Quartz 5

HOME

2 min read

HOSTNAMEDNS RECORD(S)IPV4 ADDRESSIPV6 ADDRESS
HOME-198.51.101.50/252001:db8:39:3::50/64
  1. Configure a remote access VPN connection to R‑HQ. The VPN must connect automatically on boot.
  2. Configure LDAP authentication using the company LDAP server. Log in as Bjarke. ▪ If VPN is unavailable, allow fallback to the local account localadmin.
  3. Install Thunderbird and configure mailbox bjarke.dam@vikingtoys.dk. Send an email to Egon.
  4. Install FileZilla Client and preconfigure it (under Bjarke’s profile; use localadmin if LDAP is unavailable) to access the SFTP server on BR‑SRV.

Настройка

hostnamectl hostname HOME
timedatectl set-timezone Europe/Stockholm
 
# Скачать сертификаты и доверять им 
cd /usr/local/share/ca-certificates
wget http://crl.vikingtoys.dk/CA.crt
wget http://crl.vikingtoys.dk/subca.crt
update-ca-certificates
 
# добавить в firefox и thunderbird сертификаты
 
apt install gnome -y

Thunderbird

apt install thunderbird -y

LDAP + SAMBA

apt install libpam-ldapd
 
# Выбрать (нажать пробел) (далее = Enter)
*passwd *group *shadow 
 
# IP сервера
<ip address> 
 
# Доменное имя сервера
<domain name>
 
# Включить создание каталога для пользователя
pam-auth-update
    # выбрать (нажать пробел) (далее = Enter)
	*create home directory on login
 
# Перезапустить
reboot
 
 
 
apt install cifs-utils libpam-mount -y
 
 
--> vi /etc/security/pam_mount.conf.xml
=======================================
# Set 1
<debug enable="1" />
# Add
<volume 
	fstype="cifs" 
	server="ldap.vikingtoys.dk" 
	path="users"               # Возможно нужно будет поставить /%(USER)
                                  # Не всегда с ним работает
	
	mountpoint="/share/%(USER)/share" 
	options="uid=%(USER)" 
/>
=======================================
 
 
--> vi/etc/nslcd.conf	
=======================================
# Убрать третий слеш
URI ldap://ldap
=======================================

WireGuard

apt install wireguard
 
--> vi /etc/wireguard/wg0.conf
=======================================
[Interface]
Address = 10.30.10.3/24
privatekey = <Client-HOME private key>
DNS = 10.10.20.11
 
[Peer]
publickey = <Server-HQ public key>
endpoint = 198.51.100.2:51820
allowedips = 10.10.10.0/24, 10.10.20.0/24, 10.10.30.0/24, 10.30.10.0/24
=======================================
 
systemctl enable wg-quick@wg0
systemctl start wg-quick@wg0

Graph View