RHCSA(EX200) & RHCE(EX300) Paper Read all the instructions carefully RHCSA exam is 2.5 hours long. 300 Marks-------------Min Marks is 210. RHCE exam is 2.0 hours long. 300 Marks-------------Min Marks is 210. Student have to bring original photo ID proof with himself/herself & Passport size photograph. Fill up the form. After filling form you will be provided with username and password for the base machine. Here provide password is for local user, not admin. Login to the base machine. After login to the base machine you are suppose to see a file on the Desktop in which information regarding the exam is given. There is also an icon on the Desktop by clicking which you will be able to access your Virtual Machine. You will solve all the questions in virtual machine. As there is no Browser installed on Virtual Machine, you are supposed to open your exam paper in Base Machine. The packages can be installed using FTP from ftp://192.168.0.254/pub/rhel6/dvd RHCSA PAPER 1). First step is to crack password of Virtual Machine On start up the cpu press E (for edit) Now go to on second line Press E(for edit) Now give space and write 1(or s) then press enter Now press b Now we change password for root setenforce 0 passwd root reboot
2). setup a ip addr for virtual macine as ip addr 192.168.0.y subnet mask
255.255.255.0 Default gateway 192.168.0.254 nameserver 192.168.0.254 and hostname as serverx.example.com ( where "x" is the fourth byte of base machine ip & y=x+100 ).
Rite click on Network Manager(In graphical) Edit connections Add IPv4 setting Now select manual Now click on add Add details as per above mentioned Apply Service NetworkManager restart Chkconfig NetworkManager on Hostname Hostname serverX.example.com Vim /etc/sysconfig/network Now edit hostname- HOSTNAME=serverx.example.com Service network restart Nslookup serverX.example.com Ping 192.168.0.254 Ethtool eth0
Iptables –F Service iptables save
Service iptables restart Chkconfig iptables on
By default firefox is not installed on VM so we can install firefox on VM First create yum Vim /etc/yum.repos.d/exam.repo [exam] Baseurl= ftp://192.168.0.254/pub/rhel6/dvd Gpgcheck=0
3). Create a new Partition
Your system has a new physical partition mounted under /common with a 400MiB ext4 file system. [Note: Because partition sizes are seldom exactly whatever specified when they are created, anything within the range of 350 to 450MB is acceptable.]
Fdisk –l /dev/vda Fdisk /dev/vda N E 3 9837 Whole memory Enter W
Fdisk /dev/vda N L Enter +400M w Partx –a /dev/vda Mkfs.ext4 /dev/vda5 Mkdir /common Vim /etc/fstab /dev/vda5
/common
ext4
defaults
00
Mount –a Df –h 4). Create the following users, groups, and group memberships:
Create the following users, groups, and group memberships: A group named sysadmin. A user natasha who belongs to sysadmin as a secondary group. A user sarah who also belongs to sysadmin as a secondary group. A user harry who does not have access to an interactive shell on the system, and who is not a member of sysadmin. natasha, sarah and harry should all have the password of thuctive.
Groupadd sysadmin Useradd Natasha Usermod –G sysadmin Natasha
Usermod –G sysadmin sarah Useradd –s /sbin/nologin harry Passwd Natasha Thuctive Passwd sarah Thuctive Passwd harry Thuctive 5). Create a collaborative directory
Create a collaborative directory /common/admin with the following characteristics: Group ownership of /common/admin is sysadmin. The directory should be readable, writable, and accessible to members of sysadmin, but not to any other user. (It is understood that root has access to all files and directories on the system.) Files created in /common/admin automatically have group ownership set to the sysadmin group.
Mkdir /common/admin Chgrp sysadmin /common/admin Ll –d /common/admin Chmod 770 /common/admin Chmod 2770 /common/admin( for making group ownership to sysadmin group) Su –natasha Cd /common/admin/ Touch arp
Ls –l exit
6). Install the appropriate kernel
Install the appropriate kernel update from:ftp://instructor.example.com/pub/updates The following criteria must also be met: The updated kernel is the default kernel when the system is rebooted. The original kernel remains available and bootable on the system.
Click on link After that you will find two rpm packages 1) Kernel 2) kernel – Firmware Download both of them on desktop First install kernel-firware Now install kernel Just by double click on them Entries of kernel will be in vim /boot/grub/grub.conf 7). Enable IP forwarding on your machine
Enable IP forwarding on your machine Vim /etc/sysctl.conf At Line no 7
net.ipv4.ip-forward=1
Sysctl –p(for cross check) 8). Implement a web server
Implement a web server for the site http://serverx.example.com then perform the following steps:Download ftp://instructor.example.com/pub/rhce/station.html Rename the downloaded file to index.html Copy this index.html to the Document Root of your web server Do NOT make any modifications to the content of index.html
Yum install httpd* –y Cd /var/www/html Wget
ftp://instructor.example.com/pub/rhce/station.html
Ls Mv station.html index.html Service httpd restart Chkconfig httpd on
9). Resize the Lvm partition Resize the Lvm partition "home" to 150MiB.
W Lvdisplay Df –h Umount /dev/vgsrv/home E2fsck –f /dev/vgsrv/home
Resize2fs /dev/vgsrv/home 150M Lvreduce –L 150M /dev/vgsrv/home Mount –a Lvdisplay Df –h
For extend we use following command Lvextend –L 250M /dev/vgsrv/home Resize2fs -f /dev/vgsrv/home Mount -a
10). Configure FTP access
Configure FTP access on your system: Clients within the example.com domain should have anonymous FTP access to your machine
Yum install vsftpd Service vsftpd restart Chkconfig vsftpd on
Booleans on of Selinux getsebool -a | grep ftp (1,5) setsebool –P Boolean name on
11). Configure a cron job
The user natasha must configure a cron job that runs daily at 14:23 local time and executes /bin/echo hiya
Crontab –u natasha –e 23 14 * * * /bin/echo ―hiya‖ Service crond restart Chkconfig crond on Crontab –u natsah -l 12). SELinux must be running in the Enforcing mode.
SELinux must be running in the Enforcing mode. sestatus Setenfoce 1 Vim /etc/Selinux/config getenforce 13). Copy the file /etc/fstab to /var/tmp
Copy the file /etc/fstab to /var/tmp. Configure the permissions of/var/tmp/fstab so that: The file /var/tmp/fstab is owned by the root user. The file /var/tmp/fstab belong to the group root. The file /var/tmp/fstab should not be executable by anyone. The user natasha is able to read and write /var/tmp/fstab. The user sarah can neither write nor read /var/tmp/fstab. [Note: all other users (current or future) have the ability to read/var/tmp/fstab.]
Cp /etc/fstab /var/tmp Ll /var/tmp/fstab Setfacl –m u:Natasha:rw- /var/tmp/fstab Setfacl –m u:sarah:--- /var/tmp/fstab Getfacl /var/tmp/fstab
14). Configure NTP
Configure your system so that it is an NTP client of instructor.example.com.
Ntpdate –b 192.168.0.254
Service ntpd stop Vim /etc/ntp.conf Server 192.168.0.254 Service ntpd start Chkconfig ntpd on
15). Find the files
Find files in your system which is owned by natasha user & copy all the files on /backup/somefile directory
w Find / -user natasha Find / -user Natasha -exec cp -rvf {} /backup/somefile/ \;
Mkdir –p /backup/somefile;find / -user Natasha –exec cp –a –rvf {} /backup/somefile \; Ls –l /backup/somefile/
16). Create a swap partition
Create a SWAP partition of 450 megabyte and make available at next reboot. Free –m Fdisk /dev/vda N L +450M T 6 82 W Partx –a /dev/vda Mkswap /dev/vda6 Swapon /dev/vda6 Free –m Vim /etc/fstab /dev/vda6 Mount –a Free –m
swap swap defaults
00
17). Authenticate users from LDAP Directory Servers
Authenticate users from LDAP Directory Servers which have: ServerName: instructor.example.com. Base DN: dc=example,dc=com. Download certificate from ftp://instructor.example.com/pub/EXAMPLE-CA-CERT Authenticate with users ldapuserx with have password of password. Configure autofs such that server's home directory instructor.example.com:/home/guests/ldapuserx mounted on /home/guests/ldapuserx. Now ldap client configuration Yum install openldap* -y System-config-authentication First choose Identity & Authentication tab In user account configuration choose ldap user Now write Base DN: dc=example,dc=com & ldap server name: instructor.example.com Now click on use TLS to encrypt Now click on Download CA certificate Now enter url as ftp://instructor.example.com/pub/EXAMPLE-CA-CERT Now in authentication method choose ldap password Chkconfig sssd on
Su – ldapuser7 Here is showing error. For removing error we make directory & mount server directory on this Mkdir –p /home/guest/ldapuser7 Mount 192.168.0.254:/home/guests/ldapuser7 Su – ldapuser7 Logout
Now we can also use other way to do this task Add entry in file Vim /etc/auto.master /home/guests
/etc/auto.misc
/home/guests/ldapuser7
Add other entry in file as Vim /etc/auto.mics Ldapuser7
-rw,soft,intr
instructor.example.com:/home/guests/ldapuser7
Due to bug first make service stop & then start Service autofs stop Service autofs start Chkconfig autofs on Su – ldapuser7
18). Create a user with uid
Create the following user name neo with uid 1337 and set the password password: Useradd –u 1337 neo Tail -1 /etc/passwd Passwd neo Password
19). Create the lvm partition with P.E.
Create the volume group with name myvol with 8 MiB P.E. and create the lvm name mydatabase with the 20 P.E. and format this lvm with vfat and create a directory /database and mount this lvm permanently on /database.
Fdisk /dev/vda N L +167M T 7 8e W Partx –a /dev/vda Pvcreate /dev/vda7 Vgcreate –s 8M myvol /dev/vda7 Vgdisplay Myvol Lvcreate –L 160M –n mydatabase myvol Lvdisplay Mkfs.vfat /dev/myvol/mydatabase Mkdir /database Vim /etc/fstab /dev/myvol/mydatabase
/database
vfat
defaults
00
Mount –a Df –h
20). Find the string
Find the string root from /etc/passwd file and save the result in /searchfile. Grep ―root‖ /etc/passwd > /searchfile Cat /search
/usr/local/sbin/install-vserver( for Installation virtual machine) RHCE PAPER Two Network have been given here example.com-------192.168.0.0/255.255.255.0 cracker.org---------172.24.0.0/255.255.0.0 iptables -F service iptables save service iptables restart chkconfig iptables on Now create yum 1). Configure SSH access Configure SSH access as follows: sarah has remote SSH access to your machine from within example.com Clients within cracker.org should NOT have access to ssh on your System
vim /etc/ssh/sshd_config allowusers sarah root here we use TCP wrapper secruity. we make some entries as such follows vim /etc/hosts.allow sshd: 192.168.0.0/255.255.255.0 vim /etc/hosts.deny sshd: 172.24.0.0/255.255.255.0 service sshd restart chkconfig sshd on 2). Restrict crontab
User neo should not be able to use crontab. for this make entries in below mentioned file vim /etc/cron.deny neo service crond restart chkconfig crond on 3). Configure FTP access Configure FTP access on your system: Clients within the example.com domain should have anonymous FTP access to your machine Clients outside example.com should NOT have access to your FTP service.
yum install vsftpd* -y yum installl ftp* -y vim /etc/hosts.allow vsftpd: 192.168.0.0/255.255.255.0 vim /etc/hosts.deny vsftpd: ALL service vsftpd restart chkconfig vsftpd on ftp 192.168.0.110 ftp 127.0.0.1 Boolean again on as previous question in ftp Getsebool –a | grep ftp Allow_ftpd_annon_write(1) ftp_home_dir(5)
setsebool –P Allow_ftpd_annon_write 1 setsebool –P ftp_home_dir 1
4). Share the /common directory via SMB Share the /common directory via SMB: Your SMB server must be a member of the STAFF workgroup The share’s name must be common. The shared share must be available to example.com domain clients only The shared share must be browseable. sarah must have read access to the share, authenticating with the same password flectrag, if necessary.
mkdir /common yum install samba* -y
vim /etc/samba/smb.conf workgroup=STAFF [common] path=/common browseable=yes valid users=sarah hosts allow=192.168.0.0/255.255.255.0 read only=yes
useradd sarah
smbpasswd -a sarah ls -lz /etc/samba/smb.conf ll –dZ /common ll –dZ /etc/samba chcon -t samba_etc_t /common service smb restart chkconfig smb on smbclient //192.168.0.110/common -U sarah
5). Implement a web server Implement a web server for the site http://serverX.example.com then perform the following steps:Download ftp://instructor.example.com/pub/rhce/station.html Rename the downloaded file to index.html Copy this index.html to the Document Root of your web server Do NOT make any modifications to the content of index.html
yum install httpd* -y cd /var/www/html wget ftp://instructor.example.com/pub/rhce/station.html mv station.html index.html vim /etc/httpd/conf/httpd.conf NameVirtualHost 192.168.0.110:80
Document Root /var/www/html servername server10.example.com service httpd restart chkconfig httpd on clients http://server10.ecample.com
6). Extend your web server Extend your web server to include a virtual host for the site http://wwwx.example.com/, where x is your station number, then perform the following steps: Set the DocumentRoot to /var/www/virtual Download ftp://instructor.example.com/pub/rhce/www.html Rename the downloaded file to index.html Place this index.html in the DocumentRoot of the virtual host Do NOT make any modifications to the content of index.html Ensure that sarah is able to create content in /var/www/virtual [Note: The original web site http://serverX.example.com must still eaccessable. DNS resolution for the hostname wwwx.example.com is already provided by the name server on instructor.example.com.]
mkdir /var/www/virtual cd /var/www/virtual wget ftp://instructor.example.com/pub/rhce/www.html mv www.html index.html vim /etc/httpd/conf/httpd.conf
NameVirtualHost 192.168.0.110:80
Document Root /var/www/html servername server10.example.com
Document Root /var/www/virtual servername www10.example.com
service httpd restart chkconfig httpd on clients http://server10.ecample.com clients http://www10.example.com setfacl -m u:sarah:rw /var/www/virtual
7). Configure Web Server access Implement a web server for the site http://serverX.example.com then perform the following steps:Create a directory in your DocumentRoot named "restrict" Download ftp://instructor.example.com/pub/rhce/station.html Rename the downloaded file to index.html Copy this index.html to the "restrict" directory in the DocumentRoot of your web server
Do NOT make any modifications to the content of index.html "restrict" directory should not be accessible to anyone except example.com network
yum install httpd* -y;mkdir /var/www/html/restrict;cd /var/www/html/restrict;wget ftp://instructor.example.com/pub/rhce/station.html; mv station.html index.html; vim /etc/httpd/conf/httpd.conf order allow,deny allow from 192.168.0.0
service httpd restart chkconfig httpd on
8). Export your /common directory via NFS
Export your /common directory via NFS to the example.com Domain only.
[Note: because you will not have root access, you will not be able to directly Mount your exported /common directory using your guest account on the system provided for testing. However, the automounter on the system has been configured such that it will automount your /common directory under /home/guestx/nfs/stationx, where x is your station number. Consequently, successful execution of ls /home/guestx/nfs/stationx indicates that the automounter was able to automount your NFS share.]
Rpm –q nfs-utils Yum install nfs-utils Vim /etc/exports /common 192.168.0.0/255.255.255.0(ro,sync) Service nfs restart Chkconfig nfs on Service rpcbind restart Chkconfig rpcbind on Showmount -e 9). Configure an email alias
Configure an email alias for your MTA such that mail sent to admin is received by the local user sarah. Vim /etc/aliases Admin:
sarah( add this entry to at the last of the file)
Now save the file & run the following command: Newaliases
10). Configure SMTP mail service Configure SMTP mail service according to the following requirements: Your mail server should accept mail from remote hosts and localhost. Sarah must be able to receive mail from remote hosts. Mail delivered to sarah should spool into the default mail spool for sarah, /var/spool/mail/sarah. Yum install postfix* -y
Vim /etc/postfix/main.cf At line no 113 Inet_interfaces = all #inet_interfaces = localhost Service postfix restart Chkconfig postfix on Yum install telnet* -y telnet 127.0.0.1 25 quit telnet 192.168.0.110 25 quit 11). Mount iso image Download ftp://instructor.example.com/pub/iso/boot.iso mount this iso permanently as a read only on /mnt/iso mkdir /mnt/iso vim /etc/fstab /root/Desktop/boot.iso
/mnt/iso
iso9660
defaults,loop,ro
00
Mount –a Df –h 12). Configure an iscsi Dicover an ISCSI device on your system and create a partition on that device of size 10 MiB mounted under directory /iscsi. Create a file named abc.txt in /iscsi directory. Configure permission of that file such that user sarah can read, write and execute this file. yum install iscsi-initiator-utils –y iscsiadm –m discovery -t st -p 192.168.0.254:3260
Trying to login with the iSCSI Now copy iqn.2012-10.com.example:disk1 Iscsiadm -m node -T iqn.2012-10.com.example:disk1 -p 192.168.0.254:3260 -l fdisk –l
fdisk /dev/sda make 10MB partition partprobe /dev/sda mkfs.ext4 /dev/sda1 Checking the UUID for disk blkid /dev/sda1 now copy UUID="71e86162-011d-49f1-9b4a-9f95a277e6b5" Add the next entry in /etc/fstab file Vim /etc/fstab UUID=71e86162-011d-49f1-9b4a-9f95a277e6b5
/iscsi
ext4 defaults,_netdev,acl 0 0
Mkdir /iscsi Mount –a Df –h Cd /iscsi/ Touch abc.txt Setfacl –m u:sarah:rwx /iscsi/abc.txt
13). Configure
script
Create a script in /progrram with the name script.sh to do the following When kernel is passed as an argument then the output is user. When user is passed as argument then the output is kernel.
When neither kernel nor user is passed then the output is "--stdin error".
Mkdir /progrram Cd /program Touch script.sh Chmod +x script.sh Vim script.sh #!/bin/bash If [ ―$1‖ == ―kernel‖ ] Then Echo ―user‖ Elif [ ―$1‖ == ―user‖ ] Then Echo ―kernel‖ Else Echo ―—stdin error‖ fi Now save the file and run test.
Sh script.sh 14). Pass the parameter to kernel Pass the parameter to kernel. Pass the parameter "kernelbp=1" to the kernel. Enter this value at the last of the line kernel in /etc/grub.conf Vim /etc/grub.conf
Now save and restart the machine And now check with this Cat /proc/cmdline
