问题[solaris](unix)

我登录CDE（或Gnome）桌面之前的情况

mplayer Taste\ of\ freedom-A\ man\ sing\ his\ song.mp3 
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team

Playing Taste of freedom-A man sing his song.mp3
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz  2 chans  s16le [0x9]

[AO SUN] Can't open audio device /dev/audio, Permission denied  -> nosound.
[AO ESD] esd_open_sound failed: No such file or directory

我登录 CDE，然后远程登录 Solaris 机器（或本地），然后

mplayer Taste\ of\ freedom-A\ man\ sing\ his\ song.mp3 
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team

Playing Taste of freedom-A man sing his song.mp3
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz  2 chans  s16le [0x9]

AO: [sun] 48000Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
A:   0.9 (00.8) of 198.0 (03:18.0)  0.6%                                                                                


MPlayer interrupted by signal 2 in module: play_audio
A:   0.9 (00.9) of 198.0 (03:18.0)  0.6%  

我的问题是：谁可以更改权限？要修改哪个文件才能使这些权限永久生效，即使没有登录 cde 或 gnome？

我看到改变权限的设备是：

143130628      1 crw-------   1 myuser other    273,   0 Jan 15 00:14 /devices/pseudo/oss_sadasupport@0:sound,audio
143130630      1 crw-------   1 myuser other    273,   1 Jan 15 00:14 /devices/pseudo/oss_sadasupport@0:sound,audioctl

我在 qemu 上有一个装有 Solaris 10 的虚拟机。我安装了 opensoundsystem 来播放声音，桌面上可以看到卡（查看音量图标）

Ossinfo 成绩单不错

ossinfo 
Version info: OSS 4.2 (b 2017/201702011242) (0x00040100) 
Platform: SunOS/i86pc 5.10 Generic_150401-55 (solaris10)

Number of audio devices:    1
Number of audio engines:    2
Number of MIDI devices:     0
Number of mixer devices:    1


Device objects
 0: osscore0 OSS common devices
 1: oss_sadasupport SADA compatibility layer
 2: oss_ich0 Intel ICH (2415) interrupts=5991 (11109)

MIDI devices (/dev/midi*)

Mixer devices
 0: ICH AC97 Mixer (STAC9700) (Mixer 0 of device object 2)

Audio devices
Intel ICH (2415)                  /dev/oss/oss_ich0/pcm0  (device index 0)

Nodes
  /dev/dsp -> /dev/oss/oss_ich0/pcm0
  /dev/dsp_in -> /dev/oss/oss_ich0/pcm0
  /dev/dsp_out -> /dev/oss/oss_ich0/pcm0
  /dev/dsp_ac3 -> /dev/oss/oss_ich0/pcm0
  /dev/dsp_multich -> /dev/oss/oss_ich0/pcm0
  /dev/mixer -> ../devices/pseudo/osscore@0:mixer
  /dev/sndstat -> ../devices/pseudo/osscore@0:sndstat

但当我想听 mp3 时，我什么也听不到，尽管程序似乎运行正常

mplayer Ace\ of\ base-The\ sign.mp3 
MPlayer 1.1-4.8.2 (C) 2000-2012 MPlayer Team

Playing Ace of base-The sign.mp3.
libavformat version 54.6.100 (internal)
Audio only file format detected.
Load subtitles in ./
==========================================================================
Opening audio decoder: [mpg123] MPEG 1.0/2.0/2.5 layers I, II, III
AUDIO: 48000 Hz, 2 ch, s16le, 320.0 kbit/20.83% (ratio: 40000->192000)
Selected audio codec: [mpg123] afm: mpg123 (MPEG 1.0/2.0/2.5 layers I, II, III)
==========================================================================
ao2: 48000 Hz  2 chans  s16le [0x9]

AO: [sun] 48000Hz 2ch s16le (2 bytes per sample)
Video: no video
Starting playback...
A:   3.9 (03.9) of 198.0 (03:18.0)  0.8%    

音量似乎还行

有什么想法吗？

尝试连接 vmix 以启用多应用声音报告设备繁忙

vmixctl attach /dev/oss/oss_ich0/pcm0 
/dev/oss/oss_ich0/pcm0: Device busy

我甚至按照 archlinux wiki 的建议使用此选项配置驱动程序

vim /kernel/drv/osscore.conf

name="osscore" parent="pseudo" instance=0 ddi-no-autodetach=1 ddi-forceattach=1 vmix_no_autoattach=1

编辑 1：我还附加了虚拟混音（我必须暂时禁用 cde）。但仍然没有声音

在 Solaris10（qemu 上的虚拟机）上，我配置了 ipv6

ipsec 和防火墙已禁用

svcs -a|gegrep 'ipfilter|ipsec'
disabled        1:00:14 svc:/network/ipfilter:default
disabled       23:38:28 svc:/network/ipsec/manual-key:default
disabled        1:00:18 svc:/network/ipsec/policy:default
disabled        1:00:18 svc:/network/ipsec/ike:default

ipv6 已配置

ifconfig -a6
e1000g1: flags=2104841<UP,RUNNING,MULTICAST,DHCP,ROUTER,IPv6> mtu 1500 index 3
    inet6 fe80::5254:ee:fdc7:a479/10 
e1000g1:1: flags=2100841<UP,RUNNING,MULTICAST,ROUTER,IPv6> mtu 1500 index 3
    inet6 418:5b17:d32a:8023::2/64 

但无法 ping 通“外部”交换机（是由 libvirt 创建的 virbr），只能 ping 通自己的地址

ping -A inet6 -s 418:5b17:d32a:8023::2
PING 418:5b17:d32a:8023::2: 56 data bytes
64 bytes from 418:5b17:d32a:8023::2: icmp_seq=0. time=0.0300 ms
64 bytes from 418:5b17:d32a:8023::2: icmp_seq=1. time=0.0400 m

ping -A inet6 -s 418:5b17:d32a:8023::1
PING 418:5b17:d32a:8023::1: 56 data bytes

路线似乎正确

netstat -rn
Routing Table: IPv6
  Destination/Mask            Gateway                   Flags Ref   Use    If   
--------------------------- --------------------------- ----- --- ------- ----- 
418:5b17:d32a:8023::/64     418:5b17:d32a:8023::2       U       1      98 e1000g1:1 
fe80::/10                   fe80::5254:ee:fdc7:a479     U       1      69 e1000g1 

连接到同一虚拟交换机的另一台机器（Slackware Linux）可以 ping 通，没有任何问题

ping -6 fe80::5254:ee:fdc7:a481
PING fe80::5254:ee:fdc7:a481(fe80::5254:ee:fdc7:a481) 56 data bytes
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=1 ttl=64 time=0.029 ms
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=2 ttl=64 time=0.028 ms
64 bytes from fe80::5254:ee:fdc7:a481%eth0: icmp_seq=3 ttl=64 time=0.028 ms

为什么 Solaris 网络仍然处于孤立状态？

Routeadm 报告

routeadm 
              Configuration   Current              Current
                     Option   Configuration        System State
---------------------------------------------------------------
               IPv4 routing   enabled              enabled
               IPv6 routing   enabled              enabled
            IPv4 forwarding   enabled              enabled
            IPv6 forwarding   enabled              enabled

从外部机器我可以 ping Linux vm，但不能 ping Solaris vm。

我有一台 Solaris 服务器，它使用 ldap 进行用户身份验证，使用 kerberos 进行密码验证。用户可以更改密码，但我只遇到密码老化问题，例如：

passwd -r ldap -n 12 giovanni
Enter giovanni's password: 
Permission denied

这是 passwd 的 pam.conf

passwd  auth sufficient         pam_passwd_auth.so.1
passwd  auth required           pam_dhkeys.so.1
passwd  auth sufficient         pam_krb5.so.1
passwd  auth required           pam_unix_cred.so.1
passwd  auth required           pam_unix_auth.so.1

我知道在 kerberos 上可以使用策略，但如果我想为用户设置密码时效呢？我必须只为该用户设置策略吗？没有办法使用 passwd 命令吗？

我想将 Solaris ipsec ike 密钥转换为适合 Libreswan 的格式。

使用命令 ikecert 我导出公钥

ikecert certdb -e 0 > public.pem 

和私钥

ikecert certlocal -e 0 > public.pem 

现在使用 openssl 我尝试以 pkcs12 格式进行转换...

openssl pkcs12 -export -in chiavepubblica.pem -inkey chiaveprivata.pem -out YourName.p12

返回此错误

4274747236:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY

有人知道将其导出或转换为适合 libreswan 的格式的方法吗？谢谢

我想避免在 Solaris kdc 上使用旧的弱密码，只使​​用 AES。我已编辑 kdc.conf

   master_key_type = aes256-cts-hmac-sha1-96
   supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal

这些是 krb5.conf 的行

default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
permitted_encryptes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96

重新启动 kdc 和 kadmin 然后..

kadmin -p kws/admin -wmypassword
Authenticating as principal kws/admin with password.
kadmin:  

addprinc NFS/[email protected]

ktadd -k nfs.keytab -e aes256-cts-hmac-sha1-96  NFS/[email protected]
ktadd: Invalid argument while parsing keysalts aes256-cts-hmac-sha1-96

尝试默认..

ktadd -k nfs.keytab NFS/[email protected]
Entry for principal NFS/[email protected] with kvno 3, encryption type AES-256 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type AES-128 CTS mode with 96-bit SHA-1 HMAC added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type ArcFour with HMAC/md5 added to keytab WRFILE:nfs.keytab.
Entry for principal NFS/[email protected] with kvno 3, encryption type DES cbc mode with RSA-MD5 added to keytab WRFILE:nfs.keytab.

为什么要生成 des 密钥？是否可以强制使用 AES 密码？

编辑：我找到了一种仅创建 aes256keys 的方法

ktadd -e aes256-cts:normal -k nfs.keytab NFS/[email protected]

问题仍然是找到一种强制/生成仅 aes256 密钥的方法。

这条隧道不会拆除。

root@solaris10:~# ifconfig ip.6to4tun0 down   
ifconfig: setifflags: SIOCGLIFFLAGS: ip.6to4tun0: no such interface
root@solaris10:~# ifconfig ip.6to4tun0 unplumb
ifconfig: unplumb: SIOCGLIFFLAGS: ip.6to4tun0: no such interface

简短的回答是“它不存在！”但是......

root@solaris10:~# ifconfig -a|ggrep -A 11 6to4
ip.6to4tun0: flags=2200041<UP,RUNNING,NONUD,IPv6> mtu 65515 index 9
    inet tunnel src 192.168.0.1 
    tunnel hop limit 60 
    inet6 fe80::203:baff:fe50:cbe6/128 

界面工作

ping 192.168.0.1 
192.168.0.1 is alive

ping -A inet6 fe80::203:baff:fe50:cbe6    
fe80::203:baff:fe50:cbe6 is alive

一些 Solaris 10 命令（ls、find..）支持扩展属性。使用 runat 可以复制和列出扩展属性。但如何在文件中创建/插入扩展属性？在 Linux 上，我们有 chattr（chattr +i...chattr +m¹）。在 Solaris 10 上？谢谢

1 如果您不知道他们做了什么，请不要进行测试！

在 Solaris 10 上

ex -h
ex: illegal option -- h
Usage: ex [- | -s] [-l] [-L] [-wn] [-R] [-S] [-r [file]] [-t tag]
[-v] [-V] [-x] [-C] [+cmd | -c cmd] file...

我看到“-S”选项是什么意思？在旧 BSD 上表示“受限模式”，在manpage上没有记录。

我尝试使用“受限模式”打开一个文件，它接受来自外部命令的输出（因此不受限制）。

Solaris 10：cfgadm 命令显示磁盘

cfgadm -al usb3/1
Ap_Id                          Type         Receptacle   Occupant     Condition
usb3/1                         usb-storage  connected    configured   ok

还报告信息

usb3/1                         connected    configured   ok         Mfg: QEMU  Product: QEMU USB HARDDRIVE  NConfigs: 1  Config: 0  : High speed config (usb 2.0)
unavailable  usb-storage  n        /devices/pci@0,0/pci1af4,1100@4,7:1

格式没看到

sudo format
Searching for disks...done


AVAILABLE DISK SELECTIONS:
       0. c0t1d0 <ATA    -QEMU HARDDISK  -2.5+ cyl 7829 alt 2 hd 255 sec 63>
          /pci@0,0/pci1af4,1100@5/disk@1,0
Specify disk (enter its number): 

如何使磁盘可用？

EDIT1：rmformat 命令可以看到磁盘，但无法对其进行格式化/分区