From d76c9b8afaf12bfcaa02a3a05533241bef453dc6 Mon Sep 17 00:00:00 2001 From: Louis Depres Date: Thu, 3 Mar 2022 11:03:55 +0100 Subject: [PATCH 01/13] Fichier Bash AP22 --- Sio1/AP22/restorebase | 2 ++ Sio1/AP22/svbase | 5 +++++ 2 files changed, 7 insertions(+) create mode 100755 Sio1/AP22/restorebase create mode 100755 Sio1/AP22/svbase diff --git a/Sio1/AP22/restorebase b/Sio1/AP22/restorebase new file mode 100755 index 0000000..88fba5a --- /dev/null +++ b/Sio1/AP22/restorebase @@ -0,0 +1,2 @@ +#!/bin/bash +zcat latest.sql.gz|ssh root@ap22 "mysql -u gsbadm -pgsbadm gsbvisite" diff --git a/Sio1/AP22/svbase b/Sio1/AP22/svbase new file mode 100755 index 0000000..191a54a --- /dev/null +++ b/Sio1/AP22/svbase @@ -0,0 +1,5 @@ +#!/bin/bash +DAT=$(date "+%u") + +ssh root@ap22 "mysqldump -u gsbadm -pgsbadm gsbvisite | gzip" > gsbvisite-$DAT.sql.gz +cp gsbvisite-$DAT.sql.gz latest.sql.gz From 078b3a300cf3e74912a88c7de96f406398b3e65e Mon Sep 17 00:00:00 2001 From: Louis Depres Date: Thu, 3 Mar 2022 11:25:06 +0100 Subject: [PATCH 02/13] Second Commit : Serveur Maitre --- Sio1/SISR1/20-DNS/Master/db.domaine.lan | 20 +++++++++++++++++ Sio1/SISR1/20-DNS/Master/db.domaine.lan.rev | 14 ++++++++++++ Sio1/SISR1/20-DNS/Master/named.conf | 11 ++++++++++ Sio1/SISR1/20-DNS/Master/named.conf.local | 20 +++++++++++++++++ Sio1/SISR1/20-DNS/Master/resolv.conf | 3 +++ Sio1/SISR1/20-DNS/Slave/named.conf.local | 20 +++++++++++++++++ Sio1/SISR1/20-DNS/Slave/named.conf.options | 24 +++++++++++++++++++++ Sio1/SISR1/20-DNS/Slave/resolv.conf | 3 +++ 8 files changed, 115 insertions(+) create mode 100644 Sio1/SISR1/20-DNS/Master/db.domaine.lan create mode 100644 Sio1/SISR1/20-DNS/Master/db.domaine.lan.rev create mode 100644 Sio1/SISR1/20-DNS/Master/named.conf create mode 100644 Sio1/SISR1/20-DNS/Master/named.conf.local create mode 100644 Sio1/SISR1/20-DNS/Master/resolv.conf create mode 100644 Sio1/SISR1/20-DNS/Slave/named.conf.local create mode 100644 Sio1/SISR1/20-DNS/Slave/named.conf.options create mode 100644 Sio1/SISR1/20-DNS/Slave/resolv.conf diff --git a/Sio1/SISR1/20-DNS/Master/db.domaine.lan b/Sio1/SISR1/20-DNS/Master/db.domaine.lan new file mode 100644 index 0000000..974a498 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Master/db.domaine.lan @@ -0,0 +1,20 @@ +; +; BIND data file for local loopback interface +; +$TTL 604800 +domaine.lan. IN SOA srv1.domaine.lan. root.srv1.domaine.lan. ( + 2022020100 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS srv1.domaine.lan. +srv1 IN A 192.168.0.110 +@ IN NS srv2.domaine.lan. +srv2 IN A 192.168.0.114 + +;@ IN AAAA ::1 +poste1 IN A 192.168.0.111 +poste2 IN A 192.168.0.112 +www2 IN CNAME poste1 diff --git a/Sio1/SISR1/20-DNS/Master/db.domaine.lan.rev b/Sio1/SISR1/20-DNS/Master/db.domaine.lan.rev new file mode 100644 index 0000000..e4e29e6 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Master/db.domaine.lan.rev @@ -0,0 +1,14 @@ +$TTL 38400 ; 10 hours 40 minutes +@ IN SOA srv1.domaine.lan. root.srv1.domaine.lan. ( + 2022020100 ; serial + 10800 ; refresh (3 hours) + 3600 ; retry (1 hour) + 604800 ; expire (1 week) + 38400 ; minimum (10 hours 40 minutes) + ) + IN NS srv1.domaine.lan. + IN NS srv2.domaine.lan. + +110 IN PTR srv1.domaine.lan. +111 IN PTR xp.domaine.lan. +114 IN PTR srv2.domaine.lan. diff --git a/Sio1/SISR1/20-DNS/Master/named.conf b/Sio1/SISR1/20-DNS/Master/named.conf new file mode 100644 index 0000000..880786a --- /dev/null +++ b/Sio1/SISR1/20-DNS/Master/named.conf @@ -0,0 +1,11 @@ +// This is the primary configuration file for the BIND DNS server named. +// +// Please read /usr/share/doc/bind9/README.Debian.gz for information on the +// structure of BIND configuration files in Debian, *BEFORE* you customize +// this configuration file. +// +// If you are just adding zones, please do that in /etc/bind/named.conf.local + +include "/etc/bind/named.conf.options"; +include "/etc/bind/named.conf.local"; +include "/etc/bind/named.conf.default-zones"; diff --git a/Sio1/SISR1/20-DNS/Master/named.conf.local b/Sio1/SISR1/20-DNS/Master/named.conf.local new file mode 100644 index 0000000..71421f6 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Master/named.conf.local @@ -0,0 +1,20 @@ +// +// Do any local configuration here +// + +// Consider adding the 1918 zones here, if they are not used in your +// organization +//include "/etc/bind/zones.rfc1918"; + +// zone directe + zone "domaine.lan" { + type master; + file "/etc/bind/db.domaine.lan"; + }; + +// zone inverse + zone "0.168.192.in-addr.arpa" { + type master; + notify no; + file "/etc/bind/db.domaine.lan.rev"; + }; diff --git a/Sio1/SISR1/20-DNS/Master/resolv.conf b/Sio1/SISR1/20-DNS/Master/resolv.conf new file mode 100644 index 0000000..2f06cc1 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Master/resolv.conf @@ -0,0 +1,3 @@ +domain domaine.lan +search domaine.lan +nameserver 127.0.0.1 diff --git a/Sio1/SISR1/20-DNS/Slave/named.conf.local b/Sio1/SISR1/20-DNS/Slave/named.conf.local new file mode 100644 index 0000000..71421f6 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Slave/named.conf.local @@ -0,0 +1,20 @@ +// +// Do any local configuration here +// + +// Consider adding the 1918 zones here, if they are not used in your +// organization +//include "/etc/bind/zones.rfc1918"; + +// zone directe + zone "domaine.lan" { + type master; + file "/etc/bind/db.domaine.lan"; + }; + +// zone inverse + zone "0.168.192.in-addr.arpa" { + type master; + notify no; + file "/etc/bind/db.domaine.lan.rev"; + }; diff --git a/Sio1/SISR1/20-DNS/Slave/named.conf.options b/Sio1/SISR1/20-DNS/Slave/named.conf.options new file mode 100644 index 0000000..394f484 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Slave/named.conf.options @@ -0,0 +1,24 @@ +options { + directory "/var/cache/bind"; + + // If there is a firewall between you and nameservers you want + // to talk to, you may need to fix the firewall to allow multiple + // ports to talk. See http://www.kb.cert.org/vuls/id/800113 + + // If your ISP provided one or more IP addresses for stable + // nameservers, you probably want to use them as forwarders. + // Uncomment the following block, and insert the addresses replacing + // the all-0's placeholder. + + forwarders { + 10.121.38.7; + }; + + //======================================================================== + // If BIND logs error messages about the root key being expired, + // you will need to update your keys. See https://www.isc.org/bind-keys + //======================================================================== + dnssec-validation no; + + listen-on-v6 { any; }; +}; diff --git a/Sio1/SISR1/20-DNS/Slave/resolv.conf b/Sio1/SISR1/20-DNS/Slave/resolv.conf new file mode 100644 index 0000000..2f06cc1 --- /dev/null +++ b/Sio1/SISR1/20-DNS/Slave/resolv.conf @@ -0,0 +1,3 @@ +domain domaine.lan +search domaine.lan +nameserver 127.0.0.1 From e4df98a2cd6256f4cf908141ca408cd725114973 Mon Sep 17 00:00:00 2001 From: Louis Depres Date: Thu, 3 Mar 2022 11:37:26 +0100 Subject: [PATCH 03/13] Slave --- Sio1/SISR1/20-DNS/Slave/named.conf.local | 20 ------------------ Sio1/SISR1/20-DNS/Slave/named.conf.options | 24 ---------------------- Sio1/SISR1/20-DNS/Slave/resolv.conf | 3 --- 3 files changed, 47 deletions(-) delete mode 100644 Sio1/SISR1/20-DNS/Slave/named.conf.local delete mode 100644 Sio1/SISR1/20-DNS/Slave/named.conf.options delete mode 100644 Sio1/SISR1/20-DNS/Slave/resolv.conf diff --git a/Sio1/SISR1/20-DNS/Slave/named.conf.local b/Sio1/SISR1/20-DNS/Slave/named.conf.local deleted file mode 100644 index 71421f6..0000000 --- a/Sio1/SISR1/20-DNS/Slave/named.conf.local +++ /dev/null @@ -1,20 +0,0 @@ -// -// Do any local configuration here -// - -// Consider adding the 1918 zones here, if they are not used in your -// organization -//include "/etc/bind/zones.rfc1918"; - -// zone directe - zone "domaine.lan" { - type master; - file "/etc/bind/db.domaine.lan"; - }; - -// zone inverse - zone "0.168.192.in-addr.arpa" { - type master; - notify no; - file "/etc/bind/db.domaine.lan.rev"; - }; diff --git a/Sio1/SISR1/20-DNS/Slave/named.conf.options b/Sio1/SISR1/20-DNS/Slave/named.conf.options deleted file mode 100644 index 394f484..0000000 --- a/Sio1/SISR1/20-DNS/Slave/named.conf.options +++ /dev/null @@ -1,24 +0,0 @@ -options { - directory "/var/cache/bind"; - - // If there is a firewall between you and nameservers you want - // to talk to, you may need to fix the firewall to allow multiple - // ports to talk. See http://www.kb.cert.org/vuls/id/800113 - - // If your ISP provided one or more IP addresses for stable - // nameservers, you probably want to use them as forwarders. - // Uncomment the following block, and insert the addresses replacing - // the all-0's placeholder. - - forwarders { - 10.121.38.7; - }; - - //======================================================================== - // If BIND logs error messages about the root key being expired, - // you will need to update your keys. See https://www.isc.org/bind-keys - //======================================================================== - dnssec-validation no; - - listen-on-v6 { any; }; -}; diff --git a/Sio1/SISR1/20-DNS/Slave/resolv.conf b/Sio1/SISR1/20-DNS/Slave/resolv.conf deleted file mode 100644 index 2f06cc1..0000000 --- a/Sio1/SISR1/20-DNS/Slave/resolv.conf +++ /dev/null @@ -1,3 +0,0 @@ -domain domaine.lan -search domaine.lan -nameserver 127.0.0.1 From 703f169a052dc68abde100cde88a53052d8ba60b Mon Sep 17 00:00:00 2001 From: Louis Depres Date: Tue, 15 Mar 2022 11:04:29 +0100 Subject: [PATCH 04/13] Premiere partie Filtrage --- Sio1/SISR1/30-FiltrageEtDMZ/fw0.sh | 12 ++++++++ Sio1/SISR1/30-FiltrageEtDMZ/fw1.sh | 21 ++++++++++++++ Sio1/SISR1/30-FiltrageEtDMZ/fw2.sh | 28 +++++++++++++++++++ Sio1/SISR1/30-FiltrageEtDMZ/fw3.sh | 36 ++++++++++++++++++++++++ Sio1/SISR1/30-FiltrageEtDMZ/fw4.sh | 41 +++++++++++++++++++++++++++ Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh | 45 ++++++++++++++++++++++++++++++ 6 files changed, 183 insertions(+) create mode 100644 Sio1/SISR1/30-FiltrageEtDMZ/fw0.sh create mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw1.sh create mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw2.sh create mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw3.sh create mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw4.sh create mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw0.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw0.sh new file mode 100644 index 0000000..2a939e2 --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw0.sh @@ -0,0 +1,12 @@ +#!/bin/bash + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 +# ici instructions pour definir les stratégies par defaut (etape 1) + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) + diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw1.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw1.sh new file mode 100755 index 0000000..630e25b --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw1.sh @@ -0,0 +1,21 @@ +#!/bin/bash + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 + +# ici instructions pour definir les stratégies par defaut (etape 1) +sudo iptables -P INPUT DROP +sudo iptables -P OUTPUT DROP +sudo iptables -P FORWARD DROP + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) +sudo iptables -F -t nat +sudo iptables -F -t filter + +# autorise le loopback +sudo iptables -A INPUT -i lo -j ACCEPT +sudo iptables -A OUTPUT -o lo -j ACCEPT diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw2.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw2.sh new file mode 100755 index 0000000..79e6a9a --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw2.sh @@ -0,0 +1,28 @@ +#!/bin/bash +set -e +set -u + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 + +# ici instructions pour definir les stratégies par defaut (etape 1) +sudo iptables -P INPUT DROP +sudo iptables -P OUTPUT DROP +sudo iptables -P FORWARD DROP + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) +sudo iptables -F -t nat +sudo iptables -F -t filter + +# autorise le loopback +sudo iptables -A INPUT -i lo -j ACCEPT +sudo iptables -A OUTPUT -o lo -j ACCEPT + +# Connection ssh + +sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT #entrée +sudo iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT #sortie diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw3.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw3.sh new file mode 100755 index 0000000..24eb543 --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw3.sh @@ -0,0 +1,36 @@ +#!/bin/bash +set -e +set -u + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 + +# ici instructions pour definir les stratégies par defaut (etape 1) +sudo iptables -P INPUT DROP +sudo iptables -P OUTPUT DROP +sudo iptables -P FORWARD DROP + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) +sudo iptables -F -t nat +sudo iptables -F -t filter + +# Loopback +sudo iptables -A INPUT -i lo -j ACCEPT +sudo iptables -A OUTPUT -o lo -j ACCEPT + +# Connexion ssh serveur +sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT #entrée +sudo iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT #sortie + +# Requete DNS client +sudo iptables -A OUTPUT -p udp --dport 53 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 53 -j ACCEPT + +# Acces HTTP client +sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT + diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw4.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw4.sh new file mode 100755 index 0000000..8824be7 --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw4.sh @@ -0,0 +1,41 @@ +#!/bin/bash +set -e +set -u + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 + +# ici instructions pour definir les stratégies par defaut (etape 1) +sudo iptables -P INPUT DROP +sudo iptables -P OUTPUT DROP +sudo iptables -P FORWARD DROP + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) +sudo iptables -F -t nat +sudo iptables -F -t filter + +# Loopback +sudo iptables -A INPUT -i lo -j ACCEPT +sudo iptables -A OUTPUT -o lo -j ACCEPT + +# Connexion ssh serveur +sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT #entrée +sudo iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT #sortie + +# Requete DNS client +sudo iptables -A OUTPUT -p udp --dport 53 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 53 -j ACCEPT + +# Acces HTTP client +sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT + +# NAT sur la carte exterieur (pouvoir curl une machine de l'autre coter) +sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 10.0.0.0/16 +#sudo iptables -L -t nat # pour controler +sudo iptables -A FORWARD -j ACCEPT + diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh new file mode 100755 index 0000000..d41527a --- /dev/null +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh @@ -0,0 +1,45 @@ +#!/bin/bash +set -e +set -u + +IFEXT=enp0s3 +IFDMZ=enp0s8 +IFINT=enp0s9 + +# ici instruction pour activer le routage +sysctl -w net.ipv4.ip_forward=1 + +# ici instructions pour definir les stratégies par defaut (etape 1) +sudo iptables -P INPUT DROP +sudo iptables -P OUTPUT DROP +sudo iptables -P FORWARD DROP + +# ici instructions pour remettre a zero les chaines filter et nat (etape 1) +sudo iptables -F -t nat +sudo iptables -F -t filter + +# Loopback +sudo iptables -A INPUT -i lo -j ACCEPT +sudo iptables -A OUTPUT -o lo -j ACCEPT + +# Connexion ssh serveur +sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT #entrée +sudo iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT #sortie + +# Requete DNS client +sudo iptables -A OUTPUT -p udp --dport 53 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 53 -j ACCEPT + +# Acces HTTP client +sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT + +# NAT sur la carte exterieur (pouvoir curl une machine de l'autre coter) +sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 10.0.0.0/16 +#sudo iptables -L -t nat # pour controler +sudo iptables -A FORWARD -j ACCEPT + +# Acces DNS sortante +sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT +sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT + From 2ee8d4fa6b893610089498f308bd57c40f71d815 Mon Sep 17 00:00:00 2001 From: "louis.depres" Date: Fri, 18 Mar 2022 08:53:39 +0100 Subject: [PATCH 05/13] Supprimer 'Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh' --- Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh | 45 ------------------------------ 1 file changed, 45 deletions(-) delete mode 100755 Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh deleted file mode 100755 index d41527a..0000000 --- a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh +++ /dev/null @@ -1,45 +0,0 @@ -#!/bin/bash -set -e -set -u - -IFEXT=enp0s3 -IFDMZ=enp0s8 -IFINT=enp0s9 - -# ici instruction pour activer le routage -sysctl -w net.ipv4.ip_forward=1 - -# ici instructions pour definir les stratégies par defaut (etape 1) -sudo iptables -P INPUT DROP -sudo iptables -P OUTPUT DROP -sudo iptables -P FORWARD DROP - -# ici instructions pour remettre a zero les chaines filter et nat (etape 1) -sudo iptables -F -t nat -sudo iptables -F -t filter - -# Loopback -sudo iptables -A INPUT -i lo -j ACCEPT -sudo iptables -A OUTPUT -o lo -j ACCEPT - -# Connexion ssh serveur -sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT #entrée -sudo iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT #sortie - -# Requete DNS client -sudo iptables -A OUTPUT -p udp --dport 53 -j ACCEPT -sudo iptables -A INPUT -p udp --sport 53 -j ACCEPT - -# Acces HTTP client -sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT -sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT - -# NAT sur la carte exterieur (pouvoir curl une machine de l'autre coter) -sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 10.0.0.0/16 -#sudo iptables -L -t nat # pour controler -sudo iptables -A FORWARD -j ACCEPT - -# Acces DNS sortante -sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT -sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT - From b5db0b93ef10cce7b6ab04d03695d9c04ef3fb97 Mon Sep 17 00:00:00 2001 From: Louis Depres Date: Fri, 18 Mar 2022 08:55:33 +0100 Subject: [PATCH 06/13] Second Commit --- Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh index d41527a..aa0d4f4 100755 --- a/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh +++ b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh @@ -36,10 +36,11 @@ sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT # NAT sur la carte exterieur (pouvoir curl une machine de l'autre coter) sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 10.0.0.0/16 +sudo iptables -t nat -A POSTROUTING -o "${IFEXT}" -j MASQUERADE -s 172.16.0.0/16 #sudo iptables -L -t nat # pour controler sudo iptables -A FORWARD -j ACCEPT # Acces DNS sortante -sudo iptables -A OUTPUT -p udp --dport 80 -j ACCEPT -sudo iptables -A INPUT -p udp --sport 80 -j ACCEPT +sudo iptables -A FORWARD -p udp --dport 53 -j ACCEPT +sudo iptables -A FORWARD -p udp --sport 53 -j ACCEPT From c11548b7780c91470895ce13051505894fea5d90 Mon Sep 17 00:00:00 2001 From: "louis.depres" Date: Fri, 18 Mar 2022 09:00:06 +0100 Subject: [PATCH 07/13] =?UTF-8?q?Mise=20=C3=A0=20jour=20de=20'Sio1/SISR1/3?= =?UTF-8?q?0-FiltrageEtDMZ/fw5.sh'?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Sio1/SISR1/30-FiltrageEtDMZ/{fw5-1.sh => fw5.sh} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename Sio1/SISR1/30-FiltrageEtDMZ/{fw5-1.sh => fw5.sh} (100%) diff --git a/Sio1/SISR1/30-FiltrageEtDMZ/fw5-1.sh b/Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh similarity index 100% rename from Sio1/SISR1/30-FiltrageEtDMZ/fw5-1.sh rename to Sio1/SISR1/30-FiltrageEtDMZ/fw5.sh From 66ba6ac4842dffe3ab70f133d2fbbf98478780c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Louis=20D=C3=A9pr=C3=A9s?= Date: Tue, 22 Mar 2022 11:36:11 +0100 Subject: [PATCH 08/13] TP Shell --- Sio1/SISR1/40-ShellEtBash/crsamba1 | 10 ++++++++++ Sio1/SISR1/40-ShellEtBash/crsamba2 | 21 +++++++++++++++++++++ Sio1/SISR1/40-ShellEtBash/crsamba4 | 22 ++++++++++++++++++++++ Sio1/SISR1/40-ShellEtBash/crsamba5 | 24 ++++++++++++++++++++++++ Sio1/SISR1/40-ShellEtBash/users.txt | 4 ++++ 5 files changed, 81 insertions(+) create mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba1 create mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba2 create mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba4 create mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba5 create mode 100644 Sio1/SISR1/40-ShellEtBash/users.txt diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba1 b/Sio1/SISR1/40-ShellEtBash/crsamba1 new file mode 100755 index 0000000..1bccb80 --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/crsamba1 @@ -0,0 +1,10 @@ +#!/bin/bash + +set -e +set -u + +fich=users.txt +while read ligne +do + echo "${ligne}" +done < $fich diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba2 b/Sio1/SISR1/40-ShellEtBash/crsamba2 new file mode 100755 index 0000000..94d81f3 --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/crsamba2 @@ -0,0 +1,21 @@ +#!/bin/bash + +#set -e +#set -u + +fich=$1 + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "${fich}" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + +while read ligne +do + echo "${ligne}" +done < $fich diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba4 b/Sio1/SISR1/40-ShellEtBash/crsamba4 new file mode 100755 index 0000000..7e3582f --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/crsamba4 @@ -0,0 +1,22 @@ +#!/bin/bash + +#set -e +#set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + + + +fich=$1 +while read ligne +do + echo "${ligne}"|cut -d: -f1 +done < $fich diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba5 b/Sio1/SISR1/40-ShellEtBash/crsamba5 new file mode 100755 index 0000000..c27dd44 --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/crsamba5 @@ -0,0 +1,24 @@ +#!/bin/bash + +#set -e +#set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + + + +fich=$1 +while read ligne +do + login=$(echo "${ligne}"|cut -d: -f1) + nom=$(echo "${ligne}"|cut -d: -f2) + echo "${login} ${nom}" +done < $fich diff --git a/Sio1/SISR1/40-ShellEtBash/users.txt b/Sio1/SISR1/40-ShellEtBash/users.txt new file mode 100644 index 0000000..718458c --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/users.txt @@ -0,0 +1,4 @@ +lucien:Lucien Aymar +claudine:Claudine Dupont +robert:Robert Michel +marcelle:Marcelle Parde From 59057cbb21ae0195658d87314f42ab4b22f830f1 Mon Sep 17 00:00:00 2001 From: "louis.depres" Date: Fri, 25 Mar 2022 09:33:11 +0100 Subject: [PATCH 09/13] Supprimer 'Sio1/SISR1/40-ShellEtBash/crsamba5' --- Sio1/SISR1/40-ShellEtBash/crsamba5 | 24 ------------------------ 1 file changed, 24 deletions(-) delete mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba5 diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba5 b/Sio1/SISR1/40-ShellEtBash/crsamba5 deleted file mode 100755 index c27dd44..0000000 --- a/Sio1/SISR1/40-ShellEtBash/crsamba5 +++ /dev/null @@ -1,24 +0,0 @@ -#!/bin/bash - -#set -e -#set -u - -if [[ $# -ne 1 ]] ; then - echo "usage : $0 " - exit 1 -fi - -if [[ ! -r "$1" ]] ; then - echo "$0 : erreur ouverture ${fich}" - exit 2 -fi - - - -fich=$1 -while read ligne -do - login=$(echo "${ligne}"|cut -d: -f1) - nom=$(echo "${ligne}"|cut -d: -f2) - echo "${login} ${nom}" -done < $fich From b7be885670eb781eeb106008b185e7ff78be1c68 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Louis=20D=C3=A9pr=C3=A9s?= Date: Fri, 25 Mar 2022 09:34:36 +0100 Subject: [PATCH 10/13] Tp Shell Suite --- Sio1/SISR1/40-ShellEtBash/crsamba5 | 12 ++++++--- Sio1/SISR1/40-ShellEtBash/crsamba7 | 33 +++++++++++++++++++++++++ Sio1/SISR1/40-ShellEtBash/rsamba | 27 ++++++++++++++++++++ Sio1/SISR1/40-ShellEtBash/users.txt.pwd | 8 ++++++ 4 files changed, 77 insertions(+), 3 deletions(-) create mode 100755 Sio1/SISR1/40-ShellEtBash/crsamba7 create mode 100755 Sio1/SISR1/40-ShellEtBash/rsamba create mode 100644 Sio1/SISR1/40-ShellEtBash/users.txt.pwd diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba5 b/Sio1/SISR1/40-ShellEtBash/crsamba5 index c27dd44..d25df2a 100755 --- a/Sio1/SISR1/40-ShellEtBash/crsamba5 +++ b/Sio1/SISR1/40-ShellEtBash/crsamba5 @@ -13,12 +13,18 @@ if [[ ! -r "$1" ]] ; then exit 2 fi - - fich=$1 while read ligne do login=$(echo "${ligne}"|cut -d: -f1) nom=$(echo "${ligne}"|cut -d: -f2) - echo "${login} ${nom}" + #echo "${login} ${nom}" + getent passwd "${login}" >> /dev/null + if [[ $? -ne 0 ]] ; then + sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}" + else + echo "$0 : utilisateur ${login} existe deja" + fi + done < $fich + diff --git a/Sio1/SISR1/40-ShellEtBash/crsamba7 b/Sio1/SISR1/40-ShellEtBash/crsamba7 new file mode 100755 index 0000000..3a444ef --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/crsamba7 @@ -0,0 +1,33 @@ +#!/bin/bash + +#set -e +#set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + +fich=$1 +while read ligne +do + login=$(echo "${ligne}"|cut -d: -f1) + nom=$(echo "${ligne}"|cut -d: -f2) + #echo "${login} ${nom}" + getent passwd "${login}" >> /dev/null + if [[ $? -ne 0 ]] ; then + sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}" + mdp=$(pwgen 6 1) + #echo "${mdp}" + echo "${login}:${mdp}"|chpasswd + echo "${login}:${mdp}" >> "${fich}.pwd" + else + echo "$0 : utilisateur ${login} existe deja" + fi +done < $fich + diff --git a/Sio1/SISR1/40-ShellEtBash/rsamba b/Sio1/SISR1/40-ShellEtBash/rsamba new file mode 100755 index 0000000..08c026b --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/rsamba @@ -0,0 +1,27 @@ +#!/bin/bash + +#set -e +set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + +fich=$1 + +while read -r ligne +do + login=$(echo "${ligne}"|cut -d: -f1) + getent passwd "${login}" > /dev/null + if [[ $? -eq 0 ]] ; then + sudo userdel --remove "${login}" + echo "Utilisateur ${login} supprime" + fi + +done < "${fich}" diff --git a/Sio1/SISR1/40-ShellEtBash/users.txt.pwd b/Sio1/SISR1/40-ShellEtBash/users.txt.pwd new file mode 100644 index 0000000..fc7abf4 --- /dev/null +++ b/Sio1/SISR1/40-ShellEtBash/users.txt.pwd @@ -0,0 +1,8 @@ +lucien:naid0O +claudine:ooC8oh +robert:Ax0aiy +marcelle:iv7Oot +lucien:Mie8sh +claudine:loHe1t +robert:Phoo5i +marcelle:WuaL5i From a5451875f916959e79ba59adf0795c308cab71ba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Louis=20D=C3=A9pr=C3=A9s?= Date: Fri, 25 Mar 2022 10:39:57 +0100 Subject: [PATCH 11/13] Fin TP Shell --- Sio1/SISR1/40-BashEtShell/crsamba8 | 35 ++++++++++++++++++++++++ Sio1/SISR1/40-BashEtShell/users2.txt | 10 +++++++ Sio1/SISR1/40-BashEtShell/users2.txt.pwd | 16 +++++++++++ 3 files changed, 61 insertions(+) create mode 100755 Sio1/SISR1/40-BashEtShell/crsamba8 create mode 100644 Sio1/SISR1/40-BashEtShell/users2.txt create mode 100644 Sio1/SISR1/40-BashEtShell/users2.txt.pwd diff --git a/Sio1/SISR1/40-BashEtShell/crsamba8 b/Sio1/SISR1/40-BashEtShell/crsamba8 new file mode 100755 index 0000000..0a787b0 --- /dev/null +++ b/Sio1/SISR1/40-BashEtShell/crsamba8 @@ -0,0 +1,35 @@ +#!/bin/bash + +#set -e +#set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" + exit 2 +fi + +fich=$1 +while read ligne +do + echo "$ligne" | grep "^#" >> /dev/null && continue + [[ -z "$ligne" ]] && continue + login=$(echo "${ligne}"|cut -d: -f1) + nom=$(echo "${ligne}"|cut -d: -f2) + #echo "${login} ${nom}" + getent passwd "${login}" >> /dev/null + if [[ $? -ne 0 ]] ; then + sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}" + mdp=$(pwgen 6 1) + #echo "${mdp}" + echo "${login}:${mdp}"|chpasswd + echo "${login}:${mdp}" >> "${fich}.pwd" + else + echo "$0 : utilisateur ${login} existe deja" + fi +done < $fich + diff --git a/Sio1/SISR1/40-BashEtShell/users2.txt b/Sio1/SISR1/40-BashEtShell/users2.txt new file mode 100644 index 0000000..c88445d --- /dev/null +++ b/Sio1/SISR1/40-BashEtShell/users2.txt @@ -0,0 +1,10 @@ + + + +# Salut +lucien:Lucien Dubois +#-_-_-_-_-_-_-_-_-_-_-_- +claudine:Claudine Dupont +robert:Robert Dupond +# , j +marcelle:Marcelle Parde diff --git a/Sio1/SISR1/40-BashEtShell/users2.txt.pwd b/Sio1/SISR1/40-BashEtShell/users2.txt.pwd new file mode 100644 index 0000000..bb118fb --- /dev/null +++ b/Sio1/SISR1/40-BashEtShell/users2.txt.pwd @@ -0,0 +1,16 @@ +lucien:oi6ooG +claudine:Aru6Vi +robert:ooGa5c +marcelle:lau7Eu +lucien:ca2liJ +claudine:Quoo6o +robert:LooKi9 +marcelle:Iegh3b +lucien:Wah4fu +claudine:Yae3th +robert:phi1Is +marcelle:Bip8Sh +lucien:ja1EeS +claudine:za1voG +robert:UMieM3 +marcelle:Emix6X From a312a6a773ebcbd566ec2c8c281726004157a50e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Louis=20D=C3=A9pr=C3=A9s?= Date: Fri, 25 Mar 2022 10:57:02 +0100 Subject: [PATCH 12/13] =?UTF-8?q?Fichier=20comment=C3=A9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Sio1/SISR1/40-BashEtShell/crsambaFini | 34 +++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100755 Sio1/SISR1/40-BashEtShell/crsambaFini diff --git a/Sio1/SISR1/40-BashEtShell/crsambaFini b/Sio1/SISR1/40-BashEtShell/crsambaFini new file mode 100755 index 0000000..4c129e9 --- /dev/null +++ b/Sio1/SISR1/40-BashEtShell/crsambaFini @@ -0,0 +1,34 @@ +#!/bin/bash + +#set -e +#set -u + +if [[ $# -ne 1 ]] ; then + echo "usage : $0 " #nombre de paramètre != 1 on sort du programme. + exit 1 +fi + +if [[ ! -r "$1" ]] ; then + echo "$0 : erreur ouverture ${fich}" # erreur ouverture du fichier on sort du programme. + exit 2 +fi + +fich=$1 +while read ligne #lecture par ligne du fichier +do + echo "$ligne" | grep "^#" >> /dev/null && continue #ignore les ligne commentes dans le fichier + [[ -z "$ligne" ]] && continue #ignore les lignes vides + login=$(echo "${ligne}"|cut -d: -f1) #recuperation login + nom=$(echo "${ligne}"|cut -d: -f2) #recuperation nom long + #echo "${login} ${nom}" + getent passwd "${login}" >> /dev/null + if [[ $? -ne 0 ]] ; then # si utilisateur inexistant on peut creer + sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}" # creation utilisateur + mdp=$(pwgen 6 1) # creation mot de passe + #echo "${mdp}" + echo "${login}:${mdp}"|chpasswd #affectation mot de passe utilisateur + echo "${login}:${mdp}" >> "${fich}.pwd" #stocke mot de passe dans fichier + else + echo "$0 : utilisateur ${login} existe deja" + fi +done < $fich From 38f30aa9ee01d989de5eac77e0e00ec74433a3bb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Louis=20D=C3=A9pr=C3=A9s?= Date: Tue, 29 Mar 2022 10:22:23 +0200 Subject: [PATCH 13/13] Compte Rendu Bash --- Sio1/SISR1/40-BashEtShell/CompteRenduBash | 157 ++++++++++++++++++++++ 1 file changed, 157 insertions(+) create mode 100644 Sio1/SISR1/40-BashEtShell/CompteRenduBash diff --git a/Sio1/SISR1/40-BashEtShell/CompteRenduBash b/Sio1/SISR1/40-BashEtShell/CompteRenduBash new file mode 100644 index 0000000..e49ea8d --- /dev/null +++ b/Sio1/SISR1/40-BashEtShell/CompteRenduBash @@ -0,0 +1,157 @@ +Script démarré sur 2022-03-29 10:18:18+02:00 [TERM="xterm-256color" TTY="/dev/pts/0" COLUMNS="90" LINES="33"] +[?2004hroot@TestBashShell:~/test# ls +[?2004l CompteRenduBash crsamba4 crsamba8 rsamba users2.txt.pwd +crsamba1 crsamba5 crsambaFini SioTP users.txt +crsamba2 crsamba7 present users2.txt users.txt.pwd +[?2004hroot@TestBashShell:~/test# nano users.txt +[?2004l [?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 4 lignes ](B(B GNU nano 5.4 users.txt (B (B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement (B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne lucien:Lucien Dubois claudine:Claudine Dupont robert:Robert Dupond marcelle:Marcelle Parde [?12l[?25h[?25l[?12l[?25h[?1049l [?1l>[?2004l[?2004hroot@TestBashShell:~/test# nano users.txt2.txt +[?2004l [?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 10 lignes ](B(B GNU nano 5.4 users2.txt (B (B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement (B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne # Salut (Blucien:Lucien Dubois #-_-_-_-_-_-_-_-_-_-_-_- (Bclaudine:Claudine Dupont robert:Robert Dupond # , j (Bmarcelle:Marcelle Parde [?12l[?25h[?25l[?12l[?25h[?1049l [?1l>[?2004l[?2004hroot@TestBashShell:~/test# ./crsambaFini users.txt +[?2004l ./crsambaFini : utilisateur lucien existe deja +./crsambaFini : utilisateur claudine existe deja +./crsambaFini : utilisateur robert existe deja +./crsambaFini : utilisateur marcelle existe deja +[?2004hroot@TestBashShell:~/test# /../rsamba users.txt +[?2004l Utilisateur lucien supprime +Utilisateur claudine supprime +Utilisateur robert supprime +Utilisateur marcelle supprime +[?2004hroot@TestBashShell:~/test# ./rsamba users.txt[5@crsambaFini +[?2004l [?2004hroot@TestBashShell:~/test# getent shadow +[?2004l root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7::: +daemon:*:18872:0:99999:7::: +bin:*:18872:0:99999:7::: +sys:*:18872:0:99999:7::: +sync:*:18872:0:99999:7::: +games:*:18872:0:99999:7::: +man:*:18872:0:99999:7::: +lp:*:18872:0:99999:7::: +mail:*:18872:0:99999:7::: +news:*:18872:0:99999:7::: +uucp:*:18872:0:99999:7::: +proxy:*:18872:0:99999:7::: +www-data:*:18872:0:99999:7::: +backup:*:18872:0:99999:7::: +list:*:18872:0:99999:7::: +irc:*:18872:0:99999:7::: +gnats:*:18872:0:99999:7::: +nobody:*:18872:0:99999:7::: +_apt:*:18872:0:99999:7::: +systemd-timesync:*:18872:0:99999:7::: +systemd-network:*:18872:0:99999:7::: +systemd-resolve:*:18872:0:99999:7::: +messagebus:*:18873:0:99999:7::: +sshd:*:18873:0:99999:7::: +sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7::: +systemd-coredump:!*:18873:::::: +lucien:$y$j9T$ZeC2TVITWi1AFpWvu3ylC0$CpoURwx6PVIzZv0bnRoKWYcnOn/t7whgwMV2PFgV/n7:19080:0:99999:7::: +claudine:$y$j9T$S.6tFvH9ipa06FfPCDT.w.$AaGIJ8b140oWbKnGoYyIux4VjdYFhTReqWKRlthK7h6:19080:0:99999:7::: +robert:$y$j9T$MkZBUpoUJbITG09pSIQrd/$rq.YwB083tDKS9Xl6SxOinfcbLenhOHJVFyujPS7gY6:19080:0:99999:7::: +marcelle:$y$j9T$Uzp89MzZ84TUx6XpEKmrJ0$AHeUnn5UsTmphkHdi3N/n16fcVYZvnvQpyRfnl.AMC4:19080:0:99999:7::: +[?2004hroot@TestBashShell:~/test# getent shadow./crsambaFini users.txtrsamba +[?2004l Utilisateur lucien supprime +Utilisateur claudine supprime +Utilisateur robert supprime +Utilisateur marcelle supprime +[?2004hroot@TestBashShell:~/test# ./rsamba users.txtgetent shadow +[?2004l root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7::: +daemon:*:18872:0:99999:7::: +bin:*:18872:0:99999:7::: +sys:*:18872:0:99999:7::: +sync:*:18872:0:99999:7::: +games:*:18872:0:99999:7::: +man:*:18872:0:99999:7::: +lp:*:18872:0:99999:7::: +mail:*:18872:0:99999:7::: +news:*:18872:0:99999:7::: +uucp:*:18872:0:99999:7::: +proxy:*:18872:0:99999:7::: +www-data:*:18872:0:99999:7::: +backup:*:18872:0:99999:7::: +list:*:18872:0:99999:7::: +irc:*:18872:0:99999:7::: +gnats:*:18872:0:99999:7::: +nobody:*:18872:0:99999:7::: +_apt:*:18872:0:99999:7::: +systemd-timesync:*:18872:0:99999:7::: +systemd-network:*:18872:0:99999:7::: +systemd-resolve:*:18872:0:99999:7::: +messagebus:*:18873:0:99999:7::: +sshd:*:18873:0:99999:7::: +sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7::: +systemd-coredump:!*:18873:::::: +[?2004hroot@TestBashShell:~/test# getent shadow./rsamba users.txtgetent shadow./crsambaFini users.txtrsamba[5@crsambaFini2.txt +[?2004l [?2004hroot@TestBashShell:~/test# ./crsambaFini users2.txtgetent shadow +[?2004l root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7::: +daemon:*:18872:0:99999:7::: +bin:*:18872:0:99999:7::: +sys:*:18872:0:99999:7::: +sync:*:18872:0:99999:7::: +games:*:18872:0:99999:7::: +man:*:18872:0:99999:7::: +lp:*:18872:0:99999:7::: +mail:*:18872:0:99999:7::: +news:*:18872:0:99999:7::: +uucp:*:18872:0:99999:7::: +proxy:*:18872:0:99999:7::: +www-data:*:18872:0:99999:7::: +backup:*:18872:0:99999:7::: +list:*:18872:0:99999:7::: +irc:*:18872:0:99999:7::: +gnats:*:18872:0:99999:7::: +nobody:*:18872:0:99999:7::: +_apt:*:18872:0:99999:7::: +systemd-timesync:*:18872:0:99999:7::: +systemd-network:*:18872:0:99999:7::: +systemd-resolve:*:18872:0:99999:7::: +messagebus:*:18873:0:99999:7::: +sshd:*:18873:0:99999:7::: +sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7::: +systemd-coredump:!*:18873:::::: +lucien:$y$j9T$/w5UzDIy4Ya9jSySl6mPn.$I59QPyDLLGXu0USyvHgqgoJlF/rcjcAYOWxVO703Hq5:19080:0:99999:7::: +claudine:$y$j9T$UyQDXKp5P6mbHgKqJeYC41$LqUl1NewksM4aOZgnFMPPhMpd/hFKfPa9ByhnMHgfND:19080:0:99999:7::: +robert:$y$j9T$Vwc34rv0bYLl56bB1iplP0$Cu4dYpt9MUugy8M.0kYlwa5skwR8qnDbPqpIzYVjra7:19080:0:99999:7::: +marcelle:$y$j9T$hEIMX3JYqvmkpUKHs9Z4O.$wFWYxPGAK2GNDLw9NYffNeWG2s4bPMFvkFgSzf4xLo2:19080:0:99999:7::: +[?2004hroot@TestBashShell:~/test# getent shadow./crsambaFini users2.txtgetent shadow./rsamba users.txt2.txt +[?2004l Utilisateur lucien supprime +Utilisateur claudine supprime +Utilisateur robert supprime +Utilisateur marcelle supprime +[?2004hroot@TestBashShell:~/test# ./rsamba users2.txtgetent shadow +[?2004l root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7::: +daemon:*:18872:0:99999:7::: +bin:*:18872:0:99999:7::: +sys:*:18872:0:99999:7::: +sync:*:18872:0:99999:7::: +games:*:18872:0:99999:7::: +man:*:18872:0:99999:7::: +lp:*:18872:0:99999:7::: +mail:*:18872:0:99999:7::: +news:*:18872:0:99999:7::: +uucp:*:18872:0:99999:7::: +proxy:*:18872:0:99999:7::: +www-data:*:18872:0:99999:7::: +backup:*:18872:0:99999:7::: +list:*:18872:0:99999:7::: +irc:*:18872:0:99999:7::: +gnats:*:18872:0:99999:7::: +nobody:*:18872:0:99999:7::: +_apt:*:18872:0:99999:7::: +systemd-timesync:*:18872:0:99999:7::: +systemd-network:*:18872:0:99999:7::: +systemd-resolve:*:18872:0:99999:7::: +messagebus:*:18873:0:99999:7::: +sshd:*:18873:0:99999:7::: +sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7::: +systemd-coredump:!*:18873:::::: +[?2004hroot@TestBashShell:~/test# nano crsambaFini +[?2004l [?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 34 lignes ](B(B GNU nano 5.4 crsambaFini (B (B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement (B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne #!/bin/bash #set -e #set -u if(B [[(B (B$#(B -ne(B 1 ]](B ;(B then(Becho(B (B"usage : $0 "(B #nombre de paramètre != 1 on sort du programme.exit(B 1 fi if(B [[(B !(B -r(B (B"$1"(B ]](B ;(B then(Becho(B (B"$0 : erreur ouverture ${fich}"(B # erreur ouverture du fichier on sort du pro(B>(Bexit(B 2 fi (Bfich=(B$1 (Bwhile(B read(B ligne #lecture par ligne du fichier do(Becho(B (B"$ligne"(B |(B (Bgrep(B (B"^#"(B >>(B /dev/null &&(B continue #ignore les ligne commentes da(B>(B[[(B -z(B (B"$ligne"(B ]](B &&(B continue #ignore les lignes vides(Blogin=$((Becho(B (B"${ligne}"(B|(Bcut -d(B:(B -f1) #recuperation login(Bnom=$((Becho(B (B"${ligne}"(B|(Bcut -d(B:(B -f2) #recuperation nom long #echo (B"${login} ${nom}"(Bgetent passwd (B"${login}"(B >>(B /dev/nullif(B [[(B (B$?(B -ne(B 0 ]](B ;(B then # si utilisateur inexistant on peut creer(Bsudo useradd(B --create-home --home-dir(B /home/(B"${login}" --shell(B /bin/bash(B (B>(Bmdp=$((Bpwgen 6 1) # creation mot de passe #echo (B"${mdp}"echo(B (B"${login}:${mdp}"(B|(Bchpasswd #affectation mot de passe utilisateur (B[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l78 +(Becho(B (B"${login}:${mdp}"(B >>(B (B"${fich}.pwd"(B #stocke mot de passe dans fichier (B[?12l[?25h[?25l78 +else (B[?12l[?25h[?25l78 +(Becho(B (B"$0 : utilisateur ${login} existe deja" (B[?12l[?25h[?25l78 +fi (B[?12l[?25h[?25l78 +done(B <(B (B$fich (B[?12l[?25h[?25l78 +[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l0[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25ls[?12l[?25h[?25lu[?12l[?25h[?25ld[?12l[?25h[?25lo[?12l[?25h[?25l [?12l[?25h[?25lu[?12l[?25h[?25ls[?12l[?25h[?25le[?12l[?25h[?25lr[?12l[?25h[?25la[?12l[?25h[?25ld[?12l[?25h[?25ld[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l/[?12l[?25h[?25lh[?12l[?25h[?25lo[?12l[?25h[?25lm[?12l[?25h[?25le[?12l[?25h[?25l/[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?25l/[?12l[?25h[?25lb[?12l[?25h[?25li[?12l[?25h[?25ln[?12l[?25h[?25l/[?12l[?25h[?25lb[?12l[?25h[?25la[?12l[?25h[?25ls[?12l[?25h[?25l (B<(B/bash(B --comment(B (B"${nom}"(B (B"${login}"(B # creation utilisateur(B[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l[?12l[?25h[?25l [?12l[?25h[?1049l [?1l>[?2004l[?2004hroot@TestBashShell:~/test# nano crsambaFini rsamba +[?2004l [?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 27 lignes ](B(B GNU nano 5.4 rsamba (B (B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement (B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne #!/bin/bash #set -e (Bset -u (Bif(B [[(B (B$#(B -ne(B 1 ]](B ;(B then(Becho(B (B"usage : $0 "(Bexit(B 1 fi if(B [[(B !(B -r(B (B"$1"(B ]](B ;(B then(Becho(B (B"$0 : erreur ouverture ${fich}"(Bexit(B 2 fi (Bfich=(B$1 (Bwhile(B read(B -r(B ligne do(Blogin=$((Becho(B (B"${ligne}"(B|(Bcut -d(B:(B -f1)(Bgetent passwd (B"${login}"(B >(B /dev/nullif(B [[(B (B$?(B -eq(B 0 ]](B ;(B then((Bsudo userdel(B --remove(B (B"${login}"(B)(B >>(B /dev/null 2>(B/dev/null(Becho(B (B"Utilisateur ${login} supprime"(Bfi done(B <(B (B"${fich}" (B[?12l[?25h[?25l[?12l[?25h[?1049l [?1l>[?2004l[?2004hroot@TestBashShell:~/test# [?2004l +exit + +Script terminé sur 2022-03-29 10:21:20+02:00 [COMMAND_EXIT_CODE="0"]