Linux System Administration for UNIX Administrators

Course: LNXA4UA

Duration: 5 Days

Level: III

Course Summary

Linux System Administration for Linux Administrators is an accelerated course combining the topics in our Enterprise Linux Systems Administration, and Enterprise Linux Networking Services courses.

The course covers both RedHat and SuSE Enterprise distributions, and students can choose to use either distribution during hands-on sessions.

« Hide The Details

Topics Covered In This Course

Linux Hardware Discovery, Interaction, and Control

Hardware Discovery Tools
Configuring New Hardware with hwinfo
Hardware and System Clock
Console
Virtual Terminals
Serial Ports
SCSI Devices
USB Configuration
Defining a Printer
Tape Drives
Tape Libraries
Managing Linux Device Files
Kernel Hardware Info - /sys/
/sys/ Structure
udev
Kernel Modules
Configuring Kernel Components and Modules
Handling Module Dependencies
Configuring the Kernel via /proc/
System Tools

Boot Process and SysV Init

Booting Linux on PCs
GRUB Configuration
Boot Parameters
/sbin/init
/etc/inittab
/etc/rc.d/rc.sysinit
SUSE /etc/init.d/boot
Runlevel Implementation
System Configuration Files
Configuration Utilities
Novell's Configuration Utilities
Typical SysV Init Script
The /etc/rc.local File
The /etc/init.d/*.local Files
Managing Daemons
Controlling Service Startup
Shutdown and Reboot
Run Level and Kernel Information

Software Maintenance

RPM Features
RPM Architecture
Working With RPMs
Querying and Verifying with rpm
Updating the Kernel RPM
Using the YUM command
YUM package groups
Configuring YUM
YUM Repositories
Installing Source RPM Packages
Software Tools Comparison Matrix

Filesystem Administration

Partitioning Disks with fdisk
Partitioning Disks with parted
Filesystem Creation
Mounting Filesystems
Filesystem Maintenance
Resizing Filesystems
Swap
Configuring Disk Quotas
Setting Quotas
Viewing and Monitoring Quotas
Filesystem Attributes
Backup Software
Backup Examples
Filesystem Creation and Management

LVM & RAID

Logical Volume Management
Implementing LVM
Creating Logical Volumes
Manipulating VGs & LVs
Advanced LVM Concepts
system-config-lvm
SLES Graphical Disk Tool
RAID Concepts
Array Creation with mdadm
Software RAID Monitoring
Software RAID Control and Display
LVM and RAID: Unix Tool Comparison

Remote Storage Administration

Remote Storage Overview
Remote Filesystem Protocols
Remote Block Device Protocols
File Sharing via NFS
NFSv4
NFS Clients
NFS Server Configuration
Implementing NFSv4
AutoFS
AutoFS Configuration
Accessing Windows/Samba Shares from Linux
SAN Multipathing
Multipath Configuration
Multipathing Best Practices
iSCSI Architecture
Open-iSCSI Initiator Implementation
iSCSI Initiator Discovery
iSCSI Initiator Node Administration
Mounting iSCSI Targets at Boot
iSCSI Multipathing Considerations

User/Group Administration

User and Group Concepts
User Administration
Modifying Accounts
Group Administration
Password Aging
Default User Files
Controlling Logins
Manual DS Client Configuration
system-config-authentication
SLES Graphical DS Client Configuration
PAM Overview
PAM Module Types
PAM Order of Processing
PAM Control Statements
pam_wheel.so
pam_limits.so
User/Group Administration Comparison Matrix

Security Administration

Security Concepts
Tightening Default Security
Security Advisories
File Access Control Lists
Manipulating FACLs
Viewing FACLs
Backing Up FACLs
File Creation Permissions with umask
User Private Group Scheme
Alternatives to UPG
TCP Wrappers Concepts
TCP Wrappers Concepts
Xinetd
Basic Firewall Activation
Netfilter Concepts
Using the iptables Command
Common match_specs
Connection Tracking
AppArmor
SELinux Security Framework
SELinux Modes
SELinux Commands
Choosing an SELinux Policy
SELinux Booleans
Graphical SELinux Policy Tools
(X)INETD and Firewalls

Process Administration

Automating Tasks
at & cron Usage
anacron
Viewing Processes
Managing Processes
Tuning Process Scheduling
Process Accounting
Enabling Process Accounting
Setting Resource Limits via ulimit

Networking

Linux Network Interfaces
Ethernet Hardware Tools
Network Configuration with ip Command
Configuring Routing Tables
IP to MAC Address Mapping with ARP
Starting and Stopping Interfaces
NetworkManager
DNS Clients
DHCP Clients
Network Diagnostics
Information from netstat
Managing Network-Wide Time
Continual Time Sync with NTP
Configuring NTP Clients
Multiple IP Addresses
Enabling IPv6
Interface Bonding
Interface Bridging
802.1q VLANS
Tuning Kernel Network Settings
Network Configuration Tools

The X Window System

X Modularity
X.Org Drivers
Configuring X Manually
Automatic X Configuration
Automatic X Configuration - SLES
The X11 Protocol and Display Names
Display Managers and Graphical Login
Starting X Apps Automatically
X Access Control
Remote X Access (historical/insecure approach)
Remote X Access (modern/secure approach)
XDMCP
Remote Graphical Access With VNC and RDP
Specialized X Servers
Enabling the Graphical User Interface

BIND Concepts and Configuration

The Domain Name Space
Delegation and Zones
Server Roles
Resolving Names
Resolving IP Addresses
Basic BIND Administration
Configuring the Resolver
Testing Resolution
rndc Key Configuration
BIND Configuration Files
named.conf Syntax
named.conf Options Block
Creating a Site-Wide Cache
Zones In named.conf
Zone Database File Syntax
SOA - Start of Authority
A & PTR - Address & Pointer Records
NS - Name Server
CNAME & MX - Alias & Mail Host
Abbreviations and Gotchas
$ORIGIN and $GENERATE

OpenLDAP

OpenLDAP: Server Architecture
OpenLDAP: Backends
OpenLDAP: Replication
OpenLDAP: Configuration Options
OpenLDAP: Configuration Sections
OpenLDAP: Global Parameters
OpenLDAP: Database Parameters
OpenLDAP Server Tools
OpenLDAP Client Tools
LDIF: LDAP Data Interchange Format
Enabling LDAP-based Login
System Security Services Daemon (SSSD)

Using vsFTPd and Apache

vsftpd
Configuring vsftpd
Anonymous FTP with vsftpd
HTTP Operation
Apache Architecture
Apache Configuration Files
httpd.conf - Server Settings
httpd.conf - Main Configuration
httpd.conf - VirtualHost Configuration
Virtual Hosting DNS Implications
Dynamic Shared Objects
Adding Modules to Apache
Apache Logging
Log Analysis

Apache Security

Delegating Administration
Directory Protection
Directory Protection with AllowOverride
Common Uses for .htaccess
Symmetric Encryption Algorithms
Asymmetric Encryption Algorithms
Digital Certificates
SSL Using mod_ssl.so

The SQUID Proxy Server

Squid Overview
Squid File Layout
Squid Access Control Lists
Applying Squid ACLs
Tuning Squid & Configuring Cache Hierarchies
Bandwidth Metering
Monitoring Squid
Proxy Client Configuration

Samba Concepts and Configuration

Introducing Samba
Samba Daemons
NetBIOS and NetBEUI
Accessing Windows/Samba Shares from Linux
Samba Utilities
Samba Configuration Files
The smb.conf File
Mapping Permissions and ACLs
Mapping Linux Concepts
Mapping Case Sensitivity
Sharing Home Directories
Sharing Printers
Share Authentication
Share-Level Access
User-Level Access
Mapping Users
SMB and Passwords
Samba Account Database
User Share Restrictions

Postfix

Postfix Features
Postfix Components
Postfix Configuration
master.cf
main.cf
Postfix Map Types
Postfix Pattern Matching
Virtual Domains
Postfix Mail Filtering
Configuration Commands
Management Commands
Postfix Logging
SMTP AUTH Server
SMTP AUTH Clients
TLS Server Configuration
Postfix Client Configuration for TLS
Ensuring TLS Security

Mail Services and Retrieval

Procmail
SpamAssassin
amavisd-new Mail Filtering
Accessing Email
The IMAP4 Protocol
Cyrus IMAP/POP3 Server
Cyrus IMAP MTA Integration
Cyrus Mailbox Administration

Monitoring & Troubleshooting

System Status - Memory
System Status - I/O
System Status - CPU
Performance Trending with sar
Troubleshooting Basics: The Process
Troubleshooting Basics: The Tools
System Logging
Syslog-ng
Rsyslog
/etc/rsyslog.conf
Log Management
Log Anomaly Detector
strace and ltrace
Common Problems
Incorrect File Permissions
Inability to Boot
Typos in Configuration Files
Corrupt Filesystems
Rescue Environment
SUSE Rescue Environment
Process Tools

Installing RHEL6

Anaconda: An Overview
Anaconda: Booting the System
Anaconda: Common Boot Options
Anaconda: Loading Anaconda and Packages
Anaconda: Storage Options
Anaconda: Troubleshooting
FirstBoot
Kickstart
A Typical Install

Installing SLES11

Installation Choices
DVD-ROM Install Media
Network Installation
SLP for SUSE Linux Installation
Local Hard Drive Installation
The linuxrc Program
Install Program Interface
Installation Diagnostics
Language/Keyboard Selection and EULA
Installation Mode
Clock and Time Zone
Desktop Selection
Server Base Scenario
The YaST Installer Design
Disk Partitioning
Boot Loader Configuration
Software Package Selection
Kernel Crash Dump Configuration
Confirmation and File Installation
Setting the Root Password
Hostname and Domain Name
Network Configuration
SLES Services Configuration
Adding a User Account
Release Notes
Final Installation Hub
Installation Complete and AutoYaST2 "Cloning"
Using AutoYaST2 files
Creating AutoYaST2 Files
linuxrc Automation

Recommended Prerequisites

Students should already be experienced Unix administrators. Fundamentals such as the Unix command line and how to edit files will not be covered in class. A good understanding of network concepts, the TCP/IP protocol suite, and basic Unix security is also assumed. The accelerated pace of this class makes it difficult for unprepared students to keep up.

Training Style

Combination of short lecture sessions and extensive hands-on practice.

« Hide The Details

Related Courses

Code	Course Title	Duration	Level
LNXADM	Enterprise Linux System Administration	5 Days	I	Details
LNXNET	Enterprise Linux Networking Services	5 Days	II	Details
LNXFIX	Linux Troubleshooting Workshop	5 Days	III	Details

Every student attending a Verhoef Training class will receive a certificate good for $100 toward their next public class taken within a year.

You can also buy "Verhoef Vouchers" to get a discounted rate for a single student in any of our public or web-based classes. Contact your account manager or our sales office for details.

Schedule For This Course
There are currently no public sessions scheduled for this course. We can schedule a private class for your organization just a couple of weeks from now. Or we can let you know the next time we do schedule a public session.

Notify me the next time this course is confirmed!

Can't find the course you want?
Call us at 800.533.3893, or
email us at [email protected]