Exercise 5 Server Cnfiguratin, Web and FTP Instructins and preparatry questins Administratin f Cmputer Systems, Fall 2008 This dcument is available nline at: http://www.hh.se/te2003
Exercise 5 Server Cnfiguratin, Web and FTP Practical infrmatin Read this first! This exercise cnsists f tw parts: 1. Preparatry questins in this dcument that shuld be answered befre cming t the exercise sessin (befre starting the exercise sessin the assistant will ask yu t shw and explain yur answers) 2. A practical exercise sessin where yu will wrk with actual equipment in rder t answer the remaining questins in this dcument. The wrk n preparatry questins as well as practical exercise wrk is t be carried ut tgether with yur assigned partner. Befre starting the practical part shw the assistant that yu have finished the preparatry questins, when yu are dne with the practical part yu must ntify the assistant s that he/she can check and sign yur wrk. N signature = n credits fr the exercise. If yu get stuck n the practical part the assistant is there t assist yu, hwever in rder t learn yu are f curse expected t cme up with slutins mainly n yur wn. Infrmatin necessary t cmplete bth the preparatry and practical part f the exercise will be given at the lectures. Lecture slides are available at the curse webpage http://www.hh.se/te2003/ Gd luck and have fun!
Intrductin In this exercise yu will set up web services using Windws 2003 and Internet Infrmatin Services (IIS). We want t create a web site with persnal web pages fr each user n the system. We als want t allw users t uplad their web pages using the File Transfer Prtcl (FTP) ver the netwrk frm remte cmputers. Netwrk cnfiguratin Befre we begin, we need t d sme basic system cnfiguratins, much like we did in exercise 4: First, start the virtual machine Navigate t the directry D:\VMW\te2003_ex5\ Duble-click n the VMware cnfiguratin file (.vmx) This will start VMware Player and bt the guest perating system Lg in t the virtual machine as Administratr (passwrd: ide) Cnfigure the netwrk cnnectin Set up the fllwing static IP cnfiguratin: Use the virtual machine IP address n the sticker at the frnt f yur cmputer. What is the IP number? The subnet mask is 255.255.255.128 The default gateway is 192.168.203.1 The DNS servers are 194.47.0.30 and 194.47.0.23 Save the settings and verify that yu can access the internet Cnfigure the cmputer name Change the cmputer name t match the sticker at the frnt f yur cmputer. The virtual machine hstname is the ne cntaining virt What is it yur hst name? Restart the cmputer Create users Create tw user accunts, ne fr each member f the lab grup (if yu wrk by yur self, create tw accunts anyway, with different user names and passwrds)
Preparatry questin 1 What are the main security issues with the FTP prtcl? Cnfiguring the FTP service We want t allw users t lg in t the server and uplad files frm remte cmputers. This is made pssible by the File Transfer Prtcl (FTP). Cnfigure the machine t act as an FTP server. Frm the start-menu, select Manage Yur Server Click n Manage this applicatin server. This pens up the Applicatin server cnfiguratin windw The applicatin f interest in this lab is Internet Infrmatin Services (IIS). T avid cnfusin, yu can hide the ther applicatins by right-clicking n the IIS Manager and selecting New windw frm here In the IIS Manager, expand the lcal cmputer and select FTP Sites Start the FTP Site Creatin Wizard by right-clicking and selecting New -> FTP Site Create a new FTP Site with the fllwing cnfiguratin: The FTP server shuld be bund t the IP-address f the server and listen t TCP prt 21 (Default fr the FTP prtcl) The FTP server shuld prvide user islatin. This allws each user n the system t have a private FTP hme directry. Why is it a gd idea t islate the users hme directries? The FTP Site rt directry shuld be C:\Inetpub\ftprt Allw read and write access t the FTP rt directry Set up FTP hme directries Use Windws Explrer (r MY Cmputer) t navigate t the FTP rt directry (C:\Inetpub\ftprt) Create a new flder with the name LcalUser Create a subdirectry LcalUser\Public. This will be the hme directry fr annymus users
Fr each f yur tw user accunts, create a subdirectry in LcalUser with the same name as the user lgin name Fr the Public hme directry, give read permissin t everyne (including unknwn annymus users). Fr each f the user hme directries, give read, mdify and write and permissins t the user in questin. Test FTP access - Cmmand line client Open the Cmmand Prmpt Type ftp fllwed by the IP address f yur server Lg in as annymus (any passwrd is accepted) Des it wrk? If nt, try t fix the prblem type quit t clse the ftp sessin Try t lg in using the lgin names and passwrds f yur tw user accunts Test FTP access - Graphical client Open My Cmputer In the Address field, type ftp:// fllwed by the IP address f the server Windws will autmatically lg in as annymus Try t create a file r directry. Is that allwed? Shuld it be allwed? Lg in with ne f the user accunts instead (select File -> Lgin As) Try t create a file r directry. Is that allwed? Shuld it be allwed? Cnfiguring the web service Cnfigure the machine t act as a web server In the IIS Manager, expand the lcal cmputer and select Web Sites. As yu see, n sites are cnfigured at the mment Create a new web site Use a site descriptin f yur chice Use the IP-address f the server Cnfigure the server t listen n TCP prt 80 (the default prt fr the HTTP prtcl) Set the site hme directry t C:\Inetpub\wwwrt and allw read permissin t that directry
If yu want t, yu can use anther hme directry. In that case, yu need t cpy the files in wwwrt t the new lcatin. Yu als need t make shure that all users have read access t the directry yu chse Test the web site Start Internet Explrer Enter yur IP address. Describe what the page yu see cntains: Set up virtual directries In the IIS Manager, expand the lcal cmputer and click n Web Sites Right-click n yur web site and select New -> Virtual Directry Create a virtual directry named user1 pinting t the FTP hme directry f ne f yur users Create a virtual directry named user2 pinting t the ther user's FTP hme directry Preparatry questin 2 What is a virtual directry in the cntext f the IIS web server, why is it useful? Change the main web page In C:\Inetpub\wwwrt, yu will find a file named index.asp This is an example main page fr the web site In the IIS Manager, right-click n yur web site and select Prperties Use the Dcuments tab t make index.asp the default web page index.asp is a dynamic webpage. It cntains a few lines f embedded VBScript cde that lks up the cmputer name f the server and displays it. Dynamic webpages are nt allwed in the default web site cnfiguratin. We need t allw it Cnfigure the web server t allw script executin and Active Server Pages (ASP). D this frm the Web Service Extensins flder in the IIS Manager Test yur new web server cnfiguratin t make sure it wrks. Publish user web pages
Minimize the virtual machine windw In the hst OS, create a web page fr each f yur users (in its simplest frm, a web page is just a text file with the file extensin ".htm") The tw files shuld bth be named index.html (save the files at different places) Open My Cmputer In the Address field, type ftp:// fllwed by the IP address f yur server Lg in as ne f yur users and uplad index.htm t the server Repeat the prcedure fr the ther user Test the web page In the hst OS, pen a web brwser and enter the IP address f the server Can yu access the user web pages? If nt, try t fix the prblem If there are available cmputers in the rm, try t access the web site frm anther cmputer Passwrd-prtect user pages Let's pretend that ne f yur users has secret infrmatin n his r her web page Cnfigure the web server t prhibit annymus accesses t that user's directry Try the new cnfiguratin. When yu access the "secret" page with a web brwser, yu shuld see a pp-up windw prmpting fr a lgin name and a passwrd
Exercise 5 reprt sheet Fill ut in ink Grup member 1 First name Last name Persnal number - Grup member 2 First name Last name Persnal number - Exercise 5 assistant signatures Preparatry questins OK: Web OK: FTP OK: ASP OK: Date: LAB ASSISTANT DETACHES AND KEEPS THIS PART Yur signatures belw indicate that yu have cmpleted the preparatry questins and exercise 5 sessin n yur wn. Sharing cde, answers etc. between grups is nt allwed. Signature grup member 1 Persnal number Date Signature grup member 2 Persnal number Date