Журнал лабораторных работ

rm -f `find . -name '*.[oas]' -print`
rm -f `find . -name 'core' -print`
rm -f `find . -name '*~' -print`
cd chat; make clean
make[1]: Entering directory `/root/ppp-2.4.4/chat'
rm -f chat.o chat *~
make[1]: Leaving directory `/root/ppp-2.4.4/chat'
cd pppd/plugins; make clean
make[1]: Entering directory `/root/ppp-2.4.4/pppd/plugins'
rm -f *.o *.so *.a
...
rm -f main.o magic.o fsm.o lcp.o ipcp.o upap.o chap-new.o md5.o ccp.o ecp.o auth.o options.o demand.o utils.o sys-linux.o ipxcp.o tty.o eap.o chap-md5.o md4.o chap_ms.o sha1.o eap-tls.o pppcrypt.o multilink.o tdb.o spinlock.o  pppd *~ #* core
make[1]: Leaving directory `/root/ppp-2.4.4/pppd'
cd pppstats; make clean
make[1]: Entering directory `/root/ppp-2.4.4/pppstats'
rm -f pppstats *~ #* core
make[1]: Leaving directory `/root/ppp-2.4.4/pppstats'
cd pppdump; make clean
make[1]: Entering directory `/root/ppp-2.4.4/pppdump'
rm -f pppdump pppdump.o bsd-comp.o deflate.o zlib.o *~
make[1]: Leaving directory `/root/ppp-2.4.4/pppdump'

Configuring for Linux
Creating Makefiles.
  Makefile <= linux/Makefile.top
  pppd/Makefile <= pppd/Makefile.linux
  pppstats/Makefile <= pppstats/Makefile.linux
  chat/Makefile <= chat/Makefile.linux
  pppdump/Makefile <= pppdump/Makefile.linux
  pppd/plugins/Makefile <= pppd/plugins/Makefile.linux
  pppd/plugins/rp-pppoe/Makefile <= pppd/plugins/rp-pppoe/Makefile.linux
  pppd/plugins/radius/Makefile <= pppd/plugins/radius/Makefile.linux
  pppd/plugins/pppoatm/Makefile <= pppd/plugins/pppoatm/Makefile.linux

cd chat; make  all
make[1]: Entering directory `/root/ppp-2.4.4/chat'
cc -c -O2 -g -pipe -DTERMIOS                     -DSIGTYPE=void                  -UNO_SLEEP                      -DFNDELAY=O_NDELAY              -o chat.o chat.c
chat.c:1306:22: warning: trigraph ??) ignored, use -trigraphs to enable
cc -o chat chat.o
make[1]: Leaving directory `/root/ppp-2.4.4/chat'
cd pppd/plugins; make  all
make[1]: Entering directory `/root/ppp-2.4.4/pppd/plugins'
gcc -o minconn.so -shared -O2 -g -I.. -I../../include -fPIC minconn.c
gcc -o passprompt.so -shared -O2 -g -I.. -I../../include -fPIC passprompt.c
...
cc -O -I../include -o pppstats pppstats.c
make[1]: Leaving directory `/root/ppp-2.4.4/pppstats'
cd pppdump; make  all
make[1]: Entering directory `/root/ppp-2.4.4/pppdump'
cc -O -I../include/net   -c -o pppdump.o pppdump.c
cc -O -I../include/net   -c -o bsd-comp.o bsd-comp.c
cc -O -I../include/net   -c -o deflate.o deflate.c
cc -O -I../include/net   -c -o zlib.o zlib.c
cc -o pppdump pppdump.o bsd-comp.o deflate.o zlib.o
make[1]: Leaving directory `/root/ppp-2.4.4/pppdump'

cd chat; make  install
make[1]: Entering directory `/root/ppp-2.4.4/chat'
mkdir -p /usr/local/sbin /usr/local/share/man/man8
install -s -c chat /usr/local/sbin
install -c -m 644 chat.8 /usr/local/share/man/man8
make[1]: Leaving directory `/root/ppp-2.4.4/chat'
cd pppd/plugins; make  install
make[1]: Entering directory `/root/ppp-2.4.4/pppd/plugins'
install -d /usr/local/lib/pppd/2.4.4
install minconn.so passprompt.so passwordfd.so winbind.so /usr/local/lib/pppd/2.4.4
...
make[1]: Entering directory `/root/ppp-2.4.4/pppdump'
mkdir -p /usr/local/sbin /usr/local/share/man/man8
install -s -c pppdump /usr/local/sbin
install -c -m 444 pppdump.8 /usr/local/share/man/man8
make[1]: Leaving directory `/root/ppp-2.4.4/pppdump'
cd pppd; make  install-devel
make[1]: Entering directory `/root/ppp-2.4.4/pppd'
mkdir -p /usr/local/include/pppd
install -c -m 644 ccp.h chap-new.h ecp.h fsm.h ipcp.h ipxcp.h lcp.h magic.h md5.h patchlevel.h pathnames.h pppd.h upap.h eap.h md4.h chap_ms.h sha1.h eap-tls.h pppcrypt.h tdb.h spinlock.h /usr/local/include/pppd
make[1]: Leaving directory `/root/ppp-2.4.4/pppd'

make: invalid option -- 'c'
Использование: make [КÐЦЕР                     Ignored for compatibility.
  -B, --always-make           Unconditionally make all targets.
  -C DIRECTORY, --directory=DIRECTORY
                              Change to DIRECTORY before doing anything.
  -d                          Print lots of debugging information.
  --debug[=FLAGS]             Print various types of debugging information.
  -e, --environment-overrides
                              Environment variables override makefiles.
  -f FILE, --file=FILE, --makefile=FILE
...
.VARIABLES :=
# определена в среде
SSH_CLIENT = 192.168.16.254 49471 22
# определена в среде
MAIL = /var/mail/root
# определена в среде
L3_PARENT_TTY = /dev/ttyp0
# определена в среде
L3_HOME = /root/.lilalo/
# определена в среде

make: invalid option -- 'c'
Использование: make [КÐЦЕР                     Ignored for compatibility.
  -B, --always-make           Unconditionally make all targets.
  -C DIRECTORY, --directory=DIRECTORY
                              Change to DIRECTORY before doing anything.
  -d                          Print lots of debugging information.
  --debug[=FLAGS]             Print various types of debugging information.
  -e, --environment-overrides
                              Environment variables override makefiles.
  -f FILE, --file=FILE, --makefile=FILE
...
.VARIABLES :=
# определена в среде
SSH_CLIENT = 192.168.16.254 49471 22
# определена в среде
MAIL = /var/mail/root
# определена в среде
L3_PARENT_TTY = /dev/ttyp0
# определена в среде
L3_HOME = /root/.lilalo/
# определена в среде

install -c -m 600 etc.ppp/eaptls-client /etc/ppp/eaptls-client

make: Цель `install-etcppp' не требует выполнения команд.

install -c -m 600 etc.ppp/eaptls-server /etc/ppp/eaptls-server

# Parameters for authentication using EAP-TLS (server)
# client name (can be *)
# server name (can be *)
# client certificate file (optional, if unused put '-')
# server certificate file (required)
# CA certificate file (required)
# server private key file (required)
# allowed addresses (required, can be *)
#client server  -       /root/cert/server.crt   /root/cert/ca.crt       /root/cert/server.key   192.168.1.0/24
* * - /tmp/server_cert.pem /tmp/cacert.pem /tmp/server_priv_key.pem *

Restarting xl2tpd: xl2tpd.

--- /tmp/l3-saved-1291.2588.23366	2009-04-06 09:42:55.000000000 +0300
+++ /etc/ipsec.conf	2009-04-06 09:43:10.000000000 +0300
@@ -14,7 +14,7 @@
 	# plutodebug / klipsdebug = "all", "none" or a combation from below:
 	# "raw crypt parsing emitting control klips pfkey natt x509 dpd private"
 	# eg:
-	plutodebug="control parsing"
+#	plutodebug="control parsing"
 	#
 	# enable to get logs per-peer
 	# plutoopts="--perpeerlog"

--- /tmp/l3-saved-1291.1572.23291	2009-04-06 09:43:48.000000000 +0300
+++ /etc/ipsec.d/examples/l2tp-psk.conf	2009-04-06 09:44:41.000000000 +0300
@@ -1,7 +1,7 @@
 #
-conn L2TP-PSK-NAT
-	rightsubnet=vhost:%priv
-	also=L2TP-PSK-noNAT
+#conn L2TP-PSK-NAT
+#	rightsubnet=vhost:%priv
+#	also=L2TP-PSK-noNAT
 
 conn L2TP-PSK-noNAT
 	#

ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: Starting Openswan IPsec U2.6.20/K2.6.18-5-xen-686...

[root@debian3:ppp-2.4.4]# scp clint@77.123.245.38:~/keys1/client_cert_pkcs1*
clint@77.123.245.38's password:
client_cert_pkcs12.p12                                                                     100% 2941     2.9KB/s   00:00
/dev/hda1 on / type reiserfs (rw)
tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
proc on /proc type proc (rw,noexec,nosuid,nodev)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
udev on /dev type tmpfs (rw,mode=0755)

Password:

The authenticity of host '192.168.16.254 (192.168.16.254)' can't be established.
RSA key fingerprint is 90:7f:6c:4f:4c:b3:6c:3a:73:79:4d:77:f2:82:51:64.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.16.254' (RSA) to the list of known hosts.
root@192.168.16.254's password:
client_cert_pkcs12.p12                                                                     100% 2941     2.9KB/s   00:00

ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: Starting Openswan IPsec U2.6.20/K2.6.18-5-xen-686...