Comprehensive Review For RHCE exam

Carefully perform the following steps in serverX virtual machine. Configure serverX so that it meets the
following requirements. For all services, allow connections from the local subnet 192.168.0.0/24 subnet,
but disallow connections from the 192.168.1.0/24 subnet. All the items will be checked after a reboot.
The letter X in serverX, desktopX, wwwX, and ldapuserX should be replaced by your workstation
number.

Compete the following tasks in 2 hours. Assume that you do not have root access to your desktopX
during the exam. Use your DNS server and default gateway as 192.168.0.254. Your package repository is
at http://instructor.example.com/pub/rhel6/dvd

1.

Configure serverX with a with a static ip address 192.168.0.X+100 where X is the number your
desktopX.example.com
2.

Configure SELinux to run in Enforcing mode.

3.

Allow SSH connections from the local subnet.

4.

Configure an SMTP server in serverX so that it allows connections from the local subnet. User jack
should not be able receive email where user sysadmin should be in administrator group and should be
able to receive all the mails that are destined to root user.
5.

Connect to the LDAP server, instructor.example.com, using the distinguished name (DN) of
dc=example,dc=com for account information. The LDAP server requires secure connections using the
certificate found at ftp://instructor.example.com/pub/EXAMPLE-CA-CERT. The LDAP server provides an
account named ldapuserX. Use Kerberos passwords with a realm EXAMPLE.COM for authentication. Set
the KDC and Admin servers to point to instructor.example.com. The kerberos accounts have a password
as kerberos
6.

Configure an auto mounted home directory for the ldapuserX account so that it is writable. The
home directory is shared via NFS from instructor.example.com.
7.

Connect to the iSCSI target rdisks.serverX provided by instructor.example.com.

8.

Remove all of the current partitions on the iSCSI disk. Configure a new 30 MB physical partition using
the iSCSI target with an ext3 filesystem and a label of test mounted on /test. The /test directory must be
owned by the user root and the group root, and have a permission of 770. It should also be mounted
persistently across reboots.
9.

Configure NFS to share the /test directory. Make it read-write to the local subnet. Allow root to have
root privileges when accessing the NFS share.
10.

Create a user account named matt using a password of matt.

11.

Create a user account named cindy using a password of cindy.

12.

Create a group named admins that includes matt and cindy.

13.

Configure Samba to share the /test directory using a share name of test. Make it readable for cindy
(use a Samba password as password) and writable for matt (use a Samba password as password). Make
sure the Linux permissions allow read/write as listed here, as well as meeting the user, group and
permission requirements listed above.
14.

Configure a secure web server using the certificate and key located at
http://instructor/pub/materials/tls/certs/serverX.crt and
http://instructor/pub/materials/tls/private/serverX.key. Make the web server use /myweb/index.html
as the default web page. Configure the index.html file such that accessing the secure web site will
present the following: Hello World!
15.

Allow cindy and matt to write the /myweb/index.html file.

16.

User cindy should not have permission to setup scheduled tasks.

17.

Find all the files that owned by cindy and copied them to the /root/cindy-backup folder
18.

The systems cracker.org domain should not able to ssh to your serverX machine Where cracker.org
domain network is 10.0.1.0/24
19.

Create a private directory /myweb/private that can only be accessed by desktopX.example.com via
HTTP. The index.html page should contain ServerX Private Data.
20.

Create a web site wwwX.example.com where the default web page display as Welcome to wwwX
21.

Setup a schedule job to print memory information to a file mem.info in home directory every day at
10:30 AM as matt
22.

Create a script in /usr/local/bin so that it will display EX200 when you pass the command line
argument rhcsa and EX300 when you pass the command line argument rhce