RH302 Practice Exam Questions and Answers

Do the following steps as:

1.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 20 –j DROP

2.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 21 –j DROP

iptables is the build-in firewall tools, used to filter the packets and for nat. By identifying Source Address, Destination Address, type of protocol, source and destination port we can filter the packets.

-sSource Address

-dDestination Address

-pLayer 3 Protocol

-dDestination Address

--sportSource Prot

--dportDestination Port

-iIncoming Interface

-oOutgoing Interface

-tTable either filter or nat or mangle

-AChain can be either INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTIN

G.  

Do the following steps as:

1.vi /etc/vsftpd/vsftpd.conf

anon_upload_enable=yes

chown_uploads=yes

chown_username=username

2.service vsftpd start| restart

3.directory owner should be ftp user: chown ftp directory path allowedto upload files.

4.Write permission should be set to owner user.

By default anonymous user can only download files from the ftp. Should write anon_upload_enable=yes to enable anonymous upload files. Default Directory for anonymous is /var/ftp.

Do the following steps as:

1.vi /etc/exports

/data*.example.com(rw,sync)

2.service nfs start

3.service portmap restart

4.chkconfig nfs on

5.chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so, portmapper service should restart after starting the nfs service.

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup = mygroup

server string=Share from Linux Server

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow=192.168.0.

[data]

path=/data

writable=yes

public=no

browsable=yes

2.service smb start| restart

3.chkconfig smb on

Samba servers helps to share the data between linux and windows. Configuration file is /etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse to share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

If any valid users option is not specified, then all samba users can access the shared data. By Default shared permission is on writable=no means read only sharing. Write list option is used to allow write access on shared directory to certain users or group members.

To allow access the shared directory only from certain network or hosts, there is a option hosts allow= host or network. If this option is applied on global option, then it will apply to all shared directory.

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user1|user2|user3;Al0900-1700

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user15|user16;Sa0000-2400

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

1.vi /etc/squid/squid.conf

#detault:

http_port8080

#Recommended minimum configuration:

# Near the src acl src section

acl allownet src 192.168.0.0/255.255.255.0

acl msnnet dstdomain .msn.com

#Default:

# http_access deny all

#Under Herehttp_access deny msnnet

http_access allow allownet

2.service squid start

3.chkconfig squid on

squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.

To block or allow the Internet access to hosts, we should create the acl (Access Control List). In this file we can specify only the IP address.

Example: acl aclname src IP/NetmaskAfter creating acl we can block or allow the Internet to specified acl.

http_access allow | deny alcname

Do the following steps as:

1.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp --dport 22 –j DROP

iptables is the build-in firewall tools, used to filter the packets and for nat. By identifying Source Address, Destination Address, type of protocol, source anddestination port we can filter the packets.

-sSource Address

-dDestination Address

-pLayer 3 Protocol

-dDestination Address

--sportSource Prot

--dportDestination Port

-iIncoming Interface

-oOutgoing Interface

-tTable either filter or nat or mangle

-AChain can be either INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTIN

G.  

ssh service use the 22 port so we can block connection from outside the LAN.

Do the following steps as:

1.vi /etc/httpd/conf/httpd.conf

<VirtualHost 192.100.0.1>

ServerNamewww.abc.com

DocumentRoot /var/www/abc/

<Directory /var/www/abc>

AllowOverrideauthconfig

</Directory>

DirectoryIndexindex.html

ServerAdminwebmaster@abc.com

ErrorLog logs/error_abc.logs

CustomLog logs/custom_abc.logs common

</VirtualHost>

2.Create the directory and index page on specified path. (Index page can download fromftp://server1.example.comat exam time)

3.vi /var/www/abc/.htaccess

AuthName“Only to Authorized Users”

AuthTypebasic

AuthUserFile/etc/httpd/conf/mypasswd

requirevalid-user

htpasswd –c /etc/httpd/conf/mypasswd user5

htpasswd –m /etc/httpd/conf/mypasswd user6

chgrp apache /etc/httpd/conf/mypasswd

chmod g+r /etc/httpd/conf/mypasswd

service httpd restart

chkconfig httpd on

AllowOverride Authconfig is used to specify which and how much configuration can be overridden by directory specific .htaccess files.

One of the most common tasks performed in users’ .htaccess files is adding authorization. Typically, a user will setup authorization for directories that hold sensitive information with a configuration.

By default user1 can remove user2’s files due to directory permission to group member. We can prevent of deleting files from others users using Sticky Bits.

chmod o+t /data

Verify /data: ls -ld /data

You will get: drwxrwx—T

Do the following steps as:

1.dump -0u –f /tmp/back /dev/hda4

dump is the standard backup utility. According to the questions, fullback should take. –0 means fullback, -u means update the /etc/dumpdates which maintains the backup record and -f means filename. If you are directly taking backup into other device, you can specify the device name.

e dump -0u -f /dev/st0 /dev/hda4. Where hda4 is a separate partition mounted on /home.

Do the following steps as:

1.chmod 770 /data

2.Verify using : ls –ld /data

Preview should be like:

drwxrwx--- 2 root sysadmin 4096 Mar 16 18:08 /data

To change the permission on directory we use the chmod command. According to the question that only the owner user (root) and group member (sysadmin) can fully access the directory so: chmod 770 /data

Do the following steps as:

1. Insert the CD on CD-ROM and start the system.

2. In Boot: Prompt typelinux askmethod

3. It will display the language, keyboard selection.

4. It will ask you for the installation method.

5. Select the NFS Image from the list

6. It will ask the IP Address, Net mask, Gateway and Name Server. Select Use

Dynamic IP Configuration: because DHCP Server will be configured in your exam lab.

7. It will ask for the NFS Server Name and Redhat Enterprise Linux Directory.

Specify the NFS Server: 172.24.254.254

Directory: /var/ftp/pub

8. After Connecting to the NFS Server Installation start in GUI. Go up to the partition screen by selecting the different Options.

9. Create the partition According to the Question because Size and what-what partition should you create at installation time is specified in your question

10.Create the two RAID partitions having equal size of remaining all free space.

11.Click on RAID button

12.Type mount point /archive

13.Select RAID Level 0

14.Click on ok

15. Then select the MBR Options, time zone and go upto package selections.

It is another Most Important Time of installation. Due to the time limit, you should care about the installation packages. At Exam time you these packages are enough.

X-Window System

GNOME Desktop

(these two packages are generally not required)

Administration Tools.

System Tools

Windows File Server

FTP Servers

Mail Servers

Web Servers

Network Servers

Editors

Text Based Internet

Server Configuration Tools

Printing Supports

When installation will complete, your system will reboot. Jump for another Question.

Do the following steps as:

1.groupadd sysuser

groupadd command is used to create the group and all group information is stored in /etc/group file.

Do the following steps as:

rpm -ivh ftp://server1.example.com/pub/kernel-hugemem-*

2. vi /etc/grub.conf

Set the default to new kernel

default=0

Example of /etc/grub.conf

default=0

timeout=5

splashimage=(hd0,0)/grub/splash.xpm.gz

hiddenmenu

title Red Hat Enterprise Linux ES (2.6.9-5.ELhugemem)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.ELhugemem ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.ELhugemem.img

title Red Hat Enterprise Linux ES (2.6.9-5.EL)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.EL ro root=LABEL=/1 rhgb quiet

initrd /initrd-2.6.9-5.EL.img

rpm command is used to install, update and remove the rpm package. -ivh option is install, verbose, and display the hash mark.

Redhat Enterprise Linux 5 Supports the RAID LEVEL 0, RAID LEVEL 1, RAID LEVEL 5 and RAID LEVEL 6 at installation time. You can create it at installation time later no need to type lots of commands for RAI

D.  

At Installation Time:

Create the partitions using diskdruid.

Create the Partitions having File system Type Software RAI

D.  

Click on RAID button

Type the Mount Point

Select File system type

Select RAID Level

Select Partitions/disks as a member of RAI

D.  

viii.Click on ok

After Installation: We can create the RAID Device after Installation on command-line.

Create the Two partitions having equal size. (Specify the Size using Cylinder, find the remaining cylinder and divide by 2).

Change the Partition ID to fd (Linux raid Autodetect) by typing t.

Type wTo write on partitions table.

Use partprobe command to synchronic the partition table.

Use: mdadm --create /dev/md0 --level=1 --raid-devices=2 /dev/hda? /dev/hda?

Verify the RAID: mdadm --detail /dev/md0

mkfs -t ext3 /dev/md0

mount /dev/md0 /data

vi /etc/fstab

/dev/md0/dataext3defaults0 0

Verify mounting devices using mount command.

Do the following steps as:

1. Go to on that directory where you want to restore.

2. restore –rf /dev/st0

To restore from backup we use the restore command. Here backup will restore from /dev/st0 on current Directory.

Do the following steps as:

Steps of Creating LVM:

Physical Disk1

Physical Disk2

Physical Disk3

Physical Volume

Volume Group

Logical Volume 1

Logical Volume 2

Logical Volume 3

1.pvcreate /dev/hda8 /dev/hda9 /dev/hda10

pvdisplay command is used to display the information of physical volume.

2.vgceate test0 /dev/hda8 /dev/hda9 /dev/hda10

vgdisplay command is used to display the information of Volume Group.

3.lvcreate –L 250M –n testvolume1 test0

lvdisplay command is used to display the information of Logical Volume.

4.lvcreate –L 250M –n testvolume2 test0

5.mkfs –t ext3 /dev/test0/testvolume1

6.mkfs –t ext3 /dev/test0/testvolume2

7.mkdir /lvtest1

8.mkdir /lvtest2

9.mount /dev/test0/testvolume1 /lvtest1

10.mount /dev/test0/testvolume2 /lvtest2

11.vi /etc/fstab

/dev/test0/testvolume2/lvtest2ext3defaults0 0

/dev/test0/testvolume1/lvtest1ext3defaults0 0

To create the LVM( Logical Volume Manager) we required the disks having ‘8e’ Linux LVM type. First we should create the physical Volume, then we can create the Volume group from disks belongs to physical Volume. lvcreate command is used to create the logical volume on volume group. We can specify the size of logical volume with –L option and name with -n option.

Do the following steps as:

vi /etc/resolv.conf

nameserver 172.24.254.254

host server1.example.com

Do the following steps as:

Use fdisk /dev/hdaTo create new partition.

Type nFor New partitions

It will ask for Logical or Primary Partitions. Press l for logical.

It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.

Type the Size: +100MYou can Specify either Last cylinder of Size here.

Press P to verify the partitions lists and remember the partitions name.

Press w to write on partitions table.

Either Reboot or use partprobe command.

Use mkfs –t ext3 /dev/hda?

Or

mke2fs –j /dev/hda? To create ext3 filesystem.

vi /etc/fstab

Write:

/dev/hda?/dataext3defaults1 2

11. Verify by mounting on current Sessions also:

mount /dev/hda? /data

To understand the role of a boot loader, take a step back from Linux. When you boot your computer, the BIOS starts by detecting basic hardware, including your hard drives. Once it's done, it looks for the boot loader on the Master Boot Record of the first available disk. If you're working with an older PC, the BIOS can't find your boot loader unless it's located within the first 1,024 cylinders of the hard disk.

Newer BIOSes overcome this problem with Logical Block Addressing, which is also known as LBA mode. LBA mode reads 'logical' values for the cylinder, head, and sector, which allows the BIOS to 'see' a larger disk drive.

If you have multiple hard drives, there is one more caveat. If your drives are IDE hard drives, the /boot directory must be on a hard drive attached to the primary IDE controller. If your drives are all SCSI hard drives, the /boot directory must be located on a hard drive with SCSI ID 0 or ID 1. If you have a mix of hard drives, the /boot directory must be located on either the first IDE drive or a SCSI drive with ID 0. In other words, this is not an issue on the Red Hat exams unless the computer that you're tested on has more than two hard drives. And I believe that's less likely, as that would increase the cost of the exam.

If you are getting the Kernel panic error, it means it is boot loader related problem. Redhat Enterprise Linux uses the GRUB boot loader. You can pass the kernel parameter from the boot loader as well as you can correct the kernel parameter passing from boot loader from GRUB screen at boot time.

GRUB boot loader configuration file is: /etc/grub.conf

And Correct Configuration is:

default=0

timeout=5

splashimage=(hd0,0)/grub/splash.xpm.gz

hiddenmenu

title Red Hat Enterprise Linux ES (2.6.9-5.EL)

root (hd0,0)

kernel /vmlinuz-2.6.9-5.EL ro root=LABEL=/ rhgb quiet

initrd /initrd-2.6.9-5.EL.img

Probably miss-configured the boot loader, so giving this problem. You can pass the correct parameter from GRUB prompt:

Table 3-3:GRUB Editing Commands

Command

Description

b

Boot the currently listed operating system

d

Delete the current line

e

Edit the current line

o

Create an empty line underneath the current line

O

Create an empty line above the current line

If you know all parameters and sequence of the boot loader you can enter in command prompt also.

Press c on GRUB screen.

Grub>root (hd0,0)

grub>kernel /vmlinuz-2.6.9-5.EL ro root=LABEL=/ rhgb quiet

grub>initrd /initrd-2.6.9-5.EL.img

grub>boot

#vi /etc/resolv.conf

nameserver 172.24.254.254

# dig server1.example.com

#host server1.example.com

DNS is the Domain Name System, which maintains a database that can help your computer translate domain names such as www.redhat.com to IP addresses such as 216.148.218.197. As no individual DNS server is large enough to keep a database for the entire Internet, they can refer requests to other DNS servers.

DNS is based on thenameddaemon, which is built on the BIND (Berkeley Internet Name Domain) package developed through the Internet Software Consortium

Users wants to access by name so DNS will interpret the name into ip address. You need to specify the Address if DNS server in each and every client machine. In Redhat Enterprise Linux, you need to specify the DNS server into /etc/resolv.conf file.

After Specifying the DNS server address, you can verify using host, dig and nslookup commands.

We can control the services for current session and for next boot time also. For current Session, we use service servicename start or restart or stop or status. For automatically on next reboot time:

chkconfig servicename on or off

eg: chkconfig nfs on

chkconfig portmap on

or

ntsysv

Select the nfs and portmap services.

Reboot the system and identify whether services are running or not.

Quotas are used to limit a user's or a group of users' ability to consume disk space. This prevents a small group of users from monopolizing disk capacity and potentially interfering with other users or the entire system. Disk quotas are commonly used by ISPs, by Web hosting companies, on FTP sites, and on corporate file servers to ensure continued availability of their systems.

Without quotas, one or more users can upload files on an FTP server to the point of filling a filesystem. Once the affected partition is full, other users are effectively denied upload access to the disk. This is also a reason to mount different filesystem directories on different partitions. For example, if you only had partitions for your root (/) directory and swap space, someone uploading to your computer could fill up all of the space in your root directory (/). Without at least a little free space in the root directory (/), your system could become unstable or even crash.

You have two ways to set quotas for users. You can limit users by inodes or by kilobyte-sized disk blocks. Every Linux file requires an inode. Therefore, you can limit users by the number of files or by absolute space. You can set up different quotas for different filesystems. For example, you can set different quotas for users on the /home and /tmp directories if they are mounted on their own partitions.

Limits on disk blocks restrict the amount of disk space available to a user on your system. Older versions of Red Hat Linux included LinuxConf, which included a graphical tool to configure quotas. As of this writing, Red Hat no longer has a graphical quota configuration tool. Today, you can configure quotas on RHEL only through the command line interface.

1. vi /etc/fstab

/dev/hda11/dataext3defaults,usrquota 1 2

2. Either Reboot the System or remount the partition.

Mount –o remount /dev/hda11 /data

3. touch /data/aquota.user

4. quotacheck –ufm /data

5. quotaon -u /data

6. edquota –u user1 /data

and Specified the Soft limit and hard limit on opened file.

To verify either quota is working or not:

Soft limit specify the limit to generate warnings to users and hard limit can’t cross by the user. Use the quota command or repquota command to monitor the quota information.

Do the following steps as:

1.Verify the File whether Shared or not ? : cat /etc/exports

2.Start the nfs service: service nfs start

3.Start the portmap service: service portmap start

4.Make automatically start the nfs service on next reboot: chkconfig nfs on

5.Make automatically start the portmap service on next reboot: chkconfig portmap on

6.Verify either sharing or not: showmount –e localhost

7.Check that default firewall is running on system ? if running flush the iptables using iptables –F and stop the iptables service.

To automatically mount at boot time we use the /etc/fstab file. Because /etc/rc.d/rc.sysinit file reads and mount all file system specified in /etc/fstab. To mount Network Sharing Files also use the /etc/fstab but filesystem is nfs.

vi /etc/fstab

192.168.0.254:/data/commonnfsdefaults0 0

reboot the system.

Do the following steps as:

1.vi /etc/sysconfing/network

NETWORKING=yes

HOSTNAME=station?.example.com

GATEWAY=192.168.0.254

2.service network restart

Or

1.vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

ONBOOT=yes

BOOTPROTO=static

IPADDR=X.X.X.X

NETMASK=X.X.X.X

GATEWAY=192.168.0.254

2.ifdown eth0

3.ifup eth0

Do the following steps as:

1.Create a partition having size 5 GB and change the syste id ‘8e’.

2.use partprobe command

3.pvcreate /dev/hda9Suppose your partition number is hda9.

4.vgextend test0 /dev/hda9vgextend command add the physical disk on volume group.

5.lvextend –L+5120M /dev/test0/lvtestvolume

6.verify using lvdisplay /dev/test0/lvtestvolume.

Do the following steps as:

1.chmod g+s /storage

2.Verify using: ls -ld /storage

Permission should be like:

drwxrws--- 2 root sysusers 4096 Mar 16 18:08 /storage

If SGID bit is set on directory then who every users creates the files on directory group owner automatically the owner of parent directory.

To set the SGID bit: chmod g+s directory

To Remove the SGID bit: chmod g-s directory

Do the following steps as:

useradd username

passwd username

usermod -e “date”

example: usermod -e “12 Feb 2006” user4

Verify: chage –l user4

Do the following steps as:

1.chgrp sysadmin /data

2.Verify using ls -ld /data command. You should get like

drwxr-x--- 2 root sysadmin 4096 Mar 16 17:59 /data

chgrp command is used to change the group ownership of particular files or directory.

Another way you can use the chown command.

chown root:sysadmin /data

Do the following steps as:

usermod -G training user1

usermod -G training user2

usermod -G training user3

Verify from : cat /etc/group

There are two types of group, I) primary group II) Secondary or supplementary group.

Primary Group: Primary group defines the files/directories and process owner group there can be only one primary group of one user.

Secondary Group is used for permission. Where permission are defined for group members, user can access by belonging to that group.

Here user1, user2 and user3 belong as supplementary to training group. So these users get the permission of group member.

Do the following steps as:

1.chmod g+s /data

2.Verify using: ls -ld /data

Permission should be like:

drwxrws--- 2 root sysadmin 4096 Mar 16 18:08 /data

If SGID bit is set on directory then who every users creates the files on directory group owner automatically the owner of parent directory.

To set the SGID bit: chmod g+s directory

To Remove the SGID bit: chmod g-s directory

Redhat Enterprise Linux 5 Supports the RAID LEVEL 0, RAID LEVEL 1, RAID LEVEL 5 and RAID LEVEL 6 at installation time. You can create it at installation time later no need to type lots of commands for RAI

D.  

At Installation Time:

Create the partitions using diskdruid.

Create the Partitions having File system Type Software RAI

D.  

Click on RAID button

Type the Mount Point

Select File system type

Select RAID Level

Select Partitions/disks as a member of RAI

D.  

Click on ok

After Installation: We can create the RAID Device after Installation on command-line.

Create the Two partitions having equal size. (Specify the Size using Cylinder, find the remaining cylinder and divide by 2).

Change the Partition ID to fd (Linux raid Autodetect) by typing t.

Type wTo write on partitions table.

Use partprobe command to synchronic the partition table.

Use: mdadm --create /dev/md0 --level=1 --raid-devices=2 /dev/hda? /dev/hda?

Verify the RAID: mdadm --detail /dev/md0

mkfs -t ext3 /dev/md0

mount /dev/md0 /data

vi /etc/fstab

/dev/md0/dataext3defaults0 0

Verify mounting devices using mount command.

Do the following steps as:

1. Insert the CD on CD-ROM and start the system.

2. In Boot: Prompt typelinux askmethod

3. It will display the language, keyboard selection.

4. It will ask you for the installation method.

5. Select the NFS Image from the list

6. It will ask the IP Address, Net mask, Gateway and Name Server. Select Use

Dynamic IP Configuration: because DHCP Server will be configured in your exam lab.

7. It will ask for the NFS Server Name and Redhat Enterprise Linux Directory.

Specify the NFS Server: 172.24.254.254

Directory: /var/ftp/pub

8. After Connecting to the NFS Server Installation start in GUI. Go up to the partition screen by selecting the different Options.

9. Create the partition According to the Question because Size and what-what partition should you create at installation time is specified in your question

10.Create the two RAID partitions having equal size of remaining all free space.

11.Click on RAID button

12.Type mount point /archive

13.Select RAID Level 0

14.Click on ok

15. Then select the MBR Options, time zone and go upto package selections.

It is another Most Important Time of installation. Due to the time limit, you should care about the installation packages. At Exam time you these packages are enough.

X-Window System

GNOME Desktop

(these two packages are generally not required)

Administration Tools.

System Tools

Windows File Server

FTP Servers

Mail Servers

Web Servers

Network Servers

Editors

Text Based Internet

Server Configuration Tools

Printing Supports

When installation will complete, your system will reboot. Jump for another Question.

Do the following steps as:

1.Open the Browser either firefox or links

2.Type :http://localhost:631

3.Click on Manage Printer

4.Click on Add Printer

5.Type Queue name like stationx and click on continue

6.Type Device type or printing Protocol: i.e Internet printing Protocol

7.Click on Continue

8.Type Device URL: ipp://server1.example.com/printers/printerx

9.Click on Continue

10.Select RAW Model printer

11.Click on Continue

12.Test by sending the printing job

Do the following steps as:

1.vi /etc/hosts.deny

sshd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

sshd:ALL

2.vi /etc/hosts.allow

sshd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup=linuxgroup

security=share

printcap name=/etc/printcap

load printers=yes

printing=cups

[printers]

path=/var/spool/samba

browsable=yes

printable=yes

guest ok=no

writable=no

Samba servers helps to share the data between linux and windows. Configuration file is /etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse to share the user’s home directory.

/etc/printcap file contains all installed printers name. Printing is print system used on server.

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup=station?

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow= .example.com

[data]

path=/data

public=no

writable=no

browsable=yes

2.smbpasswd -a jeff

3.service smb start

4.chkconfig smb on

/etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse the share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

Do the following steps as:

1.visudo

# User alias Specification

User_alias LIMITEDTRUST=peter

# Cmnd alias Specification

Cmnd_alias MINIMUM=/usr/sbin/useradd, /usr/bin/passwd, /usr/sbin/groupadd, /usr/sbin/userdel, /usr/sbin/groupdel, /usr/sbin/usermod

#User Privilege Specification

LIMITEDTRUST ALL=MINIMUM

2.Login as peter user and run sudo useradd username

Using Sudo we can give root level privilege on commands. Visudo is the sudo editor. In user alias Specification we create the user alias and in Cmnd alias Specification, we create the command alias. In User Privilege Specification section, list the users, groups allowed to use the sudo.

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user15|user16;Sa0000-2400

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

1.vi /etc/hosts.deny

sshd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

sshd:ALL

2.vi /etc/hosts.allow

sshd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.ftp ftp://server1.example.com

2.Login as an anonymous and download the file.

3.Copy the file in /var/www/html if you downloaded in another location.

4.service httpd restart

5.Test using links: links http://station?.example.com

Check the SELinux context of index.html file, should like this:

-rw-r--r-- root root system_u:object_r:httpd_sys_content_t /var/www/html/index.html

If SELinux Context is mismatched, use the restorecon –R /var command

Do the following steps as:

1.vi /etc/hosts.deny

ALL:.cracker.org EXCEPT trusted.cracker.org

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/httpd/conf/httpd.conf

ServerNamestation?.example.com

DocumentRoot /var/www/station?

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

2.Create the directory and index page on specified path. (Index page can download fromftp://server1.example.comat exam time)

Check the SELinux context of index page , should like this:

-rw-r--r-- root root system_u:object_r:httpd_sys_content_t /var/www/html/index.html

If SELinux Context is mismatched, use the restorecon –R /var command

3.service httpd start|restart

4.chkconfig httpd on

Do the following steps as:

1.vi /etc/sysconfig/network

GATEWAY=192.168.0.254

OR

vi /etc/sysconf/network-scripts/ifcfg-eth0

DEVICE=eth0

BOOTPROTO=static

ONBOOT=yes

IPADDR=192.168.0.?

NETMASK=255.255.255.0

GATEWAY=192.168.0.254

2.service network restart

You should know about the /etc/inittab file, where default runlevel will define. And Much more runlevel specific Scripts are called here.

Actually that problem will occur if you don’t specify the default runlevel.

Reboot the system

Boot the System on single user mode.

Except for a normal boot of Linux, single-user mode is the most commonly used option. This is the system maintenance mode for experienced Linux administrators. It allows you to perform clean backups and restores to any partitions as needed from local hardware. It also allows you to run administration commands, recover or repair password and shadow password files, run filesystem checks, and so forth.

vi /etc/inittab and Write

id:runlevel:initdefault:

Standard Runlevels in RedHat Enterprise Linux

Runlevel

Description

0

Halt

1

Single-user mode, for maintenance (backups/restores) and repairs

2

Multiuser, without networking

3

Multiuser, with networking

4

Unused

5

X11, defaults to a GUI login screen. Logins bring the user to a GUI desktop.

6

Reboot (never set initdefault in /etc/inittab to this value!)

1. vi /etc/resolv.conf

Write : nameserver 192.168.0.254

Do the following steps as:

Quotas are used to limit a user's or a group of users' ability to consume disk space. This prevents a small group of users from monopolizing disk capacity and potentially interfering with other users or the entire system. Disk quotas are commonly used by ISPs, by Web hosting companies, on FTP sites, and on corporate file servers to ensure continued availability of their systems.

Without quotas, one or more users can upload files on an FTP server to the point of filling a filesystem. Once the affected partition is full, other users are effectively denied upload access to the disk. This is also a reason to mount different filesystem directories on different partitions. For example, if you only had partitions for your root (/) directory and swap space, someone uploading to your computer could fill up all of the space in your root directory (/). Without at least a little free space in the root directory (/), your system could become unstable or even crash.

You have two ways to set quotas for users. You can limit users by inodes or by kilobyte-sized disk blocks. Every Linux file requires an inode. Therefore, you can limit users bythe number of files or by absolute space. You can set up different quotas for different filesystems. For example, you can set different quotas for users on the /home and /tmp directories if they are mounted on their own partitions.

Limits on disk blocks restrict the amount of disk space available to a user on your system. Older versions of Red Hat Linux included LinuxConf, which included a graphical tool to configure quotas. As of this writing, Red Hat no longer has a graphical quota configuration tool. Today, you can configure quotas on RHEL only through the command line interface.

1. vi /etc/fstab

/dev/hda11/dataext3defaults,usrquota 1 2

2. Either Reboot the System or remount the partition.

Mount –o remount /dev/hda11 /data

3. touch /data/aquota.user

4. quotacheck –ufm /data

5. quotaon -u /data

6. edquota –u user1 /data

and Specified the Soft limit and hard limit on opened file.

To verify either quota is working or not:

Soft limit specify the limit to generate warnings to users and hard limit can’t cross by the user. Use the quota command or repquota command to monitor the quota information.