| |
| GL-615
- Linux for UNIX Administrators |
| |
| |
| Intended for administrators proficient in UNIX
environments, this course helps administrators transition
their UNIX skills to the Linux environment. This
accelerated fast track course concentrates on the
popular Red Hat Enterprise Linux distribution, and
covers subjects ranging from initial installation
of Linux to day-to-day administrative tasks such
as management of user accounts and disk space.
Also covered is setup and maintenance of many of
the most popular network services available for
Linux, including servers for DNS, SMB, e-mail servers,
FTP, web, and caching proxy. Special attention is
paid to the concepts needed to implement these services
securely, and to the trouble-shooting skills which
will be necessary for real-world administration
of network and system services. |
| |
| Prerequisites |
| |
| Solid grounding in UNIX administration concepts |
| |
| |
| Course Content |
| |
Module 1 - Linux Installation
|
|
| |
- Pre-Installation Considerations
- Partition Considerations
- Partition Planning
- Filesystem Considerations
- Journaled Filesystems
- Installation Choices
- CD-ROM Installation
- Network Installation
- Local Hard Drive Installation
- FC Personal Desktop Class
- FC Workstation Class
- FC Server Class
- FC Custom Class
- Install Program Interface
- Installation Diagnostics
- Language Selection
- Keyboard Configuration
- Mouse Configuration
- Fedora Install Options
- Automatic Partitioning
- Partitioning with Disk Druid
- Installing a Boot Loader
- Network Configuration
- Firewall Configuration
- Language Support Selection
- Root Password Configuration
- Time Zone Configuration
- Package Group Selection
- Installing Packages
- Video Card Configuration
- Monitor Configuration
- Finalizing GUI Configuration
- Fedora Create A Boot Disk?
- Install Finished
- Firstboot
- Authentication Configuration
|
| |
Module 1 Lab: Installation
|
|
| |
- Perform a GUI network NFS based workstation
install
|
| |
Module 2 - Post-Install System Configuration
|
|
| |
- Configuration Utilities
- Red Hat Configuration Files
- Network Services
- Kudzu
- Configuring New Hardware
- Configuring Kernel via /proc
- Managing Software
- RPM Features, Architecture, and Package Files
- Working With RPMs
- Package Dependencies
- Querying and Verifying with rpm
- Common UNIX Printing System
- Defining a Printer
- Kickstart
- Creating Kickstart Files
- Using Kickstart files
|
| |
Module 2 Lab - Post-Install Config
|
|
| |
- Enable the Magic-SysReq key
- Use (redhat|system)-config-proc to disable
ICMP broadcast
- Answer some questions about the system using
RPM queries
- Install zsh using RPM
- Troubleshoot and repair a package using RPM
verification
- Upgrade the kernel using RPM
- Setup print queues using CUPS using: (redhat|system)-config
- printer, lpadmin, and the CUPS web interface
- Modify a kickstart file using a text editor
- Create a kickstart file using ksconfig
- Start an install using a pre made kickstart
file
|
| |
Module 3 - Boot Process and SysV Init
|
|
| |
- Booting Linux on PCs
- GRUB Configuration
- Kernel Boot Parameters
- /sbin/init
- System init Styles
- /etc/inittab
- rc.sysinit
- /etc/init.d and /etc/rcX.d
- Rc
- Typical SysV Init Script
- The rc.local file
- Managing Daemons
- Controlling Startup Services
- Shutdown and Reboot
|
| |
Module 3 Lab: Boot Process
|
|
| |
- Modify the lilo.conf creating a new stanza
that passes kernel
- Parameters
- Explore the GRUB interface
- Attach to the /boot filesystem and display
the contents of the grub/grub.conf file
- Set a GRUB password
|
| |
Module 4 - User/Group Administration and NFS
|
|
| |
- User Private Group Scheme
- User Administration
- Modifying Accounts
- Group Administration
- Password Aging
- Default User Files
- Controlling Logins
- PAM, PAM Services, and PAM Control Statements
- su, Wheel, and sudo
- DS Client Configuration
- NFS Server Configuration and NFS Clients
- Automounting Filesystems
|
| |
Module 4 Lab: User Admin
|
|
| |
- Learn to customize /etc/skel
- Practice setting up wheel group behavior
for su
- Learn to add new users and manage password
aging
- Configure a project directory to take advantage
of the user private group scheme
- Configure autofs to access an NFS export
- Configure NIS client as part of the EXAMPLE.COM
domain
- Configure autofs to mount home directories
- Switch to using LDAP for authentication
- Setup an NFS server and export directories
|
| |
Module 5 - Filesystem Administration
|
|
| |
- Partition Tables
- File System Creation
- Mounting File Systems
- Filesystem Maintenance
- Persistent Block Devices
- Using devlabel
- Resizing Filesystems
- File Deletion and Undeletion
- Swap
- Disk Usage
- Configuring Disk Quotas
- Checking Disk Quotas
- Filesystem Attributes
- File Access Control Lists
- Manipulating FACLs
- Viewing FACLs
- Backing Up FACLs
- Backup Hardware
- Tape Libraries
- Backup Software
- Backup Examples
|
| |
Module 5 Lab: Filesystem Admin
|
|
| |
- Create and activate additional swap space
- Configure and test disk quotas on the /tmp
filesystem
- Backup files using tar and cpio over ssh
- Backup files using rsync over ssh
- Backup and restore files with dump and restore
- Create and test an ISO9660 image
|
| |
Module 6 - LVM and RAID
|
|
| |
- Logical Volume Management
- Implementing LVMs
- Manipulating LVMs
- Advanced LVM Concepts
- RAID Usage
|
| |
Module 6 Lab: RAID and LVM
|
|
| |
- Use command line tools to partition free space
- Configure software RAID
- Partition the drive and create LVM Physical
Volumes
- Create a LVM Volume Group and Logical Volume
to hold website
- Content
- Verify the operation of LVM snapshots
- Extend and grow the Logical Volume and the
ext3 filesystem
|
| |
Module 7 - Task Automation & Process Accounting
|
|
| |
- Automating Tasks
- at Access Control
- crontab
- /etc/cron.* Directories
- Anacron
- Viewing Processes
- Managing Processes
- System Logging
- /etc/syslog.conf
- Log Management
- Log Anomaly Detector
- Process Accounting
- Using Process Accounting
- Limiting System Resources
- System Status - Memory, I/O, and,
CPU
- sar
|
| |
Module 7 Lab: Cron & Process Admin
|
|
| |
- Create and edit user cron jobs
- Add a system-wide cron task to/etc/cron hourly
- Install and configure process accounting
- Enable and set process limits
|
| |
Module 8 - Client Networking
|
|
| |
- Linux Network Interfaces
- Runtime configuration change
- Configuring Routing Tables
- Advanced Configuration
- Starting and Stopping Interfaces
- Virtual IP Interfaces
- Enabling IPv6
- Interface Bonding
- 802q VLANS
- Network Profiles and ifup
- IP Stack Configuration
- DNS Clients
- DHCP Clients
- dhcpd.conf Syntax
- Red Hat Configuration Tools
- Network Diagnostics
|
| |
Module 8 Lab: Client Networking
|
|
- Enable static configuration of eth0
- Configure a virtual interface eth0:1 and
verify connectivity through
- the new interface
- Enable and test IPv6
- Verify Link-Local IPv6 Connectivity
- Configure and Test Site-Local Connectivity
|
| |
Module 9 - The X Window System
|
|
| |
- XFree86 / X.org
- Configuring X
- X Fonts
- Using Fonts
- Display Manager Selection
- XDMCP
- Specialized X Servers
- Starting X Apps Automatically
|
| |
Module 9 Lab: X
|
|
| |
- Change the display manager to gdm
- Enable XDMCP to support remote desktop login
- Configure VNC to accept incoming connections
- Launch a program by creating a script in
the /etc/X11/xinit/xinitrc.d/
- Directory
- Secure XFree for use in a public kiosk
- Test and verify that the special key sequences
are disabled
- Enable static configuration of eth0
- Configure a virtual interface eth0:1 and
verify connectivity through
- the new interface
- Enable and test IPv6
|
| |
Module 10 - Security Concepts
|
|
| |
- Tightening Default Security
- Staying Current
- Using up2date
- Security Advisories
- inetd / xinetd
- Xinetd Features
- TCP Wrappers
- hosts.allow & hosts.deny
- hosts.* Syntax Shortcuts
- Basic Firewall Activation
- Stateful Packet Filter: iptables
- iptables Concepts
- Using iptables
- iptables: A More Secure Approach
|
| |
Module 10 Lab: Security Lab
|
|
| |
- Examine current system
- Configure Xinetd to provide a variety of
limits for connecting to
- Services
- Configure a sensor to log connection attempts
- Use TCP Wrappers to secure various services
- Use the Netfilter system of the Linux kernel
to apply stateful packet
- filtering to the host
|
| |
Module 11 - Linux Kernel Compilation
|
|
| |
- Why Compile?
- Getting Kernel Source
- Preparing to Compile
- Configuring the Kernel
- General Options
- Disk Configuration
- Network Configuration
- Expansion Port Configuration
- Multimedia Configuration
- Kernel Documentation
- RH 2.4 Kernel Extensions
- Compiling the Kernel
- Compile and Install Modules
- Installing the Kernel
- Tips and Tricks
|
| |
| |
Module 11 Lab: Kernel Compilation
|
|
| |
- Compile and install a custom Linux kernel
|
| |
Module 12 - DNS Concepts
|
|
| |
- Naming Services and A Better Way
- The Domain Name Space
- Delegation and Zones
- Server Roles
- Resolving Names and IP Addresses
- BIND Administration
- rndc key configuration
- Configuring the Resolver
- Testing Resolution
|
| |
Module 12 Lab: Configure BIND
|
|
| |
- Install the BIND name server on the system
and configure it to act as a slave for the example.com
and the 0.100.10.in-addr.arpa classroom domains
- Configure the name server to support the
rndc command.
|
| |
Module 13 - Configuring Bind
|
|
| |
- BIND Configuration Files
- named.conf Syntax and Options Block
- Creating a Site-Wide Cache
- Zones In named.conf
- Zone Database File Syntax
- SOA - Start of Authority
- A -Address / PTR-Pointer
- NS - Name Server
- CNAME -Alias / MX-Mail Host
- Abbreviations and Shortcuts
- $GENERATE
|
| |
Module 13 Lab: Configure BIND
|
|
| |
- Configure the name server as the primary master
name server for a new exampleX.com domain and
it’s corresponding id-addr.arpa domain
|
| |
Module 14 – OpenLDAP Servers
|
|
| |
- OpenLDAP Components
- Configuring slapd
- Global Parameters
- Schema Definition
- Access Control
- Backend Types
- Backend Configuration
- Database Configuration
- Indexes
- Replicas and Replica Configuration
|
| |
| |
Module 15 – Using OpenLDAP
|
|
| |
- Managing slapd
- Online and Offline Data Manipulation
- Querying LDAP Databases
- Native LDAP authentication and Client Config
|
| |
Module 15 Lab: Configure LDAP
|
|
| |
- Create self-signed x509 certificate for LDAP
server use
- Configure LDAP server to enable secure connections
- Configure LDAP server with baseDN and rootDN
settings
- Install Perl Libraries needed by ldapmigrate
- Add three UNIX users
- Use ldapmigrate to import the /etc files
- Setup LDAP client to use native LDAP authentication
|
| |
Module 16 - Using Apache
|
|
| |
- Apache History, Status, and Architecture
- SSL / HTTPS and Apache
- Apache Configuration Files
- httpd.conf
- Dynamic Shared Objects
- Adding Modules to Apache
- Apache Logging
- Log Analysis
- The Webalizer
|
| |
Module 16 Lab: Configure Apache
|
|
| |
- Configure the ServerName directive
- Optimize Apache by turning off unneeded modules
- Create an index.html file
|
| |
Module 17 – Virtual Hosting with Apache
|
|
| |
- HTTP Virtual Servers
- DNS Implications
- Security Implications
- IP-based Virtual Host
- Name-based Virtual Host
- Port-based Virtual Host
|
| |
Module 17 Lab: Configure Apache
|
|
| |
- Configure Apache Virtual Hosts
- Use the "Main" server for global
settings
|
| |
Module 18 – Apache Security
|
|
| |
- Delegating Administration
- Directory Protection
- Common Uses for .htaccess
- SSL Using mod_ssl
|
| |
Module 18 Lab: Configure Apache
|
|
| |
- Password protect a directory
- Override MIME types for a single directory
- Redirect traffic to a different URL
- Create a test SSL certificate
- Use Apache and SSL to setup an SSL-enabled
site
|
| |
| Module 19 - Implementing an FTP Server |
|
| |
- WU-FTPD
- Vsftpd
- Configuring vsftpd
- Anonymous FTP with vsftpd
|
| |
Module 19 Lab: Configure VSFTPD
|
|
| |
- Install and configure vsftpd for basic authenticated
access
- Configure vsftpd for anonymous uploads
|
| |
Module 20
- The SQUID proxy server
|
|
| |
- Squid Overview, Layout, Access Control Lists,
and ACL application
- Tuning Squid / Hierarchies
- Bandwidth Metering and Monitoring of Squid
- Proxy Client Configuration
|
| |
Module 20
Lab: Configure SQUID
|
|
| |
- Define an ACL for authorized IP networks
- Apply the ACL using http_access
- Enable the Squid cachmgr.cgi program
- View Squid statistics
- Create a Proxy Auto Configuration file
- Create a Proxy Auto Configuration file
- Change the mime-type in Apache for the PAC
file
- Configure the web browser to use the PAC
file
- Create an ICP proxy mesh
- Secure the default ICP permissions
|
| |
Module 21
- Samba Concepts
|
|
| |
- SMB Network Protocol
- NetBIOS and NetBEUI
- NetBIOS Naming
- Introducing Samba
- Samba Daemons, Clients, Utilities, and Configuration
Files
- The smb.conf File
|
| |
| |
Module 21
Lab: Configure Samba
|
|
| |
- Install the Samba server and configure it
to share the /tmp directory.
- Use smbclient and smbfs to access SMB shares
|
| |
Module 22
- Configure Samba
|
|
| |
- Examine Samba’s behavior when handling symbolic
links and file permissions
- Configure the Samba server to use share-level
access and user-level access
- Compare encrypted user-level access with
unencrypted user-level access
- Configure Samba to share users home directories
on demand
- Configure a new group and add the user to
the group
- Create a directory for use by the group
- Configure the share to support the group
that is read only for some users and read write
for others
|
| |
Module 22
Lab: Job Control
|
|
| |
- Create several jobs to multi-task at the shell
prompt
|
| |
Module 23
- Sendmail
|
|
| |
- sendmail Features, Process, Architecture,
Components, and Configuration
- Configuration Files
- Databases
- Text Files
- Network Access
- Masquerading Sendmail
- Controlling access
- Configuring SMTP AUTH and SMTP STARTTLS
|
| |
Module 23
Lab: Configure
Sendmail
|
|
| |
- Install the Sendmail SMTP server on the system
and configure it to serve domains
- Configure Sendmail to accept remote network
connections, to use SMTP AUTH for secure
- elaying, and to support STARTTLS
- Configure virtual hosts on Sendmail
|
| |
Module 24
– Postfix
|
|
| |
- Postfix Features, Architecture, Components,
and Configuration
- master.cf and main.cf
- Postfix Map Types and Pattern Matching
- Advanced Options
- Virtual Domains
- Mail Filtering
- Configuration and Management Commands
- Postfix Logging and Logfile Analysis
- chroot’ing Postfix
- Postfix and SMTP AUTH
- SMTP AUTH Server and Clients
- Postfix Extensions
- Postfix/TLS
- TLS Server Configuration
- Postfix Client Configuration
- Other TLS Clients and Ensuring TLS Security
|
| |
Module 24
Lab: Configure Postfix
|
|
| |
- Install the Postfix SMTP server on the system
and configure it to serve domains
- Configure virtual hosts on Postfix.
- Configure Postfix to accept network connections,
use SMTP AUTH for secure relaying,
- nd too support STARTTLS to secure SMTP AUTH
|
| |
Module 25
– IMAP, POP, Spam Filtering and Web Mail
|
|
| |
- Filtering Email
- Procmail
- SpamAssassin
- Accessing Email
- The POP3 and IMAP4 Protocol
- POP3 and IMAP4 Servers
- Fetchmail and SquirrelMail
|
| |
Module 25
Lab: Filtering/Web Mail
|
|
| |
- Install
the procmail mail-filtering software and configure
it as the default MDA on the server
- Install SpamAssassin and configure it to
flag spam on the server
- Install and configure the SquirrelMail web
email client.
|
| |
Module 26
- Troubleshooting
|
|
| |
- Basic Troubleshooting
- Gathering Information
- Information from df,and mount
- Information from Log Files
- Information Regarding Network Settings
- Information from ps, chkconfig, dmesg, w,
and netstat
- Useful Debugging Aids
- Common Problems
- Incorrect File Permissions
- Inability To Boot
- Corrupt File Systems
- Typos in Configuration Files
- Disks Full?
- Runaway Processes
- Running Out of (Virtual) Mem
- The Rescue Environment
|
| |
Module 26
Lab: Troubleshooting
|
|
| |
- Explore troubleshooting and disaster recovery
on non-mission-critical machines
|
| |
Appendix 1 - Using NIS
|
|
| |
- NIS History, Overview, Limitations, Advantages,
and Implementation
- Creating a NIS Master Server
- NIS Client Configuration
- Slave Server Configuration
- Troubleshooting Aids
|
| |
Appendix 1 Lab - NIS
|
|
| |
- Configure an NIS master server
- Configure an NIS client
- Configure an NIS slave server
- Enable ypxfrd for high-performance database
transfers between
- master and slave NIS servers
- Configure a NIS client system
- Observe client usage of a NIS slave server
when a NIS master server fails
|
