Enterprise Linux Network Services
What you will learn:
Students interested in developing skills as network administrators find this course invaluable. Topics explored and implemented in the class include the setup and maintenance of many of the most popular network services available for Linux and Unix today, including servers for DNS, SMB (Windows networking), e-mail servers, FTP, web, and caching proxy. Special attention is paid to the concepts needed to implement these services securely, and to the trouble-shooting skills which will be necessary for real-world administration of network services.
|
Schedule/Purchase
|
Training Formats
|
Price
|
Duration
|
|
View Schedule(Link)
|
Instructor-Led Training
|
SAR 7031.25
|
4 Days
|
Prerequisites:
Required Prerequisites:
Course Objectives:
- Configure and Secure BIND
- Configure LDAP
- Configure Apache
- Implement and FTP Server
- Configure VSFTPD
- Configure SQUID
- Configure Samba
- Configure Sendmail
- Configure Postfix
Course Topics:
DNS Concepts
- Naming Services
- The Domain Name Space
- Delegation and Zones
- Server Roles
- Resolving Names and Resolving IP Addresses
- BIND Administration
- rndc key configuration
- Configuring the Resolver and Testing Resolution
Configuring Bind
- BIND Configuration Files
- named.conf Syntax and Options Block
- Creating a Site-Wide Cache
- Zones In named.conf and Zone Database File Syntax
- SOA - Start of Authority
- A -Address / PTR-Pointer
- NS - Name Server
- CNAME -Alias / MX-Mail Host
Creating DNS Hierarchies
- Subdomains and Delegation
- in-addr.arpa Delegation
- Issues with in-addr.arpa
- RFC2317 & in-addr.arpa
Securing BIND and DNS
- Split Namespaces
- Using Views with BIND 9
- Address Match Lists & ACLs
- Restricting Queries and Zone Transfers
- Running BIND in a chroot jail
- Dynamic DNS Concepts
- Allowing DDNS updates
- Using DDNS with "nsupdate"
LDAP Concepts
- Centralized Authentication
- Directory Services
- What LDAP Provides
- LDAP Concepts and Organization
- Schema and Entry Referencing
- LDIF
- LDAP Architecture, Security, Implementations, and Client Configuration
OpenLDAP Servers
- OpenLDAP Components
- Configuring slapd
- Global Parameters and Schema Definition
- Access Control
- Backend and Database Configuration
- Indexes and Replicas
- Replica Configuration
- Syntax Conformance
Using OpenLDAP
- Managing slapd
- Online and Offline Data Manipulation
- Native LDAP authentication and Client Config
Using Apache
- HTTP Operation
- Apache History and Status
- Apache Architecture and Logging
- SSL / HTTPS and Apache
- httpd.conf
- Dynamic Shared Objects
- Adding Modules to Apache
- Log Analysis and the Webalizer
Virtual Hosting with Apache
- HTTP Virtual Servers
- DNS Implications
- Security Implications
- IP-based Virtual Host
- Name-based Virtual Host
- Port-based Virtual Host
Apache Security
- Delegating Administration
- Directory Protection
- Common Uses for .htaccess
- Symmetric and Asymmetric Key Cryptography
- Digital Certificates
- SSL Using mod_ssl
Apache Server- side Programming
- Dynamic HTTP Content
- PHP: Hypertext Preprocessor
- Developer Tools for PHP
- Installing, Configuring, and Securing PHP
- Java Servlets and JSP
- Jakarta Tomcat
- Installing Java SDK and Jakarta Tomcat
- Using Tomcat with Apache
Implementing an FTP Server
- The FTP Protocol and Operation
- Active and Passive FTP
- WU-FTPD
- vsftpd
- Configuring vsftpd
- Anonymous vsftpd
The SQUID Proxy Server
- Squid Overview, File Layout, and Access Control Lists
- Squid ACL application
- Tuning Squid / Hierarchies
- Bandwidth Metering
- Monitoring Squid
- Proxy Client Configuration
Samba Concepts
- SMB Network Protocol
- NetBIOS and NetBEUI
- NetBIOS Naming
- Samba Daemons, Clients, and Utilities
- Samba Configuration Files
- The smb.conf File
Using Samba
- Unix and DOS Permissions
- Unix and Windows Concepts
- Name and Case Mangling
- Sharing [homes] and Printers
- Restricting Access
- Share-Level and User-Level Access
- Mapping Users
- SMB and Passwords and the smbpasswd Database
SMTP Theory
- SMTP Terminology and Architecture
- SMTP Commands and Extensions
- SMTP AUTH and STARTTLS
- SMTP Session
Sendmail
- sendmail Features, Process, and Configuration
- Configuration Files
- Databases
- Text Files
- Network Access
- Masquerading sendmail
- Controlling access
- Configuring SMTP AUTH and Configuring SMTP STARTTLS
Postfix
- Postfix Features, Architecture, Components, and Configuration
- master.cf and main.cf
- Postfix Map Types and Pattern Matching
- Virtual Domains and Mail Filtering
- chroot’ing Postfix
- SMTP AUTH Server and Clients
- Postfix Extensions and Postfix/TLS
- TLS Server Configuration and Postfix Client Configuration
IMAP, POP, Spam Filtering and Web Mail
- Filtering Email
- procmail and SpamAssassin
- Sendmail Mail Filter (milter)
- Amavisd-new Mail Filtering
- The POP3 and the IMAP4 Protocol
- Dovecot POP3/IMAP Server
- Cyrus IMAP/POP3 Server and IMAP MTA integration
- Fetchmail and SquirrelMail
Appendix 1 Using NIS
- NIS History, Overview, and Limitations
- NIS Advantages and Implementation
- Creating a NIS Master Server
- NIS Client Configuration
- Slave Server Configuration
- Troubleshooting Aids
|
