在 Solaris 10 上，我通过 ssh 连接
我从一位用户那里
talk marian
并出现
[Waiting for your party to respond]
在另一侧（用户 marian，在同一台机器上）
talk: connection requested by [email protected].
talk: respond with: talk [email protected]
我做到了（作为 marian 用户）
talk [email protected]
返回 pippo 在他的终端上出现
talk: connection requested by [email protected].
talk: respond with: talk [email protected]
但屏幕冻结了 我错过了什么？
我已经尝试过 pts 和 ttys (/dev/term/a 和 /dev/term/b)
今天又是学习的一天：谁转
我输入 who -l
who -l
UUCP . Feb 22 15:57 0:14 488
LOGIN console Feb 22 15:57 0:07 494
zsmon . Feb 22 15:57 0:14 495
LOGIN console Feb 22 16:03 0:07 1011 (:0)
第一列是线路名称（ttymon），第二列是使用的 tty，第三列是创建日期
第四列？（488，494，1011..）
我登录CDE（或Gnome）桌面之前的情况
mplayer Taste\ of\ freedom-A\ man\ sing\ his\ song.mp3
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team
Playing Taste of freedom-A man sing his song.mp3
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz 2 chans s16le [0x9]
[AO SUN] Can't open audio device /dev/audio, Permission denied -> nosound.
[AO ESD] esd_open_sound failed: No such file or directory
我登录 CDE，然后远程登录 Solaris 机器（或本地），然后
mplayer Taste\ of\ freedom-A\ man\ sing\ his\ song.mp3
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team
Playing Taste of freedom-A man sing his song.mp3
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz 2 chans s16le [0x9]
AO: [sun] 48000Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
A: 0.9 (00.8) of 198.0 (03:18.0) 0.6%
MPlayer interrupted by signal 2 in module: play_audio
A: 0.9 (00.9) of 198.0 (03:18.0) 0.6%
我的问题是：谁可以更改权限？要修改哪个文件才能使这些权限永久生效，即使没有登录 cde 或 gnome？
我看到改变权限的设备是：
143130628 1 crw------- 1 myuser other 273, 0 Jan 15 00:14 /devices/pseudo/oss_sadasupport@0:sound,audio
143130630 1 crw------- 1 myuser other 273, 1 Jan 15 00:14 /devices/pseudo/oss_sadasupport@0:sound,audioctl
我在 qemu 上有一个装有 Solaris 10 的虚拟机。我安装了 opensoundsystem 来播放声音，桌面上可以看到卡（查看音量图标）
Ossinfo 成绩单不错
ossinfo
Version info: OSS 4.2 (b 2017/201702011242) (0x00040100)
Platform: SunOS/i86pc 5.10 Generic_150401-55 (solaris10)
Number of audio devices: 1
Number of audio engines: 2
Number of MIDI devices: 0
Number of mixer devices: 1
Device objects
0: osscore0 OSS common devices
1: oss_sadasupport SADA compatibility layer
2: oss_ich0 Intel ICH (2415) interrupts=5991 (11109)
MIDI devices (/dev/midi*)
Mixer devices
0: ICH AC97 Mixer (STAC9700) (Mixer 0 of device object 2)
Audio devices
Intel ICH (2415) /dev/oss/oss_ich0/pcm0 (device index 0)
Nodes
/dev/dsp -> /dev/oss/oss_ich0/pcm0
/dev/dsp_in -> /dev/oss/oss_ich0/pcm0
/dev/dsp_out -> /dev/oss/oss_ich0/pcm0
/dev/dsp_ac3 -> /dev/oss/oss_ich0/pcm0
/dev/dsp_multich -> /dev/oss/oss_ich0/pcm0
/dev/mixer -> ../devices/pseudo/osscore@0:mixer
/dev/sndstat -> ../devices/pseudo/osscore@0:sndstat
但当我想听 mp3 时，我什么也听不到，尽管程序似乎运行正常
mplayer Ace\ of\ base-The\ sign.mp3
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team
Playing Ace of base-The sign.mp3.
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz 2 chans s16le [0x9]
AO: [sun] 48000Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
A: 3.9 (03.9) of 198.0 (03:18.0) 0.8%
音量似乎还行
有什么想法吗？
尝试连接 vmix 以启用多应用声音报告设备繁忙
vmixctl attach /dev/oss/oss_ich0/pcm0
/dev/oss/oss_ich0/pcm0: Device busy
我甚至按照 archlinux wiki 的建议使用此选项配置驱动程序
vim /kernel/drv/osscore.conf
name="osscore" parent="pseudo" instance=0 ddi-no-autodetach=1 ddi-forceattach=1 vmix_no_autoattach=1
编辑 1：我还附加了虚拟混音（我必须暂时禁用 cde）。但仍然没有声音
在 Solaris10（qemu 上的虚拟机）上，我配置了 ipv6
ipsec 和防火墙已禁用
svcs -a|gegrep 'ipfilter|ipsec'
disabled 1:00:14 svc:/network/ipfilter:default
disabled 23:38:28 svc:/network/ipsec/manual-key:default
disabled 1:00:18 svc:/network/ipsec/policy:default
disabled 1:00:18 svc:/network/ipsec/ike:default
ipv6 已配置
ifconfig -a6
e1000g1: flags=2104841<UP,RUNNING,MULTICAST,DHCP,ROUTER,IPv6> mtu 1500 index 3
inet6 fe80::5254:ee:fdc7:a479/10
e1000g1:1: flags=2100841<UP,RUNNING,MULTICAST,ROUTER,IPv6> mtu 1500 index 3
inet6 418:5b17:d32a:8023::2/64
但无法 ping 通“外部”交换机（是由 libvirt 创建的 virbr），只能 ping 通自己的地址
ping -A inet6 -s 418:5b17:d32a:8023::2
PING 418:5b17:d32a:8023::2: 56 data bytes
64 bytes from 418:5b17:d32a:8023::2: icmp_seq=0. time=0.0300 ms
64 bytes from 418:5b17:d32a:8023::2: icmp_seq=1. time=0.0400 m
ping -A inet6 -s 418:5b17:d32a:8023::1
PING 418:5b17:d32a:8023::1: 56 data bytes
路线似乎正确
netstat -rn
Routing Table: IPv6
Destination/Mask Gateway Flags Ref Use If
--------------------------- --------------------------- ----- --- ------- -----
418:5b17:d32a:8023::/64 418:5b17:d32a:8023::2 U 1 98 e1000g1:1
fe80::/10 fe80::5254:ee:fdc7:a479 U 1 69 e1000g1
连接到同一虚拟交换机的另一台机器（Slackware Linux）可以 ping 通，没有任何问题
ping -6 fe80::5254:ee:fdc7:a481
PING fe80::5254:ee:fdc7:a481(fe80::5254:ee:fdc7:a481) 56 data bytes
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=1 ttl=64 time=0.029 ms
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=2 ttl=64 time=0.028 ms
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=3 ttl=64 time=0.028 ms
为什么 Solaris 网络仍然处于孤立状态？
Routeadm 报告
routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing enabled enabled
IPv6 routing enabled enabled
IPv4 forwarding enabled enabled
IPv6 forwarding enabled enabled
从外部机器我可以 ping Linux vm，但不能 ping Solaris vm。
我有一台 Solaris 服务器，它使用 ldap 进行用户身份验证，使用 kerberos 进行密码验证。用户可以更改密码，但我只遇到密码老化问题，例如：
passwd -r ldap -n 12 giovanni
Enter giovanni's password:
Permission denied
这是 passwd 的 pam.conf
passwd auth sufficient pam_passwd_auth.so.1
passwd auth required pam_dhkeys.so.1
passwd auth sufficient pam_krb5.so.1
passwd auth required pam_unix_cred.so.1
passwd auth required pam_unix_auth.so.1
我知道在 kerberos 上可以使用策略，但如果我想为用户设置密码时效呢？我必须只为该用户设置策略吗？没有办法使用 passwd 命令吗？
我想将 Solaris ipsec ike 密钥转换为适合 Libreswan 的格式。
使用命令 ikecert 我导出公钥
ikecert certdb -e 0 > public.pem
和私钥
ikecert certlocal -e 0 > public.pem
现在使用 openssl 我尝试以 pkcs12 格式进行转换...
openssl pkcs12 -export -in chiavepubblica.pem -inkey chiaveprivata.pem -out YourName.p12
返回此错误
4274747236:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
有人知道将其导出或转换为适合 libreswan 的格式的方法吗？谢谢
我想避免在 Solaris kdc 上使用旧的弱密码，只使用 AES。我已编辑 kdc.conf
master_key_type = aes256-cts-hmac-sha1-96
supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal
这些是 krb5.conf 的行
default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
permitted_encryptes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
重新启动 kdc 和 kadmin 然后..
kadmin -p kws/admin -wmypassword
Authenticating as principal kws/admin with password.
kadmin:
addprinc NFS/[email protected]
ktadd -k nfs.keytab -e aes256-cts-hmac-sha1-96 NFS/[email protected]
ktadd: Invalid argument while parsing keysalts aes256-cts-hmac-sha1-96
尝试默认..
ktadd -k nfs.keytab NFS/[email protected]
Entry for principal NFS/[email protected] with kvno 3, encryption type AES-256 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type AES-128 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type ArcFour with HMAC/md5 added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type DES cbc mode with RSA-MD5 added to keytab WRFILE:nfs.keytab.
为什么要生成 des 密钥？是否可以强制使用 AES 密码？
编辑：我找到了一种仅创建 aes256keys 的方法
ktadd -e aes256-cts:normal -k nfs.keytab NFS/[email protected]
问题仍然是找到一种强制/生成仅 aes256 密钥的方法。
这条隧道不会拆除。
root@solaris10:~# ifconfig ip.6to4tun0 down
ifconfig: setifflags: SIOCGLIFFLAGS: ip.6to4tun0: no such interface
root@solaris10:~# ifconfig ip.6to4tun0 unplumb
ifconfig: unplumb: SIOCGLIFFLAGS: ip.6to4tun0: no such interface
简短的回答是“它不存在！”但是......
root@solaris10:~# ifconfig -a|ggrep -A 11 6to4
ip.6to4tun0: flags=2200041<UP,RUNNING,NONUD,IPv6> mtu 65515 index 9
inet tunnel src 192.168.0.1
tunnel hop limit 60
inet6 fe80::203:baff:fe50:cbe6/128
界面工作
ping 192.168.0.1
192.168.0.1 is alive
ping -A inet6 fe80::203:baff:fe50:cbe6
fe80::203:baff:fe50:cbe6 is alive
一些 Solaris 10 命令（ls、find..）支持扩展属性。使用 runat 可以复制和列出扩展属性。但如何在文件中创建/插入扩展属性？在 Linux 上，我们有 chattr（chattr +i...chattr +m¹）。在 Solaris 10 上？谢谢
1 如果您不知道他们做了什么，请不要进行测试！