Lpi Certificaciones Linux

LPI CERTIFICACIONES LINUX

Build your Linux skillsIntroduce yourself to Linux, and advance your proficiency, through a spectrum of self-paced tutorials. With these tutorials, you can build fundamental skills on Linux systems administration at your level of expertise:

Foundational concepts (the 101- and 102-series tutorials are for you)

Note: New developerWorks tutorials corresponding to the April 2009 objectives for exam 101 and exam 102 are in progress.

Intermediate to advanced topics (see the 201- and 202-series tutorials)

Expert topics (go directly to the 301-series tutorials)

Prepare for LPI certificationThe Linux Professional Institute (LPI) certifies Linux® system administrators at three levels:

Certification level 1 (Junior level) Certification level 2 (Advanced level) Certification level 3 (Senior level)

To attain certification level 1, you must pass LPIC-1 exams 101 and 102. To attain certification level 2, you must pass LPIC-2 exams 201 and 202. To attain certification level 3, you must pass LPIC-3 exam 301 ("core") and have an active certification level 2. You may also need to pass additional specialty exams at the senior level.

+

Exam 101: Detailed ObjectivesThis is a required exam for LPIC-1 or LPI certification Level 1. It covers basic skills for the Linux professional that are common to major distributions of Linux.

IMPORTANT INFORMATION: These are the current 101 objectives, which are valid effective 2009-04-01.

Each objective is assigned a weighting value. The weights range roughly from 1 to 10 and indicate the relative importance of each objective. Objectives with higher weights will be covered in the exam with more questions.

Objectives: Exam 101Topic 101: System Architecture 101.1 Determine and configure hardware settings

Weight 2

Description Candidates should be able to determine and configure fundamental system hardware.

Key Knowledge Areas

Enable and disable integrated peripherals.

Configure systems with or without external peripherals such as keyboards.

Differentiate between the various types of mass storage devices.

Set the correct hardware ID for different devices, especially the boot device.

Know the differences between coldplug and hotplug devices.

Determine hardware resources for devices.

Tools and utilities to list various hardware information (e.g. lsusb, lspci, etc.)

Tools and utilities to manipulate USB devices

Conceptual understanding of sysfs, udev, hald, dbus

The following is a partial list of the used files, terms and utilities:

/sys

/proc

/dev

modprobe

lsmod

lspci

lsusb

101.2 Boot the system

Weight 3

Description Candidates should be able to guide the system through the booting process.

Key Knowledge Areas

Provide common commands to the boot loader and options to the kernel at boot time.

Demonstrate knowledge of the boot sequence from BIOS to boot completion.

Check boot events in the log files.


/var/log/messages

dmesg

BIOS

bootloader

kernel

init

101.3 Change runlevels and shutdown or reboot system

Weight 3

Description

Candidates should be able to manage the runlevel of the system. This objective includes changing to single user mode, shutdown or rebooting the system. Candidates should be able to

alert users before switching runlevel and properly terminate processes. This objective also includes setting the default runlevel.

Key Knowledge Areas

Set the default runlevel.

Change between run levels including single user mode.

Shutdown and reboot from the command line.

Alert users before switching runlevels or other major system event.

Properly terminate processes.


/etc/inittab

shutdown

init

/etc/init.d

telinit

Topic 102: Linux Installation and Package Management 102.1 Design hard disk layout

Weight 2

Description Candidates should be able to design a disk partitioning scheme for a Linux system.

Key Knowledge Areas

Allocate filesystems and swap space to separate partitions or disks.

Tailor the design to the intended use of the system.

Ensure the /boot partition conforms to the hardware architecture requirements for booting.


/ (root) filesystem

/var filesystem

/home filesystem

swap space

mount points

partitions

102.2 Install a boot manager

Weight 2

Description Candidates should be able to select, install and configure a boot manager.

Key Knowledge Areas

Providing alternative boot locations and backup boot options.

Install and configure a boot loader such as GRUB.

Interact with the boot loader.


/boot/grub/menu.lst

grub-install

MBR

superblock

/etc/lilo.conf

lilo

102.3 Manage shared libraries

Weight 1

Description

Candidates should be able to determine the shared libraries that executable programs depend on and install them when necessary.

Key Knowledge Areas

Identify shared libraries.

Identify the typical locations of system libraries.

Load shared libraries.


ldd

ldconfig

/etc/ld.so.conf

LD_LIBRARY_PATH

102.4 Use Debian package management

Weight 3

Description

Candidates should be able to perform package management using the Debian package tools.

Key Knowledge Areas

Install, upgrade and uninstall Debian binary packages.

Find packages containing specific files or libraries which may or may not be installed.

Obtain package information like version, content, dependencies, package integrity and installation status (whether or not the package is installed).


/etc/apt/sources.list

dpkg

dpkg-reconfigure

apt-get

apt-cache

aptitude

102.5 Use RPM and YUM package management

Weight 3

Description

Candidates should be able to perform package management using RPM and YUM tools.

Key Knowledge Areas

Install, re-install, upgrade and remove packages using RPM and YUM.

Obtain information on RPM packages such as version, status, dependencies, integrity and signatures.

Determine what files a package provides, as well as find which package a specific file comes from.


rpm

rpm2cpio

/etc/yum.conf

/etc/yum.repos.d/

yum

yumdownloader

Topic 103: GNU and Unix Commands 103.1 Work on the command line

Weight 4

Description

Candidates should be able to interact with shells and commands using the command line. The objective assumes the bash shell.

Key Knowledge Areas

Use single shell commands and one line command sequences to perform basic tasks on the command line.

Use and modify the shell environment including defining, referencing and exporting environment variables.

Use and edit command history.

Invoke commands inside and outside the defined path.


.

bash

echo

env

exec

export

pwd

set

unset

man

uname

history

103.2 Process text streams using filters

Weight 3

Description Candidates should should be able to apply filters to text streams.

Key Knowledge Areas

Send text files and output streams through text utility filters to modify the output using standard UNIX commands found in the GNU textutils package.


cat

cut

expand

fmt

head

od

join

nl

paste

pr

sed

sort

split

tail

tr

unexpand

uniq

wc

103.3 Perform basic file management

Weight 4

Description

Candidates should be able to use the basic Linux commands to manage files and directories.

Key Knowledge Areas

Copy, move and remove files and directories individually.

Copy multiple files and directories recursively.

Remove files and directories recursively.

Use simple and advanced wildcard specifications in commands.

Using find to locate and act on files based on type, size, or time.

Usage of tar, cpio and dd.


cp

find

mkdir

mv

ls

rm

rmdir

touch

tar

cpio

dd

file

gzip

gunzip

bzip2

file globbing

103.4 Use streams, pipes and redirects

Weight 4

Description

Candidates should be able to redirect streams and connect them in order to efficiently process textual data. Tasks include redirecting standard input, standard output and standard error, piping the output of one command to the input of another command, using the output of one command

as arguments to another command and sending output to both stdout and a file.

Key Knowledge Areas

Redirecting standard input, standard output and standard error.

Pipe the output of one command to the input of another command.

Use the output of one command as arguments to another command.

Send output to both stdout and a file.


tee

xargs

103.5 Create, monitor and kill processes

Weight 4

Description Candidates should be able to perform basic process management.

Key Knowledge Areas

Run jobs in the foreground and background.

Signal a program to continue running after logout.

Monitor active processes.

Select and sort processes for display.

Send signals to processes.


&

bg

fg

jobs

kill

nohup

ps

top

free

uptime

killall

103.6 Modify process execution priorities

Weight 2

Description Candidates should should be able to manage process execution priorities.

Key Knowledge Areas

Know the default priority of a job that is created.

Run a program with higher or lower priority than the default..

Change the priority of a running process.


nice

ps

renice

top

103.7 Search text files using regular expressions

Weight 2

Description

Candidates should be able to manipulate files and text data using regular expressions. This objective includes creating simple regular expressions containing several notational elements. It

also includes using regular expression tools to perform searches through a filesystem or file content.

Key Knowledge Areas

Create simple regular expressions containing several notational elements.

Use regular expression tools to perform searches through a filesystem or file content.


grep

egrep

fgrep

sed

regex(7)

103.8 Perform basic file editing operations using vi

Weight 3

Description

Candidates should be able to edit text files using vi. This objective includes vi navigation, basic vi modes, inserting, editing, deleting, copying and finding text.

Key Knowledge Areas

Navigate a document using vi.

Use basic vi modes.

Insert, edit, delete, copy and find text.


vi

/, ?

h,j,k,l

i, o, a

c, d, p, y, dd, yy

ZZ, :w!, :q!, :e!

Topic 104: Devices, Linux Filesystems, Filesystem Hierarchy Standard 104.1 Create partitions and filesystems

Weight 2

Description

Candidates should be able to configure disk partitions and then create filesystems on media such as hard disks. This includes the handling of swap partitions.

Key Knowledge Areas

Use various mkfs commands to set up partitions and create various filesystems such as:

o ext2

o ext3

o xfs

o reiserfs v3

o vfat


fdisk

mkfs

mkswap

104.2 Maintain the integrity of filesystems

Weight 2

Description

Candidates should be able to maintain a standard filesystem, as well as the extra data associated with a journaling filesystem.

Key Knowledge Areas

Verify the integrity of filesystems.

Monitor free space and inodes.

Repair simple filesystem problems.


du

df

fsck

e2fsck

mke2fs

debugfs

dumpe2fs

tune2fs

xfs tools (such as xfs_metadump and xfs_info)

104.3 Control mounting and unmounting of filesystems

Weight 3

Description Candidates should be able to configure the mounting of a filesystem.

Key Knowledge Areas

Manually mount and unmount filesystems.

Configure filesystem mounting on bootup.

Configure user mountable removeable filesystems.


/etc/fstab

/media

mount

umount

104.4 Manage disk quotas

Weight 1

Description Candidates should be able to manage disk quotas for users.

Key Knowledge Areas

Set up a disk quota for a filesystem.

Edit, check and generate user quota reports.


quota

edquota

repquota

quotaon

104.5 Manage file permissions and ownership

Weight 3

Description

Candidates should be able to control file access through the proper use of permissions and ownerships.

Key Knowledge Areas

Manage access permissions on regular and special files as well as directories.

Use access modes such as suid, sgid and the sticky bit to maintain security.

Know how to change the file creation mask.

Use the group field to grant file access to group members.


chmod

umask

chown

chgrp

104.6 Create and change hard and symbolic links

Weight 2

Description Candidates should be able to create and manage hard and symbolic links to a file.

Key Knowledge Areas

Create links.

Identify hard and/or softlinks.

Copying versus linking files.

Use links to support system administration tasks.


ln

104.7 Find system files and place files in the correct location

Weight 2

Description

Candidates should be thouroughly familiar with the Filesystem Hierarchy Standard (FHS), including typical file locations and directory classifications.

Key Knowledge Areas

Understand the correct locations of files under the FHS.

Find files and commands on a Linux system.

Know the location and propose of impotant file and directories as defind in the FHS.


find

locate

updatedb

whereis

which

type

/etc/updatedb.conf

Exam 102: Detailed ObjectivesThis is a required exam for LPI certification Level 1. It covers basic skills for the Linux Professional that are common to major distributions of Linux.



Objectives: Exam 102 Topic 105: Shells, Scripting and Data Management 105.1 Customize and use the shell environment

Weight 4

Description

Candidates should be able to customize shell environments to meet users' needs. Candidates should be able to modify global and user profiles.

Key Knowledge Areas

Set environment variables (e.g. PATH) at login or when spawning a new shell.

Write BASH functions for frequently used sequences of commands.

Maintain skeleton directories for new user accounts.

Set command search path with the proper directory.


/etc/profile

env

export

set

unset

~/.bash_profile

~/.bash_login

~/.profile

~/.bashrc

~/.bash_logout

function

alias

lists

105.2 Customize or write simple scripts

Weight 4

Description

Candidates should be able to customize existing scripts, or write simple new BASH scripts.

Key Knowledge Areas

Use standard sh syntax (loops, tests).

Use command substitution.

Test return values for success or failure or other information provided by a command.

Perform conditional mailing to the superuser.

Correctly select the script interpreter through the shebang (#!) line.

Manage the location, ownership, execution and suid-rights of scripts.


for

while

test

if

read

seq

105.3 SQL data management

Weight 2

Description

Candidates should be able to query databases and manipulate data using basic SQL commands. This objective includes performing queries involving joining of 2 tables and/or

subselects.

Key Knowledge Areas

Use of basic SQL commands.

Perform basic data manipulation.


insert

update

select

delete

from

where

group by

order by

join

Topic 106: User Interfaces and Desktops 106.1 Install and configure X11

Weight 2

Description Candidates should be able to install and configure X11.

Key Knowledge Areas

Verify that the video card and monitor are supported by an X server.

Awareness of the X font server.

Basic understanding and knowledge of the X Window configuration file.


/etc/X11/xorg.conf

xhost

DISPLAY

xwininfo

xdpyinfo

X

106.2 Setup a display manager

Weight 2

DescriptioCandidates should be able setup and customize a display manager. This objective covers the display managers XDM (X Display Manger), GDM (Gnome Display Manager) and KDM (KDE

n Display Manager).

Key Knowledge Areas

Turn the display manager on or off.

Change the display manager greeting.

Change default color depth for the display manager.

Configure display managers for use by X-stations.


/etc/inittab

xdm configuration files

kdm configuration files

gdm configuration files

106.3 Accessibility

Weight 1

Description Demonstrate knowledge and awareness of accessibility technologies.

Key Knowledge Areas

Keyboard Accessibility Settings (AccessX?)

Visual Settings and Themes

Assistive Technology (ATs)


Sticky/Repeat Keys

Slow/Bounce/Toggle Keys

Mouse Keys

High Contrast/Large Print Desktop Themes

Screen Reader

Braille Display

Screen Magnifier

On-Screen Keyboard

Gestures (used at login, for example gdm)

Orca

GOK

emacspeak

https://group.lpi.org/publicwiki/bin/edit/Examdev/AccessX?topicparent=Examdev.LPIC-10x

Topic 107: Administrative Tasks 107.1 Manage user and group accounts and related system files

Weight 5

Description Candidates should be able to add, remove, suspend and change user accounts.

Key Knowledge Areas

Add, modify and remove users and groups.

Manage user/group info in password/group databases.

Create and manage special purpose and limited accounts.


/etc/passwd

/etc/shadow

/etc/group

/etc/skel

chage

groupadd

groupdel

groupmod

passwd

useradd

userdel

usermod

107.2 Automate system administration tasks by scheduling jobs

Weight 4

Description

Candidates should be able to use cron or anacron to run jobs at regular intervals and to use at to run jobs at a specific time.

Key Knowledge Areas

Manage cron and at jobs.

Configure user access to cron and at services.


/etc/cron.{d,daily,hourly,monthly,weekly}

/etc/at.deny

/etc/at.allow

/etc/crontab

/etc/cron.allow

/etc/cron.deny

/var/spool/cron/*

crontab

at

atq

atrm

107.3 Localisation and internationalisation

Weight 3

Description

Candidates should be able to localize a system in a different language than English. As well, an understanding of why LANG=C is useful when scripting.

Key Knowledge Areas

Locale settings.

Timezone settings.


/etc/timezone

/etc/localtime

/usr/share/zoneinfo

Environment variables:

o LC_*

o LC_ALL

o LANG

/usr/bin/locale

tzselect

tzconfig

date

iconv

UTF-8

ISO-8859

ASCII

Unicode

Topic 108: Essential System Services 108.1 Maintain system time

Weight 3

Description

Candidates should be able to properly maintain the system time and synchronize the clock via NTP.

Key Knowledge Areas

Set the system date and time.

Set the hardware clock to the correct time in UTC.

Configure the correct timezone.

Basic NTP configuration.

Knowledge of using the pool.ntp.org service


/usr/share/zoneinfo

/etc/timezone

/etc/localtime

/etc/ntp.conf

date

hwclock

ntpd

ntpdate

pool.ntp.org

108.2 System logging

Weight 2

Description

Candidates should be able to configure the syslog daemon. This objective also includes configuring the logging daemon to send log output to a central log server or accept log output as

a central log server.

Key Knowledge Areas

syslog configuration files

syslog

standard facilities, priorities and actions


syslog.conf

syslogd

klogd

logger

108.3 Mail Tranfer Agent (MTA) basics

Weight 3

Description

Candidates should be aware of the commonly available MTA programs and be able to perform basic forward and alias configuration on a client host. Other configuration files are not covered.

Key Knowledge Areas

Create e-mail aliases.

Configure e-mail forwarding.

Knowledge of commonly available MTA programs (postfix, sendmail, qmail, exim) (no configuration)


~/.forward

sendmail emulation layer commands

newaliases

mail

mailq

postfix

sendmail

exim

qmail

108.4 Manage printers and printing

Weight 2

Description

Candidates should be able to manage print queues and user print jobs using CUPS and the LPD compatibility interface.

Key Knowledge Areas

Basic CUPS configuration (for local and remote printers).

Manage user print queues.

Troubleshoot general printing problems.

Add and remove jobs from configured printer queues.


CUPS configuration files, tools and utilities

/etc/cups

lpd legacy interface (lpr, lprm, lpq)

Topic 109: Networking Fundamentals 109.1 Fundamentals of internet protocols

Weight 4

Description

Candidates should demonstrate a proper understanding of TCP/IP network fundamentals.

Key Knowledge Areas

Demonstrate an understanding network masks.

Knowledge of the differences between private and public "dotted quad" IP-Addresses.

Setting a default route.

Knowledge about common TCP and UDP ports (20, 21, 22, 23, 25, 53, 80, 110, 119, 139, 143, 161, 443, 465, 993, 995).

Knowledge about the differences and major features of UDP, TCP and ICMP.

Knowledge of the major differences between IPv4 and IPV6.


/etc/services

ftp

telnet

host

ping

dig

traceroute

tracepath

109.2 Basic network configuration

Weight 4

Description

Candidates should be able to view, change and verify configuration settings on client hosts.

Key Knowledge Areas

Manually and automatically configure network interfaces

Basic TCP/IP host configuration.


/etc/hostname

/etc/hosts

/etc/resolv.conf

/etc/nsswitch.conf

ifconfig

ifup

ifdown

route

ping

109.3 Basic network troubleshooting

Weight 4

Description Candidates should be able to troubleshoot networking issues on client hosts.

Key Knowledge Areas

Manually and automatically configure network interfaces and routing tables to include adding, starting, stopping, restarting, deleting or reconfiguring network interfaces.

Change, view, or configure the routing table and correct an improperly set default route manually.

Debug problems associated with the network configuration.


ifconfig

ifup

ifdown

route

host

hostname

dig

netstat

ping

traceroute

109.4 Configure client side DNS

Weight 2

Description Candidates should be able to configure DNS on a client host.

Key Knowledge Areas

Demonstrate the use of DNS on the local system.

Modify the order in which name resolution is done.


/etc/hosts

/etc/resolv.conf

/etc/nsswitch.conf

Topic 110: Security 110.1 Perform security administration tasks

Weight 3

Description

Candidates should know how to review system configuration to ensure host security in accordance with local security policies.

Key Knowledge Areas

Audit a system to find files with the suid/sgid bit set.

Set or change user passwords and password aging information.

Being able to use nmap and netstat to discover open ports on a system.

Set up limits on user logins, processes and memory usage.

Basic sudo configuration and usage.


find

passwd

lsof

nmap

chage

netstat

sudo

/etc/sudoers

su

usermod

ulimit

110.2 Setup host security

Weight 3

Description Candidates should know how to set up a basic level of host security.

Key Knowledge Areas

Awareness of shadow passwords and how they work.

Turn off network services not in use.

Understand the role of TCP wrappers.


/etc/nologin

/etc/passwd

/etc/shadow

/etc/xinetd.d/*

/etc/xinetd.conf

/etc/inetd.d/*

/etc/inetd.conf

/etc/inittab

/etc/init.d/*

/etc/hosts.allow

/etc/hosts.deny

110.3 Securing data with encryption

Weight 3

Description

The candidate should be able to use puplic key techniques to secure data and communication.

Key Knowledge Areas

Perform basic OpenSSH 2 client configuration and usage.

Understand the role of OpenSSH? 2 server host keys

Perform basic GnuPG configuration and usage.

Understand SSH port tunnels (including X11 tunnels).


ssh

ssh-keygen

ssh-agent

https://group.lpi.org/publicwiki/bin/edit/Examdev/OpenSSH?topicparent=Examdev.LPIC-10x

ssh-add

~/.ssh/id_rsa and id_rsa.pub

~/.ssh/id_dsa and id_dsa.pub

/etc/ssh/ssh_host_rsa_key and ssh_host_rsa_key.pub

/etc/ssh/ssh_host_dsa_key and ssh_host_dsa_key.pub

~/.ssh/authorized_keys

/etc/ssh_known_hosts

gpg

~/.gnupg/*

LPIC-2

También conocida como Certificación de Profesional Avanzado de Linux.

Características

Prerrequisitos: Tener la certificación LPIC-1

Requerimientos: Pasar los exámenes 201 y 202

Idioma del test: disponible sólo en Inglés

Objetivos de la certificación

o Administración de un site pequeño o mediano

http://lpi.org.es/index.php?view=article&catid=35%3Apagina-estatica&id=51%3Alpic-2&format=pdf&option=com_content&Itemid=58

http://lpi.org.es/index.php?view=article&catid=35%3Apagina-estatica&id=51%3Alpic-2&tmpl=component&print=1&layout=default&page=&option=com_content&Itemid=58

http://lpi.org.es/index.php?option=com_mailto&tmpl=component&link=aHR0cDovL2xwaS5vcmcuZXMvaW5kZXgucGhwP29wdGlvbj1jb21fY29udGVudCZ2aWV3PWFydGljbGUmaWQ9NTE6bHBpYy0yJmNhdGlkPTM1OnBhZ2luYS1lc3RhdGljYSZJdGVtaWQ9NTg=

o Planificación, mantenimiento, securización de una red mixta (MS, Linux) incluyendo:

Servidor de red Samba

Pasarela de Internet: firewall, proxy, correo, news

Servidores de Internet: Servidores web, FTP

o Supervisión de asistentes

o Aconsejar en automatización y compras

Exam 201: Detailed ObjectivesThis is a required exam for LPI certification Level 2. It covers advanced skills for the Linux professional that are common across all distributions of Linux.



Objectives: Exam 201Topic 201: Linux Kernel 201.1 Kernel Components

Weight 2

Description

Candidates should be able to utilise kernel components that are necessary to specific hardware, hardware drivers, system resources and requirements. This objective includes implementing

different types of kernel images, identifying stable and development kernels and patches, as well as using kernel modules.

Key Knowledge Areas

Kernel 2.6.x documentation


/usr/src/linux

/usr/src/linux/Documentation

zImage

bzImage

201.2 Compiling a kernel

Weight 2

Description

Candidates should be able to properly configure a kernel to include or disable specific features of the Linux kernel as necessary. This objective includes compiling and recompiling the Linux kernel as needed, updating and noting changes in a new kernel, creating an initrd image and

installing new kernels.

Key Knowledge Areas

/usr/src/linux/

GRUB configuration files

Kernel 2.6.x make targets


mkinitrd

mkinitramfs

make

make targets (config, xconfig, menuconfig, oldconfig, mrproper, zImage, bzImage, modules, modules_install)

201.3 Patching a kernel

Weight 1

Description

Candidates should be able to properly patch a kernel to add support for new hardware. This objective also includes being able to properly remove kernel patches from already patched

kernels.

Key Knowledge Areas

Kernel Makefiles


patch

gzip

bzip2

201.4 Customise, build and install a custom kernel and kernel modules

Weight 2

Description

Candidates should be able to customise, build and install a 2.6 kernel for specific system requirements, by patching, compiling and editing configuration files as required. This objective includes being able to assess requirements for a kernel compile as well as build and configure

kernel modules.

Key Knowledge Areas

Customize the current kernel configuration.

Build a new kernel and appropriate kernel modules.

Install a new kernel and any modules.

Ensure that the boot manager can locate the new kernel and associated files.

/usr/src/linux/

Module configuration files


patch

make

module tools

/usr/src/linux/*

/usr/src/linux/.config

/lib/modules/kernel-version/*

/boot/*

make targets: all, config, menuconfig, xconfig, gconfig oldconfig, modules, install, modules_install, depmod, rpm-pkg, binrpm-pkg, deb-pkg

201.5 Manage/Query kernel and kernel modules at runtime

Weight 3

Description

Candidates should be able to manage and/or query a 2.6.x kernel and its loadable modules.

Key Knowledge Areas

Use command-line utilities to get information about the currently running kernel and kernel modules.

Manually load and unload kernel modules.

Determine when modules can be unloaded.

Determine what parameters a module accepts.

Configure the system to load modules by names other than their file name.


/lib/modules/kernel-version/modules.dep

module configuration files in /etc

/proc/sys/kernel/

depmod

insmod

lsmod

rmmod

modinfo

modprobe

uname

Topic 202: System Startup 202.1 Customising system startup and boot processes

Weight 4

Description

Candidates should be able to query and modify the behaviour of system services at various run levels. A thorough understanding of the init structure and boot process is required. This objective

includes interacting with runlevels.

Key Knowledge Areas

Linux Standard Base Specification (LSB)


/etc/inittab

/etc/init.d/

/etc/rc.d/

chkconfig

update-rc.d

202.2 System recovery

Weight 4

Description

Candidates should be able to properly manipulate a Linux system during both the boot process and during recovery mode. This objective includes using both the init utility and init-related

kernel options.

Key Knowledge Areas

inittab

GRUB

grub shell


init

mount

fsck

telinit

Topic 203: Filesystem and Devices 203.1 Operating the Linux filesystem

Weight 4

Description

Candidates should be able to properly configure and navigate the standard Linux filesystem. This objective includes configuring and mounting various filesystem types.

Key Knowledge Areas

The concept of the fstab configuration

Tools and utilities for handling SWAP partitions and files

Use of UUIDs


/etc/fstab

/etc/mtab

/proc/mounts

mount and umount

sync

swapon

swapoff

203.2 Maintaining a Linux filesystem

Weight 3

Description

Candidates should be able to properly maintain a Linux filesystem using system utilities. This objective includes manipulating standard filesystems.

Key Knowledge Areas

Tools and utilities to manipulate and ext2 and ext3

Tools and utilities to manipulate reiserfs V3

Tools and utilities to manipulate xfs


fsck (fsck.*)

badblocks

mkfs (mkfs.*)

dumpe2fs

debugfs, debugreiserfs

tune2fs, reiserfstune

mkswap

xfs_info, xfs_check and xfs_repair

203.3 Creating and configuring filesystem options

Weight 2

Description

Candidates should be able to configure automount filesystems using AutoFS?. This objective includes configuring automount for network and device filesystems. Also included is creating

filesystems for devices such as CD-ROMs.

Key Knowledge Areas

autofs configuration files

UDF and ISO9660 tools and utilities

awareness of CD-ROM filesystems (UDF, ISO9660, HFS)

awareness of CD-ROM filesystem extensions (Joliet, Rock Ridge, El Torito)


/etc/auto.master

/etc/auto.[dir]

mkisofs

dd

mke2fs

203.4 udev Device Management

Weight 1

Description

Candidates should understand device detection and management using udev. This objective includes troubleshooting udev rules.

Key Knowledge Areas

udev rules

Kernel interface


udevmonitor

/etc/udev

Topic 204: Advanced Storage Device Administration 204.1 Configuring RAID

Weight 2

Description

Candidates should be able to configure and implement software RAID. This objective includes using and configuring RAID 0, 1 and 5.

Key Knowledge Areas

Software raid configuration files and utilities


mdadm.conf

mdadm

/proc/mdstat

fdisk

204.2 Adjusting Storage Device Access

Weight 1

Description

Candidates should be able to configure kernel options to support various drives. This objective includes software tools to view & modify hard disk settings.

Key Knowledge Areas

Tools and utilities to configure DMA for IDE devices including ATAPI and SATA

Tools and utilities to manipulate or analyse system resources (e.g. interrupts)

Awareness of sdparm command and its uses


hdparm

sdparm

tune2fs

sysctl

/dev/hd* & /dev/sd*

204.3 Logical Volume Manager

Weight 3

DescriptioCandidates should be able to create and remove logical volumes, volume groups, and physical

n volumes. This objective includes snapshots and resizing logical volumes.

Key Knowledge Areas

Tools in the LVM suite

Resizing, renaming, creating, and removing logical volumes, volume groups, and physical volumes

Creating and maintaining snapshots

Activating volume groups


/sbin/pv*

/sbin/lv*

/sbin/vg*

mount

/dev/mapper/

Topic 205: Networking Configuration 205.1 Basic networking configuration

Weight 3

Description

Candidates should be able to configure a network device to be able to connect to a local, wired or wireless, and a wide-area network. This objective includes being able to communicate

between various subnets within a single network.

Key Knowledge Areas

Utilities to configure and manipulate ethernet network interfaces

Configuring wireless networks


/sbin/route

/sbin/ifconfig

/sbin/ip

/usr/sbin/arp

/sbin/iwconfig

/sbin/iwlist

205.2 Advanced Network Configuration and Troubleshooting

Weight 4

DescriptioCandidates should be able to configure a network device to implement various network

authentication schemes. This objective includes configuring a multi-homed network device,

n configuring a VPN client and resolving communication problems.

Key Knowledge Areas

Utilities to manipulate routing tables


Utilities to analyse the status of the network devices

Utilities to monitor and analyse the TCP/IP traffic

OpenVPN


/sbin/route

/sbin/ifconfig

/bin/netstat

/bin/ping

/usr/sbin/arp

/usr/sbin/tcpdump

/usr/sbin/lsof

/usr/bin/nc

/sbin/ip

/etc/openvpn/*

openvpn

nmap

wireshark

205.3 Troubleshooting network issues

Weight 5

Description

Candidates should be able to identify and correct common network setup issues, to include knowledge of locations for basic configuration files and commands.

Key Knowledge Areas

Location and content of access restriction files


Utilities to manage routing tables

Utilities to list network states.

Utilities to gain information about the network configuration

Methods of information about the recognised and used hardware devices

System initialisation files and their contents (SysV init process)


/sbin/ifconfig

/sbin/route

/bin/netstat

/etc/network || /etc/sysconfig/network-scripts/

System log files such as /var/log/syslog & /var/log/messages

/bin/ping

/etc/resolv.conf

/etc/hosts

/etc/hosts.allow & /etc/hosts.deny

/etc/hostname | /etc/HOSTNAME

/bin/hostname

/usr/sbin/traceroute

/usr/bin/dig

/bin/dmesg

/usr/bin/host

205.4 Notify users on system-related issues

Weight 1

| Description | Candidates should be able to notify the users about current issues related to the system.

Key Knowledge Areas

Automate communication with users through logon messages.

Inform active users of system maintenance


/etc/issue

/etc/issue.net

/etc/motd

wall

/sbin/shutdown

Topic 206:System Maintenance 206.1 Make and install programs from source

Weight 4

Description

Candidates should be able to build and install an executable program from source. This objective includes being able to unpack a file of sources.

Key Knowledge Areas

Unpack source code using common compression and archive utilities.

Understand basics of invoking make to compile programs.

Apply parameters to a configure script.

Know where sources are stored by default.


/usr/src/

gunzip

gzip

bzip2

tar

configure

make

uname

install

206.2 Backup operations

Weight 3

Description Candidates should be able to use system tools to back up important system data.

Key Knowledge Areas

Knowledge about directories that have to be include in backups

Awareness of network backup solutions such as Amanda, Bacula and BackupPC

Knowledge of the benefits and drawbacks of tapes, CDR, disk or other backup media

Perform partial and manual backups.

Verify the integrity of backup files.

Partially or fully restore backups.


/bin/sh

cpio

dd

tar

https://group.lpi.org/publicwiki/bin/view/Examdev/BackupPC

/dev/st* and /dev/nst*

mt

rsync

Topic 207: Domain Name Server 207.1 Basic DNS server configuration

Weight 2

Description

Candidates should be able to configure BIND to function as a caching-only DNS server. This objective includes the ability to convert older BIND configuration files to newer format, managing

a running server and configuring logging.

Key Knowledge Areas

BIND 9.x configuration files, terms and utilities

Defining the location of the BIND zone files in BIND configuration files

Reloading modified configuration and zone files


/etc/named.conf

/var/named/*

/usr/sbin/rndc

kill

207.2 Create and maintain DNS zones

Weight 2

Description

Candidates should be able to create a zone file for a forward or reverse zone or root level server. This objective includes setting appropriate values for records, adding hosts in zones and

adding zones to the DNS. A candidate should also be able to delegate zones to another DNS server.

Key Knowledge Areas

BIND 9 configuration files, terms and utilities

Utilities to request information from the DNS server

Layout, content and file location of the BIND zone files

Various methods to add a new host in the zone files, including reverse zones


/var/named/*

zone file syntax

resource record formats

dig

nslookup

host

207.3 Securing a DNS server

Weight 2

Description

Candidates should be able to configure a DNS server to run as a non-root user and run in a chroot jail. This objective includes secure exchange of data between DNS servers.

Key Knowledge Areas

BIND 9 configuration files

Configuring BIND to run in a chroot jail

Split configuration of BIND using the forwarders statement


/etc/named.conf

/etc/passwd

DNSSEC

dnssec-keygen

Exam 202: Detailed ObjectivesThis is a required exam for LPI certification Level 2. It covers advanced skills for the Linux professional that are common across all distributions of Linux.



Objectives: Exam 202 Topic 208 Web Services 208.1 Implementing a web server

Weight 3

Description

Candidates should be able to install and configure a web server. This objective includes monitoring the server's load and performance, restricting client user access, configuring support

for scripting languages as modules and setting up client user authentication. Also included is configuring server options to restrict usage of resources.

Key Knowledge Areas

Apache 2.x configuration files, terms and utilities

Apache log files configuration and content

Access restriction methods and files

mod_perl and PHP configuration

Client user authentication files and utilities

Configuration of maximum requests, minimum and maximim servers and clients


access logs and error logs

.htaccess

httpd.conf

mod_auth

htpasswd

htgroup

apache2ctl

httpd

208.2 Maintaining a web server

Weight 2

Description

Candidates should be able to configure a web server to use virtual hosts, Secure Sockets Layer (SSL) and customise file access.

Key Knowledge Areas

SSL configuration files, tools and utilities

SSL certificate handling

Apache 2.x virtual host implementation (with and without dedicated IP addresses)

Using redirect statements in Apache's configuration files to customise file access


Apache2 configuration files

/etc/ssl/*

openssl

208.3 Implementing a proxy server

Weight 1

Description

Candidates should be able to install and configure a proxy server, including access policies, authentication and resource usage.

Key Knowledge Areas

Squid 2.x configuration files, terms and utilities

Access restriction methods

Client user authentication methods

Layout and content of ACL in the Squid configuration files


squid.conf

acl

http_access

Topic 209: File Sharing 209.1 SAMBA Server Configuration

Weight 4

| Description | Candidates should be able to set up a SAMBA server for various clients. This objective includes setting up Samba for login clients and setting up the workgroup in which a server participates and defining shared directories and printers. Also covered is a configuring a Linux client to use a Samba server. Troubleshooting installations is also tested.

Key Knowledge Areas

Samba 3 documentation

Samba configuration files

Samba tools and utilities

Mounting Samba shares on Linux

Samba daemons

Mapping Windows usernames to Linux usernames

User-Level and Share-Level security


smbd, nmbd

smbstatus, testparm, smbpasswd, nmblookup

smbclient

net

/etc/smb/*

/var/log/samba/

209.2 NFS Server Configuration

Weight 4

Description

Candidates should be able to export filesystems using NFS. This objective includes access restrictions, mounting an NFS filesystem on a client and securing NFS.

Key Knowledge Areas

NFS configuration files

NFS tools and utilities

Access restrictions to certain hosts and/or subnets

Mount options on server and client

tcpwrappers


/etc/exports

exportfs

showmount

nfsstat

/proc/mounts

/etc/fstab

rpcinfo

mountd

portmapper

Topic 210 Network Client Management 210.1 DHCP configuration

Weight 2

Description

Candidates should be able to configure a DHCP server. This objective includes setting default and per client options, adding static hosts and BOOTP hosts. Also included is configuring a

DHCP relay agent and maintaining the DHCP server.

Key Knowledge Areas

DHCP configuration files, terms and utilities

Subnet and dynamically-allocated range setup


dhcpd.conf

dhcpd.leases

/var/log/daemon.log and /var/log/messages

arp

dhcpd

210.2 PAM authentication

Weight 3

Description

The candidate should be able to configure PAM to support authentication using various available methods.

Key Knowledge Areas

PAM configuration files, terms and utilities

passwd and shadow passwords


/etc/pam.d

pam.conf

nsswitch.conf

pam_unix, pam_cracklib, pam_limits, pam_listfile

210.3 LDAP client usage

Weight 2

Description

Candidates should be able to perform queries and updates to an LDAP server. Also included is importing and adding items, as well as adding and managing users.

Key Knowledge Areas

LDAP utilities for data management and queries

Change user passwords

Querying the LDAP directory


ldapsearch

ldappasswd

ldapadd

ldapdelete

Topic 211: E-Mail Services 211.1 Using e-mail servers

Weight 3

Description

Candidates should be able to manage an e-mail server, including the configuration of e-mail aliases, e-mail quotas and virtual e-mail domains. This objective includes configuring internal e-

mail relays and monitoring e-mail servers.

Key Knowledge Areas

Configuration files for postfix

Basic knowledge of the SMTP protocol, sendmail, and exim


Configuration files and commands for postfix

Basic configuration of sendmail

/etc/aliases

/etc/mail/*

/etc/postfix/*

sendmail emulation layer commands

/var/spool/mail

mail-related logs in /var/log/

211.2 Managing Local E-Mail Delivery

Weight 2

Description

Candidates should be able to implement client e-mail management software to filter, sort and monitor incoming user e-mail.

Key Knowledge Areas

procmail configuration files, tools and utilities

Usage of procmail on both server and client side


~/.procmail

/etc/procmailrc

procmail

mbox and Maildir formats

211.3 Managing Remote E-Mail Delivery

Weight 2

Description Candidates should be able to install and configure POP and IMAP daemons.

Key Knowledge Areas

Courier IMAP and Courier POP configuration

Dovecot configuration


/etc/courier/*

dovecot.conf

Topic 212: System Security 212.1 Configuring a router

Weight 3

Description

Candidates should be able to configure a system to perform network address translation (NAT, IP masquerading) and state its significance in protecting a network. This objective includes

configuring port redirection, managing filter rules and averting attacks.

Key Knowledge Areas

iptables configuration files, tools and utilities

Tools, commands and utilities to manage routing tables.

Private address ranges

Port redirection and IP forwarding

List and write filtering and rules that accept or block datagrams based on source or destination protocol, port and address

Save and reload filtering configurations


/proc/sys/net/ipv4

/etc/services

iptables

routed

212.2 Securing FTP servers

Weight 2

Description

Candidates should be able to configure an FTP server for anonymous downloads and uploads. This objective includes precautions to be taken if anonymous uploads are permitted and

configuring user access.

Key Knowledge Areas

Configuration files, tools and utilities for Pure-FTPd and vsftpd

Awareness of ProFTPd

Understanding of passive vs. active FTP connections

https://group.lpi.org/publicwiki/bin/view/Examdev/ProFTPd


vsftpd.conf

important Pure-FTPd command line options

212.3 Secure shell (SSH)

Weight 4

Description

Candidates should be able to configure and secure an SSH daemon. This objective includes managing keys and configuring SSH for users. Candidates should also be able to forward an

application protocol over SSH and manage the SSH login.

Key Knowledge Areas

OpenSSH configuration files, tools and utilities

Login restrictions for the superuser and the normal users

Managing and using server and client keys to login with and without password

Usage of XWindow and other application protocols through SSH tunnels

Configuration of ssh-agent

Usage of multiple connections from multiple hosts to guard against loss of connection to remote host following configuration changes


ssh

sshd

/etc/ssh/sshd_config

Private and public key files

~/.ssh/authorized_keys

PermitRootLogin?, PubKeyAuthentication?, AllowUsers?, PasswordAuthentication?, Protocol

212.4 TCP Wrapper

Weight 1

Description

Candidates should be able to configure TCP Wrapper to allow connections to specified servers only from certain hosts or subnets.

Key Knowledge Areas

TCP Wrapper configuration files, tools and utilities

inetd configuration files, tools and utilities


/etc/inetd.conf

https://group.lpi.org/publicwiki/bin/edit/Examdev/PasswordAuthentication?topicparent=Examdev.LPIC-20x

https://group.lpi.org/publicwiki/bin/edit/Examdev/AllowUsers?topicparent=Examdev.LPIC-20x

https://group.lpi.org/publicwiki/bin/edit/Examdev/PubKeyAuthentication?topicparent=Examdev.LPIC-20x

https://group.lpi.org/publicwiki/bin/edit/Examdev/PermitRootLogin?topicparent=Examdev.LPIC-20x

/etc/hosts.allow

/etc/hosts.deny

libwrap

tcpd

212.5 Security tasks

Weight 3

Description

Candidates should be able to receive security alerts from various sources, install, configure and run intrusion detection systems and apply security patches and bugfixes.

Key Knowledge Areas

Tools and utilities to scan and test ports on a server

Locations and organisations that report security alerts as Bugtraq, CERT, CIAC or other sources

Tools and utilities to implement an intrusion detection system (IDS)

Awareness of OpenVAS?


telnet

nmap

snort

fail2ban

nc

iptables

Topic 213: Troubleshooting 213.1 Identifying boot stages and troubleshooting bootloaders

Weight 4

Description

Candidates should be able to determine the cause of errors in loading and usage of bootloaders. GRUB and LILO are the bootloaders of interest.

Key Knowledge Areas

boot loader start and hand off to kernel

kernel loading

hardware initialisation and setup

daemon/service initialisation and setup

Know the different bootloader install locations on a hard disk or removable device

https://group.lpi.org/publicwiki/bin/edit/Examdev/OpenVAS?topicparent=Examdev.LPIC-20x

Overwriting standard bootloader options and using bootloader shells


The contents of /boot/ and /boot/grub/

GRUB

grub-install

initrd, initramfs

Master boot record

/etc/init.d

lilo

/etc/lilo.conf

213.2 General troubleshooting

Weight 5

Description Candidates should be able to identify and correct common boot and run time issues.

Key Knowledge Areas

/proc filesystem

Various system and daemon log files

Content of /, /boot , and /lib/modules

Screen output during bootup

Kernel syslog entries in system logs (if entry is able to be gained)

Tools and utilities to analyse information about the used hardware

Tools and utilities to trace software and their system and library calls


dmesg

/sbin/lspci

/usr/bin/lsdev

/sbin/lsmod

/sbin/modprobe

/sbin/insmod

/bin/uname

strace

strings

ltrace

lsof

lsusb

213.3 Troubleshooting system resources

Weight 5

Description

Candidates should be able to identify, diagnose and repair local system issues when using software from the command line.

Key Knowledge Areas

Core system variables

The contents of:

o /etc/profile && /etc/profile.d/

o /etc/init.d/

o /etc/rc.*

o /etc/sysctl.conf

o /etc/bashrc

o /etc/ld.so.conf

o or other appropriate global shell configuration files

Any standard editor

Standard tools, utilites and commands to manipulate the above files and variables


/bin/ln

/bin/rm

/sbin/ldconfig

/sbin/sysctl

213.4 Troubleshooting environment configurations

Weight 5

Description

Candidates should be able to identify common local system and user environment configuration issues and common repair techniques.

Key Knowledge Areas

Core system variables

init configuration files

init start process

cron configuration files

Login process

User-password storage files

Determine user group associations

SHELL configuration files of bash

Analysing which processes or daemons are running


/etc/inittab

/etc/rc.local

/etc/rc.boot

/var/spool/cron/crontabs/

The default shell configuration file(s) in /etc/

/etc/login.defs

/etc/syslog.conf

/etc/passwd

/etc/shadow

/etc/group

/sbin/init

/usr/sbin/cron

/usr/bin/crontab

Documents

Lpi Certificaciones Linux