yum install epel-release -y && yum update -y yum install ImageMagick.i686 mc wget nano htop unixODBC libgsf t1utils fontconfig-devel samba samba-winbind samba-winbind-clients pam_krb5 krb5-workstation ntp httpd php php-mcrypt php-pgsql net-tools -y systemctl stop firewalld systemctl disable firewalld
*samba
конфигурируем
authconfig \ --enablekrb5 \ --krb5kdc=dc.augin.ru \ --krb5adminserver=dc.augin.ru \ --krb5realm=DC.AUGIN.RU \ --enablewinbind \ --enablewinbindauth \ --smbsecurity=ads \ --smbrealm=AUGIN.RU \ --smbservers=dc.augin.ru \ --smbworkgroup=AUGIN \ --winbindtemplatehomedir=/home/%U \ --winbindtemplateshell=/bin/bash \ --enablemkhomedir \ --enablewinbindusedefaultdomain \ --update
nano /etc/samba/smb.conf
... vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes [exchange$] comment = exchange path = /home/exchange public = yes writable = yes veto files = /*.vir/*.vir2/ delete veto files = yes
nano /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 10.1.0.5 s1c.augin.ru s1c
вводим в домен
net ads join -U Administrator
запускаем
systemctl enable ntpd systemctl enable smb systemctl enable nmb systemctl restart ntpd systemctl restart smb systemctl restart nmb systemctl start winbind systemctl enable winbind setfacl -R -m g:"domain admins":rwx /home/exchange/ setfacl -R -d -m g:"domain admins":rwx /home/exchange/
*PostreSQL 12-1C
rpm --import http://repo.postgrespro.ru/keys/GPG-KEY-POSTGRESPRO echo [postgrespro-1c] > /etc/yum.repos.d/postgrespro-1c.repo echo name=Postgres Pro 1C repo >> /etc/yum.repos.d/postgrespro-1c.repo echo baseurl=http://repo.postgrespro.ru/1c-archive/pg1c-12.2/centos/7/os/x86_64/rpms/ >> /etc/yum.repos.d/postgrespro-1c.repo echo gpgcheck=1 >> /etc/yum.repos.d/postgrespro-1c.repo echo enabled=1 >> /etc/yum.repos.d/postgrespro-1c.repo yum makecache yum install -y postgrespro-1c-12 postgrespro-1c-12-contrib /opt/pgpro/1c-12/bin/pg-setup initdb systemctl enable postgrespro-1c-12 systemctl restart postgrespro-1c-12
sudo -u postgres /opt/pgpro/1c-12/bin/psql postgres \password postgres
\quit
nano /var/lib/pgpro/1c-12/data/pg_hba.conf
host all all 0.0.0.0/0 md5
nano /var/lib/pgpro/1c-12/data/postgresql.conf
listen_addresses = '*'
systemctl restart postgrespro-1c-12
*1c
yum install *.rpm chown -R usr1cv8:grp1cv8 /opt/1C
systemctl enable srv1cv83 systemctl start srv1cv83 systemctl status srv1cv83
* 'авторизация AD'
В ад надо создать пользователя для авторизации сервера 1с (linux1cuser) в винде надо создать файл usr1cv8.keytab
ktpass -princ usr1cv8/s1c.augin.ru@AUGIN.RU -mapuser linux1cuser -pass PASSWORD -ptype KRB5_NT_PRINCIPAL -out usr1cv8.keytab
Файл поместить в папку /opt/1C/v8.3/i386/
chown usr1cv8:grp1cv8 /opt/1C/v8.3/i386/usr1cv8.keytab chmod 600 /opt/1C/v8.3/i386/usr1cv8.keytab
kinit -k -t /opt/1C/v8.3/i386/usr1cv8.keytab usr1cv8/s1c.augin.ru@AUGIN.RU
* 'apache2'
systemctl enable httpd
распаковываем rpm пакеты x64
rpm2cpio 1C_Enterprise83-common-8.3.*.x86_64.rpm | cpio -idmv rpm2cpio 1C_Enterprise83-server-8.3.*.x86_64.rpm | cpio -idmv rpm2cpio 1C_Enterprise83-ws-8.3.*.x86_64.rpm | cpio -idmv
копируем в папку /opt/1C/v8.3/x86_64/
cp -r opt/ / systemctl enable httpd systemctl restart httpd /opt/1C/v8.3/x86_64/webinst -apache24 -wsdir dengi -dir '/var/www/html/dengi' -connStr 'Srvr="s1c.augin.ru";Ref="dengi";' -confPath /etc/httpd/conf/httpd.conf
nano /var/www/dengi/default.vrd
<?xml version="1.0" encoding="UTF-8"?>
<point xmlns="http://v8.1c.ru/8.2/virtual-resource-system"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
base="/dengi"
ib="Srvr="s1c.augin.ru";Ref="dengi";">
<standardOdata enable="false"
reuseSessions="autouse"
sessionMaxAge="20"
poolSize="10"
poolTimeout="5"/>
<ws>
<point name="MobileService"
alias="MobileService.1cws"
/>
</ws>
</point>
systemctl restart httpd
* 'Включение логов'
mkdir /home/usr1cv8/.1cv8/1C/1cv8/conf/ touch /home/usr1cv8/.1cv8/1C/1cv8/conf/logcfg.xml chown usr1cv8:grp1cv8 /home/usr1cv8/.1cv8/1C/1cv8/conf/ -R mkdir /var/log/1c mkdir /var/log/1c/dumps chown -R usr1cv8:grp1cv8 /var/log/1c
nano /home/usr1cv8/.1cv8/1C/1cv8/conf/logcfg.xml
<config xmlns="http://v8.1c.ru/v8/tech-log">
<dump create="true" location="/var/log/1c/dumps" prntscrn="true" type="2"/>
<log history="72" location="/var/log/1c">
<event>
<eq property="name" value="CALL"/>
</event>
<event>
<eq property="name" value="EXCP"/>
</event>
<event>
<eq property="name" value="EXCPCNTX"/>
</event>
<event>
<eq property="name" value="PROC"/>
</event>
<event>
<eq property="name" value="ADMIN"/>
</event>
<event>
<eq property="name" value="MEM"/>
</event>
<event>
<eq property="name" value="LEAKS"/>
</event>
<event>
<eq property="name" value="HASP"/>
</event>
<event>
<eq property="name" value="LIC"/>
</event>
<event>
<eq property="name" value="ATTN"/>
</event>
<event>
<eq property="name" value="CLSTR"/>
</event>
<property name="all"/>
</log>
</config>
HASP
http://ftp.etersoft.ru/pub/Etersoft/HASP/ wget http://ftp.etersoft.ru/pub/Etersoft/HASP/last/x86_64/CentOS/7/haspd-7.60-eter1centos.x86_64.rpm wget http://ftp.etersoft.ru/pub/Etersoft/HASP/last/x86_64/CentOS/7/haspd-debuginfo-7.60-eter1centos.x86_64.rpm wget http://ftp.etersoft.ru/pub/Etersoft/HASP/last/x86_64/CentOS/7/haspd-modules-7.60-eter1centos.x86_64.rpm yum install *.rpm
* Шрифты
wget http://li.nux.ro/download/nux/dextop/el7/x86_64/msttcore-fonts-installer-2.6-1.noarch.rpm yum install msttcore-fonts-installer-2.6-1.noarch.rpm