logo_mysql.gif

liber4e
 
 
 
 
 



GL615 - Linux for Unix Administrators

The GL615 is an accelerated course combining the topics in the GL250 "Enterprise Linux Systems Administration", and the GL275 "Enterprise Linux Networking Services". Current Version: L00

Prerequisites:

Students should already be experienced Unix administrators. Fundamentals such as the Unix command line and how to edit files will not be covered in class. A good understanding of network concepts, the TCP/IP protocol suite, and basic Unix security is also assumed. The accelerated pace of this class makes it more difficult for unprepared students to keep up. Less experienced students are encouraged to instead take the GL120 "Linux Fundamentals", GL250 "Enterprise Linux Systems Administration" or GL275 "Enterprise Linux Networking Services".

Current Version: L00

Supported Distributions:

Red Hat Enterprise Linux 6

SUSE Linux Enterprise 11

Course Outline:

  1. Linux Orientation

    1. FSF and GNU

    2. GPL “ General Public License

    3. Linux Kernel and Versioning

    4. Components of a Distribution

    5. SUSE Linux Products

    6. Red Hat Linux Products

  2. Linux Kernel & Hardware

    1. Hardware Discovery Tools

    2. Hardware and System Clock

    3. Console

    4. Virtual Terminals

    5. Serial Ports

    6. SCSI Devices

    7. USB Configuration

    8. Defining a Printer

    9. Tape Libraries

    10. Managing Linux Device Files

    11. Kernel Hardware Info “ /sys/

    12. /sys/ Structure

    13. udev

    14. Kernel Modules

    15. Configuring Kernel Components and Modules

    16. Handling Module Dependencies

    17. Configuring the Kernel via /proc/

    18. System Tools

  3. Lab Tasks

    1. Adjusting Kernel Options

    2. Configuring Print Queues

    3. Introduction to Troubleshooting Labs

    4. Troubleshooting Practice: Kernel Modules

  4. Boot Process & SysV Init

    1. Booting Linux on PCs

    2. GRUB Configuration

    3. Boot Parameters

    4. Initial ramdisk

    5. /sbin/init

    6. /etc/inittab

    7. /etc/rc.d/rc.sysinit

    8. Runlevel Implementation

    9. System Configuration Files

    10. Typical SysV Init Script

    11. The /etc/rc.local File

    12. Managing Daemons

    13. Controlling Service Startup

    14. Shutdown and Reboot

    15. Run Level and Kernel Information

  5. Lab Tasks

    1. Boot Process

    2. GRUB Command Line

    3. Basic GRUB Security

    4. Managing Services With chkconfig

    5. Troubleshooting Practice: Boot Process

  6. Software Maintenance

    1. RPM Architecture

    2. Working With RPMs

    3. Querying and Verifying with RPM

    4. Updating the Kernel RPM

    5. Using the YUM command

    6. YUM package groups

    7. Configuring YUM

    8. YUM Repositories

    9. Rebuilding Source RPM Packages

    10. Software Tools Comparison Matrix

  7. Lab Tasks

    1. Managing Software with RPM

    2. Creating a Custom RPM Repository

    3. Querying the RPM Database

    4. Installing Software via RPM & Source and Rebuilding SRPMs

    5. Using YUM

  8. Local Storage Administration

    1. Partitioning Disks with fdisk

    2. Partitioning Disks with parted

    3. Filesystem Creation

    4. Mounting Filesystems

    5. Extended Filesystem Maintenance

    6. Resizing Filesystems

    7. Managing an XFS Filesystem

    8. Swap

    9. Configuring Disk Quotas

    10. Setting Quotas

    11. Viewing and Monitoring Quotas

    12. Filesystem Attributes

    13. Backup Software

    14. Backup Examples

    15. Filesystem Creation and Management

  9. Lab Tasks

    1. Creating and Managing Filesystems

    2. Hot Adding Swap

    3. Setting User Quotas

    4. Using tar and cpio for Backups

    5. Using rsync and ssh for Backups

    6. Using dump and restore for Backups

  10. LVM & RAID

    1. Logical Volume Management

    2. Implementing LVM

    3. Creating Logical Volumes

    4. Manipulating VGs & LVs

    5. Advanced LVM Concepts

    6. system-config-lvm

    7. RAID Concepts

    8. Array Creation with mdadm

    9. Software RAID Monitoring

    10. Software RAID Control and Display

    11. LVM and RAID: Unix Tool Comparison

  11. Lab Tasks

    1. Creating and Managing LVM Volumes

    2. Creating and Managing a RAID-5 Array

  12. Remote Storage Administration

    1. Remote Storage Overview

    2. Remote Filesystem Protocols

    3. Remote Block Device Protocols

    4. NFS Clients

    5. NFS Server Configuration

    6. Implementing NFSv4

    7. AutoFS

    8. AutoFS Configuration

    9. SAN Multipathing

    10. Multipath Configuration

    11. Multipathing Best Practices

    12. iSCSI Architecture

    13. Open-iSCSI Initiator Implementation

    14. iSCSI Initiator Discovery

    15. iSCSI Initiator Node Administration

    16. Mounting iSCSI Targets at Boot

    17. iSCSI Multipathing Considerations

  13. Lab Tasks

    1. Using autofs

    2. NFS Server Configuration

    3. iSCSI Initiator Configuration

  14. User/Group Administration

    1. User and Group Concepts

    2. User Administration

    3. Modifying Accounts

    4. Group Administration

    5. Password Aging

    6. Default User Files

    7. Controlling Logins

    8. Manual DS Client Configuration

    9. system-config-authentication

    10. PAM Overview

    11. PAM Module Types

    12. PAM Order of Processing

    13. PAM Control Statements

    14. pam_wheel.so

    15. pam_limits.so

    16. User/Group Administration Comparison Matrix

  15. Lab Tasks

    1. User and Group Administration

    2. Using LDAP for Centralized User Accounts

    3. Troubleshooting Practice: Account Management

    4. Restricting superuser access to wheel group membership

    5. Setting Limits with the pam_limits Modules

    6. Using pam_limits to Restrict Simultaneous Logins

  16. Security Administration

    1. Security Concepts

    2. Tightening Default Security

    3. Security Advisories

    4. File Access Control Lists

    5. Manipulating FACLs

    6. Viewing FACLs

    7. Backing Up FACLs

    8. File Creation Permissions with umask

    9. User Private Group Scheme

    10. Alternatives to UPG

    11. TCP Wrappers Concepts

    12. TCP Wrappers Concepts

    13. Xinetd

    14. Basic Firewall Activation

    15. Netfilter Concepts

    16. Using the iptables Command

    17. Common match_specs

    18. Connection Tracking

    19. SELinux Security Framework

    20. SELinux Modes

    21. SELinux Commands

    22. Choosing an SELinux Policy

    23. SELinux Booleans

    24. SELinux Policy Tools

    25. (X)INETD and Firewalls

  17. Lab Tasks

    1. User Private Groups

    2. Using Filesystem ACLs

    3. Securing xinetd Services

    4. Enforcing Security Policy with xinetd

    5. Securing Services with TCP Wrappers

    6. Securing Services with Netfilter

    7. Exploring SELinux Modes

    8. SELinux File Contexts

  18. Process Administration

    1. at & cron Usage

    2. Anacron

    3. Viewing Processes

    4. Managing Processes

    5. Tuning Process Scheduling

    6. Process Accounting

    7. Setting Resource Limits via ulimit

  19. Lab Tasks

    1. Creating and Managing User Cron Jobs

    2. Adding System cron Jobs

    3. Using BSD Process Accounting

  20. Networking

    1. Linux Network Interfaces

    2. Ethernet Hardware Tools

    3. Network Configuration with ip Command

    4. Configuring Routing Tables

    5. IP to MAC Address Mapping with ARP

    6. Starting and Stopping Interfaces

    7. NetworkManager

    8. DNS Clients

    9. DHCP Clients

    10. Network Diagnostics

    11. Information from netstat and ss

    12. Managing Network-Wide Time

    13. Continual Time Sync with NTP

    14. Configuring NTP Clients

    15. Multiple IP Addresses

    16. Enabling IPv6

    17. Interface Bonding

    18. Interface Bridging

    19. 802.1q VLANS

    20. Network Configuration Tools

  21. Lab Tasks

    1. Network Discovery

    2. Basic Client Networking

    3. NTP Client Configuration

    4. Multiple IP Addresses Per Network Interface

    5. Configuring IPv6

    6. Troubleshooting Practice: Networking

  22. Monitoring & Troubleshooting

    1. System Status “ Memory

    2. System Status “ I/O

    3. System Status “ CPU

    4. Performance Trending with sar

    5. Troubleshooting Basics: The Process

    6. Troubleshooting Basics: The Tools

    7. System Logging

    8. Rsyslog

    9. /etc/rsyslog.conf

    10. Log Management

    11. Log Anomaly Detector

    12. strace and ltrace

    13. Troubleshooting Incorrect File Permissions

    14. Inability to Boot

    15. Typos in Configuration Files

    16. Corrupt Filesystems

    17. RHEL6 Rescue Environment

    18. Process Tools

  23. Lab Tasks

    1. Setting up a Full Debug Logfile

    2. Remote Syslog Configuration

    3. Recovering Damaged MBR

  24. BIND DNS

    1. The Domain Name Space

    2. Delegation and Zones

    3. Server Roles

    4. Resolving Names

    5. Resolving IP Addresses

    6. Basic BIND Administration

    7. Configuring the Resolver

    8. Testing Resolution

    9. rndc Key Configuration

    10. named.conf Options Block

    11. Creating a Site-Wide Cache

    12. Zones In named.conf

    13. Zone Database File Syntax

    14. SOA “ Start of Authority

    15. A & PTR “ Address & Pointer Records

    16. NS “ Name Server

    17. CNAME & MX “ Alias & Mail Host

    18. Abbreviations and Gotchas

    19. $GENERATE, $ORIGIN, and $INCLUDE

  25. Lab Tasks

    1. Configuring a Slave Name Server

    2. Use rndc to Control named

    3. Configuring BIND Zone Files

  26. OpenLDAP

    1. OpenLDAP: Server Architecture

    2. OpenLDAP: Backends

    3. OpenLDAP: Replication

    4. OpenLDAP: Configuration Options

    5. OpenLDAP Server Tools

    6. OpenLDAP Client Tools

    7. LDIF: LDAP Data Interchange Format

    8. Enabling LDAP-based Login

    9. System Security Services Daemon (SSSD)

  27. Lab Tasks

    1. Building An OpenLDAP Server

    2. Enabling TLS For An OpenLDAP Server

    3. Enabling LDAP-based Logins

  28. vsFTPd & Apache

    1. vsftpd

    2. Anonymous FTP with vsftpd

    3. Configuring vsftpd

    4. HTTP Operation

    5. Apache Architecture

    6. Apache Configuration Files

    7. httpd.conf “ Server Settings

    8. httpd.conf “ Main Configuration

    9. httpd.conf “ VirtualHost Configuration

    10. Virtual Hosting DNS Implications

    11. Adding Modules to Apache

    12. Apache Logging

    13. Delegating Administration

    14. Directory Protection

    15. Directory Protection with AllowOverride

    16. Common Uses for .htaccess

    17. SSL Using mod_ssl.so

  29. Lab Tasks

    1. Configuring vsftpd

    2. Apache Architecture

    3. Apache Content

    4. Configuring Virtual Hosts

    5. Using .htaccess Files

    6. Using SSL Certificates with Apache

  30. SQUID Proxy Server

    1. Squid Overview

    2. Squid File Layout

    3. Squid Access Control Lists

    4. Applying Squid ACLs

    5. Tuning Squid & Configuring Cache Hierarchies

    6. Bandwidth Metering

    7. Monitoring Squid

    8. Proxy Client Configuration

  31. Lab Tasks

    1. Installing and Configuring Squid

    2. Squid Cache Manager CGI

    3. Proxy Auto Configuration

    4. Configure a Squid Proxy Cluster

  32. Samba

    1. Samba Daemons

    2. Accessing Windows/Samba Shares from Linux

    3. Samba Utilities

    4. Samba Configuration Files

    5. The smb.conf File

    6. Mapping Permissions and ACLs

    7. Mapping Linux Concepts

    8. Sharing Home Directories

    9. Sharing Printers

    10. Share Authentication

    11. User-Level Access

    12. Mapping Users

    13. Samba Account Database

    14. User Share Restrictions

  33. Lab Tasks

    1. Samba Share-Level Access

    2. Samba User-Level Access

    3. Samba Group Shares

    4. Configuring Samba

    5. Samba Home Directory Shares

  34. Postfix

    1. Postfix Features

    2. Postfix Components

    3. Postfix Configuration

    4. master.cf

    5. main.cf

    6. Postfix Map Types

    7. Postfix Pattern Matching

    8. Virtual Domains

    9. Postfix Mail Filtering

    10. Configuration Commands

    11. Management Commands

    12. SMTP AUTH Server and Relay Control

    13. SMTP AUTH Clients

    14. TLS Server Configuration

    15. Postfix Client Configuration for TLS

  35. Lab Tasks

    1. Configuring Postfix

    2. Postfix Network Configuration

    3. Postfix Virtual Host Configuration

    4. Postfix SMTP AUTH Configuration

    5. Postfix STARTTLS Configuration

  36. Email Services

    1. Procmail

    2. SpamAssassin

    3. Cyrus IMAP/POP3 Server

    4. Cyrus IMAP MTA Integration

    5. Cyrus Mailbox Administration

  37. Lab Tasks

    1. Configuring Procmail & SpamAssassin

    2. Configuring Cyrus IMAP

  1. Installing RHEL6

    1. Anaconda: An Overview

    2. Anaconda: Booting the System

    3. Anaconda: Common Boot Options

    4. Anaconda: Loading Anaconda and Packages

    5. Anaconda: Storage Options

    6. Anaconda: Troubleshooting

    7. FirstBoot

    8. Kickstart

    9. A Typical Install

  2. Lab Tasks

    1. Linux Installation

    2. Automating Installation with Kickstart

 

Jose Nuno Neto
 
 
 
 
linux mysql
apache php