home | Kadmin - Part 2

Переходите на свободное

Linux вместо Windows для организаций

mail@kadmin.ru

Nov 13

Free Veeam Auto

By kadmin Kadmin, Veeam, Windows Server No Comments

$HostName = "localhost"
$Directory = "B:\"
# Possible values: 0 - None, 4 - Dedupe-friendly, 5 - Optimal, 6 - High, 9 - Extreme 
$CompressionLevel = "5"
# Possible values: Never , Tonight, TomorrowNight, In3days, In1Week, In2Weeks, In1Month
$Retention = "In1Week"

$SMTPServer = "smtp.domain.ru"
$EmailFrom = "veeam@domain.ru"
$EmailTo = "admin@domain.ru"
$EmailSubject = "Free Veeam Auto"
$style = "

<style>BODY{font-family: Arial; font-size: 10pt;}"
$style = $style + "TABLE{border: 1px solid black; border-collapse: collapse;}"
$style = $style + "TH{border: 1px solid black; background: #dddddd; padding: 5px; }"
$style = $style + "TD{border: 1px solid black; padding: 5px; }"
$style = $style + "</style>"
$MesssagyBody = @()
Asnp VeeamPSSnapin
$VMs = Find-VBRHvEntity | select -skip 2
foreach ($VM in $VMs){
  $ZIPSession = Start-VBRZip -Entity $VM -Folder $Directory -Compression $CompressionLevel -DisableQuiesce:(!$EnableQuiescence) -AutoDelete $Retention
  $TaskSessions = $ZIPSession.GetTaskSessions().logger.getlog().updatedrecords 
  $FailedSessions = $TaskSessions | where {$_.status -eq "EWarning" -or $_.Status -eq "EFailed"} 
  if ($FailedSessions -ne $Null) { 
    $MesssagyBody = $MesssagyBody + ($ZIPSession | Select-Object @{n="Name";e={($_.name).Substring(0, $_.name.LastIndexOf("("))}} ,@{n="Start Time";e={$_.CreationTime}},@{n="End Time";e= 
    {$_.EndTime}},Result,@{n="Details";e={$FailedSessions.Title}})
  } 
  else {
    $MesssagyBody = $MesssagyBody + ($ZIPSession | Select-Object @{n="Name";e={($_.name).Substring(0, $_.name.LastIndexOf("("))}} ,@{n="Start Time";e={$_.CreationTime}},@{n="End Time";e= 
    {$_.EndTime}},Result,@{n="Details";e={($TaskSessions | sort creationtime -Descending | select -first 1).Title}})
  }
} 
$Message = New-Object System.Net.Mail.MailMessage $EmailFrom, $EmailTo 
$Message.Subject = $EmailSubject 
$Message.IsBodyHTML = $True
$Message.Body = $MesssagyBody | ConvertTo-Html -head $style | Out-String 
$SMTP = New-Object Net.Mail.SmtpClient($SMTPServer) 
$SMTP.Send($Message)

$HostName = "localhost"

$Directory = "B:\"

# Possible values: 0 - None, 4 - Dedupe-friendly, 5 - Optimal, 6 - High, 9 - Extreme

$CompressionLevel = "5"

# Possible values: Never , Tonight, TomorrowNight, In3days, In1Week, In2Weeks, In1Month

$Retention = "In1Week"

$SMTPServer = "smtp.domain.ru"

$EmailFrom = "veeam@domain.ru"

$EmailTo = "admin@domain.ru"

$EmailSubject = "Free Veeam Auto"

$style = "

$style = $style + "TABLE{border: 1px solid black; border-collapse: collapse;}"

$style = $style + "TH{border: 1px solid black; background: #dddddd; padding: 5px; }"

$style = $style + "TD{border: 1px solid black; padding: 5px; }"

$style = $style + "</style>"

$MesssagyBody = @()

Asnp VeeamPSSnapin

$VMs = Find-VBRHvEntity | select -skip 2

foreach ($VM in $VMs){

$ZIPSession = Start-VBRZip -Entity $VM -Folder $Directory -Compression $CompressionLevel -DisableQuiesce:(!$EnableQuiescence) -AutoDelete $Retention

$TaskSessions = $ZIPSession.GetTaskSessions().logger.getlog().updatedrecords

$FailedSessions = $TaskSessions | where {$_.status -eq "EWarning" -or $_.Status -eq "EFailed"}

if ($FailedSessions -ne $Null) {

$MesssagyBody = $MesssagyBody + ($ZIPSession | Select-Object @{n="Name";e={($_.name).Substring(0, $_.name.LastIndexOf("("))}} ,@{n="Start Time";e={$_.CreationTime}},@{n="End Time";e=

{$_.EndTime}},Result,@{n="Details";e={$FailedSessions.Title}})

}

else {

$MesssagyBody = $MesssagyBody + ($ZIPSession | Select-Object @{n="Name";e={($_.name).Substring(0, $_.name.LastIndexOf("("))}} ,@{n="Start Time";e={$_.CreationTime}},@{n="End Time";e=

{$_.EndTime}},Result,@{n="Details";e={($TaskSessions | sort creationtime -Descending | select -first 1).Title}})

}

$Message = New-Object System.Net.Mail.MailMessage $EmailFrom, $EmailTo

$Message.Subject = $EmailSubject

$Message.IsBodyHTML = $True

$Message.Body = $MesssagyBody | ConvertTo-Html -head $style | Out-String

$SMTP = New-Object Net.Mail.SmtpClient($SMTPServer)

$SMTP.Send($Message)

По мотивам https://www.veeam.com/blog/ru/veeam-backup-free-edition-now-with-powershell.html

Jun 03

Deleted mailboxes to PST

By kadmin Exchange, Kadmin No Comments

Ищем удалённые ящики в одной или во всех базах

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null}
$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов*"}
$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null}
$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов Иван*"}

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null}

$mailboxes = Get-mailboxdatabase | Get-MailboxStatistics | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов*"}

$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null}

$mailboxes = Get-MailboxStatistics -Database base | where-object { $_.DisconnectDate -ne $null -and $_.DisplayName -like "Иванов Иван*"}

Создаём временных пользователей (без однофамильцев)

foreach ($mailbox in $mailboxes){ New-ADUser -Path "ou=test,dc=domain,dc=com" -Name $mailbox.displayname.split(" ")[0] -enable $True -accountPassword (ConvertTo-SecureString -AsPlainText "!!qwerty2018" -Force)}

1	foreach ($mailbox in $mailboxes){ New-ADUser -Path "ou=test,dc=domain,dc=com" -Name $mailbox.displayname.split(" ")[0] -enable $True -accountPassword (ConvertTo-SecureString -AsPlainText "!!qwerty2018" -Force)}

Подключаем ящики к пользователям

foreach ($mailbox in $mailboxes) {Connect-Mailbox -Database $mailbox.database -Identity $mailbox -User $mailbox.displayname.split(" ")[0]}

1	foreach ($mailbox in $mailboxes) {Connect-Mailbox -Database $mailbox.database -Identity $mailbox -User $mailbox.displayname.split(" ")[0]}

Сохраняем в PST

foreach ($mailbox in $mailboxes) {
$box = Get-Mailbox -Identity $mailbox.displayname.split(" ")[0]
New-MailboxExportRequest -Name $box.name -Mailbox $box -FilePath \\server\folder\$box.pst
}

foreach ($mailbox in $mailboxes) {

$box = Get-Mailbox -Identity $mailbox.displayname.split(" ")[0]

New-MailboxExportRequest -Name $box.name -Mailbox $box -FilePath \\server\folder\$box.pst

}

May 10

Exchange. Перенос адресов в контакты

By kadmin Exchange, Kadmin, PowerShell, Windows Server No Comments

Формат файла:

DN,objectClass,mail
"CN=Jon Smith,OU=staff,DC=contoso,DC=com",contact,j.smith@contoso.com

1 2	DN,objectClass,mail "CN=Jon Smith,OU=staff,DC=contoso,DC=com",contact,j.smith@contoso.com

Экспорт

csvde.exe -u -d "OU=staff,DC=contoso,dc=com" -r "(&(objectClass=user)(company=contoso))" -l "objectClass,userPrincipalName" -f contoso_contacts.csv
(cat .\contoso_contacts.csv).replace("userPrincipalName","mail") | %{$_ -replace "user", "contact"} | %{$_ -replace "OU=staff,DC=contoso,dc=com","OU=slaves,DC=gontozo,dc=com"} > .\contoso_contacts_in_gontozo.csv

csvde.exe -u -d "OU=staff,DC=contoso,dc=com" -r "(&(objectClass=user)(company=contoso))" -l "objectClass,userPrincipalName" -f contoso_contacts.csv

(cat .\contoso_contacts.csv).replace("userPrincipalName","mail") | %{$_ -replace "user", "contact"} | %{$_ -replace "OU=staff,DC=contoso,dc=com","OU=slaves,DC=gontozo,dc=com"} > .\contoso_contacts_in_gontozo.csv

Импорт

csvde -i -f contoso_contacts_in_gontozo.csv
get-contact -organizationalunit slaves -RecipientTypeDetails Contact -Filter 'WindowsEmailAddress -ne $null' |  %{ enable-mailcontact -Identity $_ -ExternalEmailAddress $_.WindowsEmailAddress.toString() }

1 2	csvde -i -f contoso_contacts_in_gontozo.csv get-contact -organizationalunit slaves -RecipientTypeDetails Contact -Filter 'WindowsEmailAddress -ne $null' \| %{ enable-mailcontact -Identity $_ -ExternalEmailAddress $_.WindowsEmailAddress.toString() }

Apr 17

Exchange. URLs

By kadmin Exchange, Kadmin No Comments

Set-ClientAccessServer -Identity mx01.contoso.com -AutodiscoverServiceInternalUri https://mail.contoso.com/autodiscover/autodiscover.xml
Set-WebServicesVirtualDirectory -Identity "mx01.contoso.com\EWS (Default Web Site)" -InternalUrl https://mail.contoso.com/ews/exchange.asmx
Set-OABVirtualDirectory -Identity "mx01.contoso.com\oab (Default Web Site)" -InternalUrl https://mail.contoso.com/oab
Set-ActiveSyncVirtualDirectory -Identity "mx01.contoso.com\Microsoft-Server-ActiveSync (Default Web Site)" -InternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync
Set-OWAVirtualDirectory -Identity "mx01.contoso.com\owa (Default Web Site)" -InternalUrl https://mail.contoso.com/owa
Set-ECPVirtualDirectory -Identity "mx01.contoso.com\ecp (Default Web Site)" -InternalUrl https://mail.contoso.com/ecp
Set-OutlookAnywhere -Identity "mx01.contoso.com\Rpc (Default Web Site)" -InternalHostname mail.contoso.com -InternalClientsRequireSsl $true

Set-ClientAccessServer -Identity mx01.contoso.com -AutodiscoverServiceInternalUri https://mail.contoso.com/autodiscover/autodiscover.xml

Set-WebServicesVirtualDirectory -Identity "mx01.contoso.com\EWS (Default Web Site)" -InternalUrl https://mail.contoso.com/ews/exchange.asmx

Set-OABVirtualDirectory -Identity "mx01.contoso.com\oab (Default Web Site)" -InternalUrl https://mail.contoso.com/oab

Set-ActiveSyncVirtualDirectory -Identity "mx01.contoso.com\Microsoft-Server-ActiveSync (Default Web Site)" -InternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync

Set-OWAVirtualDirectory -Identity "mx01.contoso.com\owa (Default Web Site)" -InternalUrl https://mail.contoso.com/owa

Set-ECPVirtualDirectory -Identity "mx01.contoso.com\ecp (Default Web Site)" -InternalUrl https://mail.contoso.com/ecp

Set-OutlookAnywhere -Identity "mx01.contoso.com\Rpc (Default Web Site)" -InternalHostname mail.contoso.com -InternalClientsRequireSsl $true

Mar 04

Rsync everything

By kadmin Kadmin No Comments

Подключаем внешний диск nano /etc/fstab

/dev/sdc1     /media/rsync     auto     noauto,x-systemd.automount     0 2

1	/dev/sdc1 /media/rsync auto noauto,x-systemd.automount 0 2

mkdir /media/rsync

1	mkdir /media/rsync

systemctl daemon-reload
systemctl restart remote-fs.target
systemctl restart local-fs.target

systemctl daemon-reload

systemctl restart remote-fs.target

systemctl restart local-fs.target

screen
rsync -aAXv / --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/media/*","/lost+found"}  /media/rsync

1 2	screen rsync -aAXv / --exclude={"/dev/","/proc/","/sys/","/tmp/","/run/","/mnt/","/media/*","/lost+found"} /media/rsync

Feb 17

Gnome FreeRDP

By kadmin AD, CentOS, Kadmin, RDS No Comments

После введения Centos в домен можно в /etc/skel положить:

xfreerdp -k 0x00000409 -a 15 -z --plugin cliprdr -u ${USER} -p $(zenity --entry --title="Удалённый рабочий стол" --text="Введите ваш пароль:" --hide-text) terminal.domain.local

1	xfreerdp -k 0x00000409 -a 15 -z --plugin cliprdr -u ${USER} -p $(zenity --entry --title="Удалённый рабочий стол" --text="Введите ваш пароль:" --hide-text) terminal.domain.local

И каждый зашедший сможет подключится к Windows RDS из под Linux введя лишь пароль в гуй окошке.
Если каждый раз необходимо вводить имя пользователя (например когда компьютер с Linux не в домене) то можно использовать следующую конструкцию:

xfreerdp -k 0x00000409 -f -z -x 80 --plugin cliprdr --ignore-certificate -u $(zenity --entry --title="Имя пользователя" --text="")  -p $(zenity --entry --title="Пароль" --hide-text --text="") --plugin rdpdr --data disk:Desktop:/home/user/Рабочий\ стол/ -- terminal.domain.com

1	xfreerdp -k 0x00000409 -f -z -x 80 --plugin cliprdr --ignore-certificate -u $(zenity --entry --title="Имя пользователя" --text="") -p $(zenity --entry --title="Пароль" --hide-text --text="") --plugin rdpdr --data disk:Desktop:/home/user/Рабочий\ стол/ -- terminal.domain.com

В новом синтаксисе

xfreerdp /u:$(zenity --entry --title="Имя пользователя" --text="") /p:$(zenity --entry --title="Пароль" --hide-text --text="") /f /drive:Desktop,/home/${USER}@mcs-spb.com/Рабочий\ стол/ /cert-ignore +clipboard +fonts +toggle-fullscreen /v:terminal.domain.com

1	xfreerdp /u:$(zenity --entry --title="Имя пользователя" --text="") /p:$(zenity --entry --title="Пароль" --hide-text --text="") /f /drive:Desktop,/home/${USER}@mcs-spb.com/Рабочий\ стол/ /cert-ignore +clipboard +fonts +toggle-fullscreen /v:terminal.domain.com

xfreerdp /u:${USER} /p:$(zenity --entry --title="Пароль" --hide-text --text="") /f /drive:Desktop,/home/${USER}@mcs-spb.com/Рабочий\ стол/ /cert-ignore +clipboard +fonts +toggle-fullscreen /v:terminal.domain.com

1	xfreerdp /u:${USER} /p:$(zenity --entry --title="Пароль" --hide-text --text="") /f /drive:Desktop,/home/${USER}@mcs-spb.com/Рабочий\ стол/ /cert-ignore +clipboard +fonts +toggle-fullscreen /v:terminal.domain.com

Jan 23

Centos в домене (sssd)

By kadmin AD, CentOS, Kadmin No Comments

Для Centos 7 все тепрь совсем просто:

yum -y install epel-release
yum -y install realmd sssd oddjob oddjob-mkhomedir adcli samba-common
realm join --user admin@example.com EXAMPLE.COM

yum -y install epel-release

yum -y install realmd sssd oddjob oddjob-mkhomedir adcli samba-common

realm join --user admin@example.com EXAMPLE.COM

ну и use_fully_qualified_names = False в /etc/sssd/sssd.conf

В Centos 6 ставим:

yum -y install epel-release
yum -y install adcli authconfig sssd krb5-workstation

1 2	yum -y install epel-release yum -y install adcli authconfig sssd krb5-workstation

DC в /etc/resolv.conf
Правим /etc/krb5.conf

[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
[realms]
EXAMPLE.COM = {
kdc = dc.example.com
admin_server = dc.example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM

[libdefaults]

default_realm = EXAMPLE.COM

dns_lookup_realm = true

dns_lookup_kdc = true

ticket_lifetime = 24h

renew_lifetime = 7d

forwardable = true

[realms]

EXAMPLE.COM = {

kdc = dc.example.com

admin_server = dc.example.com

}

[domain_realm]

.example.com = EXAMPLE.COM

example.com = EXAMPLE.COM

Подключаем к AD:
adcli join example.com -U АДМИН
Проверяем:
klist -k

Правим /etc/sssd/sssd.conf

[sssd]
services = nss, pam, ssh, autofs
config_file_version = 2
domains = EXAMPLE.COM
[domain/EXAMPLE.COM]
id_provider = ad
default_shell = /bin/bash
fallback_homedir = /home/%d/%u
#use_fully_qualified_names = True

[sssd]

services = nss, pam, ssh, autofs

config_file_version = 2

domains = EXAMPLE.COM

[domain/EXAMPLE.COM]

id_provider = ad

default_shell = /bin/bash

fallback_homedir = /home/%d/%u

#use_fully_qualified_names = True

chown root:root /etc/sssd/sssd.conf
chmod 0600 /etc/sssd/sssd.conf
authconfig --update --enablesssd --enablesssdauth
service sssd start
chkconfig sssd on

chown root:root /etc/sssd/sssd.conf

chmod 0600 /etc/sssd/sssd.conf

authconfig --update --enablesssd --enablesssdauth

service sssd start

chkconfig sssd on

Правим /etc/pam.d/system-auth , первой строкой session:

session optional pam_mkhomedir.so skel=/etc/skel umask=077

1	session optional pam_mkhomedir.so skel=/etc/skel umask=077

Jan 18

SpamAssassin

By kadmin CentOS, Exchange, Kadmin, Linux No Comments

yum install spamassassin
groupadd spamassassin
useradd -g spamassassin -s /bin/false -d /usr/local/spamassassin spamassassin

yum install spamassassin

groupadd spamassassin

useradd -g spamassassin -s /bin/false -d /usr/local/spamassassin spamassassin

nano /etc/mail/spamassassin/local.cf

1	nano /etc/mail/spamassassin/local.cf

nano /etc/postfix/master.cf

1	nano /etc/postfix/master.cf

smtp      inet  n       -       n       -       -       smtpd -o content_filter=spamassassin
spamassassin unix -     n       n       -       -       pipe user=spamassassin argv=/usr/bin/spamc -f -e  /usr/sbin/sendmail -oi -f ${sender} ${recipient}

1 2	smtp inet n - n - - smtpd -o content_filter=spamassassin spamassassin unix - n n - - pipe user=spamassassin argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}

nano /etc/postfix/main.cf

1	nano /etc/postfix/main.cf

myhostname = mail.domain.ru #SPF
mydomain = domain.ru
myorigin = $mydomain
inet_interfaces = all
transport_maps = hash:/etc/postfix/transport
relay_domains = domain.ru

myhostname = mail.domain.ru #SPF

mydomain = domain.ru

myorigin = $mydomain

inet_interfaces = all

transport_maps = hash:/etc/postfix/transport

relay_domains = domain.ru

nano /etc/postfix/transport

1	nano /etc/postfix/transport

domain.ru smtp:10.10.10.10

1	domain.ru smtp:10.10.10.10

postmap /etc/postfix/transport

1	postmap /etc/postfix/transport

systemctl enable postfix
systemctl enable spamassassin
systemctl start postfix
systemctl start spamassassin

systemctl enable postfix

systemctl enable spamassassin

systemctl start postfix

systemctl start spamassassin

spamassassin -D --lint 2 &gt; &amp;1 | grep -i failed

1	spamassassin -D --lint 2 > &1 \| grep -i failed

cpan Geo::IP 
cpan Net::Patricia
cpan Digest::SHA1
cpan Razor2::Client::Agent
cpan  Mail::SPF

cpan Geo::IP

cpan Net::Patricia

cpan Digest::SHA1

cpan Razor2::Client::Agent

cpan Mail::SPF

openssl genrsa -des3 -out mail.domain.ru.key 4096
chmod 600 mail.domain.ru.key
openssl req -new -key mail.domain.ru.key -out mail.domain.ru.csr
openssl x509 -req -days 3650 -in mail.domain.ru.csr -signkey mail.domain.ru.key -out mail.domain.ru.crt
openssl rsa -in mail.domain.ru.key -out mail.domain.ru.key.nopass
mv mail.domain.ru.key.nopass mail.domain.ru.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
chmod 600 mail.domain.ru.key
chmod 600 cakey.pem

postconf -e 'smtpd_tls_auth_only = no'
postconf -e 'smtp_use_tls = yes'
postconf -e 'smtpd_use_tls = yes'
postconf -e 'smtp_tls_note_starttls_offer = yes'
postconf -e 'smtpd_tls_key_file = /root/mail.domain.ru.key'
postconf -e 'smtpd_tls_cert_file = /root/mail.domain.ru.crt'
postconf -e 'smtpd_tls_CAfile = /root/cacert.pem'
postconf -e 'smtpd_tls_loglevel = 1'
postconf -e 'smtpd_tls_received_header = yes'
postconf -e 'smtpd_tls_session_cache_timeout = 3600s'
postconf -e 'tls_random_source = dev:/dev/urandom'

openssl genrsa -des3 -out mail.domain.ru.key 4096

chmod 600 mail.domain.ru.key

openssl req -new -key mail.domain.ru.key -out mail.domain.ru.csr

openssl x509 -req -days 3650 -in mail.domain.ru.csr -signkey mail.domain.ru.key -out mail.domain.ru.crt

openssl rsa -in mail.domain.ru.key -out mail.domain.ru.key.nopass

mv mail.domain.ru.key.nopass mail.domain.ru.key

openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650

chmod 600 mail.domain.ru.key

chmod 600 cakey.pem

postconf -e 'smtpd_tls_auth_only = no'

postconf -e 'smtp_use_tls = yes'

postconf -e 'smtpd_use_tls = yes'

postconf -e 'smtp_tls_note_starttls_offer = yes'

postconf -e 'smtpd_tls_key_file = /root/mail.domain.ru.key'

postconf -e 'smtpd_tls_cert_file = /root/mail.domain.ru.crt'

postconf -e 'smtpd_tls_CAfile = /root/cacert.pem'

postconf -e 'smtpd_tls_loglevel = 1'

postconf -e 'smtpd_tls_received_header = yes'

postconf -e 'smtpd_tls_session_cache_timeout = 3600s'

postconf -e 'tls_random_source = dev:/dev/urandom'

« Previous 1 2 3 4 … 12 Next »