COURCE TITLE DURATION LPI-202 Advanced Linux Professional Institute 40 H.

Transcription

1 COURCE TITLE DURATION LPI-202 Advanced Linux Professional Institute 40 H. IMPLEMENTING A WEB SERVER Apache Architecture Installing PHP Apache Configuration Files httpd.conf Server Settings httpd.conf Main Configuration httpd.conf VirtualHost Configuration Apache Logging Log Analysis Delegating Administration Directory Protection Directory Protection with AllowOverride Common Uses for.htaccess Apache Troubleshooting MAINTAINING A WEB SERVER HTTP Virtual Servers Virtual Hosting DNS Implications Virtual Hosting Security Implications Port and IP based Virtual Hosts Name-based Virtual Host Symmetric Encryption Algorithms Asymmetric Encryption Algorithms Digital Certificates SSL Using mod_ssl.so 1 I.C.T.C. International Computer Training Center

2 IMPLEMENTING A PROXY SERVER & DHCP CONFIGURATION Squid Overview Squid File Layout Squid Access Control Lists Applying Squid ACLs Monitoring Squid DHCP Protocol Operation IP to MAC Address Mapping with ARP Configuring a DHCP server SAMBA SERVER CONFIGURATION Introducing Samba Samba Daemons Accessing Windows/Samba Shares from Linux Samba Utilities Samba Configuration Files The smb.conf File Share Authentication Share-Level Access User-Level Access Mapping Users Samba Account Database User Share Restrictions NFS SERVER CONFIGURATION & SECURING FTP SERVERS File Sharing via NFS NFSv4 NFS Clients NFS Server Configuration 2 I.C.T.C. International Computer Training Center

3 The FTP Protocol Active Mode FTP Passive Mode FTP vsftpd Configuring vsftpd Anonymous FTP with vsftpd Pure-FTPd ProFTPD PAM AUTHENTICATION & LDAP CLIENT USAGE PAM Overview PAM Module Types PAM Order of Processing PAM Control Statements PAM Modules pam_unix pam_limits.so pam_cracklib.so pam_listfile.so LDAP What LDAP Provides LDAP Concepts LDAP Organization Entry Referencing Online LDAP Data Manipulation Querying LDAP Databases 3 I.C.T.C. International Computer Training Center

4 USING SERVERS SMTP SMTP Terminology SMTP Architecture SMTP Commands SMTP Session Sendmail Architecture Sendmail Components Sendmail Configuration Sendmail Remote Configuration Controlling Access Postfix Features Postfix Architecture Postfix Components Postfix Configuration master.cf main.cf Virtual Domains Configuration Commands Postfix Logging MANAGING LOCAL AND REMOTE DELIVERY Filtering Procmail SpamAssassin Accessing The IMAP4 Protocol Courier IMAP Dovecot POP3/IMAP Server 4 I.C.T.C. International Computer Training Center

5 CONFIGURING A ROUTER & SECURE SHELL (SSH) Linux as a Router Configuring Routing Tables Using the iptables Command Netfilter Rule Syntax Netfilter Concepts Targets Common match_specs Netfilter: Stateful Packet Filter Firewall Connection Tracking Address Translation, Configuring NAT and PAT Secure Shell ssh and sshd Configuration Accessing Remote Shells SSH Port Forwarding Transferring Files SSH Key Management ssh-agent SECURITY TASKS & TCP WRAPPER Security Advisories Discovering Hosts Netcat Nessus Insecurity Scanner Configuring OpenVAS Intrusion Detection Systems Snort Rules Writing Snort Rules TCP Wrappers The /etc/hosts.allow & /etc/hosts.deny Files 5 I.C.T.C. International Computer Training Center

6 /etc/hosts.{allow,deny} Shortcuts Advanced TCP Wrappers Xinetd Connection Limiting and Access Control Xinetd: Resource limits, redirection, logging IDENTIFYING BOOT STAGES AND TROUBLESHOOTING BOOTLOADERS Partition Considerations Booting Linux on PCs LILO Options LILO Configuration GRUB Configuration /etc/inittab Typical SysV Init Script System Configuration Files Controlling Service Startup Managing Daemons Inability to Boot Troubleshooting With GRUB GENERAL TROUBLESHOOTING Important Log Files Hardware Discovery Tools Configuring New Hardware with hwinfo USB Devices Kernel Modules Handling Module Dependencies Displaying Binary Files lsof and fuser Kernel Modules Troubleshooting strace and ltrace 6 I.C.T.C. International Computer Training Center

7 TROUBLESHOOTING SYSTEM RESOURCES Key Environment Variables Locales Bourne sh: Configuration Files Kernel Tuning Kernel Tuning via /proc/sys/ Default User Files Manually Installed Shared Libraries TROUBLESHOOTING ENVIRONMENT CONFIGURATIONS Logging In User Administration Group Administration User and Group Concepts Password Aging Gathering Login Session Info cron The crontab Command crontab Format /etc/cron.*/ Directories System Logging /etc/rsyslog.conf 7 I.C.T.C. International Computer Training Center