SUSE Linux Advanced System Administration

Who will the Course Benefit? Who will the Course Benefit?

The SUSE Linux Advanced System Administration training course is suitable for Linux System Administrators who need to acquire advanced administration knowledge of the key administrative, networking and security tasks required on Linux within the Enterprise.

An ideal course for delegates who will be working in an environment using several different Linux distributions and therefore knowledge of skills common to all the different Linux distributions is required. For the purpose of practical exercises, SUSE Linux will be used.

Delegates who wish to work towards achieving the Linux Engineer LPIC-2 certification will find this course a good basis for LPIC-2: 201-450 and 202-450 exams.

The appendixes also include other related topics that would be useful reading for delegates preparing for certification.

Note: Should the delegate only require knowledge of Red Hat Linux then they should instead consider attending our range of Red Hat Linux Administration courses.

On completion of this course the delegate will have in-depth technical knowledge of what is required to administer Linux within the Enterprise. They will have gained practical experience of configuring administrative,networking and security aspects of a Linux Enterprise system to an advanced level.

The delegate will possess the essential knowledge required to work towards achieving the Linux Engineer LPIC-2 qualification.

Experience of administering Linux in an Enterprise environment to the level covered in the SUSE Linux System Administration course.

Knowledge of Linux Shell Programming to the level covered on the Linux Shell Programming course would also be beneficial.

SUSE Linux Advanced System Administration Training Course Course Contents - DAY 1

Course Introduction

• Administration and Course Materials
• Course Structure and Agenda
• Delegate and Trainer Introductions

Session 1: ADVANCED NETWORK CONFIGURATION & TROUBLESHOOTING

• Configuring the network card (ip link,ip addr)
• Network scripts
• Configuring routing (ip route)
• Network troubleshooting and related tools (tcpdump,ping,mtr,traceroute,netstat,ss,arp,nmap,nc)
• The radvd Router Advertisement Daemon
• Exercise

Session 2: APACHE,SQUID AND NGINX

• APACHE main configuration files
• APACHE server configuration (main Section entries)
• Starting APACHE
• APACHE access configuration
• Configuring secure APACHE (https)
• Configuring IP address-based virtual hosts
• Configuring name-based virtual hosts
• Configuring Apache for user-based content
• SQUID proxy server
• Configuring client browsers
• Starting SQUID
• The SQUID configuration file (squid.conf)
• SQUID security settings
• NGINX Proxy and Reverse Proxy

Session 3: NFS NETWORK SERVICES

• NFS operation and associated daemons
• Setting up an NFS server (/etc/exports and exportfs)
• Investigating the portmapper
• Setting up an NFS client (mount)
• Mounting NFS filesystems at boot (/etc/fstab)
• Using the automounter to access NFS mounts on demand
• Configuring AutoFS direct and indirect mounts
• Creating AutoFS units

Session 4: SAMBA

• The SAMBA configuration file (smb.conf)
• Testing the SAMBA configuration
• Configuring SAMBA users
• Mapping Windows and SAMBA users
• Starting SAMBA
• Managing Windows filesystems (smbmount,nmblookup)
• Accessing Windows shares

SUSE Linux Advanced System Administration Training Course Course Contents - DAY 2

Session 5: THE DOMAIN NAME SERVER

• DNS operation
• Types of DNS Servers
• Domain Name Space
• Setting up a DNS master and slave server
• Server configuration files (named.conf and databases)
• DNS resource record formats
• Configuring DNS logging
• Configuring DNS security
• Starting and managing the DNS Server (rcnamed,rndc)
• Testing the DNS Server (host,dig,nslookup)
• DNS Client set up (resolv.conf)
• Configuring DNS Clients

Session 6: DHCP

• Configuring DHCP
• The dhcpd.conf configuration file
• DNS entries
• Client address entries
• Address leases
• DHCP client configuration

Session 7: FTP

• Configuring a VSFTPD server
• Configuring FTP
• Configuring Pure-FTPd
• Configuring ProFTPd
• Active vs Passive mode
• The vsftpd.conf configuration file
• Anonymous access
• Restricting access to the user's login directory
• FTP logfile

Session 8: CENTRALISED STORAGE WITH ISCSI

• Definition and benefits of iSCSI
• Configuring an iSCSI target
• Server target
• Client initiator
• Configuring the target an initiator with the yast tool
• Configuring the target an initiator with files and commands
• Configuring an iSCSI initiator
• Configuring iSCSI via YaST

SUSE Linux Advanced System Administration Training Course Course Contents - DAY 3

Session 9: FILESYSTEM TOOLS AND DISK MONITORING

• Converting Ext filesystems to Btrfs
• Checking and repairing Btrfs filesystems
• Creating Btrfs subvolumes and snapshots
• Performing full and incremental backups of XFS filesystems
• Querying the backup repository
• Restoring XFS filesystems
• Alternate backup solutions
• The ZFS filesystem
• Configuring smartd
• Disk monitoring with smartctl

Session 10: RAID

• RAID overview
• Raw devices and partitions
• Creating a RAID device (fdisk,mdadm)
• Managing a RAID device (mdadm,/proc/mdstat)
• Creating and mount a file system on a RAID device
• Hot swapping failed drives

Session 11: LOGICAL VOLUME MANAGEMENT (LVM)

• LVM Overview
• Configuring LVM (pvcreate,vgcreate,vgextend,lvcreate etc.)
• Displaying information about the LVM environment (pvdisplay,pvs,vgdisplay,vgs,lvdisplay,lvs)
• Creating striped logical volumes
• Resizing Logical Volumes (lvextend,resize2fs,resize_reiserfs,xfs_growfs)
• Logical Volume Snapshots (lvcreate,lvdisplay)
• Device Mapper
• Configuring the lvm.conf file

Session 12: LDAP

• Structure of an LDAP Tree
• Configuring the LDAP server (slapd.conf)
• Testing the LDAP server (ldapsearch)
• Adding information into LDAP (lpdapadd)
• Configuring the LDAP Clients (nsswitch.conf,ldap.conf)
• Testing the Client connection to the Server (getent)

SUSE Linux Advanced System Administration Training Course Course Contents - DAY 4

Session 13: COMPILING SOFTWARE FROM SOURCE

• Installing programs from source (tar,tarball)
• Compiling Open Source Software (configure,make)
• Installing the compiled software (make install)
• Managing shared libraries (ldd)
• Compiling from SRC (source) RPM packages (rpmbuild,rpm)

Session 14: SYSTEM MONITORING & PERFORMANCE MANAGEMENT

• System performance monitoring
• Collecting system performance information (sar)
• Monitoring memory usage (free)
• Measuring virtual memory (vmstat)
• Measuring I/O performance (iostat)
• Performance Guidelines
• Performance monitoring tools
• Capacity planning

Session 15: FIREWALL CONFIGURATION

• Basic packets and routing
• Netfilter (iptables)
• Packet filtering (iptables,chains,rule targets,connection tracking)
• Saving and restoring firewall settings
• Network address translation (NAT)

Session 16: SYSTEM SECURITY

• Reporting security alerts
• Applying security related patches
• Installing and configuring an Intrusion Detection System (IDS)
• Installing and configuring fail2ban

SUSE Linux Advanced System Administration Training Course Course Contents - DAY 5

Session 17: PLUGGABLE AUTHENTICATION MODULES (PAM)

• The main PAM configuration files (/etc/pam.d directory)
• Configuration file formats
• Controlling user access using the configuration files
• Configuring pam_listfile
• Controlling time-based access with PAM
• Controlling limits with PAM

Session 18: POSTFIX

• Configuring a Postfix server
• Postfix TLS configuration
• Configuring Dovecot
• Managing email delivery
• Filtering emails

Session 19: THE LINUX KERNEL

• Kernel naming conventions
• Monolithic and Modular kernel design
• Listing modules (lsmod,modinfo)
• Kernel module configuration
• Kernel tuning (/proc sysctl.conf,sysctl)
• The GRUB2 Bootloader
• Installing An Alternate Kernel

Session 20: HARDWARE CONFIGURATION

• Hotplug system
• Devices and Interfaces
• sysfs filesystem and persistent names
• Device initialisation and interface configuration
• Hotplug and Coldplug
• UDEV system

Addendum: Reference Materials (provided within the course handbook for additional reading)

APPENDIX A - CONFIGURING APACHE FOR PHP AND TOMCAT

• Configuring Apache Web Server to support PHP and Tomcat

APPENDIX B - BASIC OPENVPN

• Accessing a private network with OpenVPN

APPENDIX C - RAIDTOOLS

• Old style raidtools package

APPENDIX D - ALTERNATE BOOT LOADERS

• An overview of SYSLINUX and ISOLINUX
• Booting with PXELINUX

APPENDIX E - DRACUT

• Managing the Linux boot process with dracut

APPENDIX F - APPARMOR

• Enabling and disabling AppArmor
• AppArmor monitoring tools
• Building and modifying AppArmor profiles
• Logging AppArmor
• AppArmor Options