Qsn 1.

NFS-Server configure nfs on system1 as follows:

export the /public directory with read only access to the groupx.example.com domain only export
the /protected directory with read write access to the groupx.example.com access to /protected
should be secure by kerbros.

you can use keytab at http://host.groupx.example.com/materials/nfs_server.keytab the

/protected directory should contain a sub-directory name project that is owned by krishna
krishna should have read write access to /protected/project.

Qsn2. Mount an nfs share configure system2 to mount the following nfs share from
system1.groupx.example.com

/public should be mounted to /mnt/nfsmount

/protected should be mounted to /mnt/nfssecure using the keytab at

http://host.groupx.example.com/materials/nfs_client.keytab krishna should be able to create file

in /mnt/nfssecure/project the file system should automatically be mounted at boot

Qsn3. SAMBA configure sm b service on system1 as follows your smb server must be a
member of the STAFF workgroup the service must share the /common directory.

the share name must be common the common share must be available to
groupx.example.com domain client only

the common must be browseable the user floyd must have read access the
share,authenticating with the

password indionce if necessary.

Qsn4. MULTIuser SAMBA on system1 share the /devops directory via SMB as follows:
the share should be named devops

the devops share must only be available to clients in the groupx.example.com domain

the devops share must be browseable

kenji must have read access to share,authenticating with password indionce chihiro must have
read and write
access to the share, authenticating with the password indionce the smb share is permanently

mounted on system2 at /mnt/dev using the credentials of kenji. the share must allow anyone

who can authenticate as chihiro to temprary acquire write permission.

Qsn5. ISCSI configure system1 to provide an iscsi disk device name iqn.2016-
08 .com.example.groupx:system 1 the iscsi service uses port 3260 this target usasge 3G backing
logical volume name iscsi_store the target is only available to system2.groupx.example.com only

Qsn6. ISCSI INITIATOR configure system2 so that it connects to the iqn.2016-

08 .com.example.groupx:system1 as follows

The iscsi device should automaticaly be available on system boot the iscsi block device contains a

2100MB partition that is formated as ext4 the partition is mounted to /mnt/data and is

automatically mounted to this directory

Qsn7. MARIADB create a mariadb database name contacts on system1 such that following

condtions exist

the database should contain the content of the database dump from

http://server1.groupx.example.com/materials/users.mdb the database should be accessible from

localhost only other than the root user, the database only allow queries from the user raikon.

this user should have the password zaldebro the root user should have password zaldebro and

must not be allowed to log in without using a password

Qsn8. Query database use the d atabase contacts on system1 and the appropriate sql queries to

answer the following question what is the first name of person whose password is solicitous ?
Qsn9. IMplement dynamic web content configure your webserver on system1 to provide
dynamic web content as follows:

dynamic content is provided by a virtual host named

alt.groupx.example.com the virtual host listen on port 8909

download a copy of script at

http://server1.groupx.example.com/materials/webinfo.wsgi and place it in an appropriate

location for your virtual host so that it genrate dynamic web content. don not alter or change the

content of the file in any way clients connecting to http://alt.groupx.example.com:8909/ should

receive a dynamicaly genrated webpage the location http://alt.groupx.example.com:8909 must

be accessble to all system in the domain groupx.example.com

Qsn10. IMplement a web server implement a webserver on system1 for the site

http://system1.groupx.example.com and perform the following steps download

http://server1.groupx.example.com/materials/station.html rename the downloaded file to

index.html do not make modification to the content of this file copy this index.html to the

documentroot of your webserver

clients within groupx.example.com should be able to access the

webserver clients with in my133t.org should not have acces the

webserver

Qsn11. configure a virtual host extend your webserver on system1 to inculde a virtualhost for

the site http://www.groupx.example.com then perform the following step set the document root

for the virtual host to /var/www/virtual download

http://server1.groupx.example.com/materials/www.html rename the downloaded file index.html

do not make any modification to the content of this file place this file in the document root of the

virtual host the usr floyd must be able to create content in /var/www/virtual

NOTE- the original webstie http://system1.groupx.example.com must still be accessible. dns

resolution for the host name www.groupx.example.com is[kiosk@foundation0 Desktop]$ rht-

vmctl view all allready provided by the name server groupx.example.com.

Qsn12. Configure web content access on your webserver on system1 create directory name
private under the document root directory and configure as follows:

download a copy of the file

http://server1.groupx.example.com/materials/private.html into this

directory and rename it index.html do not make any modification to the
content of this file.

the contents of private should be visible to anyone browsing from system1

(including localhost) but should not be accessible from other location

Qsn13. link aggrigation configure a network name link between system1.groupx.example.com

and system2.groupx.example.com according to the following requirements the link uses the
interfaces eth1 and eth2

the link will continue to functions even if one of the underlying interfaces or network is down the

link interface on system1has the address 172.16.x.25/24 the link interface on system2 has the
address

172.16.x.25/24 the link is active after a system reboot.

Qsn14. MAIL service configure mail on both system1 and system2

the system donot accpet incoming email from external resources any mail send locally on
these system
is automatically routed to server1.groupx.example.com mail sent from these systems

show up as coming from groupx.example.com you may test your configuration by sending

eamil to the localuser arthur +. the system server1.groupx.example.com has been

configured drop email for this user into

http://server1.groupx.example.com/recieved_mail/11

Qsn15. configure ipv6 configure the eth0 on your exam system with the

following ipv6 addresses system1 should have the address

200a:ac18::a05/64 system2 should have the address 200a:ac18::a0a/64

Qsn16. Configure your system to use a default repository:-

A yum repository has been provided at

http://server1.net13.example.com//rhel

Qsn17. Script

create a script on system1 named /root/foo.sh that does the following

when run as /root/foo.sh redhat it produces the output fedora on stdout.

when run as /root/foo.sh fedora it produces the output redhat on stdout

when run without arguments or any other arguments other than redhat or fedora, it sends the
following output to stderr:

/root/foo.sh redhat|fedora
Qsn.18 user environment 17
create a custom command called qstat on both system1 and system2 that
runs the command: /bin/ps -Ao pid,tt,user,fname,rsz this command should
be available to all usres on the system.

Qsn.19 SSH Configure 17 configure SSH access as follows:

users have remote SSH access to your virtual systems from within
group10.example.com

client within my133t.org should not have access to ssh on your systems.

Qsn20. Port forwarding

configure port forwarding in your machine system1 such that forward all incoming
connection on port 5909/tcp on the firewall to port 80/tcp of the machine with the 172.26.1.0/24

Qsn21. Create a script name makeusers in /root directory when an argument file.txt pass in
front of this script then users listed in this file created with /bin/false sheel. When file name is
different then error shows file not found if file is not pass an argument then error shows please
write command again. Download this file from http://classroom.example.com/pub/file.txt