1

LPI202 EXAM PREPARATION LPIC-2 (LINUX PROFESSIONAL INSTITUTE)

COURSE DESCRIPTION:

This course prepares students to take the LPI 202 exam of the LPIC-2 certification. The Linux Professional Institute (LPI) is the go-to certification body for vendor independent Linux certifications. This course covers more advanced Linux skills such as system management and networking. Students will feel confident taking the LPI LPIC-2 202 exam with in classroom assessments and practice exams.

REQUIREMENTS:

LPIC-1 certification or LPI101 "LPIC-1 Exam Prep (Course 1)"and LPI102 "LPIC-1 Exam Prep (Course 2)" or at least 2 year experience as a Linux System Administrator.

Type: Linux

Duration: 5 days

Audience: Linux specialists wants to became familiar with Linux System Administration. Participants passed LPI 201. IT or network professionals who use Linux as part of their daily process. Professionals wishing to obtain LPI international Linux certification..

2

CONTENT

IMPLEMENTING A WEB SERVER

LPI Objectives Covered Apache History and Status Apache Architecture Default Configuration Installing PHP Apache Configuration Files httpd.conf - Server Settings httpd.conf - Main Configuration httpd.conf - VirtualHost Configuration Apache Logging Log Analysis Delegating Administration Directory Protection Directory Protection with AllowOverride Common Uses for .htaccess Apache Troubleshooting

Lab Tasks

Configure Apache Apache Content Using .htaccess Files

MAINTAINING A WEB SERVER

LPI Objectives Covered HTTP Virtual Servers DNS Implications Security Implications IP-based Virtual Host Name-based Virtual Host Symmetric Encryption Algorithms Asymmetric Encryption Algorithms Digital Certificates SSL/HTTPS and Apache SSL Using mod_ssl.so

Lab Tasks

Configuring Virtual Hosts Using SSL Certificates with Apache

3

IMPLEMENTING A PROXY SERVER AND DHCP CONFIGURATION

LPI Objectives Covered Squid Overview Squid File Layout Squid Access Control Lists Applying Squid ACLs Monitoring Squid DHCP Protocol Operation Configuring a DHCP server

Lab Tasks

Installing and Configuring Squid Squid Cache Manager CGI

SAMBA SERVER CONFIGURATION

LPI Objectives Covered Introducing Samba Samba Daemons Accessing Windows/Samba Shares from Linux Samba Utilities Samba Configuration Files The smb.conf File Share Authentication Share-Level Access User-Level Access Mapping Users SMB and Passwords The smbpasswd Database User Share Restrictions

Lab Tasks

Samba Share-Level Access Samba User-Level Access Samba Group Shares

NFS SERVER CONFIGURATION AND SECURING FTP SERVERS

LPI Objectives Covered File Sharing via NFS NFSv4 NFS Clients NFS Server Configuration The FTP Protocol FTP Operation

4

Active Mode FTP Passive Mode FTP vsftpd Configuring vsftpd Anonymous FTP with vsftpd Pure-FTPd Pure-FTPd Tools ProFTPD

Lab Tasks

NFS Server Configuration Configuring vsftpd

PAM AUTHENTICATION AND LDAP CLIENT USAGE

LPI Objectives Covered PAM Overview PAM Module Types PAM Order of Processing PAM Control Statements PAM Modules pam_unix.so pam_unix2.so pam_limits.so pam_cracklib.so pam_listfile.so LDAP What LDAP Provides LDAP Concepts LDAP Organization Entry Referencing Online LDAP Data Manipulation Querying LDAP Databases

Lab Tasks

Setting Limits with the pam_limits Modules Using pam_limits to Restrict Simultaneous Logins Querying an Existing LDAP Directory

USING E-MAIL SERVERS

LPI Objectives Covered SMTP SMTP Terminology SMTP Architecture SMTP Commands

5

SMTP Session Sendmail Architecture Sendmail Components Sendmail Configuration Databases Sendmail Remote Configuration Controlling Access Exim Postfix Features Postfix Architecture Postfix Components Postfix Configuration master.cf main.cf Virtual Domains Configuration Commands Postfix Logging

Lab Tasks

Configuring Postfix Postfix Network Configuration Postfix Virtual Host Configuration Configuring Sendmail Sendmail Network Configuration Sendmail Virtual Host Configuration Sendmail SMTP AUTH Configuration Sendmail STARTTLS Configuration SUSE Sendmail Configuration Cleanup

MANAGING LOCAL AND REMOTE E-MAIL DELIVERY

LPI Objectives Covered Filtering Email Procmail SpamAssassin Accessing Email The IMAP4 Protocol Courier IMAP Dovecot POP3/IMAP Server Fetchmail

Lab Tasks

Configuring Procmail and SpamAssassin Dovecot Setup

6

CONFIGURING A ROUTER AND SECURE SHELL (SSH)

LPI Objectives Covered Linux as a Router Configuring Routing Tables Using the iptables Command Netfilter Rule Syntax Netfilter Concepts Targets Common match_specs Netfilter: Stateful Packet Filter Firewall Connection Tracking Address Translation Configuring NAT and PAT Secure Shell ssh and sshd Configuration Accessing Remote Shells SSH Port Forwarding Transferring Files SSH Key Management ssh-agent

Lab Tasks

Securing Services with SuSEfirewall2 Securing Services with Netfilter Introduction to ssh and scp SSH Key-based User Authentication Using ssh-agent

SECURITY TASKS AND TCP WRAPPER

LPI Objectives Covered Security Advisories Discovering Hosts Netcat Nessus Insecurity Scanner Configuring OpenVAS Intrusion Detection Systems Snort Rules Writing Snort Rules TCP Wrappers The /etc/hosts.allow and /etc/hosts.deny Files /etc/hosts.{allow,deny} Shortcuts Advanced TCP Wrappers Xinetd Configuration and Access Control

7

Xinetd Connection Limiting Xinetd: Resource limits, redirection, logging

Lab Tasks

NMAP OpenVAS

IDENTIFYING BOOT STAGES AND TROUBLESHOOTING BOOTLOADERS

LPI Objectives Covered Partition Considerations Booting Linux on PCs LILO Options LILO Configuration GRUB Configuration /etc/inittab Typical SysV Init Script System Configuration Files Controlling Service Startup Managing Daemons Inability to Boot Troubleshooting With GRUB

GENERAL TROUBLESHOOTING

LPI Objectives Covered Important Log Files Hardware Discovery Tools Configuring New Hardware with Kudzu Configuring New Hardware with hwinfo USB Devices Kernel Modules Handling Module Dependencies Displaying Binary Files lsof and fuser Kernel Modules Troubleshooting strace and ltrace

TROUBLESHOOTING SYSTEM RESOURCES

LPI Objectives Covered Key Environment Variables Locales sh: Configuration Files Kernel Tuning Kernel Tuning via /proc/sys/

8

Default User Files Manually Installed Shared Libraries

TROUBLESHOOTING ENVIRONMENT CONFIGURATIONS

LPI Objectives Covered Logging In User Administration Group Administration User and Group Concepts Password Aging Gathering Login Session Info cron The crontab Command crontab Format /etc/cron.*/ Directories System Logging /etc/syslog.conf