Bienvenue sur le site admin-sys

Quels services réseau sont activés

Jerome ROBERT — 2009-07-03T11:00:34Z

Savoir rapidement quels services réseau sont activés Une bonne commande pour savoir en un coup d'oeil quels services tournent sur votre machine :

netstat -alpe —ip # sous linux

netstat -aP protocole # sous solaris

Exempe : netstat -aP tcp

Cette commande vous donne pour chaque service : le protocole, le descriptif des ports locaux et distants, l'état de ces ports, l'utilisateur du service et surtout quel est le daemon ou le programme qui nécessite le tout. Le tout en filtrant les sockets unix locaux.

Comment connaître le propriétaire d'une @IP

Jerome ROBERT — 2009-07-03T11:00:26Z

Comment connaître le propriétaire d'une @IP ???

Après avoir visualisé des fichiers de « log »,
ou utilisé des commandes comme last, lastb. Vous vous rendez
compte qu'une personne c'est connectée sur votre machine à
votre insu ...
Il va falloir garder ces informations !!! surtout
@IP, la date et heure !! Grâce a ces informations on va pouvoir
remonter à la source SI les administrateurs des différentes
machines sont coopératifs , il doivent l'être car c'est
la loi, il ne faut pas l'oublier !!

Voici, un programme « whois 3.1 »
qui va vous permettre de mettre un nom sur une @IP

whois3 : -h host -p port -k | query

When querying a Whois server running RIPE software, you may use
the following flags :

-l Returns first level less specific inetnum,
inet6num or route objects, excluding exact matches.

-L Returns all level less specific inetnum,
inet6num or route objects, including exact matches.

-m Returns first level more specific inetnum,
inet6num or route objects, excluding exact matches.

-M Returns all level more specific inetnum,
inet6num or route objects, excluding exact matches.

-x Requests that only an exact match on a
prefix be performed. If no exact match is found no objects are
returned.

-c Requests first level less specific inetnum
or inet6num objects with the "mnt-irt :" attribute.

-d Enables use of the -m, -M, -l and -L flags
for lookups on reverse delegation domains.

-i Perform an inverse
query.

-F Produce output using short hand notation for
attribute names.

-K Requests that only the primary keys of an object
to be returned. The exceptions are set objects, where the

members attributes will also be returned. This
flag does not apply to person and role objects.

-k (optional normal query) Requests a persistent connection.
After returning the result the connection will not be closed by the
server and a client may issue multiple queries on the same
connection. Note, that server implements 'stop-and-wait' protocol,
when no next query can be sent before receiving a reply for the
previous one. Use RIPE whois3 client to be able to send queries in
batch mode. Except the first -k query, -k without an argument closes
the persistent connection.

-g (mirroring request) Request a NRTM stream from the server. See
[REF], section 4. "Mirroring the RIPE Database" for more
information".

-R Switches off use referral mechanism for domain
lookups, so that the database returns an object in the RIPE database
with the exact match with the lookup argument, rather than doing a
referral lookup.

-r Switches off recursion for contact information
after retrieving the objects that match the lookup key.

-T (comma separated list of object types, no white space is
allowed) Restricts the types of objects to lookup in the query.

-a Specifies that the server should perform lookups
in all available sources. See also -q sources" query.

-s (comma separated list of sources, no white space is allowed)
Specifies which sources and in which order are to be looked up when
performing a query.

-q sources Returns the current set of sources along with the
information required for mirroring. See [REF], section 2.9 "Other
server features" for more information.

-q version Displays the current version of the server.

-t Requests a template for the specified
object type.

-V Sends information about the client to the
server.

-v Requests a verbose template for the
specified object type.

Voici un exemple :

./whois3 62.62.189.100

% This is the RIPE Whois server.

% The objects are in RPSL format.

% Please visit http://www.ripe.net/rpsl for more information.

% Rights restricted by copyright.

% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum : 62.62.189.0 - 62.62.189.255

netname : FR-9TEL-ADSL-IP01

descr : 9TELECOM

descr : 38 quai du point du jour

descr : 92659 Boulogne Billancourt

descr : FRANCE

country : FR

admin-c : CG2185-RIPE

tech-c : DG46-RIPE

tech-c : TEL9-RIPE

status : ASSIGNED PA

notify : RIPE-DBM@9TEL.NET

mnt-by : TEL9-MNT

changed : HOSTMASTER@9TEL.NET 20020515

source : RIPE

route : 62.62.128.0/17

descr : 9TELECOM-BLK

origin : AS12626

mnt-by : TEL9-MNT

changed : hostmaster@9tel.net 20020422

changed : hostmaster@9tel.net 20020513

source : RIPE

role : TELECOM NCC

address : 9TELECOM

address : 38 quai du point du jour

address : 92659 Boulogne Billancourt

address : FRANCE

phone : +33 1 55206001

e-mail : hostmaster@9tel.net

trouble : -------------------------------------------

trouble : Hacking & spamming : abuse@9tel.net

trouble : -------------------------------------------

admin-c : CG2185-RIPE

tech-c : DG46-RIPE

nic-hdl : TEL9-RIPE

remarks : -------------------------------------------

remarks : www.9telecom.fr

remarks : www.9online.fr

remarks : -------------------------------------------

notify : RIPE-DBM@9TEL.NET

mnt-by : TEL9-MNT

changed : HOSTMASTER@9TEL.NET 20020513

source : RIPE

person : Claude GUINTRAND

address : 9TELECOM

address : 38 quai du point du jour

address : 92659 Boulogne Billancourt

address : FRANCE

phone : +33 1 55206036

nic-hdl : CG2185-RIPE

mnt-by : TEL9-MNT

changed : hostmaster@9tel.net 20020513

source : RIPE

person : Damien GOTTARDO

address : 9TELECOM

address : 38 quai du point du jour

address : 92659 Boulogne Billancourt

address : FRANCE

phone : +33 1 55206539

nic-hdl : DG46-RIPE

mnt-by : TEL9-MNT

changed : hostmaster@9tel.net 20020513

source : RIPE

Configuration NIS :

Jerome ROBERT — 2009-06-29T14:09:32Z

Configuration pour une machine serveur NIS :

1. Créez un répertoire /var/yp/source

mkdir /var/yp/source

2. Copiez les fichiers /etc/* dans le répertoire source :

cp -r /etc/* /var/yp/source

(Si vous souhaitez copier que les fichiers nécessaires, édité le fichier /var/yp/Makefile, la liste de ces derniers si trouvent.)

3. Editez les fichiers suivant et supprimer les entrées systèmes (démon, services,...) et root :

cd /var/yp/source
vi passwd
vi shadow
vi hosts ...

4. Créez un répertoire "domaine" dans le répertoire /var/yp :

mkdir /var/yp/linux.fr

( dans l'exemple le domaine est linux.fr )

5. Vérifiez que la machine appartient à un domaine :

domainname

si cette commande ne retourne pas le nom du "domaine" alors :

domainname linux.fr

6. Editez le Makefile dans /var/yp :

- indication des chemins d'accès pour les sources (/var/yp/source)
- sélection des maps à créer ( dans la rubrique 'ALL'), mettre les fichiers non utilisé par votre système en commentaire.

vi /var/yp/Makefile

7. Vérifiez si portmap est actif :

ps -ef | grep portmap

s'il est inactif alors :

/etc/rc.d/init.d/portmap start

8. Créez les maps :

- lancer ypserv :

/usr/sbin/ypserv

- lancer ypinit :

/usr/sbin/ypinit -m

9. Vérification du fonctionnement ypserv :

rpcinfo -u localhost ypserv

Configuration pour une machine serveur slave NIS

1. déclarez la machine comme serveur slave

/usr/lib/yp/ypinit -s nom_serveur_master

Configuration pour une machine client NIS

1. Dans /etc/yp.conf, mettez :

domain linux.fr
ypserver machine_serveur_nis

( dans cet exemple linux.fr est le nom du domaine et machine_serveur_nis peut être soi le nom ou l'adresse IP du serveur. Si on met le nom du serveur, il faut que ce dernier se trouve dans le fichier /etc/hosts du poste)

2. Dans /etc/passwd et /etc/shadow, ajoutez à la dernière ligne : +

vi /etc/passwd
vi /etc/shadow

3. Dans /etc/host.conf , vérifiez l'ordre de résolution des noms :

order hosts, nis

4. Lancez le service ypbind :

/sbin/ypbind

5. Vérification

ypwhich
ypcat passwd

Configuration d'un serveur DNS : bind 9

Jerome ROBERT — 2009-06-29T14:01:33Z

Configuration d'un serveur DNS: bind 9

tester sous linux.

Création d'un utilisateur named qui aura comme HOME la valeur de Directory dans le fichier /etc/named.conf donc ici /var/named.
Attention il faut que /var/named appartienne à named ...

structure du domaine: admin-sys.com

domaine racine	sous domaine avec délégation	sous domaine avec délégation	serveur master	serveur slave	client
admin-sys.com @IP: 10.x.x.x			m.admin-sys.com @ip: 10.0.0.10	s.admin-sys.com @ip: 10.0.0.20	c.admin-sys.com @ip: 10.0.0.30
	bastia.admin-sys.com @IP: 10.20.x.x		m.bastia.admin-sys.com @ip: 10.20.0.10	s.bastia.admin-sys.com @ip: 10.20.0.20	c.bastia.admin-sys.com @ip: 10.20.0.30
	papeete.admin-sys.com @IP: 10.10.x.x		m.papeete.admin-sys.com @ip: 10.10.0.10	s.papeete.admin-sys.com @ip: 10.10.0.20	c.papeete.admin-sys.com @ip: 10.10.0.30
		plage.papeete.admin-sys.com @IP: 10.10.2.x	m.plage.papeete.admin-sys.com @ip: 10.10.2.10		c.plage.papeete.admin-sys.com @ip: 10.10.2.30

A. Configuration du serveur de domaine:

1. serveur Master

fichier /etc/named.conf

Options {# réperoire pour les fichiers de data Directory "/var/named"; allow-transfer {10.0.0.20;}; #adresse du serveur slave }; zone "." { type hint; file "zone.root";# info sur la racine dns }; zone "0.0.127.in-addr.arpa."{# reverse for local loopback type master; file "zone.127.0.0"; }; zone "10.in-addr.arpa."{# reverse domain name type master; file "zone.10"; #rev dns file allow-transfer {10.0.0.20;}; }; zone "admin-sys.com"{# hosts in admin-sys.com type master; file "zone.admin-sys.com"; allow-transfer {10.0.0.20;}; };

fichier /etc/resolv.conf

search admin-sys.com nameserver 127.0.0.1

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Dans le répertoire /var/named/

fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA m.admin-sys.com root.m.admin-sys.com( 2002102200 ; serial 10800 ; refresh rate 1800 ; retry 604800 ; expire 86400 ) ; ttl IN NS m.admin-sys.com. 1 IN PTR localhost.

fichier /var/named/zone.admin-sys.com

@ IN SOA m.admin-sys.com root.m.admin-sys.com( 2002102200 ; serial number 10800 ; refresh rate 1800 ; retry 604800 ; expire 86400 ) ; ttl IN NS m.admin-sys.com. IN NS s.admin-sys.com. ; delegate le sous domaine papeete papeete.admin-sys.com. IN NS m.papeete.admin-sys.com. m.papeete.admin-sys.com. IN A 10.10.0.10 ; delegate le sous domaine bastia bastia.admin-sys.com. IN NS m.bastia.admin-sys.com. m.bastia.admin-sys.com. IN A 10.20.0.10 m IN A 10.0.0.10 s IN A 10.0.0.20 c IN A 10.0.0.30 localhost IN A 127.0.0.1

fichier /var/named/zone.10

@ IN SOA m.admin-sys.com root.m.admin-sys.com( 2002102200 ; serial 10800 ; refresh rate 1800 ; retry 604800 ; expire 86400 ) ; ttl IN NS m.admin-sys.com. IN NS s.admin-sys.com. 10.0.0 IN PTR m.admin-sys.com. 20.0.0 IN PTR s.admin-sys.com. 30.0.0 IN PTR c.admin-sys.com. #délégation 0.10.10-in-addr.arpa. IN NS m.papeete.admin-sys.com. 0.20.10-in-addr.arpa. IN NS m.bastia.admin-sys.com.

2. serveur Slave:

fichier /etc/named.conf:

Options {# home directory for local zone files Directory "/var/named"; }; zone "." { type hint; file "zone.root"; # zone file containing the cache hints }; zone "0.0.127.in-addr.arpa." {# reverse for local loopback type master; file "zone.127.0.0"; }; zone "10.in-addr.arpa." { type slave; file "zone.10"; # domain reverse data masters {10.0.0.10;}; # the master's IP address }; zone "admin-sys.com" { type slave; file "zone.admin-sys.com"; # domain hostname data masters {10.0.0.10;}; # the master's IP adress };

fichier /etc/resolv.conf

search admin-sys.com nameserver 10.0.0.20 nameserver 10.0.0.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Le répertoire /var/named/

le fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé. Si vous souhaitez aller sur le Web il faudra un serveur proxy.

fichier /var/named/zone.127.0.0

@ IN SOA s.admin-sys.com root.s.admin-sys.com( 2002102200 ; serial 10800 ; refresh rate 1800 ; retry 604800 ; expire 86400 ) ; ttl IN NS s.admin-sys.com. 1 IN PTR localhost.

Les fichiers zone.10 et zone.admin-sys.com seront copiés dans ce répertoire lors de la synchronisation.

B. Configuration du serveur de sous-domaine:

1. serveur Master: pour bastia

fichier /etc/named.conf

options { directory "/var/named" ; allow-transfer { 10.0.20.20 ;}; }; zone "." in { type hint; file "zone.root"; }; zone "0.0.127.in-addr.arpa." in { type master; file "zone.127.0.0"; }; zone "bastia.admin-sys.com." in { type master; file "domaine.bastia.admin-sys.com"; allow-transfer { 10.20.0.20; }; }; zone "0.20.10.in-addr.arpa." in { type master; file "zone.10.20.0"; allow-transfer { 10.20.0.20; }; };

fichier /etc/resolv.conf

search bastia.admin-sys.com nameserver 10.20.0.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Dans le répertoire /var/named/

fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA m.bastia.admin-sys.com root.m.bastia.admin-sys.com ( 2002102300 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.bastia.admin-sys.com. 1 IN PTR localhost.

fichier /var/named/domaine.bastia.admin-sys.com

@ IN SOA m.bastia.admin-sys.com root.m.bastia.admin-sys.com ( 2002102301 ; serial number AAAAMMJJNN 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.bastia.admin-sys.com IN NS s.bastia.admin-sys.com m.bastia.admin-sys.com. IN A 10.20.0.10 s.bastia.admin-sys.com. IN A 10.20.0.20 c.bastia.admin-sys.com. IN A 10.20.0.30

fichier /var/named/zone.10.20.0

@ IN SOA m.bastia.admin-sys.com root.m.bastia.admin-sys.com ( 2002102301 ; serial number AAAAMMJJNN 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.bastia.admin-sys.com. IN NS s.bastia.admin-sys.com. 10 IN PTR m.bastia.admin-sys.com. 20 IN PTR s.bastia.admin-sys.com. 30 IN PTR c.bastia.admin-sys.com.

2. serveur Slave du sous-domaine: bastia

fichier /etc/named.conf:

options { directory "/var/named"; }; zone "." in { type hint; file "zone.root"; }; zone "0.0.127.in-addr.arpa." in { type master; file "zone.127.0.0"; }; zone "0.20.10.in-addr.arpa." in { type slave; file "zone.10.20"; masters { 10.20.0.10 ;} ; }; zone "bastia.admin-sys.com." in { type slave; file "domaine.bastia.admin-sys.com"; masters { 10.20.0.10 ; }; };

fichier /etc/resolv.conf

search bastia.admin-sys.com nameserver 10.20.0.20 nameserver 10.20.0.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Le répertoire /etc/named/

le fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA s.bastia.admin-sys.com root.s.bastia.admin-sys.com( 2002102200 ; serial 10800 ; refresh rate 1800 ; retry 604800 ; expire 86400 ) ; ttl IN NS s.bastia.admin-sys.com. 1 IN PTR localhost.

Les fichiers zone.10.20.0 et domaine.bastia.admin-sys.com seront copiés dans ce répertoire lors de la synchronisation.

3. serveur Master pour le sous-domaine: papeete

fichier /etc/named.conf

options { directory "/var/named" ; }; zone "." in { type hint; file "zone.root"; }; zone "0.0.127.in-addr.arpa." in { type master; file "zone.127.0.0"; }; zone "papeete.admin-sys.com." in { type master; file "domaine.papeete.admin-sys.com"; allow-update { 10.10.0.20; }; notify yes; allow-transfer { 10.10.0.20; }; }; zone "10.10.in-addr.arpa." in { type master; file "zone.10.10"; notify yes; allow-update { 10.10.0.20; }; };

fichier /etc/resolv.conf

search papeete.admin-sys.com nameserver 10.10.0.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Dans le répertoire /var/named/

fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA m.papeete.admin-sys.com root.m.papeete.admin-sys.com ( 2002102200 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.papeete.admin-sys.com. 1 IN PTR localhost.

fichier /var/named/domaine.papeete.admin-sys.com

@ IN SOA m.papeete.admin-sys.com root.m.papeete.admin-sys.com ( 2002102219 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.papeete.admin-sys.com. IN NS s.papeete.admin-sys.com. m.papeete.admin-sys.com. IN A 10.10.0.10 s.papeete.admin-sys.com. IN A 10.10.0.20 c.papeete.admin-sys.com. IN A 10.10.0.30 o.papeete.admin-sys.com. IN A 10.10.0.40 plage.papeete.admin-sys.com. IN NS m.plage.papeete.admin-sys.com. m.plage.papeete.admin-sys.com. IN A 10.10.2.10

fichier /var/named/zone.10.10.0

@ IN SOA m.papeete.admin-sys.com root.m.papeete.admin-sys.com ( 2002102201 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.papeete.admin-sys.com. IN NS s.papeete.admin-sys.com. 2-in-addr.arpa. IN NS m.plage.papeete.admin-sys.com. 10.0 IN PTR m.papeete.admin-sys.com. 20.0 IN PTR s.papeete.admin-sys.com. 30.0 IN PTR c.papeete.admin-sys.com.

4. serveur Slave du sous-domaine: papeete

fichier /etc/named.conf:

options { directory "/var/named"; }; zone "." in { type hint; file "zone.root"; }; zone "0.0.127.in-addr.arpa." in { type master; file "zone.127.0.0"; }; zone "0.10.10.in-addr.arpa." in { type slave; file "zone.10.10"; masters { 10.10.0.10 ;} ; }; zone "papeete.admin-sys.com." in { type slave; file "domaine.papeete.admin-sys.com"; masters { 10.10.0.10 ; }; };

fichier /etc/resolv.conf

search papeete.admin-sys.com nameserver 10.10.0.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Le répertoire /etc/named/

le fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA s.papeete.admin-sys.com root.s.papeete.admin-sys.com ( 2002102200 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS s.papeete.admin-sys.com. 1 IN PTR localhost.

Les fichiers zone.10.10.0 et domaine.papeete.admin-sys.com seront copiés dans ce répertoire lors de la synchronisation.

5. serveur Master pour le sous-domaine: plage.papeete

fichier /etc/named.conf

options{ directory "/var/named"; }; zone "." in { type hint ; file "zone.root" ; }; zone "plage.papeete.admin-sys.com" in { type master ; file "domaine.plage.papeete.admin-sys.com" ; }; zone "2.10.10.in-addr.arpa" in { #inverser l @ IP type master ; file "zone.10.10.2" ; }; zone "0.0.127.in-add.arpa" in { type master ; file "zone.127.0.0" ; };

fichier /etc/resolv.conf

nameserver 10.10.2.10

fichier /etc/nsswitch.conf

# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis ... #hosts: db files nisplus nis dns hosts: files dns #hosts: dns files ...

Dans le répertoire /var/named/

fichier /var/named/zone.root

. 99999999 NS m.admin-sys.com. m.admin-sys.com. IN A 10.0.0.10

Car ce serveur est la racine du réseau privé.

fichier /var/named/zone.127.0.0

@ IN SOA m.plage.papeete.admin-sys.com root.m.plage.papeete.admin-sys.com ( 2002102200 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.plage.papeete.admin-sys.com. 1 IN PTR localhost.

fichier /var/named/domaine.plage.papeete.admin-sys.com

@ IN SOA m.plage.papeete.admin-sys.com. root.m.plage.papeete.admin-sys.com. ( 1 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) ; ; serveur du domaine ; IN NS m.plage.papeete.admin-sys.com. m.plage.papeete.admin-sys.com. IN A 10.10.2.10 c.plage.papeete.admin-sys.com. IN A 10.10.2.30

fichier /var/named/zone.10.10.2

@ IN SOA m.plage.papeete.admin-sys.com root.m.plage.papeete.admin-sys.com ( 2002102200 ; serial number 10800 ; refresh (3hrs) 3600 ; retry (1hr) 432000 ; expire (5days) 86400 ) ; ttl (1day) IN NS m.plage.papeete.admin-sys.com. 10 IN PTR m.plage.papeete.admin-sys.com. 30 IN PTR c.plage.papeete.admin-sys.com.