Linux for Unix Administrators

1. Linux Orientation
· FSF and GNU
· GPL – General Public License
· Linux Kernel and Versioning
· Components of a Distribution
· SUSE Linux Products
· Red Hat Linux Products

2. Linux Kernel & Hardware
· Hardware Discovery Tools
· Hardware and System Clock
· Console
· Virtual Terminals
· Serial Ports
· SCSI Devices
· USB Configuration
· Defining a Printer
· Tape Libraries
· Managing Linux Device Files
· Kernel Hardware Info – /sys/
· /sys/ Structure
· udev
· Kernel Modules
· Configuring Kernel Components and Modules
· Handling Module Dependencies
· Configuring the Kernel via /proc/
· System Tools
Lab Tasks
· Adjusting Kernel Options
· Configuring Print Queues
· Introduction to Troubleshooting Labs
· Troubleshooting Practice: Kernel Modules

3. Boot Process & SysV Init
· systemd System and Service Manager
· systemd Targets
· Using systemd
· Legacy Support for SysV init
· Booting Linux on PCs
· GRUB 2
· GRUB2 Configuration
· GRUB2 Security
· Boot Parameters
· Initial RAM Filesystem
· init
· System Init Styles Overview
· Linux Runlevels Aliases
· Systemd local-fs.target and sysinit.target
· Systemd basic.target and multi-user.target
· Legacy local bootup script support
· System Configuration Files
· RHEL7 Configuration Utilities
· Shutdown and Reboot
Lab Tasks
· Boot Process
· GRUB Command Line
· Basic GRUB Security
· Managing Services With Systemd's systemctl
· Troubleshooting Practice: Boot Process

4. Software Maintenance
· RPM Architecture
· Working With RPMs
· Querying and Verifying with RPM
· Updating the Kernel RPM
· Using the Yum command
· YUM package groups
· Configuring Yum
· YUM Repositories
· Rebuilding Source RPM Packages
· Software Tools Comparison Matrix
Lab Tasks
· Managing Software with RPM
· Creating a Custom RPM Repository
· Querying the RPM Database
· Installing Software via RPM & Source and Rebuilding SRPMs
· Using Yum
5. Local Storage Administration
· Partitioning Disks with fdisk
· Partitioning Disks with parted
· Filesystem Creation
· Mounting Filesystems
· Filesystem Maintenance
· Resizing Filesystems
· Managing an XFS Filesystem
· Swap
· Filesystem Attributes
· Filesystem Creation and Management
Lab Tasks
· Creating and Managing Filesystems
· Hot Adding Swap

6. LVM & RAID
· Logical Volume Management
· Implementing LVM
· Creating Logical Volumes
· Manipulating VGs & LVs
· Advanced LVM Concepts
· gnome-disk-utility
· RAID Concepts
· Array Creation with mdadm
· Software RAID Monitoring
· Software RAID Control and Display
· LVM and RAID: Unix Tool Comparison
Lab Tasks
· Creating and Managing LVM Volumes
· Creating and Managing a RAID-5 Array

7. Remote Storage Administration
· Remote Storage Overview
· Remote Filesystem Protocols
· Remote Block Device Protocols
· NFS Clients
· NFS Server Configuration
· Implementing NFSv4
· AutoFS
· AutoFS Configuration
· SAN Multipathing
· Multipath Configuration
· Multipathing Best Practices
· iSCSI Architecture
· Open-iSCSI Initiator Implementation

Lab Tasks
· Using autofs
· NFS Server Configuration
· iSCSI Initiator Configuration

8. User/Group Administration
· User and Group Concepts
· User Administration
· Modifying Accounts
· Group Administration
· Password Aging
· Default User Files
· Controlling Logins
· system-config-authentication
· PAM Overview
· PAM Module Types
· PAM Order of Processing
· PAM Control Statements
· pam_wheel.so
· pam_limits.so
· User/Group Administration Comparison Matrix
Lab Tasks
· User and Group Administration
· Using LDAP for Centralized User Accounts
· Troubleshooting Practice: Account Management
· Restricting superuser access to wheel group membership
· Setting Limits with the pam_limits Modules
· Using pam_limits to Restrict Simultaneous Logins

9. Security Administration
· Security Concepts
· Tightening Default Security
· Security Advisories
· File Access Control Lists
· Manipulating FACLs
· Viewing FACLs
· Backing Up FACLs
· File Creation Permissions with umask
· User Private Group Scheme
· Alternatives to UPG
· TCP Wrappers Concepts
· TCP Wrappers Concepts
· Xinetd
· Netfilter Concepts
· Using the iptables Command
· Common match_specs
· Connection Tracking
· SELinux Security Framework
· SELinux Modes
· SELinux Commands
· Choosing an SELinux Policy
· SELinux Booleans
· SELinux Policy Tools
· (X)INETD and Firewalls
Lab Tasks
· User Private Groups
· Using Filesystem ACLs
· Securing xinetd Services
· Enforcing Security Policy with xinetd
· Securing Services with TCP Wrappers
· Securing Services with Netfilter
· Exploring SELinux Modes
· SELinux File Contexts

10. Process Administration
· at & cron Usage
· Anacron
· Viewing Processes
· Managing Processes
· Tuning Process Scheduling
· Process Accounting
· Setting Resource Limits via ulimit
Lab Tasks
· Creating and Managing User Cron Jobs
· Adding System cron Jobs

11. Networking
· Linux Network Interfaces
· Ethernet Hardware Tools
· Network Configuration with ip Command
· Configuring Routing Tables
· IP to MAC Address Mapping with ARP
· Starting and Stopping Interfaces
· NetworkManager
· DNS Clients
· DHCP Clients
· Network Diagnostics
· Information from ss and netstat
· Managing Network-Wide Time
· Continual Time Sync with NTP
· Configuring NTP Clients
· Multiple IP Addresses
· Enabling IPv6
· Interface Bonding
· Interface Bridging
· 802.1q VLANS
· Network Configuration Tools
Lab Tasks
· Network Discovery
· Basic Client Networking
· NTP Client Configuration
· Multiple IP Addresses Per Network Interface
· Configuring IPv6
· Troubleshooting Practice: Networking

12. Monitoring & Troubleshooting
· System Status – Memory
· System Status – I/O
· System Status – CPU
· Performance Trending with sar
· Troubleshooting Basics: The Process
· Troubleshooting Basics: The Tools
· System Logging
· Systemd Journal
· Rsyslog
· /etc/rsyslog.conf
· Log Management
· Log Anomaly Detector
· strace and ltrace
· Troubleshooting Incorrect File Permissions
· Inability to Boot
· Typos in Configuration Files
· Corrupt Filesystems
· RHEL7 Rescue Environment
· Process Tools
Lab Tasks
· Using the Systemd Journal
· Setting up a Full Debug Logfile
· Remote Syslog Configuration
· Remote Rsyslog TLS Configuration
· Recovering Damaged MBR


13. BIND DNS
· The Domain Name Space
· Delegation and Zones
· Server Roles
· Resolving Names
· Resolving IP Addresses
· Basic BIND Administration
· Configuring the Resolver
· Testing Resolution
· rndc Key Configuration
· named.conf Options Block
· Creating a Site-Wide Cache
· Zones In named.conf
· Zone Database File Syntax
· SOA – Start of Authority
· A, AAAA, & PTR – Address & Pointer Records
· NS – Name Server
· TXT, CNAME, & MX – Text, Alias, & Mail Host
· Abbreviations and Gotchas
· $GENERATE, $ORIGIN, and $INCLUDE
Lab Tasks
· Configuring a Slave Name Server
· Use rndc to Control named
· Configuring BIND Zone Files

14. OpenLDAP
· OpenLDAP: Server Architecture
· OpenLDAP: Backends
· OpenLDAP: Replication
· OpenLDAP: Configuration Options
· OpenLDAP Server Tools
· OpenLDAP Client Tools
· LDIF: LDAP Data Interchange Format
· Enabling LDAP-based Login
· System Security Services Daemon (SSSD)
Lab Tasks
· Building An OpenLDAP Server
· Enabling TLS For An OpenLDAP Server
· Enabling LDAP-based Logins

15. vsFTPd & Apache
· vsftpd
· Anonymous FTP with vsftpd
· Configuring vsftpd
· HTTP Operation
· Apache Architecture
· Apache Configuration Files
· httpd.conf – Server Settings
· httpd.conf – Main Configuration
· httpd.conf – VirtualHost Configuration
· Virtual Hosting DNS Implications
· Adding Modules to Apache
· Apache Logging
· Delegating Administration
· Directory Protection
· Directory Protection with AllowOverride
· Common Uses for .htaccess
· TLS Using mod_ssl.so
Lab Tasks
· Configuring vsftpd
· Apache Architecture
· Apache Content
· Configuring Virtual Hosts
· Using .htaccess Files
· Using TLS Certificates with Apache

16. SQUID Proxy Server
· Squid Overview
· Squid File Layout
· Squid Access Control Lists
· Applying Squid ACLs
· Tuning Squid & Configuring Cache Hierarchies
· Bandwidth Metering
· Monitoring Squid
· Proxy Client Configuration
Lab Tasks
· Installing and Configuring Squid
· Squid Cache Manager CGI
· Proxy Auto Configuration
· Configure a Squid Proxy Cluster

17. Samba
· Samba Daemons
· Accessing Windows/Samba Shares from Linux
· Samba Utilities
· Samba Configuration Files
· The smb.conf File
· Mapping Permissions and ACLs
· Mapping Linux Concepts
· Sharing Home Directories
· Sharing Printers
· Share Authentication
· User-Level Access
· Mapping Users
· Samba Account Database
· User Share Restrictions
Lab Tasks
· Samba Share-Level Access
· Samba User-Level Access
· Samba Group Shares
· Handling Symbolic Links with Samba
· Samba Home Directory Shares

18. Postfix
· Postfix Features
· Postfix Components
· Postfix Configuration
· master.cf
· main.cf
· Postfix Map Types
· Postfix Pattern Matching
· Virtual Domains
· Postfix Mail Filtering
· Configuration Commands
· Management Commands
· SMTP AUTH Server and Relay Control
· SMTP AUTH Clients
· TLS Server Configuration
· Postfix Client Configuration for TLS
Lab Tasks
· Configuring Postfix
· Postfix Network Configuration
· Postfix Virtual Host Configuration
· Postfix SMTP AUTH Configuration
· Postfix STARTTLS Configuration

19. Email Services
· Procmail
· SpamAssassin
· amavisd-new Mail Filtering
· Cyrus IMAP/POP3 Server
· Cyrus IMAP MTA Integration
· Cyrus Mailbox Administration
Lab Tasks
· Configuring Procmail & SpamAssassin
· Configuring Cyrus IMAP

20. Installing RHEL7
· Anaconda: An Overview
· Anaconda: Booting the System
· Anaconda: Common Boot Options
· Anaconda: Loading Anaconda and Packages
· Anaconda: Storage Options
· Anaconda: Troubleshooting
· FirstBoot
· Kickstart
· Network Booting with PXE
· A Typical Install
Lab Tasks
· Linux Installation
· Automating Installation with Kickstart