Enterprise Linux Network Services
Netzwerkdienste mit Linux
Der Kurs steht ganz im Zeichen von TCP/IP und network services. Erfahren Sie, wie man Standard Dienste wie DHCP, DNS, LDAP, Web (HTTP, HTTPS), SMB (Samba, Windows Netzwerk File System) und eMail (SMTP, POP3, IMAP) installiert, konfiguriert und optimiert. Sicherheitsaspekte und Troubleshooting runden den Kurs ab. Die Kursunterlagen sind von hoher Qualität und für Red Hat Enterprise Linux / CentOS, SuSE Linux Enterprise und Ubuntu geschrieben.
System-Administratoren und Personen, die für den Unterhalt, den Betrieb und die Installation von TCP/IP-Netzwerken verantwortlich sind.
Dieser Kurs befähigt Sie, die wichtigsten Netzwerkdienste, wie DHCP, DNS, NFS, Mail, LDAP, Samba und Web, zu installieren und konfigurieren.
Kurs "Enterprise Linux System Administration" oder gleichwertige Kenntnisse.
Inhalt
- DNS Concepts
- Naming Services
- DNS - A Better Way
- The Domain Name Space
- Delegation and Zones
- Server Roles
- Resolving Names and IP Addresses
- BIND Administration
- rndc Key Configuration
- Configuring the Resolver
- Testing Resolution
Lab Tasks
- Configuring a Slave Name Server
- Configure rndc for Secure named Control
- Configuring BIND
- BIND Configuration Files
- named.conf Syntax and Options Block
- Creating a Site-Wide Cache
- Zones In named.conf
- Zone Database File Syntax
- SOA - Start of Authority
- A & PTR - Address & Pointer Records
- NS - Name Server
- CNAME & MX - Alias & Mail Host
- Abbreviations and Gotchas
- $ORIGIN and $GENERATE
Lab Tasks
- Configuring BIND Zone Files
- Creating DNS Hierarchies
- Subdomains and Delegation
- Delegating Zones
- in-addr.arpa. Delegation
- Issues with in-addr.arpa.
- RFC2317 & in-addr.arpa.
Lab Tasks
- Create a Subdomain in an Existing Domain
- Subdomain Delegation
- Securing BIND and DNS
- Split Namespaces
- Using Views with BIND 9
- Address Match Lists & ACLs
- Restricting Queries
- Restricting Zone Transfers
- Running BIND in a chroot jail
- Dynamic DNS Concepts
- Allowing Dynamic DNS Updates
- DDNS Administration with nsupdate
- Common Problems
Lab Tasks
- Configuring Dynamic DNS
- Securing BIND DNS
- LDAP Concepts and Clients
- Centralized Authentication
- Directory Services
- LDAP
- What LDAP Provides
- LDAP Concepts and Organization
- Schema
- Entry Referencing
- LDIF
- LDAP Architecture, Security, Implementations, and Client Configuration
- Querying LDAP Databases
Lab Tasks
- Querying an Existing LDAP Directory
- OpenLDAP Servers
- OpenLDAP Components
- Configuring slapd
- /etc/openldap/ldap.conf Global Parameters
- Schema Definition
- OpenLDAP Access Control
- Backend Types and Configuration
- Database Configuration
- Indexes
- Replicas
- LDAP Replica Configuration
- OpenLDAP Configuration Syntax Check
Lab Tasks
- Configuring LDAP Directory Services
- Modifying LDAP Directory Entries
- Using OpenLDAP
- Managing slapd
- Online and Offline LDAP Data Manipulation
- Native LDAP Authentication and Client Config
Lab Tasks
- Configuring LDAP for Secure TLS Access
- Configuring LDAP Clients and Servers for Directory Authentication
- Using Apache
- HTTP Operation
- Apache History and Status
- Apache Architecture
- SSL/HTTPS and Apache
- Apache Configuration Files
- httpd.conf
- Dynamic Shared Objects
- Adding Modules to Apache
- Apache Logging
- Log Analysis
- The Webalizer
Lab Tasks
- Configure Apache
- Apache Content
- Virtual Hosting with Apache
- HTTP Virtual Servers
- DNS Implications
- Security Implications
- IP-based Virtual Host
- Name-based Virtual Host
- Port-based Virtual Host
Lab Tasks
- Configuring Virtual Hosts
- Apache Security
- Delegating Administration
- Directory Protection
- Common Uses for .htaccess
- Symmetric Encryption Algorithms
- Asymmetric Encryption algorithms
- Digital Certificates
- SSL Using mod_ssl.so
Lab Tasks
- Using .htaccess Files
- Using SSL Certificates with Apache
- Apache Server-Side Programming Basics
- Dynamic HTTP Content
- PHP: Hypertext Preprocessor
- Developer Tools for PHP
- Installing PHP
- Configuring PHP
- Securing PHP
- Security Related php.ini Configuration
- Java Servlets and JSP
- Apache's Tomcat
- Installing Java SDK
- Installing Tomcat Manually
- Using Tomcat with Apache
Lab Tasks
- CGI Scripts in Apache
- Apache's Tomcat
- Using Tomcat with Apache
- Installing Applications with Apache and Tomcat
- Implementing an FTP Server
- The FTP Protocol
- FTP Operation
- Active Mode FTP
- Passive Mode FTP
- WU-FTPD
- vsftpd
- Configuring vsftpd
- Anonymous FTP with vsftpd
Lab Tasks
- Configuring vsftpd
- The Squid Proxy Server
- Squid Overview, File Layout, and Access Control Lists
- Applying Squid ACLs
- Tuning Squid / Hierarchies
- Bandwidth Metering
- Monitoring Squid
- Proxy Client Configuration
Lab Tasks
- Installing and Configuring Squid
- Squid Cache Manager CGI
- Proxy Auto Configuration
- Configure a Squid Proxy Cluster
- Samba Concepts
- SMB Network Protocol
- NetBIOS and NetBEUI
- NetBIOS Naming
- Introducing Samba
- Samba Daemons, Clients, and Utilities
- Samba Configuration Files
- The smb.conf File
Lab Tasks
- Basic Samba Configuration
- Using Samba
- Unis and DOS Permissions
- Unix and Windows Concepts
- Name and Case Mangling
- Sharing Home Directories
- Sharing Printers
- Restricting Access
- Share-Level Access
- User-Level Access
- Mapping Users
- SMB and Passwords
- The smbpasswd Database
- User Share Restrictions
Lab Tasks
- Configuring Samba
- Samba Share-Level Access
- Samba User-Level Access
- Samba Home Directory Shares
- Samba Group Shares
- SMTP Theory
- SMTP
- SMTP Terminology, Architecture, Commands, and Extensions
- SMTP AUTH
- SMTP STARTTLS
- SMTP Session
- Sendmail
- Sendmail Features, Process, Architecture, Components, and Configuration
- Configuration Files
- Databases
- Text Files
- Network Access
- Masquerading Sendmail
- Controlling Access
- Configuring SMTP AUTH
- Configuring SMTP START TLS
Lab Tasks
- Configuring Sendmail
- Sendmail Network Configuration
- Sendmail Virtual Host Configuration
- Sendmail SMTP AUTH Configuration
- Sendmail STARTTLS Configuration
- Postfix
- Postfix Features, Architecture, Components, and Configuration
- master.cf
- main.cf
- Postfix Map Types
- Postfix Pattern Matching
- Advanced Options
- Virtual Domains
- Mail Filtering
- Configuration and Management Commands
- Postfix Logging
- Log file Analysis
- chroot'ing Postfix
- Postfix and SMTP AUTH
- SMTP AUTH Server and Clients
- Postfix Extensions
- Postfix / TLS
- TLS Server Configuration
- Postfix Client Configuration
- Other TLS Clients
- Ensuring TLS Security
Lab Tasks
- Configuring Postfix
- Postfix Network Configuration
- Postfix Virtual Host Configuration
- Postfix SMTP AUTH Configuration
- Postfix STARTTLS Configuration
- IMAP, POP, Spam Filtering & Web Mail
- Filtering Email
- procmail
- SpamAssassin
- Sendmail Mail Filter (milter)
- amavisd-new Mail Filtering
- Accessing Email
- The POP3 Protocol
- The IMAP4 Protocol
- Dovecot POP3/IMAP Server
- Cyrus IMAP/POP3 Server
- Cyrus IMAP MTA Integration
- Cyrus Mailbox Administration
- Fetchmail
- SquirrelMail
Lab Tasks
- Configuring Procmail & SpamAssassin
- Configuring Cyrus IMAP
- Configuring SquirrelMail

