Duration
5 Days
Audience:
Employees of federal, state and local governments; and businesses working with the government.
Upcoming Course Dates:
August 15 – 19, 2016
Course Description
This course is carefully designed to match the topics found in the Red Hat® RH299 exam prep course but also features the added benefit of an entire extra day of comprehensive lab exercises and detailed lecture material.
Students learn the Red Hat Enterprise Linux (RHEL) system administration skills needed to pass the Red Hat Certified Engineer (RHCE) exam. This is an accelerated course meant for those students capable of absorbing information at a rapid pace or those students who only need to fill in selected gaps of knowledge because of prior Linux sys-admin experience.
Current Version: A01
Red Hat® is a registered trademark of Red Hat, Inc. and its use by Guru Labs, L.C. does not imply association or sponsorship by Red Hat, Inc.
Prerequisites
Students should have already have the RHCSA or equivalent knowledge. Courses that teach the necessary skills are the GL199 “RHCSA Rapid Track Course” or the GL124 and GL134 training tracks.
Supported Distributions
Red Hat Enterprise Linux 7
Course Outline
- SOFTWARE MANAGEMENT
- RPM Features
- RPM Architecture
- RPM Package Files
- Working With RPMs
- Installing Source RPM Packages
- Managing Software Dependencies
- Using the YUM command
- YUM package groups
- Updating the Kernel RPM
- Configuring YUM
- Yum Plugins
- YUM Repositories
LAB TASKS
- Managing Software with RPM
- Using YUM
- Creating a Custom RPM Repository
- NETWORK MANAGEMENT
- IPv4 Fundamentals
- TCP/UDP Fundamentals
- Linux Network Interfaces
- Ethernet Hardware Tools
- Network Configuration with ip Command
- Configuring Routing Tables
- IP to MAC Address Mapping with ARP
- Starting and Stopping Interfaces
- NetworkManager
- DNS Clients
- DHCP Clients
- system-config-network-{tui,cmd}
- Network Diagnostics
- Multiple IP Addresses
- Interface Bonding
LAB TASKS
- Network Discovery
- Basic Client Networking
- Multiple IP Addresses Per Network Interface
- Introduction to Troubleshooting Labs
- Troubleshooting Practice: Networking
- STORAGE MANAGEMENT
- Partitioning Disks with fdisk
- Partitioning Disks with parted
- Filesystem Creation
- Mounting Filesystems
- Filesystem Maintenance
- Troubleshooting Incorrect File Permissions
- Resizing Filesystems
- Swap
- iSCSI Architecture
- Open-iSCSI Initiator Implementation
- iSCSI Initiator Discovery
- iSCSI Initiator Node Administration
- Mounting iSCSI Targets at Boot
- iSCSI Multipathing Considerations
- Linux Unified Key Setup (LUKS)
LAB TASKS
- Creating and Managing Filesystems
- Hot Adding Swap
- iSCSI Initiator Configuration
- LUKS-on-disk format Encrypted Filesystem
- LOGICAL VOLUME MANAGEMENT (LVM)
- Logical Volume Management
- Implementing LVM
- Creating Logical Volumes
- Manipulating VGs & LVs
- Advanced LVM Concepts
- system-config-lvm
LAB TASKS
- Creating and Managing LVM Volumes
- ACCOUNT MANAGEMENT
- User and Group Concepts
- User Administration
- Modifying Accounts
- Group Administration
- Password Aging
- SGID and Sticky Bit on Directories
- User Private Group Scheme
- File Access Control Lists
- Manipulating FACLs
- Viewing FACLs
- Backing Up FACLs
LAB TASKS
- File and Directory Ownership and Permissions
- User and Group Administration
- User Private Groups
- Using Filesystem ACLs
- AUTHENTICATION MANAGEMENT
- Manual DS Client Configuration
- system-config-authentication
- System Security Services Daemon (SSSD)
- AutoFS
- AutoFS Configuration
- Kerberos Components
- Kerberos Principals
- Authentication Process
- Install krb5.conf on Clients
- Client PAM Configuration
- Signing In to Kerberos
- Viewing Tickets
- Removing Tickets
- Passwords
- Changing Passwords
- sudo
- Giving Others Access
LAB TASKS
- Using LDAP for Centralized User Accounts
- Kerberos Client Setup
- OpenSSH with Kerberos
- INSTALLATION, KICKSTART, AND VIRTUALIZATION
- Anaconda: An Overview
- Anaconda: Booting the System
- Anaconda: Common Boot Options
- Anaconda: Loading Anaconda and Packages
- Anaconda: Storage Options
- Anaconda: Troubleshooting
- FirstBoot
- A Typical Install
- Kickstart
- Introducing libvirt
- libvirt: Basic Concepts
- virsh: Basics
- virsh: Common Tasks
- virt-install
LAB TASKS
- Automating Installation with Kickstart
- Linux Installation
- BOOT MANAGEMENT
- Booting Linux on PCs
- GRUB Configuration
- Boot Parameters
- Configuring the Kernel via /proc/
- Initial ramdisk
- /sbin/init
- /etc/inittab
- /etc/rc.d/rc.sysinit
- Runlevel Implementation
- System Configuration Files
- Typical SysV Init Script
- The /etc/rc.local File
- Shutdown and Reboot
LAB TASKS
- Boot Process
- Troubleshooting Practice: Boot Process
- MANAGING SELINUX
- SELinux Security Framework
- SELinux Modes
- SELinux Commands
- Choosing an SELinux Policy
- SELinux Booleans
- Permissive Domains
- SELinux Policy Tools
- SELinux Troubleshooting
- SELinux Troubleshooting Continued
LAB TASKS
- Exploring SELinux Modes
- SELinux File Contexts
- FIREWALL MANAGEMENT
- RHEL6 Firewall
- Netfilter Concepts
- Using the iptables Command
- Common match_specs
- Connection Tracking
LAB TASKS
- Securing Services with Netfilter
- NETWORK TIME PROTOCOL (NTP) SERVICE
- Managing Network-Wide Time
- Continual Time Sync with NTP
- Configuring NTP Clients
- Useful NTP Commands
LAB TASKS
- NTP Client Configuration
- SYSTEM MONITORING AND LOGS
- System Status – Memory
- System Status – I/O
- System Status – CPU
- Performance Trending with sar
- System Logging
- /etc/rsyslog.conf
LAB TASKS
- Remote Syslog Configuration
- System Activity Reporter
- WEB (HTTP/HTTPS) SERVICE
- Apache Architecture
- Adding Modules to Apache
- Apache Configuration Files
- httpd.conf – Server Settings
- httpd.conf – Main Configuration
- SSL Using mod_ssl.so
- Virtual Hosting DNS Implications
- httpd.conf – VirtualHost Configuration
- Name-based Virtual Host
- Apache Logging
- Delegating Administration
- Directory Protection
- Directory Protection with AllowOverride
- Common Uses for .htaccess
- Dynamic HTTP Content
- Configuring CGI
LAB TASKS
- Apache Architecture
- Apache Content
- Using SSL Certificates with Apache
- Configuring Virtual Hosts
- Using .htaccess Files
- CGI Scripts in Apache
- SMTP SERVICE
- Postfix Features
- Postfix Components
- Postfix Configuration
- master.cf
- main.cf
- Postfix Map Types
- Postfix Pattern Matching
- Virtual Domains
- Configuration Commands
- Management Commands
- Postfix, Relaying and SMTP AUTH
- SMTP AUTH Server and Relay Control
LAB TASKS
- Configuring Postfix
- Postfix Network Configuration
- Postfix Virtual Host Configuration
- CACHING-ONLY DNS SERVICE
- Naming Services
- The Domain Name Space
- Delegation and Zones
- Server Roles
- Resolving Names
- Resolving IP Addresses
- Restricting Queries
- Basic BIND Administration
- Configuring the Resolver
- Testing Resolution
- Creating a Site-Wide Cache
- SOA – Start of Authority
- A & PTR – Address & Pointer Records
- NS – Name Server
- CNAME & MX – Alias & Mail Host
LAB TASKS
- Caching-only DNS
- FILE SHARING WITH NFS
- File Sharing via NFS
- NFSv4
- NFS Clients
- NFS Server Configuration
- Implementing NFSv4
LAB TASKS
- NFS Server Configuration
- FILE SHARING WITH CIFS
- Samba Daemons
- Accessing Windows/Samba Shares from Linux
- Samba Utilities
- Samba Configuration Files
- The smb.conf File
- Mapping Users
- Share Authentication
- User-Level Access
- Samba Account Database
- User Share Restrictions
LAB TASKS
- Samba Share-Level Access
- Samba User-Level Access
- Samba Group Shares
- FILE TRANSFER PROTOCOL (FTP) SERVICE
- The FTP Protocol
- Active Mode FTP
- Passive Mode FTP
- vsftpd
- Anonymous FTP with vsftpd
LAB TASKS
- Configuring vsftpd
- SECURE SHELL (SSH) SERVICE
- Secure Shell
- ssh and sshd Configuration
- Accessing Remote Shells
- Transferring Files
- SSH Key Management
- ssh-agent
- OpenSSH and Kerberos
- X Access Control
- Remote X Access (historical/insecure)
- Remote X Access (modern/secure)
LAB TASKS
- Introduction to ssh and scp
- SSH Key-based User Authentication
- Using ssh-agent
- Kerberos Client Setup
- OpenSSH with Kerberos