GL615 - Linux for Unix Administrators
Upcoming GL615 Classes
-
Apr 23 – Apr 27 2012Register now
Utah, Salt Lake City (Centerville)
Jun 04 – Jun 08 2012Register now
The GL615 is an accelerated course combining the topics in the GL250 "Enterprise Linux Systems Administration", and the GL275 "Enterprise Linux Networking Services".
Current Version: H00
Prerequisites:
Students should already be experienced Unix administrators. Fundamentals such as the Unix command line and how to edit files will not be covered in class. A good understanding of network concepts, the TCP/IP protocol suite, and basic Unix security is also assumed. The accelerated pace of this class makes it more difficult for unprepared students to keep up.
Less experienced students are encouraged to instead take the GL120 "Linux Fundamentals", GL250 "Enterprise Linux Systems Administration" or GL275 "Enterprise Linux Networking Services".
Supported Distributions:
Red Hat Enterprise Linux 6
SUSE Linux Enterprise 11
Course Outline:
- Linux Hardware Discovery, Interaction, and Control
- Hardware Discovery Tools
- Configuring New Hardware with hwinfo
- Hardware and System Clock
- Console
- Virtual Terminals
- Serial Ports
- SCSI Devices
- USB Configuration
- Defining a Printer
- Tape Drives
- Tape Libraries
- Managing Linux Device Files
- Kernel Hardware Info – /sys/
- /sys/ Structure
- udev
- Kernel Modules
- Configuring Kernel Components and Modules
- Handling Module Dependencies
- Configuring the Kernel via /proc/
- System Tools
- Adjusting Kernel Options
- Configuring Print Queues
- Introduction to Troubleshooting Labs
- Troubleshooting Practice: Kernel Modules
- Boot Process and SysV Init
- Booting Linux on PCs
- GRUB Configuration
- Boot Parameters
- /sbin/init
- /etc/inittab
- /etc/rc.d/rc.sysinit
- SUSE /etc/init.d/boot
- Runlevel Implementation
- System Configuration Files
- RHEL6 Configuration Utilities
- SLES11 Configuration Utilities
- Typical SysV Init Script
- The /etc/rc.local File
- The /etc/init.d/*.local Files
- Managing Daemons
- Controlling Service Startup
- Shutdown and Reboot
- Run Level and Kernel Information
- Boot Process
- GRUB Command Line
- Basic GRUB Security
- Managing Services With chkconfig
- Troubleshooting Practice: Boot Process
- Software Maintenance
- RPM Features
- RPM Architecture
- Working With RPMs
- Querying and Verifying with rpm
- Updating the Kernel RPM
- Using the YUM command
- YUM package groups
- Configuring YUM
- YUM Repositories
- Installing Source RPM Packages
- Software Tools Comparison Matrix
- Managing Software with RPM
- Creating a Custom RPM Repository
- Querying the RPM Database
- Installing Software via RPM & Source and Rebuilding SRPMs
- Using YUM
- Using Zypper
- Filesystem Administration
- Partitioning Disks with fdisk
- Partitioning Disks with parted
- Filesystem Creation
- Mounting Filesystems
- Filesystem Maintenance
- Resizing Filesystems
- Swap
- Configuring Disk Quotas
- Setting Quotas
- Viewing and Monitoring Quotas
- Filesystem Attributes
- Backup Software
- Backup Examples
- Filesystem Creation and Management
- Creating and Managing Filesystems
- Hot Adding Swap
- Setting User Quotas
- Using tar and cpio for Backups
- Using rsync and ssh for Backups
- Using dump and restore for Backups
- LVM & RAID
- Logical Volume Management
- Implementing LVM
- Creating Logical Volumes
- Manipulating VGs & LVs
- Advanced LVM Concepts
- system-config-lvm
- SLES Graphical Disk Tool
- RAID Concepts
- Array Creation with mdadm
- Software RAID Monitoring
- Software RAID Control and Display
- LVM and RAID: Unix Tool Comparison
- Creating and Managing LVM Volumes
- Creating and Managing a RAID-5 Array
- Remote Storage Administration
- Remote Storage Overview
- Remote Filesystem Protocols
- Remote Block Device Protocols
- File Sharing via NFS
- NFSv4
- NFS Clients
- NFS Server Configuration
- Implementing NFSv4
- AutoFS
- AutoFS Configuration
- Accessing Windows/Samba Shares from Linux
- SAN Multipathing
- Multipath Configuration
- Multipathing Best Practices
- iSCSI Architecture
- Open-iSCSI Initiator Implementation
- iSCSI Initiator Discovery
- iSCSI Initiator Node Administration
- Mounting iSCSI Targets at Boot
- iSCSI Multipathing Considerations
- Using autofs
- NFS Server Configuration
- iSCSI Initiator Configuration
- User/Group Administration
- User and Group Concepts
- User Administration
- Modifying Accounts
- Group Administration
- Password Aging
- Default User Files
- Controlling Logins
- System Security Services Daemon (SSSD)
- Manual DS Client Configuration
- system-config-authentication
- SLES Graphical DS Client Configuration
- PAM Overview
- PAM Module Types
- PAM Order of Processing
- PAM Control Statements
- pam_wheel.so
- pam_limits.so
- User/Group Administration Comparison Matrix
- User and Group Administration
- Using NIS for Centralized User Accounts
- Using LDAP for Centralized User Accounts
- Troubleshooting Practice: Account Management
- Restricting superuser access to wheel group membership
- Setting Limits with the pam_limits Modules
- Using pam_limits to Restrict Simultaneous Logins
- Security Administration
- Security Concepts
- Tightening Default Security
- Security Advisories
- File Access Control Lists
- Manipulating FACLs
- Viewing FACLs
- Backing Up FACLs
- File Creation Permissions with umask
- User Private Group Scheme
- Alternatives to UPG
- TCP Wrappers Concepts
- TCP Wrappers Concepts
- Xinetd
- Basic Firewall Activation
- Netfilter Concepts
- Using the iptables Command
- Common match_specs
- Connection Tracking
- AppArmor
- SELinux Security Framework
- SELinux Modes
- SELinux Commands
- Choosing an SELinux Policy
- SELinux Booleans
- Graphical SELinux Policy Tools
- (X)INETD and Firewalls
- User Private Groups
- Using Filesystem ACLs
- Securing xinetd Services
- Enforcing Security Policy with xinetd
- Securing Services with TCP Wrappers
- Securing Services with SuSEfirewall2
- Securing Services with Netfilter
- Exploring SELinux Modes
- SELinux File Contexts
- Process Administration
- Automating Tasks
- at & cron Usage
- Anacron
- Viewing Processes
- Managing Processes
- Tuning Process Scheduling
- Process Accounting
- Enabling Process Accounting
- Setting Resource Limits via ulimit
- Creating and Managing User Cron Jobs
- Adding System cron Jobs
- Using BSD Process Accounting
- Networking
- Linux Network Interfaces
- Ethernet Hardware Tools
- Network Configuration with ip Command
- Configuring Routing Tables
- IP to MAC Address Mapping with ARP
- Starting and Stopping Interfaces
- NetworkManager
- DNS Clients
- DHCP Clients
- Network Diagnostics
- Information from netstat and ss
- Managing Network-Wide Time
- Continual Time Sync with NTP
- Configuring NTP Clients
- Multiple IP Addresses
- Enabling IPv6
- Interface Bonding
- Interface Bridging
- 802.1q VLANS
- Tuning Kernel Network Settings
- Network Configuration Tools
- Network Discovery
- Basic Client Networking
- NTP Client Configuration
- Multiple IP Addresses Per Network Interface
- Configuring IPv6
- Troubleshooting Practice: Networking
- The X Window System
- X Modularity
- X.Org Drivers
- Configuring X Manually
- Automatic X Configuration
- Automatic X Configuration – SLES
- The X11 Protocol and Display Names
- Display Managers and Graphical Login
- Starting X Apps Automatically
- X Access Control
- Remote X Access (historical/insecure approach)
- Remote X Access (modern/secure approach)
- XDMCP
- Remote Graphical Access With VNC and RDP
- Specialized X Servers
- Enabling the Graphical User Interface
- Remote X with XDMCP
- Configure X Security
- Configure a VNC Server
- Configure a VNC Server
- Launching X Apps Automatically
- Secure X
- Troubleshooting Practice: X11
- BIND Concepts and Configuration
- The Domain Name Space
- Delegation and Zones
- Server Roles
- Resolving Names
- Resolving IP Addresses
- Basic BIND Administration
- Configuring the Resolver
- Testing Resolution
- rndc Key Configuration
- BIND Configuration Files
- named.conf Syntax
- named.conf Options Block
- Creating a Site-Wide Cache
- Zones In named.conf
- Zone Database File Syntax
- SOA – Start of Authority
- A & PTR – Address & Pointer Records
- NS – Name Server
- CNAME & MX – Alias & Mail Host
- Abbreviations and Gotchas
- $ORIGIN and $GENERATE
- Configuring a Slave Name Server
- Use rndc to Control named
- Configuring BIND Zone Files
- OpenLDAP
- OpenLDAP: Server Architecture
- OpenLDAP: Backends
- OpenLDAP: Replication
- OpenLDAP: Configuration Options
- OpenLDAP: Configuration Sections
- OpenLDAP: Global Parameters
- OpenLDAP: Database Parameters
- OpenLDAP Server Tools
- OpenLDAP Client Tools
- LDIF: LDAP Data Interchange Format
- Enabling LDAP-based Login
- System Security Services Daemon (SSSD)
- Building An OpenLDAP Server
- Enabling TLS For An OpenLDAP Server
- Enabling LDAP-based Logins
- Using vsFTPd and Apache
- vsftpd
- Configuring vsftpd
- Anonymous FTP with vsftpd
- HTTP Operation
- Apache Architecture
- Apache Configuration Files
- httpd.conf – Server Settings
- httpd.conf – Main Configuration
- httpd.conf – VirtualHost Configuration
- Virtual Hosting DNS Implications
- Dynamic Shared Objects
- Adding Modules to Apache
- Apache Logging
- Log Analysis
- Configuring vsftpd
- Apache Architecture
- Apache Architecture
- Apache Content
- Apache Content
- Configuring Virtual Hosts
- Apache Security
- Delegating Administration
- Directory Protection
- Directory Protection with AllowOverride
- Common Uses for .htaccess
- Symmetric Encryption Algorithms
- Asymmetric Encryption Algorithms
- Digital Certificates
- SSL Using mod_ssl.so
- Using .htaccess Files
- Using .htaccess Files
- Using SSL Certificates with Apache
- The SQUID Proxy Server
- Squid Overview
- Squid File Layout
- Squid Access Control Lists
- Applying Squid ACLs
- Tuning Squid & Configuring Cache Hierarchies
- Bandwidth Metering
- Monitoring Squid
- Proxy Client Configuration
- Installing and Configuring Squid
- Squid Cache Manager CGI
- Proxy Auto Configuration
- Configure a Squid Proxy Cluster
- Samba Concepts and Configuration
- Introducing Samba
- Samba Daemons
- NetBIOS and NetBEUI
- Accessing Windows/Samba Shares from Linux
- Samba Utilities
- Samba Configuration Files
- The smb.conf File
- Mapping Permissions and ACLs
- Mapping Linux Concepts
- Mapping Case Sensitivity
- Sharing Home Directories
- Sharing Printers
- Share Authentication
- Share-Level Access
- User-Level Access
- Mapping Users
- Samba Account Database
- User Share Restrictions
- Samba Share-Level Access
- Samba User-Level Access
- Samba Group Shares
- Configuring Samba
- Samba Home Directory Shares
- Postfix
- Postfix Features
- Postfix Components
- Postfix Configuration
- master.cf
- main.cf
- Postfix Map Types
- Postfix Pattern Matching
- Virtual Domains
- Postfix Mail Filtering
- Configuration Commands
- Management Commands
- Postfix Logging
- SMTP AUTH Server and Relay Control
- SMTP AUTH Clients
- TLS Server Configuration
- Postfix Client Configuration for TLS
- Ensuring TLS Security
- Configuring Postfix
- Postfix Network Configuration
- Postfix Virtual Host Configuration
- Postfix SMTP AUTH Configuration
- Postfix STARTTLS Configuration
- SUSE Postfix Configuration Cleanup
- Mail Services and Retrieval
- Procmail
- SpamAssassin
- amavisd-new Mail Filtering
- Accessing Email
- The IMAP4 Protocol
- Cyrus IMAP/POP3 Server
- Cyrus IMAP MTA Integration
- Cyrus Mailbox Administration
- Configuring Procmail & SpamAssassin
- Configuring Cyrus IMAP
- Monitoring & Troubleshooting
- System Status – Memory
- System Status – I/O
- System Status – CPU
- Performance Trending with sar
- Troubleshooting Basics: The Process
- Troubleshooting Basics: The Tools
- System Logging
- Syslog-ng
- Rsyslog
- /etc/rsyslog.conf
- Log Management
- Log Anomaly Detector
- strace and ltrace
- Common Problems
- Troubleshooting Incorrect File Permissions
- Inability to Boot
- Typos in Configuration Files
- Corrupt Filesystems
- Rescue Environment
- SUSE Rescue Environment
- Process Tools
- Setting up a Full Debug Logfile
- Remote Syslog Configuration
- Recovering Damaged MBR
- Installing RHEL6
- Anaconda: An Overview
- Anaconda: Booting the System
- Anaconda: Common Boot Options
- Anaconda: Loading Anaconda and Packages
- Anaconda: Storage Options
- Anaconda: Troubleshooting
- FirstBoot
- Kickstart
- A Typical Install
- Linux Installation
- Automating Installation with Kickstart
- Installing SLES11
- Installation Choices
- DVD-ROM Install Media
- Network Installation
- SLP for SUSE Linux Installation
- Local Hard Drive Installation
- The linuxrc Program
- Install Program Interface
- Installation Diagnostics
- Language/Keyboard Selection and EULA
- Installation Mode
- Clock and Time Zone
- Desktop Selection
- Server Base Scenario
- The YaST Installer Design
- Disk Partitioning
- Boot Loader Configuration
- Software Package Selection
- Kernel Crash Dump Configuration
- Confirmation and File Installation
- Setting the Root Password
- Hostname and Domain Name
- Network Configuration
- SLES Services Configuration
- Adding a User Account
- Release Notes
- Final Installation Hub
- Installation Complete and AutoYaST2 "Cloning"
- Using AutoYaST2 files
- Creating AutoYaST2 Files
- linuxrc Automation
- SUSE Installation
- Automating Installation with AutoYaST
