[Gelöst] 7330 SL cpmaccfg

sharbich · 21 Jan 2015

Okay, ups!
Erstmal Fernzugang deaktiviert. Werde mir jetzt schnellst möglich Infos über den Hack besorgen. Habe schon rausgefunden, dass es über die Quelltextansicht im Browser funktioniert beim Aufruf einer bistimmten URL-Adresse, mit dem entsprechenden encoded Schlüssel (0-5).

Danke, von Stefan Harbich

sharbich · 25 Jan 2015

Hallo Ihr Lieben,

es hat lange gedauert aber nur ist es vollbracht. Der Hinweis auf die brinterfaces war gut. Vielen Dank

Lieben Gruß von Stefan Harbich

sharbich · 28 Feb 2015

Hallo Ihr Lieben,

beigefügt meine angepasste ar7.cfg Datei

Code:

        ethinterfaces {
                name = "eth0";
                dhcp = no;
                ipaddr = 192.168.10.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "eth0:0";
                dhcp = no;
                ipaddr = 169.254.1.1;
                netmask = 255.255.0.0;
                dstipaddr = 0.0.0.0;
                dhcpenabled = yes;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
               name = "eth1";
                dhcp = no;
                ipaddr = 192.168.20.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                dhcpenabled = yes;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "wlan";
                dhcp = no;
                ipaddr = 192.168.30.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "ath0", "wdsup1", "wdsdw1", "wdsdw2", "wdsdw3",
                             "wdsdw4";
                dhcpenabled = yes;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        }
        brinterfaces {
                name = "lan:0";
                dhcp = no;
                ipaddr = 169.254.1.1;
                netmask = 255.255.0.0;
                dstipaddr = 0.0.0.0;
                interfaces = "eth0", "eth1";
                dhcpenabled = yes;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "lan";
                dhcp = no;
                ipaddr = 192.168.30.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "wdsup1", "wdsdw1", "wdsdw2", "wdsdw3",
                             "wdsdw4", "ath0";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "intern";
                dhcp = no;
                ipaddr = 192.168.10.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "eth0", "ath0";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "dmz";
                dhcp = no;
                ipaddr = 192.168.20.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "eth1", "ath0";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "guest";
                dhcp = no;
                ipaddr = 192.168.179.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "guest?*", "wlan_guest", "guest_ct*",
                             "guest_st*";
                dhcpenabled = yes;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = yes;
                is_guest = yes;
                is_hotspot = no;
        } {
                name = "hotspot";
                dhcp = no;
                ipaddr = 0.0.0.0;
                netmask = 0.0.0.0;
                dstipaddr = 0.0.0.0;
                interfaces = "hotspot?*", "hspot_ct*", "hspot_st*";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = yes;
                is_guest = yes;
                is_hotspot = yes;
        }

Das erste Interface unter "brinterfaces" muss zwingend das interfaces = "eth0", "eth1"; aufweisen, sonst wird beim reboot immer der Standardeintrag gezogen. Nun habe ich aber das Problem das mein DHCP-Server mit der IP-Adresse 192.168.20.20 keine IP-Adressen zuweisen kann. D.h. wenn sich ein WLAN Gerät anmeldet bekommt dieses keine IP-Adresse zugewiesen. Obwohl ich iptables noch nicht scharf geschaltet habe. Ich kann vom Server alle Gateway IP-Adressen anpingen (192.168.10.1, 192.168.20.1 und 192.168.30.1). womit könnte das zusammenhängen?

Lieben Gruß von Stefan Harbich

sharbich · 28 Feb 2015

Hallo Ihr Lieben,

ich habe Euch mal mein Logfile vom LDAP-Server eigefügt.

Code:

Feb 28 22:30:46 192.168.20.1 hostapd: ath0: STA 00:37:6d:9e:94:4d IEEE 802.11: associated
Feb 28 22:30:53 dsme01 rsyslogd-2177: imuxsock lost 2530 messages from pid 12468 due to rate-limiting
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]:  20r
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: read active on 20
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20)
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20): got connid=1004
Feb 28 22:30:53 dsme01 slapd[12468]: connection_read(20): checking for input on id=1004
Feb 28 22:30:53 dsme01 slapd[12468]: op tag 0x63, time 1425159053
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=77 do_search
Feb 28 22:30:53 dsme01 slapd[12468]: >>> dnPrettyNormal: <dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: <<< dnPrettyNormal: <dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>, <dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: SRCH "dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" 0 0
Feb 28 22:30:53 dsme01 slapd[12468]:     0 0 0
Feb 28 22:30:53 dsme01 slapd[12468]: begin get_filter
Feb 28 22:30:53 dsme01 slapd[12468]: EQUALITY
Feb 28 22:30:53 dsme01 slapd[12468]: end get_filter 0
Feb 28 22:30:53 dsme01 slapd[12468]:     filter: (objectClass=dlzZone)
Feb 28 22:30:53 dsme01 slapd[12468]:     attrs:
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=77 SRCH base="dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" scope=0 deref=0 filter="(objectClass=dlzZone)"
Feb 28 22:30:53 dsme01 slapd[12468]: ==> limits_get: conn=1004 op=77 self="cn=admin,ou=dns,dc=xyz,dc=de" this="dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de"
Feb 28 22:30:53 dsme01 slapd[12468]: => hdb_search
Feb 28 22:30:53 dsme01 slapd[12468]: bdb_dn2entry("dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de")
Feb 28 22:30:53 dsme01 slapd[12468]: => hdb_dn2id("dlzZoneName=1.20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de")
Feb 28 22:30:53 dsme01 slapd[12468]: <= hdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30987)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: disclose access to "ou=dns,dc=xyz,dc=de" "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr entry
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "ou=dns,dc=xyz,dc=de", attr "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to all values by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: disclose access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: disclose access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_result: conn=1004 op=77 p=3
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_result: err=10 matched="ou=dns,dc=xyz,dc=de" text=""
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_response: msgid=78 tag=101 err=32
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=77 SEARCH RESULT tag=101 err=32 nentries=0 text=
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]:  20r
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: read active on 20
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20)
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20): got connid=1004
Feb 28 22:30:53 dsme01 slapd[12468]: connection_read(20): checking for input on id=1004
Feb 28 22:30:53 dsme01 slapd[12468]: op tag 0x63, time 1425159053
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=78 do_search
Feb 28 22:30:53 dsme01 slapd[12468]: >>> dnPrettyNormal: <dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: <<< dnPrettyNormal: <dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>, <dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: SRCH "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" 0 0
Feb 28 22:30:53 dsme01 slapd[12468]:     0 0 0
Feb 28 22:30:53 dsme01 slapd[12468]: begin get_filter
Feb 28 22:30:53 dsme01 slapd[12468]: EQUALITY
Feb 28 22:30:53 dsme01 slapd[12468]: end get_filter 0
Feb 28 22:30:53 dsme01 slapd[12468]:     filter: (objectClass=dlzZone)
Feb 28 22:30:53 dsme01 slapd[12468]:     attrs:
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=78 SRCH base="dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" scope=0 deref=0 filter="(objectClass=dlzZone)"
Feb 28 22:30:53 dsme01 slapd[12468]: ==> limits_get: conn=1004 op=78 self="cn=admin,ou=dns,dc=xyz,dc=de" this="dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de"
Feb 28 22:30:53 dsme01 slapd[12468]: => hdb_search
Feb 28 22:30:53 dsme01 slapd[12468]: bdb_dn2entry("dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de")
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: search access to "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr entry
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de", attr "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to all values by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: search access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: search access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: base_candidates: base: "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" (0x000000a1)
Feb 28 22:30:53 dsme01 slapd[12468]: => test_filter
Feb 28 22:30:53 dsme01 slapd[12468]:     EQUALITY
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: search access to "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" "objectClass" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr objectClass
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de", attr "objectClass" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to value by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: search access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: search access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: <= test_filter 6
Feb 28 22:30:53 dsme01 slapd[12468]: => send_search_entry: conn 1004 dn="dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de"
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access to "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr entry
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de", attr "entry" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to all values by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: result not in cache (dlzZoneName)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access to "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" "dlzZoneName" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr dlzZoneName
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de", attr "dlzZoneName" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to value by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: result not in cache (objectClass)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access to "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" "objectClass" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [3] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dnpat: [4] .*uid=([^,]+),ou=users,dc=xyz,dc=de nsub: 1
Feb 28 22:30:53 dsme01 slapd[12468]: => dn: [5] 
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_get: [6] attr objectClass
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: access to entry "dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de", attr "objectClass" requested
Feb 28 22:30:53 dsme01 slapd[12468]: => acl_mask: to value by "cn=admin,ou=dns,dc=xyz,dc=de", (=0) 
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: uid=lamdaemon,ou=users,dc=xyz,dc=de
Feb 28 22:30:53 dsme01 slapd[12468]: <= check a_dn_pat: *
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] applying read(=rscxd) (stop)
Feb 28 22:30:53 dsme01 slapd[12468]: <= acl_mask: [2] mask: read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => slap_access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: read access granted by read(=rscxd)
Feb 28 22:30:53 dsme01 slapd[12468]: => access_allowed: result was in cache (objectClass)
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=78 ENTRY dn="dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de"
Feb 28 22:30:53 dsme01 slapd[12468]: <= send_search_entry: conn 1004 exit.
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_result: conn=1004 op=78 p=3
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_result: err=0 matched="" text=""
Feb 28 22:30:53 dsme01 slapd[12468]: send_ldap_response: msgid=79 tag=101 err=0
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=78 SEARCH RESULT tag=101 err=0 nentries=1 text=
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]:  20r
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: read active on 20
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20)
Feb 28 22:30:53 dsme01 slapd[12468]: connection_get(20): got connid=1004
Feb 28 22:30:53 dsme01 slapd[12468]: connection_read(20): checking for input on id=1004
Feb 28 22:30:53 dsme01 slapd[12468]: op tag 0x63, time 1425159053
Feb 28 22:30:53 dsme01 slapd[12468]: conn=1004 op=79 do_search
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on 1 descriptor
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: activity on:
Feb 28 22:30:53 dsme01 slapd[12468]: 
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=8 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=9 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: daemon: epoll: listen=10 active_threads=0 tvp=zero
Feb 28 22:30:53 dsme01 slapd[12468]: >>> dnPrettyNormal: <dlzHostName=@,dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: <<< dnPrettyNormal: <dlzHostName=@,dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>, <dlzHostName=@,dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de>
Feb 28 22:30:53 dsme01 slapd[12468]: SRCH "dlzHostName=@,dlzZoneName=20.168.192.in-addr.arpa,ou=dns,dc=xyz,dc=de" 2 0
Feb 28 22:30:53 dsme01 slapd[12468]:     0 0 0
Feb 28 22:30:53 dsme01 slapd[12468]: begin get_filter
Feb 28 22:30:53 dsme01 slapd[12468]: EQUALITY
Feb 28 22:30:53 dsme01 slapd[12468]: end get_filter 0
Feb 28 22:30:53 dsme01 slapd[12468]:     filter: (objectClass=dlzAbstractRecord)
Feb 28 22:30:53 dsme01 slapd[12468]:     attrs:
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzTTL
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzType
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzPreference
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzData
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzIPAddr
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzPrimaryNS
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzAdminEmail
Feb 28 22:30:53 dsme01 slapd[12468]:  dlzSerial
Feb 28 22:30:53 dsme01 rsyslogd-2177: imuxsock begins to drop messages from pid 12468 due to rate-limiting
Feb 28 22:30:46 192.168.20.1 kernel: [ 1909.640000] [ieee80211_ioctl_setmlme] non sta mode, skip to set bssid
Feb 28 22:30:46 192.168.20.1 hostapd: ath0: STA 00:37:6d:9e:94:4d WPA: pairwise key handshake completed (RSN)

Was mir spanisch vorkommt is, das ich die Anfrage nicht im LDAP Log sehe. Über tcpdump port 67 bekomme ich folgende Meldungen angezeigt

Code:

01:10:27.917043 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:10:50.969061 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:10:54.049778 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:10:57.129956 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:11:20.248502 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:11:23.328768 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548
01:11:26.408785 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:25:90:d6:5c:f0 (oui Unknown), length 548

Lieben Gruß von Stefan Harbich

sharbich · 1 Mrz 2015

Hallo Ihr Lieben,

ich konnte das Problem weiter eingränzen. So wie es aussieht kommt die BOOTP/DHCP Anfrage am LAN Interface an

Code:

root@rome01:/var/mod/root# tcpdump -i lan port 68
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on lan, link-type EN10MB (Ethernet), capture size 65535 bytes
10:31:05.103865 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:37:6d:9e:94:4d (oui Unknown), length 309
10:31:08.078500 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:37:6d:9e:94:4d (oui Unknown), length 309
10:31:15.262148 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:37:6d:9e:94:4d (oui Unknown), length 309
10:31:31.871295 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:37:6d:9e:94:4d (oui Unknown), length 309

wird jedoch nicht weitergereicht an das eth1 Interface wo der DHCP-Server sich befindet.

Code:

root@rome01:/var/mod/root# tcpdump -i eth1 port 68
tcpdump: WARNING: eth1: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes

Wie kann ich das nun realisieren? GGf. über ein DHCP-Relay oder über iptables? Könnt Ihr mich hier unterstützen?

Lieben Gruß von Stefan Harbich

PeterPawn · 1 Mrz 2015

sharbisch schrieb:
Könnt Ihr mich hier unterstützen?

Du bindest die Interfaces ständig neu zusammen und hast - meine Meinung - total den Überblick verloren, welches Interface da mit welchem am Ende in einer gemeinsamen Bridge steckt.

Erst konfigurierst Du eine Bridge aus eth0 und eth1, dann ath0 in eine "lan"-Bridge, dann eth0 und ath0 zur "intern"-Bridge und zu guter Letzt noch eth1 und ath0 zur "dmz"-Bridge. Hast Du auch nur ein einziges Mal mit "brctl show" nachgesehen, was da am Ende von übrig bleibt? Ich will es nicht beschwören, aber ich wäre schon mehr als verblüfft, wenn ein einzelnes Interface tatsächlich problemlos in mehr als einer Bridge ein Member sein könnte.

Mein persönlicher Eindruck: Das ist mehr fröhliches Probieren als systematisches Nachdenken und nach einer Lösung suchen ... hinzu kommt immer noch die Firmware-Version 04.91 als Basis, wenn die Signatur stimmt. Ich weiß nicht, wie es anderen da ergeht, aber ich habe auch keine Lust mehr, hier noch großartig Zeit zu investieren.

sharbich · 1 Mrz 2015

Hallo PeterPawn,

schau mal wie lange Du schon dabei bist. Ich bemühe mich es zu verstehen. Doch fehlt mir einfach noch die Erfahrung und das Wissen. Meine Signatur beziegt sich auf die alte Fritz Box 7390 die ich durch die 7320 ausgetauscht habe. Die 7320 hat folgende Versionen

Code:

Firmware-Informationen
Boxtyp
    7320
AVM-Firmwareversion
    06.03
Sprache
    de
Kernelversion
    2.6.32.60 (hjortmann@EmbeddedVM) (gcc version 4.6.3 (Buildroot 2011.11) ) 
Freetz-Version
    freetz-devel-12971
Erstellungsdatum
    01.03.2015 11:07:54
Ursprünglicher Dateiname
    7320_06.03-freetz-devel-12971.de_20150301-110754.image

Meine Signatur werde ich bald ändern.

Was macht denn das ath0 Interface? Bridge? Übrings den Befehl brctl show kann ich nicht absetzen brctl: invalid argument 'show' to 'brctl'.

Lieben Gruß von Stefan Harbich

sharbich · 1 Mrz 2015

Hallo Ihr Lieben,

ich habe das Problem gelöst. Ja, es war noch eine falsche Konfiguration bei den brinterfaces. Folgendes habe ich geändert. Unter Brinterfaces intern und DMZ habe ich das Interface ath0 entfernt.

Code:

               name = "intern";
                dhcp = no;
                ipaddr = 192.168.10.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "eth0";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;
        } {
                name = "dmz";
                dhcp = no;
                ipaddr = 192.168.20.1;
                netmask = 255.255.255.0;
                dstipaddr = 0.0.0.0;
                interfaces = "eth1";
                dhcpenabled = no;
                dhcpstart = 0.0.0.0;
                dhcpend = 0.0.0.0;
                no_dnsd_static = no;
                is_guest = no;
                is_hotspot = no;

Damit der DHCP Request nun noch zum DHCP-Server geleitet wird habe ich zwei DHCP-Relay Einträge wie folgt gesetzt.

Code:

dhcprelay lan dmz 192.168.20.20
dhcprelay intern dmz 192.168.20.20

und die IP-Adressen werden den MAC sauber zugeordnet. Jetzt werde ich alle Kommunikationsbeziehungen über iptables dicht machen und endlich habe ich eine richtige DMZ. SUPER.

Lieben Gruß von Stefan Harbich

Languages

Suche

Languages

Suche

[Gelöst] 7330 SL cpmaccfg

sharbich

Neuer User

sharbich

Neuer User

sharbich

Neuer User

sharbich

Neuer User

sharbich

Neuer User

PeterPawn

IPPF-Urgestein

sharbich

Neuer User

sharbich

Neuer User

Zurzeit aktive Besucher

Neueste Beiträge

Statistik des Forums