阮明明 12-26

[root@localhost ~]# mount /dev/cdrom /mnt

mount: /dev/sr0 写保护，将以只读方式挂载

[root@localhost ~]# cd /etc/yum.repos.d/

[root@localhost yum.repos.d]# ls

CentOS-Base.repo       CentOS-fasttrack.repo  CentOS-Vault.repo

CentOS-CR.repo         CentOS-Media.repo      CentOS-x86_64-kernel.repo

CentOS-Debuginfo.repo  CentOS-Sources.repo

[root@localhost yum.repos.d]# mkdir bak

[root@localhost yum.repos.d]# mv Cbak

mv: 在"Cbak" 后缺少了要操作的目标文件

Try 'mv --help' for more information.

[root@localhost yum.repos.d]# mv C bak

[root@localhost yum.repos.d]# ls

bak

[root@localhost yum.repos.d]# touch dvd.repo

[root@localhost yum.repos.d]# vi dvd.repo

[root@localhost yum.repos.d]# cat dvd.repo

[dvd]

baseurl=file:///mnt

enabled=1

gpgcheck=0

[root@localhost yum.repos.d]# yum clean all

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

正在清理软件源： dvd

Cleaning up list of fastest mirrors

Other repos take up 205 M of disk space (use --verbose for details)

[root@localhost yum.repos.d]# yum install bind -y

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

Determining fastest mirrors

dvd                                                             | 3.6 kB  00:00:00    

(1/2): dvd/group_gz                                             | 153 kB  00:00:00    

(2/2): dvd/primary_db                                           | 3.3 MB  00:00:00    

软件包 32:bind-export-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-utils-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-license-9.11.4-26.P2.el7.noarch 已安装并且是最新版本

软件包 32:bind-libs-lite-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

正在解决依赖关系

--> 正在检查事务

---> 软件包 bind.x86_64.32.9.11.4-26.P2.el7 将被 安装

--> 正在处理依赖关系 python-ply，它被软件包 32:bind-9.11.4-26.P2.el7.x86_64 需要

---> 软件包 bind-chroot.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-dyndb-ldap.x86_64.0.11.1-7.el7 将被 安装

---> 软件包 bind-pkcs11.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-pkcs11-libs.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-pkcs11-utils.x86_64.32.9.11.4-26.P2.el7 将被 安装

--> 正在检查事务

---> 软件包 python-ply.noarch.0.3.4-11.el7 将被 安装

--> 解决依赖关系完成

依赖关系解决

=======================================================================================

Package                  架构          版本                          源          大小

=======================================================================================

正在安装:

bind                     x86_64        32:9.11.4-26.P2.el7           dvd        2.3 M

bind-chroot              x86_64        32:9.11.4-26.P2.el7           dvd         92 k

bind-dyndb-ldap          x86_64        11.1-7.el7                    dvd        121 k

bind-pkcs11              x86_64        32:9.11.4-26.P2.el7           dvd        361 k

bind-pkcs11-libs         x86_64        32:9.11.4-26.P2.el7           dvd        1.1 M

bind-pkcs11-utils        x86_64        32:9.11.4-26.P2.el7           dvd        208 k

为依赖而安装:

python-ply               noarch        3.4-11.el7                    dvd        123 k

事务概要

=======================================================================================

安装  6 软件包 (+1 依赖软件包)

总下载量：4.3 M

安装大小：10 M

Downloading packages:

---------------------------------------------------------------------------------------

总计                                                       72 MB/s | 4.3 MB  00:00    

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

 正在安装    : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                        1/7

 正在安装    : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                       2/7

 正在安装    : python-ply-3.4-11.el7.noarch                                       3/7

 正在安装    : 32:bind-9.11.4-26.P2.el7.x86_64                                    4/7

 正在安装    : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                             5/7

 正在安装    : bind-dyndb-ldap-11.1-7.el7.x86_64                                  6/7

 正在安装    : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                             7/7

 验证中      : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                             1/7

 验证中      : python-ply-3.4-11.el7.noarch                                       2/7

 验证中      : bind-dyndb-ldap-11.1-7.el7.x86_64                                  3/7

 验证中      : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                        4/7

 验证中      : 32:bind-9.11.4-26.P2.el7.x86_64                                    5/7

 验证中      : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                       6/7

 验证中      : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                             7/7

已安装:

 bind.x86_64 32:9.11.4-26.P2.el7                                                      

 bind-chroot.x86_64 32:9.11.4-26.P2.el7                                              

 bind-dyndb-ldap.x86_64 0:11.1-7.el7                                                  

 bind-pkcs11.x86_64 32:9.11.4-26.P2.el7                                              

 bind-pkcs11-libs.x86_64 32:9.11.4-26.P2.el7                                          

 bind-pkcs11-utils.x86_64 32:9.11.4-26.P2.el7                                        

作为依赖被安装:

 python-ply.noarch 0:3.4-11.el7                                                      

完毕！

[root@localhost yum.repos.d]#

[root@localhost yum.repos.d]# cp /etc/named.conf  /etc/named.conf.bak

cp：是否覆盖"/etc/named.conf.bak"？ y

[root@localhost yum.repos.d]# vi /etc/named.conf

[root@localhost yum.repos.d]# cat /etc/named.conf

//

// named.conf

//

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

//

// See /usr/share/doc/bind/sample/ for example named configuration files.

//

// See the BIND Administrator's Reference Manual (ARM) for details about the

// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {

listen-on port 53 { any; };

listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

recursing-file  "/var/named/data/named.recursing";

secroots-file   "/var/named/data/named.secroots";

allow-query     { any; };

/

- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.

- If you are building a RECURSIVE (caching) DNS server, you need to enable

  recursion.

- If your recursive DNS server has a public IP address, you MUST enable access

  control to limit queries to your legitimate users. Failing to do so will

  cause your server to become part of large scale DNS amplification

  attacks. Implementing BCP38 within your network would greatly

  reduce such attack surface

/

recursion yes;

dnssec-enable yes;

dnssec-validation yes;

/ Path to ISC DLV key /

bindkeys-file "/etc/named.root.key";

managed-keys-directory "/var/named/dynamic";

pid-file "/run/named/named.pid";

session-keyfile "/run/named/session.key";

};

logging {

       channel default_debug {

               file "data/named.run";

               severity dynamic;

       };

};

zone "." IN {

type hint;

file "named.ca";

};

include "/etc/named.rfc1912.zones";

include "/etc/named.root.key";

[root@localhost yum.repos.d]# vi /etc/named.rfc1912.zones

[root@localhost yum.repos.d]# cat /etc/named.rfc1912.zones

// named.rfc1912.zones:

//

// Provided by Red Hat caching-nameserver package

//

// ISC BIND named zone configuration for zones recommended by

// RFC 1912 section 4.1 : localhost TLDs and address zones

// and http://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt

// (c)2007 R W Franks

//

// See /usr/share/doc/bind/sample/ for example named configuration files.

//

zone "localhost.localdomain" IN {

type master;

file "named.localhost";

allow-u.p.d.a.t.e { none; };

};

zone "localhost" IN {

type master;

file "named.localhost";

allow-u.p.d.a.t.e { none; };

};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {

type master;

file "named.loopback";

allow-u.p.d.a.t.e { none; };

};

zone "1.0.0.127.in-addr.arpa" IN {

type master;

file "named.loopback";

allow-u.p.d.a.t.e { none; };

};

zone "0.in-addr.arpa" IN {

type master;

file "named.empty";

allow-u.p.d.a.t.e { none; };

};

zone "xnzy.cn" IN {

type master;

file "xnzy.cn.zone";

allow-u.p.d.a.t.e { none; };

};

zone "42.168.192.in-addr.arpa" IN {

type master;

file "192.168.42.zone";

allow-u.p.d.a.t.e { none; };

};

[root@localhost yum.repos.d]# cd  /var/named/

[root@localhost named]# ls

chroot  dynamic     named.ca     named.localhost  slaves

data    dyndb-ldap  named.empty  named.loopback

[root@localhost named]# cp  -p named.localhost  xnzy.cn.zone

[root@localhost named]# cp  -p named.localhost  192.168.42.zone

[root@localhost named]# ls

192.168.42.zone  dynamic     named.empty      slaves

chroot           dyndb-ldap  named.localhost  xnzy.cn.zone

data             named.ca    named.loopback

[root@localhost named]# vi xnzy.cn.zone

[root@localhost named]# cat xnzy.cn.zone

$TTL 1D

@ IN SOA dns.xnzy.cn. root.xnzy.cn. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

@ NS NS      dns.xnzy.cn.

dns     IN      A       192.168.42.128

www     IN      A       192.168.42.128


来自：项目9 BIND域名解析服务器的搭建>BIND域名解析服务器的搭建
鲁文杰 12-26

[root@localhost ~]# vi /etc/exports

[root@localhost ~]# mkdir /test

[root@localhost ~]# mkdir /test/123.txt

[root@localhost ~]# exportfs -r -v

exporting :/test

[root@localhost ~]# showmount -e localhost

clnt_create: RPC: Program not registered

[root@localhost ~]# ip addr | grep ens33

2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

   inet 192.168.42.128/24 brd 192.168.42.255 scope global noprefixroute dynamic ens33

[root@localhost ~]# showmount -e 192.168.42.128

clnt_create: RPC: Program not registered

[root@localhost ~]# systemctl sta

start   status  

[root@localhost ~]# systemctl start rpcbind

[root@localhost ~]# showmount -e 192.168.42.128

clnt_create: RPC: Program not registered

[root@localhost ~]# systemctl restart nfs

[root@localhost ~]# showmount -e 192.168.42.128

Export list for 192.168.42.128:

/test

[root@localhost ~]# cat /etc/exports

/test                 (ro,all_squash)


来自：项目7 nfs服务器>nfs服务器
梁美仙 12-26

DNS

先安装yum
[root@localhost ~]# mount /dev/cdrom /mnt
mount: /dev/sr0 写保护，将以只读方式挂载
[root@localhost ~]# cd /etc/yum.repos.d/
[root@localhost yum.repos.d]# ls
CentOS-Base.repo       CentOS-fasttrack.repo  CentOS-Vault.repo
CentOS-CR.repo         CentOS-Media.repo      CentOS-x86_64-kernel.repo
CentOS-Debuginfo.repo  CentOS-Sources.repo
[root@localhost yum.repos.d]# mkdir bak
[root@localhost yum.repos.d]# mv C bak
[root@localhost yum.repos.d]# touch dvd.repo
[root@localhost yum.repos.d]# vi dvd.repo
[root@localhost yum.repos.d]# cat dvd.repo
[dvd]
baseurl=file:///mnt
enabled=1
gpgcheck=0
[root@localhost yum.repos.d]# yum clean all
已加载插件：fastestmirror, langpacks
源 'dvd' 在配置文件中未指定名字，使用标识代替
正在清理软件源： dvd
Cleaning up list of fastest mirrors
Other repos take up 205 M of disk space (use --verbose for details)
[root@localhost yum.repos.d]# yum install bind -y
已加载插件：fastestmirror, langpacks
源 'dvd' 在配置文件中未指定名字，使用标识代替
Determining fastest mirrors
dvd                                                             | 3.6 kB  00:00:00
(1/2): dvd/group_gz                                             | 153 kB  00:00:00
(2/2): dvd/primary_db                                           | 3.3 MB  00:00:00
软件包 32:bind-export-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本
软件包 32:bind-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本
软件包 32:bind-utils-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本
软件包 32:bind-license-9.11.4-26.P2.el7.noarch 已安装并且是最新版本
软件包 32:bind-libs-lite-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本
正在解决依赖关系
--> 正在检查事务
---> 软件包 bind.x86_64.32.9.11.4-26.P2.el7 将被 安装
--> 正在处理依赖关系 python-ply，它被软件包 32:bind-9.11.4-26.P2.el7.x86_64 需要
---> 软件包 bind-chroot.x86_64.32.9.11.4-26.P2.el7 将被 安装
---> 软件包 bind-dyndb-ldap.x86_64.0.11.1-7.el7 将被 安装
---> 软件包 bind-pkcs11.x86_64.32.9.11.4-26.P2.el7 将被 安装
---> 软件包 bind-pkcs11-libs.x86_64.32.9.11.4-26.P2.el7 将被 安装
---> 软件包 bind-pkcs11-utils.x86_64.32.9.11.4-26.P2.el7 将被 安装
--> 正在检查事务
---> 软件包 python-ply.noarch.0.3.4-11.el7 将被 安装
--> 解决依赖关系完成

依赖关系解决

=======================================================================================
Package                  架构          版本                          源          大小
=======================================================================================
正在安装:
bind                     x86_64        32:9.11.4-26.P2.el7           dvd        2.3 M
bind-chroot              x86_64        32:9.11.4-26.P2.el7           dvd         92 k
bind-dyndb-ldap          x86_64        11.1-7.el7                    dvd        121 k
bind-pkcs11              x86_64        32:9.11.4-26.P2.el7           dvd        361 k
bind-pkcs11-libs         x86_64        32:9.11.4-26.P2.el7           dvd        1.1 M
bind-pkcs11-utils        x86_64        32:9.11.4-26.P2.el7           dvd        208 k
为依赖而安装:
python-ply               noarch        3.4-11.el7                    dvd        123 k

事务概要
=======================================================================================
安装  6 软件包 (+1 依赖软件包)

总下载量：4.3 M
安装大小：10 M
Downloading packages:
---------------------------------------------------------------------------------------
总计                                                       37 MB/s | 4.3 MB  00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
正在安装    : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                        1/7
正在安装    : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                       2/7
正在安装    : python-ply-3.4-11.el7.noarch                                       3/7
正在安装    : 32:bind-9.11.4-26.P2.el7.x86_64                                    4/7
正在安装    : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                             5/7
正在安装    : bind-dyndb-ldap-11.1-7.el7.x86_64                                  6/7
正在安装    : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                             7/7
验证中      : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                             1/7
验证中      : python-ply-3.4-11.el7.noarch                                       2/7
验证中      : bind-dyndb-ldap-11.1-7.el7.x86_64                                  3/7
验证中      : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                        4/7
验证中      : 32:bind-9.11.4-26.P2.el7.x86_64                                    5/7
验证中      : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                       6/7
验证中      : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                             7/7

已安装:
bind.x86_64 32:9.11.4-26.P2.el7
bind-chroot.x86_64 32:9.11.4-26.P2.el7
bind-dyndb-ldap.x86_64 0:11.1-7.el7
bind-pkcs11.x86_64 32:9.11.4-26.P2.el7
bind-pkcs11-libs.x86_64 32:9.11.4-26.P2.el7
bind-pkcs11-utils.x86_64 32:9.11.4-26.P2.el7

作为依赖被安装:
python-ply.noarch 0:3.4-11.el7

完毕！
：[root@localhost yum.repos.d]# cp /etc/named.conf /etc/named.conf.bak
cp：是否覆盖"/etc/named.conf.bak"？ y
[root@localhost yum.repos.d]# vi /etc/named.conf
[root@localhost yum.repos.d]# cat /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {
 listen-on port 53 { any; };
 listen-on-v6 port 53 { ::1; };
 directory "/var/named";
 dump-file "/var/named/data/cache_dump.db";
 statistics-file "/var/named/data/named_stats.txt";
 memstatistics-file "/var/named/data/named_mem_stats.txt";
 recursing-file  "/var/named/data/named.recursing";
 secroots-file   "/var/named/data/named.secroots";
 allow-query     { any; };

 /
 - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
 - If you are building a RECURSIVE (caching) DNS server, you need to enable
 recursion.
 - If your recursive DNS server has a public IP address, you MUST enable access
 control to limit queries to your legitimate users. Failing to do so will
 cause your server to become part of large scale DNS amplification
 attacks. Implementing BCP38 within your network would greatly
 reduce such attack surface
 /
 recursion yes;

 dnssec-enable yes;
 dnssec-validation yes;

 / Path to ISC DLV key /
 bindkeys-file "/etc/named.root.key";

 managed-keys-directory "/var/named/dynamic";

 pid-file "/run/named/named.pid";
 session-keyfile "/run/named/session.key";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "." IN {
 type hint;
 file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

[root@localhost yum.repos.d]# vi /etc/named.rfc1912.zones
[root@localhost yum.repos.d]# cat /etc/named.rfc1912.zones
// named.rfc1912.zones:
//
// Provided by Red Hat caching-nameserver package
//
// ISC BIND named zone configuration for zones recommended by
// RFC 1912 section 4.1 : localhost TLDs and address zones
// andhttp://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt
// (c)2007 R W Franks
//
// See /usr/share/doc/bind/sample/ for example named configuration files.
//

zone "localhost.localdomain" IN {
 type master;
 file "named.localhost";
 allow-u.p.d.a.t.e { none; };
};

zone "localhost" IN {
 type master;
 file "named.localhost";
 allow-u.p.d.a.t.e { none; };
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
 type master;
 file "named.loopback";
 allow-u.p.d.a.t.e { none; };
};

zone "1.0.0.127.in-addr.arpa" IN {
 type master;
 file "named.loopback";
 allow-u.p.d.a.t.e { none; };
};



zone "xnzy.cn" IN {
 type master;
 file "xnzy.cn.zone";
 allow-u.p.d.a.t.e { none; };
};

zone "42.168.192.in-addr.arpa" IN {
 type master;
 file "192.168.42.zone";
 allow-u.p.d.a.t.e { none; };
};
[root@localhost yum.repos.d]# cd /var/named/
[root@localhost named]# ls
chroot  dynamic     named.ca     named.localhost  slaves
data    dyndb-ldap  named.empty  named.loopback
[root@localhost named]# cp -p named.localhost xnyz.cn.zone
[root@localhost named]# cp -p named.loopback 192.168.42
[root@localhost named]# cp -p named.localhost xnzy.cn.zone
[root@localhost named]# cp -p named.loopback 192.168.42 zone
cp: 目标"zone" 不是目录
[root@localhost named]# cp -p named.loopback 192.168.42.zone
[root@localhost named]# vim /var/named/xnzy.cn.zone
[root@localhost named]# vim /var/named/xnzy.cn.zone
[root@localhost named]#


来自：项目9 BIND域名解析服务器的搭建>BIND域名解析服务器的搭建
蔡文轩 12-26

[root@localhost ~]# mount  /dev/cdrom  /mnt

mount: /dev/sr0 写保护，将以只读方式挂载

[root@localhost ~]# cd  /etc/yum.repos.d/

[root@localhost yum.repos.d]# ls

CentOS-Base.repo       CentOS-fasttrack.repo  CentOS-Vault.repo

CentOS-CR.repo         CentOS-Media.repo      CentOS-x86_64-kernel.repo

CentOS-Debuginfo.repo  CentOS-Sources.repo

[root@localhost yum.repos.d]# mkdir  bak

[root@localhost yum.repos.d]# mv  C  bakj

mv: 目标"bakj" 不是目录

[root@localhost yum.repos.d]# mv  C  bak

[root@localhost yum.repos.d]# vi  dvd.repo

[root@localhost yum.repos.d]# cat  dvd.repo

[dvd]

baseurl=file:///mnt

enabled=1

gpgcheck=0

[root@localhost yum.repos.d]# yum  clean  all

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

正在清理软件源： dvd

Cleaning up list of fastest mirrors

Other repos take up 205 M of disk space (use --verbose for details)

[root@localhost yum.repos.d]# yum  install  vsftpd  ftp  -y

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

Determining fastest mirrors

dvd                                                       | 3.6 kB  00:00:00    

(1/2): dvd/group_gz                                       | 153 kB  00:00:00    

(2/2): dvd/primary_db                                     | 3.3 MB  00:00:00    

正在解决依赖关系

--> 正在检查事务

---> 软件包 ftp.x86_64.0.0.17-67.el7 将被 安装

---> 软件包 vsftpd.x86_64.0.3.0.2-28.el7 将被 安装

--> 解决依赖关系完成

依赖关系解决

=================================================================================

Package          架构            版本                      源             大小

=================================================================================

正在安装:

ftp              x86_64           0.17-67.el7               dvd            61 k

vsftpd           x86_64           3.0.2-28.el7              dvd           172 k

事务概要

=================================================================================

安装  2 软件包

总下载量：232 k

安装大小：449 k

Downloading packages:

---------------------------------------------------------------------------------

总计                                                592 kB/s | 232 kB  00:00    

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

正在安装    : ftp-0.17-67.el7.x86_64                                       1/2

正在安装    : vsftpd-3.0.2-28.el7.x86_64                                   2/2

验证中      : vsftpd-3.0.2-28.el7.x86_64                                   1/2

验证中      : ftp-0.17-67.el7.x86_64                                       2/2

已安装:

ftp.x86_64 0:0.17-67.el7              vsftpd.x86_64 0:3.0.2-28.el7            

完毕！

[root@localhost yum.repos.d]# rpm -qa | grep vsftpd

vsftpd-3.0.2-28.el7.x86_64

[root@localhost yum.repos.d]# rpm -qa | grep ftp

ftp-0.17-67.el7.x86_64

vsftpd-3.0.2-28.el7.x86_64

[root@localhost yum.repos.d]#

[root@localhost yum.repos.d]# rpm  -qa | grep ftp

ftp-0.17-67.el7.x86_64

vsftpd-3.0.2-28.el7.x86_64

[root@localhost yum.repos.d]# systemctl  restart  vsftpd

[root@localhost yum.repos.d]# systemctl  stop  firewalld

[root@localhost yum.repos.d]# setenforce  0

[root@localhost yum.repos.d]# ip addr | grep ens33

2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000

inet 192.168.42.128/24 brd 192.168.42.255 scope global noprefixroute dynamic ens33

[root@localhost yum.repos.d]# touch  /var/ftp/111.txt

[root@localhost yum.repos.d]# touch  /var/ftp/222.txt

[root@localhost yum.repos.d]# clear

[root@localhost yum.repos.d]# useradd  team1

[root@localhost yum.repos.d]# passwd  team1

更改用户 team1 的密码 。

新的 密码：

无效的密码： 密码少于 8 个字符

重新输入新的 密码：

passwd：所有的身份验证令牌已经成功更新。

[root@localhost yum.repos.d]# useradd  team2

[root@localhost yum.repos.d]# passwd  team2

更改用户 team2 的密码 。

新的 密码：

无效的密码： 密码少于 8 个字符

重新输入新的 密码：

passwd：所有的身份验证令牌已经成功更新。

[root@localhost yum.repos.d]# cd  /etc/vsftpd/

[root@localhost vsftpd]# ls

ftpusers  user_list  vsftpd.conf  vsftpd_conf_migrate.sh

[root@localhost vsftpd]# cp  vsftpd.conf   vsftpd.conf.bak

[root@localhost vsftpd]# vi  vsftpd.conf

[root@localhost vsftpd]# systemctl  restart  vsftpd

[root@localhost vsftpd]# mkdir  -p  /web/www/html

[root@localhost vsftpd]# echo  'hello'  >  /web/www/html/index.html

[root@localhost vsftpd]# vi  vsftpd.conf

[root@localhost vsftpd]# grep -v  '#'  vsftpd.conf

anonymous_enable=NO

local_enable=YES

local_root=/web/www/html

write_enable=YES

local_umask=022

dirmessage_enable=YES

xferlog_enable=YES

connect_from_port_20=YES

xferlog_std_format=YES

local_root=/web/www/html

chroot_local_user=NO

chroot_list_enable=YES

# (default follows)

chroot_list_file=/etc/vsftpd/chroot_list

allow_writeable_chroot=YES

listen=NO

listen_ipv6=YES

pam_service_name=vsftpd

userlist_enable=YES

tcp_wrappers=YES

[root@localhost vsftpd]# touch   /etc/vsftpd/chroot_list

[root@localhost vsftpd]# vi   /etc/vsftpd/chroot_list

[root@localhost vsftpd]# cat  /etc/vsftpd/chroot_list

team1

team2

[root@localhost vsftpd]# systemctl  restart  vsftpd

[root@localhost vsftpd]# systemctl   stop   firewalld

[root@localhost vsftpd]# setenforce  0

[root@localhost vsftpd]# ftp 192.168.42.128

windows客户端测试

C:\Users\7408>ftp  192.168.42.128

连接到 192.168.42.128。

220 (vsFTPd 3.0.2)

200 Always in UTF8 mode.

用户(192.168.42.128:(none)): team1

331 Please specify the password.

密码:

230 Login successful.

ftp> pwd

257 "/"

ftp> cd  /etc

550 Failed to change directory.

ftp> cd /root

550 Failed to change directory.

ftp> ls

200 PORT command successful. Consider using PASV.

150 Here comes the directory listing.

index.html

226 Directory send OK.

ftp: 收到 15 字节，用时 0.00秒 15.00千字节/秒。

ftp>


来自：项目12 Vsftp FTP服务器的搭建>Vsftp FTP服务器的搭建
阮明明 12-26

[root@localhost ~]# mount /dev/cdrom /mnt

mount: /dev/sr0 写保护，将以只读方式挂载

[root@localhost ~]#  cd /etc/yum.repos.d/

[root@localhost yum.repos.d]# ls

CentOS-Base.repo       CentOS-fasttrack.repo  CentOS-Vault.repo

CentOS-CR.repo         CentOS-Media.repo      CentOS-x86_64-kernel.repo

CentOS-Debuginfo.repo  CentOS-Sources.repo

[root@localhost yum.repos.d]# mkdir bak

[root@localhost yum.repos.d]# mv Cbak

mv: 在"Cbak" 后缺少了要操作的目标文件

Try 'mv --help' for more information.

[root@localhost yum.repos.d]# mv C bak

[root@localhost yum.repos.d]# ls

bak

[root@localhost yum.repos.d]# touch dvd.repo

[root@localhost yum.repos.d]#  vi dvd.repo

[root@localhost yum.repos.d]# yum clean all

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

正在清理软件源： dvd

Cleaning up list of fastest mirrors

Other repos take up 205 M of disk space (use --verbose for details)

[root@localhost yum.repos.d]# yum install bind -y

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

Determining fastest mirrors

dvd                                                            | 3.6 kB  00:00:00    

(1/2): dvd/group_gz                                            | 153 kB  00:00:00    

(2/2): dvd/primary_db                                          | 3.3 MB  00:00:00    

软件包 32:bind-export-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-libs-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-utils-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

软件包 32:bind-license-9.11.4-26.P2.el7.noarch 已安装并且是最新版本

软件包 32:bind-libs-lite-9.11.4-26.P2.el7.x86_64 已安装并且是最新版本

正在解决依赖关系

--> 正在检查事务

---> 软件包 bind.x86_64.32.9.11.4-26.P2.el7 将被 安装

--> 正在处理依赖关系 python-ply，它被软件包 32:bind-9.11.4-26.P2.el7.x86_64 需要

---> 软件包 bind-chroot.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-dyndb-ldap.x86_64.0.11.1-7.el7 将被 安装

---> 软件包 bind-pkcs11.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-pkcs11-libs.x86_64.32.9.11.4-26.P2.el7 将被 安装

---> 软件包 bind-pkcs11-utils.x86_64.32.9.11.4-26.P2.el7 将被 安装

--> 正在检查事务

---> 软件包 python-ply.noarch.0.3.4-11.el7 将被 安装

--> 解决依赖关系完成

依赖关系解决

======================================================================================

Package                  架构          版本                         源          大小

======================================================================================

正在安装:

bind                     x86_64        32:9.11.4-26.P2.el7          dvd        2.3 M

bind-chroot              x86_64        32:9.11.4-26.P2.el7          dvd         92 k

bind-dyndb-ldap          x86_64        11.1-7.el7                   dvd        121 k

bind-pkcs11              x86_64        32:9.11.4-26.P2.el7          dvd        361 k

bind-pkcs11-libs         x86_64        32:9.11.4-26.P2.el7          dvd        1.1 M

bind-pkcs11-utils        x86_64        32:9.11.4-26.P2.el7          dvd        208 k

为依赖而安装:

python-ply               noarch        3.4-11.el7                   dvd        123 k

事务概要

======================================================================================

安装  6 软件包 (+1 依赖软件包)

总下载量：4.3 M

安装大小：10 M

Downloading packages:

--------------------------------------------------------------------------------------

总计                                                      88 MB/s | 4.3 MB  00:00    

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

 正在安装    : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                       1/7

 正在安装    : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                      2/7

 正在安装    : python-ply-3.4-11.el7.noarch                                      3/7

 正在安装    : 32:bind-9.11.4-26.P2.el7.x86_64                                   4/7

 正在安装    : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                            5/7

 正在安装    : bind-dyndb-ldap-11.1-7.el7.x86_64                                 6/7

 正在安装    : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                            7/7

 验证中      : 32:bind-chroot-9.11.4-26.P2.el7.x86_64                            1/7

 验证中      : python-ply-3.4-11.el7.noarch                                      2/7

 验证中      : bind-dyndb-ldap-11.1-7.el7.x86_64                                 3/7

 验证中      : 32:bind-pkcs11-libs-9.11.4-26.P2.el7.x86_64                       4/7

 验证中      : 32:bind-9.11.4-26.P2.el7.x86_64                                   5/7

 验证中      : 32:bind-pkcs11-utils-9.11.4-26.P2.el7.x86_64                      6/7

 验证中      : 32:bind-pkcs11-9.11.4-26.P2.el7.x86_64                            7/7

已安装:

 bind.x86_64 32:9.11.4-26.P2.el7                                                    

 bind-chroot.x86_64 32:9.11.4-26.P2.el7                                              

 bind-dyndb-ldap.x86_64 0:11.1-7.el7                                                

 bind-pkcs11.x86_64 32:9.11.4-26.P2.el7                                              

 bind-pkcs11-libs.x86_64 32:9.11.4-26.P2.el7                                        

 bind-pkcs11-utils.x86_64 32:9.11.4-26.P2.el7                                        

作为依赖被安装:

 python-ply.noarch 0:3.4-11.el7                                                      

完毕！

[root@localhost yum.repos.d]#  cp /etc/named.conf  /etc/named.conf.bak

cp：是否覆盖"/etc/named.conf.bak"？ y

[root@localhost yum.repos.d]# vi /etc/named.conf

[root@localhost yum.repos.d]# vi /etc/named.rfc1912.zones

[root@localhost yum.repos.d]#  cd  /var/named/

[root@localhost named]# ls

chroot  dynamic     named.ca     named.localhost  slaves

data    dyndb-ldap  named.empty  named.loopback

[root@localhost named]# cp  -p named.localhost  xnzy.cn.zone

[root@localhost named]# cp  -p named.localhost  192.168.42.zone

[root@localhost named]# ls

192.168.42.zone  data     dyndb-ldap  named.empty      named.loopback  xnzy.cn.zone

chroot           dynamic  named.ca    named.localhost  slaves

[root@localhost named]# vi xnzy.cn.zone

[root@localhost named]# vi /etc/named.conf

[root@localhost named]# vi /etc/named.rfc1912.zones

[root@localhost named]# ls

192.168.42.zone  chroot  data  dynamic  dyndb-ldap  named.ca  named.empty  named.localhost  named.loopback  slaves  xnzy.cn.zone

[root@localhost named]# cp  -p named.localhost  example.com.zone

[root@localhost named]# vi example.com.zone

[root@localhost named]# vi  192.168.42.zone

[root@localhost named]# systemctl  restart  named

Job for named.service failed because the control process exited with error code. See "systemctl status named.service" and "journalctl -xe" for details.

[root@localhost named]# nslookup

> server

Default server: 192.168.42.2

Address: 192.168.42.2#53

> ^C[root@localhost named]#  vi  /etc/resolv.conf

[root@localhost named]# cat  /etc/resolv.conf

# Generated by NetworkManager

search localdomain

nameserver 192.168.42.128

[root@localhost named]# nslookup

> server

Default server: 192.168.42.128

Address: 192.168.42.128#53

> ^C[root@localhost named]# nslookup

> server

Default server: 192.168.42.128

Address: 192.168.42.128#53

> www.example.com

;; connection timed out; no servers could be reached

> > 192.168.42.128

;; connection timed out; no servers could be reached

> dns.example.com

;; connection timed out; no servers could be reached

> ^H^H^H^C[root@localhost named]#

[root@localhost named]# vi /etc/named.rfc1912.zones

[root@localhost named]# vi  192.168.42.zone

[root@localhost named]# nslookup

> dns.example.com

Server: 192.168.42.2

Address: 192.168.42.2#53

server can't find dns.example.com: NXDOMAIN

> www.example.com

Server: 192.168.42.2

Address: 192.168.42.2#53

Non-authoritative answer:

Name: www.example.com

Address: 93.184.215.14

Name: www.example.com

Address: 2606:2800:21f:cb07:6820:80da:af6b:8b2c

> ^C[root@localhost named]# cat  192.168.42.zone

 192.168.42.zone

$TTL 1D

@ IN SOA dns.example.com root.example.com. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

@ IN NS dns.example.com.

128 IN PTR dns.example.com.

128 IN PTR www.example.com.

[root@localhost named]# cat /etc/named.rfc1912.zones

// named.rfc1912.zones:

//

// Provided by Red Hat caching-nameserver package

//

// ISC BIND named zone configuration for zones recommended by

// RFC 1912 section 4.1 : localhost TLDs and address zones

// and http://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt

// (c)2007 R W Franks

//

// See /usr/share/doc/bind/sample/ for example named configuration files.

//

zone "localhost.localdomain" IN {

type master;

file "named.localhost";

allow-u.p.d.a.t.e { none; };

};

zone "localhost" IN {

type master;

file "named.localhost";

allow-u.p.d.a.t.e { none; };

};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {

type master;

file "named.loopback";

allow-u.p.d.a.t.e { none; };

};

zone "1.0.0.127.in-addr.arpa" IN {

type master;

file "named.loopback";

allow-u.p.d.a.t.e { none; };

};

zone "0.in-addr.arpa" IN {

type master;

file "named.empty";

allow-u.p.d.a.t.e { none; };

};

zone "example.com" IN {

type master;

file "example.com.zone";

allow-u.p.d.a.t.e { none; };

};

zone "42.168.192.in-addr.arpa" IN {

type master;

file "192.168.42.zone";

allow-u.p.d.a.t.e { none; };

};

[root@localhost named]# cat  /etc/resolv.conf

# Generated by NetworkManager

search localdomain

nameserver 192.168.42.2

[root@localhost named]# cat  192.168.42.zone

 192.168.42.zone

$TTL 1D

@ IN SOA dns.example.com root.example.com. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

@ IN NS dns.example.com.

128 IN PTR dns.example.com.

128 IN PTR www.example.com.

[root@localhost named]# cat example.com.zone

$TTL 1D

@ IN SOA dns.example.com root.example.com. (

0 ; serial

1D ; refresh

1H ; retry

1W ; expire

3H ) ; minimum

@ NS NS      dns.example.com.

dns     IN      A       192.168.42.128

www     IN      A       192.168.42.128

[root@localhost named]#


来自：项目9 BIND域名解析服务器的搭建>BIND域名解析服务器的搭建
鲁文杰 12-26

[root@localhost tom]# mount /dev/cdrom /mnt

mount: /dev/sr0 写保护，将以只读方式挂载

[root@localhost tom]# cd /etc/yum.repos.d/

[root@localhost yum.repos.d]# ls

CentOS-Base.repo       CentOS-fasttrack.repo  CentOS-Vault.repo

CentOS-CR.repo         CentOS-Media.repo      CentOS-x86_64-kernel.repo

CentOS-Debuginfo.repo  CentOS-Sources.repo

[root@localhost yum.repos.d]# mkdir bak

[root@localhost yum.repos.d]# ls

bak               CentOS-Debuginfo.repo  CentOS-Sources.repo

CentOS-Base.repo  CentOS-fasttrack.repo  CentOS-Vault.repo

CentOS-CR.repo    CentOS-Media.repo      CentOS-x86_64-kernel.repo

[root@localhost yum.repos.d]# mv C bak

[root@localhost yum.repos.d]# ls

bak

[root@localhost yum.repos.d]# touch dvd.repo

[root@localhost yum.repos.d]# vi dvd.repo

[root@localhost yum.repos.d]# cat dvd.repo

[dvd]

baseurl=file:///mnt

ennabled=1

gpgcheck=0

[root@localhost yum.repos.d]# yum clean all

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

正在清理软件源： dvd

Cleaning up list of fastest mirrors

Other repos take up 205 M of disk space (use --verbose for details)

[root@localhost yum.repos.d]# yum install rpcbind nfs-utils -y

已加载插件：fastestmirror, langpacks

源 'dvd' 在配置文件中未指定名字，使用标识代替

Determining fastest mirrors

dvd                                      | 3.6 kB     00:00    

(1/2): dvd/group_gz                        | 153 kB   00:00    

(2/2): dvd/primary_db                      | 3.3 MB   00:00    

软件包 rpcbind-0.2.0-49.el7.x86_64 已安装并且是最新版本

软件包 1:nfs-utils-1.3.0-0.68.el7.x86_64 已安装并且是最新版本

无须任何处理


来自：项目7 nfs服务器>nfs服务器