Duration
5 days
Overview
Linux Network Services Implementation and Security.
- After the training, the student should learn the following core skills:
- Linux core components
- OS init sequence
- Run level concepts
- Linux kernel
- Device driver
- Network configuration
- Software package management
- Troubleshooting tools and techniques
Who Should Attend
- Experienced Windows system professionals who want to enhance their value by gaining an additional set of skill and qualification in the fastest growing operating system in the world.
- Existing Unix system administrators who will administer Linux systems, and who needs to learn the followings:
- Linux network services such as web server, Linux NIS, LDAP, mail server, DNS server.
- Linux security such as Linux PAM, Linux firewall, xinetd, SSL, secure shell.
Prerequisites
- Minimum 1-2 years experienced in Windows operating system in a networked environment. As this is not a beginners course, although not necessary, students who has no prior user level Unix experience are encouraged to gain some Linux hands on experience before attending the training.
- Experienced systems administrators in Unix or Netware environment; OR
- Attended Linux administration training.
Course Objectives
- Teaches implementation, troubleshooting and tuning of popular Linux network services.
- Teaches core Linux security concepts, network security tools and implementation.
- Prepares the student for popular Linux certification examinations.
Course Content
Xinetd based Network Services
- Concepts - stand-alone service against inetd or xinetd services
- Xinetd configuration
- Xinetd access control, host based, time based
- Xinetd logging
- Access control using /etc/hosts.allow and /etc/hosts.deny
Controlling services start up
- System V runlevel init scripts revisit
- Starting a service manually - the service command
- Starting a service automatically - the chkconfig command
DHCP
- DHCP overview
- DHCP pros and cons
- Dhcp.conf – configuration
- Dhcp leases
- Dhcp clients
NIS
- NIS as a network lookup services
- NIS elements
- NIS Server(Master and Slave )
- NIS Clients
- NIS Domain
- NIS configuration
- NIS utilities
- NIS advantages and disadvantages
LDAP
- LDAP overview
- What are directories
- LDPA implementation examples
- Openldap
- Openldap Configuration
- LDAP operations and commands
Ftp Service
- Ftp server feature
- Vsftpd server features
- Vsftpd configuration
- Other ftp servers - wu-ftpd
NFS
- NFS concepts
- RPC and portmap server
- NFS servers daemons
- Exporting file shares - NFS Configuration
- NFS clients
- Mounting and NFS share
- Viewing exported shares - showmount
- NFS Security
- NFS performance tuning
Samba
- Windows file print service - SMB protocol
- Samba name service
- Network browsing
- Samba versions and compatibility with Windows
- Samba daemons
- Samba Configuration
- Samba security mode - user, domain and share modes
- Encrypted passwords
- Sharing files
- Sharing printers
- Samba client - smbclient
- Linux special - smbmount
- Samba as Primary Domain Controller
- Joining an existing domain
- Browser based configuration tool - swat
Domain Name Service
- DNS concepts and overview
- DNS domain and zone
- Berkeley Internet Name Domain(BIND) server
- BIND configurations - main configuration file
- Root name servers
- Name Servers
- MX Records
- Forward lookup zones configuration
- Reverse lookup zones configuration
- Slave server configurations
- Zone transfer
- BIND utilities - host, dig , nslookup
- BIND server Troubleshooting
Sendmail
- Mail concepts
- Mail transport Agent
- Mail user agent
- SMTP protocol
- SMTP mail headers
- Sendmail
- Sendmail configuration- sendmail.cf
- M4 configuration
- Configuring sendmail to receive incoming mail
- Aliases
- local-host-names
- Configuring relay
- Local delivery agent (Procmail )
- Internet Message Access Protocol (IMAP ) Server
- Post Office Protocol ( POP3 ) server
- Other MTAs - Postfix
- Choosing your default MTA - using alternatives
Data Security
- Data security - encryption
- Symmetric encryption
- Asymmetric encryption
- Signing document
- Data security utility - gpg
- Gpg encryption
- Gpg signing
- Secure Socket Layer - SSL
- Openssl
- Openssl example - generating ssl certificates using openssl
- Openssl example - Implementing secure IMAP and Pop server
Web Server - Apache
- Web server introduction
- Apache
- Configuring apache
- Virtual servers configuration
- Apache modules
- Apache logs
- Log analyzers
- Common Gateway Interface - CGI
- CGI examples
- Secure Web Server
- Secure Server configuration
Secure Shell
- Ssh server authentication - server key
- Openssh
- Openssh features
- Openssh configuration
- Remote login
- Remote shell execution
- Remote file copy - scp
- Sftp
- User authentication using keys
- User key generation
- Protecting private key with password
- Password agent - ssh-agent
- Tunelling insecure protocol over ssh
- Remote port forwarding
- Local Port forwarding
- Using tcp wrappers to restrict ssh access
Pluggable Authentication Module (PAM)
- PAM overview
- PAM modules
- PAM configuration files
- PAM configuration examples
- Pam_securetty
- Pam_console
- Pam_nologin
- Pam_time - restrict user access based on time
- Pam_limits - limiting user logins and process limits
- Pam_console
- Pam_listfile - example in vsftpd
- Troubleshooting log in failures
- Troubleshooting - Checking PAM log file
Iptables Firewall
- Types of firewall - packet filtering against proxy server
- Iptables concepts
- Iptables features
- Iptables tables
- Iptables chains
- Iptables utility - iptables
- Iptables example - filtering packets
- Connection tracking
- Limiting traffic
- Network Address Translation (NAT)
- Masquerading
- NAT examples
- Logging
- Firewall troubleshooting
Squid Proxy Server
- Squid overview
- Squid configuration
- Configuration examples
- Proxy server performance considerations
Programme scope, delivery arrangements and suitability are confirmed during enquiry.