Exercise 5 Server Configuration, Web and FTP Instructions and preparatory questions Administration of Computer Systems, Fall 2008

Transcription

1 Exercise 5 Server Cnfiguratin, Web and FTP Instructins and preparatry questins Administratin f Cmputer Systems, Fall 2008 This dcument is available nline at:

2 Exercise 5 Server Cnfiguratin, Web and FTP Practical infrmatin Read this first! This exercise cnsists f tw parts: 1. Preparatry questins in this dcument that shuld be answered befre cming t the exercise sessin (befre starting the exercise sessin the assistant will ask yu t shw and explain yur answers) 2. A practical exercise sessin where yu will wrk with actual equipment in rder t answer the remaining questins in this dcument. The wrk n preparatry questins as well as practical exercise wrk is t be carried ut tgether with yur assigned partner. Befre starting the practical part shw the assistant that yu have finished the preparatry questins, when yu are dne with the practical part yu must ntify the assistant s that he/she can check and sign yur wrk. N signature = n credits fr the exercise. If yu get stuck n the practical part the assistant is there t assist yu, hwever in rder t learn yu are f curse expected t cme up with slutins mainly n yur wn. Infrmatin necessary t cmplete bth the preparatry and practical part f the exercise will be given at the lectures. Lecture slides are available at the curse webpage Gd luck and have fun!

3 Intrductin In this exercise yu will set up web services using Windws 2003 and Internet Infrmatin Services (IIS). We want t create a web site with persnal web pages fr each user n the system. We als want t allw users t uplad their web pages using the File Transfer Prtcl (FTP) ver the netwrk frm remte cmputers. Finally yu will cnfigure and use the Event Viewer t analyze a number f situatins. Netwrk cnfiguratin Befre we begin, we need t d sme basic system cnfiguratins, much like we did in exercise 4: First, start the virtual machine Navigate t the directry D:\VMW\te2003_ex5\ Duble-click n the VMware cnfiguratin file (.vmx) This will start VMware Player and bt the guest perating system Lg in t the virtual machine as Administratr (passwrd: ide) Cnfigure the netwrk cnnectin Set up the fllwing static IP cnfiguratin: Use the virtual machine IP address n the sticker at the frnt f yur cmputer. What is the IP number? The subnet mask is The default gateway is The DNS servers are and Save the settings and verify that yu can access the internet Cnfigure the cmputer name Change the cmputer name t match the sticker at the frnt f yur cmputer. The virtual machine hstname is the ne cntaining virt What is it yur hst name? Restart the cmputer Create users Create tw user accunts, ne fr each member f the lab grup (if yu wrk by yur self, create tw accunts anyway, with different user names and passwrds)

4 Preparatry questin 1 What are the main security issues with the FTP prtcl? Cnfiguring the FTP service We want t allw users t lg in t the server and uplad files frm remte cmputers. This is made pssible by the File Transfer Prtcl (FTP). Cnfigure the machine t act as an FTP server. Frm the start-menu, select Manage Yur Server Click n Manage this applicatin server. This pens up the Applicatin server cnfiguratin windw The applicatin f interest in this lab is Internet Infrmatin Services (IIS). T avid cnfusin, yu can hide the ther applicatins by right-clicking n the IIS Manager and selecting New windw frm here In the IIS Manager, expand the lcal cmputer and select FTP Sites Start the FTP Site Creatin Wizard by right-clicking and selecting New -> FTP Site Create a new FTP Site with the fllwing cnfiguratin: The FTP server shuld be bund t the IP-address f the server and listen t TCP prt 21 (Default fr the FTP prtcl) The FTP server shuld prvide user islatin. This allws each user n the system t have a private FTP hme directry. Why is it a gd idea t islate the users hme directries? The FTP Site rt directry shuld be C:\Inetpub\ftprt Allw read and write access t the FTP rt directry Set up FTP hme directries Use Windws Explrer (r MY Cmputer) t navigate t the FTP rt directry (C:\Inetpub\ftprt) Create a new flder with the name LcalUser Create a subdirectry LcalUser\Public. This will be the hme directry fr annymus users

5 Fr each f yur tw user accunts, create a subdirectry in LcalUser with the same name as the user lgin name Fr the Public hme directry, give read permissin t everyne (including unknwn annymus users). Fr each f the user hme directries, give read, mdify and write and permissins t the user in questin. Test FTP access - Cmmand line client Open the Cmmand Prmpt Type ftp fllwed by the IP address f yur server Lg in as annymus (any passwrd is accepted) Des it wrk? If nt, try t fix the prblem type quit t clse the ftp sessin Try t lg in using the lgin names and passwrds f yur tw user accunts Test FTP access - Graphical client Open My Cmputer In the Address field, type ftp:// fllwed by the IP address f the server Windws will autmatically lg in as annymus Try t create a file r directry. Is that allwed? Shuld it be allwed? Lg in with ne f the user accunts instead (select File -> Lgin As) Try t create a file r directry. Is that allwed? Shuld it be allwed? Cnfiguring the web service Cnfigure the machine t act as a web server In the IIS Manager, expand the lcal cmputer and select Web Sites. As yu see, n sites are cnfigured at the mment Create a new web site Use a site descriptin f yur chice Use the IP-address f the server Cnfigure the server t listen n TCP prt 80 (the default prt fr the HTTP prtcl) Set the site hme directry t C:\Inetpub\wwwrt and allw read permissin t that directry

6 If yu want t, yu can use anther hme directry. In that case, yu need t cpy the files in wwwrt t the new lcatin. Yu als need t make shure that all users have read access t the directry yu chse Test the web site Start Internet Explrer Enter yur IP address. Describe what the page yu see cntains: Set up virtual directries In the IIS Manager, expand the lcal cmputer and click n Web Sites Right-click n yur web site and select New -> Virtual Directry Create a virtual directry named user1 pinting t the FTP hme directry f ne f yur users Create a virtual directry named user2 pinting t the ther user's FTP hme directry Preparatry questin 2 What is a virtual directry in the cntext f the IIS web server, why is it useful? Change the main web page In C:\Inetpub\wwwrt, yu will find a file named index.asp This is an example main page fr the web site In the IIS Manager, right-click n yur web site and select Prperties Use the Dcuments tab t make index.asp the default web page index.asp is a dynamic webpage. It cntains a few lines f embedded VBScript cde that lks up the cmputer name f the server and displays it. Dynamic webpages are nt allwed in the default web site cnfiguratin. We need t allw it Cnfigure the web server t allw script executin and Active Server Pages (ASP). D this frm the Web Service Extensins flder in the IIS Manager Test yur new web server cnfiguratin t make sure it wrks. Publish user web pages

7 Minimize the virtual machine windw In the hst OS, create a web page fr each f yur users (in its simplest frm, a web page is just a text file with the file extensin ".htm") The tw files shuld bth be named index.html (save the files at different places) Open My Cmputer In the Address field, type ftp:// fllwed by the IP address f yur server Lg in as ne f yur users and uplad index.htm t the server Repeat the prcedure fr the ther user Test the web page In the hst OS, pen a web brwser and enter the IP address f the server Can yu access the user web pages? If nt, try t fix the prblem If there are available cmputers in the rm, try t access the web site frm anther cmputer Passwrd-prtect user pages Let's pretend that ne f yur users has secret infrmatin n his r her web page Cnfigure the web server t prhibit annymus accesses t that user's directry Try the new cnfiguratin. When yu access the "secret" page with a web brwser, yu shuld see a pp-up windw prmpting fr a lgin name and a passwrd

8 Cnfiguring and using the Event Viewer The Event Viewer is a tl that makes it pssible t cnfigure and analyze lgs fr different events in the system. Create a lgin event. Create the user Adam with passwrd 1234 Lg ut Lg in as user Adam. Take nte f the time. The clck in the virtual machine is Lg ut Lg in as user Administratr Open up the Event Viewer Start Administrative Tls Event Viewer Save all present lg files Right click Save lg file as Pick a suitable flder and filename Change the lg cnfiguratins Increase the maximum file size t 100 MB Set verwrite events t lder than 10 days Yu will get an errr when yu click Apply. Explain. Create a warning event Open up Ntepad and write a few characters. Restart the machine frm within the Virtual Machine. Ntepad will try t clse but realize that yu didn t save the file. Answare Cancel t prevent the system frm shutting dwn. Analyze events Start the Event Viewer Open up the Security lg and try t find the user Adam Accrding t the lg, at what time did Adam lg in? Open up the Systems lg and examine the latest warning. What was the reasn fr the warning? Hw many events are there in ttal in the Systems lg? Filter ut warnings nly fr the Systems lg. Hw many events are there left nw? In Depth Material

9 Exercise 5 reprt sheet Fill ut in ink Grup member 1 First name Last name Persnal number - Grup member 2 First name Last name Persnal number - Exercise 5 assistant signatures Preparatry questins OK: Web OK: FTP OK: EVE OK: Date: LAB ASSISTANT DETACHES AND KEEPS THIS PART Yur signatures belw indicate that yu have cmpleted the preparatry questins and exercise 5 sessin n yur wn. Sharing cde, answers etc. between grups is nt allwed. Signature grup member 1 Persnal number Date Signature grup member 2 Persnal number Date