◆当blogは、Linuxサーバ構築する際の実際の設定手順を個人的メモとして記載しております。LinuC試験の役に立つ情報があるかも…？
[root]# cd /etc/httpd/conf ←設定ディレクトリへ移動
[root]# openssl genrsa -des 1024 > server.key ←プライベート鍵作成
Generating RSA private key, 1024 bit long modulus
.++++++
..........++++++
e is 65537 (0x10001)
Enter pass phrase: ←パスフレーズ入力
Verifying - Enter pass phrase: ←再度パスフレーズ入力
[root]# openssl rsa -in server.key -out server.key ←パスフレーズ問い合わせ除去
Enter pass phrase for server.key: ←設定済みのパスフレーズ入力
writing RSA key
[root]# openssl req -new -days 365 -key server.key -out server.csr ←サイト証明書発行要求を作成
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:JP ←国名
State or Province Name (full name) [Berkshire]:KANAGAWA ←都道府県
Locality Name (eg, city) [Newbury]:HUJISAWA ←市区町村
Organization Name (eg, company) [My Company Ltd]:A ←会社名
Organizational Unit Name (eg, section) []:B ←部署名
Common Name (eg, your name or your server's hostname) []:www.example.com ←サーバ名
Email Address []:apache@example.com ←管理者のメールアドレス
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: ←チャレンジパスワードは設定不要
An optional company name []: ←追加の会社名は設定不要
[root]# openssl x509 -days 365 -in server.csr -out server.crt -req -signkey server.key ←サイト証明書を作成
Signature ok
subject=/C=JP/ST=KANAGAWA/L=HUJISAWA/O=A/OU=B/CN=www.example.com/emailAddress=apache@example.com
Getting Private key
[root]# chmod 0600 server.* ←所有者のみ読み書き可能
[root]# mv server.key /etc/httpd/conf/ssl.key/ ←サーバ鍵を格納
[root]# mv server.csr /etc/httpd/conf/ssl.csr/ ←サイト証明書発行要求を格納
[root]# mv server.crt /etc/httpd/conf/ssl.crt/ ←サイト証明書を格納
[root]# vi /etc/httpd/conf/httpd.conf ←httpd設定ファイル
■以下のように編集↓■
ServerName www.example.com:80
■以下の行追加↓■
<Directory "/var/www/shtml">
AllowOverride None
Order Allow,Deny
Allow from 192.168.0.0/24
AuthType Basic
AuthName "Secure Page"
AuthUserFile /etc/httpd/conf/passwd
Require valid-user
</Directory>
[root]# vi /etc/httpd/conf.d/ssl.conf ←SSL設定
■以下のように編集↓■
DocumentRoot "/var/www/shtml"
ServerName www.example.com:443
ServerAdmin apache@example.com
[root]# htpasswd -c passwd reverie ←パスワード設定
New password: ←パスワード入力
Re-type new password: ←再度パスワード入力
Adding password for user reverie
[root]# chown -R apache * ←所有者をapacheにする
[root]# mkdir /var/www/shtml ←ディレクトリ作成
[root]# chown apache /var/www/shtml ←所有者をapacheにする
[root]# vi /var/www/shtml/secure.shtml ←テストページ作成
■適当にテスト用shtml作成■
<HTML><HEAD><TITLE>SSL TEST</TITLE></HEAD>
<BODY>SSL TEST PAGE!!!</BODY></HTML>
[root]# chmod 0600 * ←所有者のみ読み書き可能
[root]# chown apache * ←所有者をapacheにする
[root]# /etc/rc.d/init.d/httpd restart
httpdを停止中: [ OK ]
httpdを起動中: [ OK ]
←Windowsからhttps://www.example.com/secure.shtmlにアクセス
[root]# tail /var/log/httpd/ssl_access_log ←SSLアクセスログを確認
win50.example.com - - [11/Dec/2010:19:08:14 +0900] "GET /secure.shtml HTTP/1.1" 401 1304
win50.example.com - reverie [11/Dec/2010:19:08:23 +0900] "GET /secure.shtml HTTP/1.1" 200 86
[root]# vi /etc/ssh/sshd_config ←SSHサーバ設定ファイル
■該当箇所を以下のように編集↓■
PasswordAuthentication no
AllowUsers reverie
[root]# su - reverie ←ユーザ切替
[reverie]$ ssh-keygen -t rsa1 ←SSHの鍵を作成
Generating public/private rsa1 key pair.
Enter file in which to save the key (/home/reverie/.ssh/identity):
Created directory '/home/reverie/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/reverie/.ssh/identity.
Your public key has been saved in /home/reverie/.ssh/identity.pub.
The key fingerprint is:
23:46:16:33:65:37:88:94:b4:f7:33:a0:5d:b5:4e:ad reverie@reverie.example.com
[reverie]$ cd /home/reverie/.ssh ←共通鍵の格納場所へ移動
[reverie]$ ls -al
合計 16
drwx------ 2 reverie reverie 4096 11月 29 14:22 .
drwx------ 11 reverie 500 4096 11月 29 14:21 ..
-rw------- 1 reverie reverie 542 11月 29 14:22 identity
-rw-r--r-- 1 reverie reverie 346 11月 29 14:22 identity.pub
[reverie]$ cat identity.pub >> authorized_keys ←サーバに渡す公開鍵
[reverie]$ chmod 0600 * ←所有者のみ読み書き可能
[reverie]$ ls -al
合計 20
drwx------ 2 reverie reverie 4096 11月 29 14:25 .
drwx------ 11 reverie 500 4096 11月 29 14:21 ..
-rw------- 1 reverie reverie 346 11月 29 14:25 authorized_keys
-rw------- 1 reverie reverie 542 11月 29 14:22 identity
-rw------- 1 reverie reverie 346 11月 29 14:22 identity.pub
[reverie]$ smbclient '\\win50\LINUX' -I 192.168.0.50 -U Administrator ←クライアントへ接続
params.c:OpenConfFile() - Unable to open configuration file "/etc/samba/smb.conf":
Permission denied
Can't load /etc/samba/smb.conf - run testparm to debug it
added interface ip=192.168.0.99 bcast=192.168.0.255 nmask=255.255.255.0
Password: ←パスワード入力
Domain=[EXAMPLE.COM] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \> put identity ←クライアント側に秘密鍵を渡す
putting file identity as \identity (13.2 kb/s) (average 13.2 kb/s)
smb: \> quit ←smbclient終了
[reverie]$exit ←rootへ戻る
←WindowsクライアントからSSH接続する
[root]# tail /var/log/secure
Nov 23 14:04:06 reverie sshd[1042]: Server listening on 0.0.0.0 port 22.
Nov 23 14:27:57 reverie sshd[1345]: Accepted password for reverie from 192.168.0.21 port 57414 ssh2
Nov 23 15:32:10 reverie sshd[1347]: Received disconnect from 192.168.0.21: 2: disconnected by server request
Nov 23 15:32:11 reverie sshd[1042]: Received signal 15; terminating.
Nov 29 13:17:26 reverie sshd[1042]: Server listening on 0.0.0.0 port 22.
Nov 29 13:19:58 reverie sshd[1344]: Accepted password for reverie from 192.168.0.21 port 56761
Nov 29 13:22:39 reverie useradd[1416]: new user: name=testuser, uid=501, gid=501, home=/home/testuser, shell=/bin/bash
Nov 29 13:32:50 reverie sudo: testuser : command not allowed ; TTY=pts/0 ; PWD=/home/testuser ; USER=root ; COMMAND=/bin/more /etc/sudoers
Nov 29 13:33:39 reverie sudo: reverie : TTY=pts/0 ; PWD=/home/reverie ; USER=root ; COMMAND=/bin/more /etc/sudoers
Nov 29 14:37:59 reverie sshd[8082]: Accepted rsa for reverie from 192.168.0.50 port 3009
[root]# vi /etc/xinetd.conf←設定ファイル
■以下のように編集↓■
defaults
{
instances = 60
log_type = FILE /var/log/service.log←ログの出力先を指定
log_on_success = HOST PID EXIT DURATION
log_on_failure = HOST ATTEMPT
only_from = 192.168.0.0/24 127.0.0.1←ローカル、ループバック
no_access = 192.168.0.1←ルータのアドレス
cps = 25 30
}
includedir /etc/xinetd.d
[root]# touch /var/log/service.log←ログ用ファイル作成
[root]# chmod 0600 /etc/xinetd.conf←権限変更
[root]# ls -al /etc/xinetd.conf
ls -al /etc/xinetd.conf
-rw------- 1 root root 386 11月 23 14:37 /etc/xinetd.conf
[root]# vi /etc/xinetd.d/telnet←telnetをxinetd経由で起動する設定
■以下の箇所をコメント化↓■
# disable = yes
[root]# /etc/rc.d/init.d/xinetd restart←再起動
xinetdを停止中: [ OK ]
xinetdを起動中: [ OK ]
root]# tail /var/log/messages
Nov 23 14:04:23 reverie anacron: anacron startup succeeded
Nov 23 14:04:23 reverie atd: atd startup succeeded
Nov 23 14:04:28 reverie kernel: mice: PS/2 mouse device common for all mice
Nov 23 14:27:57 reverie sshd(pam_unix)[1347]: session opened for user reverie by (uid=500)
Nov 23 14:28:01 reverie 11月 23 14:28:01 su(pam_unix)[1377]: session opened for user root by reverie(uid=500)
Nov 23 14:51:50 reverie xinetd[1056]: Exiting...
Nov 23 14:51:50 reverie 11月 23 14:51:50 xinetd: xinetd停止 succeeded
Nov 23 14:51:51 reverie xinetd[1487]: xinetd Version 2.3.11 started with libwrap loadavg options compiled in.
Nov 23 14:51:51 reverie xinetd[1487]: Started working: 3 available services
Nov 23 14:51:53 reverie xinetd: ・ 鰯ucceeded
←Windowsクライアントからtelnetでログイン
[root]# tail /var/log/service.log
10/11/23@14:54:13: START: telnet pid=1491 from=192.168.0.50
10/11/23@14:54:58: EXIT: telnet status=0 pid=1491 duration=45(sec)
[root]# ls -l /etc/vsftpd*
-rw------- 1 root root 125 3月 1 2003 /etc/vsftpd.ftpusers←ftp禁止ユーザ一覧
-rw------- 1 root root 361 3月 1 2003 /etc/vsftpd.user_list←vsftpd禁止ユーザ一覧
/etc/vsftpd:
合計 4
-rw------- 1 root root 3854 3月 1 2003 vsftpd.conf
[root]# cp -p /usr/share/doc/vsftpd-1.1.3/vsftpd.xinetd /etc/xinetd.d/vsftpd←xinetd用にvsftpdをコピー
[root]# vi /etc/xinetd.d/vsftpd←vsftpdをxinetd経由で起動する設定
■以下のように編集↓■
server_args = /etc/vsftpd/vsftpd.conf←vsftpd設定ファイルを引数に設定
access_times = 00:00-23:59←接続許可時間
# disable = yes←コメントアウトで有効化
[root]# vi /etc/vsftpd/vsftpd.conf←vsftpdの設定
■以下のように編集↓■
ascii_upload_enable=YES←アップロード許可
ascii_download_enable=YES←ダウンロード許可
# listen=YES←スタンドアロンモードを無効化
[root]# /etc/rc.d/init.d/xinetd restart←再起動
xinetdを停止中: [ OK ]
xinetdを起動中: [ OK ]
[root]# tail /var/log/messages
Nov 23 14:55:13 reverie -- reverie[1523]: LOGIN ON pts/1 BY reverie FROM win50
Nov 23 14:56:16 reverie login(pam_unix)[1523]: session closed for user reverie
Nov 23 14:56:26 reverie login(pam_unix)[1552]: session opened for user reverie by (uid=0)
Nov 23 14:56:26 reverie -- reverie[1552]: LOGIN ON pts/1 BY reverie FROM win50
Nov 23 14:56:32 reverie login(pam_unix)[1552]: session closed for user reverie
Nov 23 15:16:57 reverie xinetd[1487]: Exiting...
Nov 23 15:16:57 reverie 11月 23 15:16:57 xinetd: xinetd停止 succeeded
Nov 23 15:16:58 reverie xinetd[1867]: xinetd Version 2.3.11 started with libwrap loadavg options compiled in.
Nov 23 15:16:58 reverie xinetd[1867]: Started working: 4 available services
Nov 23 15:17:00 reverie xinetd: ・ 鰯ucceeded
←Windowsクライアントからftp接続
[root]# tail /var/log/service.log←xinetdのログ
10/11/23@15:20:19: START: ftp pid=1884 from=192.168.0.50
10/11/23@15:21:34: EXIT: ftp status=0 pid=1884 duration=75(sec)
[root]# tail /var/log/vsftpd.log←vsftpdのファイル転送ログ
Tue Nov 23 15:21:29 2010 1 192.168.0.50 204 /home/reverie/.bash_profile a _ o r reverie ftp 0 * c
[root]# vi /etc/samba/smb.conf←SAMBAの設定
■↓以下のように編集■
workgroup = ドメイン名
server string = 表示させる文字列
hosts allow = 192.168.0. 127.←アクセス許可
security = user←認証方式
remote announce = 192.168.0.255←ローカルネットへ通知
■↓以下の行追記■
invalid users = root←禁止ユーザ
coding system = euc←文字コード
client code page = 932←クライアント側の文字コード
[root]# testparm -s←設定を確認する
[root]# cat /etc/passwd | mksmbpasswd.sh > smbpasswd←sambaパスワードファイル作成
[root]# chmod 0600 smbpasswd←rootのみ権限設定
[root]# chmod 0500 /etc/samba←rootのみ権限設定
[root]# smbpasswd reverie←sambaパスワード設定
New SMB password:←パスワード入力
Retype new SMB password:←確認の為にもう一度パスワード入力
Password changed for user reverie.
Password changed for user reverie.
[root]# tail /etc/samba/smbpasswd←sambaパスワードが追加されているのを確認
reverie:500:E52CAC67419A9A224A3B108F3FA6CB6D:8846F7EAEE8FB117AD06BDD830B7586C:[U ]:LCT-4CE39C83:reverie
[root]# more /etc/sysconfig/samba←samba起動パラメータの確認
# Options to smbd
SMBDOPTIONS="-D"
# Options to nmbd
NMBDOPTIONS="-D"
# Options for winbindd
WINBINDOPTIONS=""
[root]# /etc/rc.d/init.d/smb restart←samba再起動
SMBサービスを停止中: [失敗]
NMBサービスを停止中: [失敗]
SMBサービスを起動中: [ OK ]
NMBサービスを起動中: [ OK ]
[root]# tail /var/log/messages←システムログで起動確認
Nov 17 16:17:04 reverie xfs: ignoring font path element /usr/X11R6/lib/X11/fonts/cyrillic (unreadable)
Nov 17 16:17:08 reverie kernel: mice: PS/2 mouse device common for all mice
Nov 17 16:35:16 reverie sshd(pam_unix)[1339]: session opened for user reverie by (uid=500)
Nov 17 16:35:18 reverie 11月 17 16:35:18 su(pam_unix)[1369]: session opened for user root by reverie(uid=500)
Nov 17 18:11:43 reverie 11月 17 18:11:43 su(pam_unix)[1369]: session closed for user root
Nov 17 18:11:57 reverie 11月 17 18:11:57 su(pam_unix)[7908]: session opened for user root by reverie(uid=500)
Nov 17 18:19:59 reverie 11月 17 18:19:59 smb: smbd停止 failed
Nov 17 18:19:59 reverie 11月 17 18:19:59 smb: nmbd停止 failed
Nov 17 18:19:59 reverie 11月 17 18:19:59 smb: smbd起動 succeeded
Nov 17 18:19:59 reverie 11月 17 18:19:59 smb: nmbd起動 succeeded
[root]# more /var/log/samba/log.nmbd←nmbのログ
[2010/11/17 18:19:59, 0] nmbd/nmbd.c:main(794)
Netbios nameserver version 2.2.7a started.
Copyright Andrew Tridgell and the Samba Team 1994-2002
[2010/11/17 18:20:03, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235)
find_response_record: response packet id 14426 received with no matching record.
[2010/11/17 18:20:03, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235)
find_response_record: response packet id 14427 received with no matching record.
[root]# more /var/log/samba/log.smbd←smbのログ
[2010/11/17 18:19:59, 0] smbd/server.c:main(707)
smbd version 2.2.7a started.
Copyright Andrew Tridgell and the Samba Team 1992-2002
[root]# vi /etc/hosts
■↓以下のように追記■
192.168.0.50 win50.example.com win50←sambaクライアントのIP,ドメイン名,ホスト名
[root]# vi /etc/samba/lmhosts
■↓以下のように追記■
192.168.0.99 reverie←sambaサーバのIPとホスト名
192.168.0.50 win50←sambaクライアントのIPとホスト名
←Windowsクライアントからワークグループ内にあるsambaサーバへアクセスする
[root]# smbstatus←Windowsクライアントからのアクセスを確認
Samba version 2.2.7a
Service uid gid pid machine
----------------------------------------------
IPC$ reverie reverie 7999 win50 (192.168.0.50) Wed Nov 17 18:33:57 2010
IPC$ nobody nobody 7999 win50 (192.168.0.50) Wed Nov 17 18:34:00 2010
reverie reverie reverie 7999 win50 (192.168.0.50) Wed Nov 17 18:34:00 2010
No locked files
[root]# tail /var/log/messages←sambaセッションを確認
Nov 17 18:33:57 reverie samba(pam_unix)[7999]: session opened for user reverie by (uid=0)
[root]# vi /etc/squid/squid.conf←Squidの設定ファイル
■以下のように編集↓■
http_port 8080←ポート番号指定
acl our_networks src 192.168.1.0/24←アクセスリスト設定
acl working_time time 00:00-23:59←アクセスリスト設定
http_access deny !working_time←拒否条件
http_access allow our_networks←許可条件
[root]# /etc/rc.d/init.d/squid restart←設定反映の為、再起動
squidを停止中: [失敗]
init_cache_dir /var/spool/squid... squidを起動中: .. [ OK ]
[root]# tail /var/log/messages
Nov 12 17:16:20 reverie last message repeated 15 times
Nov 12 17:16:20 reverie cups: cupsd startup succeeded
Nov 12 17:16:20 reverie xfs: xfs startup succeeded
Nov 12 17:16:21 reverie anacron: anacron startup succeeded
Nov 12 17:16:21 reverie atd: atd startup succeeded
Nov 12 17:16:21 reverie xfs: ignoring font path element /usr/X11R6/lib/X11/fonts/cyrillic (unreadable)
Nov 12 17:16:25 reverie kernel: mice: PS/2 mouse device common for all mice
Nov 12 17:16:52 reverie sshd(pam_unix)[1316]: session opened for user reverie by (uid=500)
Nov 12 17:16:55 reverie 11月 12 17:16:55 su(pam_unix)[1346]: session opened for user root by reverie(uid=500)
Nov 12 17:40:15 reverie squid[1425]: Squid Parent: child process 1427 started←Squid起動を確認
[root]# ls -al /var/log/squid←Squidのログがあることを確認
合計 12
drwxr-x--- 2 squid squid 4096 11月 12 17:40 .
drwxr-xr-x 8 root root 4096 11月 12 17:16 ..
-rw-r--r-- 1 squid squid 0 11月 12 17:40 access.log
-rw-r--r-- 1 squid squid 1865 11月 12 17:40 cache.log
-rw-r--r-- 1 squid squid 0 11月 12 17:40 store.log
[root]# more /var/log/squid/cache.log←キャッシュログ確認
2010/11/12 17:40:15| Starting Squid Cache version 2.5.STABLE1 for i386-redhat-linux-gnu...
2010/11/12 17:40:15| Process ID 1427
2010/11/12 17:40:15| With 1024 file descriptors available
2010/11/12 17:40:15| DNS Socket created at 0.0.0.0, port 32770, FD 5
2010/11/12 17:40:15| Adding nameserver 192.168.0.99 from /etc/resolv.conf
2010/11/12 17:40:15| Unlinkd pipe opened on FD 10
2010/11/12 17:40:15| Swap maxSize 102400 KB, estimated 7876 objects
2010/11/12 17:40:15| Target number of buckets: 393
2010/11/12 17:40:15| Using 8192 Store buckets
2010/11/12 17:40:15| Max Mem size: 8192 KB
2010/11/12 17:40:15| Max Swap size: 102400 KB
2010/11/12 17:40:15| Rebuilding storage in /var/spool/squid (DIRTY)
2010/11/12 17:40:15| Using Least Load store dir selection
2010/11/12 17:40:15| Set Current Directory to /var/spool/squid
2010/11/12 17:40:15| Loaded Icons.
2010/11/12 17:40:17| Accepting HTTP connections at 0.0.0.0, port 8080, FD 11.
2010/11/12 17:40:17| WCCP Disabled.
2010/11/12 17:40:17| Ready to serve requests.
2010/11/12 17:40:17| Done scanning /var/spool/squid swaplog (0 entries)
2010/11/12 17:40:17| Finished rebuilding storage from disk.
2010/11/12 17:40:17| 0 Entries scanned
2010/11/12 17:40:17| 0 Invalid entries.
2010/11/12 17:40:17| 0 With invalid flags.
2010/11/12 17:40:17| 0 Objects loaded.
2010/11/12 17:40:17| 0 Objects expired.
2010/11/12 17:40:17| 0 Objects cancelled.
2010/11/12 17:40:17| 0 Duplicate URLs purged.
2010/11/12 17:40:17| 0 Swapfile clashes avoided.
2010/11/12 17:40:17| Took 2.0 seconds ( 0.0 objects/sec).
2010/11/12 17:40:17| Beginning Validation Procedure
2010/11/12 17:40:17| Completed Validation Procedure
2010/11/12 17:40:17| Validated 0 Entries
2010/11/12 17:40:17| store_swap_size = 0k
2010/11/12 17:40:19| storeLateRelease: released 0 objects
←Windows上でプロキシサーバを設定してWWWサーバへアクセスさせる
[root]# tail /var/log/httpd/access_log←ログ確認
192.168.0.50 - - [12/Nov/2010:17:53:02 +0900] "GET / HTTP/1.1" 304 0 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
192.168.0.50 - - [12/Nov/2010:17:53:05 +0900] "GET /index.html HTTP/1.1" 200 117 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
[root]# vi /etc/httpd/conf/httpd.conf←Apacheの設定ファイル
■下記の項目は必ず環境に合わせて設定する↓■
ServerAdmin apache@example.com←管理者メールアドレス
ServerName reverie.example.com:80←WWWサーバ名とポート番号
DocumentRoot "/var/www/html"←ドキュメントルートの場所
[root]# /etc/rc.d/init.d/httpd restart←設定反映のため、httpd再起動
httpdを停止中: [失敗]
httpdを起動中: [ OK ]
[root]# tail /var/log/messages
Nov 9 12:55:28 reverie xfs: xfs startup succeeded
Nov 9 12:55:28 reverie anacron: anacron startup succeeded
Nov 9 12:55:28 reverie atd: atd startup succeeded
Nov 9 12:55:28 reverie xfs: ignoring font path element /usr/X11R6/lib/X11/fonts/cyrillic (unreadable)
Nov 9 12:55:32 reverie kernel: mice: PS/2 mouse device common for all mice
Nov 9 12:57:49 reverie sshd(pam_unix)[1295]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=192.168.0.21 user=reverie
Nov 9 12:57:53 reverie sshd(pam_unix)[1297]: session opened for user reverie by (uid=500)
Nov 9 12:57:55 reverie 11月 9 12:57:55 su(pam_unix)[1327]: session opened for user root by reverie(uid=500)
Nov 9 13:36:54 reverie 11月 9 13:36:54 httpd: httpd停止 failed
Nov 9 13:36:56 reverie 11月 9 13:36:56 httpd: httpd起動 succeeded
→Windowsから「http://www.example.com/」にアクセス
[root]# tail /var/log/httpd/access_log←この時点ではindex.htmlが無いためエラーとなる
192.168.0.50 - - [09/Nov/2010:13:43:29 +0900] "GET /index.html HTTP/1.1" 404 1057 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
192.168.0.50 - - [09/Nov/2010:13:43:38 +0900] "GET / HTTP/1.1" 403 2898 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
192.168.0.50 - - [09/Nov/2010:13:43:38 +0900] "GET /icons/apache_pb.gif HTTP/1.1" 200 2326 "http://www.example.com/" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
192.168.0.50 - - [09/Nov/2010:13:43:38 +0900] "GET /icons/powered_by.gif HTTP/1.1" 200 581 "http://www.example.com/" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
[root]# vi /var/www/html/index.html
■適当にHTMLを作成↓■
<HTML>
<HEAD><TITLE> test </TITLE></HEAD>
<BODY>
www server test...
</BODY>
</HTML>
→Windowsから「http://www.example.com/」にアクセス
[root]# tail /var/log/httpd/access_log←index.htmlにアクセスできることを確認する
192.168.0.50 - - [09/Nov/2010:13:57:23 +0900] "GET / HTTP/1.1" 200 117 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
192.168.0.50 - - [09/Nov/2010:13:57:35 +0900] "GET /index.html HTTP/1.1" 200 117 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
[root]# vi /etc/xinetd.d/ipop3
# disable = yes←無効設定をコメント化する
[root]# /etc/rc.d/init.d/xinetd restart
xinetdを停止中: [ OK ]
xinetdを起動中: [ OK ]
[root]# tail /var/log/messages
Nov 3 14:26:48 reverie 11月 3 14:26:48 su(pam_unix)[1330]: session opened for user root by reverie(uid=500)
Nov 3 14:29:03 reverie 11月 3 14:29:03 su(pam_unix)[1330]: session closed for user root
Nov 3 14:29:04 reverie sshd(pam_unix)[1300]: session closed for user reverie
Nov 3 15:15:23 reverie sshd(pam_unix)[1396]: session opened for user reverie by (uid=500)
Nov 3 15:15:29 reverie 11月 3 15:15:29 su(pam_unix)[1426]: session opened for user root by reverie(uid=500)
Nov 3 15:21:45 reverie xinetd[1060]: Exiting...
Nov 3 15:21:45 reverie 11月 3 15:21:45 xinetd: xinetd停止 succeeded
Nov 3 15:21:46 reverie xinetd[1483]: xinetd Version 2.3.11 started with libwrap loadavg options compiled in.
Nov 3 15:21:46 reverie xinetd[1483]: Started working: 2 available services
Nov 3 15:21:48 reverie xinetd: ・ 鰯ucceeded
[root]# more /etc/named.conf
options {
directory "/var/named";
};
zone "." { type hint; file "db.cache"; };
zone "0.0.127.in-addr.arpa" { type master; file "db.127.0.0"; };
zone "example.com" { type master; file "db.example"; };
zone "0.168.192.in-addr.arpa" { type master; file "db.192.168.0"; };
[root]# chown named.named *
[root]# ls -al
合計 44
drwxr-xr-x 2 named named 4096 10月 19 21:58 .
drwxr-xr-x 22 root root 4096 10月 19 21:30 ..
-rw-r--r-- 1 named named 93 10月 19 21:58 boot.cacheonly
-rw-r--r-- 1 named named 149 10月 19 21:58 conf.cacheonly
-rw-r--r-- 1 named named 135 10月 19 21:58 db.127.0.0
-rw-r--r-- 1 named named 146 10月 19 21:58 db.192.168.0
-rw-r--r-- 1 named named 204 10月 19 21:58 db.example
-rw-r--r-- 1 named named 195 1月 25 2003 localhost.zone
-rw-r--r-- 1 named named 177 10月 19 21:58 named.boot
-rw-r--r-- 1 named named 2499 1月 25 2003 named.ca
-rw-r--r-- 1 named named 433 1月 25 2003 named.local
[root]# vi db.127.0.0
$TTL 86400
@ IN SOA reverie.example.com. postmaster.example.com. ( 2010101901 10800 3600 604800 86400 )
IN NS reverie.example.com.
1 PTR localhost.
[root]# vi db.192.168.0
$TTL 86400
@ IN SOA reverie.example.com. postmaster.example.com. ( 2010101901 10800 3600 604800 86400 )
IN NS reverie.example.com.
PTR example.com.
A 255.255.255.0
99 PTR reverie.example.com.
[root]# vi db.example
$TTL 86400
@ IN SOA reverie postmaster ( 2010101901 10800 3600 604800 86400 )
IN NS reverie
A 192.168.0.0
localhost A 127.0.0.1
reverie A 192.168.0.99
@ MX 10 reverie
www CNAME reverie
mail CNAME reverie
ftp CNAME reverie
[root]# mv named.ca db.cache
[root]# /etc/rc.d/init.d/named start
起動中: [ OK ]
[root]# tail /var/log/messages
Oct 19 22:17:37 reverie 10月 19 22:17:37 named: named起動 succeeded
Oct 19 22:17:37 reverie named[1455]: loading configuration from '/etc/named.conf'
Oct 19 22:17:37 reverie named[1455]: no IPv6 interfaces found
Oct 19 22:17:37 reverie named[1455]: listening on IPv4 interface lo, 127.0.0.1#53
Oct 19 22:17:37 reverie named[1455]: listening on IPv4 interface eth0, 192.168.0.99#53
Oct 19 22:17:37 reverie named[1455]: command channel listening on 127.0.0.1#953
Oct 19 22:17:37 reverie named[1455]: zone 0.0.127.in-addr.arpa/IN: loaded serial 2010101901
Oct 19 22:17:37 reverie named[1455]: zone 0.168.192.in-addr.arpa/IN: loaded serial 2010101901
Oct 19 22:17:37 reverie named[1455]: zone example.com/IN: loaded serial 2010101901
Oct 19 22:17:37 reverie named[1455]: running
[root]# named-checkconf
[root]# echo $?
0
[root]# named-checkzone example.com /var/named/db.example
zone example.com/IN: loaded serial 2010101901
OK
[root]# named-checkzone 0.168.192.IN-ADDR.ARPA /var/named/db.192.168.0
zone 0.168.192.IN-ADDR.ARPA/IN: loaded serial 2010101901
OK
| 03 | 2025/04 | 05 |
| S | M | T | W | T | F | S |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | 4 | 5 | ||
| 6 | 7 | 8 | 9 | 10 | 11 | 12 |
| 13 | 14 | 15 | 16 | 17 | 18 | 19 |
| 20 | 21 | 22 | 23 | 24 | 25 | 26 |
| 27 | 28 | 29 | 30 |