GL954 - Red Hat Enterprise Linux System Admin III

Need something different? Guru Labs has other Linux and security courses and can build a custom course that covers exactly what you need!

This custom course is designed to follow a similar set of topics as the Red Hat® RH254, RH255 RHCE exam prep courses with the added benefit of very comprehensive lab exercises and detailed lecture material.

The Red Hat Enterprise Linux (RHEL) system administration topics covered in this course along with the GL199 course cover the certification objects of the Red Hat Certified Engineer (RHCE) exam.

This course builds upon a foundation of core Linux systems administration principles and skills. Students will advance their Linux systems administration knowledge. The course will focus on helping students optimize system administration skills using automation techniques and deploy commonly used network services. Once this course is completed students will know how to deploy critical network services in a secure fashion.

Red Hat® is a registered trademark of Red Hat, Inc. and its use by Guru Labs, L.C. does not imply association or sponsorship by Red Hat, Inc.

Prerequisites:

GL924 - Red Hat Enterprise Linux Systems Admin I and GL934 - Red Hat Enterprise Linux Systems Admin II or equivalent experience.

Supported Distributions:
Red Hat Enterprise Linux 7
Recommended Class Length:
5 days
Detailed Course Outline:
  1. Linux Kernel & Devices
    1. Hardware Discovery Tools
    2. Kernel Hardware Info – /sys/
    3. /sys/ Structure
    4. udev
    5. Managing Linux Device Files
    6. List Block Devices
    7. SCSI Devices
    8. USB Devices
    9. USB Architecture
    10. Kernel Modules
    11. Configuring Kernel Components and Modules
    12. Handling Module Dependencies
    13. Configuring the Kernel via /proc/
    14. Console
    15. Virtual Terminals
    16. Keyboard & locale configuration
    17. Serial Ports
    18. Random Numbers and /dev/random
    Lab Tasks
    1. Adjusting Kernel Options
    2. Introduction to Troubleshooting Labs
    3. Troubleshooting Practice: Kernel Modules
  2. Pluggable Authentication Modules (PAM)
    1. PAM Overview
    2. PAM Module Types
    3. PAM Order of Processing
    4. PAM Control Statements
    5. PAM Modules
    6. pam_unix
    7. pam_nologin.so
    8. pam_limits.so
    9. pam_wheel.so
    10. pam_xauth.so
    Lab Tasks
    1. Restricting superuser access to wheel group membership
    2. Using pam_nologin to Restrict Logins
    3. Setting Limits with the pam_limits Modules
    4. Using pam_limits to Restrict Simultaneous Logins
  3. Remote Storage Administration
    1. Remote Storage Overview
    2. Remote Filesystem Protocols
    3. Remote Block Device Protocols
    4. File Sharing via NFS
    5. NFSv4+
    6. NFS Clients
    7. NFS Server Configuration
    8. Implementing NFSv4
    9. AutoFS
    10. AutoFS Configuration
    11. Accessing Windows/Samba Shares from Linux
    12. SAN Multipathing
    13. Multipath Configuration
    14. Multipathing Best Practices
    15. iSCSI Architecture
    Lab Tasks
    1. Using autofs
    2. NFS Server Configuration
    3. Multipathing with iSCSI
  4. Securing Services
    1. Xinetd
    2. Xinetd Connection Limiting and Access Control
    3. Xinetd: Resource limits, redirection, logging
    4. TCP Wrappers
    5. The /etc/hosts.allow & /etc/hosts.deny Files
    6. /etc/hosts.{allow,deny} Shortcuts
    7. Advanced TCP Wrappers
    8. FirewallD
    9. Netfilter: Stateful Packet Filter Firewall
    10. Netfilter Concepts
    11. Using the iptables Command
    12. Netfilter Rule Syntax
    13. Targets
    14. Common match_specs
    15. Connection Tracking
    Lab Tasks
    1. Securing xinetd Services
    2. Enforcing Security Policy with xinetd
    3. Securing Services with TCP Wrappers
    4. Securing Services with Netfilter
    5. FirewallD
    6. Troubleshooting Practice
  5. Advanced Networking
    1. Multiple IP Addresses
    2. Configuring a DHCP server
    3. IPv6
    4. Interface Aggregation
    5. Interface Bonding
    6. Network Teaming
    7. Interface Bridging
    8. 802.1q VLANS
    9. Tuning Kernel Network Settings
    Lab Tasks
    1. Multiple IP Addresses Per Network Interface
    2. Configuring IPv6
    3. Troubleshooting Practice: Networking
  6. Monitoring & Troubleshooting
    1. System Status – Memory
    2. System Status – I/O
    3. System Status – CPU
    4. Performance Trending with sar
    5. Determining Service to Process Mapping
    6. Realtime Monitoring of Resources — Cgroups
    7. Troubleshooting Basics: The Process
    8. Troubleshooting Basics: The Tools
    9. strace and ltrace
    10. Common Problems
    11. Troubleshooting Incorrect File Permissions
    12. Inability to Boot
    13. Typos in Configuration Files
    14. Corrupt Filesystems
    15. RHEL7 Rescue Environment
    Lab Tasks
    1. System Activity Reporter
    2. Cgroup for Processes
    3. Recovering Damaged MBR
  7. Manage DNS for Servers
    1. Server Roles
    2. Resolving Names
    3. Resolving IP Addresses
    4. Basic BIND Administration
    5. Configuring the Resolver
    6. Testing Resolution
    7. BIND Configuration Files
    8. named.conf Syntax
    9. named.conf Options Block
    10. Creating a Site-Wide Cache
    11. rndc Key Configuration
    12. Address Match Lists & ACLs
    13. Restricting Queries
    Lab Tasks
    1. Configuring a Slave Name Server
    2. Use rndc to Control named
  8. Using Apache
    1. HTTP Operation
    2. Apache Architecture
    3. Dynamic Shared Objects
    4. Adding Modules to Apache
    5. Apache Configuration Files
    6. httpd.conf – Server Settings
    7. httpd.conf – Main Configuration
    8. HTTP Virtual Servers
    9. Virtual Hosting DNS Implications
    10. httpd.conf – VirtualHost Configuration
    11. Port and IP based Virtual Hosts
    12. Name-based Virtual Host
    13. Apache Logging
    14. Log Analysis
    15. The Webalizer
    Lab Tasks
    1. Apache Architecture
    2. Apache Content
    3. Configuring Virtual Hosts
  9. Apache Security
    1. Virtual Hosting Security Implications
    2. Delegating Administration
    3. Directory Protection
    4. Directory Protection with AllowOverride
    5. Common Uses for .htaccess
    6. Symmetric Encryption Algorithms
    7. Asymmetric Encryption Algorithms
    8. Digital Certificates
    9. TLS Using mod_ssl.so
    Lab Tasks
    1. Using .htaccess Files
    2. Using TLS Certificates with Apache
    3. Use SNI and TLS with Virtual Hosts
  10. Apache Server-Side Scripting Administration
    1. Dynamic HTTP Content
    2. PHP: Hypertext Preprocessor
    3. Developer Tools for PHP
    4. Installing PHP
    5. Configuring PHP
    6. Securing PHP
    7. Security Related php.ini Configuration
    8. Java Servlets and JSP
    9. Apache's Tomcat
    10. Installing Java SDK
    11. Installing Tomcat Manually
    12. Using Tomcat with Apache
    Lab Tasks
    1. CGI Scripts in Apache
    2. Apache's Tomcat
    3. Using Tomcat with Apache
    4. Installing Applications with Apache and Tomcat
  11. SMTP Theory
    1. SMTP
    2. SMTP Terminology
    3. SMTP Architecture
    4. SMTP Commands
    5. SMTP Extensions
    6. SMTP AUTH
    7. SMTP STARTTLS
    8. SMTP Session
  12. Postfix
    1. Postfix Features
    2. Postfix Architecture
    3. Postfix Components
    4. Postfix Configuration
    5. master.cf
    6. main.cf
    7. Postfix Map Types
    8. Postfix Pattern Matching
    9. Advanced Postfix Options
    10. Virtual Domains
    11. Postfix Mail Filtering
    12. Configuration Commands
    13. Management Commands
    14. Postfix Logging
    15. Logfile Analysis
    16. Postfix, Relaying and SMTP AUTH
    17. SMTP AUTH Server and Relay Control
    18. SMTP AUTH Clients
    19. Postfix / TLS
    20. TLS Server Configuration
    21. Postfix Client Configuration for TLS
    22. Other TLS Clients
    23. Ensuring TLS Security
    Lab Tasks
    1. Configuring Postfix
    2. Postfix Virtual Host Configuration
    3. Postfix Network Configuration
    4. Postfix SMTP AUTH Configuration
    5. Postfix STARTTLS Configuration
  13. Introduction to Shell Scripting
    1. Shell Script Strengths and Weaknesses
    2. Example Shell Script
    3. Positional Parameters
    4. Input & Output
    5. Doing Math
    6. Comparisons with test
    7. Exit Status
    8. Conditional Statements
    9. Flow Control: case
    10. The for Loop
    11. The while and until Loops
    Lab Tasks
    1. Writing a Shell Script
  14. Container Technology Overview
    1. Application Management Landscape
    2. Application Isolation
    3. Container Resource Control & Security
    4. Container Types
    5. Container Ecosystem
    Lab Tasks
    1. Container Concepts LXC
    2. Container Concepts Systemd
  15. Docker Container Fundamentals
    1. Installing Docker
    2. Docker Control Socket
    3. Creating a New Container
    4. Listing Containers
    5. Viewing Container Operational Details
    6. Running Commands in an Existing Container
    7. Interacting with a Running Container
    8. Stopping, Starting, and Removing Containers
    Lab Tasks
    1. Docker Basics
    2. Configure a docker container to start at boot.