Comprehensive Review For RHCE exam

Carefully perform the following steps in serverX virtual machine. Configure serverX so that it meets the

following requirements. For all services, allow connections from the local subnet 192.168.0.0/24 subnet,

but disallow connections from the 192.168.1.0/24 subnet. All the items will be checked after a reboot.

The letter X in serverX, desktopX, wwwX, and ldapuserX should be replaced by your workstation

number.

Compete the following tasks in 2 hours. Assume that you do not have root access to your desktopX

during the exam. Use your DNS server and default gateway as 192.168.0.254. Your package repository is

at http://instructor.example.com/pub/rhel6/dvd

1.

Configure serverX with a with a static ip address 192.168.0.X+100 where X is the number your

desktopX.example.com

2.

Configure SELinux to run in Enforcing mode.

3.

Allow SSH connections from the local subnet.

4.

Configure an SMTP server in serverX so that it allows connections from the local subnet. User jack

should not be able receive email where user sysadmin should be in administrator group and should be

able to receive all the mails that are destined to root user.

5.

Connect to the LDAP server, instructor.example.com, using the distinguished name (DN) of

dc=example,dc=com for account information. The LDAP server requires secure connections using the

certificate found at ftp://instructor.example.com/pub/EXAMPLE-CA-CERT. The LDAP server provides an

account named ldapuserX. Use Kerberos passwords with a realm EXAMPLE.COM for authentication. Set

the KDC and Admin servers to point to instructor.example.com. The kerberos accounts have a password

as kerberos

6.

Configure an auto mounted home directory for the ldapuserX account so that it is writable. The

home directory is shared via NFS from instructor.example.com.

7.

Connect to the iSCSI target rdisks.serverX provided by instructor.example.com.

8.

Remove all of the current partitions on the iSCSI disk. Configure a new 30 MB physical partition using

the iSCSI target with an ext3 filesystem and a label of test mounted on /test. The /test directory must be

owned by the user root and the group root, and have a permission of 770. It should also be mounted

persistently across reboots.

9.

Configure NFS to share the /test directory. Make it read-write to the local subnet. Allow root to have

root privileges when accessing the NFS share.

10.

Create a user account named matt using a password of matt.

11.

Create a user account named cindy using a password of cindy.

12.

Create a group named admins that includes matt and cindy.

13.

Configure Samba to share the /test directory using a share name of test. Make it readable for cindy

(use a Samba password as password) and writable for matt (use a Samba password as password). Make

sure the Linux permissions allow read/write as listed here, as well as meeting the user, group and

permission requirements listed above.

14.

Configure a secure web server using the certificate and key located at

http://instructor/pub/materials/tls/certs/serverX.crt and

http://instructor/pub/materials/tls/private/serverX.key. Make the web server use /myweb/index.html

as the default web page. Configure the index.html file such that accessing the secure web site will

present the following: Hello World!

15.

Allow cindy and matt to write the /myweb/index.html file.

16.

User cindy should not have permission to setup scheduled tasks.

17.

Find all the files that owned by cindy and copied them to the /root/cindy-backup folder

18.

The systems cracker.org domain should not able to ssh to your serverX machine Where cracker.org

domain network is 10.0.1.0/24

19.

Create a private directory /myweb/private that can only be accessed by desktopX.example.com via

HTTP. The index.html page should contain ServerX Private Data.

20.

Create a web site wwwX.example.com where the default web page display as Welcome to wwwX

21.

Setup a schedule job to print memory information to a file mem.info in home directory every day at

10:30 AM as matt

22.

Create a script in /usr/local/bin so that it will display EX200 when you pass the command line

argument rhcsa and EX300 when you pass the command line argument rhce