tp03-reseau-prive/srv-admin/cartes_reseau/interfaces
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
# This file describes the network interfaces available on your system
|
||||||
|
# and how to activate them. For more information, see interfaces(5).
|
||||||
|
|
||||||
|
source /etc/network/interfaces.d/*
|
||||||
|
|
||||||
|
# The loopback network interface
|
||||||
|
auto lo
|
||||||
|
iface lo inet loopback
|
||||||
|
|
||||||
|
# The primary network interface
|
||||||
|
allow-hotplug enp0s3
|
||||||
|
iface enp0s3 inet static
|
||||||
|
address 192.168.0.140/24
|
||||||
|
gateway 192.168.0.1
|
||||||
|
|
||||||
|
# Assignation static IP adresse
|
||||||
|
# auto enp0s3
|
||||||
|
# iface enp0s3 inet static
|
||||||
|
# address 192.168.0.26/24
|
||||||
|
# gateway 192.168.0.1
|
||||||
|
|
||||||
|
# The seconary network interface
|
||||||
|
auto enp0s8
|
||||||
|
iface enp0s8 inet dhcp
|
6
sisr1/tp03-reseau-prive/srv-admin/nat/README.md
Normal file
6
sisr1/tp03-reseau-prive/srv-admin/nat/README.md
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
* **nat.sh** : script activant la NAT dynamique sans filtrage
|
||||||
|
* A placer à /root/nat.sh
|
||||||
|
* Rendre exécutable : <code>chmod +x /root/nat.sh</code>
|
||||||
|
* **nat.service** : service lançant le script au démarrage
|
||||||
|
* A placer à /etc/systemd/system/nat.service
|
||||||
|
* Activer le service : <code>systemctl enable nat.service</code>
|
13
sisr1/tp03-reseau-prive/srv-admin/nat/nat.service
Normal file
13
sisr1/tp03-reseau-prive/srv-admin/nat/nat.service
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
[Unit]
|
||||||
|
|
||||||
|
Description=execute /root/nat.sh
|
||||||
|
|
||||||
|
After=default.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
|
||||||
|
ExecStart=bash /root/nat.sh
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
|
||||||
|
WantedBy=default.target
|
6
sisr1/tp03-reseau-prive/srv-admin/nat/nat.sh
Normal file
6
sisr1/tp03-reseau-prive/srv-admin/nat/nat.sh
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
echo "1" > /proc/sys/net/ipv4/ip_forward
|
||||||
|
nft add table basic_nat_table
|
||||||
|
nft add chain basic_nat_table prerouting {type nat hook prerouting priority 0 \; }
|
||||||
|
nft add chain basic_nat_table postrouting {type nat hook postrouting priority 0 \; }
|
||||||
|
nft add rule basic_nat_table postrouting masquerade
|
2
sisr1/tp03-reseau-prive/srv-dns2/README.md
Normal file
2
sisr1/tp03-reseau-prive/srv-dns2/README.md
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
**- fichier named.conf** :
|
||||||
|
* les fichiers named.conf.local et named.conf.options sont récupérés du srv-service
|
18
sisr1/tp03-reseau-prive/srv-dns2/cartes_reseau/interfaces
Normal file
18
sisr1/tp03-reseau-prive/srv-dns2/cartes_reseau/interfaces
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
# This file describes the network interfaces available on your system
|
||||||
|
# and how to activate them. For more information, see interfaces(5).
|
||||||
|
|
||||||
|
source /etc/network/interfaces.d/*
|
||||||
|
|
||||||
|
# The loopback network interface
|
||||||
|
auto lo
|
||||||
|
iface lo inet loopback
|
||||||
|
|
||||||
|
# The primary network interface
|
||||||
|
allow-hotplug enp0s3
|
||||||
|
iface enp0s3 inet dhcp
|
||||||
|
|
||||||
|
# Assignation static IP adresse
|
||||||
|
#auto enp0s3
|
||||||
|
#iface enp0s3 inet static
|
||||||
|
# address 172.16.0.200/24
|
||||||
|
# gateway 172.16.0.1
|
28
sisr1/tp03-reseau-prive/srv-dns2/dns/db.monlabo.lan
Normal file
28
sisr1/tp03-reseau-prive/srv-dns2/dns/db.monlabo.lan
Normal file
@@ -0,0 +1,28 @@
|
|||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
NS srv-service.monlabo.lan.
|
||||||
|
NS srv-dns2.monlabo.lan.
|
||||||
|
srv-service.monlabo.lan. A 172.16.0.254
|
||||||
|
srv-dns2.monlabo.lan. A 172.16.0.253
|
||||||
|
srv-admin-jt.monlabo.lan. A 172.16.0.1
|
||||||
|
|
||||||
|
srvdhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
dhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
dns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
srvadmin IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
router IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
gateway IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
|
26
sisr1/tp03-reseau-prive/srv-dns2/dns/db.monlabo.lan.rev
Normal file
26
sisr1/tp03-reseau-prive/srv-dns2/dns/db.monlabo.lan.rev
Normal file
@@ -0,0 +1,26 @@
|
|||||||
|
$ORIGIN .
|
||||||
|
$TTL 604800 ; 1 week
|
||||||
|
0.16.172.in-addr.arpa IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. (
|
||||||
|
2 ; serial
|
||||||
|
604800 ; refresh (1 week)
|
||||||
|
86400 ; retry (1 day)
|
||||||
|
2419200 ; expire (4 weeks)
|
||||||
|
604800 ; minimum (1 week)
|
||||||
|
)
|
||||||
|
NS srv-dns2.monlabo.lan.
|
||||||
|
NS srv-service.monlabo.lan.
|
||||||
|
$ORIGIN 0.16.172.in-addr.arpa.
|
||||||
|
1 PTR srv-admin-jt.monlabo.lan.
|
||||||
|
253 PTR srv-dns2.monlabo.lan.
|
||||||
|
254 PTR svr-service.monlabo.lan.
|
||||||
|
dhcp CNAME srv-service.monlabo.lan.
|
||||||
|
dns CNAME srv-service.monlabo.lan.
|
||||||
|
dns1 CNAME srv-service.monlabo.lan.
|
||||||
|
dns2 CNAME srv-dns2.monlabo.lan.
|
||||||
|
gateway CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
router CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
srvadmin CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
srvdhcp CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns1 CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns2 CNAME srv-dns2.monlabo.lan.
|
18
sisr1/tp03-reseau-prive/srv-service/carte_reseau/interfaces
Normal file
18
sisr1/tp03-reseau-prive/srv-service/carte_reseau/interfaces
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
# This file describes the network interfaces available on your system
|
||||||
|
# and how to activate them. For more information, see interfaces(5).
|
||||||
|
|
||||||
|
source /etc/network/interfaces.d/*
|
||||||
|
|
||||||
|
# The loopback network interface
|
||||||
|
auto lo
|
||||||
|
iface lo inet loopback
|
||||||
|
|
||||||
|
# The primary network interface
|
||||||
|
#allow-hotplug enp0s3
|
||||||
|
#iface enp0s3 inet dhcp
|
||||||
|
|
||||||
|
# Assignation static IP adresse
|
||||||
|
auto enp0s3
|
||||||
|
iface enp0s3 inet static
|
||||||
|
address 172.16.0.254/24
|
||||||
|
gateway 172.16.0.1
|
113
sisr1/tp03-reseau-prive/srv-service/dhcp/dhcpd.conf
Normal file
113
sisr1/tp03-reseau-prive/srv-service/dhcp/dhcpd.conf
Normal file
@@ -0,0 +1,113 @@
|
|||||||
|
# dhcpd.conf
|
||||||
|
#
|
||||||
|
# Sample configuration file for ISC dhcpd
|
||||||
|
#
|
||||||
|
|
||||||
|
# option definitions common to all supported networks...
|
||||||
|
#option domain-name "example.org";
|
||||||
|
#option domain-name-servers ns1.example.org, ns2.example.org;
|
||||||
|
|
||||||
|
default-lease-time 600;
|
||||||
|
max-lease-time 7200;
|
||||||
|
|
||||||
|
# The ddns-updates-style parameter controls whether or not the server will
|
||||||
|
# attempt to do a DNS update when a lease is confirmed. We default to the
|
||||||
|
# behavior of the version 2 packages ('none', since DHCP v2 didn't
|
||||||
|
# have support for DDNS.)
|
||||||
|
ddns-update-style none;
|
||||||
|
|
||||||
|
# If this DHCP server is the official DHCP server for the local
|
||||||
|
# network, the authoritative directive should be uncommented.
|
||||||
|
#authoritative;
|
||||||
|
|
||||||
|
# Use this to send dhcp log messages to a different log file (you also
|
||||||
|
# have to hack syslog.conf to complete the redirection).
|
||||||
|
#log-facility local7;
|
||||||
|
|
||||||
|
# No service will be given on this subnet, but declaring it helps the
|
||||||
|
# DHCP server to understand the network topology.
|
||||||
|
|
||||||
|
#subnet 10.152.187.0 netmask 255.255.255.0 {
|
||||||
|
#}
|
||||||
|
|
||||||
|
# This is a very basic subnet declaration.
|
||||||
|
|
||||||
|
#subnet 10.254.239.0 netmask 255.255.255.224 {
|
||||||
|
# range 10.254.239.10 10.254.239.20;
|
||||||
|
# option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
|
||||||
|
#}
|
||||||
|
|
||||||
|
# This declaration allows BOOTP clients to get dynamic addresses,
|
||||||
|
# which we don't really recommend.
|
||||||
|
|
||||||
|
subnet 172.16.0.0 netmask 255.255.255.0 {
|
||||||
|
range 172.16.0.20 172.16.0.119;
|
||||||
|
option routers 172.16.0.1;
|
||||||
|
option domain-name-servers 172.16.0.254, 172.16.0.253;
|
||||||
|
option domain-name "monlabo.lan";
|
||||||
|
}
|
||||||
|
|
||||||
|
# A slightly different configuration for an internal subnet.
|
||||||
|
#subnet 10.5.5.0 netmask 255.255.255.224 {
|
||||||
|
# range 10.5.5.26 10.5.5.30;
|
||||||
|
# option domain-name-servers ns1.internal.example.org;
|
||||||
|
# option domain-name "internal.example.org";
|
||||||
|
# option routers 10.5.5.1;
|
||||||
|
# option broadcast-address 10.5.5.31;
|
||||||
|
# default-lease-time 600;
|
||||||
|
# max-lease-time 7200;
|
||||||
|
#}
|
||||||
|
|
||||||
|
# Hosts which require special configuration options can be listed in
|
||||||
|
# host statements. If no address is specified, the address will be
|
||||||
|
# allocated dynamically (if possible), but the host-specific information
|
||||||
|
# will still come from the host declaration
|
||||||
|
|
||||||
|
#host passacaglia {
|
||||||
|
# hardware ethernet 0:0:c0:5d:bd:95;
|
||||||
|
# filename "vmunix.passacaglia";
|
||||||
|
# server-name "toccata.example.com";
|
||||||
|
#}
|
||||||
|
|
||||||
|
# Fixed IP addresses can also be specified for hosts. These addresses
|
||||||
|
# should not also be listed as being available for dynamic assignment.
|
||||||
|
# Hosts for which fixed IP addresses have been specified can boot using
|
||||||
|
# BOOTP or DHCP. Hosts for which no fixed address is specified can only
|
||||||
|
# be booted with DHCP, unless there is an address range on the subnet
|
||||||
|
# to which a BOOTP client is connected which has the dynamic-bootp flag
|
||||||
|
# set.
|
||||||
|
host srv-admin-jt {
|
||||||
|
hardware ethernet 08:00:27:0a:1e:8b;
|
||||||
|
fixed-address 172.16.0.1;
|
||||||
|
}
|
||||||
|
|
||||||
|
host srv-dns2 {
|
||||||
|
hardware ethernet 08:00:27:91:48:15;
|
||||||
|
fixed-address 172.16.0.253;
|
||||||
|
}
|
||||||
|
|
||||||
|
# You can declare a class of clients and then do address allocation
|
||||||
|
# based on that. The example below shows a case where all clients
|
||||||
|
# in a certain class get addresses on the 10.17.224/24 subnet, and all
|
||||||
|
# other clients get addresses on the 10.0.29/24 subnet.
|
||||||
|
|
||||||
|
#class "foo" {
|
||||||
|
# match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
|
||||||
|
#}
|
||||||
|
|
||||||
|
#shared-network 224-29 {
|
||||||
|
# subnet 10.17.224.0 netmask 255.255.255.0 {
|
||||||
|
# option routers rtr-224.example.org;
|
||||||
|
# }
|
||||||
|
# subnet 10.0.29.0 netmask 255.255.255.0 {
|
||||||
|
# option routers rtr-29.example.org;
|
||||||
|
# }
|
||||||
|
# pool {
|
||||||
|
# allow members of "foo";
|
||||||
|
# range 10.17.224.10 10.17.224.250;
|
||||||
|
# }
|
||||||
|
# pool {
|
||||||
|
# deny members of "foo";
|
||||||
|
# range 10.0.29.10 10.0.29.230;
|
||||||
|
# }
|
||||||
|
#}
|
29
sisr1/tp03-reseau-prive/srv-service/dns/db.monlabo.lan
Normal file
29
sisr1/tp03-reseau-prive/srv-service/dns/db.monlabo.lan
Normal file
@@ -0,0 +1,29 @@
|
|||||||
|
|
||||||
|
|
||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
NS srv-service.monlabo.lan.
|
||||||
|
NS srv-dns2.monlabo.lan.
|
||||||
|
srv-service.monlabo.lan. A 172.16.0.254
|
||||||
|
srv-dns2.monlabo.lan. A 172.16.0.253
|
||||||
|
srv-admin-jt.monlabo.lan. A 172.16.0.1
|
||||||
|
|
||||||
|
srvdhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
dhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
dns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
srvadmin IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
router IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
gateway IN CNAME srv-admin-jt.monlabo.lan.
|
30
sisr1/tp03-reseau-prive/srv-service/dns/db.monlabo.lan.rev
Normal file
30
sisr1/tp03-reseau-prive/srv-service/dns/db.monlabo.lan.rev
Normal file
@@ -0,0 +1,30 @@
|
|||||||
|
|
||||||
|
|
||||||
|
;
|
||||||
|
; BIND data file for local loopback interface
|
||||||
|
;
|
||||||
|
$TTL 604800
|
||||||
|
@ IN SOA srv-service.monlabo.lan. root.srv-service.monlabo.lan. (
|
||||||
|
2 ; Serial
|
||||||
|
604800 ; Refresh
|
||||||
|
86400 ; Retry
|
||||||
|
2419200 ; Expire
|
||||||
|
604800 ) ; Negative Cache TTL
|
||||||
|
@ IN NS srv-service.monlabo.lan.
|
||||||
|
NS srv-dns2.monlabo.lan.
|
||||||
|
|
||||||
|
254 IN PTR svr-service.monlabo.lan.
|
||||||
|
253 IN PTR srv-dns2.monlabo.lan.
|
||||||
|
1 IN PTR srv-admin-jt.monlabo.lan.
|
||||||
|
|
||||||
|
srvdhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
dhcp IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
dns1 IN CNAME srv-service.monlabo.lan.
|
||||||
|
srvdns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
dns2 IN CNAME srv-dns2.monlabo.lan.
|
||||||
|
srvadmin IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
router IN CNAME srv-admin-jt.monlabo.lan.
|
||||||
|
gateway IN CNAME srv-admin-jt.monlabo.lan.
|
21
sisr1/tp03-reseau-prive/srv-service/dns/named.conf.local
Normal file
21
sisr1/tp03-reseau-prive/srv-service/dns/named.conf.local
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
//
|
||||||
|
// Do any local configuration here
|
||||||
|
//
|
||||||
|
|
||||||
|
// zone direct
|
||||||
|
zone "monlabo.lan"{
|
||||||
|
type master;
|
||||||
|
file"/etc/bind/db.monlabo.lan";
|
||||||
|
};
|
||||||
|
|
||||||
|
// zone inverse
|
||||||
|
zone "0.16.172.in-addr.arpa"{
|
||||||
|
type master;
|
||||||
|
notify no;
|
||||||
|
file "/etc/bind/db.monlabo.lan.rev";
|
||||||
|
};
|
||||||
|
|
||||||
|
// Consider adding the 1918 zones here, if they are not used in your
|
||||||
|
// organization
|
||||||
|
//include "/etc/bind/zones.rfc1918";
|
||||||
|
|
24
sisr1/tp03-reseau-prive/srv-service/dns/named.conf.options
Normal file
24
sisr1/tp03-reseau-prive/srv-service/dns/named.conf.options
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
options {
|
||||||
|
directory "/var/cache/bind";
|
||||||
|
|
||||||
|
// If there is a firewall between you and nameservers you want
|
||||||
|
// to talk to, you may need to fix the firewall to allow multiple
|
||||||
|
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
|
||||||
|
|
||||||
|
// If your ISP provided one or more IP addresses for stable
|
||||||
|
// nameservers, you probably want to use them as forwarders.
|
||||||
|
// Uncomment the following block, and insert the addresses replacing
|
||||||
|
// the all-0's placeholder.
|
||||||
|
|
||||||
|
forwarders {
|
||||||
|
10.121.38.7; // DNS lycée
|
||||||
|
};
|
||||||
|
|
||||||
|
//========================================================================
|
||||||
|
// If BIND logs error messages about the root key being expired,
|
||||||
|
// you will need to update your keys. See https://www.isc.org/bind-keys
|
||||||
|
//========================================================================
|
||||||
|
dnssec-validation no;
|
||||||
|
|
||||||
|
listen-on-v6 { any; };
|
||||||
|
};
|
30
sisr1/tp04_scripts_admin/Users.csv
Normal file
30
sisr1/tp04_scripts_admin/Users.csv
Normal file
@@ -0,0 +1,30 @@
|
|||||||
|
Ermengarde,Berthelmot,eberthelmot0@webmd.com,Female,Accountant,
|
||||||
|
Kassi,Bunker,kbunker1@xinhuanet.com,Female,Production,
|
||||||
|
Moises,McCallum,mmccallum2@i2i.jp,Male,Production,
|
||||||
|
Patrizio,Lune,plune3@upenn.edu,Male,Accountant,
|
||||||
|
Blanch,Everix,beverix4@php.net,Female,Accountant,
|
||||||
|
Stafani,Kibbel,skibbel5@marriott.com,Female,Production,
|
||||||
|
Ignacius,Mosdell,imosdell6@cloudflare.com,Male,Management,
|
||||||
|
Jeana,Waller-Bridge,jwallerbridge7@mapy.cz,Female,Management,
|
||||||
|
Elroy,Dressel,edressel8@opera.com,Male,Production,
|
||||||
|
Thea,Strettell,tstrettell9@nature.com,Female,Production,
|
||||||
|
Solomon,Insoll,sinsolla@utexas.edu,Male,Accountant,
|
||||||
|
Carri,Feedome,cfeedomeb@ask.com,Female,Accountant,
|
||||||
|
Padraic,Chetwind,pchetwindc@last.fm,Male,Management,
|
||||||
|
Solly,D'Ugo,sdugod@uiuc.edu,Male,Production,
|
||||||
|
Konstanze,MacCostigan,kmaccostigane@seattletimes.com,Female,Accountant,
|
||||||
|
Roxane,Powlesland,rpowleslandf@pcworld.com,Female,Management,
|
||||||
|
Orelle,Kennealy,okennealyg@arstechnica.com,Female,Production,
|
||||||
|
Sukey,Soitoux,ssoitouxh@shinystat.com,Female,Production,
|
||||||
|
Nelli,Syce,nsycei@blogger.com,Female,Production,
|
||||||
|
Clarisse,Shillam,cshillamj@dailymotion.com,Female,Production,
|
||||||
|
Carin,Gueny,cguenyk@naver.com,Female,Management,
|
||||||
|
Donny,Riepel,driepell@addtoany.com,Male,Production,
|
||||||
|
Daniella,Ralfe,dralfem@wunderground.com,Female,Production,
|
||||||
|
Lexy,Clynmans,lclynmansn@furl.net,Female,Production,
|
||||||
|
Gardiner,Adamthwaite,gadamthwaiteo@spotify.com,Male,Production,
|
||||||
|
Woodman,Lippett,wlippettp@purevolume.com,Male,Production,
|
||||||
|
Nadya,Munnion,nmunnionq@flavors.me,Female,Production,
|
||||||
|
Llewellyn,Habershon,lhabershonr@alibaba.com,Male,Production,
|
||||||
|
Isaak,Greatrex,igreatrexs@seesaa.net,Male,Production,
|
||||||
|
Darill,Frostdyke,dfrostdyket@cafepress.com,Male,Production,
|
|
21
sisr1/tp04_scripts_admin/createGroups.sh
Normal file
21
sisr1/tp04_scripts_admin/createGroups.sh
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
file='./Users.csv'
|
||||||
|
|
||||||
|
while read ligne
|
||||||
|
do
|
||||||
|
# A chaque itération, stocker le métier dans $metier
|
||||||
|
metier=$(echo $ligne | cut -d "," -f5)
|
||||||
|
|
||||||
|
# On regarde si les group existe
|
||||||
|
# tail /etc/group
|
||||||
|
|
||||||
|
# Vérification de la présence du groupe -> ajout du group si il n'existe pas
|
||||||
|
if [[ $(echo $ligne | grep $metier /etc/group) == "" ]] ; then
|
||||||
|
groupadd $metier
|
||||||
|
fi
|
||||||
|
|
||||||
|
# On regarde si les groups ont été créé
|
||||||
|
# tail /etc/group
|
||||||
|
# echo $metier
|
||||||
|
done < $file
|
25
sisr1/tp04_scripts_admin/createLogins.sh
Normal file
25
sisr1/tp04_scripts_admin/createLogins.sh
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
fichier_a_lire='./Users.csv'
|
||||||
|
fichier_a_ecrire='./logins.csv'
|
||||||
|
|
||||||
|
# Suppression du fichier
|
||||||
|
rm $fichier_a_ecrire 2> /dev/null # Redirection des erreurs
|
||||||
|
# Création du fichier login.csv
|
||||||
|
touch $fichier_a_ecrire
|
||||||
|
|
||||||
|
while read ligne
|
||||||
|
do
|
||||||
|
aecrire=""
|
||||||
|
# A chaque itération, stocker le prénom dans $prenom
|
||||||
|
prenom=$(echo $ligne | cut -d "," -f1)
|
||||||
|
# A chaque itération, stocker le nom dans $nom
|
||||||
|
nom=$(echo $ligne | cut -d "," -f2)
|
||||||
|
# A chaque itération, stocker le métier dans $metier
|
||||||
|
group=$(echo $ligne | cut -d "," -f5)
|
||||||
|
login=?
|
||||||
|
password=$(tr -dc A-Za-z0-9 </dev/urandom | head -c 12; echo)
|
||||||
|
|
||||||
|
echo $aecrire >> $fichier_a_ecrire
|
||||||
|
done < $fichier_a_lire
|
||||||
|
|
20
sisr1/tp04_scripts_admin/createUsers.sh
Normal file
20
sisr1/tp04_scripts_admin/createUsers.sh
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
fichier='./login.csv'
|
||||||
|
|
||||||
|
while read line
|
||||||
|
do
|
||||||
|
|
||||||
|
|
||||||
|
username=$(echo $line | cut -d ";" -f1)
|
||||||
|
useradd -m -s "/bin/bash" $username
|
||||||
|
|
||||||
|
# permet l'ajout d'un utilisateur
|
||||||
|
group=$(echo $line | cut -d ";" -f5)
|
||||||
|
usermod -ag $group $username
|
||||||
|
|
||||||
|
password=$(echo $line | cut -d ";" -f2)
|
||||||
|
#permet de changer le mot de passe
|
||||||
|
echo $username:$password | chpasswd
|
||||||
|
|
||||||
|
chown $username:$username /home/$username
|
16
sisr1/tp04_scripts_admin/gitpush.sh
Normal file
16
sisr1/tp04_scripts_admin/gitpush.sh
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
if [ -z "$1" ] ; then
|
||||||
|
read -p "Erreur: Ecrivez un message " message
|
||||||
|
else
|
||||||
|
message="$1"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Ajout des fichiers modifiers
|
||||||
|
git add .
|
||||||
|
|
||||||
|
# Commit avec le message
|
||||||
|
git commit -m "$message"
|
||||||
|
|
||||||
|
# Push vers le dépot
|
||||||
|
git push -u https://anthony.boillot@gitea.lyc-lecastel.fr/anthony.boillot/siotp.git
|
30
sisr1/tp04_scripts_admin/logins.csv
Normal file
30
sisr1/tp04_scripts_admin/logins.csv
Normal file
@@ -0,0 +1,30 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
Reference in New Issue
Block a user