07 - Network Administration2

Cont..
Network Administration
Samantha Indika
Configuring Printer Server CUPS Service (Common Unix Printing System) Check the RPMs #rpm -q cups system-config-printer #service cups start #ntsysv [*]cups Installing a local printer for sharing System > Administration > Printing Printer Name : Printer2 Location : srvX
Prepared by : Samantha Indika | MCT, ACS, CEH, CCNA, BCS (Certificate), MCS (SL), MCITP, MCTS, MCSE + Security + Messaging, MCSA + Security + Messaging, MCP 1
Cont.. Network Administration

Connection Types
Local Serial LPT USB
Network
To access already shared printer AppSocket/HP Jet Direct (Physical Printer Server) (HP Printer Server) IPP (WAN/Internet Printing) Eg : Google Cloud Printing LPD/LPR host or printer (Line Printer Daemon) (Line Printer Remote Protocol) Eg : Unix Printer Server Windows Printer via SAMBA Eg : Windows Printer Server
Samantha Indika

Samantha Indika
Since we want to share printer for our machines we have to select one of the locally connected method Select Connection LPT #1 Select the printer manufacture to install the device driver if the driver was provided by manufacture you can select Provide PPD file and browse and give the drive HP Select the printer model and the driver will be auto selected 2000C /dev/lp0 Printer will be listed under local printers. If you wish to edit the properties of the printer select the printers name
Sharing the printer on the network Select the Printers Name :Printer2 Be sure the shared is enabled The shared printers will be visible under Remote Printers automatically on the clients

Samantha Indika
Sharing resources between Windows and Linux (Files/Folders/Printers) SAMBA Service Opening windows to wider world What is Samba? "Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients." Samba is freely available, unlike other SMB/CIFS implementations, and allows for interoperability between Linux/Unix servers and Windows-based clients.

Samantha Indika
Steps 1. Check RPMs 2. Start Windows Server 2003 Use VMWare Player or user separate PC Accessing a Ms Windows PC from Linux Check the RPMs #rpm -q samba-client Configure Ms Windows PC Workgroup Computer Name User Name Password
: : : :
xxxxxx.local win2 Administrator 123456

Accessing Linux PC from Ms Windows PC Check the RPMs #rpm -q samba Set the SAMBA workgroup name according to Ms Windows workgroup name #nano /etc/samba/smb.conf Workgroup = xxxxxx.local Start the SAMBA service and add to the startup
#service smb start

#ntsysv [*]smb
Samantha Indika

Now you will be able to see the SAMBA server through My Network Places in Windows PC. But we wont be able to access the SAMBA server unless we add our Linux user accounts to SAMBA Database. Add Linux users to SAMBA database #smbpasswd a linux username New SMB password Retype password Verify #pdbedit L
Password Database List
: 123 : 123
Samantha Indika

Remove Linux users from SAMBA database #smbpasswd x linux username
Remove
Verify #pdbedit L
Now you will be able to access the SAMBA server from the new user accounts from Windows. By defaults the users home folders will be automatically shared through SAMBA and the user will be able to access it from Windows from full privileges. Additionally if there were any shared Linux printers that also will be automatically shared through SAMBA Sharing additional folders through SAMBA Create a folder for sharing #mkdir /data #ls /
Samantha Indika

Share the folder #nano /etc/samba/smb.conf Go to end of file [my data path = public writable share] /data = yes = yes - Share name - Folder to share - All SAMBA users can access the folder - All SAMBA users can write into the folder
#service smb reload
By default normal SAMBA users wont be able to write into the SAMBA share unless we change the ext3 permissions.
#ls -ld /data
Samantha Indika

By default normal SAMBA users wont be able to write into the SAMBA share unless we change the ext3 permissions.
d
Directory
r w x
Owner (root user)
r - x
Group (roots group)
r - x
Others (Normal Linux User)
Quick Fix #chmod 757 /data #ls -ld /data
Samantha Indika
#ls -ld /data

Accessing a shared printer on Linux from Windows through SAMBA. The printers will be automatically shared with Windows when you start the SAMBA service. The only thing you have to do is to properly install it Windows. Login as Administrator to the Windows PC.
Go through My Network Places and access the SAMBA Server where the printer is share.
Double-click on the Printer that you wish to configure.
Samantha Indika

Internet Sharing & Controlling on the network
Samantha Indika
Squid Web Proxy Service Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator. It runs on most available operating systems, including Windows and is licensed under the GNU GPL.

Samantha Indika
Check the RPMs #rpm -q squid Before we can share the internet connection the Proxy Server must have direct connection to Internet

Samantha Indika
#system-config-network-tui Default Gateway : 192.168.1.1 Primary DNS : 8.8.8.8
#service network restart

Sharing the Internet Connection through Proxy #nano /etc/squid/squid.conf
Access Control List
ACL Name
ACL Tag
IP range of the clients
http_access allow our_networks

ACL Name
Start the Proxy Service and add it to the Startup #service squid start #ntsysv [*]squid
Samantha Indika
acl our_networks src 192.168.1.0/24

Configuring a Proxy Client A proxy client is the application that we use to browse internet through proxy server. Eg : Web Browser Each application that you use to access Internet must be separately configured to access the Proxy Server.
Under normal circumstance we do not have to set the Default Gateway or the DNS on the Proxy Client.
Samantha Indika

Configure Mozilla FireFox Edit > Preferences > Advanced > Network > Settings
Samantha Indika

Change Port # #nano /etc/squid/squid.conf
#service squid restart Generating Proxy report SARG (Squid Analysis Report Generator) #rpm -q sarg #service squid stop Change permission #ls ld /var/www/sarg #chmod 777 /var/www/sarg
Samantha Indika
Search (Ctrl + W) : http_port 3128 8080

To make the report #sarg
Access the report Computer > File System > var > www > sarg > index.html > R.C. & open with Web Browser (Mozilla FireFox)
Samantha Indika
#service squid start

Controlling Internet access through the Proxy #nano /etc/squid/squid.conf
Ex1 : Blocking web sites by domain name acl rule1 dstdomain .facebook.com .microsoft.com
Access Control List ACL Name (Any Name) ACL Tag Domain Names
# http_access deny rule1

ACL Name
#service squid reload
Samantha Indika
# http_access deny all

Deny sites to a file #nano /etc/squid/denyurls
# http_access deny all acl rule2 dstdomain /etc/squid/denyurls

Access Control List ACL Name (Any Name) ACL Tag Domain Names

ACL Name

Samantha Indika
.yahoo.com .hp.com

Ex2 : Blocking web access by key words acl rule3 url_regex i free download sex mp3

ACL Name
#service squid reload Ex3 : Blocking protocols acl rule4 proto FTP
Access Control List ACL Name (Any Name) ACL Tag Protocol

#service squid
ACL Name (Certificate), MCS (SL), MCITP, MCTS, MCSE + Security + reload
Messaging, MCSA + Security + Messaging, MCP Prepared by : Samantha Indika | MCT, ACS, CEH, CCNA, BCS 22
Samantha Indika
Access Control List
ACL Name (Any Name)
ACL Tag
Key words

Ex4 : Allow a web site blocked by a key word Allow rules must come on the top of the rule list acl rule4 url_regex i http://www.sussex.ac.uk
Access Control List ACL Name (Any Name) ACL Tag Full url
# http_access allow rule4

ACL Name
Samantha Indika

Samantha Indika
Configuring a DNS server for our Domain BIND Service (Berkeley Internet Naming Daemon) BIND is an implementation of the DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System, including: Domain Name System server Domain Name System resolver library Tools for managing and verifying the proper operation of the DNS server

Domain Name
Public Valid for LAN/WAN Eg : www.redhat.com
Private Valid only for LAN Eg : softwise.local
gTLDS
(generic Top-Level DomainS)
ccTLDS
(country code Top-Level DomainS)
gov com mil net org edu
uk lk au
Samantha Indika

Public Domain Names must be registered using a valid Domain Registrar Example ; LK www.nic.lk gTLDS ; www.godaddy.com
Samantha Indika

Samantha Indika

Configuring 2nd Level DNS Server for our Domain DNS
Primary DNS (Master DNS)
Secondary DNS (Slave DNS)
(1) Master(M) / Slave (S) #rpm -q bind system-config-bind cachingnameserver
(2) M/S Set the local loopback IP as the Primary DNS server IP to indicate the machine is the DNS server. Additionally set the Domain Name to use for the DNS service. #system-config-network-tui
Primary DNS Search
: 127.0.0.1 : xxxxxx.local by : Samantha Indika | MCT, ACS, CEH, CCNA, BCS Prepared
(Certificate), MCS (SL), MCITP, MCTS, MCSE + Security + Messaging, MCSA + Security + Messaging, MCP 28
Samantha Indika

#service network restart Verify #cat /etc/resolve.conf (3) M only Create a DNS zone file that contains all the information about your domain. Zone file name (any name) Example zone.xxxxxx.local
Zone File #cd #ls #nano
Location /var/named /var/named l zone.xxxxxx.local
Samantha Indika

REFER the given note for configuration
After doing the changes increment the serial by 1 . Eg; 01
In future also do the same.
Samantha Indika

M/S (4) Authorize the zone file for our domain M (4.1) Copy the authorization configuration file into /etc folder.
M - (4.2) Authorizing the zone file on the Master server. #nano /etc/named.conf
Go to end of file, but before the final line zone xxxxxx.local. IN { type master; file zone. xxxxxx.local; allow-transfer { 192.168.1.XXX; }; };
Slave IP
Save & Exit
Samantha Indika
#cd #ls #cp #ls
/usr/share/system-config-bind/profiles/default l named.conf /etc l /etc/named.conf

S Authorizing the zone file on the Slave DNS server #cd #ls #cp #ls /usr/share/system-config-bind/profiles/default l named.conf /etc l /etc/named.conf
#nano /etc/named.conf Go to end of file, but before the final line zone xxxxxx.local. IN { type slave; file slaves/zone.xxxxxx.local; masters { 192.168.1.XXX; }; };
Master IP
Save & Exit
Samantha Indika

M/S - Give the information about the root DNS servers so our DNS servers can access the root servers to resolve domain names
#cp named.root /var/named #cd /var/named #ls l #cat named.conf
Samantha Indika
#cd /usr/share/doc/bind-9.3.6/sample/var/named #ls l

M/S Set the default gateway to access the Internet so our DNS server can access the root DNS servers when necessary.
Default Gateway
: 192.168.1.XXX
Router LAN IP
#service network restart Verify #cat /etc/sysconfig/network-scripts/ifcfg-eth0 M/S Start the DNS service #service named start #ntsysv [*]named
Samantha Indika
#system-config-network-tui

S only Check weather the zone file was properly backup #cd /var/named/slaves #ls l #cat zone.xxxxxx.local M or S Checking DNS name resolution #nslookup srvX.xxxxxx.local
#nslookup www.google.com
Samantha Indika

Samantha Indika
Configuring DNS Client Ms Windows Go to TCP/IP Preferred DNS Alternate DNS : 192.168.1.XXX Master : 192.168.1.XXX Slave
CentOS #system-config-network-tui Preferred DNS : 192.168.1.XXX Master Alternate DNS : 192.168.1.XXX Slave

Configuring DNS Client Ms Windows Go to TCP/IP Preferred DNS : 192.168.1.XXX
Master IP
Alternate DNS
: 192.168.1.XXX
Slave IP CentOS #system-config-network-tui
Preferred DNS
: 192.168.1.XXX
Master IP
Alternate DNS
: 192.168.1.XXX
Slave IP
#cat /etc/resolv.conf
Samantha Indika

For any Linux system #nano /etc/resolv.conf
Master IP
nameserver 192.168.1.XXX
Slave IP
Samantha Indika
nameserver 192.168.1.XXX

Configuring DHCP Server Check the RPMs #rpm -q dhcp Create a DHCP scope file that contains all the IP related information to distribute to the client #nano /etc/dhcpd.conf Scope Name Scope location : dhcpd.conf : /etc
Start the DHCP Service and add it to the Startup #service dhcpd start #ntsysv [*]dhcpd
Samantha Indika

Configuring DHCP Client Ms Windows Go to TCP/IP Obtain IP address automatically
Obtain DNS Server address automatically CentOS #system-config-network-tui
[*] Use DHCP
Samantha Indika

If you are going to host multiple services on a single server rather than using the same IP better assign unique IPs to each and every service.
Eg : IF you are going to host multiple web sites on a single web server rather than using same IP better to use unique IPs to host each web site. Assign multiple IPs to a machine srv1 192.168.1.21 192.168.1.22 192.168.1.23 192.168.1.24
srv2 192.168.1.31 192.168.1.32 192.168.1.33 192.168.1.34
srv3 192.168.1.41 192.168.1.42 192.168.1.43 192.168.1.44
Samantha Indika
Configuring a web server Httpd Service (APACHE) Check the RPM #rpm -q httpd

Eg : For SRV! #system-config-network-tui New Devices > Ethernet > Add 1st Virtual NIC Name Device Static IP Netmask
: : : :
eth0:0 eth0:0 192.168.1.21 255.255.255.0
2nd Virtual NIC Name Device Static IP Netmask
: : : :
eth0:1 eth0:1 192.168.1.22 255.255.255.0
Samantha Indika

Samantha Indika
3rd Virtual NIC Name Device Static IP Netmask 4th Virtual NIC Name Device Static IP Netmask
: : : :
eth0:2 eth0:2 192.168.1.23 255.255.255.0
: : : :
eth0:3 eth0:3 192.168.1.24 255.255.255.0
#service network restart

#ifconfig

If you want to access your web site by name and to assign the new IPs to the web site we have to edit the DNS zone file on the Master DNS Server.
#nano /var/named/zone.xxxxxx.local At the end of file ;web server names and Ips abc def IN IN A A 192.168.1.21 192.168.1.22
Increment the zone serial by 1 Example : 01
Samantha Indika
On Master DNS www.xxxxxx.local abc.xxxxxx.local def.xxxxxx.local

On Master Server Restart DNS
#service named restart On Master/Slaver Server or Client To Check #nslookup abc.xxxxxx.local
Samantha Indika
#killall named

Samantha Indika
46
Preparing the web sites for publishing Develop the web sites and coy them into /var/www/html folder if you have multiple web sites you can keep them in sub folders under the above location. The web site home page must be named as index.html or index.php #cd /var/www/html #ls l #ls web1 #ls web2 Publishing the web sites #nano /etc/httpd/conf/httpd.conf Go to end of file
Prepared by : Samantha Indika | MCT, ACS, CEH, CCNA, BCS (Certificate), MCS (SL), MCITP, MCTS, MCSE + Security + Messaging, MCSA + Security + Messaging, MCP

Go to end of file <VirtualHost 192.168.1.XXX> ServerAdmin root@xxxxxx.local DocumentRoot /var/www/html/webX ServerName abc.xxxxxx.local </VirtualHost> Start the Web Service #service httpd start #ntsysv [*]httpd To check Go to web browser and abc.xxxxxx.local
Samantha Indika

07 - Network Administration2

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

07 - Network Administration2

Uploaded by

Copyright:

Available Formats

Cont..

Cont.. Network Administration

Local Serial LPT USB

Cont.. Network Administration

Cont.. Network Administration

Cont.. Network Administration

xxxxxx.local win2 Administrator 123456

Cont.. Network Administration

#service smb start

Cont.. Network Administration

Cont.. Network Administration

Cont.. Network Administration

#service smb reload

Cont.. Network Administration

Quick Fix #chmod 757 /data #ls -ld /data

#ls -ld /data

Cont.. Network Administration

Double-click on the Printer that you wish to configure.

Cont.. Network Administration

Cont.. Network Administration

Cont.. Network Administration

#system-config-network-tui Default Gateway : 192.168.1.1 Primary DNS : 8.8.8.8

#service network restart

Cont.. Network Administration

Access Control List

IP range of the clients

http_access allow our_networks

acl our_networks src 192.168.1.0/24

Cont.. Network Administration

Cont.. Network Administration

Cont.. Network Administration

Search (Ctrl + W) : http_port 3128 8080

Cont.. Network Administration

#service squid start

Cont.. Network Administration

# http_access deny rule1

#service squid reload

# http_access deny all

Cont.. Network Administration

# http_access deny all acl rule2 dstdomain /etc/squid/denyurls

# http_access deny rule2

#service squid reload

Cont.. Network Administration

# http_access deny rule3

# http_access deny rule4

Access Control List

ACL Name (Any Name)

Cont.. Network Administration

# http_access allow rule4

#service squid reload

Cont.. Network Administration

Cont.. Network Administration

Public Valid for LAN/WAN Eg : www.redhat.com

Private Valid only for LAN Eg : softwise.local

gov com mil net org edu

Cont.. Network Administration

Cont.. Network Administration

Cont.. Network Administration

Primary DNS (Master DNS)

Secondary DNS (Slave DNS)

(1) Master(M) / Slave (S) #rpm -q bind system-config-bind cachingnameserver

Primary DNS Search