PersianGulf's questions

Tenho o seguinte sistema:

root@debian:~# dpkg -l systemd-resolved
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version      Architecture Description
+++-================-============-============-=================================
ii  systemd-resolved 257.4-3      amd64        systemd DNS resolver
root@debian:~# cat /etc/issue
Debian GNU/Linux trixie/sid \n \l

root@debian:~# ls -l /etc/resolv.conf
lrwxrwxrwx 1 root root 39 Mar 26 20:21 /etc/resolv.conf -> ../run/systemd/resolve/stub-resolv.conf

root@debian:~# cat /run/systemd/resolve/stub-resolv.conf 
# This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8).
# Do not edit.
#
# This file might be symlinked as /etc/resolv.conf. If you're looking at
# /etc/resolv.conf and seeing this text, you have followed the symlink.
#
# This is a dynamic resolv.conf file for connecting local clients to the
# internal DNS stub resolver of systemd-resolved. This file lists all
# configured search domains.
#
# Run "resolvectl status" to see details about the uplink DNS servers
# currently in use.
#
# Third party programs should typically not access this file directly, but only
# through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a
# different way, replace this symlink by a static file or a different symlink.
#
# See man:systemd-resolved.service(8) for details about the supported modes of
# operation for /etc/resolv.conf.

nameserver 127.0.0.53
options edns0 trust-ad
search .

Então eu instalei Zebedeeo tunneling e funcionou bem.
E quando eu configurei meu firefoxon localhost:81, o acesso aos sites foi filtrado.

root@debian:~# telnet localhost 81
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Agora, eu quero usar DNS sobre localhost:81.
Como posso fazer isso?

ATUALIZAÇÃO: O meu resolvectlé:

root@debian:~# resolvectl status
Global
         Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
  resolv.conf mode: stub
       DNS Servers: 8.8.8.8

Link 2 (enp0s31f6)
    Current Scopes: LLMNR/IPv4 mDNS/IPv4
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 3 (wlp58s0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 5 (docker0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Eu tenho os dois OU: 1. People2. newOU. O meu dcé nodomain. Eu tenho a seguinte pesquisa e está tudo ok:

root@debian:~/ldif# ldapsearch  -c  -Y EXTERNAL  -H ldapi:///  -b dc=nodomain -D  cn=admin,dc=nodomain -LLLQ 
dn: dc=nodomain
objectClass: top
objectClass: dcObject
objectClass: organization
o: nodomain
dc: nodomain

dn: uid=mohsen,ou=People,dc=nodomain
uid: mohsen
cn: Pahlevanzadeh
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

dn: ou=newOU,dc=nodomain
objectClass: organizationalUnit
ou: newOU
description: Organizational Unit for Sales Department

dn: uid=naghmeh,ou=newOU,dc=nodomain
uid: naghmeh
cn: maleki
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

Tenho dois uid: 1. mohsenunder People. 2. naghmehunder newOU
Quando procuro suc como acima, mas adiciono "ou=newOU"como abaixo:

ldapsearch  -c  -Y EXTERNAL  "ou=newOU" -H ldapi:///  -b dc=nodomain -D  cn=admin,dc=nodomain -LLLQ 

Obtenho o seguinte resultado:

dn: ou=newOU,dc=nodomain
objectClass: organizationalUnit
ou: newOU
description: Organizational Unit for Sales Department

Infelizmente, não obtive uidnenhuma outra informação.
Como posso acessar outras informações via meu OU?

Eu tenho o seguinte ldapsearch:

root@debian:~/ldif# ldapsearch -LLLQ  -Y EXTERNAL -H ldapi:/// -b dc=nodomain   -D  cn=admin,dc=nodomain,cn=Pahlevanzadeh,ou=People,uid=mohsen,loginShell=/usr/bin/csh
dn: dc=nodomain
objectClass: top
objectClass: dcObject
objectClass: organization
o: nodomain
dc: nodomain

dn: ou=People,dc=nodomain
objectClass: organizationalUnit
ou: People
description: Organizational Unit for Sales Department

dn: uid=mohsen,ou=People,dc=nodomain
uid: mohsen
cn: Pahlevanzadeh
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 20121
loginShell: /usr/sbin/csh
uidNumber: 130
gidNumber: 137
homeDirectory: /home/mohsen
gecos: A good boy,,,

Mas quando uso o seguinte ldapsearch, não tenho o resultado acima:

root@debian:~/ldif# ldapsearch  -Y EXTERNAL -H ldapi:/// -b dc=nodomain,cn=Pahlevanzadeh   -D  cn=admin,dc=nodomain,cn=Pahlevanzadeh
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
# extended LDIF
#
# LDAPv3
# base <dc=nodomain,cn=Pahlevanzadeh> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1

Como posso criar uma consulta com '-b' para ter o primeiro resultado?

Não sei qual é o algoritmo de armazenamento de senha no /etc/shadowLinux.
Testei por meio do seguinte script via python:

import hashlib
message = b"123"

md5_hash = hashlib.md5(message).hexdigest()
sha1_hash = hashlib.sha1(message).hexdigest()
sha256_hash = hashlib.sha256(message).hexdigest()
sha384_hash = hashlib.sha384(message).hexdigest()
sha512_hash = hashlib.sha512(message).hexdigest()

print(f"MD5: {md5_hash}")
print(f"SHA-1: {sha1_hash}")
print(f"SHA-256: {sha256_hash}")
print(f"SHA-384: {sha384_hash}")
print(f"SHA-512: {sha512_hash}")

Mas não vi minha senha. Minha senha é 123.

1. O shadow armazena como HASH? Se sim, devo descartar a possibilidade de obter a senha.
   
2. Se a senha não for armazenada como hash, como posso obtê-la?

Primeiro defino uma nova UO com o LDIFseguinte ldapadd -x -D "cn=admin,dc=nodomain" -W -f ./ou.ldif:

root@debian:~# cat ou.ldif 
dn: OU=People,DC=nodomain
objectClass: organizationalUnit
ou: People
description: Organizational Unit for Sales Department

Após a autenticação, o ldap adicionou minha UO ao ldap.

Então adicionei meu users.ldif no ldap via:

root@debian:~#  ldapadd -x -H ldap:/// -D "cn=admin,dc=nodomain" -W -f ./users.ldif
Enter LDAP Password: 
adding new entry "uid=root,ou=People,dc=nodomain"
adding new entry "uid=daemon,ou=People,dc=nodomain"
adding new entry "uid=man,ou=People,dc=nodomain"
adding new entry "uid=noody,ou=People,dc=nodomain"
adding new entry "uid=systemd_network,ou=People,dc=nodomain"
adding new entry "uid=tss,ou=People,dc=nodomain"
adding new entry "uid=systemd-coredump,ou=People,dc=nodomain"
adding new entry "uid=systemd-timesync,ou=People,dc=nodomain"
adding new entry "uid=messagebus,ou=People,dc=nodomain"
adding new entry "uid=usbmux,ou=People,dc=nodomain"
adding new entry "uid=sshd,ou=People,dc=nodomain"
adding new entry "uid=dnsmasq,ou=People,dc=nodomain"
adding new entry "uid=avahi,ou=People,dc=nodomain"
adding new entry "uid=speech-dispacher,ou=People,dc=nodomain"
adding new entry "uid=fwupd-refresh,ou=People,dc=nodomain"
adding new entry "uid=saned,ou=People,dc=nodomain"
adding new entry "uid=sddm,ou=People,dc=nodomain"
adding new entry "uid=geoclue,ou=People,dc=nodomain"
adding new entry "uid=polkitd,ou=People,dc=nodomain"
adding new entry "uid=rtkit,ou=People,dc=nodomain"
adding new entry "uid=colord,ou=People,dc=nodomain"
adding new entry "uid=gnome-initial-setup,ou=People,dc=nodomain"
adding new entry "uid=tcpdump,ou=People,dc=nodomain"
adding new entry "uid=postgres,ou=People,dc=nodomain"
adding new entry "uid=mohsen,ou=People,dc=nodomain"
adding new entry "uid=redis,ou=People,dc=nodomain"
adding new entry "uid=pulse,ou=People,dc=nodomain"
adding new entry "uid=Debian-gdm,ou=People,dc=nodomain"
adding new entry "uid=hplip,ou=People,dc=nodomain"
adding new entry "uid=strongswan,ou=People,dc=nodomain"
adding new entry "uid=libvirt-qemu,ou=People,dc=nodomain"
adding new entry "uid=nobody,ou=People,dc=nodomain"
adding new entry "uid=systemd-network,ou=People,dc=nodomain"
adding new entry "uid=mysql,ou=People,dc=nodomain"
adding new entry "uid=avahi-autoipd,ou=People,dc=nodomain"
adding new entry "uid=_galera,ou=People,dc=nodomain"
adding new entry "uid=ftp,ou=People,dc=nodomain"
adding new entry "uid=speech-dispatcher,ou=People,dc=nodomain"
adding new entry "uid=Debian-exim,ou=People,dc=nodomain"
adding new entry "uid=gnome-remote-desktop,ou=People,dc=nodomain"
adding new entry "uid=cups-pk-helper,ou=People,dc=nodomain"

Tudo está ok, mas quando quero pesquisar via:

root@debian:~# ldapsearch -L  -H ldap:/// -b cn=People,dc=nodomain,cn=admin ou
SASL/SCRAM-SHA-512 authentication started
Please enter your password: 
ldap_sasl_interactive_bind: Invalid credentials (49)
    additional info: SASL(-13): user not found: no secret in database

Antes de definir a UO e adicionar usuários, não tive nenhum problema com a autenticação.

Como posso resolver isso?

Informação:
Eu instalei ldap-utilse slapd, durante a instalação do slapd, com ncurseso dialog, importei a senha do administrador.
Depois eu alterei via

ldapmodify -Q -Y EXTERNAL -H ldapi:/// << E0F
dn: olcDatabase={1}mdb,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}qUoTRPwppaedqHQTgYOPYWokr3SiXjbK
E0F

Mas ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f ./users.ldifrecebo as seguintes mensagens:

Enter LDAP Password: 
ldap_bind: Invalid credentials (49)

A propósito, eu não tenho slapd.conf.
Como posso autenticar via programas ldap?

ATUALIZAR:

root@debian:~# cat /etc/ldap/slapd.d/cn\=config/olcDatabase\=\{1\}mdb.ldif 
# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 73bfb3a8
dn: olcDatabase={1}mdb
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: {1}mdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=nodomain
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by * none
olcAccess: {1}to attrs=shadowLastChange by self write by * read
olcAccess: {2}to * by * read
olcLastMod: TRUE
olcRootDN: cn=admin,dc=nodomain
olcDbCheckpoint: 512 30
olcDbIndex: objectClass eq
olcDbIndex: cn,uid eq
olcDbIndex: uidNumber,gidNumber eq
olcDbIndex: member,memberUid eq
olcDbMaxSize: 1073741824
structuralObjectClass: olcMdbConfig
entryUUID: 10bd0d0a-82d1-103f-92a4-058be6d2a441
creatorsName: cn=admin,cn=config
createTimestamp: 20250219054944Z
olcRootPW:: MTIzMTIzMTIz
entryCSN: 20250219060430.002303Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20250219060430Z

Eu tenho Debian GNU/Linux trixie/side instalei o publican do repositório do Debian. (O publican está fazendo gravação e publicação para DocBook)
Quando eu executo publican, ele recebo as seguintes mensagens:

Attempt to call undefined import method with arguments ("abs2rel") via package "File::Spec" (Perhaps you forgot to load the package?) at /usr/share/perl5/Publican/TreeView.pm line 12.
Duplicate specification "help" for option "help"
Can't open publican: No such file or directory at /usr/bin/publican line 646.

A versão do meu publican é 4.3.2-4.
Também instalei libfile-spec-native-perlo pacote do repositório.

Então eu baixo o código fonte via:

apt source publican

Em seguida, execute publican e obtenha o seguinte erro:

mohsen@debian:~/src-compiled/publican/publican-4.3.2/bin$ ./publican 
Attempt to call undefined import method with arguments ("abs2rel") via package "File::Spec" (Perhaps you forgot to load the package?) at /usr/share/perl5/Publican/TreeView.pm line 12.
Duplicate specification "help" for option "help"

Action required!

De acordo com a string acima Action Required!adicionada à saída.

Não sei como resolver isso.
Você me deixa feliz se resolver meu problema.

Por que o Debian está renomeando alguns pacotes instáveis ​​de orig_namepara orig_namet64? Algumas outras perguntas:

• Onde posso encontrar a Política Oficial do Debian Unstable?
• Onde posso descobrir o que está acontecendo com a comunidade de usuários Debian como um todo?

Renomeações recentes:

$ dpkg -l "*t64" |head -n 50
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                Version                     Architecture Description
+++-===================================-===========================-============-=======================================================================
ii  libabsl20220623t64:amd64            20220623.1-3.1              amd64        extensions to the C++ standard library
ii  libappimage1.0abi1t64:amd64         1.0.4-5-3.1                 amd64        Core library for appimage
ii  libapr1t64:amd64                    1.7.2-3.2                   amd64        Apache Portable Runtime Library
ii  libaprutil1t64:amd64                1.6.3-2                     amd64        Apache Portable Runtime Utility Library
ii  libapt-pkg6.0t64:amd64              2.7.13+b1                   amd64        package management runtime library
ii  libarchive13t64:amd64               3.7.2-1.1                   amd64        Multi-format archive and compression library (shared library)
ii  libaribb24-0t64:amd64               1.0.3-2.1+b1                amd64        library for ARIB STD-B24 decoding (runtime files)
ii  libasound2t64:amd64                 1.2.11-1+b1                 amd64        shared library for ALSA applications
ii  libatk-bridge2.0-0t64:amd64         2.51.90-4                   amd64        AT-SPI 2 toolkit bridge - shared library
ii  libatk1.0-0t64:amd64                2.51.90-4                   amd64        ATK accessibility toolkit
ii  libatopology2t64:amd64              1.2.11-1+b1                 amd64        shared library for handling ALSA topology definitions
ii  libatspi2.0-0t64:amd64              2.51.90-4                   amd64        Assistive Technology Service Provider Interface - shared library
ii  libboost-chrono1.83.0t64:amd64      1.83.0-2.1                  amd64        C++ representation of time duration, time point, and clocks
ii  libburn4t64:amd64                   1.5.6-1.1                   amd64        library to provide CD/DVD/BD writing functions
ii  libcamel-1.2-64t64:amd64            3.50.3-2.2                  amd64        Evolution MIME message handling library
ii  libcanberra-gtk3-0t64:amd64         0.30-12.2                   amd64        GTK+ 3.0 helper for playing widget event sounds with libcanberra
ii  libcanberra0t64:amd64               0.30-12.2                   amd64        simple abstract interface for playing event sounds
ii  libcdio-cdda2t64:amd64              10.2+2.0.1-1.1              amd64        library to read and control digital audio CDs
ii  libcdio-paranoia2t64:amd64          10.2+2.0.1-1.1              amd64        library to read digital audio CDs with error correction
ii  libcdio19t64:amd64                  2.1.0-4.1                   amd64        library to read and control CD-ROM
ii  libcfitsio10t64:amd64               4.3.1-1.1+b1                amd64        shared library for I/O with FITS format data files
ii  libclang1-15t64                     1:15.0.7-14                 amd64        C interface to the Clang library
ii  libclang1-16t64                     1:16.0.6-23                 amd64        C interface to the Clang library
ii  libclucene-contribs1t64:amd64       2.3.3.4+dfsg-1.2            amd64        language specific text analyzers (runtime)
ii  libclucene-core1t64:amd64           2.3.3.4+dfsg-1.2            amd64        core library for full-featured text search engine (runtime)
ii  libcmis-0.6-6t64                    0.6.2-2.1+b1                amd64        CMIS protocol client library
ii  libcolord-gtk4-1t64:amd64           0.3.1-1                     amd64        GTK4 convenience library for interacting with colord
ii  libcom-err2t64:amd64                1.47.0-2.3+b1               amd64        common error description library
ii  libcrypto++8t64:amd64               8.9.0-1.1                   amd64        General purpose cryptographic library - shared library
ii  libcups2t64:amd64                   2.4.7-1.2+b1                amd64        Common UNIX Printing System(tm) - Core library
ii  libcupsfilters1t64:amd64            1.28.17-3.1+b1              amd64        OpenPrinting CUPS Filters - Shared library
ii  libcurl4t64:amd64                   8.6.0-4                     amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  libdb5.3t64:amd64                   5.3.28+dfsg2-6              amd64        Berkeley v5.3 Database Libraries [runtime]
ii  libdirectfb-1.7-7t64:amd64          1.7.7-13                    amd64        direct frame buffer graphics (shared libraries)
ii  libdmapsharing-4.0-3t64:amd64       3.9.13-2                    amd64        DMAP client and server library - runtime
ii  libdmtx0t64:amd64                   0.7.7-1.2                   amd64        Data Matrix barcodes (runtime library)
ii  libdv4t64:amd64                     1.0.0-17.1                  amd64        software library for DV format digital video (runtime lib)
ii  libdvdread8t64:amd64                6.1.3-1.1                   amd64        library for reading DVDs
ii  libdw1t64:amd64                     0.191-1                     amd64        library that provides access to the DWARF debug information
ii  libebackend-1.2-11t64:amd64         3.50.3-2.2                  amd64        Utility library for evolution data servers
ii  libebook-1.2-21t64:amd64            3.50.3-2.2                  amd64        Client library for evolution address books
ii  libebook-contacts-1.2-4t64:amd64    3.50.3-2.2                  amd64        Client library for evolution contacts books
ii  libecal-2.0-2t64:amd64              3.50.3-2.2                  amd64        Client library for evolution calendars
ii  libedata-book-1.2-27t64:amd64       3.50.3-2.2                  amd64        Backend library for evolution address books
ii  libedata-cal-2.0-2t64:amd64         3.50.3-2.2                  amd64        Backend library for evolution calendars

Eu crio meu túnel em meu laptop por meio de:

ssh -p 22 -CfND 7777 mohsen@myserver

Após inserir minha senha, a conexão é estabelecida.
E via meias5 no firefox eu uso 127.0.0.1:7777 e posso navegar em vários sites filtrados.
Mas o Google ou algum site entende que eu uso túnel. Como posso configurar meu servidor ssh para informar ao Google ou outro site que não sou falso?

Eu tenho um arquivo pcap e preciso enviá-lo para interface específica.
Como eu posso fazer isso?

Eu tenho um script de shell e tem 3 programas:

#!/bin/bash
x
y
z

cada um dos programas acima é binário e deve ser executado em ordem. programa yé um daemon. Quando o bash é executado x, está tudo bem e quando yestá em execução, znão pode ser executado. Eu corro y como, nohup y &mas znão consegui executar.

Como posso executar zdepois yde uma programação sem bloqueio?

Eu tenho as seguintes partições na minha máquina:

Quero redimensionar /dev/sda5e colar em sda4, mas gpartednão me permite.
Como eu posso fazer isso?

Suponha que eu tenha 10 processos como:

process p0 with PID 1.
process p1 with PID 2.
process p2 with PID 3.
process p3 with PID 4.
process p4 with PID 5.
process p5 with PID 6.
process p6 with PID 7.
process p7 with PID 8.
process p8 with PID 9.
process p9 with PID 10.

Quando eu mato um processo, como:

kill 7

e o processo p6 é morto com sucesso, entre o processo p5 e p7 está vazio, quando executo o p10 como um processo, o kernel atribui o PID 11 ao p10.

A pergunta é por que o kernel (linux e freebsd) atribui um PID incremental em vez de atribuir o PID 7 ao processo p11?

Tenho o seguinte yamlarquivo:

---
apiVersion: v1
kind: pod
metadata:
    name: Tesing_for_Image_pull -----------> 1
    spec:
        containers:
        - name: mysql ------------------------> 2
          image: mysql ----------> 3
          imagePullPolicy: Always ------------->4
          command: ["echo", "SUCCESS"]  -------------------> 5

Após executar kubectl create -f my_yaml.yaml, recebo o seguinte erro:

error: error converting YAML to JSON: yaml: line 10: did not find expected key

UPDATE : Com yamllinteu recebo o seguinte erro:

root@debian:~# yamllint my_yaml.yaml
my_yaml.yaml
  8:9       error    wrong indentation: expected 12 but found 8  (indentation)
  11:41     error    syntax error: expected <block end>, but found '<scalar>'

Onde está o meu problema e como posso resolvê-lo?

Eu tenho o kernel Debian e Linux 5.x. Estou tendo o erro a seguir:

# /etc/init.d/tpm2-abrmd status
● tpm2-abrmd.service - TPM2 Access Broker and Resource Management Daemon
   Loaded: loaded (/lib/systemd/system/tpm2-abrmd.service; enabled; vendor preset: enabled)
   Active: activating (auto-restart) (Result: exit-code) since Wed 2019-11-27 08:45:01 +0330; 2s ago
  Process: 5385 ExecStart=/usr/sbin/tpm2-abrmd (code=exited, status=1/FAILURE)
 Main PID: 5385 (code=exited, status=1/FAILURE)

/dev/tpm0arquivo não existe.

O Linux precisa de TPM?
É obrigatório para Linux?

Se for necessário, como posso resolver meu problema?

Estou famillar com iptables -Fe outros recursos do iptables.
Eu preciso desabilitar iptablesdo kernel, claro que prefiro desabilitar do sysctlinvés de recompilar o kernel.

Não quero limpar /var/cache/apt/archives/, preciso deixar meus arquivos deb lá. Qual opção apt pode funcionar para mim?