RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD...

8
RHCE BOOT CAMP Network Services Monday, July 11, 2011

Transcript of RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD...

Page 1: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

RHCEBOOT CAMP

Network Services

Monday, July 11, 2011

Page 2: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

OPENSSH

OpenSSH is the open source version of SSH, and is used by most UNIX variants for secure remote administration.

This service is configured in /etc/ssh/sshd_config.

Monday, July 11, 2011

Page 3: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

OPENSSH CONFIGURATION

OpenSSH Configuration Parameters of interest:

Port

ListenAddress

PermitRootLogin

PubkeyAuthentication

Subsystem sftp

Monday, July 11, 2011

Page 4: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

XINETD

xinetd is the extended internet services SUPER daemon. :)

This service acts as a super daemon by listening on key ports for certain types of requests.

When a request is received, xinetd starts the appropriate service and then hands of the request so that it can be handled correctly.

xinetd is configured in /etc/xinetd.conf, the services

that it controls are configured in /etc/xinetd.d/

Monday, July 11, 2011

Page 5: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

LAB

1. Configure your box to allow both the 'root' and 'student' users to login locally, but not over ssh.

2. Configure an anonymous rsync service to share the contents of your /srv directory. See the man page for

rsyncd.conf.

Monday, July 11, 2011

Page 6: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

NTP

The Network Time Protocol is a very useful and accurate method to keep your system clock synchronized with time servers around the world. This is important because:

Timestamps in log files across machine will line up, allowing for proper analysis and comparison

Cron jobs run at the right time

Knowing the correct time just makes for a happy server

Monday, July 11, 2011

Page 7: RHCE - EdgeCloudrackspace.edgecloud.com/rhcsa-rhce-rhel6/15-Network... · 2011-07-11 · XINETD xinetd is the extended internet services SUPER daemon. :) This service acts as a super

LAB

1. Enable NTP on your machine, and use 0.pool.ntp.org

and 1.pool.ntp.org.

2. Use the ntpq command to figure out how far off your machine's clock is from true time.

Monday, July 11, 2011