LPI202 - LPIC-2 Exam Prep (Course 2) (LPI202) HL966S

Transcription

1 Course data sheet LPI202 - LPIC-2 Exam Prep (Course 2) (LPI202) HL966S Prerequisites Supported distributions

2 Course data sheet Page 1 Detailed course outline

3 Module 5: Maintaining a Web Server Module 6: Nginx, Squid, and DHCP Module 7: SAMBA Server Configuration Module 8: NFS Server Configuration & Securing FTP Servers HTTP Virtual Servers Virtual Hosting DNS Implications Virtual Hosting Security Implications Port and IP-based Virtual Hosts Name-based Virtual Host Scrubbing HTTP Headers Symmetric Encryption Algorithms Asymmetric Encryption Algorithms Digital Certificates TLS Using mod_ssl.so Nginx Squid Overview Squid File Layout Squid Access Control Lists Applying Squid ACLs Monitoring Squid DHCP Protocol Operation Introducing Samba Samba Daemons Accessing Windows/Samba Shares from Linux Samba Utilities Samba Configuration Files The smb.conf File Share Authentication File Sharing via NFS NFSv4+ NFS Clients TCP Wrappers The /etc/hosts.allow & /etc/hosts.deny Files /etc/hosts.{allow,deny} Shortcuts Advanced TCP Wrappers NFS Server Configuration The FTP Protocol Configuring Virtual Hosts Using TLS Certificates with Apache Using TLS Certificates with Apache Create a TLS CA key pair Using SSL CA Certificates with Apache Enable Apache SSL Client Certificate Authentication IP to MAC Address Mapping with ARP Configuring a DHCP server Nginx Web Basics HTTPS and Reverse Proxy with Nginx Installing and Configuring Squid Squid Cache Manager CGI Share-Level Access User-Level Access Mapping Users Samba Account Database User Share Restrictions Samba Share-Level Access Active Mode FTP Passive Mode FTP vsftpd Configuring vsftpd Anonymous FTP with vsftpd Pure-FTPd ProFTPD NFS Server Configuration Configuring vsftpd

4 Module 9: PAM Authentication Module 10: Configuring an OpenLDAP Server and Client Module 11: Using Servers PAM Overview PAM Module Types PAM Order of Processing PAM Control Statements PAM Modules pam_unix pam_limits.so LDAP What LDAP Provides LDAP Concepts LDAP Organization Entry Referencing Online LDAP Data Manipulation Querying LDAP Databases OpenLDAP: Server Architecture OpenLDAP: Backends OpenLDAP: Replication OpenLDAP: Configuration Options SMTP SMTP Terminology SMTP Architecture SMTP Commands SMTP Session Sendmail Architecture Sendmail Configuration Sendmail Remote Configuration Controlling Access Sending with sendmail Exim Postfix Features Postfix Architecture Postfix Components Postfix Configuration pam_cracklib.so pam_listfile.so pam_tally2.so pam_console.so Setting Limits with the pam_limits Modules Using pam_limits to Restrict Simultaneous Logins OpenLDAP: Configuration Sections OpenLDAP: Global Parameters OpenLDAP: Database Parameters OpenLDAP Server Tools Enabling LDAP-based Login System Security Services Daemon (SSSD) Querying LDAP Building an OpenLDAP Server Enabling TLS for an OpenLDAP Server Enabling LDAP-based Logins master.cf main.cf Virtual Domains Configuration Commands Postfix Logging Advanced Postfix Options Configuring Sendmail Configuring Postfix Postfix Virtual Host Configuration Postfix Network Configuration Postfix SMTP AUTH Configuration Postfix STARTTLS Configuration SUSE Postfix Configuration Cleanup

5 Module 12: Managing Local and Remote Delivery Module 13: Configuring a Router and Security Tasks Module 14: OpenSSH and OpenVPN Filtering Procmail SpamAssassin Accessing The IMAP4 Protocol IPv4 Fundamentals TCP/UDP Fundamentals Security Advisories Discovering Hosts nmap Netcat Nessus/OpenVAS Insecurity Scanner Configuring OpenVAS Intrusion Detection Systems Snort Rules Writing Snort Rules Linux as a Router Configuring Routing Tables SUSE Basic Firewall Configuration Using the iptables Command Secure Shell OpenSSH Client & Server Configuration Accessing Remote Shells SSH Port Forwarding Transferring Files Courier IMAP Dovecot POP3/IMAP Server Configuring Procmail & SpamAssassin Dovecot Setup Netfilter Rule Syntax Netfilter Concepts Targets Common match_specs Netfilter: Stateful Packet Filter Firewall Connection Tracking Address Translation Configuring NAT and PAT NMAP OpenVAS Securing Services with SuSEfirewall2 Securing Services with Netfilter SSH Key Management ssh-agent OpenVPN Introduction to ssh and scp SSH Key-based User Authentication Using ssh-agent OpenVPN

6 Course data sheet Page 6 Learn more at hpe.com/ww/learnlinux Follow us: Copyright 2017 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Microsoft is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. The OpenStack Word Mark is either a registered trademark/service mark or trademark/service mark of the OpenStack Foundation, in the United States and other countries and is used with the OpenStack Foundation s permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation or the OpenStack community. Pivotal and Cloud Foundry are trademarks and/or registered trademarks of Pivotal Software, Inc. in the United States and/or other countries. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. c , December 2017, HL966S E.00