How to Easily Pass the RedHat RH302 Exam: Expert Advice

To automatically mount at boot time we use the /etc/fstab file. Because /etc/rc.d/rc.sysinit file reads and mount all file system specified in /etc/fstab. To mount Network Sharing Files also use the /etc/fstab but filesystem is nfs.

vi /etc/fstab

192.168.0.254:/data/commonnfsdefaults0 0

reboot the system.

At exam time read the Lab Scenario carefully. Actually there are two different networks one is 192.168.0.0/24 where your system resides know as example.com domain and another is 192.168.1.0/24 know as cracker.org domain.

One server named sever1.example.com having 192.168.0.254 and 192.168.1.254 is running in your exam. If you make a gateway to that server, you will can ping because IP forwarding is enabled on that server.

1.vi /etc/sysconfing/network

NETWORKING=yes

HOSTNAME=station?.example.com

GATEWAY=192.168.0.254

2.service network restart

Or

1.vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

ONBOOT=yes

BOOTPROTO=static

IPADDR=X.X.X.X

NETMASK=X.X.X.X

GATEWAY=192.168.0.254

2.ifdown eth0

3.ifup eth0

Note: If gateway is specified in both file, default gateway takes from interface specific file.

While you load the X Window System, you will get the problem. Problem may caused by different error.

1.Check the /tmp is full ?

2.Check your quota, hard limit is already crossed ?

3.Check xfs service is running ?

4.Configure the Video card, Resolution, monitor type using: system-config-display (Most Probably in Redhat exam)

5.Edit the /etc/inittab to set default runlevel 5.

id:5:initdefault:

When root unable to login into the system think:

Is password correct?

Is account expired?

Is terminal Blocked?

Do these Steps:

Boot the System on Single user mode.

Change the password

Check the account expire date by using chage –l root command.

If account is expired, set net expire date: chage –E “NEVER” root

Check the file /etc/securettyWhich file blocked to root login from certain terminal.

If terminal is deleted or commented write new or uncomment.

Reboot the system and login as a root.

Do the following steps as:

1.iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -p tcp -j SNAT –to-source 202.2.2.2.

POSTROUTINGThis filter point handles packets immediately prior leaving the system.

When Packets leave the system all’s source address change to 202.2.2.2 and can access the internet.

iptables is the build-in firewall tools, used to filter the packets and for nat. By identifying Source Address, Destination Address, type of protocol, source and destination port we can filter the packets.

-sSource Address

-dDestination Address

-pLayer 3 Protocol

-dDestination Address

--sportSource Prot

--dportDestination Port

-iIncoming Interface

-oOutgoing Interface

-tTable either filter or nat or mangle

-AChain can be either INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTING.

Do the following steps as:

ftpftp.server1.example.com

Download thewww.html

Check the SELinux context of index page , should like this:

-rw-r--r-- root root system_u:object_r:httpd_sys_content_t /var/www/html/index.html

If SELinux Context is mismatched, use the restorecon –R /var command

move the downloaded file into /var/www/html

Rename the file into index.html

Check using linkshttp://stationx.example.com

/var/www/html is the default directory for httpd service. Index.html is the default directory index. To set the default page without configuring virtualhost copy the file as a index.html in /var/www/html.

Do the following steps as:

1.vi /etc/exports

/data*.example.com(rw,sync)

Check the SELinux Context, should be like this:

-rw-r--r-- root root system_u:object_r:exports_t /etc/exports

Use the restorecon –R /etc command to restore the selinux context of the file.

2.service nfs start | restart

3.service portmap start | restart

4.chkconfig nfs on

5.chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so portmapper service should restart after starting the nfs service.

Do the following steps as:

1.vi /etc/hosts.deny

vsftpd:ALL EXCEPT .example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/hosts.deny

in.telnetd:ALL EXCEPT 192.168.0.

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address. Here in.telnetd is the telnet server program name.

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user15|user16;Sa0000-2400

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.