Lab Tasks 1. Configuring a Slave Name Server 2. Configure rndc for Secure named Control

Transcription

1 Khóa học bao trùm tất cả các vấn đề về dịch vụ mạng trong doanh nghiệp bao gồm: khái niệm DNS, triển khai DNS sử dụng Bind; khái niệm LDAP và sử dụng OpenLDAP; dịch vụ Web với Apache; dịch vụ FTP với vsftpd; caching, filtering proxies với Squid; SMB/CIFS (Windows networking) với Samba; ... Hỗ trợ Distributions: Red Hat Enterprise Linux 5 Fedora Core 6 SUSE Linux Enterprise Server 10 SUSE Linux 10.1 Thời lượng: 40h Nội dung khóa học 1. DNS Concepts 1. Naming Services 2. DNS - A Better Way 3. The Domain Name Space 4. Delegation and Zones 5. Server Roles 6. Resolving Names and IP Addresses 7. BIND Administration 8. rndc Key Configuration 9. Configuring the Resolver 10. Testing Resolution 1. Configuring a Slave Name Server 2. Configure rndc for Secure named Control 3. Configuring BIND 1. BIND Configuration Files 2. named.conf Syntax and Options Block 3. Creating a Site-Wide Cache 4. Zones In named.conf 5. Zone Database File Syntax 6. SOA - Start of Authority 7. A & PTR - Address & Pointer Records 8. NS - Name Server 9. CNAME & MX - Alias & Mail Host 10. Abbreviations and Gotchas 11. $ORIGIN and $GENERATE 1. Configuring BIND Zone Files 2. Creating DNS Hierarchies 1. Subdomains and Delegation 2. Delegating Zones 3. in-addr.arpa. Delegation 1 / 8

2 4. Issues with in-addr.arpa. 5. RFC2317 & in-addr.arpa. 1. Create a Subdomain in an Existing Domain 2. Subdomain Delegation 3. Securing BIND and DNS 1. Split Namespaces 2. Using Views with BIND 9 3. Address Match Lists & ACLs 4. Restricting Queries 5. Restricting Zone Transfers 6. Running BIND in a chroot jail 7. Dynamic DNS Concepts 8. Allowing Dynamic DNS Updates 9. DDNS Administration with nsupdate 10. Common Problems 1. Configuring Dynamic DNS 2. Securing BIND DNS 3. LDAP Concepts and Clients 1. Centralized Authentication 2. Directory Services 3. LDAP 4. What LDAP Provides 5. LDAP Concepts and Organization 6. Schema 7. Entry Referencing 8. LDIF 9. LDAP Architecture, Security, Implementa tions, and Client Configuration 10. Querying LDAP Databases 1. Querying an Existing LDAP Directory 2. OpenLDAP Servers 1. OpenLDAP Components 2. Configuring slapd 3. /etc/openldap/ldap.conf Global Parameters 4. Schema Definition 2 / 8

3 5. OpenLDAP Access Control 6. Backend Types and Configuration 7. Database Configuration 8. Indexes 9. Replicas 10. LDAP Replica Configuration 11. OpenLDAP Configuration Syntax Check 1. Configuring LDAP Directory Services 2. Modifying LDAP Directory Entries 3. Using OpenLDAP 1. Managing slapd 2. Online and Offline LDAP Data Manipulation 3. Native LDAP Authentication and Client Config 1. Configuring LDAP for Secure TLS Access 2. Configuring LDAP Clients and Servers for Directory Authentication 3. Using Apache 1. HTTP Operation 2. Apache History and Status 3. Apache Architecture 4. SSL/HTTPS and Apache 5. Apache Configuration Files 6. httpd.conf 7. Dynamic Shared Objects 8. Adding Modules to Apache 9. Apache Logging 10. Log Analysis 11. The Webalizer 1. Configure Apache 2. Apache Content 3. Virtual Hosting with Apache 1. HTTP Virtual Servers 2. DNS Implications 3. Security Implications 4. IP-based Virtual Host 3 / 8

4 5. Name-based Virtual Host 6. Port-based Virtual Host 1. Configuring Virtual Hosts 2. Apache Security 1. Delegating Administration 2. Directory Protection 3. Common Uses for.htaccess 4. Symmetric Encryption Algorithms 5. Asymmetric Encryption algorithms 6. Digital Certificates 7. SSL Using mod_ssl.so 1. Using.htaccess Files 2. Using SSL Certificates with Apache 3. Apache Server-Side Programming Basics 1. Dynamic HTTP Content 2. PHP: Hypertext Preprocessor 3. Developer Tools for PHP 4. Installing PHP 5. Configuring PHP 6. Securing PHP 7. Security Related php.ini Configuration 8. Java Servlets and JSP 9. Apache's Tomcat 10. Installing Java SDK 11. Installing Tomcat Manually 12. Using Tomcat with Apache 1. CGI Scripts in Apache 2. Apache's Tomcat 3. Using Tomcat with Apache 4. Installing Applications with Apache and Tomcat 5. Implementing an FTP Server 1. The FTP Protocol 2. FTP Operation 3. Active Mode FTP 4 / 8

5 4. Passive Mode FTP 5. WU-FTPD 6. vsftpd 7. Configuring vsftpd 8. Anonymous FTP with vsftpd 1. Configuring vsftpd 2. The Squid Proxy Server 1. Squid Overview, File Layout, and Access Control Lists 2. Applying Squid ACLs 3. Tuning Squid / Hierarchies 4. Bandwidth Metering 5. Monitoring Squid 6. Proxy Client Configuration 1. Installing and Configuring Squid 2. Squid Cache Manager CGI 3. Proxy Auto Configuration 4. Configure a Squid Proxy Cluster 5. Samba Concepts 1. SMB Network Protocol 2. NetBIOS and NetBEUI 3. NetBIOS Naming 4. Introducing Samba 5. Samba Daemons, Clients, and Utilities 6. Samba Configuration Files 7. The smb.conf File 1. Basic Samba Configuration 2. Using Samba 1. Unis and DOS Permissions 2. Unix and Windows Concepts 3. Name and Case Mangling 4. Sharing Home Directories 5. Sharing Printers 6. Restricting Access 7. Share-Level Access 5 / 8

6 8. User-Level Access 9. Mapping Users 10. SMB and Passwords 11. The smbpasswd Database 12. User Share Restrictions 1. Configuring Samba 2. Samba Share-Level Access 3. Samba User-Level Access 4. Samba Home Directory Shares 5. Samba Group Shares 6. SMTP Theory 1. SMTP 2. SMTP Terminology, Architecture, Com mands, and Extensions 3. SMTP AUTH 4. SMTP STARTTLS 5. SMTP Session 6. Sendmail 1. Sendmail Features, Process, Architecture, Components, and Configuration 2. Configuration Files 3. Databases 4. Text Files 5. Network Access 6. Masquerading Sendmail 7. Controlling Access 8. Configuring SMTP AUTH 9. Configuring SMTP START TLS 1. Configuring Sendmail 2. Sendmail Network Configuration 3. Sendmail Virtual Host Configuration 4. Sendmail SMTP AUTH Configuration 5. Sendmail STARTTLS Configuration 6. Postfix 1. Postfix Features, Architecture, Compo nents, and Configuration 2. master.cf 3. main.cf 4. Postfix Map Types 6 / 8

7 5. Postfix Pattern Matching 6. Advanced Options 7. Virtual Domains 8. Mail Filtering 9. Configuration and Management Com mands 10. Postfix Logging 11. Log file Analysis 12. chroot'ing Postfix 13. Postfix and SMTP AUTH 14. SMTP AUTH Server and Clients 15. Postfix Extensions 16. Postfix / TLS 17. TLS Server Configuration 18. Postfix Client Configuration 19. Other TLS Clients 20. Ensuring TLS Security 1. Configuring Postfix 2. Postfix Network Configuration 3. Postfix Virtual Host Configuration 4. Postfix SMTP AUTH Configuration 5. Postfix STARTTLS Configuration 6. IMAP, POP, Spam Filtering & Web Mail 1. Filtering 2. procmail 3. SpamAssassin 4. Sendmail Mail Filter (milter) 5. amavisd-new Mail Filtering 6. Accessing 7. The POP3 Protocol 8. The IMAP4 Protocol 9. Dovecot POP3/IMAP Server 10. Cyrus IMAP/POP3 Server 11. Cyrus IMAP MTA Integration 12. Cyrus Mailbox Administration 13. Fetchmail 14. SquirrelMail 1. Configuring Procmail & SpamAssassin 2. Configuring Cyrus IMAP 3. Configuring SquirrelMail 7 / 8

8 8 / 8